{"vulnerability": "2024-18", "sightings": [{"uuid": "2214ef95-9cde-4b2d-a221-3f0bb81feb31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1868", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113528666523886104", "content": "", "creation_timestamp": "2024-11-22T21:12:55.619585Z"}, {"uuid": "b6566678-b0ae-412b-8798-ae21faac59be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1867", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113528666509339493", "content": "", "creation_timestamp": "2024-11-22T21:12:55.242488Z"}, {"uuid": "f338ddac-f2cb-467b-9ab2-0fc39e3f04a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:46.000000Z"}, {"uuid": "2251704c-c695-49b9-9171-74ec471e79b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:59.000000Z"}, {"uuid": "bfba2458-829f-4a7c-9f52-a66bdcfeb9e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1811", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lkszub6ubo2v", "content": "", "creation_timestamp": "2025-03-20T15:40:18.907970Z"}, {"uuid": "68b714f7-4893-49ff-ad0b-83a74e743f98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1831", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114148344305514247", "content": "", "creation_timestamp": "2025-03-12T07:45:08.031618Z"}, {"uuid": "f0d7116e-b4a5-49a7-96c9-fc7cb0feacb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:02.000000Z"}, {"uuid": "b78f401e-66f7-4b31-9a47-8ed174c1b395", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1874", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3m62lztqs2s25", "content": "", "creation_timestamp": "2025-11-20T10:52:56.637820Z"}, {"uuid": "9e882df9-2f28-4a1d-a81a-f68f4cd2a70f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/telerik_report_server_deserialization.rb", "content": "", "creation_timestamp": "2024-06-12T21:17:01.000000Z"}, {"uuid": "8475963d-080f-4fe3-a505-edbd82adcd87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7538", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aProgress Telerik Report Server pre-authenticated RCE chain (CVE-2024-4358/CVE-2024-1800)\nURL\uff1ahttps://github.com/sinsinology/CVE-2024-4358\n\n\u6807\u7b7e\uff1a#RCE", "creation_timestamp": "2024-06-06T10:09:47.000000Z"}, {"uuid": "6a649228-6366-4fec-8e4b-dcc3bb97a975", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "published-proof-of-concept", "source": "https://t.me/orderofsixangles/2311", "content": "Molding lies into reality || Exploiting CVE-2024-4358\n\nhttps://summoning.team/blog/progress-report-server-rce-cve-2024-4358-cve-2024-1800/", "creation_timestamp": "2024-06-03T12:53:24.000000Z"}, {"uuid": "432a2d33-11e2-402c-9d46-4e43566df4b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1874", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8020", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aProof Of Concept for CVE-2024-1874\nURL\uff1ahttps://github.com/Tgcohce/CVE-2024-1874\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-07-18T15:28:53.000000Z"}, {"uuid": "83cd2b52-bed3-4166-bbfd-3771b05aa7d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8354", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aTelerik Report Server deserialization and authentication bypass exploit chain for CVE-2024-4358/CVE-2024-1800\nURL\uff1ahttps://github.com/fa-rrel/CVE-2024-4358.py\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-08-24T10:11:01.000000Z"}, {"uuid": "aa5a1d9e-2f3d-4d30-abb7-0832bffdd21f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8355", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aTelerik Report Server deserialization and authentication bypass exploit chain for CVE-2024-4358/CVE-2024-1800\nURL\uff1ahttps://github.com/fa-rrel/CVE-2024-4358\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-08-24T10:36:10.000000Z"}, {"uuid": "e2ded7d4-23ae-47f8-9f1b-a37641472325", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "seen", "source": "https://t.me/hackingbra/152", "content": "Always test the :83 default port on servers, maybe there is Telerik Report Server, you can take advantage of the newly revealed vulnerability.\n \n#CVE-2024-4358 / #CVE-2024-1800", "creation_timestamp": "2024-06-05T00:13:59.000000Z"}, {"uuid": "27155f81-ac72-4b98-baa6-f119c3855976", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "published-proof-of-concept", "source": "https://t.me/Celestial_Pulse24/1154", "content": "Server pre-authenticated #RCE chain (#CVE-2024-4358/CVE-2024-1800)\n\nhttps://github.com/sinsinology/CVE-2024-4358", "creation_timestamp": "2024-07-10T06:14:22.000000Z"}, {"uuid": "c99981de-2199-4fd8-8656-00a40c6e19ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1833", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10597", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-1833\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in SourceCodester Employee Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /Account/login.php. The manipulation of the argument txtusername/txtphone leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2024-02-23T19:31:06.771Z\n\ud83d\udccf Modified: 2025-04-05T06:19:45.237Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.254624\n2. https://vuldb.com/?ctiid.254624\n3. https://vuldb.com/?submit.286680\n4. https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/employee-management-system.md#2accountloginphp\n5. https://www.sourcecodester.com/", "creation_timestamp": "2025-04-05T06:37:56.000000Z"}, {"uuid": "6276c3b2-640a-43b0-acb8-6bf89496c121", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1851", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12078", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-1851\n\ud83d\udd25 CVSS Score: 6.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: The affiliate-toolkit \u2013 WordPress Affiliate Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the atkp_create_list() function in all versions up to, and including, 3.5.4. This makes it possible for authenticated attackers, with subscriber-level access and above, to to perform unauthorized actions such as creating product lists.\n\ud83d\udccf Published: 2024-03-08T06:58:06.723Z\n\ud83d\udccf Modified: 2025-04-16T15:50:07.794Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/e9e256b0-e4e3-4f41-842c-80aa2b80af72?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3045821/affiliate-toolkit-starter/trunk/includes/atkp_endpoints.php", "creation_timestamp": "2025-04-16T15:56:03.000000Z"}, {"uuid": "4a507a2c-f59e-4deb-9901-8c6b18a0e109", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1860", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12892", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-1860\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the antihacker_add_whitelist() function in all versions up to, and including, 4.51. This makes it possible for unauthenticated attackers to add their IP Address to the whitelist circumventing protection\n\ud83d\udccf Published: 2024-02-28T09:33:34.407Z\n\ud83d\udccf Modified: 2025-04-22T15:58:09.817Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/3d365284-73ac-4730-a83d-9202677cf161?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3040434%40antihacker&new=3040434%40antihacker&sfp_email=&sfph_mail=", "creation_timestamp": "2025-04-22T16:03:38.000000Z"}, {"uuid": "49478e85-3255-42bf-83bb-f13573194b30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "published-proof-of-concept", "source": "https://t.me/ap_security/732", "content": "#pentest  #exploit\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u0441\u0442\u043e\u043b\u0430\n\n\u0426\u0435\u043f\u043e\u0447\u043a\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0434\u043b\u044f CVE-2024-4358/CVE-2024-1800 \n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2024-4358 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9.8, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a. \u0425\u0435\u0439\u0440\u0445\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b, \u0447\u0442\u043e \u043c\u0435\u0442\u043e\u0434 \u00abRegister\u00bb \u0432 \u00abStartupController\u00bb \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0441\u0440\u0430\u0437\u0443 \u043f\u043e\u0441\u043b\u0435 \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0439 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438.\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u2014 CVE-2024-1800 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 8.8, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0440\u0430\u043d\u0435\u0435 \u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0430 \u0432\u0435\u043d\u0434\u043e\u0440\u0443 \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u0425\u043e\u0442\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u043b\u043e\u0436\u043d\u0430, \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0438 \u0441\u043a\u0440\u0438\u043f\u0442 \u043d\u0430 Python \u043e\u0442 \u0425\u0435\u0439\u0440\u0445\u0438 \u0434\u0435\u043b\u0430\u044e\u0442 \u0430\u0442\u0430\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043f\u043e\u043d\u044f\u0442\u043d\u043e\u0439 \u0434\u043b\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432. \u0418\u043c\u0435\u043d\u043d\u043e \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0442.\u0435. \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 10.1.24.514 \u0438\u043b\u0438 \u0432\u044b\u0448\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u043e\u0431\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.", "creation_timestamp": "2024-11-13T05:33:31.000000Z"}, {"uuid": "01c97950-f47f-44be-8fb2-e59b033eacbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "published-proof-of-concept", "source": "https://t.me/realLulzSec/17639", "content": "https://github.com/fa-rrel/CVE-2024-4358\n\nTelerik Report Server deserialization and authentication bypass exploit chain for CVE-2024-4358/CVE-2024-1800\n#github #exploit", "creation_timestamp": "2024-08-24T21:08:25.000000Z"}, {"uuid": "761c37a8-3caf-49fd-bd89-97b96d3c85ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "published-proof-of-concept", "source": "https://t.me/realLulzSec/1826", "content": "https://github.com/fa-rrel/CVE-2024-4358\n\nTelerik Report Server deserialization and authentication bypass exploit chain for CVE-2024-4358/CVE-2024-1800\n#github #exploit", "creation_timestamp": "2024-08-24T21:08:25.000000Z"}, {"uuid": "5ec5dfe0-ab81-4909-97fc-199e16e0ef43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1804", "type": "seen", "source": "https://t.me/cvedetector/1745", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-1804 - Tutor LMS WordPress Unauthorized Data Modification Vulnerability (Arbitrary File Upload)\", \n  \"Content\": \"CVE ID : CVE-2024-1804 \nPublished : July 27, 2024, 2:15 a.m. | 31\u00a0minutes ago \nDescription : The Tutor LMS \u2013 Migration Tool plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the tutor_import_from_xml function in all versions up to, and including, 2.2.0. This makes it possible for authenticated attackers, with subscriber-level access and above, to import courses. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-27T04:55:04.000000Z"}, {"uuid": "81ca7c95-2733-4e69-9cb0-8312c42d4669", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1845", "type": "seen", "source": "https://t.me/cvedetector/638", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-1845 - The VikRentCar Car Rental Management System WordPr\", \n  \"Content\": \"CVE ID : CVE-2024-1845 \nPublished : July 11, 2024, 6:15 a.m. | 25\u00a0minutes ago \nDescription : The VikRentCar Car Rental Management System WordPress plugin before 1.3.2 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-11T08:42:07.000000Z"}, {"uuid": "9f833f0c-0e5c-4564-8d23-f8f20a007076", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1860", "type": "seen", "source": "Telegram/LcwWE0U1muxSvfG50ezeJOUHgYnWkxL4WuRv2geKp9lcTkkh", "content": "", "creation_timestamp": "2025-02-14T10:04:00.000000Z"}, {"uuid": "e0018496-b22c-4208-b5a7-56b60d21852f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1895", "type": "seen", "source": "Telegram/CtKW2qrRjTDryeDJF9DrZ5b89BncRJ7JB-wQAmAoWm3nSHff", "content": "", "creation_timestamp": "2024-04-30T13:51:35.000000Z"}, {"uuid": "1a981dd1-9a16-4dc8-89a0-763d04a8d14d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1813", "type": "seen", "source": "https://t.me/arpsyndicate/4458", "content": "#ExploitObserverAlert\n\nCVE-2024-1813\n\nDESCRIPTION: Exploit Observer has 4 entries in 1 file formats related to CVE-2024-1813. The Simple Job Board plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.11.0 via deserialization of untrusted input in the job_board_applicant_list_columns_value function. This makes it possible for unauthenticated attackers to inject a PHP Object. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code when a submitted job application is viewed.\n\nFIRST-EPSS: 0.000430000", "creation_timestamp": "2024-04-11T06:44:32.000000Z"}, {"uuid": "4e6fd8cc-5949-490e-ac62-3fdf6fd4d176", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1812", "type": "seen", "source": "https://t.me/arpsyndicate/4462", "content": "#ExploitObserverAlert\n\nCVE-2024-1812\n\nDESCRIPTION: Exploit Observer has 4 entries in 1 file formats related to CVE-2024-1812. The Everest Forms plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.0.7 via the 'font_url' parameter. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.\n\nFIRST-EPSS: 0.000430000", "creation_timestamp": "2024-04-11T07:01:18.000000Z"}, {"uuid": "334e2889-757c-47dd-a8b4-f490c217abb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "seen", "source": "https://t.me/arpsyndicate/4292", "content": "#ExploitObserverAlert\n\nCVE-2024-1800\n\nDESCRIPTION: Exploit Observer has 3 entries in 1 file formats related to CVE-2024-1800. In Progress\u00ae Telerik\u00ae Report Server versions prior to 2024 Q1 (10.0.24.130), a remote code execution attack is possible through an insecure deserialization vulnerability.\n\nFIRST-EPSS: 0.000430000", "creation_timestamp": "2024-03-21T23:00:21.000000Z"}, {"uuid": "ed5a0666-dbc1-4f0e-8d54-8dd54a5af6eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "seen", "source": "https://t.me/lostsec/565", "content": "Latest Telerik Report Server deserialization and authentication bypass CVE-2024-4358/CVE-2024-1800\npoc comming soon..", "creation_timestamp": "2024-06-04T09:30:41.000000Z"}, {"uuid": "193df283-c994-430e-9278-8289a16936bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "published-proof-of-concept", "source": "https://t.me/CyberDilara/168", "content": "Tools - Hackers Factory\n\nThis tool extracts and displays data from the Recall feature in Windows 11, providing an easy way to access information about your PC's activity snapshots. \n\nhttps://github.com/xaitax/TotalRecall\n\nAn Event Tracing for Windows (ETW) tool that allows you to enumerate Manifest & MOF providers, as well as collect events from desired providers.\n\nhttps://github.com/jsecurity101/ETWInspector\n\nSearch and browse documents and data; find the people and companies you look for. \n\nhttps://github.com/alephdata/aleph\n\nDDoS -Web Scanning -Phone Hunter -CCTV Hunter -Deface -Mass Deface -Deface Maker -Bypass Maker -Auto Bypasser -Database Dump -Dorking -Admin Finder -Wifi Jammer -Executor -Simple Dirber -Trojan Maker -Mass Dork -Doxing / Osint \n\nhttps://github.com/MrSanZz/pandora\n\nSploitScan is a sophisticated cybersecurity utility designed to provide detailed information on vulnerabilities and associated exploits. \n\nhttps://github.com/xaitax/SploitScan\n\nProgress Telerik Report Server pre-authenticated RCE chain (CVE-2024-4358/CVE-2024-1800) \n\nhttps://github.com/sinsinology/CVE-2024-4358\n\nCVE-2024-24919 [Check Point Security Gateway Information Disclosure] \n\nhttps://github.com/ifconfig-me/CVE-2024-24919-Bulk-Scanner\n\nNew release of OneDriveExplorer. Mainly fixes for null value errors\n\nhttps://github.com/Beercow/OneDriveExplorer/releases/tag/v2024.05.17\n\nDLLirant is a tool to automatize the DLL Hijacking researches on a specified binary. \n\nhttps://github.com/redteamsocietegenerale/DLLirant\n\nAD Miner is an Active Directory audit tool that leverages cypher queries to crunch data from the #Bloodhound graph database to uncover security weaknesses \n\nhttps://github.com/Mazars-Tech/AD_Miner\n\n#HackersFactory", "creation_timestamp": "2024-06-17T14:10:12.000000Z"}, {"uuid": "b2d637ea-b641-4eed-b211-5fe9cfacf48d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "published-proof-of-concept", "source": "Telegram/91xq2yljWL5RObjqxZC8vMfawdPdbgsAg0W8g4_pLrCnJck", "content": "", "creation_timestamp": "2024-08-22T10:54:43.000000Z"}, {"uuid": "45fcb7a0-e805-472b-873a-a9f016f6a386", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/7918", "content": "Tools - Hackers Factory\n\nThis tool extracts and displays data from the Recall feature in Windows 11, providing an easy way to access information about your PC's activity snapshots. \n\nhttps://github.com/xaitax/TotalRecall\n\nAn Event Tracing for Windows (ETW) tool that allows you to enumerate Manifest & MOF providers, as well as collect events from desired providers.\n\nhttps://github.com/jsecurity101/ETWInspector\n\nSearch and browse documents and data; find the people and companies you look for. \n\nhttps://github.com/alephdata/aleph\n\nDDoS -Web Scanning -Phone Hunter -CCTV Hunter -Deface -Mass Deface -Deface Maker -Bypass Maker -Auto Bypasser -Database Dump -Dorking -Admin Finder -Wifi Jammer -Executor -Simple Dirber -Trojan Maker -Mass Dork -Doxing / Osint \n\nhttps://github.com/MrSanZz/pandora\n\nSploitScan is a sophisticated cybersecurity utility designed to provide detailed information on vulnerabilities and associated exploits. \n\nhttps://github.com/xaitax/SploitScan\n\nProgress Telerik Report Server pre-authenticated RCE chain (CVE-2024-4358/CVE-2024-1800) \n\nhttps://github.com/sinsinology/CVE-2024-4358\n\nCVE-2024-24919 [Check Point Security Gateway Information Disclosure] \n\nhttps://github.com/ifconfig-me/CVE-2024-24919-Bulk-Scanner\n\nNew release of OneDriveExplorer. Mainly fixes for null value errors\n\nhttps://github.com/Beercow/OneDriveExplorer/releases/tag/v2024.05.17\n\nDLLirant is a tool to automatize the DLL Hijacking researches on a specified binary. \n\nhttps://github.com/redteamsocietegenerale/DLLirant\n\nAD Miner is an Active Directory audit tool that leverages cypher queries to crunch data from the #Bloodhound graph database to uncover security weaknesses \n\nhttps://github.com/Mazars-Tech/AD_Miner\n\n#HackersFactory", "creation_timestamp": "2024-06-07T16:48:50.000000Z"}, {"uuid": "8beaa858-a015-42cd-b907-9940c33dc206", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "published-proof-of-concept", "source": "https://t.me/GhostsForum/21882", "content": "Tools - Hackers Factory\n\nThis tool extracts and displays data from the Recall feature in Windows 11, providing an easy way to access information about your PC's activity snapshots. \n\nhttps://github.com/xaitax/TotalRecall\n\nAn Event Tracing for Windows (ETW) tool that allows you to enumerate Manifest & MOF providers, as well as collect events from desired providers.\n\nhttps://github.com/jsecurity101/ETWInspector\n\nSearch and browse documents and data; find the people and companies you look for. \n\nhttps://github.com/alephdata/aleph\n\nDDoS -Web Scanning -Phone Hunter -CCTV Hunter -Deface -Mass Deface -Deface Maker -Bypass Maker -Auto Bypasser -Database Dump -Dorking -Admin Finder -Wifi Jammer -Executor -Simple Dirber -Trojan Maker -Mass Dork -Doxing / Osint \n\nhttps://github.com/MrSanZz/pandora\n\nSploitScan is a sophisticated cybersecurity utility designed to provide detailed information on vulnerabilities and associated exploits. \n\nhttps://github.com/xaitax/SploitScan\n\nProgress Telerik Report Server pre-authenticated RCE chain (CVE-2024-4358/CVE-2024-1800) \n\nhttps://github.com/sinsinology/CVE-2024-4358\n\nCVE-2024-24919 [Check Point Security Gateway Information Disclosure] \n\nhttps://github.com/ifconfig-me/CVE-2024-24919-Bulk-Scanner\n\nNew release of OneDriveExplorer. Mainly fixes for null value errors\n\nhttps://github.com/Beercow/OneDriveExplorer/releases/tag/v2024.05.17\n\nDLLirant is a tool to automatize the DLL Hijacking researches on a specified binary. \n\nhttps://github.com/redteamsocietegenerale/DLLirant\n\nAD Miner is an Active Directory audit tool that leverages cypher queries to crunch data from the #Bloodhound graph database to uncover security weaknesses \n\nhttps://github.com/Mazars-Tech/AD_Miner\n\n#HackersFactory", "creation_timestamp": "2024-06-07T11:02:07.000000Z"}, {"uuid": "55fd6963-2839-4f76-8da0-6c02126548e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/3273", "content": "Tools - Hackers Factory\n\nThis tool extracts and displays data from the Recall feature in Windows 11, providing an easy way to access information about your PC's activity snapshots. \n\nhttps://github.com/xaitax/TotalRecall\n\nAn Event Tracing for Windows (ETW) tool that allows you to enumerate Manifest & MOF providers, as well as collect events from desired providers.\n\nhttps://github.com/jsecurity101/ETWInspector\n\nSearch and browse documents and data; find the people and companies you look for. \n\nhttps://github.com/alephdata/aleph\n\nDDoS -Web Scanning -Phone Hunter -CCTV Hunter -Deface -Mass Deface -Deface Maker -Bypass Maker -Auto Bypasser -Database Dump -Dorking -Admin Finder -Wifi Jammer -Executor -Simple Dirber -Trojan Maker -Mass Dork -Doxing / Osint \n\nhttps://github.com/MrSanZz/pandora\n\nSploitScan is a sophisticated cybersecurity utility designed to provide detailed information on vulnerabilities and associated exploits. \n\nhttps://github.com/xaitax/SploitScan\n\nProgress Telerik Report Server pre-authenticated RCE chain (CVE-2024-4358/CVE-2024-1800) \n\nhttps://github.com/sinsinology/CVE-2024-4358\n\nCVE-2024-24919 [Check Point Security Gateway Information Disclosure] \n\nhttps://github.com/ifconfig-me/CVE-2024-24919-Bulk-Scanner\n\nNew release of OneDriveExplorer. Mainly fixes for null value errors\n\nhttps://github.com/Beercow/OneDriveExplorer/releases/tag/v2024.05.17\n\nDLLirant is a tool to automatize the DLL Hijacking researches on a specified binary. \n\nhttps://github.com/redteamsocietegenerale/DLLirant\n\nAD Miner is an Active Directory audit tool that leverages cypher queries to crunch data from the #Bloodhound graph database to uncover security weaknesses \n\nhttps://github.com/Mazars-Tech/AD_Miner\n\n#HackersFactory", "creation_timestamp": "2024-06-11T23:15:39.000000Z"}, {"uuid": "625a0024-0800-4bfb-a448-84495feae1e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "published-proof-of-concept", "source": "Telegram/lwiSO2a1dXoKgSo9TkQpWLtHcypZICpjDgayuGKJRW8bAME", "content": "", "creation_timestamp": "2024-07-10T04:56:04.000000Z"}, {"uuid": "4eca164c-4e5c-4e3a-a642-d7e235960292", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/6699", "content": "Tools - Hackers Factory\n\nThis tool extracts and displays data from the Recall feature in Windows 11, providing an easy way to access information about your PC's activity snapshots. \n\nhttps://github.com/xaitax/TotalRecall\n\nAn Event Tracing for Windows (ETW) tool that allows you to enumerate Manifest & MOF providers, as well as collect events from desired providers.\n\nhttps://github.com/jsecurity101/ETWInspector\n\nSearch and browse documents and data; find the people and companies you look for. \n\nhttps://github.com/alephdata/aleph\n\nDDoS -Web Scanning -Phone Hunter -CCTV Hunter -Deface -Mass Deface -Deface Maker -Bypass Maker -Auto Bypasser -Database Dump -Dorking -Admin Finder -Wifi Jammer -Executor -Simple Dirber -Trojan Maker -Mass Dork -Doxing / Osint \n\nhttps://github.com/MrSanZz/pandora\n\nSploitScan is a sophisticated cybersecurity utility designed to provide detailed information on vulnerabilities and associated exploits. \n\nhttps://github.com/xaitax/SploitScan\n\nProgress Telerik Report Server pre-authenticated RCE chain (CVE-2024-4358/CVE-2024-1800) \n\nhttps://github.com/sinsinology/CVE-2024-4358\n\nCVE-2024-24919 [Check Point Security Gateway Information Disclosure] \n\nhttps://github.com/ifconfig-me/CVE-2024-24919-Bulk-Scanner\n\nNew release of OneDriveExplorer. Mainly fixes for null value errors\n\nhttps://github.com/Beercow/OneDriveExplorer/releases/tag/v2024.05.17\n\nDLLirant is a tool to automatize the DLL Hijacking researches on a specified binary. \n\nhttps://github.com/redteamsocietegenerale/DLLirant\n\nAD Miner is an Active Directory audit tool that leverages cypher queries to crunch data from the #Bloodhound graph database to uncover security weaknesses \n\nhttps://github.com/Mazars-Tech/AD_Miner\n\n#HackersFactory", "creation_timestamp": "2024-06-07T16:48:50.000000Z"}, {"uuid": "62459e41-fed2-4b55-8127-fc142d29d373", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "seen", "source": "https://t.me/true_secator/6026", "content": "Progress Software \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0440\u043e\u0447\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Telerik Report Server, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\nTelerik Report Server \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0435 \u043e\u0442\u0447\u0435\u0442\u043e\u0432 \u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b, \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u0434\u043b\u044f \u0438\u0445 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f, \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f, \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u043c\u0438 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0432\u0441\u0435\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c,\u00a0\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u043a\u0430\u043a\u00a0CVE-2024-6327 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043d\u0430 \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Report Server 2024 Q2 (10.1.24.514) \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435 \u0438 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438\u00a02024 Q2 (10.1.24.709), \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 - \u044d\u0442\u043e \u0435\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.\n\nProgress \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439 \u0434\u043b\u044f \u0442\u0435\u0445, \u043a\u0442\u043e \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438.\n\n\u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f Report Server Application Pool \u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f\u043c\u0438, \u043b\u0438\u0431\u043e \u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u044c \u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u043e\u043c\u0443 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u0443.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e Progress \u043f\u043e\u043a\u0430 \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2024-6327, \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Telerik \u0443\u0436\u0435 \u043d\u0435 \u0440\u0430\u0437 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u043b\u0438\u0441\u044c \u0430\u0442\u0430\u043a\u0430\u043c.\n\n\u041a\u0440\u0430\u0439\u043d\u0438\u0439 \u043d\u0435\u0443\u0434\u0430\u0447\u043d\u044b\u0439 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442 \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u0435\u043b \u0432 2022 \u0433\u043e\u0434\u0443, \u043a\u043e\u0433\u0434\u0430 \u0431\u044b\u043b \u0432\u0437\u043b\u043e\u043c\u0430\u043d \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440 Microsoft Internet Information Services (IIS) \u0444\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u0430 \u0421\u0428\u0410\u00a0\u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 Progress Telerik CVE-2019-18935.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0441\u043e\u0432\u0441\u0435\u043c \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0442\u0430\u043a\u0436\u0435  \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u0438 \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0438 PoC \u0434\u043b\u044f RCE \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 Telerik Report \u043f\u0443\u0442\u0435\u043c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (CVE-2024-4358) \u0438 RCE \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (CVE-2024-1800).", "creation_timestamp": "2024-07-26T16:32:28.000000Z"}, {"uuid": "830f518e-a748-4d36-afda-4c812bb1fc9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1825", "type": "seen", "source": "https://t.me/ctinow/207147", "content": "https://ift.tt/ECxaAfS\nCVE-2024-1825 | CodeAstro House Rental Management System 1.0 User Registration Page address cross site scripting", "creation_timestamp": "2024-03-13T20:46:12.000000Z"}, {"uuid": "9cca9632-d942-402f-8d6b-34312525617f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1824", "type": "seen", "source": "https://t.me/ctinow/207146", "content": "https://ift.tt/4xq3onF\nCVE-2024-1824 | CodeAstro House Rental Management System 1.0 signing.php uname/password sql injection", "creation_timestamp": "2024-03-13T20:46:11.000000Z"}, {"uuid": "33a0c58b-48fb-415a-b793-85ff6012677d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1830", "type": "seen", "source": "https://t.me/ctinow/207206", "content": "https://ift.tt/UfbE9pw\nCVE-2024-1830 | code-projects Library System 1.0 lost-password.php email sql injection", "creation_timestamp": "2024-03-13T22:16:27.000000Z"}, {"uuid": "23ca0d6d-963c-4b0b-94ac-b5e695707c7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1829", "type": "seen", "source": "https://t.me/ctinow/207185", "content": "https://ift.tt/jCUKV5A\nCVE-2024-1829 | code-projects Library System 1.0 registration.php email/regno/phone/username sql injection", "creation_timestamp": "2024-03-13T21:46:48.000000Z"}, {"uuid": "9882639f-1da5-4ca4-92f9-46bbf5948a3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1823", "type": "seen", "source": "https://t.me/ctinow/207109", "content": "https://ift.tt/8TWdPau\nCVE-2024-1823 | CodeAstro Simple Voting System 1.0 Backend users.php access control", "creation_timestamp": "2024-03-13T20:18:27.000000Z"}, {"uuid": "adc3d7f6-7dcc-4214-9aec-736f886bec15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1822", "type": "seen", "source": "https://t.me/ctinow/207108", "content": "https://ift.tt/CsmK5OW\nCVE-2024-1822 | PHPGurukul Tourism Management System 1.0 user-bookings.php Full Name cross site scripting", "creation_timestamp": "2024-03-13T20:18:25.000000Z"}, {"uuid": "1da62a1f-d5a8-4c09-a880-68caf7eaecfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1821", "type": "seen", "source": "https://t.me/ctinow/207073", "content": "https://ift.tt/G0lZt3f\nCVE-2024-1821 | code-projects Crime Reporting System 1.0 police_add.php police_name/police_id/police_spec/password sql injection", "creation_timestamp": "2024-03-13T19:46:55.000000Z"}, {"uuid": "bd3e80cc-6307-4dd8-9edf-66316541e15d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1820", "type": "seen", "source": "https://t.me/ctinow/207072", "content": "https://ift.tt/nrBkO0p\nCVE-2024-1820 | code-projects Crime Reporting System 1.0 inchargelogin.php email/password sql injection", "creation_timestamp": "2024-03-13T19:46:54.000000Z"}, {"uuid": "3b32513d-57f5-468d-aad7-5ef90d6958a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1819", "type": "seen", "source": "https://t.me/ctinow/207038", "content": "https://ift.tt/9qTEMkN\nCVE-2024-1819 | CodeAstro Membership Management System 1.0 Add Members Tab Member Photo unrestricted upload", "creation_timestamp": "2024-03-13T19:11:58.000000Z"}, {"uuid": "bbcff5ff-8165-47a8-bc4c-7edf705b004c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1818", "type": "seen", "source": "https://t.me/ctinow/207037", "content": "https://ift.tt/sNw3lRb\nCVE-2024-1818 | CodeAstro Membership Management System 1.0 Logo /uploads/ unrestricted upload", "creation_timestamp": "2024-03-13T19:11:57.000000Z"}, {"uuid": "da33d4d3-4cfb-4e60-bab1-c262b0524852", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1817", "type": "seen", "source": "https://t.me/ctinow/207021", "content": "https://ift.tt/6pvmPbO\nCVE-2024-1817 | Demososo DM Enterprise Website Building System up to 2022.8 Cookie indexDM_load.php dmlogin is_admin improper authentication", "creation_timestamp": "2024-03-13T18:41:58.000000Z"}, {"uuid": "32fdde48-b6b5-4129-b435-4ebdacd303ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1834", "type": "seen", "source": "https://t.me/ctinow/207308", "content": "https://ift.tt/yLO9UEc\nCVE-2024-1834 | SourceCodester Simple Student Attendance System 1.0 ?page=attendance&class_id=1 class_date cross site scripting", "creation_timestamp": "2024-03-13T23:46:19.000000Z"}, {"uuid": "291f9ac5-5e61-4d14-ba2f-cb4475182041", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1833", "type": "seen", "source": "https://t.me/ctinow/207307", "content": "https://ift.tt/5Sxa2Io\nCVE-2024-1833 | SourceCodester Employee Management System 1.0 /Account/login.php txtusername sql injection", "creation_timestamp": "2024-03-13T23:46:18.000000Z"}, {"uuid": "5a465235-fb8e-4e84-8912-df3e48c9d175", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1857", "type": "seen", "source": "https://t.me/ctinow/209464", "content": "https://ift.tt/HEoQIzy\nCVE-2024-1857", "creation_timestamp": "2024-03-16T10:21:50.000000Z"}, {"uuid": "4b3f455d-f64c-481f-8156-285d497f536e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1884", "type": "seen", "source": "https://t.me/ctinow/207468", "content": "https://ift.tt/EPtUb5e\nCVE-2024-1884", "creation_timestamp": "2024-03-14T05:26:54.000000Z"}, {"uuid": "8ae35510-2424-425c-85ec-73826620b2e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1883", "type": "seen", "source": "https://t.me/ctinow/207467", "content": "https://ift.tt/7GZIVQv\nCVE-2024-1883", "creation_timestamp": "2024-03-14T05:26:53.000000Z"}, {"uuid": "afed36fd-73e8-4ae2-acff-99bf272ed663", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1882", "type": "seen", "source": "https://t.me/ctinow/207466", "content": "https://ift.tt/sThBjaz\nCVE-2024-1882", "creation_timestamp": "2024-03-14T05:26:52.000000Z"}, {"uuid": "ed5c7913-bff4-4822-abc7-d9b424e71766", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1875", "type": "seen", "source": "https://t.me/ctinow/207521", "content": "https://ift.tt/E1ZKPJA\nCVE-2024-1875 | SourceCodester Complaint Management System 1.0 Lodge Complaint Section register-complaint.php unrestricted upload", "creation_timestamp": "2024-03-14T07:16:46.000000Z"}, {"uuid": "ee789062-97a0-4250-a3ae-8ec563af0c85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1894", "type": "seen", "source": "https://t.me/ctinow/206940", "content": "https://ift.tt/qmDYNXA\nCVE-2024-1894", "creation_timestamp": "2024-03-13T17:37:08.000000Z"}, {"uuid": "630735b8-77a5-4e39-8748-d2084c153a3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1862", "type": "seen", "source": "https://t.me/ctinow/206939", "content": "https://ift.tt/svx5eik\nCVE-2024-1862", "creation_timestamp": "2024-03-13T17:37:06.000000Z"}, {"uuid": "795cb796-b29d-4871-8d03-1e9b864ee44e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1854", "type": "seen", "source": "https://t.me/ctinow/206938", "content": "https://ift.tt/CGlqS4L\nCVE-2024-1854", "creation_timestamp": "2024-03-13T17:37:05.000000Z"}, {"uuid": "50a875f5-f58f-4d79-8f76-6fd0db95a139", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1843", "type": "seen", "source": "https://t.me/ctinow/206937", "content": "https://ift.tt/okORESP\nCVE-2024-1843", "creation_timestamp": "2024-03-13T17:37:04.000000Z"}, {"uuid": "62913bca-0a11-430d-9f8a-720d26d8e425", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1806", "type": "seen", "source": "https://t.me/ctinow/206936", "content": "https://ift.tt/Vrc9Lng\nCVE-2024-1806", "creation_timestamp": "2024-03-13T17:37:00.000000Z"}, {"uuid": "c66796af-a92e-4260-aa69-91b24198cb0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1882", "type": "seen", "source": "https://t.me/ctinow/207458", "content": "https://ift.tt/sThBjaz\nCVE-2024-1882", "creation_timestamp": "2024-03-14T05:21:42.000000Z"}, {"uuid": "05de2983-b345-463f-9a4e-f575360cc5cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1884", "type": "seen", "source": "https://t.me/ctinow/207460", "content": "https://ift.tt/EPtUb5e\nCVE-2024-1884", "creation_timestamp": "2024-03-14T05:21:44.000000Z"}, {"uuid": "63435f70-07f9-45f1-bb57-6206ddeb1bae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1883", "type": "seen", "source": "https://t.me/ctinow/207459", "content": "https://ift.tt/7GZIVQv\nCVE-2024-1883", "creation_timestamp": "2024-03-14T05:21:43.000000Z"}, {"uuid": "3d4ae8a4-09f0-437c-a387-39e3c7f12dec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1810", "type": "seen", "source": "https://t.me/ctinow/207386", "content": "https://ift.tt/Yre7J0A\nCVE-2024-1810 | Archivist Custom Archive Templates Plugin up to 1.7.5 on WordPress cross site scripting", "creation_timestamp": "2024-03-14T03:06:23.000000Z"}, {"uuid": "5bfe22b4-fa08-4aa1-a76c-de354fcd309a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1885", "type": "seen", "source": "https://t.me/ctinow/207547", "content": "https://ift.tt/4STvZ6I\nCVE-2024-1885 | LG Signage TV 6.0.0-56 webOS code injection", "creation_timestamp": "2024-03-14T08:52:03.000000Z"}, {"uuid": "f4625b91-ad5d-425c-9b3e-e905498c2f53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1886", "type": "seen", "source": "https://t.me/ctinow/207546", "content": "https://ift.tt/BumbNRY\nCVE-2024-1886 | LG Signage TV 6.0.0-56 webOS path traversal", "creation_timestamp": "2024-03-14T08:52:02.000000Z"}, {"uuid": "3fd1f040-27d4-4aec-b2f6-392c897af195", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1832", "type": "seen", "source": "https://t.me/ctinow/207288", "content": "https://ift.tt/JvGwi8E\nCVE-2024-1832 | SourceCodester Complete File Management System 1.0 Admin Login Form /admin/ username sql injection", "creation_timestamp": "2024-03-13T23:21:38.000000Z"}, {"uuid": "d65feb9a-c435-4fe2-982a-6e4312656626", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1831", "type": "seen", "source": "https://t.me/ctinow/207254", "content": "https://ift.tt/9JmKczQ\nCVE-2024-1831 | SourceCodester Complete File Management System 1.0 Login Form users/index.php username sql injection", "creation_timestamp": "2024-03-13T22:41:04.000000Z"}, {"uuid": "de0ae438-fb5d-48ba-bfff-6c8b11a619e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1828", "type": "seen", "source": "https://t.me/ctinow/207165", "content": "https://ift.tt/YvzQRJo\nCVE-2024-1828 | code-projects Library System 1.0 registration.php email/idno/phone/username sql injection", "creation_timestamp": "2024-03-13T21:17:00.000000Z"}, {"uuid": "319ebb50-884a-439d-add9-17d206071690", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1827", "type": "seen", "source": "https://t.me/ctinow/207164", "content": "https://ift.tt/UJgT3fP\nCVE-2024-1827 | code-projects Library System 1.0 login.php username/password sql injection", "creation_timestamp": "2024-03-13T21:16:59.000000Z"}, {"uuid": "04bfe896-7069-40cc-a2e0-7abffe6ef02e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1826", "type": "seen", "source": "https://t.me/ctinow/207163", "content": "https://ift.tt/HeAyqza\nCVE-2024-1826 | code-projects Library System 1.0 login.php username/password sql injection", "creation_timestamp": "2024-03-13T21:16:58.000000Z"}, {"uuid": "4010757c-2dde-4e9c-a3fb-736cc1098889", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1857", "type": "seen", "source": "https://t.me/ctinow/209466", "content": "https://ift.tt/HEoQIzy\nCVE-2024-1857", "creation_timestamp": "2024-03-16T10:26:17.000000Z"}, {"uuid": "3ce5870b-e6e4-4ee6-8474-86e56116a289", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1870", "type": "seen", "source": "https://t.me/ctinow/203894", "content": "https://ift.tt/J592MI7\nCVE-2024-1870", "creation_timestamp": "2024-03-09T11:26:24.000000Z"}, {"uuid": "1ef20c45-cb47-472a-a1b5-505514fea6ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1870", "type": "seen", "source": "https://t.me/ctinow/203888", "content": "https://ift.tt/J592MI7\nCVE-2024-1870", "creation_timestamp": "2024-03-09T11:26:18.000000Z"}, {"uuid": "25f6b4b9-8849-4c94-9615-2ae6816b4d86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1851", "type": "seen", "source": "https://t.me/ctinow/203130", "content": "https://ift.tt/K1w60h2\nCVE-2024-1851", "creation_timestamp": "2024-03-08T08:21:54.000000Z"}, {"uuid": "c1236033-e4c3-4cb3-a8f8-b8891c1142a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1808", "type": "seen", "source": "https://t.me/ctinow/208307", "content": "https://ift.tt/KQmxgwL\nCVE-2024-1808 | gn_themes WP Shortcodes Plugin up to 7.0.3 on WordPress Shortcode cross site scripting (ID 3041647)", "creation_timestamp": "2024-03-15T00:31:35.000000Z"}, {"uuid": "7149a0c3-5171-40ea-89e8-286da49697c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1851", "type": "seen", "source": "https://t.me/ctinow/203138", "content": "https://ift.tt/K1w60h2\nCVE-2024-1851", "creation_timestamp": "2024-03-08T08:26:42.000000Z"}, {"uuid": "06a9a5d9-3928-4e69-ae02-ca1fd8a5fc1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1853", "type": "seen", "source": "https://t.me/ctinow/208303", "content": "https://ift.tt/JBCvc78\nCVE-2024-1853", "creation_timestamp": "2024-03-15T00:26:10.000000Z"}, {"uuid": "5422dfa4-477d-4bd0-97d8-dddd54d2674b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1853", "type": "seen", "source": "https://t.me/ctinow/208300", "content": "https://ift.tt/JBCvc78\nCVE-2024-1853", "creation_timestamp": "2024-03-15T00:21:28.000000Z"}, {"uuid": "07d2f84f-f8d8-4f35-9449-dda72bfd80ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1861", "type": "seen", "source": "https://t.me/ctinow/208292", "content": "https://ift.tt/pi1EsNk\nCVE-2024-1861 | Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan Plugin Table Truncation authorization", "creation_timestamp": "2024-03-15T00:01:30.000000Z"}, {"uuid": "f8db643a-2f51-4201-93fa-a8f5018d1022", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1892", "type": "seen", "source": "https://t.me/ctinow/195016", "content": "https://ift.tt/Wydk34u\nCVE-2024-1892", "creation_timestamp": "2024-02-28T01:26:21.000000Z"}, {"uuid": "88a0cea1-4243-46ac-9486-b177f5e3d59c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1869", "type": "seen", "source": "https://t.me/ctinow/198128", "content": "https://ift.tt/6LCY7pZ\nCVE-2024-1869", "creation_timestamp": "2024-03-01T23:32:12.000000Z"}, {"uuid": "969f2902-87e7-4406-9b67-e11ad7ebb86e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1859", "type": "seen", "source": "https://t.me/ctinow/197386", "content": "https://ift.tt/WAY2zkm\nCVE-2024-1859", "creation_timestamp": "2024-03-01T08:26:54.000000Z"}, {"uuid": "8d6ddbdc-bad8-4ec8-9bb6-9f7f5529f397", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1802", "type": "seen", "source": "https://t.me/ctinow/202836", "content": "https://ift.tt/7ixn9wA\nCVE-2024-1802", "creation_timestamp": "2024-03-07T22:26:55.000000Z"}, {"uuid": "11677c18-9389-4028-8e5b-c96e0b966bbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1877", "type": "seen", "source": "https://t.me/ctinow/196473", "content": "https://ift.tt/BLuDvkY\nCVE-2024-1877 | SourceCodester Employee Management System 1.0 /cancel.php id sql injection", "creation_timestamp": "2024-02-29T10:26:16.000000Z"}, {"uuid": "b8029cd8-63bf-4dc7-8674-51c5fdb6c5e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1876", "type": "seen", "source": "https://t.me/ctinow/196472", "content": "https://ift.tt/jK7sl5G\nCVE-2024-1876 | SourceCodester Employee Management System 1.0 /psubmit.php pid sql injection", "creation_timestamp": "2024-02-29T10:26:15.000000Z"}, {"uuid": "124f2361-44fc-4bd3-8383-6eedd6378588", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1878", "type": "seen", "source": "https://t.me/ctinow/196471", "content": "https://ift.tt/0v8MF2i\nCVE-2024-1878 | SourceCodester Employee Management System 1.0 /myprofile.php id sql injection", "creation_timestamp": "2024-02-29T10:26:14.000000Z"}, {"uuid": "152b5ff3-8089-476c-bfcc-448fee48ab79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1871", "type": "seen", "source": "https://t.me/ctinow/196470", "content": "https://ift.tt/t0EysZo\nCVE-2024-1871 | SourceCodester Employee Management System 1.0 Project Assignment Report /process/assignp.php pname cross site scripting", "creation_timestamp": "2024-02-29T10:26:13.000000Z"}, {"uuid": "2d1e9406-efc8-4661-baba-a44b3852d3e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1898", "type": "seen", "source": "https://t.me/ctinow/200815", "content": "https://ift.tt/r8ToJet\nCVE-2024-1898", "creation_timestamp": "2024-03-05T23:26:43.000000Z"}, {"uuid": "88e7d599-0e8b-44d4-aa8c-12aa9ffc673c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1898", "type": "seen", "source": "https://t.me/ctinow/200820", "content": "https://ift.tt/r8ToJet\nCVE-2024-1898", "creation_timestamp": "2024-03-05T23:26:48.000000Z"}, {"uuid": "93245fce-f845-4e4e-9efd-3a19e8bfbc1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1808", "type": "seen", "source": "https://t.me/ctinow/195489", "content": "https://ift.tt/bIvui3Z\nCVE-2024-1808", "creation_timestamp": "2024-02-28T14:33:56.000000Z"}, {"uuid": "73cbecd1-b56f-4d8d-b9b8-56e831fb42fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1864", "type": "seen", "source": "https://t.me/ctinow/194948", "content": "https://ift.tt/pjlFtom\nCVE-2024-1864", "creation_timestamp": "2024-02-27T23:26:46.000000Z"}, {"uuid": "4edf1248-6e28-418a-876f-c075c9829d1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1860", "type": "seen", "source": "https://t.me/ctinow/195341", "content": "https://ift.tt/8JPQFUx\nCVE-2024-1860", "creation_timestamp": "2024-02-28T11:31:32.000000Z"}, {"uuid": "3da9c821-4e10-45f9-9bdb-b1627d9459ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1888", "type": "seen", "source": "https://t.me/ctinow/196462", "content": "https://ift.tt/p4qrB7P\nCVE-2024-1888", "creation_timestamp": "2024-02-29T10:26:05.000000Z"}, {"uuid": "d15641ac-5f01-4972-9242-b835eff9077c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1888", "type": "seen", "source": "https://t.me/ctinow/196458", "content": "https://ift.tt/p4qrB7P\nCVE-2024-1888", "creation_timestamp": "2024-02-29T10:22:14.000000Z"}, {"uuid": "c5098ee1-9fca-4bdf-892a-1a5c99e1a23a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1887", "type": "seen", "source": "https://t.me/ctinow/196409", "content": "https://ift.tt/Ok34xlN\nCVE-2024-1887", "creation_timestamp": "2024-02-29T09:31:44.000000Z"}, {"uuid": "91b35d82-9edb-41c1-bd1f-2a8357f53995", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1861", "type": "seen", "source": "https://t.me/ctinow/195346", "content": "https://ift.tt/H5gkrbx\nCVE-2024-1861", "creation_timestamp": "2024-02-28T11:31:37.000000Z"}, {"uuid": "8d146314-9bcf-4de0-aad7-be7c8da03295", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1860", "type": "seen", "source": "https://t.me/ctinow/195345", "content": "https://ift.tt/8JPQFUx\nCVE-2024-1860", "creation_timestamp": "2024-02-28T11:31:36.000000Z"}, {"uuid": "b2df87c6-314c-47c0-b12b-c1d846446ab5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1861", "type": "seen", "source": "https://t.me/ctinow/195342", "content": "https://ift.tt/H5gkrbx\nCVE-2024-1861", "creation_timestamp": "2024-02-28T11:31:33.000000Z"}, {"uuid": "d3eb1329-1cbc-4adc-8581-0a19a700cf87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1887", "type": "seen", "source": "https://t.me/ctinow/196385", "content": "https://ift.tt/Ok34xlN\nCVE-2024-1887", "creation_timestamp": "2024-02-29T09:26:53.000000Z"}, {"uuid": "1a8b5f0e-5d5b-4a13-8b49-137b69b72c32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1892", "type": "seen", "source": "https://t.me/ctinow/195018", "content": "https://ift.tt/Wydk34u\nCVE-2024-1892", "creation_timestamp": "2024-02-28T01:31:32.000000Z"}, {"uuid": "b565292c-7fe1-404f-8848-30782e3d9e65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1866", "type": "seen", "source": "https://t.me/ctinow/194950", "content": "https://ift.tt/4GgI7On\nCVE-2024-1866", "creation_timestamp": "2024-02-27T23:26:48.000000Z"}, {"uuid": "8a487b69-c0ba-4f4d-b26d-03df18b9c645", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1865", "type": "seen", "source": "https://t.me/ctinow/194949", "content": "https://ift.tt/Incoekx\nCVE-2024-1865", "creation_timestamp": "2024-02-27T23:26:47.000000Z"}, {"uuid": "7c79bddc-e686-4369-911f-a21084a26d18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1847", "type": "seen", "source": "https://t.me/ctinow/195780", "content": "https://ift.tt/U4cl1np\nCVE-2024-1847", "creation_timestamp": "2024-02-28T19:27:04.000000Z"}, {"uuid": "6a6218a1-2f00-41b0-aefc-e4300f5b5cab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1847", "type": "seen", "source": "https://t.me/ctinow/195774", "content": "https://ift.tt/U4cl1np\nCVE-2024-1847", "creation_timestamp": "2024-02-28T19:26:58.000000Z"}, {"uuid": "06b4ef65-f3f2-4d17-9ac6-6c757dd086e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1890", "type": "seen", "source": "https://t.me/ctinow/193557", "content": "https://ift.tt/8nFsOK2\nCVE-2024-1890", "creation_timestamp": "2024-02-26T17:42:36.000000Z"}, {"uuid": "6665d46f-6e73-4465-907d-5b85f043d556", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1808", "type": "seen", "source": "https://t.me/ctinow/195474", "content": "https://ift.tt/bIvui3Z\nCVE-2024-1808", "creation_timestamp": "2024-02-28T14:27:06.000000Z"}, {"uuid": "6efae9a9-3a2e-40b6-abaa-70aab210b8b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1864", "type": "seen", "source": "https://t.me/ctinow/194937", "content": "https://ift.tt/pjlFtom\nCVE-2024-1864", "creation_timestamp": "2024-02-27T23:26:32.000000Z"}, {"uuid": "122e3c16-ad4d-45a0-a88a-3560339b9624", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1865", "type": "seen", "source": "https://t.me/ctinow/194938", "content": "https://ift.tt/Incoekx\nCVE-2024-1865", "creation_timestamp": "2024-02-27T23:26:33.000000Z"}, {"uuid": "7195ad2d-405e-4c14-834f-dd13b34f4c4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1866", "type": "seen", "source": "https://t.me/ctinow/194939", "content": "https://ift.tt/4GgI7On\nCVE-2024-1866", "creation_timestamp": "2024-02-27T23:26:34.000000Z"}, {"uuid": "04aef508-9d9b-460e-9b4c-db681d32d8cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1871", "type": "seen", "source": "https://t.me/ctinow/193549", "content": "https://ift.tt/3PXhGz9\nCVE-2024-1871", "creation_timestamp": "2024-02-26T17:42:28.000000Z"}, {"uuid": "8827423a-31fb-4ef9-ac3f-1e11f019c4be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1899", "type": "seen", "source": "https://t.me/ctinow/193728", "content": "https://ift.tt/GcdQe2s\nCVE-2024-1899", "creation_timestamp": "2024-02-26T20:31:56.000000Z"}, {"uuid": "a847675f-87ce-416b-89b0-84b505e4c762", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1899", "type": "seen", "source": "https://t.me/ctinow/193723", "content": "https://ift.tt/GcdQe2s\nCVE-2024-1899", "creation_timestamp": "2024-02-26T20:31:51.000000Z"}, {"uuid": "b3200d73-6b60-49d2-aef5-edfb587a7089", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1875", "type": "seen", "source": "https://t.me/ctinow/193550", "content": "https://ift.tt/8HpmEkS\nCVE-2024-1875", "creation_timestamp": "2024-02-26T17:42:29.000000Z"}, {"uuid": "e5b7e2c8-b44c-4e5a-a5dd-cf42c7d2b337", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1878", "type": "seen", "source": "https://t.me/ctinow/193553", "content": "https://ift.tt/MVtwaYR\nCVE-2024-1878", "creation_timestamp": "2024-02-26T17:42:32.000000Z"}, {"uuid": "9969128d-6d91-4b61-a25c-3e2e7a2bec2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1877", "type": "seen", "source": "https://t.me/ctinow/193552", "content": "https://ift.tt/yKw92gB\nCVE-2024-1877", "creation_timestamp": "2024-02-26T17:42:31.000000Z"}, {"uuid": "b79808b3-d298-414d-8d74-e11826df7f36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1876", "type": "seen", "source": "https://t.me/ctinow/193551", "content": "https://ift.tt/HDYhyPt\nCVE-2024-1876", "creation_timestamp": "2024-02-26T17:42:30.000000Z"}, {"uuid": "92c4d22b-f86c-4c1e-8e2d-f33cd42d7f79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1829", "type": "seen", "source": "https://t.me/ctinow/192084", "content": "https://ift.tt/0gAxL5C\nCVE-2024-1829", "creation_timestamp": "2024-02-23T19:26:29.000000Z"}, {"uuid": "2e9d108e-0d73-487f-a003-e15cb7f6ad17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1828", "type": "seen", "source": "https://t.me/ctinow/192083", "content": "https://ift.tt/5C23Aok\nCVE-2024-1828", "creation_timestamp": "2024-02-23T19:26:28.000000Z"}, {"uuid": "1106a6fd-9f24-49a9-b5ee-d6a826176d5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1827", "type": "seen", "source": "https://t.me/ctinow/192082", "content": "https://ift.tt/KAxrp2o\nCVE-2024-1827", "creation_timestamp": "2024-02-23T19:26:27.000000Z"}, {"uuid": "3a699be8-8dd9-4a65-8d61-ff7aa0d7e811", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1889", "type": "seen", "source": "https://t.me/ctinow/193556", "content": "https://ift.tt/lqP4cv7\nCVE-2024-1889", "creation_timestamp": "2024-02-26T17:42:35.000000Z"}, {"uuid": "092bfc88-3518-40da-b47e-f069b4135891", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1886", "type": "seen", "source": "https://t.me/ctinow/193555", "content": "https://ift.tt/fBqA0o4\nCVE-2024-1886", "creation_timestamp": "2024-02-26T17:42:34.000000Z"}, {"uuid": "c0eb85f6-fd72-46ca-908b-0aadf602a79c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1885", "type": "seen", "source": "https://t.me/ctinow/193554", "content": "https://ift.tt/SwB7Rok\nCVE-2024-1885", "creation_timestamp": "2024-02-26T17:42:33.000000Z"}, {"uuid": "4416cb79-ab51-4321-aebb-c559fa482dd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1830", "type": "seen", "source": "https://t.me/ctinow/192130", "content": "https://ift.tt/7mXR41C\nCVE-2024-1830", "creation_timestamp": "2024-02-23T20:26:10.000000Z"}, {"uuid": "d11b5875-b456-4af1-910a-905a8ed982e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1810", "type": "seen", "source": "https://t.me/ctinow/192439", "content": "https://ift.tt/YFrsBlX\nCVE-2024-1810", "creation_timestamp": "2024-02-24T06:26:27.000000Z"}, {"uuid": "35c5bece-a9b8-48e6-a2fa-02444f2614e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1810", "type": "seen", "source": "https://t.me/ctinow/192436", "content": "https://ift.tt/YFrsBlX\nCVE-2024-1810", "creation_timestamp": "2024-02-24T06:26:24.000000Z"}, {"uuid": "e7dc6865-5594-4505-98ce-4258742499c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1826", "type": "seen", "source": "https://t.me/ctinow/192005", "content": "https://ift.tt/NMVtqaz\nCVE-2024-1826", "creation_timestamp": "2024-02-23T18:26:45.000000Z"}, {"uuid": "af39870b-7a40-4331-bb59-1d8564c8921b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1834", "type": "seen", "source": "https://t.me/ctinow/192185", "content": "https://ift.tt/Z6mQA5k\nCVE-2024-1834", "creation_timestamp": "2024-02-23T21:26:31.000000Z"}, {"uuid": "b4f87978-a09c-4d49-803e-2380197bbd9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1833", "type": "seen", "source": "https://t.me/ctinow/192184", "content": "https://ift.tt/TYuMO9y\nCVE-2024-1833", "creation_timestamp": "2024-02-23T21:26:30.000000Z"}, {"uuid": "1a06896d-3f3c-4786-aa2d-5b80aee69039", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1832", "type": "seen", "source": "https://t.me/ctinow/192183", "content": "https://ift.tt/L6BvUfG\nCVE-2024-1832", "creation_timestamp": "2024-02-23T21:26:29.000000Z"}, {"uuid": "fcf8e7bb-d66e-4751-8a5b-10434b371d0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1833", "type": "seen", "source": "https://t.me/ctinow/192179", "content": "https://ift.tt/TYuMO9y\nCVE-2024-1833", "creation_timestamp": "2024-02-23T21:26:25.000000Z"}, {"uuid": "7474abd8-bccc-4025-93d3-92b4b4495bde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1834", "type": "seen", "source": "https://t.me/ctinow/192180", "content": "https://ift.tt/Z6mQA5k\nCVE-2024-1834", "creation_timestamp": "2024-02-23T21:26:26.000000Z"}, {"uuid": "ee3fe706-7afb-4570-ba7e-b010b692743e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1832", "type": "seen", "source": "https://t.me/ctinow/192178", "content": "https://ift.tt/L6BvUfG\nCVE-2024-1832", "creation_timestamp": "2024-02-23T21:26:24.000000Z"}, {"uuid": "2bd9f851-be2c-4311-a3ac-a2922fcf09d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1831", "type": "seen", "source": "https://t.me/ctinow/192134", "content": "https://ift.tt/NFD3zJV\nCVE-2024-1831", "creation_timestamp": "2024-02-23T20:26:14.000000Z"}, {"uuid": "69a500d0-c4fa-481d-ba81-da783b58aba4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1830", "type": "seen", "source": "https://t.me/ctinow/192133", "content": "https://ift.tt/7mXR41C\nCVE-2024-1830", "creation_timestamp": "2024-02-23T20:26:13.000000Z"}, {"uuid": "283d2205-fb8c-4162-bbed-263d3541d193", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1825", "type": "seen", "source": "https://t.me/ctinow/192004", "content": "https://ift.tt/Khz4Ida\nCVE-2024-1825", "creation_timestamp": "2024-02-23T18:26:44.000000Z"}, {"uuid": "885f740e-ec39-43ed-a85b-e40273c4b7fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1831", "type": "seen", "source": "https://t.me/ctinow/192131", "content": "https://ift.tt/NFD3zJV\nCVE-2024-1831", "creation_timestamp": "2024-02-23T20:26:11.000000Z"}, {"uuid": "1820b7f5-0e44-4408-a3e0-6f35f2feac2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1829", "type": "seen", "source": "https://t.me/ctinow/192079", "content": "https://ift.tt/0gAxL5C\nCVE-2024-1829", "creation_timestamp": "2024-02-23T19:21:54.000000Z"}, {"uuid": "2e70a775-96ca-470d-b81e-3a013eb7925a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1828", "type": "seen", "source": "https://t.me/ctinow/192078", "content": "https://ift.tt/5C23Aok\nCVE-2024-1828", "creation_timestamp": "2024-02-23T19:21:53.000000Z"}, {"uuid": "7a445312-d6ae-4af9-810b-7d7abd398fb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1827", "type": "seen", "source": "https://t.me/ctinow/192077", "content": "https://ift.tt/KAxrp2o\nCVE-2024-1827", "creation_timestamp": "2024-02-23T19:21:52.000000Z"}, {"uuid": "80ca1bae-38e8-465c-a91c-f0b44dd881d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1826", "type": "seen", "source": "https://t.me/ctinow/192019", "content": "https://ift.tt/NMVtqaz\nCVE-2024-1826", "creation_timestamp": "2024-02-23T18:32:23.000000Z"}, {"uuid": "a1384122-cdce-4ac5-89e1-4551dc450abb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1825", "type": "seen", "source": "https://t.me/ctinow/192018", "content": "https://ift.tt/Khz4Ida\nCVE-2024-1825", "creation_timestamp": "2024-02-23T18:32:19.000000Z"}, {"uuid": "316b273a-7afc-41e8-b88f-b31750f87e87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1824", "type": "seen", "source": "https://t.me/ctinow/191955", "content": "https://ift.tt/s1pActx\nCVE-2024-1824", "creation_timestamp": "2024-02-23T17:26:49.000000Z"}, {"uuid": "bb3fbefb-f0b8-4af8-8b93-21519d660128", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1820", "type": "seen", "source": "https://t.me/ctinow/191951", "content": "https://ift.tt/CqN93xU\nCVE-2024-1820", "creation_timestamp": "2024-02-23T17:26:45.000000Z"}, {"uuid": "ea1ea5d6-ef57-43af-a422-b4cd20fc8124", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1824", "type": "seen", "source": "https://t.me/ctinow/191946", "content": "https://ift.tt/s1pActx\nCVE-2024-1824", "creation_timestamp": "2024-02-23T17:26:40.000000Z"}, {"uuid": "61c3a529-1287-4131-a5a0-9972cdabc2c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1823", "type": "seen", "source": "https://t.me/ctinow/191945", "content": "https://ift.tt/iTt0x9L\nCVE-2024-1823", "creation_timestamp": "2024-02-23T17:26:39.000000Z"}, {"uuid": "9b32160d-8ed7-4c6b-ace4-e00b72810898", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1822", "type": "seen", "source": "https://t.me/ctinow/191944", "content": "https://ift.tt/I1rPjQZ\nCVE-2024-1822", "creation_timestamp": "2024-02-23T17:26:38.000000Z"}, {"uuid": "d1eaa2b8-5d85-40ad-ada1-b2102f5d0e77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1821", "type": "seen", "source": "https://t.me/ctinow/191943", "content": "https://ift.tt/pICmBzF\nCVE-2024-1821", "creation_timestamp": "2024-02-23T17:26:37.000000Z"}, {"uuid": "508fcba3-f431-4415-9f86-50310d3ea7f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1820", "type": "seen", "source": "https://t.me/ctinow/191942", "content": "https://ift.tt/CqN93xU\nCVE-2024-1820", "creation_timestamp": "2024-02-23T17:26:35.000000Z"}, {"uuid": "d6cb40a8-b968-4f25-bf2b-d087277b32ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1817", "type": "seen", "source": "https://t.me/ctinow/191820", "content": "https://ift.tt/ZuUFKBg\nCVE-2024-1817", "creation_timestamp": "2024-02-23T15:26:59.000000Z"}, {"uuid": "50ed62b9-c089-4d43-a945-b21331ef414a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1817", "type": "seen", "source": "https://t.me/ctinow/191816", "content": "https://ift.tt/ZuUFKBg\nCVE-2024-1817", "creation_timestamp": "2024-02-23T15:26:55.000000Z"}, {"uuid": "7aa97e06-fb98-431a-ba04-bbd157c3d648", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1822", "type": "seen", "source": "https://t.me/ctinow/191953", "content": "https://ift.tt/I1rPjQZ\nCVE-2024-1822", "creation_timestamp": "2024-02-23T17:26:47.000000Z"}, {"uuid": "80342629-47ee-4f4a-b61b-59e2a9bf46b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1821", "type": "seen", "source": "https://t.me/ctinow/191952", "content": "https://ift.tt/pICmBzF\nCVE-2024-1821", "creation_timestamp": "2024-02-23T17:26:46.000000Z"}, {"uuid": "30d7fef2-2643-4c80-b430-0a5841562ab2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1819", "type": "seen", "source": "https://t.me/ctinow/191905", "content": "https://ift.tt/1izvJHc\nCVE-2024-1819", "creation_timestamp": "2024-02-23T16:41:44.000000Z"}, {"uuid": "a1a1f441-25b2-47dd-ac61-8ec6be4cb9de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1818", "type": "seen", "source": "https://t.me/ctinow/191904", "content": "https://ift.tt/M7V5ts0\nCVE-2024-1818", "creation_timestamp": "2024-02-23T16:41:43.000000Z"}, {"uuid": "1aa7e831-766b-481f-8495-a328b7b3908c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1819", "type": "seen", "source": "https://t.me/ctinow/191881", "content": "https://ift.tt/1izvJHc\nCVE-2024-1819", "creation_timestamp": "2024-02-23T16:32:05.000000Z"}, {"uuid": "4eb3a007-15fd-416d-84a6-d4725cac2157", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1818", "type": "seen", "source": "https://t.me/ctinow/191880", "content": "https://ift.tt/M7V5ts0\nCVE-2024-1818", "creation_timestamp": "2024-02-23T16:32:04.000000Z"}, {"uuid": "63a592fa-ef47-4bc8-ac90-dd2fd8915d22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1874", "type": "seen", "source": "https://t.me/cultofwire/1255", "content": "BatBadBut: You can't securely execute commands on Windows\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 Vulnerability Note Multiple programming languages fail to escape arguments properly in Microsoft Windows \u043e\u0442 \u0430\u0432\u0442\u043e\u0440\u0430.\n\nBatBadBut \u2014 \u044d\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f Windows, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043a\u043e\u0441\u0432\u0435\u043d\u043d\u043e \u0437\u0430\u0432\u0438\u0441\u044f\u0442 \u043e\u0442 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 CreateProcess, \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u0439.\n\nCreateProcess() \u043d\u0435\u044f\u0432\u043d\u043e \u043f\u043e\u0440\u043e\u0436\u0434\u0430\u0435\u0442 cmd.exe \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u043f\u0430\u043a\u0435\u0442\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 (.bat, .cmd \u0438 \u0442. \u0434.), \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043d\u0435 \u0443\u043a\u0430\u0437\u0430\u043b\u043e \u0438\u0445 \u0432 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0435.\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e cmd.exe \u0438\u043c\u0435\u0435\u0442 \u0441\u043b\u043e\u0436\u043d\u044b\u0435 \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0440\u0430\u0437\u0431\u043e\u0440\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u044b\u0445 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u0430 \u0441\u0440\u0435\u0434\u044b \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u044f\u0437\u044b\u043a\u043e\u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u044b\u0435 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u044b.\n\u0418\u0437-\u0437\u0430 \u044d\u0442\u043e\u0433\u043e \u043c\u043e\u0436\u043d\u043e \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0435\u0441\u043b\u0438 \u043a\u0442\u043e-\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0447\u0430\u0441\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u044b\u0445 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u043f\u0430\u043a\u0435\u0442\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430.\n\n\u0418\u043c\u043f\u0430\u043a\u0442:\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b. \u041f\u043e\u043b\u043d\u043e\u0435 \u0432\u043b\u0438\u044f\u043d\u0438\u0435 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0432\u0438\u0441\u0438\u0442 \u043e\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u044f\u0437\u044b\u043a \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u043b\u0438 \u0442\u0430\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u043c\u043e\u0434\u0443\u043b\u044c\n\n\u041a\u0430\u043a\u0438\u0435 \u044f\u0437\u044b\u043a\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442:\n- Haskell\n- Node.js\n- Rust\n- PHP\n\n\u041d\u043e \u0430\u0432\u0442\u043e\u0440 \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u044d\u0442\u043e \u0442\u0430\u043a \u0436\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u043c\u043e \u043a Erlang, Go, Java, Python \u0438 Ruby.\n\n\u0421\u043f\u0438\u0441\u043e\u043a CVE:\nCVE-2024-1874\nCVE-2024-22423\nCVE-2024-24576\nCVE-2024-3566", "creation_timestamp": "2024-04-15T15:02:52.000000Z"}, {"uuid": "91baaf65-6550-4c4a-81e6-f337a369a19c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/2707", "content": "https://summoning.team/blog/progress-report-server-rce-cve-2024-4358-cve-2024-1800/\n\nMolding Lies Into Reality || Exploiting CVE-2024-4358\n#\u5206\u6790  #poc", "creation_timestamp": "2024-06-24T15:18:09.000000Z"}, {"uuid": "7e26cd67-26e2-44e0-b118-a27d3a137960", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/3056", "content": "https://github.com/fa-rrel/CVE-2024-4358\n\nTelerik Report Server deserialization and authentication bypass exploit chain for CVE-2024-4358/CVE-2024-1800\n#github #exploit", "creation_timestamp": "2024-08-24T16:27:52.000000Z"}, {"uuid": "4826a4c6-a7ad-4f75-863a-6cedd7ce3f9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "published-proof-of-concept", "source": "https://t.me/club31337/2138", "content": "https://www.tenable.com/blog/cve-2024-4358-cve-2024-1800-exploit-code-available-for-critical-exploit-chain\n\n\u269c\ufe0f @club1337", "creation_timestamp": "2024-11-11T02:28:51.000000Z"}, {"uuid": "c452e68d-2bd8-412d-bd57-ec6d07429a67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/10625", "content": "#exploit\n1. Exploring the Unknown: Beneath the Surface of Unpatched WordPress SSRF\nhttps://patchstack.com/articles/exploring-the-unpatched-wordpress-ssrf\n\n2. CVE-2024-4358/CVE-2024-1800:\nTelerik Report Server deserialization/authentication bypass exploit chain\nhttps://github.com/sinsinology/CVE-2024-4358\n\n3. CVE-2023-20938:\nAttacking Android Binder\nhttps://androidoffsec.withgoogle.com/posts/attacking-android-binder-analysis-and-exploitation-of-cve-2023-20938", "creation_timestamp": "2024-06-04T18:48:59.000000Z"}, {"uuid": "0dc8101e-0f69-49bd-ab96-c94a71375597", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1874", "type": "seen", "source": "https://gist.github.com/ivanys2244-sys/cd3c2a40e041f4b33eddc1479dd0d4f9", "content": "# Security Advisory \u2014 Target E-commerce Platform\n\n> **Note:** This is an anonymized sample report for portfolio purposes. All identifying information (domain, IP addresses, third-party service names) has been replaced with placeholders. The original report was sent to the affected vendor through responsible disclosure channels.\n\n## Summary\n\nPassive security assessment of a Russian-language e-commerce platform running behind a two-layer WAF (Cloudflare + DDoS-Guard). The platform sells in-game currency and ranks for a Minecraft server. The backend is hosted on shared infrastructure and runs a customized SaaS shopping cart (EasyDonate) on top of OctoberCMS.\n\n**16 findings identified** during passive reconnaissance:\n- **3 HIGH** \u2014 outdated PHP version, missing security headers, origin server reachable via DNS bypass\n- **5 MEDIUM** \u2014 cookie security issues, missing authentication on cart mutations, open redirect in SSO handler\n- **6 LOW** \u2014 information disclosure, missing cookie flags\n- **2 INFO** \u2014 operational observations, GDPR considerations\n\n**Critical chain:** outdated PHP 7.4 on origin + DNS resolution bypass = potential RCE if CVE-2024-4577 or CVE-2024-1874 is exploitable on this configuration.\n\n## Architecture\n\n```\nINTERNET \u2500\u25ba HTTPS \u2500\u25ba Cloudflare Edge (203.0.113.10, CF-ASN)\n                    \u2193 HTTPS\n                  DDoS-Guard Proxy (transparent, rate-limit + WAF)\n                    \u2193 HTTPS / unix-socket\n                  ORIGIN SERVER (203.0.113.42)\n                    nginx + PHP 7.4.33 + OctoberCMS + EasyDonate\n                    + Minecraft server :25565 (same host)\n```\n\n## Network reconnaissance\n\n### DNS\n- A: 203.0.113.10 (Cloudflare edge)\n- AAAA: none (no IPv6)\n- NS: jim.ns.cloudflare.com, kay.ns.cloudflare.com\n- MX: none (no mail server)\n- TXT: \"v=spf1 -all\" (strict SPF, prevents spoofing)\n- DMARC: **not configured** (recommendation below)\n\n### Subdomain enumeration\nWildcard A-record `*.target-a.example` resolves to origin IP 203.0.113.42 for all subdomains (admin, dev, git, cp, etc.). This is a reconnaissance shortcut for attackers and a DNS rebinding attack surface.\n\n### Reverse-IP\nThe Minecraft server (203.0.113.42:25565) is on the same physical host as the web application. Compromise of one = compromise of both.\n\n## Findings\n\n### HIGH severity\n\n#### F-001 \u00b7 PHP 7.4.33 (EOL since 2022-11-28)\n\n**CVSS:** 7.5 | **CWE:** CWE-1104 (Use of Unmaintained Third Party Components)\n\n**Evidence:** `X-Powered-By: PHP/7.4.33` header visible when reaching the origin directly.\n\n**Impact:** All PHP 7.4 CVEs are unpatched. Most critical:\n- **CVE-2024-4577** (CVSS 9.8) \u2014 PHP-CGI argument injection \u2192 unauthenticated RCE\n- **CVE-2024-1874** (CVSS 9.4) \u2014 PHP-FPM `SCRIPT_FILENAME` LFI \u2192 RCE\n- Multiple XSS, DoS, information disclosure CVEs\n\nThe site processes payment data, which compounds the risk.\n\n**Remediation:**\n1. Upgrade to PHP 8.3+ (EasyDonate 5.x supports 8.1+)\n2. Test in staging environment before production cutover\n3. Subscribe to PHP security advisories: https://www.php.net/security/\n\n---\n\n#### F-002 \u00b7 Missing critical security headers\n\n**CVSS:** 7.4 | **CWE:** CWE-693 (Protection Mechanism Failure)\n\n**Evidence:** All security headers NOT SET in HTTP responses.\n\n**Missing headers:**\n- `Content-Security-Policy` \u2014 no defense against XSS / inline scripts\n- `X-Frame-Options` \u2014 site can be embedded in iframe (clickjacking on /payment)\n- `Strict-Transport-Security` \u2014 SSL-stripping MITM possible\n- `X-Content-Type-Options` \u2014 MIME-sniffing on uploaded avatars\n- `Referrer-Policy` \u2014 leaks full URL in Referer\n- `Permissions-Policy` \u2014 no restriction on camera/mic/geolocation\n\n**Impact:** Any future XSS vulnerability = full account takeover. Clickjacking on payment forms = financial damage. SSL-stripping = session theft.\n\n**Remediation (nginx):**\n```nginx\nadd_header Strict-Transport-Security \"max-age=31536000; includeSubDomains\" always;\nadd_header X-Frame-Options \"SAMEORIGIN\" always;\nadd_header X-Content-Type-Options \"nosniff\" always;\nadd_header Referrer-Policy \"strict-origin-when-cross-origin\" always;\nadd_header Permissions-Policy \"camera=(), microphone=(), geolocation=()\" always;\nadd_header Content-Security-Policy \"default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.easydonate-equivalent.example https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com; img-src 'self' data: https:; font-src 'self' https://cdnjs.cloudflare.com; frame-src https://sso-provider.example; connect-src 'self' https://api.easydonate-equivalent.example\" always;\n```\n\n---\n\n#### F-003 \u00b7 Origin server reachable via DNS resolution bypass\n\n**CVSS:** 7.5 | **CWE:** CWE-284 (Improper Access Control)\n\n**Evidence:**\n```bash\n$ curl --resolve target-a.example:443:203.0.113.42 -I https://target-a.example/\nHTTP/1.1 200 OK\nServer: ddos-guard\nX-Powered-By: PHP/7.4.33\n```\n\n**Description:** A simple `--resolve` flag in curl bypasses Cloudflare DNS and connects directly to the origin IP. DDoS-Guard does not block this because the connection appears to come from a legitimate client IP. Attackers can:\n1. Discover origin IP via DNS enumeration (subdomain brute force shows origin for 100+ subdomains)\n2. Bypass Cloudflare security policies (rate limiting, WAF rules, IP geo-blocking)\n3. Reach the origin's PHP 7.4 stack directly (compounds F-001)\n\n**Remediation:**\n1. **Primary:** Migrate origin to **Cloudflare Tunnel** (cloudflared) \u2014 origin has no public IP, only Cloudflare can reach it\n2. **Alternative:** Configure DDoS-Guard to allowlist ONLY Cloudflare IP ranges: https://www.cloudflare.com/ips/\n3. **Quick fix:** Block origin IP from non-Cloudflare sources at the hosting provider firewall\n\n---\n\n### MEDIUM severity (selected)\n\n#### F-004 \u00b7 DDoS-Guard cookies leak client IP\n\nThe `__ddg9_` cookie stores the client IP in plaintext. `__ddg8_` and `__ddg10_` are missing `Secure` and `HttpOnly` flags.\n\n**Remediation:** DDoS-Guard supports cookie hardening options \u2014 enable Secure flag for all cookies.\n\n---\n\n#### F-005 \u00b7 `cart_session` cookie missing Secure flag\n\n**Evidence:** `Set-Cookie: cart_session=...; path=/; httponly; samesite=lax` (no `secure` flag despite HTTPS-only deployment)\n\n**Remediation:** In platform config: set `'cookie_secure' => true`.\n\n---\n\n#### F-006 \u00b7 `PUT /cart` accepts any value without authentication\n\n**Evidence:** `PUT /cart` with `{\"product_id\":1,\"quantity\":-1,\"price\":-1000}` returns 200 OK\n\n**Impact:** If session ID is known (via XSS leak or session fixation), attacker can modify victim's cart, potentially changing prices at checkout.\n\n**Remediation:** Add authentication middleware to cart mutations + validate `quantity > 0` and `price >= server-set-price` server-side.\n\n---\n\n#### F-007 \u00b7 SSO postMessage redirect handler has no URL allowlist\n\n**Evidence:** SSO client library (in `easyid.js`-equivalent):\n```js\nwindow.addEventListener('message', message => {\n    if (!message.isTrusted) return;\n    if (message.origin != 'https://sso-provider.example') return;\n    if (message.data.type != 'sso:redirect') return;\n    window.location.href = message.data.data.redirect;  // NO URL VALIDATION\n});\n```\n\nWhile the origin and isTrusted checks are correct, the redirect URL is never validated. If the SSO provider is compromised, attacker can navigate iframe to any URL.\n\n**Remediation:**\n```js\nconst allowed = new Set([window.location.origin, 'https://target-a.example']);\nif (!allowed.has(new URL(message.data.data.redirect).origin)) return;\n```\n\n---\n\n### LOW severity (selected)\n\n- **X-Powered-By header** leaks PHP version \u2192 `expose_php = Off`\n- **SSO setCookie** missing Secure/HttpOnly \u2192 update to `Secure;SameSite=Strict`\n- **IDOR via /product/{id}** returns 200 with 404-template on non-existent IDs \u2192 use `abort(404)`\n- **AJAX handler enumeration** via error message reflection \u2192 log details server-side only\n- **Missing DMARC record** \u2192 add `_dmarc` TXT with `v=DMARC1; p=reject; rua=mailto:security@example.com`\n- **Payment form without `target=_blank`** \u2192 vulnerable to reverse tabnabbing\n\n---\n\n### INFO\n\n- **Minecraft server offline** at port 25565 (operational issue, likely crashed Java process)\n- **Commercial fingerprinting library deployed** without explicit GDPR consent banner\n\n---\n\n## Coverage\n\n### Tested\n- \u2705 DNS recon (A, AAAA, NS, MX, TXT, reverse)\n- \u2705 Subdomain enumeration (100+ subdomains)\n- \u2705 HTTP fingerprint (Server, X-Powered-By, headers)\n- \u2705 TLS certificate analysis\n- \u2705 Security headers audit\n- \u2705 Cookie security analysis\n- \u2705 Method tampering (PUT/PATCH/DELETE probes, no mutation)\n- \u2705 AJAX handler enumeration\n- \u2705 IDOR via GET request pattern\n- \u2705 CORS configuration\n- \u2705 Cloudflare bypass proof-of-concept (--resolve, read-only)\n- \u2705 Static analysis of HTML/JS/CSS\n- \u2705 FingerprintJS privacy audit\n- \u2705 OAuth/SSO flow analysis\n- \u2705 Payment flow analysis (form targets, postMessage)\n\n### Not tested (out of scope for passive engagement)\n- \u274c Active exploitation (CVE PoC, RCE attempts)\n- \u274c SQLi / XSS submit attempts\n- \u274c File upload bypass\n- \u274c Brute-force on auth endpoints\n- \u274c Modifying site state\n\n## Remediation summary\n\n| Priority | Action | Estimated effort |\n|----------|--------|------------------|\n| **URGENT** | Upgrade PHP 7.4 \u2192 8.3+ | 1 week |\n| **URGENT** | Add security headers (CSP, HSTS, XFO) | 1 hour |\n| **URGENT** | Block origin from non-Cloudflare IPs | 1 hour |\n| **HIGH** | Fix PUT /cart auth + validation | 1 day |\n| **HIGH** | SSO redirect URL allowlist | 1 hour |\n| **MEDIUM** | Fix all cookie flags (Secure, HttpOnly) | 4 hours |\n| **MEDIUM** | Add DMARC record | 30 minutes |\n| **MEDIUM** | Migrate origin to Cloudflare Tunnel | 1 day |\n| **LOW** | Remove X-Powered-By, fix IDOR, add CSRF | 1 day |\n| **OPS** | Restart Minecraft server | 30 minutes |\n| **GDPR** | Add consent banner for fingerprinting | 1 day |\n\n## Disclosure process\n\nThis report was prepared in accordance with responsible disclosure principles:\n- All findings obtained through passive reconnaissance (HTTP GET, public DNS, static analysis)\n- No active exploitation performed\n- No state mutation attempted\n- 90-day disclosure window offered to vendor\n\n---\n\n*Generated for security research portfolio. All identifying information anonymized.*\n", "creation_timestamp": "2026-06-26T23:19:37.401941Z"}, {"uuid": "ccdc54ac-5749-4575-ad90-7c756dee9330", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1874", "type": "seen", "source": "https://gist.github.com/ivanys2244-sys/cd3c2a40e041f4b33eddc1479dd0d4f9", "content": "# Security Advisory \u2014 Target E-commerce Platform\n\n> **Note:** This is an anonymized sample report for portfolio purposes. All identifying information (domain, IP addresses, third-party service names) has been replaced with placeholders. The original report was sent to the affected vendor through responsible disclosure channels.\n\n## Summary\n\nPassive security assessment of a Russian-language e-commerce platform running behind a two-layer WAF (Cloudflare + DDoS-Guard). The platform sells in-game currency and ranks for a Minecraft server. The backend is hosted on shared infrastructure and runs a customized SaaS shopping cart (EasyDonate) on top of OctoberCMS.\n\n**16 findings identified** during passive reconnaissance:\n- **3 HIGH** \u2014 outdated PHP version, missing security headers, origin server reachable via DNS bypass\n- **5 MEDIUM** \u2014 cookie security issues, missing authentication on cart mutations, open redirect in SSO handler\n- **6 LOW** \u2014 information disclosure, missing cookie flags\n- **2 INFO** \u2014 operational observations, GDPR considerations\n\n**Critical chain:** outdated PHP 7.4 on origin + DNS resolution bypass = potential RCE if CVE-2024-4577 or CVE-2024-1874 is exploitable on this configuration.\n\n## Architecture\n\n```\nINTERNET \u2500\u25ba HTTPS \u2500\u25ba Cloudflare Edge (203.0.113.10, CF-ASN)\n                    \u2193 HTTPS\n                  DDoS-Guard Proxy (transparent, rate-limit + WAF)\n                    \u2193 HTTPS / unix-socket\n                  ORIGIN SERVER (203.0.113.42)\n                    nginx + PHP 7.4.33 + OctoberCMS + EasyDonate\n                    + Minecraft server :25565 (same host)\n```\n\n## Network reconnaissance\n\n### DNS\n- A: 203.0.113.10 (Cloudflare edge)\n- AAAA: none (no IPv6)\n- NS: jim.ns.cloudflare.com, kay.ns.cloudflare.com\n- MX: none (no mail server)\n- TXT: \"v=spf1 -all\" (strict SPF, prevents spoofing)\n- DMARC: **not configured** (recommendation below)\n\n### Subdomain enumeration\nWildcard A-record `*.target-a.example` resolves to origin IP 203.0.113.42 for all subdomains (admin, dev, git, cp, etc.). This is a reconnaissance shortcut for attackers and a DNS rebinding attack surface.\n\n### Reverse-IP\nThe Minecraft server (203.0.113.42:25565) is on the same physical host as the web application. Compromise of one = compromise of both.\n\n## Findings\n\n### HIGH severity\n\n#### F-001 \u00b7 PHP 7.4.33 (EOL since 2022-11-28)\n\n**CVSS:** 7.5 | **CWE:** CWE-1104 (Use of Unmaintained Third Party Components)\n\n**Evidence:** `X-Powered-By: PHP/7.4.33` header visible when reaching the origin directly.\n\n**Impact:** All PHP 7.4 CVEs are unpatched. Most critical:\n- **CVE-2024-4577** (CVSS 9.8) \u2014 PHP-CGI argument injection \u2192 unauthenticated RCE\n- **CVE-2024-1874** (CVSS 9.4) \u2014 PHP-FPM `SCRIPT_FILENAME` LFI \u2192 RCE\n- Multiple XSS, DoS, information disclosure CVEs\n\nThe site processes payment data, which compounds the risk.\n\n**Remediation:**\n1. Upgrade to PHP 8.3+ (EasyDonate 5.x supports 8.1+)\n2. Test in staging environment before production cutover\n3. Subscribe to PHP security advisories: https://www.php.net/security/\n\n---\n\n#### F-002 \u00b7 Missing critical security headers\n\n**CVSS:** 7.4 | **CWE:** CWE-693 (Protection Mechanism Failure)\n\n**Evidence:** All security headers NOT SET in HTTP responses.\n\n**Missing headers:**\n- `Content-Security-Policy` \u2014 no defense against XSS / inline scripts\n- `X-Frame-Options` \u2014 site can be embedded in iframe (clickjacking on /payment)\n- `Strict-Transport-Security` \u2014 SSL-stripping MITM possible\n- `X-Content-Type-Options` \u2014 MIME-sniffing on uploaded avatars\n- `Referrer-Policy` \u2014 leaks full URL in Referer\n- `Permissions-Policy` \u2014 no restriction on camera/mic/geolocation\n\n**Impact:** Any future XSS vulnerability = full account takeover. Clickjacking on payment forms = financial damage. SSL-stripping = session theft.\n\n**Remediation (nginx):**\n```nginx\nadd_header Strict-Transport-Security \"max-age=31536000; includeSubDomains\" always;\nadd_header X-Frame-Options \"SAMEORIGIN\" always;\nadd_header X-Content-Type-Options \"nosniff\" always;\nadd_header Referrer-Policy \"strict-origin-when-cross-origin\" always;\nadd_header Permissions-Policy \"camera=(), microphone=(), geolocation=()\" always;\nadd_header Content-Security-Policy \"default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.easydonate-equivalent.example https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com; img-src 'self' data: https:; font-src 'self' https://cdnjs.cloudflare.com; frame-src https://sso-provider.example; connect-src 'self' https://api.easydonate-equivalent.example\" always;\n```\n\n---\n\n#### F-003 \u00b7 Origin server reachable via DNS resolution bypass\n\n**CVSS:** 7.5 | **CWE:** CWE-284 (Improper Access Control)\n\n**Evidence:**\n```bash\n$ curl --resolve target-a.example:443:203.0.113.42 -I https://target-a.example/\nHTTP/1.1 200 OK\nServer: ddos-guard\nX-Powered-By: PHP/7.4.33\n```\n\n**Description:** A simple `--resolve` flag in curl bypasses Cloudflare DNS and connects directly to the origin IP. DDoS-Guard does not block this because the connection appears to come from a legitimate client IP. Attackers can:\n1. Discover origin IP via DNS enumeration (subdomain brute force shows origin for 100+ subdomains)\n2. Bypass Cloudflare security policies (rate limiting, WAF rules, IP geo-blocking)\n3. Reach the origin's PHP 7.4 stack directly (compounds F-001)\n\n**Remediation:**\n1. **Primary:** Migrate origin to **Cloudflare Tunnel** (cloudflared) \u2014 origin has no public IP, only Cloudflare can reach it\n2. **Alternative:** Configure DDoS-Guard to allowlist ONLY Cloudflare IP ranges: https://www.cloudflare.com/ips/\n3. **Quick fix:** Block origin IP from non-Cloudflare sources at the hosting provider firewall\n\n---\n\n### MEDIUM severity (selected)\n\n#### F-004 \u00b7 DDoS-Guard cookies leak client IP\n\nThe `__ddg9_` cookie stores the client IP in plaintext. `__ddg8_` and `__ddg10_` are missing `Secure` and `HttpOnly` flags.\n\n**Remediation:** DDoS-Guard supports cookie hardening options \u2014 enable Secure flag for all cookies.\n\n---\n\n#### F-005 \u00b7 `cart_session` cookie missing Secure flag\n\n**Evidence:** `Set-Cookie: cart_session=...; path=/; httponly; samesite=lax` (no `secure` flag despite HTTPS-only deployment)\n\n**Remediation:** In platform config: set `'cookie_secure' => true`.\n\n---\n\n#### F-006 \u00b7 `PUT /cart` accepts any value without authentication\n\n**Evidence:** `PUT /cart` with `{\"product_id\":1,\"quantity\":-1,\"price\":-1000}` returns 200 OK\n\n**Impact:** If session ID is known (via XSS leak or session fixation), attacker can modify victim's cart, potentially changing prices at checkout.\n\n**Remediation:** Add authentication middleware to cart mutations + validate `quantity > 0` and `price >= server-set-price` server-side.\n\n---\n\n#### F-007 \u00b7 SSO postMessage redirect handler has no URL allowlist\n\n**Evidence:** SSO client library (in `easyid.js`-equivalent):\n```js\nwindow.addEventListener('message', message => {\n    if (!message.isTrusted) return;\n    if (message.origin != 'https://sso-provider.example') return;\n    if (message.data.type != 'sso:redirect') return;\n    window.location.href = message.data.data.redirect;  // NO URL VALIDATION\n});\n```\n\nWhile the origin and isTrusted checks are correct, the redirect URL is never validated. If the SSO provider is compromised, attacker can navigate iframe to any URL.\n\n**Remediation:**\n```js\nconst allowed = new Set([window.location.origin, 'https://target-a.example']);\nif (!allowed.has(new URL(message.data.data.redirect).origin)) return;\n```\n\n---\n\n### LOW severity (selected)\n\n- **X-Powered-By header** leaks PHP version \u2192 `expose_php = Off`\n- **SSO setCookie** missing Secure/HttpOnly \u2192 update to `Secure;SameSite=Strict`\n- **IDOR via /product/{id}** returns 200 with 404-template on non-existent IDs \u2192 use `abort(404)`\n- **AJAX handler enumeration** via error message reflection \u2192 log details server-side only\n- **Missing DMARC record** \u2192 add `_dmarc` TXT with `v=DMARC1; p=reject; rua=mailto:security@example.com`\n- **Payment form without `target=_blank`** \u2192 vulnerable to reverse tabnabbing\n\n---\n\n### INFO\n\n- **Minecraft server offline** at port 25565 (operational issue, likely crashed Java process)\n- **Commercial fingerprinting library deployed** without explicit GDPR consent banner\n\n---\n\n## Coverage\n\n### Tested\n- \u2705 DNS recon (A, AAAA, NS, MX, TXT, reverse)\n- \u2705 Subdomain enumeration (100+ subdomains)\n- \u2705 HTTP fingerprint (Server, X-Powered-By, headers)\n- \u2705 TLS certificate analysis\n- \u2705 Security headers audit\n- \u2705 Cookie security analysis\n- \u2705 Method tampering (PUT/PATCH/DELETE probes, no mutation)\n- \u2705 AJAX handler enumeration\n- \u2705 IDOR via GET request pattern\n- \u2705 CORS configuration\n- \u2705 Cloudflare bypass proof-of-concept (--resolve, read-only)\n- \u2705 Static analysis of HTML/JS/CSS\n- \u2705 FingerprintJS privacy audit\n- \u2705 OAuth/SSO flow analysis\n- \u2705 Payment flow analysis (form targets, postMessage)\n\n### Not tested (out of scope for passive engagement)\n- \u274c Active exploitation (CVE PoC, RCE attempts)\n- \u274c SQLi / XSS submit attempts\n- \u274c File upload bypass\n- \u274c Brute-force on auth endpoints\n- \u274c Modifying site state\n\n## Remediation summary\n\n| Priority | Action | Estimated effort |\n|----------|--------|------------------|\n| **URGENT** | Upgrade PHP 7.4 \u2192 8.3+ | 1 week |\n| **URGENT** | Add security headers (CSP, HSTS, XFO) | 1 hour |\n| **URGENT** | Block origin from non-Cloudflare IPs | 1 hour |\n| **HIGH** | Fix PUT /cart auth + validation | 1 day |\n| **HIGH** | SSO redirect URL allowlist | 1 hour |\n| **MEDIUM** | Fix all cookie flags (Secure, HttpOnly) | 4 hours |\n| **MEDIUM** | Add DMARC record | 30 minutes |\n| **MEDIUM** | Migrate origin to Cloudflare Tunnel | 1 day |\n| **LOW** | Remove X-Powered-By, fix IDOR, add CSRF | 1 day |\n| **OPS** | Restart Minecraft server | 30 minutes |\n| **GDPR** | Add consent banner for fingerprinting | 1 day |\n\n## Disclosure process\n\nThis report was prepared in accordance with responsible disclosure principles:\n- All findings obtained through passive reconnaissance (HTTP GET, public DNS, static analysis)\n- No active exploitation performed\n- No state mutation attempted\n- 90-day disclosure window offered to vendor\n\n---\n\n*Generated for security research portfolio. All identifying information anonymized.*\n", "creation_timestamp": "2026-06-27T00:00:58.449432Z"}, {"uuid": "a3265523-c93f-4b70-afc2-cc4ba1ad22dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "seen", "source": "https://t.me/ZerodayAlert/244", "content": "\u041e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 Telerik Report Server: \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b RCE\n\n\ud83e\udded \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u044e\u0449\u0438\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 (RCE) \u0432 Telerik Report Server. \u0420\u0435\u0448\u0435\u043d\u0438\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c\u0438 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f, \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043e\u0442\u0447\u0435\u0442\u043e\u0432.\n\n\ud83d\udd11 \u041e\u0434\u043d\u0430 \u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (CVE-2024-4358) \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 9.8 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445. \u0412\u0442\u043e\u0440\u0430\u044f (CVE-2024-1800) \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 8.8 \u0434\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\ud83d\udcbb \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0421\u0438\u043d\u0430 \u0425\u0435\u0439\u0440\u0445\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043e\u0431\u0435\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u0441\u043b\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u043f\u0430\u0442\u0447\u0435\u0439 \u0432\u0435\u043d\u0434\u043e\u0440\u043e\u043c. \u041e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0441\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 10.1.24.514 \u0438\u043b\u0438 \u0432\u044b\u0448\u0435.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 #\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #RCE\n\n@ZerodayAlert", "creation_timestamp": "2026-07-06T11:00:06.199535Z"}, {"uuid": "7daf86cf-7083-468d-9b5b-9ba32acf095f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "seen", "source": "https://t.me/ZerodayAlert/244", "content": "\u041e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 Telerik Report Server: \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b RCE\n\n\ud83e\udded \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u044e\u0449\u0438\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 (RCE) \u0432 Telerik Report Server. \u0420\u0435\u0448\u0435\u043d\u0438\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c\u0438 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f, \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043e\u0442\u0447\u0435\u0442\u043e\u0432.\n\n\ud83d\udd11 \u041e\u0434\u043d\u0430 \u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (CVE-2024-4358) \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 9.8 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445. \u0412\u0442\u043e\u0440\u0430\u044f (CVE-2024-1800) \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 8.8 \u0434\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\ud83d\udcbb \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0421\u0438\u043d\u0430 \u0425\u0435\u0439\u0440\u0445\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043e\u0431\u0435\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u0441\u043b\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u043f\u0430\u0442\u0447\u0435\u0439 \u0432\u0435\u043d\u0434\u043e\u0440\u043e\u043c. \u041e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0441\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 10.1.24.514 \u0438\u043b\u0438 \u0432\u044b\u0448\u0435.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 #\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #RCE\n\n@ZerodayAlert", "creation_timestamp": "2026-07-07T00:00:11.444977Z"}, {"uuid": "06bda83e-33f3-4957-8988-c3b7f74c1ca1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "seen", "source": "https://t.me/brutsecurity/467", "content": "\ud83d\udea8Progress Telerik Report Server pre-authenticated RCE chain (CVE-2024-4358/CVE-2024-1800)\ud83d\udea8\n \n\ud83d\udce2PoC: https://github.com/sinsinology/CVE-2024-4358 \n \n\u26a0Detailed Analysis from @SinSinology https://summoning.team/blog/progress-report-server-rce-cve-2024-4358-cve-2024-1800/ \n \n\ud83d\udc49Dorks: \n\ud83d\udd38Hunter: /product.name=\"Telerik report server\" \n\ud83d\udd38FOFA: app=\"Telerik-Report-Server\" \n\ud83d\udd38SHODAN: http.title:\"Telerik report server\"", "creation_timestamp": "2026-07-09T03:00:13.813113Z"}, {"uuid": "f3377694-f427-4376-ab03-7b66b38ca467", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "seen", "source": "https://t.me/brutsecurity/467", "content": "\ud83d\udea8Progress Telerik Report Server pre-authenticated RCE chain (CVE-2024-4358/CVE-2024-1800)\ud83d\udea8\n \n\ud83d\udce2PoC: https://github.com/sinsinology/CVE-2024-4358 \n \n\u26a0Detailed Analysis from @SinSinology https://summoning.team/blog/progress-report-server-rce-cve-2024-4358-cve-2024-1800/ \n \n\ud83d\udc49Dorks: \n\ud83d\udd38Hunter: /product.name=\"Telerik report server\" \n\ud83d\udd38FOFA: app=\"Telerik-Report-Server\" \n\ud83d\udd38SHODAN: http.title:\"Telerik report server\"", "creation_timestamp": "2026-07-10T00:00:37.668094Z"}, {"uuid": "8160f668-70b6-44be-86dc-9e23e4129f2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/467", "content": "\ud83d\udea8Progress Telerik Report Server pre-authenticated RCE chain (CVE-2024-4358/CVE-2024-1800)\ud83d\udea8\n \n\ud83d\udce2PoC: https://github.com/sinsinology/CVE-2024-4358 \n \n\u26a0Detailed Analysis from @SinSinology https://summoning.team/blog/progress-report-server-rce-cve-2024-4358-cve-2024-1800/ \n \n\ud83d\udc49Dorks: \n\ud83d\udd38Hunter: /product.name=\"Telerik report server\" \n\ud83d\udd38FOFA: app=\"Telerik-Report-Server\" \n\ud83d\udd38SHODAN: http.title:\"Telerik report server\"", "creation_timestamp": "2026-07-11T18:00:04.119226Z"}, {"uuid": "7d642c0e-8db7-40e4-88eb-c86c6bd823c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/467", "content": "\ud83d\udea8Progress Telerik Report Server pre-authenticated RCE chain (CVE-2024-4358/CVE-2024-1800)\ud83d\udea8\n \n\ud83d\udce2PoC: https://github.com/sinsinology/CVE-2024-4358 \n \n\u26a0Detailed Analysis from @SinSinology https://summoning.team/blog/progress-report-server-rce-cve-2024-4358-cve-2024-1800/ \n \n\ud83d\udc49Dorks: \n\ud83d\udd38Hunter: /product.name=\"Telerik report server\" \n\ud83d\udd38FOFA: app=\"Telerik-Report-Server\" \n\ud83d\udd38SHODAN: http.title:\"Telerik report server\"", "creation_timestamp": "2026-07-12T00:00:41.202531Z"}, {"uuid": "43bb4eee-e404-4992-9bf8-668b48c43c69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "published-proof-of-concept", "source": "https://t.me/ZerodayAlert/244", "content": "\u041e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 Telerik Report Server: \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b RCE\n\n\ud83e\udded \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u044e\u0449\u0438\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 (RCE) \u0432 Telerik Report Server. \u0420\u0435\u0448\u0435\u043d\u0438\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c\u0438 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f, \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043e\u0442\u0447\u0435\u0442\u043e\u0432.\n\n\ud83d\udd11 \u041e\u0434\u043d\u0430 \u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (CVE-2024-4358) \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 9.8 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445. \u0412\u0442\u043e\u0440\u0430\u044f (CVE-2024-1800) \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 8.8 \u0434\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\ud83d\udcbb \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0421\u0438\u043d\u0430 \u0425\u0435\u0439\u0440\u0445\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043e\u0431\u0435\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u0441\u043b\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u043f\u0430\u0442\u0447\u0435\u0439 \u0432\u0435\u043d\u0434\u043e\u0440\u043e\u043c. \u041e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0441\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 10.1.24.514 \u0438\u043b\u0438 \u0432\u044b\u0448\u0435.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 #\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #RCE\n\n@ZerodayAlert", "creation_timestamp": "2026-07-11T23:00:04.568770Z"}, {"uuid": "a1e7715f-479f-4bc6-aeb9-30bbc80043b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "published-proof-of-concept", "source": "https://t.me/ZerodayAlert/244", "content": "\u041e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 Telerik Report Server: \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b RCE\n\n\ud83e\udded \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u044e\u0449\u0438\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 (RCE) \u0432 Telerik Report Server. \u0420\u0435\u0448\u0435\u043d\u0438\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c\u0438 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f, \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043e\u0442\u0447\u0435\u0442\u043e\u0432.\n\n\ud83d\udd11 \u041e\u0434\u043d\u0430 \u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (CVE-2024-4358) \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 9.8 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445. \u0412\u0442\u043e\u0440\u0430\u044f (CVE-2024-1800) \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 8.8 \u0434\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\ud83d\udcbb \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0421\u0438\u043d\u0430 \u0425\u0435\u0439\u0440\u0445\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043e\u0431\u0435\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u0441\u043b\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u043f\u0430\u0442\u0447\u0435\u0439 \u0432\u0435\u043d\u0434\u043e\u0440\u043e\u043c. \u041e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0441\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 10.1.24.514 \u0438\u043b\u0438 \u0432\u044b\u0448\u0435.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 #\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #RCE\n\n@ZerodayAlert", "creation_timestamp": "2026-07-12T00:00:19.092249Z"}, {"uuid": "6e52f3a0-b2e3-46ee-bfa7-078ef19b64da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1813", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mrplsfdmul2p", "content": "Simple Job Board \u2264 2.11.0 - Unauthenticated RCE (CVE-2024-1813)", "creation_timestamp": "2026-07-28T14:13:18.149431Z"}, {"uuid": "8646d142-e26e-4fae-82ef-3d3dce4ac350", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/telerik_report_server_deserialization.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"SinSinology\", \"Soroush Dalili\", \"Unknown\", \"Spencer McIntyre\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module chains an authentication bypass vulnerability (CVE-2024-4358) with a deserialization vulnerability\\n          (CVE-2024-1800) to obtain remote code execution against Telerik Report Server version 10.0.24.130 and prior.\\n          The authentication bypass flaw allows an unauthenticated user to create a new user with administrative privileges.\\n          The USERNAME datastore option can be used to authenticate with an existing account to prevent the creation of a\\n          new one. The deserialization flaw works by uploading a specially crafted report that when loaded will execute an\\n          OS command as NT AUTHORITY\\\\SYSTEM. The module will automatically delete the created report but not the account\\n          because users are unable to delete themselves.\", \"disclosure_date\": \"2024-06-04\", \"fullname\": \"exploit/windows/http/telerik_report_server_deserialization\", \"is_install_path\": true, \"mod_time\": \"2026-06-03 06:46:27 +0000\", \"name\": \"Telerik Report Server Auth Bypass and Deserialization RCE\", \"needs_cleanup\": null, \"notes\": {\"RelatedModules\": [\"auxiliary/scanner/http/telerik_report_server_auth_bypass\"], \"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/windows/http/telerik_report_server_deserialization.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"windows/http/telerik_report_server_deserialization\", \"references\": [\"CVE-2024-1800\", \"CVE-2024-4358\", \"EDB-52103\", \"URL-https://summoning.team/blog/progress-report-server-rce-cve-2024-4358-cve-2024-1800/\"], \"rport\": 83, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:01.022877Z"}]}