{"vulnerability": "CVE-2019-8513", "sightings": [{"uuid": "0eda73b8-95b6-46f3-b46a-931d3c1e233d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-8513", "type": "exploited", "source": "https://www.exploit-db.com/exploits/47070", "content": "", "creation_timestamp": "2019-07-02T00:00:00.000000Z"}, {"uuid": "f25a6d77-09fa-4ae6-8fc4-39e43e415218", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-8513", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:44.000000Z"}, {"uuid": "684867c9-b491-41b4-83c9-cc01ab9ca447", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-8513", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:18.000000Z"}, {"uuid": "6d78a8cc-a3b4-44da-8949-41dfdd48eb8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-8513", "type": "seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "content": "", "creation_timestamp": "2025-08-31T03:01:05.000000Z"}, {"uuid": "f61dd1b4-c763-4253-9c34-61fc910d0351", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-8513", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/local/timemachine_cmd_injection.rb", "content": "", "creation_timestamp": "2019-06-29T10:52:23.000000Z"}, {"uuid": "b9303df0-ac66-4b77-be1a-2123b4b5b7b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-8513", "type": "published-proof-of-concept", "source": "https://t.me/antichat/4432", "content": "Rootpipe Reborn Part I: CVE-2019\u20138513 TimeMachine root command injection\nhttps://medium.com/0xcc/rootpipe-reborn-part-i-cve-2019-8513-timemachine-root-command-injection-47e056b3cb43", "creation_timestamp": "2019-04-13T18:51:06.000000Z"}, {"uuid": "b4d6b231-0cbb-4a90-97de-c933ef5d4925", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-8513", "type": "published-proof-of-concept", "source": "https://t.me/canyoupwnme/5400", "content": "Rootpipe Reborn Part I: CVE-2019\u20138513 TimeMachine root command injection\nhttps://medium.com/0xcc/rootpipe-reborn-part-i-cve-2019-8513-timemachine-root-command-injection-47e056b3cb43", "creation_timestamp": "2019-04-13T20:10:59.000000Z"}, {"uuid": "100e52dc-fba6-41da-b0d0-d932671e80be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-8513", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/409", "content": "#exploit\n1. CVE-2019-14994:\nJira Service Desk Server and Jira Service Desk Data Center - URL path traversal allows information disclosure\nhttps://seclists.org/bugtraq/2019/Sep/39\n\n2. CVE-2019-8513:\nmacOS 10.12.x - 10.14.3 local root privilege escalation via command injection\nhttps://github.com/ChiChou/sploits/tree/master/CVE-2019-8513", "creation_timestamp": "2024-10-10T22:51:40.000000Z"}, {"uuid": "908eccc1-f761-4315-8339-44ee3a8e0c72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-8513", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/local/timemachine_cmd_injection.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"x64, python, cmd\", \"author\": [\"CodeColorist\", \"timwr\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a command injection in TimeMachine on macOS <= 10.14.3 in\\n          order to run a payload as root. The tmdiagnose binary on OSX <= 10.14.3 suffers\\n          from a command injection vulnerability that can be exploited by creating a\\n          specially crafted disk label.\\n\\n          The tmdiagnose binary uses awk to list every mounted volume, and composes\\n          shell commands based on the volume labels. By creating a volume label with the\\n          backtick character, we can have our own binary executed with root priviledges.\", \"disclosure_date\": \"2019-04-13\", \"fullname\": \"exploit/osx/local/timemachine_cmd_injection\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:59:31 +0000\", \"name\": \"Mac OS X TimeMachine (tmdiagnose) Command Injection Privilege Escalation\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/osx/local/timemachine_cmd_injection.rb\", \"platform\": \"OSX,Python,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"osx/local/timemachine_cmd_injection\", \"references\": [\"CVE-2019-8513\", \"URL-http://web.archive.org/web/20201113192302/https://medium.com/0xcc/rootpipe-reborn-part-i-cve-2019-8513-timemachine-root-command-injection-47e056b3cb43\", \"URL-https://support.apple.com/en-in/HT209600\", \"URL-https://github.com/ChiChou/sploits\"], \"rport\": null, \"session_types\": [], \"targets\": [\"Mac OS X x64 (Native Payload)\", \"Python payload\", \"Command payload\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:32.104513Z"}]}