https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 17 Sep 2026 08:23:03 +0000 https://vulnerability.circl.lu/sighting/91d48698-3ab7-4bab-b0ea-d857abb16c0b/export {"uuid": "91d48698-3ab7-4bab-b0ea-d857abb16c0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5980", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv6nkbykmg2f", "content": "CVE-2024-5980 - lightning\nA bug in PyTorch Lightning's API allows attackers to upload malicious files that can be used to steal or damage sensitive data. This happens when the plugin server is running. Users\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lightning #pip #CVE #infosec", "creation_timestamp": "2026-09-10T18:10:04.374638Z"} {"uuid": "91d48698-3ab7-4bab-b0ea-d857abb16c0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5980", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv6nkbykmg2f", "content": "CVE-2024-5980 - lightning\nA bug in PyTorch Lightning's API allows attackers to upload malicious files that can be used to steal or damage sensitive data. This happens when the plugin server is running. Users\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lightning #pip #CVE #infosec", "creation_timestamp": "2026-09-10T18:10:04.374638Z"} https://vulnerability.circl.lu/sighting/91d48698-3ab7-4bab-b0ea-d857abb16c0b/export Thu, 10 Sep 2026 18:10:04 +0000 https://vulnerability.circl.lu/sighting/97f2c459-8953-4192-a0d0-80c8fcea7cfc/export {"uuid": "97f2c459-8953-4192-a0d0-80c8fcea7cfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_givewp_rce.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"Villu Orav\", \"EQSTLab\", \"cuokon\", \"Julien Ahrens\", \"Valentin Lobstein\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"The GiveWP Donation Plugin and Fundraising Platform for WordPress, in all versions up to and including 3.16.1,\\n is vulnerable to a PHP Object Injection (POI) attack that allows unauthenticated arbitrary code execution.\\n Although a patch was introduced in version 3.14.2, it was incorrect and can be bypassed.\\n This means the vulnerability remains exploitable in subsequent versions due to the ineffective patch.\", \"disclosure_date\": \"2024-08-25\", \"fullname\": \"exploit/multi/http/wp_givewp_rce\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:04 +0000\", \"name\": \"GiveWP Unauthenticated Donation Process Exploit\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/wp_givewp_rce.rb\", \"platform\": \"Linux,Unix,Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/wp_givewp_rce\", \"references\": [\"CVE-2024-5932\", \"URL-https://github.com/EQSTLab/CVE-2024-5932\", \"URL-https://www.rcesecurity.com/2024/08/wordpress-givewp-pop-to-rce-cve-2024-5932\", \"URL-https://www.wordfence.com/blog/2024/08/4998-bounty-awarded-and-100000-wordpress-sites-protected-against-unauthenticated-remote-code-execution-vulnerability-patched-in-givewp-wordpress-plugin\", \"CVE-2024-8353\", \"URL-https://github.com/EQSTLab/CVE-2024-8353\", \"URL-https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/give/givewp-donation-plugin-and-fundraising-platform-3161-unauthenticated-php-object-injection\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Unix/Linux Command Shell\", \"Windows Command Shell\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:21.535818Z"} {"uuid": "97f2c459-8953-4192-a0d0-80c8fcea7cfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5932", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_givewp_rce.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"Villu Orav\", \"EQSTLab\", \"cuokon\", \"Julien Ahrens\", \"Valentin Lobstein\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"The GiveWP Donation Plugin and Fundraising Platform for WordPress, in all versions up to and including 3.16.1,\\n is vulnerable to a PHP Object Injection (POI) attack that allows unauthenticated arbitrary code execution.\\n Although a patch was introduced in version 3.14.2, it was incorrect and can be bypassed.\\n This means the vulnerability remains exploitable in subsequent versions due to the ineffective patch.\", \"disclosure_date\": \"2024-08-25\", \"fullname\": \"exploit/multi/http/wp_givewp_rce\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:04 +0000\", \"name\": \"GiveWP Unauthenticated Donation Process Exploit\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/wp_givewp_rce.rb\", \"platform\": \"Linux,Unix,Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/wp_givewp_rce\", \"references\": [\"CVE-2024-5932\", \"URL-https://github.com/EQSTLab/CVE-2024-5932\", \"URL-https://www.rcesecurity.com/2024/08/wordpress-givewp-pop-to-rce-cve-2024-5932\", \"URL-https://www.wordfence.com/blog/2024/08/4998-bounty-awarded-and-100000-wordpress-sites-protected-against-unauthenticated-remote-code-execution-vulnerability-patched-in-givewp-wordpress-plugin\", \"CVE-2024-8353\", \"URL-https://github.com/EQSTLab/CVE-2024-8353\", \"URL-https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/give/givewp-donation-plugin-and-fundraising-platform-3161-unauthenticated-php-object-injection\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Unix/Linux Command Shell\", \"Windows Command Shell\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:21.535818Z"} https://vulnerability.circl.lu/sighting/97f2c459-8953-4192-a0d0-80c8fcea7cfc/export Tue, 08 Sep 2026 06:50:21 +0000 https://vulnerability.circl.lu/sighting/55ec5dd3-c9bb-4a59-9eab-534203afb2f7/export {"uuid": "55ec5dd3-c9bb-4a59-9eab-534203afb2f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5910", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/paloalto_expedition_rce.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"Michael Heinzl\", \"Zach Hanley\", \"Enrique Castillo\", \"Brian Hysell\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"Obtain remote code execution in Palo Alto Expedition version 1.2.91 and below.\\n The first vulnerability, CVE-2024-5910, allows to reset the password of the admin user, and the second vulnerability, CVE-2024-9464, is an authenticated OS command injection. In a default installation, commands will get executed in the context of www-data.\\n When credentials are provided, this module will only exploit the second vulnerability. If no credentials are provided, the module will first try to reset the admin password and then perform the OS command injection.\", \"disclosure_date\": \"2024-10-09\", \"fullname\": \"exploit/linux/http/paloalto_expedition_rce\", \"is_install_path\": true, \"mod_time\": \"2026-06-02 10:32:30 +0000\", \"name\": \"Palo Alto Expedition Remote Code Execution (CVE-2024-5910 and CVE-2024-9464)\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"artifacts-on-disk\", \"account-lockouts\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/paloalto_expedition_rce.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/paloalto_expedition_rce\", \"references\": [\"URL-https://www.horizon3.ai/attack-research/palo-alto-expedition-from-n-day-to-full-compromise/\", \"URL-https://security.paloaltonetworks.com/PAN-SA-2024-0010\", \"URL-https://security.paloaltonetworks.com/CVE-2024-5910\", \"URL-https://attackerkb.com/topics/JwTzQJuBmn/cve-2024-5910\", \"URL-https://attackerkb.com/topics/ky1MIrne9r/cve-2024-9464\", \"CVE-2024-5910\", \"EDB-52129\", \"CVE-2024-24809\"], \"rport\": 443, \"session_types\": false, \"targets\": [\"Linux Command\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:50.197365Z"} {"uuid": "55ec5dd3-c9bb-4a59-9eab-534203afb2f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5910", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/paloalto_expedition_rce.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"Michael Heinzl\", \"Zach Hanley\", \"Enrique Castillo\", \"Brian Hysell\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"Obtain remote code execution in Palo Alto Expedition version 1.2.91 and below.\\n The first vulnerability, CVE-2024-5910, allows to reset the password of the admin user, and the second vulnerability, CVE-2024-9464, is an authenticated OS command injection. In a default installation, commands will get executed in the context of www-data.\\n When credentials are provided, this module will only exploit the second vulnerability. If no credentials are provided, the module will first try to reset the admin password and then perform the OS command injection.\", \"disclosure_date\": \"2024-10-09\", \"fullname\": \"exploit/linux/http/paloalto_expedition_rce\", \"is_install_path\": true, \"mod_time\": \"2026-06-02 10:32:30 +0000\", \"name\": \"Palo Alto Expedition Remote Code Execution (CVE-2024-5910 and CVE-2024-9464)\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"artifacts-on-disk\", \"account-lockouts\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/paloalto_expedition_rce.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/paloalto_expedition_rce\", \"references\": [\"URL-https://www.horizon3.ai/attack-research/palo-alto-expedition-from-n-day-to-full-compromise/\", \"URL-https://security.paloaltonetworks.com/PAN-SA-2024-0010\", \"URL-https://security.paloaltonetworks.com/CVE-2024-5910\", \"URL-https://attackerkb.com/topics/JwTzQJuBmn/cve-2024-5910\", \"URL-https://attackerkb.com/topics/ky1MIrne9r/cve-2024-9464\", \"CVE-2024-5910\", \"EDB-52129\", \"CVE-2024-24809\"], \"rport\": 443, \"session_types\": false, \"targets\": [\"Linux Command\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:50.197365Z"} https://vulnerability.circl.lu/sighting/55ec5dd3-c9bb-4a59-9eab-534203afb2f7/export Tue, 08 Sep 2026 06:48:50 +0000 https://vulnerability.circl.lu/sighting/6903c281-0e2a-4910-bf98-464b341da817/export {"uuid": "6903c281-0e2a-4910-bf98-464b341da817", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5947", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/141730", "content": "Recently, during a routine security assessment, I uncovered a significant flaw in the Deep Sea Electronics DSE855 device. This\u2026Continue reading on Medium \u00bb (https://medium.com/@karthithehacker/the-discovery-of-cve-2024-5947-authentication-bypass-in-deep-sea-electronics-dse855-5fa2e89cbdfb?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-04T00:00:41.638977Z"} {"uuid": "6903c281-0e2a-4910-bf98-464b341da817", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5947", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/141730", "content": "Recently, during a routine security assessment, I uncovered a significant flaw in the Deep Sea Electronics DSE855 device. This\u2026Continue reading on Medium \u00bb (https://medium.com/@karthithehacker/the-discovery-of-cve-2024-5947-authentication-bypass-in-deep-sea-electronics-dse855-5fa2e89cbdfb?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-04T00:00:41.638977Z"} https://vulnerability.circl.lu/sighting/6903c281-0e2a-4910-bf98-464b341da817/export Fri, 04 Sep 2026 00:00:41 +0000 https://vulnerability.circl.lu/sighting/f0d0c9ab-53aa-43a3-a981-8921d0f6b4a5/export {"uuid": "f0d0c9ab-53aa-43a3-a981-8921d0f6b4a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5947", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/141806", "content": "The Discovery of CVE-2024\u20135947: Authentication Bypass in Deep Sea Electronics DSE855\n\nRecently, during a routine security assessment, I uncovered a significant flaw in the Deep Sea Electronics DSE855 device. This vulnerability, identified as CVE-2024\u20135947, pertains to an authentication bypass issue that allows unauthorized access to sensitive information. Here\u2019s how I discovered and explored this vulnerability.The Discovery While examining the target, I focused on the device\u2019s web-based interface and noticed a peculiar behavior. The Deep Sea Electronics DSE855 was exposing a configuration backup file at http://xxxxxxxxxx/Backup.bin. This file was accessible without any authentication, raising red flags.Understanding the Vulnerability Bug Name: Deep Sea Electronics DSE855 \u2014 Authentication Bypass Bug Priority: Medium Vulnerable URL: http://xxxxxxx/Backup.bin CVE Description: CVE-2024\u20135947 highlights a critical issue in the Deep Sea Electronics DSE855\u2019s configuration backup process. The vulnerability arises from a lack of authentication before accessing sensitive information stored in the backup file. This issue, documented as ZDI-CAN-22679, allows network-adjacent attackers to retrieve the backup file without proper authorization, potentially exposing sensitive data such as stored credentials.Impact The exposed backup file can contain sensitive configuration details that could be leveraged by an attacker to compromise the system further. Accessing this file could lead to unauthorized disclosure of credentials and other critical information, increasing the risk of a security breach.Steps to Reproduce To confirm the vulnerability, follow these steps:Access the Vulnerable URL: Open the URL in your browser: http://xxxxxxxxx/Backup.binObserve the File Access: If the backup file is accessible without any authentication, you can view or download its contents, confirming the vulnerability.Automating the Hunt To streamline the process, I built a Python tool specifically for detecting this vulnerability. You can install it using pip and automate your testing: ToolPOC: CVE-2024\u20135947on githubpip install CVE-2024-5947 CVE-2024-5947 --chatid To Check a Single URL:CVE-2024-5947 -u http://mytargetprogram.comTo Check a List of URLs:CVE-2024-5947 -i urls.txt Remediation: To mitigate this vulnerability, it is essential to remove the .bin file from the server and ensure that sensitive files are protected with proper authentication mechanisms. POC by: @karthithehacker Mail: contact@karthithehacker.com Website: https://www.karthithehacker.com/ If you\u2019re interested in our VAPT service, contact us at ceo@cappriciosec.com or contact@cappriciosec.com. For enrolling my cybersecurity and Bugbounty course, WhatsApp +91 82709 13635.Connect with me: Twitter: https://twitter.com/karthithehacker Instagram: https://www.instagram.com/karthithehacker/ LinkedIn: https://www.linkedin.com/in/karthikeyan--v/ Website: https://www.karthithehacker.com/ Github : https://github.com/karthi-the-hacker/ npmjs: https://www.npmjs.com/~karthithehacker Youtube: https://www.youtube.com/@karthi_the_hackerThank you Karthikeyan.V The Discovery of CVE-2024\u20135947: Authentication Bypass in Deep Sea Electronics DSE855 was originally published in InfoSec Write-ups on Medium, where people are continuing the conversation by highlighting and responding to this story.\nRead more...", "creation_timestamp": "2026-09-04T00:00:41.559385Z"} {"uuid": "f0d0c9ab-53aa-43a3-a981-8921d0f6b4a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5947", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/141806", "content": "The Discovery of CVE-2024\u20135947: Authentication Bypass in Deep Sea Electronics DSE855\n\nRecently, during a routine security assessment, I uncovered a significant flaw in the Deep Sea Electronics DSE855 device. This vulnerability, identified as CVE-2024\u20135947, pertains to an authentication bypass issue that allows unauthorized access to sensitive information. Here\u2019s how I discovered and explored this vulnerability.The Discovery While examining the target, I focused on the device\u2019s web-based interface and noticed a peculiar behavior. The Deep Sea Electronics DSE855 was exposing a configuration backup file at http://xxxxxxxxxx/Backup.bin. This file was accessible without any authentication, raising red flags.Understanding the Vulnerability Bug Name: Deep Sea Electronics DSE855 \u2014 Authentication Bypass Bug Priority: Medium Vulnerable URL: http://xxxxxxx/Backup.bin CVE Description: CVE-2024\u20135947 highlights a critical issue in the Deep Sea Electronics DSE855\u2019s configuration backup process. The vulnerability arises from a lack of authentication before accessing sensitive information stored in the backup file. This issue, documented as ZDI-CAN-22679, allows network-adjacent attackers to retrieve the backup file without proper authorization, potentially exposing sensitive data such as stored credentials.Impact The exposed backup file can contain sensitive configuration details that could be leveraged by an attacker to compromise the system further. Accessing this file could lead to unauthorized disclosure of credentials and other critical information, increasing the risk of a security breach.Steps to Reproduce To confirm the vulnerability, follow these steps:Access the Vulnerable URL: Open the URL in your browser: http://xxxxxxxxx/Backup.binObserve the File Access: If the backup file is accessible without any authentication, you can view or download its contents, confirming the vulnerability.Automating the Hunt To streamline the process, I built a Python tool specifically for detecting this vulnerability. You can install it using pip and automate your testing: ToolPOC: CVE-2024\u20135947on githubpip install CVE-2024-5947 CVE-2024-5947 --chatid To Check a Single URL:CVE-2024-5947 -u http://mytargetprogram.comTo Check a List of URLs:CVE-2024-5947 -i urls.txt Remediation: To mitigate this vulnerability, it is essential to remove the .bin file from the server and ensure that sensitive files are protected with proper authentication mechanisms. POC by: @karthithehacker Mail: contact@karthithehacker.com Website: https://www.karthithehacker.com/ If you\u2019re interested in our VAPT service, contact us at ceo@cappriciosec.com or contact@cappriciosec.com. For enrolling my cybersecurity and Bugbounty course, WhatsApp +91 82709 13635.Connect with me: Twitter: https://twitter.com/karthithehacker Instagram: https://www.instagram.com/karthithehacker/ LinkedIn: https://www.linkedin.com/in/karthikeyan--v/ Website: https://www.karthithehacker.com/ Github : https://github.com/karthi-the-hacker/ npmjs: https://www.npmjs.com/~karthithehacker Youtube: https://www.youtube.com/@karthi_the_hackerThank you Karthikeyan.V The Discovery of CVE-2024\u20135947: Authentication Bypass in Deep Sea Electronics DSE855 was originally published in InfoSec Write-ups on Medium, where people are continuing the conversation by highlighting and responding to this story.\nRead more...", "creation_timestamp": "2026-09-04T00:00:41.559385Z"} https://vulnerability.circl.lu/sighting/f0d0c9ab-53aa-43a3-a981-8921d0f6b4a5/export Fri, 04 Sep 2026 00:00:41 +0000 https://vulnerability.circl.lu/sighting/aeeb3166-0ae6-441b-8e81-ee481a02f4a3/export {"uuid": "aeeb3166-0ae6-441b-8e81-ee481a02f4a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5947", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/141728", "content": "The Discovery of CVE-2024\u20135947: Authentication Bypass in Deep Sea Electronics DSE855\nhttps://medium.com/@karthithehacker/the-discovery-of-cve-2024-5947-authentication-bypass-in-deep-sea-electronics-dse855-5fa2e89cbdfb?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-04T00:00:41.350587Z"} {"uuid": "aeeb3166-0ae6-441b-8e81-ee481a02f4a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5947", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/141728", "content": "The Discovery of CVE-2024\u20135947: Authentication Bypass in Deep Sea Electronics DSE855\nhttps://medium.com/@karthithehacker/the-discovery-of-cve-2024-5947-authentication-bypass-in-deep-sea-electronics-dse855-5fa2e89cbdfb?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-04T00:00:41.350587Z"} https://vulnerability.circl.lu/sighting/aeeb3166-0ae6-441b-8e81-ee481a02f4a3/export Fri, 04 Sep 2026 00:00:41 +0000 https://vulnerability.circl.lu/sighting/a4b61051-4b86-4f26-a6e0-d29a05e16d42/export {"uuid": "a4b61051-4b86-4f26-a6e0-d29a05e16d42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5947", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/141728", "content": "The Discovery of CVE-2024\u20135947: Authentication Bypass in Deep Sea Electronics DSE855\nhttps://medium.com/@karthithehacker/the-discovery-of-cve-2024-5947-authentication-bypass-in-deep-sea-electronics-dse855-5fa2e89cbdfb?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-03T18:00:07.787179Z"} {"uuid": "a4b61051-4b86-4f26-a6e0-d29a05e16d42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5947", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/141728", "content": "The Discovery of CVE-2024\u20135947: Authentication Bypass in Deep Sea Electronics DSE855\nhttps://medium.com/@karthithehacker/the-discovery-of-cve-2024-5947-authentication-bypass-in-deep-sea-electronics-dse855-5fa2e89cbdfb?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-03T18:00:07.787179Z"} https://vulnerability.circl.lu/sighting/a4b61051-4b86-4f26-a6e0-d29a05e16d42/export Thu, 03 Sep 2026 18:00:07 +0000 https://vulnerability.circl.lu/sighting/a37e5c7e-83fc-4fbc-a9f0-d208e068f5ae/export {"uuid": "a37e5c7e-83fc-4fbc-a9f0-d208e068f5ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5947", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/141730", "content": "Recently, during a routine security assessment, I uncovered a significant flaw in the Deep Sea Electronics DSE855 device. This\u2026Continue reading on Medium \u00bb (https://medium.com/@karthithehacker/the-discovery-of-cve-2024-5947-authentication-bypass-in-deep-sea-electronics-dse855-5fa2e89cbdfb?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-03T17:00:05.074282Z"} {"uuid": "a37e5c7e-83fc-4fbc-a9f0-d208e068f5ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5947", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/141730", "content": "Recently, during a routine security assessment, I uncovered a significant flaw in the Deep Sea Electronics DSE855 device. This\u2026Continue reading on Medium \u00bb (https://medium.com/@karthithehacker/the-discovery-of-cve-2024-5947-authentication-bypass-in-deep-sea-electronics-dse855-5fa2e89cbdfb?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-03T17:00:05.074282Z"} https://vulnerability.circl.lu/sighting/a37e5c7e-83fc-4fbc-a9f0-d208e068f5ae/export Thu, 03 Sep 2026 17:00:05 +0000 https://vulnerability.circl.lu/sighting/025d23b6-bbc3-4a06-ab7f-79695918034e/export {"uuid": "025d23b6-bbc3-4a06-ab7f-79695918034e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5947", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/141806", "content": "The Discovery of CVE-2024\u20135947: Authentication Bypass in Deep Sea Electronics DSE855\n\nRecently, during a routine security assessment, I uncovered a significant flaw in the Deep Sea Electronics DSE855 device. This vulnerability, identified as CVE-2024\u20135947, pertains to an authentication bypass issue that allows unauthorized access to sensitive information. Here\u2019s how I discovered and explored this vulnerability.The Discovery While examining the target, I focused on the device\u2019s web-based interface and noticed a peculiar behavior. The Deep Sea Electronics DSE855 was exposing a configuration backup file at http://xxxxxxxxxx/Backup.bin. This file was accessible without any authentication, raising red flags.Understanding the Vulnerability Bug Name: Deep Sea Electronics DSE855 \u2014 Authentication Bypass Bug Priority: Medium Vulnerable URL: http://xxxxxxx/Backup.bin CVE Description: CVE-2024\u20135947 highlights a critical issue in the Deep Sea Electronics DSE855\u2019s configuration backup process. The vulnerability arises from a lack of authentication before accessing sensitive information stored in the backup file. This issue, documented as ZDI-CAN-22679, allows network-adjacent attackers to retrieve the backup file without proper authorization, potentially exposing sensitive data such as stored credentials.Impact The exposed backup file can contain sensitive configuration details that could be leveraged by an attacker to compromise the system further. Accessing this file could lead to unauthorized disclosure of credentials and other critical information, increasing the risk of a security breach.Steps to Reproduce To confirm the vulnerability, follow these steps:Access the Vulnerable URL: Open the URL in your browser: http://xxxxxxxxx/Backup.binObserve the File Access: If the backup file is accessible without any authentication, you can view or download its contents, confirming the vulnerability.Automating the Hunt To streamline the process, I built a Python tool specifically for detecting this vulnerability. You can install it using pip and automate your testing: ToolPOC: CVE-2024\u20135947on githubpip install CVE-2024-5947 CVE-2024-5947 --chatid To Check a Single URL:CVE-2024-5947 -u http://mytargetprogram.comTo Check a List of URLs:CVE-2024-5947 -i urls.txt Remediation: To mitigate this vulnerability, it is essential to remove the .bin file from the server and ensure that sensitive files are protected with proper authentication mechanisms. POC by: @karthithehacker Mail: contact@karthithehacker.com Website: https://www.karthithehacker.com/ If you\u2019re interested in our VAPT service, contact us at ceo@cappriciosec.com or contact@cappriciosec.com. For enrolling my cybersecurity and Bugbounty course, WhatsApp +91 82709 13635.Connect with me: Twitter: https://twitter.com/karthithehacker Instagram: https://www.instagram.com/karthithehacker/ LinkedIn: https://www.linkedin.com/in/karthikeyan--v/ Website: https://www.karthithehacker.com/ Github : https://github.com/karthi-the-hacker/ npmjs: https://www.npmjs.com/~karthithehacker Youtube: https://www.youtube.com/@karthi_the_hackerThank you Karthikeyan.V The Discovery of CVE-2024\u20135947: Authentication Bypass in Deep Sea Electronics DSE855 was originally published in InfoSec Write-ups on Medium, where people are continuing the conversation by highlighting and responding to this story.\nRead more...", "creation_timestamp": "2026-09-03T17:00:04.963594Z"} {"uuid": "025d23b6-bbc3-4a06-ab7f-79695918034e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5947", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/141806", "content": "The Discovery of CVE-2024\u20135947: Authentication Bypass in Deep Sea Electronics DSE855\n\nRecently, during a routine security assessment, I uncovered a significant flaw in the Deep Sea Electronics DSE855 device. This vulnerability, identified as CVE-2024\u20135947, pertains to an authentication bypass issue that allows unauthorized access to sensitive information. Here\u2019s how I discovered and explored this vulnerability.The Discovery While examining the target, I focused on the device\u2019s web-based interface and noticed a peculiar behavior. The Deep Sea Electronics DSE855 was exposing a configuration backup file at http://xxxxxxxxxx/Backup.bin. This file was accessible without any authentication, raising red flags.Understanding the Vulnerability Bug Name: Deep Sea Electronics DSE855 \u2014 Authentication Bypass Bug Priority: Medium Vulnerable URL: http://xxxxxxx/Backup.bin CVE Description: CVE-2024\u20135947 highlights a critical issue in the Deep Sea Electronics DSE855\u2019s configuration backup process. The vulnerability arises from a lack of authentication before accessing sensitive information stored in the backup file. This issue, documented as ZDI-CAN-22679, allows network-adjacent attackers to retrieve the backup file without proper authorization, potentially exposing sensitive data such as stored credentials.Impact The exposed backup file can contain sensitive configuration details that could be leveraged by an attacker to compromise the system further. Accessing this file could lead to unauthorized disclosure of credentials and other critical information, increasing the risk of a security breach.Steps to Reproduce To confirm the vulnerability, follow these steps:Access the Vulnerable URL: Open the URL in your browser: http://xxxxxxxxx/Backup.binObserve the File Access: If the backup file is accessible without any authentication, you can view or download its contents, confirming the vulnerability.Automating the Hunt To streamline the process, I built a Python tool specifically for detecting this vulnerability. You can install it using pip and automate your testing: ToolPOC: CVE-2024\u20135947on githubpip install CVE-2024-5947 CVE-2024-5947 --chatid To Check a Single URL:CVE-2024-5947 -u http://mytargetprogram.comTo Check a List of URLs:CVE-2024-5947 -i urls.txt Remediation: To mitigate this vulnerability, it is essential to remove the .bin file from the server and ensure that sensitive files are protected with proper authentication mechanisms. POC by: @karthithehacker Mail: contact@karthithehacker.com Website: https://www.karthithehacker.com/ If you\u2019re interested in our VAPT service, contact us at ceo@cappriciosec.com or contact@cappriciosec.com. For enrolling my cybersecurity and Bugbounty course, WhatsApp +91 82709 13635.Connect with me: Twitter: https://twitter.com/karthithehacker Instagram: https://www.instagram.com/karthithehacker/ LinkedIn: https://www.linkedin.com/in/karthikeyan--v/ Website: https://www.karthithehacker.com/ Github : https://github.com/karthi-the-hacker/ npmjs: https://www.npmjs.com/~karthithehacker Youtube: https://www.youtube.com/@karthi_the_hackerThank you Karthikeyan.V The Discovery of CVE-2024\u20135947: Authentication Bypass in Deep Sea Electronics DSE855 was originally published in InfoSec Write-ups on Medium, where people are continuing the conversation by highlighting and responding to this story.\nRead more...", "creation_timestamp": "2026-09-03T17:00:04.963594Z"} https://vulnerability.circl.lu/sighting/025d23b6-bbc3-4a06-ab7f-79695918034e/export Thu, 03 Sep 2026 17:00:04 +0000 https://vulnerability.circl.lu/sighting/671056df-76aa-4cce-a284-ab82025adf9b/export {"uuid": "671056df-76aa-4cce-a284-ab82025adf9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5947", "type": "seen", "source": "https://t.me/hacking_Attack/141728", "content": "The Discovery of CVE-2024\u20135947: Authentication Bypass in Deep Sea Electronics DSE855\nhttps://medium.com/@karthithehacker/the-discovery-of-cve-2024-5947-authentication-bypass-in-deep-sea-electronics-dse855-5fa2e89cbdfb?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-02T01:00:50.170197Z"} {"uuid": "671056df-76aa-4cce-a284-ab82025adf9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5947", "type": "seen", "source": "https://t.me/hacking_Attack/141728", "content": "The Discovery of CVE-2024\u20135947: Authentication Bypass in Deep Sea Electronics DSE855\nhttps://medium.com/@karthithehacker/the-discovery-of-cve-2024-5947-authentication-bypass-in-deep-sea-electronics-dse855-5fa2e89cbdfb?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-02T01:00:50.170197Z"} https://vulnerability.circl.lu/sighting/671056df-76aa-4cce-a284-ab82025adf9b/export Wed, 02 Sep 2026 01:00:50 +0000