{"vulnerability": "cve-2024-4809", "sightings": [{"uuid": "155532ba-d11b-4826-b3d6-f948667b7705", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48091", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113963444265673059", "content": "", "creation_timestamp": "2025-02-07T16:02:37.313165Z"}, {"uuid": "fa973cc3-a869-4c3f-8ae1-ba6ffe0f40eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48091", "type": "seen", "source": "https://gist.github.com/singhmanpreet493/0f1df7fa4e744a3317877ab85d187937", "content": "", "creation_timestamp": "2025-02-07T07:36:58.000000Z"}, {"uuid": "2e28773e-5c3b-4d8f-8f59-f0a31a0078e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48091", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhlyqoqvbe2d", "content": "", "creation_timestamp": "2025-02-07T16:16:29.371637Z"}, {"uuid": "68ab334d-2375-49cf-bf18-03602905521c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48093", "type": "seen", "source": "MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6", "content": "", "creation_timestamp": "2025-10-08T21:59:27.000000Z"}, {"uuid": "a13b55c0-f737-401a-8254-e2e95e905345", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48093", "type": "seen", "source": "MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6", "content": "", "creation_timestamp": "2025-10-01T18:11:56.000000Z"}, {"uuid": "af446efc-848f-499a-b0af-22e5177e9326", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48091", "type": "seen", "source": "https://t.me/cvedetector/17505", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-48091 - Tally Prime DLL Hijacking Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-48091 \nPublished : Feb. 7, 2025, 4:15 p.m. | 59\u00a0minutes ago \nDescription : Tally Prime Edit Log v2.1 was discovered to contain a DLL hijacking vulnerability via the component TextShaping.dll. This vulnerability allows attackers to execute arbitrary code via a crafted DLL. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-07T18:50:24.000000Z"}, {"uuid": "e71f28ed-8a3d-48b4-a7e8-97ff1feb7da1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48091", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3821", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-48091\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Tally Prime Edit Log v2.1 was discovered to contain a DLL hijacking vulnerability via the component TextShaping.dll. This vulnerability allows attackers to execute arbitrary code via a crafted DLL.\n\ud83d\udccf Published: 2025-02-07T18:31:20Z\n\ud83d\udccf Modified: 2025-02-07T18:31:20Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-48091\n2. https://gist.github.com/singhmanpreet493/0f1df7fa4e744a3317877ab85d187937#file-gistfile1-txt\n3. https://tallysolutions.com/download", "creation_timestamp": "2025-02-07T19:04:17.000000Z"}, {"uuid": "274cff70-faf3-472a-9b15-975a472d8971", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48093", "type": "seen", "source": "https://t.me/cvedetector/9465", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-48093 - Operately File Upload Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-48093 \nPublished : Oct. 30, 2024, 9:15 p.m. | 16\u00a0minutes ago \nDescription : Unrestricted File Upload in the Discussions tab in Operately v.0.1.0 allows a privileged user to achieve Remote Code Execution via uploading and executing malicious files without validating file extensions or content types. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-30T22:33:28.000000Z"}, {"uuid": "951f5575-00d1-442a-8146-8b0a6310805e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4809", "type": "seen", "source": "Telegram/4PHn7VIJu_gRAQoaUCu49KNO9Hr4-EF0X86lRMcczXEfPK0j", "content": "", "creation_timestamp": "2025-02-14T10:03:08.000000Z"}, {"uuid": "01c1406d-94ce-4a30-ae90-0fa30c2de5c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48091", "type": "seen", "source": "https://gist.github.com/Danial1999-code/8443b3c8a5beaf5fdaa0000ad721a082", "content": "Steps \n\n> [Suggested description]\n> TallyEditLog version 2.1 was discovered to contain a DLL hijacking vulnerability via the component TextShaping.dll. This vulnerability allows attackers to execute arbitrary code via a crafted DLL. An attacker can upload malicious dll files on the system and lead to complete system compromise including loss of data.\n>\n> ------------------------------------------\n>\n> [Additional Information]\n> Proof Of Concept: https://drive.google.com/drive/folders/1x7IYZDc2Wqn2kUdtINotjd8EDe_vWSYR?usp=drive_link\n> Vendor HomePage Link: https://tallysolutions.com/\n> Software Link: https://tallysolutions.com/download/support-files/\n>\n> ------------------------------------------\n>\n> [VulnerabilityType Other]\n> DLL Hijacking\n>\n> ------------------------------------------\n>\n> [Vendor of Product]\n>Tally\n>\n> ------------------------------------------\n>\n> [Affected Product Code Base]\n> TallyEditLog - 2.1\n>\n> ------------------------------------------\n>\n> [Affected Component]\n> TextShaping.dll\n>\n> ------------------------------------------\n>\n> [Attack Type]\n> Local\n>\n> ------------------------------------------\n>\n> [Impact Code execution]\n> true\n>\n> ------------------------------------------\n>\n> [Attack Vectors]\n> TextShaping.dll is missing from Installed path of Easy Chat Server so an attacker can craft malicious dll with same name and can execute arbitrary code on system or also perform way of persistence on victim machine\n>\n> ------------------------------------------\n>\n> [Reference]\n> https://tallysolutions.com/download/support-files/\n\n>\n> ------------------------------------------\n>\n> [Discoverer]\n> Manpreet Singh Kheberi\n\nUse  CVE-2024-48091", "creation_timestamp": "2026-10-02T07:30:21.000000Z"}]}