https://vulnerability.circl.lu/sightings/feed 2026-09-17T09:01:37.646897+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/be443f10-7be6-4688-969c-e57142ff0c89/export 2026-09-17T09:01:37.671063+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "be443f10-7be6-4688-969c-e57142ff0c89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-49415", "type": "seen", "source": "https://t.me/Daw_alfada_Information_Security/13", "content": "\ud83d\udd12 \u062b\u063a\u0631\u0629 \u062e\u0637\u064a\u0631\u0629 \u0641\u064a \u0623\u062c\u0647\u0632\u0629 \u0633\u0627\u0645\u0633\u0648\u0646\u062c\n\n\u0643\u0634\u0641 \u0628\u0627\u062d\u062b \u0645\u0646 Google Project Zero \u0639\u0646 \u062b\u063a\u0631\u0629 Zero-Click \u062e\u0637\u064a\u0631\u0629 (CVE-2024-49415) \u062a\u0624\u062b\u0631 \u0639\u0644\u0649 \u0623\u062c\u0647\u0632\u0629 \u0633\u0627\u0645\u0633\u0648\u0646\u062c \u0628\u0623\u0646\u062f\u0631\u0648\u064a\u062f 12-14. \u064a\u0645\u0643\u0646 \u0644\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0627 \u0639\u0628\u0631 Google Messages \u0639\u0646\u062f \u062a\u0641\u0639\u064a\u0644 RCS.\n\n\ud83d\udee1 \u0627\u0644\u062d\u0644:\n\u062a\u062d\u062f\u064a\u062b \u062f\u064a\u0633\u0645\u0628\u0631 2024 \u0645\u0646 \u0633\u0627\u0645\u0633\u0648\u0646\u062c \u064a\u0639\u0627\u0644\u062c \u0627\u0644\u062b\u063a\u0631\u0629. \u0646\u0646\u0635\u062d \u0628\u062a\u062d\u062f\u064a\u062b \u0623\u062c\u0647\u0632\u062a\u0643\u0645 \u0641\u0648\u0631\u064b\u0627!", "creation_timestamp": "2026-09-15T00:00:20.205189Z"} 2026-09-15T00:00:20.205189+00:00 https://vulnerability.circl.lu/sighting/cb89da9c-7304-4bdf-b42d-09332bbf86f0/export 2026-09-17T09:01:37.673226+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "cb89da9c-7304-4bdf-b42d-09332bbf86f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-49415", "type": "seen", "source": "https://t.me/Daw_alfada_Information_Security/13", "content": "\ud83d\udd12 \u062b\u063a\u0631\u0629 \u062e\u0637\u064a\u0631\u0629 \u0641\u064a \u0623\u062c\u0647\u0632\u0629 \u0633\u0627\u0645\u0633\u0648\u0646\u062c\n\n\u0643\u0634\u0641 \u0628\u0627\u062d\u062b \u0645\u0646 Google Project Zero \u0639\u0646 \u062b\u063a\u0631\u0629 Zero-Click \u062e\u0637\u064a\u0631\u0629 (CVE-2024-49415) \u062a\u0624\u062b\u0631 \u0639\u0644\u0649 \u0623\u062c\u0647\u0632\u0629 \u0633\u0627\u0645\u0633\u0648\u0646\u062c \u0628\u0623\u0646\u062f\u0631\u0648\u064a\u062f 12-14. \u064a\u0645\u0643\u0646 \u0644\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0627 \u0639\u0628\u0631 Google Messages \u0639\u0646\u062f \u062a\u0641\u0639\u064a\u0644 RCS.\n\n\ud83d\udee1 \u0627\u0644\u062d\u0644:\n\u062a\u062d\u062f\u064a\u062b \u062f\u064a\u0633\u0645\u0628\u0631 2024 \u0645\u0646 \u0633\u0627\u0645\u0633\u0648\u0646\u062c \u064a\u0639\u0627\u0644\u062c \u0627\u0644\u062b\u063a\u0631\u0629. \u0646\u0646\u0635\u062d \u0628\u062a\u062d\u062f\u064a\u062b \u0623\u062c\u0647\u0632\u062a\u0643\u0645 \u0641\u0648\u0631\u064b\u0627!", "creation_timestamp": "2026-09-14T15:00:03.566878Z"} 2026-09-14T15:00:03.566878+00:00 https://vulnerability.circl.lu/sighting/5bd8ad93-06a8-4523-87fe-e2c5bea3ba19/export 2026-09-17T09:01:37.673362+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "5bd8ad93-06a8-4523-87fe-e2c5bea3ba19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4956", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/137611", "content": "POC\u200a\u2014\u200aCVE-2024\u20134956 -Unauthenticated Path Traversal\nhttps://medium.com/@verylazytech/poc-cve-2024-4956-unauthenticated-path-traversal-f24b1a595e0e?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-04T00:00:38.865049Z"} 2026-09-04T00:00:38.865049+00:00 https://vulnerability.circl.lu/sighting/59e2cb52-bd06-440a-8e4f-17ee5d5e408e/export 2026-09-17T09:01:37.673472+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "59e2cb52-bd06-440a-8e4f-17ee5d5e408e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4956", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/137613", "content": "POC\u200a\u2014\u200aCVE-2024\u20134956\u200a\u2014\u200aNexus Repository Manager 3 Unauthenticated Path TraversalContinue reading on Medium \u00bb (https://medium.com/@verylazytech/poc-cve-2024-4956-unauthenticated-path-traversal-f24b1a595e0e?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-04T00:00:38.816257Z"} 2026-09-04T00:00:38.816257+00:00 https://vulnerability.circl.lu/sighting/0bf5fb14-22ad-4b0d-8a37-31a32b3e6c1c/export 2026-09-17T09:01:37.673581+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "0bf5fb14-22ad-4b0d-8a37-31a32b3e6c1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4956", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/137369", "content": "CVE-2024\u20134956: UNAUTHENTICATED PATH TRAVERSAL IN NEXUS REPOSITORY MANAGER 3\nhttps://codewithvamp.medium.com/cve-2024-4956-unauthenticated-path-traversal-in-nexus-repository-manager-3-b4e811ad7e37?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-04T00:00:38.728974Z"} 2026-09-04T00:00:38.728974+00:00 https://vulnerability.circl.lu/sighting/14288d1c-b9ca-4217-9901-e673b1a03c26/export 2026-09-17T09:01:37.673682+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "14288d1c-b9ca-4217-9901-e673b1a03c26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4956", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/137371", "content": "The Nexus Repository Manager, a crucial tool for managing, storing, and distributing development artifacts, has recently been found to\u2026Continue reading on Medium \u00bb (https://codewithvamp.medium.com/cve-2024-4956-unauthenticated-path-traversal-in-nexus-repository-manager-3-b4e811ad7e37?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-04T00:00:38.682501Z"} 2026-09-04T00:00:38.682501+00:00 https://vulnerability.circl.lu/sighting/24cabfe9-f0d2-4231-a9e8-32dd9092b1e6/export 2026-09-17T09:01:37.673779+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "24cabfe9-f0d2-4231-a9e8-32dd9092b1e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4956", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/137525", "content": "CVE-2024-4956 (Sonatype Repo 3) Exploitation Pack\nhttps://www.reddit.com/r/redteamsec/comments/1db6q4f/cve20244956_sonatype_repo_3_exploitation_pack/\n\nThe vulnerability allows unauthenticated remote attackers to read system files. The repository comes included with 155 known existing OrientDB .pcl file paths which contain data from hashed Apache Shiro 1 credentials to encrypted API keys and will automate writing found files to files on disk locally for analysis. Led to the creation of another repository linked in the shared repository above called \u201cShiro1Extractor\u201d which will extract Apache Shiro 1 hashes from OrientDB .pcl files. Led to the creation of an Apache Shiro 1 Hashcat module which is again linked in the repository I shared above. The module has a tested speed on a NVIDIA RTX 3090 of 2,663,100 hashes per second, with individual computation taking 202.11ms per batch. Instructions for using the module are available in the repository shared above. By chaining the following together, you may be able to hit some serious pay dirt on your next assessment! Smash and grab while instances are still vulnerable! Blog coming soon! submitted by /u/meterpretersession1 (https://www.reddit.com/user/meterpretersession1) \n [link] (https://github.com/fin3ss3g0d/CVE-2024-4956) [comments] (https://www.reddit.com/r/redteamsec/comments/1db6q4f/cve20244956_sonatype_repo_3_exploitation_pack/)", "creation_timestamp": "2026-09-04T00:00:19.933485Z"} 2026-09-04T00:00:19.933485+00:00 https://vulnerability.circl.lu/sighting/abd2ca82-6df8-47ef-9d61-427c32d24925/export 2026-09-17T09:01:37.673882+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "abd2ca82-6df8-47ef-9d61-427c32d24925", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4956", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/137611", "content": "POC\u200a\u2014\u200aCVE-2024\u20134956 -Unauthenticated Path Traversal\nhttps://medium.com/@verylazytech/poc-cve-2024-4956-unauthenticated-path-traversal-f24b1a595e0e?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-03T20:00:06.523318Z"} 2026-09-03T20:00:06.523318+00:00 https://vulnerability.circl.lu/sighting/decd7860-0783-44a7-a54b-45dbacb27e3c/export 2026-09-17T09:01:37.673976+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "decd7860-0783-44a7-a54b-45dbacb27e3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4956", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/137613", "content": "POC\u200a\u2014\u200aCVE-2024\u20134956\u200a\u2014\u200aNexus Repository Manager 3 Unauthenticated Path TraversalContinue reading on Medium \u00bb (https://medium.com/@verylazytech/poc-cve-2024-4956-unauthenticated-path-traversal-f24b1a595e0e?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-03T20:00:06.458139Z"} 2026-09-03T20:00:06.458139+00:00 https://vulnerability.circl.lu/sighting/f3c55478-09c7-41f3-908f-bb6cdc4dbb29/export 2026-09-17T09:01:37.674077+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "f3c55478-09c7-41f3-908f-bb6cdc4dbb29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4956", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/137369", "content": "CVE-2024\u20134956: UNAUTHENTICATED PATH TRAVERSAL IN NEXUS REPOSITORY MANAGER 3\nhttps://codewithvamp.medium.com/cve-2024-4956-unauthenticated-path-traversal-in-nexus-repository-manager-3-b4e811ad7e37?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-03T20:00:06.320569Z"} 2026-09-03T20:00:06.320569+00:00