{"metadata": {"vulnerability": "cve-2024-29895", "count": 90, "kinds": {"milestone": 4, "sighting": 66, "kev": 11, "other": 9}}, "data": [{"timestamp": "2024-03-21T15:12:08.998Z", "date_only": false, "value": "2024-03-21T15:12:08.998Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-29895", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-04-03T05:02:30.670Z", "date_only": false, "value": "2024-04-03T05:02:30.670233Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-29895", "record": "GSD-2024-29895", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-05-13T14:33:27.594Z", "date_only": false, "value": "2024-05-13T14:33:27.594Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-29895", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-05-13T14:33:27.594Z", "date_only": false, "value": "2024-05-13T14:33:27.594Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "cve-2024-29895", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-05-13T17:31:11.680Z", "date_only": false, "value": "2024-05-13T17:31:11.680843Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-29895", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-05-13T17:31:11.680Z", "date_only": false, "value": "2024-05-13T17:31:11.680843Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-29895", "record": "FKIE_CVE-2024-29895", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-05-14T14:35:15Z", "date_only": false, "value": "2024-05-14T14:35:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackingInsights/409", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "c8c5c6db-924a-4a93-b452-60ea9a6b0199", "content": "\u200aCritical Security Flaws in Cacti: Command Injection (CVE-2024-29895, CVSS 10) and XSS Vulnerabilities\n\nhttps://securityonline.info/critical-security-flaws-in-cacti-command-injection-cve-2024-29895-cvss-10-and-xss-vulnerabilities/", "url": "https://t.me/HackingInsights/409"}, {"timestamp": "2024-05-14T14:37:41Z", "date_only": false, "value": "2024-05-14T14:37:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/itsec_news/4427", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "cea2468b-e59b-4dd0-a1c3-e8183f5e724a", "content": "\u200b\u26a1\ufe0fCacti \u0432\u043d\u043e\u0432\u044c \u043f\u043e\u0434 \u0443\u0434\u0430\u0440\u043e\u043c: \u0441\u0440\u0430\u0437\u0443 12 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u043f\u0443\u0442\u0438 \u0434\u043b\u044f \u0430\u0442\u0430\u043a\n\n\ud83d\udcac\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Cacti, \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0434\u043b\u044f \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0442\u044f\u043c\u0438, \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 12 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435, \u0432\u0435\u0434\u0443\u0449\u0438\u0435 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u0412\u043e\u0442 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u044b\u0435 \u0438\u0437 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439:\n\nCVE-2024-25641 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 9.1). \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0438 \u0437\u0430\u043f\u0438\u0441\u0438 \u0432 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u00ab\u0418\u043c\u043f\u043e\u0440\u0442 \u043f\u0430\u043a\u0435\u0442\u043e\u0432\u00bb, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0435\u043c \u043d\u0430 \u00ab\u0418\u043c\u043f\u043e\u0440\u0442 \u0448\u0430\u0431\u043b\u043e\u043d\u043e\u0432\u00bb \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 PHP-\u043a\u043e\u0434 \u043d\u0430 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0435, \u0447\u0442\u043e \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430.\nCVE-2024-29895 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 10.0). \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043b\u044e\u0431\u043e\u043c\u0443 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u043f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0439 \u043e\u043f\u0446\u0438\u0438 \u00abregister_argc_argv\u00bb \u0432 PHP.\n\u0422\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0434\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u043b\u0438 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0447\u0435\u0440\u0435\u0437 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e \u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u0444\u0430\u0439\u043b\u043e\u0432:\n\nCVE-2024-31445 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 8.8). \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u0432 api_automation.php, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u044d\u0441\u043a\u0430\u043b\u0430\u0446\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0441 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430.\nCVE-2024-31459 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442). \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u0430 lib/plugin.php, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\u0421\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e 10 \u0438\u0437 12 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0437\u0430 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c CVE-2024-29895 \u0438 CVE-2024-30268 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Cacti \u0434\u043e 1.2.26 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e. \u042d\u0442\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0431\u044b\u043b\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 1.2.27, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0439 13 \u043c\u0430\u044f 2024 \u0433\u043e\u0434\u0430. \u0414\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 1.3.x \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432.\n\n\u0414\u0430\u043d\u043d\u0430\u044f \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u0432\u043e\u0437\u043d\u0438\u043a\u043b\u0430 \u0441 Cacti \u0441\u043f\u0443\u0441\u0442\u044f \u0431\u043e\u043b\u0435\u0435 \u0432\u043e\u0441\u044c\u043c\u0438 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u043f\u043e\u0441\u043b\u0435 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u0440\u0443\u0433\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 ( CVE-2023-39361, CVSS 9.8), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\u0410 \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 2023 \u0433\u043e\u0434\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0434 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE-2022-46169 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9.8 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u0437\u043b\u0430\u043c\u044b\u0432\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0438\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b Cacti \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0431\u043e\u0442\u043d\u0435\u0442\u043e\u0432 MooBot \u0438 ShellBot.\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f \u0432\u044b\u0448\u0435\u043e\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445 GitHub, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0433\u0440\u043e\u0437.\n\n\ud83d\udd14 ITsec NEWS", "url": "https://t.me/itsec_news/4427"}, {"timestamp": "2024-05-14T15:17:00Z", "date_only": false, "value": "2024-05-14T15:17:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2024-29895", "record": "UBUNTU-CVE-2024-29895", "field": "published"}, {"timestamp": "2024-05-14T15:17:15.593Z", "date_only": false, "value": "2024-05-14T15:17:15.593", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-29895", "record": "FKIE_CVE-2024-29895", "field": "published"}, {"timestamp": "2024-05-14T17:28:38Z", "date_only": false, "value": "2024-05-14T17:28:38.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/proxy_bar/2073", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "1c6eff3b-13f5-4fa4-a4ec-01f092f8ffc3", "content": "CVE-2024-29895 cacti\n*\nCommand injection in cmd_realtime.php \n*\nfofa link\n* \nusage:\nhttp://localhost/cacti/cmd_realtime.php?1+1&&calc.exe+1+1+1\n\n#net", "url": "https://t.me/proxy_bar/2073"}, {"timestamp": "2024-05-15T07:24:42Z", "date_only": false, "value": "2024-05-15T07:24:42.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/2489", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "cfb8c35f-8e07-4f83-908c-ad51599823e1", "content": "CVE-2024-29895\n\nGET  /cacti/cmd_realtime.php?1+1&&calc.exe+1+1+1\n\ncalc.exe\n\n#POC #exploit", "url": "https://t.me/CNArsenal/2489"}, {"timestamp": "2024-05-15T21:22:30Z", "date_only": false, "value": "2024-05-15T21:22:30.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/7314", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "10473315-b660-4f93-86d9-7a50131a5f46", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aCVE-2024-29895 PoC - Exploiting remote command execution in Cacti servers using the 1.3.X DEV branch builds\nURL\uff1ahttps://github.com/Stuub/CVE-2024-29895-CactiRCE-PoC\n\n\u6807\u7b7e\uff1a#RCE", "url": "https://t.me/GithubRedTeam/7314"}, {"timestamp": "2024-05-16T06:31:06Z", "date_only": false, "value": "2024-05-16T06:31:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/7316", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "66109a4a-f3bb-49e3-99f4-edc4df7256ec", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCacti CVE-2024-29895 POC\nURL\uff1ahttps://github.com/secunnix/CVE-2024-29895\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/7316"}, {"timestamp": "2024-05-16T06:49:30Z", "date_only": false, "value": "2024-05-16T06:49:30.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/2496", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "76b15e1c-a83f-4eee-aa00-0c9f834fcae5", "content": "https://github.com/Stuub/CVE-2024-29895-CactiRCE-PoC\n\nCVE-2024-29895 PoC - Exploiting remote command execution in Cacti servers using the 1.3.X DEV branch builds\n#github", "url": "https://t.me/CNArsenal/2496"}, {"timestamp": "2024-05-17T21:38:50Z", "date_only": false, "value": "2024-05-17T21:38:50.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/7334", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "43670f2d-a03f-4183-a60a-241bf8c003fb", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-29895 | RCE on CACTI 1.3.X dev\nURL\uff1ahttps://github.com/Rubioo02/CVE-2024-29895\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/7334"}, {"timestamp": "2024-05-21T12:37:21Z", "date_only": false, "value": "2024-05-21T12:37:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/7363", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "5a56b730-5ac7-4796-914a-4f2f3e916613", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aCVE-2024-29895-CactiRCE-PoC , RCE, POC, CVE-2024-29895\nURL\uff1ahttps://github.com/nancyariah4/CVE-2024-29895-CactiRCE-PoC\n\n\u6807\u7b7e\uff1a#RCE", "url": "https://t.me/GithubRedTeam/7363"}, {"timestamp": "2024-06-04T17:56:45.934Z", "date_only": false, "value": "2024-06-04T17:56:45.934Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-29895", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-06-23T16:58:26Z", "date_only": false, "value": "2024-06-23T16:58:26.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/blzBdvCl0k8G3G__Hw3Mua4tSL9960Bc2vZP-B0a5qfNRIs", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "a80187ec-dc81-492d-9273-0d1c3ca385fa"}, {"timestamp": "2024-08-02T01:17:58.192Z", "date_only": false, "value": "2024-08-02T01:17:58.192Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-29895", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-02T01:17:58.192Z", "date_only": false, "value": "2024-08-02T01:17:58.192Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2024-29895", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-06T02:53:16Z", "date_only": false, "value": "2024-08-06T02:53:16+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2024-29895", "field": "timestamps.asserted_at", "uuid": "9dc744c5-b7d0-4d02-a2e1-7f9473808939", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-08-06T02:53:16Z", "date_only": false, "value": "2024-08-06T02:53:16+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2024-29895", "field": "timestamps.first_seen_at", "uuid": "9dc744c5-b7d0-4d02-a2e1-7f9473808939", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-01-24T00:00:00Z", "date_only": false, "value": "2025-01-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-24)", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "b24acd99-4890-42fe-8cfd-8ba566cf02ff"}, {"timestamp": "2025-02-02T00:00:00Z", "date_only": false, "value": "2025-02-02T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-02)", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "2dc5bb50-9bbd-4e74-9249-b691608b8a40"}, {"timestamp": "2025-02-03T00:00:00Z", "date_only": false, "value": "2025-02-03T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-03)", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "d9909a6e-7641-4444-961f-0079496c5b77"}, {"timestamp": "2025-02-06T00:00:00Z", "date_only": false, "value": "2025-02-06T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-06)", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "4106a235-9f3f-45f2-84e7-bb1edc8efe8e"}, {"timestamp": "2025-02-08T00:00:00Z", "date_only": false, "value": "2025-02-08T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-08)", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "0f5fd6ea-2d6b-4054-b37b-76295323ef68"}, {"timestamp": "2025-03-02T00:00:00Z", "date_only": false, "value": "2025-03-02T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-02)", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "dd616dfd-1222-46b0-8056-c6bd6ab87798"}, {"timestamp": "2025-03-06T00:00:00Z", "date_only": false, "value": "2025-03-06T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-06)", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "4c48670c-ff0c-4c90-9fe5-4a8c1b2b1253"}, {"timestamp": "2025-03-11T16:18:40Z", "date_only": false, "value": "2025-03-11T16:18:40.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/10519", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "3d187256-d9dd-469e-a35b-e95c9d8210c3", "content": "#exploit\n1. CVE-2024-29895:\nCacti RCE PoC\nhttps://github.com/Stuub/CVE-2024-29895-CactiRCE-PoC\n\n2. Exploit out-of-bound CloneObjectIC type confusion\nhttps://cwresearchlab.co.kr/entry/Issue-1472121-Exploit-out-of-bound-CloneObjectIC-type-confusion", "url": "https://t.me/CyberSecurityTechnologies/10519"}, {"timestamp": "2025-03-21T00:00:00Z", "date_only": false, "value": "2025-03-21T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-21)", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "83a3ead0-b5d2-4f94-9a28-e35afb9465eb"}, {"timestamp": "2025-04-23T00:00:00Z", "date_only": false, "value": "2025-04-23T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-23)", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "25e3c2b1-5024-4626-9413-7587b0f5304d"}, {"timestamp": "2025-05-11T00:00:00Z", "date_only": false, "value": "2025-05-11T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-11)", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "eabc9e5f-48e8-4c0c-a25e-9c2b2b082873"}, {"timestamp": "2025-05-14T00:00:00Z", "date_only": false, "value": "2025-05-14T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-14)", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "7ccc8a49-9687-4b4d-8188-28a5724172d1"}, {"timestamp": "2025-05-15T00:00:00Z", "date_only": false, "value": "2025-05-15T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-15)", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "e751a571-ff50-4ea9-b0ef-693207fd18f7"}, {"timestamp": "2025-05-18T00:00:00Z", "date_only": false, "value": "2025-05-18T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-18)", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "2c4dcf13-055b-40c0-8407-c659629b46f3"}, {"timestamp": "2025-05-24T00:00:00Z", "date_only": false, "value": "2025-05-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-24)", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "084ac107-6580-4558-ab89-e677ce98f843"}, {"timestamp": "2025-05-27T00:00:00Z", "date_only": false, "value": "2025-05-27T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-27)", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "aa762104-5184-4fde-9546-4fac800a06d5"}, {"timestamp": "2025-06-21T00:00:00Z", "date_only": false, "value": "2025-06-21T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-21)", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "0224f850-e9b7-443f-bef8-b93204e4cfb6"}, {"timestamp": "2025-06-23T00:00:00Z", "date_only": false, "value": "2025-06-23T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-23)", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "de62a7cd-41dd-4c47-99b1-0143d95cb177"}, {"timestamp": "2025-06-26T00:00:00Z", "date_only": false, "value": "2025-06-26T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2024-29895", "field": "timestamps.asserted_at", "uuid": "663637a0-5cf6-4969-9eac-301d73f80370", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-06-26T00:00:00Z", "date_only": false, "value": "2025-06-26T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2024-29895", "field": "evidence.0.details.added_date", "uuid": "663637a0-5cf6-4969-9eac-301d73f80370", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-06-26T00:00:00Z", "date_only": false, "value": "2025-06-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-26)", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "0bbd06a7-ef4c-4d15-926d-3ca01f9735c4"}, {"timestamp": "2025-06-26T00:00:00Z", "date_only": false, "value": "2025-06-26T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2024-29895", "field": "timestamps.first_seen_at", "uuid": "663637a0-5cf6-4969-9eac-301d73f80370", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-06-26T00:00:00Z", "date_only": false, "value": "2025-06-26T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2024-29895", "field": "status.status_updated_at", "uuid": "663637a0-5cf6-4969-9eac-301d73f80370", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-06-29T00:00:00Z", "date_only": false, "value": "2025-06-29T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-29)", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "205f220e-e1c8-4f9d-98d3-4f9e970d29e0"}, {"timestamp": "2025-06-30T00:00:00Z", "date_only": false, "value": "2025-06-30T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-30)", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "3aa29462-2320-4390-a74e-1d69f7ce709a"}, {"timestamp": "2025-08-04T00:00:00Z", "date_only": false, "value": "2025-08-04T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-04)", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "82c28f48-d187-464a-bfe8-2e5153b24e2c"}, {"timestamp": "2025-08-19T00:00:00Z", "date_only": false, "value": "2025-08-19T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-19)", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "b5b48872-e784-4069-b05a-acb175ffc2c3"}, {"timestamp": "2025-09-08T00:00:00Z", "date_only": false, "value": "2025-09-08T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-08)", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "daeab75f-8820-4719-bc55-f4b213608150"}, {"timestamp": "2025-09-12T00:00:00Z", "date_only": false, "value": "2025-09-12T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-12)", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "a69ca863-9aa4-4c00-8255-baa61a2931af"}, {"timestamp": "2025-09-15T00:00:00Z", "date_only": false, "value": "2025-09-15T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-15)", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "63aab985-3d0c-47f2-96b3-736eece01a35"}, {"timestamp": "2025-09-18T00:00:00Z", "date_only": false, "value": "2025-09-18T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-18)", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "6a7dbdc3-6cca-4cdb-a36e-9f199132da18"}, {"timestamp": "2025-09-20T00:00:00Z", "date_only": false, "value": "2025-09-20T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-20)", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "827fea89-3c51-4e62-850b-8b51d75db244"}, {"timestamp": "2025-09-27T00:00:00Z", "date_only": false, "value": "2025-09-27T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-27)", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "b92e8a02-b92f-4123-a133-3a671a5af2e3"}, {"timestamp": "2025-10-05T00:00:00Z", "date_only": false, "value": "2025-10-05T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-05)", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "3134527e-b4b6-4105-8175-a28a7788e54f"}, {"timestamp": "2025-10-06T00:00:00Z", "date_only": false, "value": "2025-10-06T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-06)", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "934e65e6-bde1-4e63-94d0-37fd6bf3dc6f"}, {"timestamp": "2025-10-10T00:00:00Z", "date_only": false, "value": "2025-10-10T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-10)", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "6e33548b-4594-416d-af7d-52f74a032976"}, {"timestamp": "2025-10-11T00:00:00Z", "date_only": false, "value": "2025-10-11T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-11)", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "3d950e6d-7ba9-4ea3-898c-42cfe31de15f"}, {"timestamp": "2025-11-05T00:00:00Z", "date_only": false, "value": "2025-11-05T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-05)", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "a0854737-e235-4eb2-b879-615d149946da"}, {"timestamp": "2026-02-28T00:00:00Z", "date_only": false, "value": "2026-02-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-28)", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "c6f171f5-afed-4503-b449-b6fbcee64004"}, {"timestamp": "2026-03-14T00:00:00Z", "date_only": false, "value": "2026-03-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-14)", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "3fcf6d7a-3b89-4fcb-af1f-bf38c22358d8"}, {"timestamp": "2026-03-25T00:00:00Z", "date_only": false, "value": "2026-03-25T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-25)", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "37831a6c-c93d-4d26-942c-932e16483220"}, {"timestamp": "2026-04-06T00:00:00Z", "date_only": false, "value": "2026-04-06T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-06)", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "da1072a0-6971-46cd-8571-3d0ec9b6476c"}, {"timestamp": "2026-04-10T00:00:00Z", "date_only": false, "value": "2026-04-10T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-10)", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "b7625a6d-909d-421f-8d1e-f133e665b0fc"}, {"timestamp": "2026-06-08T00:00:00Z", "date_only": false, "value": "2026-06-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-08)", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "1d9bd475-76c2-48d5-962a-ab1a5ae98b2e"}, {"timestamp": "2026-06-17T07:23:19.417Z", "date_only": false, "value": "2026-06-17T07:23:19.417", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-29895", "record": "FKIE_CVE-2024-29895", "field": "lastModified"}, {"timestamp": "2026-06-19T12:46:06.441Z", "date_only": false, "value": "2026-06-19T12:46:06.441798Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4259b4bd-ece3-444e-9647-28649348495f", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "19cffb2e-d49a-4faa-8c9a-d31487db40d2", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4259b4bd-ece3-444e-9647-28649348495f"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2024-29895", "field": "timestamps.recorded_at", "uuid": "663637a0-5cf6-4969-9eac-301d73f80370", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:03:30.191Z", "date_only": false, "value": "2026-06-23T14:03:30.191201Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/663637a0-5cf6-4969-9eac-301d73f80370", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "e95ab364-0152-472f-a7e2-4102012e38df", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/663637a0-5cf6-4969-9eac-301d73f80370"}, {"timestamp": "2026-06-28T10:00:06.181Z", "date_only": false, "value": "2026-06-28T10:00:06.181091Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-27)", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "a2d9814e-a0fa-4a33-9902-171ae972a894"}, {"timestamp": "2026-06-30T09:23:31.352Z", "date_only": false, "value": "2026-06-30T09:23:31.352527Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9dc744c5-b7d0-4d02-a2e1-7f9473808939", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "f27e6a79-3db6-4976-ba43-dda74e471328", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9dc744c5-b7d0-4d02-a2e1-7f9473808939"}, {"timestamp": "2026-07-06T11:00:07.492Z", "date_only": false, "value": "2026-07-06T11:00:07.492382Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/230", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "bb17d24c-c595-4240-889d-e1afbfb26e7f", "content": "Cacti \u043f\u043e\u0434 \u0443\u0434\u0430\u0440\u043e\u043c: 12 \u0431\u0440\u0435\u0448\u0435\u0439 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u043f\u0443\u0442\u0438 \u0434\u043b\u044f \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u0445 \u0430\u0442\u0430\u043a\n\n\ud83d\udd25 \u0412 Cacti \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e 12 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 2 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435, \u0432\u0435\u0434\u0443\u0449\u0438\u0435 \u043a \u0420\u0412\u041a.  \u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0431\u0440\u0435\u0448\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u043a\u043e\u0434 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\ud83d\udcdd \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-25641 \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u0444\u0430\u0439\u043b. \u0410 CVE-2024-29895 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u043c\u0430\u043d\u0434 \u0447\u0435\u0440\u0435\u0437 PHP \u043f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0439 \u043e\u043f\u0446\u0438\u0438. \n\n\ud83d\ude30 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0439 \u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432. PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0443\u0436\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044cCacti #\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435\u0431\u0430\u0433\u0438 #\u0441\u0440\u043e\u0447\u043d\u043e\u043e\u0431\u043d\u043e\u0432\u0438\u0442\u0435\u0441\u044c #\u0440\u0438\u0441\u043a\u0420\u0412\u041a\n\n@ZerodayAlert", "url": "https://t.me/ZerodayAlert/230"}, {"timestamp": "2026-07-12T00:00:17.960Z", "date_only": false, "value": "2026-07-12T00:00:17.960962Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ZerodayAlert/230", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "2b2a10fc-17ae-42b5-897f-f06bfd10ae38", "content": "Cacti \u043f\u043e\u0434 \u0443\u0434\u0430\u0440\u043e\u043c: 12 \u0431\u0440\u0435\u0448\u0435\u0439 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u043f\u0443\u0442\u0438 \u0434\u043b\u044f \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u0445 \u0430\u0442\u0430\u043a\n\n\ud83d\udd25 \u0412 Cacti \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e 12 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 2 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435, \u0432\u0435\u0434\u0443\u0449\u0438\u0435 \u043a \u0420\u0412\u041a.  \u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0431\u0440\u0435\u0448\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u043a\u043e\u0434 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\ud83d\udcdd \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-25641 \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u0444\u0430\u0439\u043b. \u0410 CVE-2024-29895 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u043c\u0430\u043d\u0434 \u0447\u0435\u0440\u0435\u0437 PHP \u043f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0439 \u043e\u043f\u0446\u0438\u0438. \n\n\ud83d\ude30 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0439 \u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432. PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0443\u0436\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044cCacti #\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435\u0431\u0430\u0433\u0438 #\u0441\u0440\u043e\u0447\u043d\u043e\u043e\u0431\u043d\u043e\u0432\u0438\u0442\u0435\u0441\u044c #\u0440\u0438\u0441\u043a\u0420\u0412\u041a\n\n@ZerodayAlert", "url": "https://t.me/ZerodayAlert/230"}, {"timestamp": "2026-07-19T00:00:00Z", "date_only": false, "value": "2026-07-19T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2024-29895", "field": "timestamps.last_seen_at", "uuid": "9dc744c5-b7d0-4d02-a2e1-7f9473808939", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-19T00:00:00Z", "date_only": true, "value": "2026-07-19", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2024-29895", "field": "evidence.0.details.observation_date", "uuid": "9dc744c5-b7d0-4d02-a2e1-7f9473808939", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-19T00:00:00Z", "date_only": false, "value": "2026-07-19T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2024-29895", "field": "status.status_updated_at", "uuid": "9dc744c5-b7d0-4d02-a2e1-7f9473808939", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-21T01:00:01Z", "date_only": false, "value": "2026-07-21T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2024-29895", "field": "timestamps.recorded_at", "uuid": "9dc744c5-b7d0-4d02-a2e1-7f9473808939", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-26T02:00:22.273Z", "date_only": false, "value": "2026-07-26T02:00:22.273119Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberwarehouse/453", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "fb914143-91a1-446b-9361-a352021e1cce", "content": "CVE-2024-29895 cacti\n\nCommand injection in cmd_realtime.php \n\nhttps://en.fofa.info/result?qbase64=YXBwPSJDYWN0aS1Nb25pdG9yaW5nIg%3D%3D\n\nusage:\nhttp://localhost/cacti/cmd_realtime.php?1+1&&calc.exe+1+1+1\n\nPrivate: @ExploitServiceBot\nMalware Shop: @MalwareShopBot\nAll projects @MalwareLinks\n\nAngel Drainer: https://t.me/+p2mOn-eGo4UzMTEx\nSupport: @angelsupport", "url": "https://t.me/cyberwarehouse/453"}, {"timestamp": "2026-07-27T00:00:21.226Z", "date_only": false, "value": "2026-07-27T00:00:21.226653Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cyberwarehouse/453", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "7e80417b-ef77-4079-b791-e387712d9cc9", "content": "CVE-2024-29895 cacti\n\nCommand injection in cmd_realtime.php \n\nhttps://en.fofa.info/result?qbase64=YXBwPSJDYWN0aS1Nb25pdG9yaW5nIg%3D%3D\n\nusage:\nhttp://localhost/cacti/cmd_realtime.php?1+1&&calc.exe+1+1+1\n\nPrivate: @ExploitServiceBot\nMalware Shop: @MalwareShopBot\nAll projects @MalwareLinks\n\nAngel Drainer: https://t.me/+p2mOn-eGo4UzMTEx\nSupport: @angelsupport", "url": "https://t.me/cyberwarehouse/453"}, {"timestamp": "2026-08-04T13:00:17.900Z", "date_only": false, "value": "2026-08-04T13:00:17.900324Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pentestnotes/33", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "c23643cf-8beb-4e6f-ae75-abef4c7c6346", "content": "CVE-2024-29895 cacti\n*\nCommand injection in cmd_realtime.php \n*\nfofa link\n* \nusage:\nhttp://localhost/cacti/cmd_realtime.php?1+1&&calc.exe+1+1+1\n\n#net", "url": "https://t.me/pentestnotes/33"}, {"timestamp": "2026-08-06T00:01:00.968Z", "date_only": false, "value": "2026-08-06T00:01:00.968039Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/pentestnotes/33", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "d5b4c086-20a6-4903-be4c-e5db64c13663", "content": "CVE-2024-29895 cacti\n*\nCommand injection in cmd_realtime.php \n*\nfofa link\n* \nusage:\nhttp://localhost/cacti/cmd_realtime.php?1+1&&calc.exe+1+1+1\n\n#net", "url": "https://t.me/pentestnotes/33"}, {"timestamp": "2026-08-12T10:00:06.323Z", "date_only": false, "value": "2026-08-12T10:00:06.323295Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-11)", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "dba4615d-bf06-49fc-a3a3-069e19d2eb53"}, {"timestamp": "2026-08-16T10:00:07.978Z", "date_only": false, "value": "2026-08-16T10:00:07.978312Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-15)", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "de1da127-0508-421e-9239-a6ebeed699b1"}, {"timestamp": "2026-10-04T00:00:00Z", "date_only": false, "value": "2026-10-04T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-10-04)", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "fdaa53a5-23df-4e42-8b32-ec869b49f490"}, {"timestamp": "2026-10-07T00:00:00Z", "date_only": false, "value": "2026-10-07T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-10-07)", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "8a6b7831-e67b-4996-bf6b-d09b8fadcf85"}, {"timestamp": "2026-10-10T00:00:00Z", "date_only": false, "value": "2026-10-10T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-10-10)", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "280b7328-5da5-47f2-8c9a-8e1af00fc915"}, {"timestamp": "2026-10-17T00:00:00Z", "date_only": false, "value": "2026-10-17T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-10-17)", "record": "CVE-2024-29895", "field": "creation_timestamp", "uuid": "31e13daa-d73b-41e5-ad0c-4a7fc74364ed"}, {"timestamp": "2026-10-17T09:23:57Z", "date_only": false, "value": "2026-10-17T09:23:57Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2024-29895", "record": "UBUNTU-CVE-2024-29895", "field": "modified"}]}