{"metadata": {"vulnerability": "CVE-2024-57968", "count": 66, "kinds": {"milestone": 4, "sighting": 41, "kev": 11, "other": 10}, "linked_omitted": 0}, "data": [{"timestamp": "2025-02-03T00:00:00Z", "date_only": false, "value": "2025-02-03T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-57968", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-02-03T00:00:00Z", "date_only": false, "value": "2025-02-03T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-57968", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-02-03T19:16:04.401Z", "date_only": false, "value": "2025-02-03T19:16:04.401757Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/113941555703677096", "record": "CVE-2024-57968", "field": "creation_timestamp", "uuid": "b690cc47-8a5e-49d2-a2a9-ae2001f99716", "url": "https://infosec.exchange/users/cve/statuses/113941555703677096"}, {"timestamp": "2025-02-03T20:15:36Z", "date_only": false, "value": "2025-02-03T20:15:36Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-GX78-3R6J-QX7F", "record": "GHSA-GX78-3R6J-QX7F", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2025-02-03T20:15:36.550Z", "date_only": false, "value": "2025-02-03T20:15:36.550", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-57968", "record": "FKIE_CVE-2024-57968", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-02-03T20:16:45.234Z", "date_only": false, "value": "2025-02-03T20:16:45.234718Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhced4xduj2e", "record": "CVE-2024-57968", "field": "creation_timestamp", "uuid": "d74a8da8-6edd-4996-a041-6a098ad5bc12", "url": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhced4xduj2e"}, {"timestamp": "2025-02-03T20:37:54.522Z", "date_only": false, "value": "2025-02-03T20:37:54.522246Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nicolefishbein.bsky.social/post/3lhcfixgiu22q", "record": "CVE-2024-57968", "field": "creation_timestamp", "uuid": "12419acd-bed9-430f-b8f9-95c1219eebb1", "url": "https://bsky.app/profile/nicolefishbein.bsky.social/post/3lhcfixgiu22q"}, {"timestamp": "2025-02-03T20:48:37.693Z", "date_only": false, "value": "2025-02-03T20:48:37.693936Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113941919628604703", "record": "CVE-2024-57968", "field": "creation_timestamp", "uuid": "38859884-430f-4d8e-9c07-3d88978fef96", "url": "https://mastodon.social/users/CyberSignaler/statuses/113941919628604703"}, {"timestamp": "2025-02-03T21:31:50Z", "date_only": false, "value": "2025-02-03T21:31:50Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-GX78-3R6J-QX7F", "record": "GHSA-GX78-3R6J-QX7F", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-02-03T21:59:58Z", "date_only": false, "value": "2025-02-03T21:59:58.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/17103", "record": "CVE-2024-57968", "field": "creation_timestamp", "uuid": "29401852-680b-4631-b3bc-aa2854ef8df1", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57968 - Advantive VeraCore Unrestricted File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57968 \nPublished : Feb. 3, 2025, 8:15 p.m. | 22\u00a0minutes ago \nDescription : Advantive VeraCore before 2024.4.2.1 allows remote authenticated users to upload files to unintended folders (e.g., ones that are accessible during web browsing by other users). upload.aspx can be used for this. \nSeverity: 9.9 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/17103"}, {"timestamp": "2025-02-04T17:12:51.947Z", "date_only": false, "value": "2025-02-04T17:12:51.947805Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lhekj6egp22r", "record": "CVE-2024-57968", "field": "creation_timestamp", "uuid": "ad9c1c6f-6d62-4815-ad45-52f43276c274", "url": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lhekj6egp22r"}, {"timestamp": "2025-02-05T16:44:52.344Z", "date_only": false, "value": "2025-02-05T16:44:52.344080Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3lhgzfzmfjc27", "record": "CVE-2024-57968", "field": "creation_timestamp", "uuid": "e4cf26c5-fab8-4670-9d6a-480042798454", "url": "https://bsky.app/profile/helpnetsecurity.com/post/3lhgzfzmfjc27"}, {"timestamp": "2025-02-05T20:58:46.814Z", "date_only": false, "value": "2025-02-05T20:58:46.814138Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/seifreed.bsky.social/post/3lhhhm4fdyy2y", "record": "CVE-2024-57968", "field": "creation_timestamp", "uuid": "b85c49c2-2f54-454b-b603-4d160409435c", "url": "https://bsky.app/profile/seifreed.bsky.social/post/3lhhhm4fdyy2y"}, {"timestamp": "2025-02-05T21:05:19.471Z", "date_only": false, "value": "2025-02-05T21:05:19.471898Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lhhhxtgbhw22", "record": "CVE-2024-57968", "field": "creation_timestamp", "uuid": "ba70db13-cb12-4061-9530-02c48136b3e7", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lhhhxtgbhw22"}, {"timestamp": "2025-02-06T03:35:56.743Z", "date_only": false, "value": "2025-02-06T03:35:56.743170Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lhi5s7xhpk2e", "record": "CVE-2024-57968", "field": "creation_timestamp", "uuid": "d8d290a5-a41b-4beb-bf38-4204e039539d", "url": "https://bsky.app/profile/dinosn.bsky.social/post/3lhi5s7xhpk2e"}, {"timestamp": "2025-02-06T07:35:26.292Z", "date_only": false, "value": "2025-02-06T07:35:26.292351Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/anontroyano.bsky.social/post/3lhil3xuhls2a", "record": "CVE-2024-57968", "field": "creation_timestamp", "uuid": "feed66e0-6fc6-442c-b98a-faac9db01182", "url": "https://bsky.app/profile/anontroyano.bsky.social/post/3lhil3xuhls2a"}, {"timestamp": "2025-02-06T07:35:26.851Z", "date_only": false, "value": "2025-02-06T07:35:26.851417Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/anontroyano.bsky.social/post/3lhil3z7ofs2a", "record": "CVE-2024-57968", "field": "creation_timestamp", "uuid": "4d882866-589d-4eef-a115-5d1532d6cadf", "url": "https://bsky.app/profile/anontroyano.bsky.social/post/3lhil3z7ofs2a"}, {"timestamp": "2025-02-06T18:07:43.818Z", "date_only": false, "value": "2025-02-06T18:07:43.818Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2024-57968", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-06T18:41:05.894Z", "date_only": false, "value": "2025-02-06T18:41:05.894854Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lhjqetiesk2n", "record": "CVE-2024-57968", "field": "creation_timestamp", "uuid": "332c43ee-3234-4401-8086-8f3e3ce48583", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3lhjqetiesk2n"}, {"timestamp": "2025-02-06T21:02:42.020Z", "date_only": false, "value": "2025-02-06T21:02:42.020454Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lhjybyzjrb2x", "record": "CVE-2024-57968", "field": "creation_timestamp", "uuid": "904b66bf-fe40-40fe-99c1-2de3044c20f6", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lhjybyzjrb2x"}, {"timestamp": "2025-02-10T05:39:52.180Z", "date_only": false, "value": "2025-02-10T05:39:52.180169Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lhsgllfpta2z", "record": "CVE-2024-57968", "field": "creation_timestamp", "uuid": "ee5381cf-50d1-4c0b-9d38-c852b2bf6a77", "url": "https://bsky.app/profile/hackingne.ws/post/3lhsgllfpta2z"}, {"timestamp": "2025-02-10T06:01:03.745Z", "date_only": false, "value": "2025-02-10T06:01:03.745834Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/potato.software/post/3lhshriip3v2e", "record": "CVE-2024-57968", "field": "creation_timestamp", "uuid": "27534c9e-cb36-48c0-b19d-ad7e9391ddba", "url": "https://bsky.app/profile/potato.software/post/3lhshriip3v2e"}, {"timestamp": "2025-02-10T06:19:30Z", "date_only": false, "value": "2025-02-10T06:19:30.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/6310", "record": "CVE-2024-57968", "field": "creation_timestamp", "uuid": "6aef5074-d2de-4f42-ae59-f312a1aa2844", "content": "\ud83d\uded1 XE Group has evolved. They\u2019re no longer just stealing credit card data\u2014they\u2019re exploiting zero-day vulnerabilities (like CVE-2024-57968 in VeraCore) to target supply chains\n\nOnce in, they can drop reverse shells, exfiltrate files, and even modify data\n\nhttps://thehackernews.com/2025/02/xe-hacker-group-exploits-veracore-zero.html", "url": "https://t.me/thehackernews/6310", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-02-10T11:01:13.036Z", "date_only": false, "value": "2025-02-10T11:01:13.036131Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/dragonjar/statuses/113979245899426202", "record": "CVE-2024-57968", "field": "creation_timestamp", "uuid": "0c0163bc-9beb-4060-b694-1bf0965b3ba9", "url": "https://infosec.exchange/users/dragonjar/statuses/113979245899426202"}, {"timestamp": "2025-02-10T12:34:49Z", "date_only": false, "value": "2025-02-10T12:34:49.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ton618cyber/2369", "record": "CVE-2024-57968", "field": "creation_timestamp", "uuid": "0810bf86-f88d-4dbe-89c0-29e4180c9e67", "content": "XE Hacker Group Exploits VeraCore Zero-Day to Deploy Persistent Web Shells\n\nXE Group exploits a VeraCore zero-day (CVE-2024-57968) to deploy web shells, enabling persistent access and targeting supply chains in manufacturing a\n\nThe Hacker News | thehackernews.com \u2022 Feb 10, 2025", "url": "https://t.me/ton618cyber/2369", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-02-10T12:34:49Z", "date_only": false, "value": "2025-02-10T12:34:49.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ton618cyber/6572", "record": "CVE-2024-57968", "field": "creation_timestamp", "uuid": "6d408108-a3f6-4039-bc55-bf5ef7a239ff", "content": "XE Hacker Group Exploits VeraCore Zero-Day to Deploy Persistent Web Shells\n\nXE Group exploits a VeraCore zero-day (CVE-2024-57968) to deploy web shells, enabling persistent access and targeting supply chains in manufacturing a\n\nThe Hacker News | thehackernews.com \u2022 Feb 10, 2025", "url": "https://t.me/ton618cyber/6572", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-02-11T16:20:56.054Z", "date_only": false, "value": "2025-02-11T16:20:56.054103Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/socprime.com/post/3lhw2usicv72v", "record": "CVE-2024-57968", "field": "creation_timestamp", "uuid": "5625dc4b-6c27-4bc1-a344-86caa6a51782", "url": "https://bsky.app/profile/socprime.com/post/3lhw2usicv72v"}, {"timestamp": "2025-03-09T12:30:08.321Z", "date_only": false, "value": "2025-03-09T12:30:08.321870Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bolhasec.com/post/3ljx242rpn32l", "record": "CVE-2024-57968", "field": "creation_timestamp", "uuid": "847bb1d6-49a6-4622-a65c-6f33732cba2e", "url": "https://bsky.app/profile/bolhasec.com/post/3ljx242rpn32l"}, {"timestamp": "2025-03-10T00:00:00Z", "date_only": false, "value": "2025-03-10T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2024-57968", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "f9696218-e6b9-452d-865b-9f7ccc6f25bd", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-03-10T00:00:00Z", "date_only": false, "value": "2025-03-10T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2024-57968", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "1273a02b-c51d-463b-9bf0-5112c7305f4e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-03-10T00:00:00Z", "date_only": true, "value": "2025-03-10", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-57968", "field": "containers.adp.0.metrics.1.other.content.dateAdded"}, {"timestamp": "2025-03-10T00:00:00Z", "date_only": false, "value": "2025-03-10T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2024-57968", "field": "evidence.0.details.added_date", "uuid": "1273a02b-c51d-463b-9bf0-5112c7305f4e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-03-10T00:00:00Z", "date_only": true, "value": "2025-03-10", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2024-57968", "field": "evidence.0.details.date_added", "uuid": "f9696218-e6b9-452d-865b-9f7ccc6f25bd", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-03-10T00:00:00Z", "date_only": false, "value": "2025-03-10T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2024-57968", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "f9696218-e6b9-452d-865b-9f7ccc6f25bd", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-03-10T00:00:00Z", "date_only": false, "value": "2025-03-10T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2024-57968", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "1273a02b-c51d-463b-9bf0-5112c7305f4e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-03-10T00:00:00Z", "date_only": false, "value": "2025-03-10T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2024-57968", "field": "status.status_updated_at", "uuid": "f9696218-e6b9-452d-865b-9f7ccc6f25bd", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-03-10T00:00:00Z", "date_only": false, "value": "2025-03-10T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2024-57968", "field": "status.status_updated_at", "uuid": "1273a02b-c51d-463b-9bf0-5112c7305f4e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-03-10T00:00:00Z", "date_only": false, "value": "2025-03-10T00:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-57968", "field": "containers.adp.0.timeline.0.time", "text": "CVE-2024-57968 added to CISA KEV"}, {"timestamp": "2025-03-10T17:38:20Z", "date_only": false, "value": "2025-03-10T17:38:20.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7024", "record": "CVE-2024-57968", "field": "creation_timestamp", "uuid": "4df4ea06-2554-4564-a43c-a949ec9765f7", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57968\n\ud83d\udd25 CVSS Score: 9.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: Advantive VeraCore before 2024.4.2.1 allows remote authenticated users to upload files to unintended folders (e.g., ones that are accessible during web browsing by other users). upload.aspx can be used for this.\n\ud83d\udccf Published: 2025-02-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-10T17:17:33.904Z\n\ud83d\udd17 References:\n1. https://advantive.my.site.com/support/s/article/VeraCore-Release-Notes-2024-4-2-1\n2. https://intezer.com/blog/research/xe-group-exploiting-zero-days/\n3. https://www.solissecurity.com/en-us/insights/xe-group-from-credit-card-skimming-to-exploiting-zero-days/", "url": "https://t.me/DarkWebInformer_CVEAlerts/7024"}, {"timestamp": "2025-03-10T18:10:04Z", "date_only": false, "value": "2025-03-10T18:10:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2024-57968", "field": "creation_timestamp", "uuid": "f7394499-a10b-4775-97e3-c52093981ce3"}, {"timestamp": "2025-03-10T19:11:43.335Z", "date_only": false, "value": "2025-03-10T19:11:43.335727Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3lk2ayuynhs2g", "record": "CVE-2024-57968", "field": "creation_timestamp", "uuid": "e33b14be-54ba-4230-9c34-ea430800e563", "url": "https://bsky.app/profile/aakl.bsky.social/post/3lk2ayuynhs2g"}, {"timestamp": "2025-03-10T19:11:44.570Z", "date_only": false, "value": "2025-03-10T19:11:44.570423Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3lk2ayuz6322g", "record": "CVE-2024-57968", "field": "creation_timestamp", "uuid": "3353aaad-848c-4372-9272-15db62cd04fb", "url": "https://bsky.app/profile/aakl.bsky.social/post/3lk2ayuz6322g"}, {"timestamp": "2025-03-10T20:08:29.995Z", "date_only": false, "value": "2025-03-10T20:08:29.995567Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lk2e6kjbxk24", "record": "CVE-2024-57968", "field": "creation_timestamp", "uuid": "8535cfbc-c8a1-4312-ab6b-ff8eb0bd7588", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lk2e6kjbxk24"}, {"timestamp": "2025-03-10T20:37:15.658Z", "date_only": false, "value": "2025-03-10T20:37:15.658487Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/3533542", "record": "CVE-2024-57968", "field": "creation_timestamp", "uuid": "47ab3708-2c9a-4d37-9c8e-679a15d09d05", "url": "https://feedsin.space/feed/CISAKevBot/items/3533542"}, {"timestamp": "2025-03-11T02:58:00Z", "date_only": false, "value": "2025-03-11T02:58:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2025/03/cisa-adds-five-actively-exploited.html", "record": "CVE-2024-57968", "field": "creation_timestamp", "uuid": "7044dc06-533a-442f-afd4-73bd199eb7d4", "url": "https://thehackernews.com/2025/03/cisa-adds-five-actively-exploited.html"}, {"timestamp": "2025-03-11T04:41:14Z", "date_only": false, "value": "2025-03-11T04:41:14.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/WnupHCh-e4T9si1DyA7cv99LA8IkSO8ohj3z0UlOHNi7N3yS", "record": "CVE-2024-57968", "field": "creation_timestamp", "uuid": "a831ddaf-2d00-4e00-85cb-4de4e92af698"}, {"timestamp": "2025-03-11T05:26:42Z", "date_only": false, "value": "2025-03-11T05:26:42.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2024-57968", "field": "creation_timestamp", "uuid": "746da980-d38c-4977-ae23-dd33e212a7f2"}, {"timestamp": "2025-03-11T08:28:09Z", "date_only": false, "value": "2025-03-11T08:28:09.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/claytechsolution/206", "record": "CVE-2024-57968", "field": "creation_timestamp", "uuid": "3d15b839-9583-4471-aff3-aa7453cdf4ca", "content": "The Hacker News\nCISA Adds Five Actively Exploited Vulnerabilities in Advantive VeraCore and Ivanti EPM to KEV List\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added five security flaws impacting Advantive VeraCore and Ivanti Endpoint Manager (EPM) to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation in the wild.\nThe list of vulnerabilities is as follows -\n\nCVE-2024-57968 - An unrestricted file upload vulnerability in Advantive VeraCore", "url": "https://t.me/claytechsolution/206", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-03-11T12:17:52Z", "date_only": false, "value": "2025-03-11T12:17:52.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/xv7zg-fyPkiMFIP27IgCOFS2T4cyEgEmLzZ-i1W_dI9tnw", "record": "CVE-2024-57968", "field": "creation_timestamp", "uuid": "cfb077e2-8bd9-4cee-8099-91df2a6d454a", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-03-11T21:02:10.819Z", "date_only": false, "value": "2025-03-11T21:02:10.819633Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lk4xnhp2nq2c", "record": "CVE-2024-57968", "field": "creation_timestamp", "uuid": "fc95fcc6-2427-4814-8739-9a474f366131", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lk4xnhp2nq2c"}, {"timestamp": "2025-03-14T03:55:52.081Z", "date_only": false, "value": "2025-03-14T03:55:52.081878Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-57968", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-03-14T03:55:52.081Z", "date_only": false, "value": "2025-03-14T03:55:52.081878Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-57968", "record": "FKIE_CVE-2024-57968", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-03-31T00:00:00Z", "date_only": true, "value": "2025-03-31", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2024-57968", "field": "evidence.0.details.due_date", "uuid": "f9696218-e6b9-452d-865b-9f7ccc6f25bd", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-10-21T22:55:30.718Z", "date_only": false, "value": "2025-10-21T22:55:30.718Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-57968", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T22:55:30.718Z", "date_only": false, "value": "2025-10-21T22:55:30.718Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-57968", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:33:12Z", "date_only": false, "value": "2025-10-22T00:33:12Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-GX78-3R6J-QX7F", "record": "GHSA-GX78-3R6J-QX7F", "field": "modified", "linked_record": true}, {"timestamp": "2026-02-02T12:26:08.621Z", "date_only": false, "value": "2026-02-02T12:26:08.621212Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f9696218-e6b9-452d-865b-9f7ccc6f25bd", "record": "CVE-2024-57968", "field": "creation_timestamp", "uuid": "117c22a4-0e7f-4940-8f03-1ac36fd41f27", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f9696218-e6b9-452d-865b-9f7ccc6f25bd", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-17T08:14:20.447Z", "date_only": false, "value": "2026-06-17T08:14:20.447", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-57968", "record": "FKIE_CVE-2024-57968", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-06-19T12:46:25.346Z", "date_only": false, "value": "2026-06-19T12:46:25.346219Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/064fe99e-afc7-4128-97d3-9923b25afdb5", "record": "CVE-2024-57968", "field": "creation_timestamp", "uuid": "e8f1f9f2-b890-4280-9e7c-e445e032c1c0", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/064fe99e-afc7-4128-97d3-9923b25afdb5", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2024-57968", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "1273a02b-c51d-463b-9bf0-5112c7305f4e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:06:06.435Z", "date_only": false, "value": "2026-06-23T14:06:06.435945Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1273a02b-c51d-463b-9bf0-5112c7305f4e", "record": "CVE-2024-57968", "field": "creation_timestamp", "uuid": "5c491d83-4399-4aff-a6ad-e28727ff0928", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1273a02b-c51d-463b-9bf0-5112c7305f4e", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-20T22:00:05.950Z", "date_only": false, "value": "2026-07-20T22:00:05.950460Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/claytechsolution/204", "record": "CVE-2024-57968", "field": "creation_timestamp", "uuid": "c8eaf9c0-fb9c-49a5-a15d-d8569a5e6aaf", "content": "The Hacker News\nCISA Adds Five Actively Exploited Vulnerabilities in Advantive VeraCore and Ivanti EPM to KEV List\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added five security flaws impacting Advantive VeraCore and Ivanti Endpoint Manager (EPM) to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation in the wild.\nThe list of vulnerabilities is as follows -\n\nCVE-2024-57968 - An unrestricted file upload vulnerability in Advantive VeraCore", "url": "https://t.me/claytechsolution/204"}, {"timestamp": "2026-07-21T00:00:08.341Z", "date_only": false, "value": "2026-07-21T00:00:08.341184Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/claytechsolution/204", "record": "CVE-2024-57968", "field": "creation_timestamp", "uuid": "07dd1488-8a0f-4be7-ba21-b4f584c81ca8", "content": "The Hacker News\nCISA Adds Five Actively Exploited Vulnerabilities in Advantive VeraCore and Ivanti EPM to KEV List\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added five security flaws impacting Advantive VeraCore and Ivanti Endpoint Manager (EPM) to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation in the wild.\nThe list of vulnerabilities is as follows -\n\nCVE-2024-57968 - An unrestricted file upload vulnerability in Advantive VeraCore", "url": "https://t.me/claytechsolution/204", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-04T13:00:06.845Z", "date_only": false, "value": "2026-08-04T13:00:06.845758Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/363", "record": "CVE-2024-57968", "field": "creation_timestamp", "uuid": "16aaf9e6-3cf0-4c8c-9793-c7b20a0e0a93", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2024-12297 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 MOXA PT Switch, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0435\u0432\u043e\u043c\u0443 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044e. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\ud83d\udd35CVE-2025-27509 \u2014 \u0431\u0430\u0433 \u0432 Fleet, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0430\u043c\u0438. \u041e\u0448\u0438\u0431\u043a\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 SAML-\u0442\u043e\u043a\u0435\u043d\u043e\u0432, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439.\n\n\ud83d\udd35CVE-2024-38311, CVE-2024-56195, CVE-2024-56196 \u0438 CVE-2024-5620 \u2014 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Apache Traffic Server \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043f\u0430\u0442\u0447, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0439 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c DoS-\u0430\u0442\u0430\u043a\u0438, \u043a\u0440\u0430\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0442\u0440\u0430\u0444\u0438\u043a\u043e\u043c.\n\n\ud83d\udd35CVE-2025-25181, CVE-2024-57968, CVE-2024-13159, CVE-2024-13160, CVE-2024-13161 \u2014 \u043f\u044f\u0442\u044c \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Advantive VeraCore \u0438 Ivanti Endpoint Manager \u043f\u043e\u043f\u0430\u043b\u0438 \u0432 \u043f\u043e\u0434\u0431\u043e\u0440\u043a\u0443 CISA \u043a\u0430\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\ud83d\udd35CVE-2025-27816 \u2014 Veritas \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Alta Recovery Vault, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c, \u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0435 \u043a\u043e\u043f\u0438\u0438. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0435 .NET.\n\n\ud83d\udd35CVE-2025\u201327636 \u2014 PoC \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Apache Camel. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 Camel, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n#blue_team #CVE_\u0434\u043d\u044f", "url": "https://t.me/purp_sec/363"}, {"timestamp": "2026-08-04T13:00:13.513Z", "date_only": false, "value": "2026-08-04T13:00:13.513667Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/249", "record": "CVE-2024-57968", "field": "creation_timestamp", "uuid": "c04911dd-2532-49a0-9a83-aeffd7909378", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u0434\u043b\u044f \u0432\u0430\u0441 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2024-57968 \u0438 CVE-2025-25181 \u2014 0day-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 VeraCore, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 XE Group. \u041f\u0435\u0440\u0432\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u043d\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0432 \u043d\u0435\u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u043f\u0430\u043f\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 upload.aspx. \u0412\u0442\u043e\u0440\u0430\u044f \u2014 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b SQL \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 PmSess1.\n\n\ud83d\udd35CVE-2025-24860 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Apache Cassandra, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0435\u0439. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0426\u041e\u0414 \u0438\u043b\u0438 \u0433\u0440\u0443\u043f\u043f\u0430\u043c IP/CIDR \u0447\u0435\u0440\u0435\u0437 CassandraNetworkAuthorizer \u0438\u043b\u0438 CassandraCIDRAuthorizer. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0426\u041e\u0414 \u043c\u043e\u0433\u0443\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e data control language (DCL) \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445.\n\n\ud83d\udd35CVE-2025-24964 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Cross-site WebSocket Hijacking (CSWSH) \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 API Vitest. \u041a\u043e\u0433\u0434\u0430 \u043e\u043f\u0446\u0438\u044f api \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430, Vitest \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0441\u0435\u0440\u0432\u0435\u0440 WebSocket \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u043e\u0432 Origin \u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430\u043c\u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f.\n\n\ud83d\udd35CVE-2025-20124 \u0438 CVE-2025-20125 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Cisco, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 API ISE. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043f\u043e\u0434 \u043f\u0440\u043e\u0444\u0438\u043b\u0435\u043c \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 read-only \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\ud83d\udd35CVE-2019-18935 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Progress Telerik UI \u0434\u043b\u044f ASP.NET AJAX, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445, \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0438 \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438.\n\n#blue_team #CVE_\u0434\u043d\u044f", "url": "https://t.me/purp_sec/249"}, {"timestamp": "2026-11-04T13:31:51Z", "date_only": false, "value": "2026-11-04T13:31:51+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2024-57968", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "f9696218-e6b9-452d-865b-9f7ccc6f25bd", "status": {"status_reason": "confirmed", "exploited": true}}], "metrics": {"as_of": "2026-11-15T02:48:51.657Z", "anchors": {"origin": {"timestamp": "2025-02-03T00:00:00Z", "date_only": false, "value": "2025-02-03T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-57968", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2025-02-03T00:00:00Z", "date_only": false, "value": "2025-02-03T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-57968", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": {"timestamp": "2025-02-10T06:19:30Z", "date_only": false, "value": "2025-02-10T06:19:30.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/6310", "record": "CVE-2024-57968", "field": "creation_timestamp", "uuid": "6aef5074-d2de-4f42-ae59-f312a1aa2844", "content": "\ud83d\uded1 XE Group has evolved. They\u2019re no longer just stealing credit card data\u2014they\u2019re exploiting zero-day vulnerabilities (like CVE-2024-57968 in VeraCore) to target supply chains\n\nOnce in, they can drop reverse shells, exfiltrate files, and even modify data\n\nhttps://thehackernews.com/2025/02/xe-hacker-group-exploits-veracore-zero.html", "url": "https://t.me/thehackernews/6310", "metric_role": "exploitation", "metric_basis": "sighting_report"}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 627570.0, "hours": 174.325, "days": 7.263541666666667, "min_seconds": 541170.0, "max_seconds": 627570.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-02-03T00:00:00Z", "date_only": false, "value": "2025-02-03T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-57968", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-02-10T06:19:30Z", "date_only": false, "value": "2025-02-10T06:19:30.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/6310", "record": "CVE-2024-57968", "field": "creation_timestamp", "uuid": "6aef5074-d2de-4f42-ae59-f312a1aa2844", "content": "\ud83d\uded1 XE Group has evolved. They\u2019re no longer just stealing credit card data\u2014they\u2019re exploiting zero-day vulnerabilities (like CVE-2024-57968 in VeraCore) to target supply chains\n\nOnce in, they can drop reverse shells, exfiltrate files, and even modify data\n\nhttps://thehackernews.com/2025/02/xe-hacker-group-exploits-veracore-zero.html", "url": "https://t.me/thehackernews/6310", "metric_role": "exploitation", "metric_basis": "sighting_report"}}, "disclosure_to_exploit": {"available": true, "seconds": 627570.0, "hours": 174.325, "days": 7.263541666666667, "min_seconds": 541170.0, "max_seconds": 627570.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-02-03T00:00:00Z", "date_only": false, "value": "2025-02-03T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-57968", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-02-10T06:19:30Z", "date_only": false, "value": "2025-02-10T06:19:30.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/6310", "record": "CVE-2024-57968", "field": "creation_timestamp", "uuid": "6aef5074-d2de-4f42-ae59-f312a1aa2844", "content": "\ud83d\uded1 XE Group has evolved. They\u2019re no longer just stealing credit card data\u2014they\u2019re exploiting zero-day vulnerabilities (like CVE-2024-57968 in VeraCore) to target supply chains\n\nOnce in, they can drop reverse shells, exfiltrate files, and even modify data\n\nhttps://thehackernews.com/2025/02/xe-hacker-group-exploits-veracore-zero.html", "url": "https://t.me/thehackernews/6310", "metric_role": "exploitation", "metric_basis": "sighting_report"}}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 56170131.65781, "hours": 15602.814349391667, "days": 650.1172645579861, "min_seconds": 56083731.65781, "max_seconds": 56170131.65781, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-02-03T00:00:00Z", "date_only": false, "value": "2025-02-03T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-57968", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-15T02:48:51.657Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 55542561.65781, "hours": 15428.489349391668, "days": 642.8537228913194, "min_seconds": 55542561.65781, "max_seconds": 55542561.65781, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-02-10T06:19:30Z", "date_only": false, "value": "2025-02-10T06:19:30.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/6310", "record": "CVE-2024-57968", "field": "creation_timestamp", "uuid": "6aef5074-d2de-4f42-ae59-f312a1aa2844", "content": "\ud83d\uded1 XE Group has evolved. They\u2019re no longer just stealing credit card data\u2014they\u2019re exploiting zero-day vulnerabilities (like CVE-2024-57968 in VeraCore) to target supply chains\n\nOnce in, they can drop reverse shells, exfiltrate files, and even modify data\n\nhttps://thehackernews.com/2025/02/xe-hacker-group-exploits-veracore-zero.html", "url": "https://t.me/thehackernews/6310", "metric_role": "exploitation", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-15T02:48:51.657Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}