{"metadata": {"vulnerability": "CVE-2023-29489", "count": 98, "kinds": {"milestone": 4, "sighting": 80, "kev": 0, "other": 14}, "linked_omitted": 0}, "data": [{"timestamp": "2023-04-07T00:00:00Z", "date_only": false, "value": "2023-04-07T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-29489", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-04-27T00:00:00Z", "date_only": false, "value": "2023-04-27T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-29489", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-04-27T00:00:00Z", "date_only": false, "value": "2023-04-27T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2023-29489", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-04-27T03:37:26Z", "date_only": false, "value": "2023-04-27T03:37:26.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/4255", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "72cd0a8f-e1b7-457f-a004-e5a59c3d13cb", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aNuclei template for CVE-2023-29489\nURL\uff1ahttps://github.com/learnerboy88/CVE-2023-29489\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/4255", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-04-27T12:27:02Z", "date_only": false, "value": "2023-04-27T12:27:02.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thebugbountyhunter/7276", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "203e9c80-ce2c-483a-81fd-b95af56b2d10", "content": "Advisory: Reflected Cross-Site Scripting in cPanel (CVE-2023-29489)\n\nhttps://blog.assetnote.io/2023/04/26/cpanel-xss-advisory/", "url": "https://t.me/thebugbountyhunter/7276"}, {"timestamp": "2023-04-27T21:15:00Z", "date_only": false, "value": "2023-04-27T21:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-29489", "record": "GSD-2023-29489", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2023-04-27T21:15:10Z", "date_only": false, "value": "2023-04-27T21:15:10Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-84FM-C8WR-CF69", "record": "GHSA-84FM-C8WR-CF69", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2023-04-27T21:15:10.783Z", "date_only": false, "value": "2023-04-27T21:15:10.783", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-29489", "record": "FKIE_CVE-2023-29489", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-04-27T21:30:26Z", "date_only": false, "value": "2023-04-27T21:30:26Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-84FM-C8WR-CF69", "record": "GHSA-84FM-C8WR-CF69", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-04-27T23:26:01Z", "date_only": false, "value": "2023-04-27T23:26:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/turkhckteam/77", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "7e84a91a-7f46-41b5-9207-4aa052e05aa0", "content": "[ cPanel CVE-2023-29489 ]\n==========================\n\nkids hungry for money are selling this as priv8 exploit \n\nFinding XSS in a million websites (cPanel CVE-2023-29489)\n\nhttps://blog.assetnote.io/2023/04/26/xss-million-websites-cpanel/\n\n==========================\n[ Telegram Channel : @turkhckteam ]\n[ Website : www.turkhackteam.org ]\n[ join the forum & channels ]\n==========================", "url": "https://t.me/turkhckteam/77", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-04-28T00:26:45Z", "date_only": false, "value": "2023-04-28T00:26:45.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/63014", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "4db765ed-4add-4822-a00c-60564a3e7aba", "content": "\u203c CVE-2023-29489 \u203c\n\nAn issue was discovered in cPanel before 11.109.9999.116. XSS can occur on the cpsrvd error page via an invalid webcall ID, aka SEC-669. The fixed versions are 11.109.9999.116, 11.108.0.13, 11.106.0.18, and 11.102.0.31.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/63014"}, {"timestamp": "2023-04-28T02:57:06Z", "date_only": false, "value": "2023-04-28T02:57:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/crackcodes/3337", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "4b209d9a-1df3-48e8-b8a6-181d0e1638d5", "content": "[ cPanel CVE-2023-29489 ]\n========================== \n\nFinding XSS in a million websites (cPanel CVE-2023-29489)\n\nREAD ARTICLE \n\n==========================\n[ Telegram Channel : @trickypenguin ]\n[ Website : trickypenguin.ink ]\n[ Share  & Support ]\n==========================", "url": "https://t.me/crackcodes/3337"}, {"timestamp": "2023-04-28T11:01:16Z", "date_only": false, "value": "2023-04-28T11:01:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/8202", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "16885b0d-64f4-436e-81a2-67d91874d753", "content": "#exploit\n1. CVE-2023-0264:\nUser impersonation via stolen UUID code in KeyCloak\nhttps://www.offensity.com/en/blog/user-impersonation-via-stolen-uuid-code-in-keycloak-cve-2023-0264\n\n2. CVE-2023-29489:\nXSS vulnerability to cPanel via\u00a0security*cpanel*net\nhttps://blog.assetnote.io/2023/04/26/xss-million-websites-cpanel\n\n3. CVE-2023-23410:\nWindows HTTP.sys EoP Vulnerability\nhttps://github.com/numencyber/Vulnerability_PoC/tree/main/CVE-2023-23410", "url": "https://t.me/CyberSecurityTechnologies/8202", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-04-28T12:27:02Z", "date_only": false, "value": "2023-04-28T12:27:02.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thebugbountyhunter/7283", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "d21539ba-02d0-4fba-bc79-bd494d30e33c", "content": "Finding XSS in a million websites (cPanel CVE-2023-29489)\n\nhttps://blog.assetnote.io/2023/04/26/xss-million-websites-cpanel/", "url": "https://t.me/thebugbountyhunter/7283", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2023-04-28T13:53:00Z", "date_only": false, "value": "2023-04-28T13:53:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/proxy_bar/1472", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "1a2cf8c3-1752-4258-9985-0112ee43a22c", "content": "CVE-2023-29489\ncPanel\n\n#cPanel #xss", "url": "https://t.me/proxy_bar/1472"}, {"timestamp": "2023-04-28T17:09:49Z", "date_only": false, "value": "2023-04-28T17:09:49.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/4272", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "32c09f4a-420b-4cb8-b844-d216cca857ef", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aa pyhton script to test all results from shodan for cPanel CVE-2023-29489\nURL\uff1ahttps://github.com/ipk1/CVE-2023-29489.py\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/4272", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-04-28T23:23:17Z", "date_only": false, "value": "2023-04-28T23:23:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/10968", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "2c09dcee-b149-4022-9ac8-47e7fe0ff061", "content": "\u25a0\u25a0\u25a1\u25a1\u25a1 Finding XSS in a million websites (cPanel CVE-2023-29489).\n\nhttps://blog.assetnote.io/2023/04/26/xss-million-websites-cpanel/", "url": "https://t.me/cKure/10968", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-04-29T08:37:54Z", "date_only": false, "value": "2023-04-29T08:37:54.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/proxy_bar/1474", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "1a0bdab6-d7e3-44a6-9ae9-f54b977e0da7", "content": "\u0418 \u0435\u0449\u0435 \u0440\u0430\u0437 \u043e CVE-2023-29489 cPanel \u0438 XSS\nFinding XSS in a million websites\n\n#cPanel #xss", "url": "https://t.me/proxy_bar/1474"}, {"timestamp": "2023-04-29T19:00:07Z", "date_only": false, "value": "2023-04-29T19:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/4274", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "aa759472-553f-4dad-8fe1-29831cf220a0", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aScanner CVE-2023-29489 Python (Selenium)\nURL\uff1ahttps://github.com/haxor1337x/Scanner-CVE-2023-29489\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/4274", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-05-05T00:00:00Z", "date_only": true, "value": "2023-05-05", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2023-36314", "record": "CNVD-2023-36314", "field": "submitTime", "linked_record": true}, {"timestamp": "2023-05-05T01:37:45Z", "date_only": false, "value": "2023-05-05T01:37:45.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/TYG_YE/599", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "b21a6897-2796-41ac-abcb-c4993587ac85", "content": "Exploit CVE-2023-29489\n#TYG_Team #1915_Team", "url": "https://t.me/TYG_YE/599"}, {"timestamp": "2023-05-05T10:49:51Z", "date_only": false, "value": "2023-05-05T10:49:51.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/4295", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "1ae68f3d-e281-43ee-ab5f-31ebb4a046c5", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-29489 mass exploit\nURL\uff1ahttps://github.com/1337r0j4n/CVE-2023-29489\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/4295", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-05-05T18:12:00Z", "date_only": false, "value": "2023-05-05T18:12Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-29489", "record": "GSD-2023-29489", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2023-05-06T00:00:00Z", "date_only": true, "value": "2023-05-06", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2023-36314", "record": "CNVD-2023-36314", "field": "openTime", "linked_record": true}, {"timestamp": "2023-05-17T22:42:29Z", "date_only": false, "value": "2023-05-17T22:42:29.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/TYG_YE/746", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "528cf564-439a-4656-8a35-1414f0da9f74", "content": "CVE-2023-29489 ~ XSS 1915\n#Yemeni_Hackers #1915_Team", "url": "https://t.me/TYG_YE/746"}, {"timestamp": "2023-05-18T00:07:19Z", "date_only": false, "value": "2023-05-18T00:07:19.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/TYG_YE/747", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "1d02d2bb-cae9-463c-b25a-493d973f7be0", "content": ">_ XSS_1915\n\nMass Scaning vulnerability in Cpanel [XSS]\nCVE : CVE-2023-29489\n\n\ninstall > https://github.com/mr-sami-x/XSS_1915.git", "url": "https://t.me/TYG_YE/747", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-05-20T00:26:21Z", "date_only": false, "value": "2023-05-20T00:26:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/LearnExploit/4989", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "fd3890c6-ddeb-4433-92db-81f4fd52fc1f", "content": "CPanel 0day Reflected XSS payload for CVE-2023-29489\n\nhtt.p://example.com/cpanelwebcall/%3Cimg%20src%3Dx%20onerror%3D%22prompt%281%29%22%3Eaaaaaaaaaaaa\n\n#0day #xss \n\u2014\u2014\u2014\u2014\u2014\u2014\u200c\n0Day.Today\n@LearnExploit\n@Tech_Army", "url": "https://t.me/LearnExploit/4989", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-05-23T10:55:15Z", "date_only": false, "value": "2023-05-23T10:55:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/gV7b5xNJZm-AWyX1AK6gRLmorzNIAAB1RKtCmUquMP2rzRU", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "2bff793f-c6dc-4204-86f8-4f2f99a4b5e7", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-05-23T18:55:17Z", "date_only": false, "value": "2023-05-23T18:55:17.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/u17PckgMQKrcjeOOAmrf-B9vqNpEJ5wCNbloawUrjdX_x54", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "bbc76748-9bce-4a1f-9ef0-f42ff39d9427"}, {"timestamp": "2023-06-02T02:48:06Z", "date_only": false, "value": "2023-06-02T02:48:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/4472", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "65a1abb6-8a2b-446c-b2e9-b85c2c160816", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-29489-XSS\nURL\uff1ahttps://github.com/Abdullah7-ma/CVE-2023-29489\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/4472", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-06-10T16:47:28Z", "date_only": false, "value": "2023-06-10T16:47:28.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/117307", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "f82ce17d-80f0-4b76-8beb-c488cf4237ee", "content": "https://ift.tt/8NrlIG9\nU.S. Dept Of Defense: CVE-2023-29489 XSS in cpanel at [www.\u2588\u2588\u2588] - Securado, Oman", "url": "https://t.me/ctinow/117307"}, {"timestamp": "2023-08-02T14:30:48Z", "date_only": false, "value": "2023-08-02T14:30:48.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/MrVGunz/782", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "6be2dcdd-6329-4f79-a185-c5a0a4b35198", "content": "CVE-2023-29489 : Finding XSS in a million websites (cPanel -Reflected Cross-Site Scripting)\nPOC : https://blog.assetnote.io/2023/04/26/xss-million-websites-cpanel/\nLink : https://blog.assetnote.io/2023/04/26/cpanel-xss-advisory/", "url": "https://t.me/MrVGunz/782", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-08-04T23:04:51Z", "date_only": false, "value": "2023-08-04T23:04:51.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/GithubRedTeam/4870", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "55c9da9a-0e21-4143-b762-d6b91b2738b2", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aMass Exploitation For (CVE-2023-29489)\nURL\uff1ahttps://github.com/ViperM4sk/cpanel-xss-177\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/4870", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2023-10-17T08:06:54Z", "date_only": false, "value": "2023-10-17T08:06:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/X81s5iSOJH3NNZ0ZbtODjCu1LJl6DT5WZY26h7pmpa5rZvA", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "2e7187b0-c56b-4a72-aee1-821af5419c35", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-10-17T08:07:00Z", "date_only": false, "value": "2023-10-17T08:07:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/8fOdpC_tsVd3ioLXCNigRQxVqk6WpAcs-jw_4FKgUOSFTtQ", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "6bd8e7b9-4411-440d-af2a-15a254b4a7f2", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-10-17T08:09:12Z", "date_only": false, "value": "2023-10-17T08:09:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/tengkorakcybercrewz/1860", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "0c432e89-4fa9-4183-89b5-7ba6c4d5f9c6", "url": "https://t.me/tengkorakcybercrewz/1860", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-10-17T08:09:12Z", "date_only": false, "value": "2023-10-17T08:09:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/tengkorakcybercrewz/1862", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "8aacf5dd-02f2-4fef-82f6-f84a7c38b15d", "url": "https://t.me/tengkorakcybercrewz/1862", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-10-17T08:41:46Z", "date_only": false, "value": "2023-10-17T08:41:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/stucxteam/175", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "c7d8f302-4376-435f-8365-f343a8edd5a0", "url": "https://t.me/stucxteam/175", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-10-17T08:43:06Z", "date_only": false, "value": "2023-10-17T08:43:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Exploitationn/3720", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "0bc65d2a-aec0-4e1d-9d98-8ebaf558a874", "url": "https://t.me/Exploitationn/3720", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-10-17T08:43:06Z", "date_only": false, "value": "2023-10-17T08:43:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Exploitationn/825", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "e07dd652-da1e-4009-8019-79bd699f1683", "url": "https://t.me/Exploitationn/825", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-10-17T21:14:50Z", "date_only": false, "value": "2023-10-17T21:14:50.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/BugbvQmTEAtmT7a4SRA3r7CM_MpDyp4Syj7v4ZeeA6seVA", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "f5e6f0a9-e131-42b9-a4ab-69eb0bb44ec8", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-10-17T21:14:50Z", "date_only": false, "value": "2023-10-17T21:14:50.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/l2NSg2lE3phUhLd56jJrjlgxQpFO1C1rRnXkQrQ91YD-Cg", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "d301d810-7c70-49c7-80d6-2cb8f991101d", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-10-17T21:14:51Z", "date_only": false, "value": "2023-10-17T21:14:51.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/teamlzzy/736", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "782007c8-90be-459b-bfc7-b60c0bc9dc0b", "url": "https://t.me/teamlzzy/736", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-10-18T06:22:39Z", "date_only": false, "value": "2023-10-18T06:22:39.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thecyberwatchers1337/13", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "fd1b80c9-635d-4e89-8a35-69cd7a224775", "url": "https://t.me/thecyberwatchers1337/13", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-11-11T01:06:10Z", "date_only": false, "value": "2023-11-11T01:06:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/teamlzzy/738", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "b43007c0-421b-4af0-b370-5bbe437ca894", "url": "https://t.me/teamlzzy/738", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-11-16T20:43:12Z", "date_only": false, "value": "2023-11-16T20:43:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/5839", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "f2de2320-ee5c-4768-a2bf-46e3aee0785c", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aSynixCyberCrimeMY CVE-2023-29489 Scanner By SamuraiMelayu1337 & h4zzzzzz@scc\nURL\uff1ahttps://github.com/SynixCyberCrimeMy/CVE-2023-29489\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/5839", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-11-17T12:33:10Z", "date_only": false, "value": "2023-11-17T12:33:10.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/259", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "23ad577b-18fb-4d0a-a9aa-0c976c064583", "content": "#ExploitObserverAlert\n\nCVE-2023-29489\n\nDESCRIPTION: Exploit Observer has 29 entries related to CVE-2023-29489. An issue was discovered in cPanel before 11.109.9999.116. XSS can occur on the cpsrvd error page via an invalid webcall ID, aka SEC-669. The fixed versions are 11.109.9999.116, 11.108.0.13, 11.106.0.18, and 11.102.0.31.\n\nFIRST-EPSS: 0.001670000\nNVD-IS: 2.7\nNVD-ES: 2.8", "url": "https://t.me/arpsyndicate/259"}, {"timestamp": "2023-11-18T03:23:48Z", "date_only": false, "value": "2023-11-18T03:23:48.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/lcmysecteamch/5463", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "4d0b1d3f-1751-442e-a061-6262568b4bdf", "content": "112 australia cpanel server pawned", "url": "https://t.me/lcmysecteamch/5463", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-11-18T03:23:48Z", "date_only": false, "value": "2023-11-18T03:23:48.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/lcmysecteamch/970", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "fa9874dc-ad42-4841-a210-47702cd64970", "content": "112 australia cpanel server pawned", "url": "https://t.me/lcmysecteamch/970", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-11-18T05:24:37Z", "date_only": false, "value": "2023-11-18T05:24:37.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/lcmysecteamch/5465", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "4b5b0147-ef91-4da8-ac3f-ddabb3c54ee5", "content": "281 cve 2023-29489 pawned\n\nLast but not least, I wanna thank me\nI wanna thank me for believing in me\nI wanna thank me for doing all this hard work\nI wanna thank me for having no days off\nI wanna thank me for, for never quitting\nI wanna thank me for always being a giver\nAnd tryna give more than I recieve\nI wanna thank me for tryna do more right than wrong\nI wanna thank me for just being me at all times", "url": "https://t.me/lcmysecteamch/5465", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-11-18T05:24:37Z", "date_only": false, "value": "2023-11-18T05:24:37.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/lcmysecteamch/971", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "21037a03-2d56-43de-b8e6-56179d068d51", "content": "281 cve 2023-29489 pawned\n\nLast but not least, I wanna thank me\nI wanna thank me for believing in me\nI wanna thank me for doing all this hard work\nI wanna thank me for having no days off\nI wanna thank me for, for never quitting\nI wanna thank me for always being a giver\nAnd tryna give more than I recieve\nI wanna thank me for tryna do more right than wrong\nI wanna thank me for just being me at all times", "url": "https://t.me/lcmysecteamch/971", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-11-24T07:40:17Z", "date_only": false, "value": "2023-11-24T07:40:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/lcmysecteamch/1023", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "7a66ef86-4610-4f0c-a6ba-b19d15212ef5", "content": "8k reflected xss pawned", "url": "https://t.me/lcmysecteamch/1023", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-11-24T07:40:17Z", "date_only": false, "value": "2023-11-24T07:40:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/lcmysecteamch/5516", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "c099780b-f3a5-4b78-aa59-fb179481d81f", "content": "8k reflected xss pawned", "url": "https://t.me/lcmysecteamch/5516", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-12-13T01:20:57.391Z", "date_only": false, "value": "2023-12-13T01:20:57.391793Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-29489", "record": "GSD-2023-29489", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-01-25T16:19:16Z", "date_only": false, "value": "2024-01-25T16:19:16.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/620ab0e3-9dd7-411d-9236-e55d2fddd450", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "515e0d63-c118-4ff9-a1f4-418dc009f162"}, {"timestamp": "2024-04-04T03:43:06Z", "date_only": false, "value": "2024-04-04T03:43:06Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-84FM-C8WR-CF69", "record": "GHSA-84FM-C8WR-CF69", "field": "modified", "linked_record": true}, {"timestamp": "2024-07-30T03:55:38.487Z", "date_only": false, "value": "2024-07-30T03:55:38.487098Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-29489", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-07-30T03:55:38.487Z", "date_only": false, "value": "2024-07-30T03:55:38.487098Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-29489", "record": "FKIE_CVE-2023-29489", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2024-07-30T13:00:06.238Z", "date_only": false, "value": "2024-07-30T13:00:06.238Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-29489", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-02T14:07:46.446Z", "date_only": false, "value": "2024-08-02T14:07:46.446Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-29489", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-02T14:07:46.446Z", "date_only": false, "value": "2024-08-02T14:07:46.446Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-29489", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-09-28T14:07:55Z", "date_only": false, "value": "2024-09-28T14:07:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/xstucxteam/105", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "b2dc0afd-2836-4e44-a57b-f1e14c29f6b2", "url": "https://t.me/xstucxteam/105", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-02-20T11:21:00.191Z", "date_only": false, "value": "2025-02-20T11:21:00.191123Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3lim6crg4tu2k", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "ab37094b-6610-495d-b20b-077ae03ae527", "url": "https://bsky.app/profile/undercode.bsky.social/post/3lim6crg4tu2k"}, {"timestamp": "2025-04-22T02:52:21Z", "date_only": false, "value": "2025-04-22T02:52:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/AGENTZSECURITY/1245", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "7b5cc0d1-7daa-4140-806a-ef2e0b10a6d3", "content": "https://github.com/attacker-codeninja/My-Nuclei-Templates-2\nhttps://github.com/badboy-sft/badboy_17-Nuclei-Templates-Collection\nhttps://github.com/bhataasim1/PersonalTemplates\nhttps://github.com/bjhulst/nuclei-custom-templates\nhttps://github.com/bufferbandit/gitScanNucleiTemplate\nhttps://github.com/bugbountydude/Nuclei-TamplatesBackup\nhttps://github.com/c3l3si4n/malicious_nuclei_templates\nhttps://github.com/chouaibhm/foulenzer-templates\nhttps://github.com/cipher387/juicyinfo-nuclei-templates\nhttps://github.com/compr00t/nuclei-templates\nhttps://github.com/e1abrador/SpringCorePoC.sh\nhttps://github.com/emadshanab/nucleiDB\nhttps://github.com/ibaiw/nuclei_templates\nhttps://github.com/kh4sh3i/Nextcloud-Pentesting\nhttps://github.com/kh4sh3i/Webmin-CVE\nhttps://github.com/learnerboy88/CVE-2023-29489\nhttps://github.com/lliwi/nuclei-repo-hunter\nhttps://github.com/manasmbellani/nuclei-templates\nhttps://github.com/marcositu/nuclei-custom-templates\nhttps://github.com/mertugur/nuclei-templates\nhttps://github.com/milo2012/nuclei-templates-others\nhttps://github.com/narasimha5x5/nuclei-templates\nhttps://github.com/nullfuzz-pentest/custom-nuclei-templates\nhttps://github.com/numanturle/CVE-2022-41040\nhttps://github.com/p0ch4t/nuclei-special-templates\nhttps://github.com/p3n73st3r/Nuclei-Templates\nhttps://github.com/pentest-dev/Profesional-Nuclei-Templates\nhttps://github.com/psc4re/nuclei-templates\nhttps://github.com/rahul-nakum14/Recon\nhttps://github.com/rutgerhrm/valid8\nhttps://github.com/samy1937/mynuclei_templates\nhttps://github.com/shubham-rooter/Nuclei-custom-templates\nhttps://github.com/sl4x0/NC-Templates\nhttps://github.com/sudouday/nuclei-templates\nhttps://github.com/sushant-kamble/mynuclei-template\nhttps://github.com/tamimhasan404/Open-Source-Nuclei-Templates-Downloader\nhttps://github.com/thecyberneh/nuclei-templatess\nhttps://github.com/thecybertix/Nuclei-templates\nhttps://github.com/themoonbaba/private_templates\nhttps://github.com/twseptian/custom-nuclei-templates\nhttps://github.com/vidocsecurity/templates\nhttps://github.com/vishal12300/all_nuclei_templatess\nhttps://github.com/vulnspace/nuclei-templates\nhttps://github.com/websecresearch/nucleirecordloginsession\nhttps://github.com/windyGarlic/nuclei-templates\nhttps://github.com/xinZa1/template\nhttps://github.com/yarovit-developer/nuclei-templates\nhttps://github.com/vsh00t/nuclei-templates\nhttps://github.com/nikhilhvr/nuclei-templates\nhttps://github.com/ed-red/redmc_custom_templates_nuclei\nhttps://github.com/DrakenKun-cyber/Templates\nhttps://github.com/Dalaho-bangin/nuclei-templates2\nhttps://github.com/Mr-xn/CVE-2023-23333\nhttps://github.com/boobooHQ/private_templates\nhttps://github.com/Erenlancaster/CVE-2021-46704\nhttps://github.com/stevemason/nuclei-template-forked-daapd-path-traversal\nhttps://github.com/topscoder/nuclei-zero-day\nhttps://github.com/mdube99/nuclei-templates\nhttps://github.com/nuts7/CVE-2023-27372\nhttps://github.com/k00kx/nuclei-templates\nhttps://github.com/YashVardhanTrip/nuclei-templates\nhttps://github.com/Deep2142004/Nuclei-Templates\nhttps://github.com/RajaUzairAbdullah/nuclei-templates\nhttps://github.com/mdube99/custom-nuclei-templates\nhttps://github.com/Esonhugh/public-nuclei-template\nhttps://github.com/Rabb1ter/nuclei-templates\nhttps://github.com/zodmagus/z0ds3c-Nuclei-Templates\nhttps://github.com/thefool45/nuclei-templates\nhttps://github.com/SumedhDawadi/Nuclei_Template_Subdomain_Takeover\nhttps://github.com/r3dcl1ff/Symfony-Fuck\nhttps://github.com/polling-repo-continua/KozinTemplates\nhttps://github.com/b4dboy17/badboy_17-Nuclei-Templates-Collection\nhttps://github.com/narasimhareddy5x5/nuclei-templates\nhttps://github.com/baharebenesbordi/Nuclei-Templates\nhttps://github.com/v3l4r10/Nuclei-Templates\nhttps://github.com/Deepparasiya/Nuclei-Templates\nhttps://github.com/valaDevs/env-js-nuclei", "url": "https://t.me/AGENTZSECURITY/1245", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-04-22T02:52:21Z", "date_only": false, "value": "2025-04-22T02:52:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/AGENTZSECURITY/1251", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "25ac7176-5826-44bf-b8b9-9595ca35fa60", "content": "https://github.com/SirAppSec/nuclei-template-generator-log4j\nhttps://github.com/Str1am/my-nuclei-templates\nhttps://github.com/SumedhDawadi/Custom-Nuclei-Template\nhttps://github.com/SumedhDawadi/Nuclei_Template_Subdomain_Takeover\nhttps://github.com/System00-Security/backflow\nhttps://github.com/T4t4ru/nuclei-templates\nhttps://github.com/Tykerdestroy/Bug-bounty-custom-templates\nhttps://github.com/UnaPibaGeek/honeypots-detection\nhttps://github.com/V0idC0de/dir-listing-iis-test\nhttps://github.com/VulnExpo/nuclei-templates\nhttps://github.com/W01fh4cker/nucleiTemplatesClassifier\nhttps://github.com/YashVardhanTrip/nuclei-templates\nhttps://github.com/adampielak/nuclei-templates\nhttps://github.com/aels/CVE-2022-37042\nhttps://github.com/ahmedalroky/nuclei-templates\nhttps://github.com/akincibor/CVE-2022-27925\nhttps://github.com/al4xs/nuclei-templates\nhttps://github.com/alexrydzak/rydzak-nuclei-templates\nhttps://github.com/am0nt31r0/custom-nuclei-templates\nhttps://github.com/anmolksachan/nuclei-templates\nhttps://github.com/attacker-codeninja/My-Nuclei-Templates-2\nhttps://github.com/ayadim/Nuclei-bug-hunter\nhttps://github.com/b4dboy17/badboy_17-Nuclei-Templates-Collection\nhttps://github.com/badboy-sft/badboy_17-Nuclei-Templates-Collection\nhttps://github.com/badboycxcc/CVE-2023-24100\nhttps://github.com/baharebenesbordi/Nuclei-Templates\nhttps://github.com/bhataasim1/PersonalTemplates\nhttps://github.com/binod235/nuclei-templates-and-reports\nhttps://github.com/bjhulst/nuclei-custom-templates\nhttps://github.com/blazeinfosec/nuclei-templates\nhttps://github.com/boobooHQ/private_templates\nhttps://github.com/brinhosa/brinhosa-nuclei-templates\nhttps://github.com/bufferbandit/gitScanNucleiTemplate\nhttps://github.com/bugbountydude/Nuclei-TamplatesBackup\nhttps://github.com/c-sh0/nuclei_templates\nhttps://github.com/c3l3si4n/malicious_nuclei_templates\nhttps://github.com/chouaibhm/foulenzer-templates\nhttps://github.com/cipher387/juicyinfo-nuclei-templates\nhttps://github.com/clarkvoss/Nuclei-Templates\nhttps://github.com/coldrainh/nuclei-ByMyself\nhttps://github.com/compr00t/nuclei-templates\nhttps://github.com/d3sca/Nuclei_Templates\nhttps://github.com/daffainfo/my-nuclei-templates\nhttps://github.com/damon-sec/Nuclei-templates-Collection\nhttps://github.com/damon-sec/TCSZ-Nuclei\nhttps://github.com/dk4trin/templates-nuclei\nhttps://github.com/drfabiocastro/certwatcher-templates\nhttps://github.com/e1abrador/SpringCorePoC.sh\nhttps://github.com/ed-red/redmc_custom_templates_nuclei\nhttps://github.com/ekinsb/Nuclei-Templates\nhttps://github.com/emadshanab/nucleiDB\nhttps://github.com/erickfernandox/nuclei-templates\nhttps://github.com/esetal/nuclei-bb-templates\nhttps://github.com/ethicalhackingplayground/erebus-templates\nhttps://github.com/fostane/my-nuclei-templates-1\nhttps://github.com/geeknik/nuclei-templates-1\nhttps://github.com/geeknik/the-nuclei-templates\nhttps://github.com/glyptho/templatesallnuclei\nhttps://github.com/h4ndsh/nuclei-templates\nhttps://github.com/ibaiw/nuclei_templates\nhttps://github.com/im403/nuclei-temp\nhttps://github.com/imhunterand/nuclei-custom-templates\nhttps://github.com/javaongsan/nuclei-templates\nhttps://github.com/justmumu/SpringShell\nhttps://github.com/k00kx/nuclei-templates\nhttps://github.com/kaanatmacaa/CVE-2024-23897\nhttps://github.com/kabilan1290/templates\nhttps://github.com/kernel-krunch/nuclei-templates\nhttps://github.com/kh4sh3i/CVE-2022-23131\nhttps://github.com/kh4sh3i/Nextcloud-Pentesting\nhttps://github.com/kh4sh3i/Webmin-CVE\nhttps://github.com/learnerboy88/CVE-2023-29489\nhttps://github.com/lliwi/nuclei-repo-hunter\nhttps://github.com/luck-ying/Library-YAML-POC\nhttps://github.com/manasmbellani/nuclei-templates\nhttps://github.com/marcositu/nuclei-custom-templates\nhttps://github.com/mastersir-lab/nuclei-yaml-poc\nhttps://github.com/mbskter/Masscan2Httpx2Nuclei-Xray", "url": "https://t.me/AGENTZSECURITY/1251", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-05-30T07:30:06Z", "date_only": false, "value": "2025-05-30T07:30:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/afrikaquality/f39368a2ba40961a3c76f6d1014ec41a", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "42201e78-5db7-4ebe-b6ef-d2c50b1af3b5", "url": "https://gist.github.com/afrikaquality/f39368a2ba40961a3c76f6d1014ec41a"}, {"timestamp": "2025-07-16T03:32:30Z", "date_only": false, "value": "2025-07-16T03:32:30.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/s4Tech_Bots/49", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "8ba0b0b7-b3ea-441b-b0ce-251f6d279ea1", "content": "Exploit CVE-2023-29489\n#TYG_Team #1915_Team", "url": "https://t.me/s4Tech_Bots/49"}, {"timestamp": "2025-09-20T10:07:38.899Z", "date_only": false, "value": "2025-09-20T10:07:38.899413Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitycipher.bsky.social/post/3lzb52slqxp2x", "record": "cve-2023-29489", "field": "creation_timestamp", "uuid": "b9ee3290-f8ee-4583-8aba-799f87717dc7", "url": "https://bsky.app/profile/securitycipher.bsky.social/post/3lzb52slqxp2x"}, {"timestamp": "2025-09-20T20:25:46.338Z", "date_only": false, "value": "2025-09-20T20:25:46.338585Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3lzc7m2rvry2p", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "ba44a1f3-be02-4fb5-a17b-07acfd17d716", "url": "https://bsky.app/profile/undercode.bsky.social/post/3lzc7m2rvry2p"}, {"timestamp": "2026-06-17T05:50:12.587Z", "date_only": false, "value": "2026-06-17T05:50:12.587", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-29489", "record": "FKIE_CVE-2023-29489", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-06-18T00:52:42Z", "date_only": false, "value": "2026-06-18T00:52:42.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/WGPE0o0/184", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "369ddcca-fc7b-4b96-b9bc-7ae44fdc4e0d", "content": "\ud83d\ude80 Reflected XSS in cPanel (CVE-2023-29489)\n\n\ud83d\udd17 Link: Read Full Writeup\n\n\ud83d\udee1 Vulnerability: Reflected Cross-Site Scripting (XSS)\n\n\ud83d\udcdd Summary:\nThis report details a Reflected XSS vulnerability in cPanel (CVE-2023-29489) discovered on a U.S. Department of Defense asset. The vulnerability occurred due to an outdated version of cPanel lacking auto-updates.\n\n\ud83d\udd75\ufe0f\u200d\u2642\ufe0f Recon Steps (Hacker Mindset):\nThe researcher targeted a U.S. DoD asset running an outdated version of cPanel. They found that the /cpanelwebcall/ endpoint reflected user input without proper sanitization, allowing for arbitrary JavaScript execution.\n\n\ud83e\udde0 Hacker's Pivot:\nThe attacker crafted a URL pointing to the /cpanelwebcall/ endpoint and appended an XSS payload (). Although it returned a 400 Bad Request to unauthenticated users, the payload successfully executed in the context of the error page. For authenticated users, it could be used to steal session cookies.\n\n\ud83d\udcbb Payloads & Execution:\nhttp://www.\u2588\u2588\u2588\u2588/cpanelwebcall/%3Cimg%20src=x%20onerror=%22prompt(1)%22%3Eaaaaaaaaaaaa\n\n\ud83d\udd25 Impact:\nMedium - Allows an attacker to execute arbitrary JavaScript in the victim's browser, potentially leading to session hijacking if the victim is authenticated.\n\n#Scripting #Reflected #XSS #Site #Cross", "url": "https://t.me/WGPE0o0/184", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-18T00:52:42Z", "date_only": false, "value": "2026-06-18T00:52:42.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/WGPE0o0/184", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "d794410c-0fdd-443d-8dbe-e6db90da5201", "content": "\ud83d\ude80 Reflected XSS in cPanel (CVE-2023-29489)\n\n\ud83d\udd17 Link: Read Full Writeup\n\n\ud83d\udee1 Vulnerability: Reflected Cross-Site Scripting (XSS)\n\n\ud83d\udcdd Summary:\nThis report details a Reflected XSS vulnerability in cPanel (CVE-2023-29489) discovered on a U.S. Department of Defense asset. The vulnerability occurred due to an outdated version of cPanel lacking auto-updates.\n\n\ud83d\udd75\ufe0f\u200d\u2642\ufe0f Recon Steps (Hacker Mindset):\nThe researcher targeted a U.S. DoD asset running an outdated version of cPanel. They found that the /cpanelwebcall/ endpoint reflected user input without proper sanitization, allowing for arbitrary JavaScript execution.\n\n\ud83e\udde0 Hacker's Pivot:\nThe attacker crafted a URL pointing to the /cpanelwebcall/ endpoint and appended an XSS payload (). Although it returned a 400 Bad Request to unauthenticated users, the payload successfully executed in the context of the error page. For authenticated users, it could be used to steal session cookies.\n\n\ud83d\udcbb Payloads & Execution:\nhttp://www.\u2588\u2588\u2588\u2588/cpanelwebcall/%3Cimg%20src=x%20onerror=%22prompt(1)%22%3Eaaaaaaaaaaaa\n\n\ud83d\udd25 Impact:\nMedium - Allows an attacker to execute arbitrary JavaScript in the victim's browser, potentially leading to session hijacking if the victim is authenticated.\n\n#Scripting #Reflected #XSS #Site #Cross", "url": "https://t.me/WGPE0o0/184"}, {"timestamp": "2026-07-09T03:00:08.333Z", "date_only": false, "value": "2026-07-09T03:00:08.333923Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/brutsecurity/1843", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "9629de7c-efb8-4eea-b800-640d5b1accb7", "content": "Reflected XSS in cPanel - tracked as CVE-2023-29489 \ud83d\udd25", "url": "https://t.me/brutsecurity/1843"}, {"timestamp": "2026-07-29T12:00:26.952Z", "date_only": false, "value": "2026-07-29T12:00:26.952798Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/14157", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "1d77ba5b-6aeb-4898-8717-bc1d330607c3", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-29489*\nGithub: https://github.com/Abdullah7-ma/CVE-2023-29489", "url": "https://t.me/CVEhub/14157"}, {"timestamp": "2026-07-29T12:00:33.992Z", "date_only": false, "value": "2026-07-29T12:00:33.992468Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/12262", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "8b76875e-aa18-439f-8ee0-112389bd728c", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2023-29489*\nGithub: https://github.com/1337r0j4n/CVE-2023-29489", "url": "https://t.me/CVEhub/12262"}, {"timestamp": "2026-07-29T12:00:34.925Z", "date_only": false, "value": "2026-07-29T12:00:34.925670Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/11824", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "9907b335-e919-47a3-947a-1111be121fc6", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-29489*\nGithub: https://github.com/Mostafa-Elguerdawi/CVE-2023-29489", "url": "https://t.me/CVEhub/11824"}, {"timestamp": "2026-07-29T12:00:34.957Z", "date_only": false, "value": "2026-07-29T12:00:34.957689Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/11825", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "b0275528-762b-408a-b29a-0fac179e766e", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-29489.yaml*\nGithub: https://github.com/Mostafa-Elguerdawi/CVE-2023-29489.yaml", "url": "https://t.me/CVEhub/11825"}, {"timestamp": "2026-07-29T12:00:34.988Z", "date_only": false, "value": "2026-07-29T12:00:34.988091Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/11860", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "2c0b0311-4b3b-4479-919d-8827cdbd9159", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *Scanner-CVE-2023-29489*\nGithub: https://github.com/haxor1337x/Scanner-CVE-2023-29489", "url": "https://t.me/CVEhub/11860"}, {"timestamp": "2026-07-29T12:00:35.018Z", "date_only": false, "value": "2026-07-29T12:00:35.018139Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/11792", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "9625a7c9-890a-4e3d-a07b-1e799590732b", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-29489.py*\nGithub: https://github.com/ipk1/CVE-2023-29489.py", "url": "https://t.me/CVEhub/11792"}, {"timestamp": "2026-07-29T12:00:35.171Z", "date_only": false, "value": "2026-07-29T12:00:35.171986Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/11733", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "fee41808-cad9-43fc-aed0-b75745f5658b", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *cPanel-CVE-2023-29489*\nGithub: https://github.com/xKore123/cPanel-CVE-2023-29489", "url": "https://t.me/CVEhub/11733"}, {"timestamp": "2026-07-29T12:00:35.482Z", "date_only": false, "value": "2026-07-29T12:00:35.482856Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/11668", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "50747d62-fe7c-4a34-8720-5096bb0b9b9a", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-29489*\nGithub: https://github.com/learnerboy88/CVE-2023-29489", "url": "https://t.me/CVEhub/11668"}, {"timestamp": "2026-07-29T12:02:29.643Z", "date_only": false, "value": "2026-07-29T12:02:29.643886Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/3349", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "3383c925-fed6-4844-afef-9d2d94d14b1f", "content": "Finding XSS in a million websites (cPanel CVE-2023-29489) https://blog.assetnote.io/2023/04/26/xss-million-websites-cpanel/", "url": "https://t.me/reverseame/3349"}, {"timestamp": "2026-07-31T00:00:25.798Z", "date_only": false, "value": "2026-07-31T00:00:25.798565Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/14157", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "f14499f8-ab07-4f76-bb2b-3a6c2a2b5a21", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-29489*\nGithub: https://github.com/Abdullah7-ma/CVE-2023-29489", "url": "https://t.me/CVEhub/14157", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-31T01:00:04.355Z", "date_only": false, "value": "2026-07-31T01:00:04.355265Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/12262", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "6350d8ab-b1f7-477e-a8f5-369f5ccee2a5", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2023-29489*\nGithub: https://github.com/1337r0j4n/CVE-2023-29489", "url": "https://t.me/CVEhub/12262", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-31T02:00:03.560Z", "date_only": false, "value": "2026-07-31T02:00:03.560275Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/11733", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "15639d2e-1f98-4f4c-b1e5-f97ab3c03b79", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *cPanel-CVE-2023-29489*\nGithub: https://github.com/xKore123/cPanel-CVE-2023-29489", "url": "https://t.me/CVEhub/11733", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-31T02:00:03.774Z", "date_only": false, "value": "2026-07-31T02:00:03.774468Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/11792", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "d33f2d4f-849e-4f2f-92a0-0302580f3d58", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-29489.py*\nGithub: https://github.com/ipk1/CVE-2023-29489.py", "url": "https://t.me/CVEhub/11792", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-31T02:00:03.816Z", "date_only": false, "value": "2026-07-31T02:00:03.816998Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/11860", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "a397d929-9228-479e-8c7e-b3da70519563", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *Scanner-CVE-2023-29489*\nGithub: https://github.com/haxor1337x/Scanner-CVE-2023-29489", "url": "https://t.me/CVEhub/11860", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-31T02:00:03.858Z", "date_only": false, "value": "2026-07-31T02:00:03.858968Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/11825", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "e4a8d635-dcc8-4d3f-9e58-47a6388fea75", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-29489.yaml*\nGithub: https://github.com/Mostafa-Elguerdawi/CVE-2023-29489.yaml", "url": "https://t.me/CVEhub/11825", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-31T02:00:03.903Z", "date_only": false, "value": "2026-07-31T02:00:03.903071Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/11824", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "1e22a42d-4325-4a84-8838-757e388edce6", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-29489*\nGithub: https://github.com/Mostafa-Elguerdawi/CVE-2023-29489", "url": "https://t.me/CVEhub/11824", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-31T03:00:04.244Z", "date_only": false, "value": "2026-07-31T03:00:04.244156Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/11668", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "4b162195-be4f-41be-84c3-e5995f67e9ae", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-29489*\nGithub: https://github.com/learnerboy88/CVE-2023-29489", "url": "https://t.me/CVEhub/11668", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-02T18:00:05.171Z", "date_only": false, "value": "2026-08-02T18:00:05.171304Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/3349", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "2195aa12-f361-495f-9605-c6959566ce28", "content": "Finding XSS in a million websites (cPanel CVE-2023-29489) https://blog.assetnote.io/2023/04/26/xss-million-websites-cpanel/", "url": "https://t.me/reverseame/3349", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-26T13:00:03.516Z", "date_only": false, "value": "2026-08-26T13:00:03.516479Z", "kind": "sighting", "label": "Seen", "source": "Telegram/IOJXNOqO2OCAv1sPfBMGrPWiD0pwOPVZW54xtaHoQnotoBA", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "2a86a1f3-5255-40aa-8de8-c4e28669058f"}, {"timestamp": "2026-08-27T00:00:10.037Z", "date_only": false, "value": "2026-08-27T00:00:10.037299Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/IOJXNOqO2OCAv1sPfBMGrPWiD0pwOPVZW54xtaHoQnotoBA", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "fc2d88dd-6072-469d-82f1-c972d731227a", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-01T20:00:18.618Z", "date_only": false, "value": "2026-09-01T20:00:18.618575Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/171112", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "c0691b7d-9ded-4a10-a949-4ed4f800add7", "content": "CVE-2023\u201329489 in Much Marcle Parish Council GOV.UK Website: A Cross-Site Scripting Vulnerability\nhttps://0xhassan.medium.com/cve-2023-29489-in-much-marcle-parish-council-gov-uk-website-a-cross-site-scripting-vulnerability-45830b223c13?source=rss------bug_bounty-5", "url": "https://t.me/hacking_Attack/171112"}, {"timestamp": "2026-09-01T20:00:18.663Z", "date_only": false, "value": "2026-09-01T20:00:18.663999Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/171114", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "34600399-3b2b-4fcd-af2e-1dc25a9329e0", "content": "IntroductionContinue reading on Medium \u00bb (https://0xhassan.medium.com/cve-2023-29489-in-much-marcle-parish-council-gov-uk-website-a-cross-site-scripting-vulnerability-45830b223c13?source=rss------bug_bounty-5)", "url": "https://t.me/hacking_Attack/171114"}, {"timestamp": "2026-09-03T05:00:05.996Z", "date_only": false, "value": "2026-09-03T05:00:05.996003Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/171114", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "9f479f95-c367-4754-9503-43cf58d34f40", "content": "IntroductionContinue reading on Medium \u00bb (https://0xhassan.medium.com/cve-2023-29489-in-much-marcle-parish-council-gov-uk-website-a-cross-site-scripting-vulnerability-45830b223c13?source=rss------bug_bounty-5)", "url": "https://t.me/hacking_Attack/171114", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-22T07:00:09.191Z", "date_only": false, "value": "2026-09-22T07:00:09.191165Z", "kind": "sighting", "label": "Seen", "source": "Telegram/QY4rIqioC-K1Cn2y-29Xdu83ice7XQqIGW6pp0692hd96to", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "1bf44ee9-8542-4d6c-a981-00e3847fc4b8"}, {"timestamp": "2026-09-23T00:00:14.163Z", "date_only": false, "value": "2026-09-23T00:00:14.163307Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/QY4rIqioC-K1Cn2y-29Xdu83ice7XQqIGW6pp0692hd96to", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "95f2694d-90d4-4e0d-8e64-1efbe0fa4431", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}], "metrics": {"as_of": "2026-11-15T05:53:30.961Z", "anchors": {"origin": {"timestamp": "2023-04-27T00:00:00Z", "date_only": false, "value": "2023-04-27T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-29489", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2023-04-27T00:00:00Z", "date_only": false, "value": "2023-04-27T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-29489", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2023-04-27T03:37:26Z", "date_only": false, "value": "2023-04-27T03:37:26.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/4255", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "72cd0a8f-e1b7-457f-a004-e5a59c3d13cb", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aNuclei template for CVE-2023-29489\nURL\uff1ahttps://github.com/learnerboy88/CVE-2023-29489\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/4255", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2023-04-28T12:27:02Z", "date_only": false, "value": "2023-04-28T12:27:02.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thebugbountyhunter/7283", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "d21539ba-02d0-4fba-bc79-bd494d30e33c", "content": "Finding XSS in a million websites (cPanel CVE-2023-29489)\n\nhttps://blog.assetnote.io/2023/04/26/xss-million-websites-cpanel/", "url": "https://t.me/thebugbountyhunter/7283", "metric_role": "exploitation", "metric_basis": "sighting_report"}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 131222.0, "hours": 36.45055555555555, "days": 1.5187731481481481, "min_seconds": 44822.0, "max_seconds": 131222.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-04-27T00:00:00Z", "date_only": false, "value": "2023-04-27T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-29489", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2023-04-28T12:27:02Z", "date_only": false, "value": "2023-04-28T12:27:02.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thebugbountyhunter/7283", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "d21539ba-02d0-4fba-bc79-bd494d30e33c", "content": "Finding XSS in a million websites (cPanel CVE-2023-29489)\n\nhttps://blog.assetnote.io/2023/04/26/xss-million-websites-cpanel/", "url": "https://t.me/thebugbountyhunter/7283", "metric_role": "exploitation", "metric_basis": "sighting_report"}}, "disclosure_to_exploit": {"available": true, "seconds": 131222.0, "hours": 36.45055555555555, "days": 1.5187731481481481, "min_seconds": 44822.0, "max_seconds": 131222.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-04-27T00:00:00Z", "date_only": false, "value": "2023-04-27T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-29489", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2023-04-28T12:27:02Z", "date_only": false, "value": "2023-04-28T12:27:02.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thebugbountyhunter/7283", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "d21539ba-02d0-4fba-bc79-bd494d30e33c", "content": "Finding XSS in a million websites (cPanel CVE-2023-29489)\n\nhttps://blog.assetnote.io/2023/04/26/xss-million-websites-cpanel/", "url": "https://t.me/thebugbountyhunter/7283", "metric_role": "exploitation", "metric_basis": "sighting_report"}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 13046.0, "hours": 3.6238888888888887, "days": 0.15099537037037036, "min_seconds": -73354.0, "max_seconds": 13046.0, "approximate": true, "ongoing": false, "order_known": false, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-04-27T00:00:00Z", "date_only": false, "value": "2023-04-27T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-29489", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2023-04-27T03:37:26Z", "date_only": false, "value": "2023-04-27T03:37:26.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/4255", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "72cd0a8f-e1b7-457f-a004-e5a59c3d13cb", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aNuclei template for CVE-2023-29489\nURL\uff1ahttps://github.com/learnerboy88/CVE-2023-29489\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/4255", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 112168410.961784, "hours": 31157.89193382889, "days": 1298.2454972428704, "min_seconds": 112082010.961784, "max_seconds": 112168410.961784, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-04-27T00:00:00Z", "date_only": false, "value": "2023-04-27T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-29489", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-15T05:53:30.961Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 112037188.961784, "hours": 31121.441378273335, "days": 1296.7267240947224, "min_seconds": 112037188.961784, "max_seconds": 112037188.961784, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-04-28T12:27:02Z", "date_only": false, "value": "2023-04-28T12:27:02.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thebugbountyhunter/7283", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "d21539ba-02d0-4fba-bc79-bd494d30e33c", "content": "Finding XSS in a million websites (cPanel CVE-2023-29489)\n\nhttps://blog.assetnote.io/2023/04/26/xss-million-websites-cpanel/", "url": "https://t.me/thebugbountyhunter/7283", "metric_role": "exploitation", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-15T05:53:30.961Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 112155364.961784, "hours": 31154.268044940003, "days": 1298.0945018725001, "min_seconds": 112155364.961784, "max_seconds": 112155364.961784, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-04-27T03:37:26Z", "date_only": false, "value": "2023-04-27T03:37:26.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/4255", "record": "CVE-2023-29489", "field": "creation_timestamp", "uuid": "72cd0a8f-e1b7-457f-a004-e5a59c3d13cb", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aNuclei template for CVE-2023-29489\nURL\uff1ahttps://github.com/learnerboy88/CVE-2023-29489\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/4255", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-15T05:53:30.961Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}