{"vulnerability": "2024-66", "sightings": [{"uuid": "2792ace7-8890-4a59-98d7-24139b9c30ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6626", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113434669702054980", "content": "", "creation_timestamp": "2024-11-06T06:48:17.931169Z"}, {"uuid": "43af69d8-f69b-40aa-afe2-a28c0e9e6081", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6626", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113434682290505021", "content": "", "creation_timestamp": "2024-11-06T06:51:29.851982Z"}, {"uuid": "d7aa7ab4-69f4-415e-bb63-726e04a9355d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2024-09-20T18:10:03.000000Z"}, {"uuid": "202a2602-08d9-4c10-85bf-52f68e3e4354", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6678", "type": "seen", "source": "MISP/aaf97b2c-ad16-4ce6-928a-a440112d0fd3", "content": "", "creation_timestamp": "2024-09-16T19:13:31.000000Z"}, {"uuid": "8f2852cf-4908-4288-a7c4-b227fe364da9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6628", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113490612240255893", "content": "", "creation_timestamp": "2024-11-16T03:55:13.432907Z"}, {"uuid": "fce1754a-3bb5-4648-a656-700d6e0180dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6657", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-347-10", "content": "", "creation_timestamp": "2024-12-12T11:00:00.000000Z"}, {"uuid": "977de0af-a4e1-4e7d-9662-f9a700d55948", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6662", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113805349516054986", "content": "", "creation_timestamp": "2025-01-10T17:57:03.243109Z"}, {"uuid": "4c06a2ca-ff42-4e9f-a7aa-c9412149bce0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6680", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113805349530967419", "content": "", "creation_timestamp": "2025-01-10T17:57:03.335563Z"}, {"uuid": "37de2a28-532d-43b7-884c-c701e2eb3779", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6662", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lffsfa5mb72i", "content": "", "creation_timestamp": "2025-01-10T18:16:03.427889Z"}, {"uuid": "9bf7e6ca-8193-4947-94f0-c8affafb83e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6678", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3lfetfuyna22f", "content": "", "creation_timestamp": "2025-01-10T09:01:40.362711Z"}, {"uuid": "6fd893f6-c7d4-4863-afb2-9ddce013b088", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6662", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lffuji5pk52u", "content": "", "creation_timestamp": "2025-01-10T18:54:16.275155Z"}, {"uuid": "d60e9933-a92c-4bc9-987d-bd41da3be02b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6678", "type": "seen", "source": "https://bsky.app/profile/spritzfinance.bsky.social/post/3lfdev2bxgy26", "content": "", "creation_timestamp": "2025-01-09T19:09:03.371633Z"}, {"uuid": "a85ff7a4-3291-45c6-b54c-c5bc215e4914", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6655", "type": "seen", "source": "https://bsky.app/profile/dglynos.bsky.social/post/3lh4w6fxycs2r", "content": "", "creation_timestamp": "2025-02-01T16:20:15.675089Z"}, {"uuid": "a810eb14-5209-413b-b746-f3717f6813cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:46.000000Z"}, {"uuid": "b320adac-6f90-441a-8051-4ac6958b74f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:11:05.000000Z"}, {"uuid": "4daff622-bb48-4b55-86a2-f5870cfbc1f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-22)", "content": "", "creation_timestamp": "2025-02-22T00:00:00.000000Z"}, {"uuid": "3b718f7f-f17a-4475-a1ba-725decf55411", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6651", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-6651.yaml", "content": "", "creation_timestamp": "2025-03-13T03:09:39.000000Z"}, {"uuid": "b94c158e-ee84-48aa-8e19-05fb723659fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6697", "type": "seen", "source": "https://bsky.app/profile/will.willofmiletus.com/post/3lil5dsp5qs2d", "content": "", "creation_timestamp": "2025-02-20T01:31:01.855027Z"}, {"uuid": "40eac258-bae5-4c18-90c3-43476b192c64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6696", "type": "seen", "source": "https://bsky.app/profile/will.willofmiletus.com/post/3lil5dsp5qs2d", "content": "", "creation_timestamp": "2025-02-20T01:31:01.915084Z"}, {"uuid": "06fe7d9d-53a9-4c7f-9806-446df07a8793", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6697", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lilblzncl42p", "content": "", "creation_timestamp": "2025-02-20T02:47:11.313425Z"}, {"uuid": "c3468317-5e08-4f07-9c56-fb3e3bef983b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6696", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lilbm2uubp2v", "content": "", "creation_timestamp": "2025-02-20T02:47:12.666424Z"}, {"uuid": "10f873b4-6e91-4128-9942-e89aad3e9ed4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:59.000000Z"}, {"uuid": "31f6763b-28e0-440c-8d94-0b639daeeeaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6651", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lkbyl7diqi2a", "content": "", "creation_timestamp": "2025-03-13T21:02:10.745046Z"}, {"uuid": "3fe27e68-575d-4ca0-ae9c-9ddc328cf069", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6648", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loo2jwplau32", "content": "", "creation_timestamp": "2025-05-08T14:05:30.793438Z"}, {"uuid": "fb1e61d1-5027-4317-b94a-55a44eba65e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6648", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3loodctjn4x2p", "content": "", "creation_timestamp": "2025-05-08T16:27:01.354544Z"}, {"uuid": "1172ef5a-11b5-4972-9037-68d437229fec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-16)", "content": "", "creation_timestamp": "2025-07-16T00:00:00.000000Z"}, {"uuid": "2f6b4868-267f-4221-868d-b1a64c4b1363", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-12)", "content": "", "creation_timestamp": "2025-09-12T00:00:00.000000Z"}, {"uuid": "81562bac-c0e8-464a-ae48-a2295cfbdc02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "66088dff-9f5e-407b-8d01-55884c229a10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6690", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m6ztox2p3d2b", "content": "", "creation_timestamp": "2025-12-02T21:02:33.669678Z"}, {"uuid": "0129c907-28a1-4222-b379-3bf602cb4553", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-01)", "content": "", "creation_timestamp": "2025-11-01T00:00:00.000000Z"}, {"uuid": "862f8596-045b-4c28-a98d-98b5b91b5fe3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6690", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-6690.yaml", "content": "", "creation_timestamp": "2025-10-27T01:52:34.000000Z"}, {"uuid": "a4ea8861-8c10-4608-ae9b-ed41128d570c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-11)", "content": "", "creation_timestamp": "2025-11-11T00:00:00.000000Z"}, {"uuid": "36a56841-4514-4816-b47c-6806c1d74df0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-20)", "content": "", "creation_timestamp": "2025-08-20T00:00:00.000000Z"}, {"uuid": "2028a733-4186-4571-8918-83576673e515", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6690", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m47cvwti532k", "content": "", "creation_timestamp": "2025-10-27T21:02:34.907258Z"}, {"uuid": "e41f606d-a9c8-408e-bd5c-7aa8732d9f60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/whatsup_gold_sqli.rb", "content": "", "creation_timestamp": "2024-09-26T21:27:04.000000Z"}, {"uuid": "c3a12768-6182-4559-85c8-1a1234e027aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-26)", "content": "", "creation_timestamp": "2025-09-26T00:00:00.000000Z"}, {"uuid": "6387d0db-d9fd-421a-ac8a-d717573ec96b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6671", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3me2rjtn4t72c", "content": "", "creation_timestamp": "2026-02-04T21:02:30.935915Z"}, {"uuid": "0bc4189f-7451-4e52-b6a5-5e00bccee3e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-23)", "content": "", "creation_timestamp": "2025-12-23T00:00:00.000000Z"}, {"uuid": "8504f636-7803-4a0d-a014-2150f08dc770", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-14)", "content": "", "creation_timestamp": "2026-02-14T00:00:00.000000Z"}, {"uuid": "7abd77b9-a524-4469-9ced-260241f00938", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-19)", "content": "", "creation_timestamp": "2026-01-19T00:00:00.000000Z"}, {"uuid": "b8988cbd-7d88-4e59-938b-5bf9de65096e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-6678", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1374", "content": "", "creation_timestamp": "2024-09-13T04:00:00.000000Z"}, {"uuid": "7216584c-f699-4068-b853-dfeab36d5823", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-6670", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/46dcdbb6-3332-45a4-9e0f-0d166483c857", "content": "", "creation_timestamp": "2026-02-02T12:26:28.990634Z"}, {"uuid": "438836ea-f493-47bd-8f5f-e64dfdc2a38c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-14)", "content": "", "creation_timestamp": "2026-04-14T00:00:00.000000Z"}, {"uuid": "c019e213-c6b5-4a96-9604-6ab456e93978", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6678", "type": "seen", "source": "https://t.me/BleepingComputer/20662", "content": "\u200aGitLab warns of critical pipeline execution vulnerability\n\nGitLab has released critical updates to address multiple vulnerabilities, the most severe of them (CVE-2024-6678) allowing an attacker to trigger\u00a0pipelines as arbitrary users under certain conditions. [...]\n\nhttps://www.bleepingcomputer.com/news/security/gitlab-warns-of-critical-pipeline-execution-vulnerability/", "creation_timestamp": "2024-09-12T15:18:20.000000Z"}, {"uuid": "adc0b019-f5d5-4523-b5ba-5623f79f7db3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "seen", "source": "https://bsky.app/profile/threatchain.bsky.social/post/3mkb46fzeip2s", "content": "", "creation_timestamp": "2026-04-24T18:00:03.903178Z"}, {"uuid": "42856f73-237a-4301-bfc3-0d1fdb05ad92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "seen", "source": "https://bsky.app/profile/threatchain.bsky.social/post/3mkb46hgykw2s", "content": "", "creation_timestamp": "2026-04-24T18:00:05.166313Z"}, {"uuid": "49a07014-aaa5-4165-8433-1788e0863ece", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "published-proof-of-concept", "source": "https://t.me/cKure/13581", "content": "\u25a0\u25a0\u25a1\u25a1\u25a1 Breaking Down Barriers: Exploiting Pre-Auth SQL Injection in WhatsUp Gold\nCVE-2024-6670.\n\nhttps://summoning.team/blog/progress-whatsup-gold-sqli-cve-2024-6670/", "creation_timestamp": "2024-09-02T18:56:57.000000Z"}, {"uuid": "7ccacb09-aee5-4e50-afb4-c2300742f7ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6696", "type": "seen", "source": "https://t.me/cvedetector/18491", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6696 - Here are the titles: 1. Hitachi Vantara Pentaho Business Analytics Server Access Control Bypass 2. Hitachi Vantara Pentaho Business Analytics Server Authorization Check Failure\", \n  \"Content\": \"CVE ID : CVE-2024-6696 \nPublished : Feb. 20, 2025, 12:15 a.m. | 27\u00a0minutes ago \nDescription : The product implements access controls via a policy or other feature with the intention to disable or restrict accesses (reads and/or writes) to assets in a system from untrusted agents. However, implemented access controls lack required granularity, which renders the control policy too broad because it allows accesses from unauthorized agents to the security-sensitive assets. (CWE-1220)\u00a0  \n  \n  \n  \n  \n  \n  \nHitachi Vantara Pentaho Business Analytics Server versions before 10.2.0.0 and 9.3.0.9, including 8.3.x, do not correctly perform an authorization check in the user console trash content  \n  \n  \n  \n  \n  \n  \n\u00a0An attacker exploits a weakness in the configuration of access controls and is able to bypass the intended protection that these measures guard against and thereby obtain unauthorized access to the system or network. \nSeverity: 4.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-20T02:16:35.000000Z"}, {"uuid": "449cc52f-7b49-450b-86f6-3e6ec141d2b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6697", "type": "seen", "source": "https://t.me/cvedetector/18486", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6697 - Hitachi Vantara Pentaho Business Analytics Server Privilege Escalation Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-6697 \nPublished : Feb. 20, 2025, 12:15 a.m. | 27\u00a0minutes ago \nDescription : The product does not handle or incorrectly handles when it has insufficient privileges to access resources or functionality as specified by their permissions. This may cause it to follow unexpected code paths that may leave the product in an invalid state. (CWE-280)  \n  \n  \n  \n\u00a0  \n  \n  \n  \nHitachi Vantara Pentaho Business Analytics Server versions before 10.2.0.0 and 9.3.0.9, including 8.3.x, do not handle invalid and missing permissions correctly, resulting in a denial of service.  \n  \n  \n  \n\u00a0  \n  \n  \n  \nAn adversary leverages a legitimate capability of an application in such a way as to achieve a negative technical impact. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-20T02:16:29.000000Z"}, {"uuid": "eb704e00-c36f-4c07-bbcb-2393f9e5c84a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "published-proof-of-concept", "source": "https://t.me/realLulzSec/1883", "content": "https://summoning.team/blog/progress-whatsup-gold-sqli-cve-2024-6670/\n\nBreaking Down Barriers: Exploiting Pre-Auth SQL Injection In WhatsUp Gold\nCVE-2024-6670\n#\u5206\u6790", "creation_timestamp": "2024-09-01T00:52:21.000000Z"}, {"uuid": "940bf6a4-6eea-4d55-8a07-b49468e518e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6646", "type": "published-proof-of-concept", "source": "https://t.me/realLulzSec/1262", "content": "CVE-2024-6646\n\nGET /downloadFile.php?file=config HTTP/1.1", "creation_timestamp": "2024-07-14T17:12:45.000000Z"}, {"uuid": "fdb3774a-c3db-4a57-abc6-1c37a1e85649", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6662", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1193", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-6662\n\ud83d\udd39 Description: Websites managed by MegaBIP in versions below 5.15 are vulnerable to Cross-Site Request Forgery (CSRF) as the form available under\u00a0\"/edytor/index.php?id=7,7,0\" lacks protection mechanisms.\nA user could be tricked into visiting a malicious website, which would send POST request to this endpoint. If the victim is a logged in administrator, this could lead to creation of new accounts and granting of administrative permissions.\n\ud83d\udccf Published: 2025-01-10T17:50:51.104Z\n\ud83d\udccf Modified: 2025-01-10T17:50:51.104Z\n\ud83d\udd17 References:\n1. https://cert.pl/en/posts/2024/09/CVE-2024-6662\n2. https://megabip.pl/\n3. https://www.gov.pl/web/cyfryzacja/rekomendacja-pelnomocnika-rzadu-ds-cyberbezpieczenstwa-dotyczaca-biuletynow-informacji-publicznej", "creation_timestamp": "2025-01-10T18:03:29.000000Z"}, {"uuid": "e47c944d-b4d0-4023-a88a-c011fc99e7ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6648", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15520", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-6648\n\ud83d\udd25 CVSS Score: 8.7 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: Absolute Path Traversal vulnerability in AP Page Builder versions prior to 4.0.0 could allow an unauthenticated remote user to modify the 'product_item_path' within the 'config' JSON file, allowing them to read any file on the system.\n\ud83d\udccf Published: 2025-05-08T12:16:53.436Z\n\ud83d\udccf Modified: 2025-05-08T13:11:48.054Z\n\ud83d\udd17 References:\n1. https://www.incibe.es/en/incibe-cert/notices/aviso/path-traversal-ap-page-builder", "creation_timestamp": "2025-05-08T13:24:37.000000Z"}, {"uuid": "8ebc86e3-10da-4f82-a3ee-4dfefa93ba7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6678", "type": "seen", "source": "https://t.me/tech_b0lt_Genona/4667", "content": "\u041d\u0430\u0448\u0430 \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u0430\u044f \u0440\u0443\u0431\u0440\u0438\u043a\u0430\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u044f\u0435\u043c \u0433\u0438\u0442\u043b\u0430\u0431\u0447\u0438\u043a\u0438 \ud83d\udc85\ud83d\udc85\ud83d\udc85\n\nAn issue was discovered in GitLab CE/EE affecting all versions starting from 8.14 prior to 17.1.7, starting from 17.2 prior to 17.2.5, and starting from 17.3 prior to 17.3.2, which allows an attacker to trigger a pipeline as an arbitrary user under certain circumstances. This is a critical severity issue (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H, 9.9). It is now mitigated in the latest release and is assigned CVE-2024-6678.\n\nhttps://about.gitlab.com/releases/2024/09/11/patch-release-gitlab-17-3-2-released/", "creation_timestamp": "2024-09-12T18:59:10.000000Z"}, {"uuid": "e33e1a68-a213-47da-8012-9e9005f16b1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6694", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8044", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-6694 - WP Mail SMTP < SMTP Password Exposure (Exploiter)\nURL\uff1ahttps://github.com/codeb0ss/CVE-2024-6694-PoC\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-07-21T21:42:59.000000Z"}, {"uuid": "731f5d54-3ace-4ecd-a692-7b3fad85d2c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6678", "type": "seen", "source": "https://t.me/kasperskyb2b/1414", "content": "\u27a1\ufe0f \u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f APT \u0438 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u0418\u0411 \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e\n\n\ud83d\udd0d \u0411\u043e\u043b\u044c\u0448\u043e\u0439 \u043e\u0431\u0437\u043e\u0440 APT, \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0421\u0435\u0432\u0435\u0440\u043d\u043e\u0439 \u041a\u043e\u0440\u0435\u0435: Bluenoroff/APT38, Citrine Sleet, Andariel, ZINC, UNC4899/Slow Pisces, Kimsuky/APT43. \u041a\u0440\u0430\u0442\u043a\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u0430 \u044d\u0432\u043e\u043b\u044e\u0446\u0438\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0412\u041f\u041e, \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u043d\u044b\u0435 TTP, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u043d\u044b\u0435 \u043c\u0438\u0448\u0435\u043d\u0438 \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430 \u0443\u0433\u0440\u043e\u0437.\n\n\ud83d\udcd4 \u041a\u0441\u0442\u0430\u0442\u0438 \u043e Lazarus, \u0432\u044b\u0448\u0435\u043b \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u0441\u0445\u0435\u043c\u044b \u0441 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0441\u0442\u043e\u0432 \u043f\u043e\u0434 \u0432\u0438\u0434\u043e\u043c \u0442\u0435\u0441\u0442\u043e\u0432\u043e\u0433\u043e \u0437\u0430\u0434\u0430\u043d\u0438\u044f \u043f\u0440\u0438 \u043f\u0440\u0438\u0451\u043c\u0435 \u043d\u0430 \u0440\u0430\u0431\u043e\u0442\u0443.\n\n\ud83d\udd35 \u0418\u0442\u043e\u0433\u0438 DDoS \u0437\u0430 \u043f\u0435\u0440\u0432\u043e\u0435 \u043f\u043e\u043b\u0443\u0433\u043e\u0434\u0438\u0435: \u0447\u0438\u0441\u043b\u043e \u0430\u0442\u0430\u043a \u0432 \u0420\u0424 \u0437\u0430 \u043f\u043e\u043b\u0433\u043e\u0434\u0430 \u043f\u0440\u0435\u0432\u044b\u0441\u0438\u043b\u043e \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u0438 \u0437\u0430 \u0432\u0435\u0441\u044c \u043f\u0440\u043e\u0448\u043b\u044b\u0439 \u0433\u043e\u0434, \u043c\u043e\u0449\u043d\u043e\u0441\u0442\u044c \u0442\u043e\u043f\u043e\u0432\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u0437\u0430 \u0433\u043e\u0434 \u0432\u044b\u0440\u043e\u0441\u043b\u0430  \u0432 6,7 \u0440\u0430\u0437. \u041f\u0440\u0430\u0432\u0434\u0430, \u0441\u0440\u0435\u0434\u043d\u044f\u044f \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u0441\u043d\u0438\u0437\u0438\u043b\u0430\u0441\u044c \u0432 24 \u0440\u0430\u0437\u0430.\n\n\ud83d\udfe1 \u041d\u043e\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0430\u0437\u0438\u0430\u0442\u0441\u043a\u0438\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043e\u0442 \u0433\u0440\u0443\u043f\u043f\u044b, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0430\u0437\u044b\u0432\u0430\u044e\u0442 Crimson Palace. \u0413\u0440\u0443\u043f\u043f\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0435 \u0412\u041f\u041e \u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u00ab\u043a\u0440\u0430\u0441\u043d\u044b\u0445\u00bb \u043a\u043e\u043c\u0430\u043d\u0434,  \u043e\u0442\u043b\u0438\u0447\u0430\u0435\u0442\u0441\u044f \u043d\u0430\u0441\u0442\u043e\u0439\u0447\u0438\u0432\u043e\u0441\u0442\u044c\u044e \u0438 \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u0435\u0442\u0441\u044f \u043a \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u043c \u0438\u043c \u043c\u0438\u0448\u0435\u043d\u044f\u043c \u0441\u043f\u0443\u0441\u0442\u044f \u0432\u0441\u0435\u0433\u043e \u0441\u0443\u0442\u043a\u0438 \u043f\u043e\u0441\u043b\u0435 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u0433\u043e \u0412\u041f\u041e. \u0422\u0430\u043a\u0436\u0435 APT \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0434\u043b\u044f \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0412\u041f\u041e \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u04212 \u0432 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\ud83c\udf4f \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432\u0430 Atomic Stealer, \u0434\u0435\u0441\u044f\u0442\u043a\u0438 \u043a\u043b\u043e\u043d\u043e\u0432 \u0438 \u0444\u043e\u0440\u043a\u043e\u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0434\u043e\u043c\u0438\u043d\u0438\u0440\u0443\u044e\u0442 \u043d\u0430 \u00ab\u0440\u044b\u043d\u043a\u0435\u00bb \u0438\u043d\u0444\u043e\u0441\u0442\u0438\u043b\u0435\u0440\u043e\u0432 \u0434\u043b\u044f MacOS.\n\n\ud83d\udc6e\u200d\u2640\ufe0f \u0410\u043d\u0430\u043b\u0438\u0437 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u0412\u041f\u041e \u0438 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 ransomware-\u0433\u0440\u0443\u043f\u043f\u044b Lynx, \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u043e\u0439 \u0432 \u0438\u044e\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430. \u0421\u0443\u0434\u044f \u043f\u043e \u043a\u043e\u0434\u0443, \u043e\u043d\u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 INC Ransomware, \u0438\u043c\u0435\u044e\u0442\u0441\u044f \u043f\u0435\u0440\u0435\u0441\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u043e \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438.\n\n\u0412\u041f\u041e Hadooken \u0430\u0442\u0430\u043a\u0443\u0435\u0442 Linux-\u0441\u0435\u0440\u0432\u0435\u0440\u044b Oracle Weblogic \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0434\u0431\u043e\u0440 \u043f\u0430\u0440\u043e\u043b\u0435\u0439, \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442 \u0412\u041f\u041e Tsunami \u0438 \u043a\u0440\u0438\u043f\u0442\u043e\u043c\u0430\u0439\u043d\u0435\u0440.\n\n\ud83d\udd2c \u042d\u0432\u043e\u043b\u044e\u0446\u0438\u044f \u0431\u043e\u0442\u043d\u0435\u0442\u043e\u0432 Quad7: \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u0443\u044e\u0442 \u0440\u043e\u0443\u0442\u0435\u0440\u044b \u0438 VPN-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 TP-Link, Zyxel, Asus, Axentra, D-Link \u0438 Netgear \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435. \u0417\u0430\u0440\u0430\u0436\u0451\u043d\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u0440\u043e\u043a\u0441\u0438 \u0434\u043b\u044f \u0434\u0440\u0443\u0433\u0438\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0439.\n\n\ud83d\udcf1 \u0410 \u0432\u043e\u0442 \u0431\u043e\u0442\u043d\u0435\u0442 Void \u0441\u043e\u0441\u0442\u043e\u0438\u0442 \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0438\u0437 \u0422\u0412-\u043f\u0440\u0438\u0441\u0442\u0430\u0432\u043e\u043a \u043d\u0430 \u0431\u0430\u0437\u0435 Androd. \u0421\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b, \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0412\u041f\u041e \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u043e\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 APK, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0444\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u0435 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0431\u043e\u0442\u043d\u0435\u0442\u0430 \u0442\u043e\u0436\u0435 \u043d\u0435\u043f\u043e\u043d\u044f\u0442\u043d\u043e. \u0411\u043e\u043b\u044c\u0448\u0435 \u0432\u0441\u0435\u0433\u043e \u0437\u0430\u0440\u0430\u0436\u0451\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0432 \u0411\u0440\u0430\u0437\u0438\u043b\u0438\u0438 \u0438 \u0420\u043e\u0441\u0441\u0438\u0438.\n\n\ud83d\udd14 \u0421\u0440\u0435\u0434\u0438 \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0445 \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e, \u0432\u044b\u0434\u0435\u043b\u044f\u0435\u0442\u0441\u044f \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c GitLab, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0439 \u0432\u043e \u0432\u0441\u0435\u0445 \u0440\u0435\u0434\u0430\u043a\u0446\u0438\u044f\u0445 GitLab \u043e\u043a\u043e\u043b\u043e 20 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u044f\u0430 \u043e\u043f\u0430\u0441\u043d\u0443\u044e CVE-2024-6678 \u0441 CVSS 9.9, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043f\u043e\u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043e\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0432\u0435\u0439\u0435\u0440. \n\n\u0412 \u0441\u0442\u0440\u0430\u043d\u0430\u0445 \u0426\u0435\u043d\u0442\u0440\u0430\u043b\u044c\u043d\u043e\u0439 \u0410\u0437\u0438\u0438 \u0437\u0430\u043c\u0435\u0447\u0435\u043d \u0431\u0430\u043d\u043a\u043e\u0432\u0441\u043a\u0438\u0439 Android-\u0442\u0440\u043e\u044f\u043d\u0435\u0446 Ajina.  \u041e\u043d \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u043f\u0430\u0440\u0442\u043d\u0451\u0440\u0441\u043a\u0443\u044e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443 \u0438 \u0432\u0435\u0441\u044c\u043c\u0430 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c \u0438 \u0432 \u0434\u0440\u0443\u0433\u0438\u0445 \u0440\u0435\u0433\u0438\u043e\u043d\u0430\u0445.\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 #APT @\u041f2\u0422", "creation_timestamp": "2024-09-16T12:13:17.000000Z"}, {"uuid": "aa838675-98c8-49e8-b0ec-232b49ff5149", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6648", "type": "seen", "source": "https://t.me/cvedetector/24826", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6648 - AP Page Builder Path Traversal RCE\", \n  \"Content\": \"CVE ID : CVE-2024-6648 \nPublished : May 8, 2025, 1:15 p.m. | 2\u00a0hours, 7\u00a0minutes ago \nDescription : Absolute Path Traversal vulnerability in AP Page Builder versions prior to 4.0.0 could allow an unauthenticated remote user to modify the 'product_item_path' within the 'config' JSON file, allowing them to read any file on the system. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-08T17:37:00.000000Z"}, {"uuid": "064c8286-f87b-4095-a775-3abdcbd0cf80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "published-proof-of-concept", "source": "https://t.me/realLulzSec/18315", "content": "https://summoning.team/blog/progress-whatsup-gold-sqli-cve-2024-6670/\n\nBreaking Down Barriers: Exploiting Pre-Auth SQL Injection In WhatsUp Gold\nCVE-2024-6670\n#\u5206\u6790", "creation_timestamp": "2024-09-01T16:43:19.000000Z"}, {"uuid": "da62b4f0-9f51-4a1e-acd4-2f4d1708183d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6662", "type": "seen", "source": "https://t.me/cvedetector/14982", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6662 - MegaBIP CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6662 \nPublished : Jan. 10, 2025, 6:15 p.m. | 19\u00a0minutes ago \nDescription : Websites managed by MegaBIP in versions below 5.15 are vulnerable to Cross-Site Request Forgery (CSRF) as the form available under\u00a0\"/edytor/index.php?id=7,7,0\" lacks protection mechanisms.  \nA user could be tricked into visiting a malicious website, which would send POST request to this endpoint. If the victim is a logged in administrator, this could lead to creation of new accounts and granting of administrative permissions. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-10T19:41:23.000000Z"}, {"uuid": "550eba09-6c8e-4040-b2b4-debb48a49211", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/12383", "content": "\u200aProof-of-Concept Exploit Released for WhatsUp Gold Authentication Bypass (CVE-2024-6670)\n\nhttps://securityonline.info/proof-of-concept-exploit-released-for-whatsup-gold-authentication-bypass-cve-2024-6670/", "creation_timestamp": "2024-09-08T17:47:08.000000Z"}, {"uuid": "6c55b4fb-a894-4c53-bc38-f58440a0aa00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6628", "type": "seen", "source": "https://t.me/cvedetector/11213", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6628 - EleForms CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6628 \nPublished : Nov. 16, 2024, 4:15 a.m. | 38\u00a0minutes ago \nDescription : The EleForms \u2013 All In One Form Integration including DB for Elementor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.9.9.9. This is due to missing or incorrect nonce validation when deleting form submissions. This makes it possible for unauthenticated attackers to delete form submissions via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-16T06:02:29.000000Z"}, {"uuid": "067cf6d1-6b71-4009-af0b-17062ccf5679", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6673", "type": "seen", "source": "https://t.me/cvedetector/9323", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6673 - Lollms WebUI CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6673 \nPublished : Oct. 29, 2024, 1:15 p.m. | 22\u00a0minutes ago \nDescription : A Cross-Site Request Forgery (CSRF) vulnerability exists in the `install_comfyui` endpoint of the `lollms_comfyui.py` file in the parisneo/lollms-webui repository, versions v9.9 to the latest. The endpoint uses the GET method without requiring a client ID, allowing an attacker to trick a victim into installing ComfyUI. If the victim's device does not have sufficient capacity, this can result in a crash. \nSeverity: 4.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T14:46:48.000000Z"}, {"uuid": "7e1ffab2-ddbd-4cda-8e39-b59329e9f4ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6674", "type": "seen", "source": "https://t.me/cvedetector/9320", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6674 - Parisneo Lollms-Webui CORS Denial of Confidentiality and Integrity\", \n  \"Content\": \"CVE ID : CVE-2024-6674 \nPublished : Oct. 29, 2024, 1:15 p.m. | 22\u00a0minutes ago \nDescription : A CORS misconfiguration in parisneo/lollms-webui prior to version 10 allows attackers to steal sensitive information such as logs, browser sessions, and settings containing private API keys from other services. This vulnerability can also enable attackers to perform actions on behalf of a user, such as deleting a project or sending a message. The issue impacts the confidentiality and integrity of the information. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T14:46:46.000000Z"}, {"uuid": "0eccad49-9d77-4175-8e4d-2809525ce450", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6626", "type": "seen", "source": "https://t.me/cvedetector/9992", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6626 - EleForms \u2013 All In One Form Integration including DB for Elementor Plugin Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6626 \nPublished : Nov. 6, 2024, 7:15 a.m. | 40\u00a0minutes ago \nDescription : The EleForms \u2013 All In One Form Integration including DB for Elementor plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on several functions in all versions up to, and including, 2.9.9.9. This makes it possible for unauthenticated attackers to view form submissions. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-06T09:08:41.000000Z"}, {"uuid": "24ddb6c7-d036-4109-bd78-e128b5df2756", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6657", "type": "seen", "source": "https://t.me/cvedetector/7679", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6657 - Samsung BLE Intermittent Disconnection Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6657 \nPublished : Oct. 11, 2024, 2:15 p.m. | 39\u00a0minutes ago \nDescription : A denial of service may be caused to a single peripheral device in a BLE network when multiple central   \ndevices continuously connect and disconnect to the peripheral. A hard reset is required to recover the peripheral device. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-11T17:01:21.000000Z"}, {"uuid": "1f397abe-be7a-4c9b-bed6-eb4f79d19fe6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6654", "type": "seen", "source": "https://t.me/cvedetector/6490", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6654 - ESET macOS Privilege Escalation and Denial-of-Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6654 \nPublished : Sept. 27, 2024, 9:15 a.m. | 45\u00a0minutes ago \nDescription : Products for macOS enables a\u00a0user logged on to the system to perform a denial-of-service attack, which could be misused to disable the protection of the ESET security product and cause general system slow-down. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T12:24:08.000000Z"}, {"uuid": "06e2e058-ebae-436c-8c5c-28828e7da427", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6641", "type": "seen", "source": "https://t.me/cvedetector/5903", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6641 - WordPress WP Hardening Security Feature Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-6641 \nPublished : Sept. 18, 2024, 6:15 a.m. | 38\u00a0minutes ago \nDescription : The WP Hardening \u2013 Fix Your WordPress Security plugin for WordPress is vulnerable to Security Feature Bypass in all versions up to, and including, 1.2.6. This is due to use of an incorrect regular expression within the \"Stop User Enumeration\" feature. This makes it possible for unauthenticated attackers to bypass intended security restrictions and expose site usernames. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T09:11:08.000000Z"}, {"uuid": "fd5ec90a-e413-4099-a970-64349bda5dda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6685", "type": "seen", "source": "https://t.me/cvedetector/5771", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6685 - GitLab CE/EE Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6685 \nPublished : Sept. 16, 2024, 10:15 p.m. | 42\u00a0minutes ago \nDescription : An issue was discovered in GitLab CE/EE affecting all versions starting from 16.7 prior to 17.1.7, 17.2 prior to 17.2.5, and 17.3 prior to 17.3.2,  where group runners information was disclosed to unauthorised group members. \nSeverity: 3.1 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-17T01:23:56.000000Z"}, {"uuid": "2c7a9b14-a4c6-4413-9f52-5d97d823c045", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6656", "type": "seen", "source": "https://t.me/cvedetector/5574", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6656 - TNB Mobile Solutions Cockpit Software Hard-Coded Credentials Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-6656 \nPublished : Sept. 13, 2024, 9:15 a.m. | 20\u00a0minutes ago \nDescription : Use of Hard-coded Credentials vulnerability in TNB Mobile Solutions Cockpit Software allows Read Sensitive Strings Within an Executable.This issue affects Cockpit Software: before v2.13. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-13T11:41:24.000000Z"}, {"uuid": "48a6dd8e-6ffe-46de-bba7-9907ef7841da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6617", "type": "seen", "source": "https://t.me/cvedetector/5537", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6617 - NinjaTeam WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6617 \nPublished : Sept. 13, 2024, 6:15 a.m. | 29\u00a0minutes ago \nDescription : The NinjaTeam Header Footer Custom Code WordPress plugin before 1.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-13T08:45:29.000000Z"}, {"uuid": "6e92881d-ea0e-4ea7-9986-9b150ccdd0e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6678", "type": "seen", "source": "https://t.me/cvedetector/5511", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6678 - GitLab Pipeline Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6678 \nPublished : Sept. 12, 2024, 7:15 p.m. | 35\u00a0minutes ago \nDescription : An issue was discovered in GitLab CE/EE affecting all versions starting from 8.14 prior to 17.1.7, starting from 17.2 prior to 17.2.5, and starting from 17.3 prior to 17.3.2, which allows an attacker to trigger a pipeline as an arbitrary user under certain circumstances. \nSeverity: 9.9 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-12T21:53:30.000000Z"}, {"uuid": "c6c16636-dc83-4d2c-a737-dd842c83b865", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6658", "type": "seen", "source": "https://t.me/cvedetector/5486", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6658 - \"LoadMaster ECS Multi-Tenant Hypervisor OS Command Injection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-6658 \nPublished : Sept. 12, 2024, 3:18 p.m. | 17\u00a0minutes ago \nDescription : Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows OS Command Injection.This issue affects:  \n  \n  \n  \n\u202fProduct   \n  \n  \n  \n  \n  \nAffected Versions   \n  \n  \n  \n  \n  \nLoadMaster   \n  \n  \n  \n  \n  \nFrom 7.2.55.0 to 7.2.60.0 (inclusive)   \n  \n  \n  \n  \n  \n\u202f\u00a0  \n  \n  \n  \n  \n  \nFrom 7.2.49.0 to 7.2.54.11 (inclusive)   \n  \n  \n  \n  \n  \n\u202f\u00a0  \n  \n  \n  \n  \n  \n7.2.48.12 and all prior versions   \n  \n  \n  \n  \n  \n  \n  \n  \nMulti-Tenant Hypervisor   \n  \n  \n  \n  \n  \n7.1.35.11 and all prior versions   \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \nECS  \n  \n  \n  \n  \n  \nAll prior versions to 7.2.60.0 (inclusive) \nSeverity: 8.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-12T17:42:36.000000Z"}, {"uuid": "4db86256-82d2-4761-abff-29db8135e71c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "seen", "source": "https://t.me/cvedetector/4481", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6670 - SolarWinds WhatsUp Gold SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-6670 \nPublished : Aug. 29, 2024, 10:15 p.m. | 42\u00a0minutes ago \nDescription : In WhatsUp Gold versions released before 2024.0.0,\u00a0a SQL Injection vulnerability allows an unauthenticated attacker to retrieve the users encrypted password. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-30T01:25:57.000000Z"}, {"uuid": "5acf9f0b-7fa5-4eef-90c1-84edac1746b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6672", "type": "seen", "source": "https://t.me/cvedetector/4480", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6672 - WhatsUp Gold SQL Injection Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-6672 \nPublished : Aug. 29, 2024, 10:15 p.m. | 42\u00a0minutes ago \nDescription : In WhatsUp Gold versions released before 2024.0.0, a SQL Injection vulnerability allows an authenticated low-privileged attacker to achieve privilege escalation by modifying a privileged user's password. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-30T01:25:57.000000Z"}, {"uuid": "4b8aceaa-1efd-447d-a394-477e5bb41a42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6671", "type": "seen", "source": "https://t.me/cvedetector/4479", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6671 - \"Falconstor WhatsUp Gold SQL Injection\"\", \n  \"Content\": \"CVE ID : CVE-2024-6671 \nPublished : Aug. 29, 2024, 10:15 p.m. | 42\u00a0minutes ago \nDescription : In WhatsUp Gold versions released before 2024.0.0, if the application is configured with only a single user, a SQL Injection vulnerability allows an unauthenticated attacker to retrieve the users encrypted password. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-30T01:25:56.000000Z"}, {"uuid": "dc6b094c-520c-4d5b-b299-166f02df7e91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6632", "type": "seen", "source": "https://t.me/cvedetector/4250", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6632 - FileCatalyst Workflow SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6632 \nPublished : Aug. 27, 2024, 3:15 p.m. | 42\u00a0minutes ago \nDescription : A vulnerability exists in FileCatalyst Workflow whereby a field accessible to the super admin can be used to perform an SQL injection attack which can lead to a loss of confidentiality, integrity, and availability. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-27T18:13:51.000000Z"}, {"uuid": "ca034f06-1462-479f-8517-e1df6db2e342", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6633", "type": "seen", "source": "https://t.me/cvedetector/4249", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6633 - FileCatalyst Workflow HSQLDB Default Credentials Exposure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6633 \nPublished : Aug. 27, 2024, 3:15 p.m. | 42\u00a0minutes ago \nDescription : The default credentials for the setup HSQL database (HSQLDB) for FileCatalyst Workflow are published in a vendor knowledgebase article. Misuse of these credentials could lead to a compromise of confidentiality, integrity, or availability of the software.  \n  \nThe HSQLDB is only included to facilitate installation, has been deprecated, and is not intended for production use per vendor guides. However, users who have not configured FileCatalyst Workflow to use an alternative database per recommendations are vulnerable to attack from any source that can reach the HSQLDB. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-27T18:13:50.000000Z"}, {"uuid": "eadc3faa-dc47-425a-b79f-4da82ee41b21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6651", "type": "seen", "source": "https://t.me/cvedetector/2536", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6651 - Apache WordPress File Upload Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-6651 \nPublished : Aug. 6, 2024, 6:15 a.m. | 44\u00a0minutes ago \nDescription : The WordPress File Upload WordPress plugin before 4.24.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-06T09:09:08.000000Z"}, {"uuid": "731a0979-8739-4b13-b4d2-a8de8eea881e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6688", "type": "seen", "source": "https://t.me/cvedetector/4228", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6688 - Oxygen Builder WordPress Unauthorized Data Modification Weakness\", \n  \"Content\": \"CVE ID : CVE-2024-6688 \nPublished : Aug. 27, 2024, 5:15 a.m. | 40\u00a0minutes ago \nDescription : The Oxygen Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the oxy_save_css_from_admin AJAX action in all versions up to, and including, 4.8.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update stylesheets. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-27T08:12:23.000000Z"}, {"uuid": "8397f95f-88b8-4ed7-b821-755343d12d24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6631", "type": "seen", "source": "https://t.me/cvedetector/4050", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6631 - ImageRecycle WordPress Plugin JSON Hijacking & Unauthorized Data Modification\", \n  \"Content\": \"CVE ID : CVE-2024-6631 \nPublished : Aug. 24, 2024, 3:15 a.m. | 16\u00a0minutes ago \nDescription : The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several AJAX actions in all versions up to, and including, 3.1.14. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform unauthorized actions, such as updating plugin settings. \nSeverity: 5.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-24T05:40:27.000000Z"}, {"uuid": "be5c8dc0-c839-42b2-96b9-69923bff0a94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6619", "type": "seen", "source": "https://t.me/cvedetector/3034", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6619 - Ocean Data Systems Dream Report Privilege Escalation and Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6619 \nPublished : Aug. 13, 2024, 5:15 p.m. | 43\u00a0minutes ago \nDescription : In Ocean Data Systems Dream Report, an incorrect permission vulnerability could allow a local unprivileged attacker to escalate their privileges and could cause a denial-of-service. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-13T20:27:51.000000Z"}, {"uuid": "4601dd4c-0b70-428a-a6bc-685b406f61e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6618", "type": "seen", "source": "https://t.me/cvedetector/3033", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6618 - Ocean Data Systems Dream Report DLL Injection Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6618 \nPublished : Aug. 13, 2024, 5:15 p.m. | 43\u00a0minutes ago \nDescription : In Ocean Data Systems Dream Report, a path traversal vulnerability could allow an attacker to perform remote code execution through the injection of a malicious dynamic-link library (DLL). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-13T20:27:50.000000Z"}, {"uuid": "b6104073-23ba-4ab4-8ff6-3f494ff8538b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6639", "type": "seen", "source": "https://t.me/cvedetector/2841", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6639 - MDx WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6639 \nPublished : Aug. 12, 2024, 2:15 p.m. | 22\u00a0minutes ago \nDescription : The MDx theme for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mdx_list_item' shortcode in all versions up to, and including, 2.0.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-12T16:46:47.000000Z"}, {"uuid": "67e046e6-124d-4e69-a4c4-c792d645467c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "published-proof-of-concept", "source": "https://t.me/HackerArsenal/238", "content": "CVE-2024-6670 WhatsUp Gold\n*\n\u0421\u0442\u0430\u0442\u044c\u044f Exploiting Pre-Auth SQL Injection in WhatsUp Gold\n*\nPOC exploit", "creation_timestamp": "2024-08-30T22:36:55.000000Z"}, {"uuid": "e0885de3-feba-4970-8d84-c8e29d1d1ed6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6629", "type": "seen", "source": "https://t.me/cvedetector/1543", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6629 - WordPress All-in-One Video Gallery Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-6629 \nPublished : July 24, 2024, 7:15 a.m. | 36\u00a0minutes ago \nDescription : The All-in-One Video Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Video shortcode in all versions up to, and including, 3.7.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-24T09:57:37.000000Z"}, {"uuid": "e1445383-04c8-46b2-ad6a-7b6d31f66add", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6675", "type": "seen", "source": "https://t.me/cvedetector/1479", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6675 - A deserialization of untrusted data vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6675 \nPublished : July 22, 2024, 8:15 p.m. | 27\u00a0minutes ago \nDescription : A deserialization of untrusted data vulnerability exists in NI VeriStand that may result in remote code execution.  Successful exploitation requires an attacker to get a user to open a specially crafted project file.  This vulnerability affects VeriStand 2024 Q2 and prior versions. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-22T22:50:53.000000Z"}, {"uuid": "5161e7a5-791d-429c-9cd3-0c55fdd34ba3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6638", "type": "seen", "source": "https://t.me/cvedetector/1476", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6638 - An integer overflow vulnerability due to improper\", \n  \"Content\": \"CVE ID : CVE-2024-6638 \nPublished : July 22, 2024, 8:15 p.m. | 27\u00a0minutes ago \nDescription : An integer overflow vulnerability due to improper input validation when reading TDMS files in LabVIEW may result in an infinite loop.  Successful exploitation requires an attacker to provide a user with a specially crafted TDMS file.  This vulnerability affects LabVIEW 2024 Q1 and prior versions. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-22T22:50:50.000000Z"}, {"uuid": "a9db0a5c-bbcb-40a9-abab-f2e302de4588", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6637", "type": "seen", "source": "https://t.me/cvedetector/1247", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6637 - WooCommerce Social Login - Unauthenticated Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-6637 \nPublished : July 20, 2024, 8:15 a.m. | 43\u00a0minutes ago \nDescription : The WooCommerce - Social Login plugin for WordPress is vulnerable to unauthenticated privilege escalation in all versions up to, and including, 2.7.3. This is due to a lack of brute force controls on a weak one-time password. This makes it possible for unauthenticated attackers to brute force the one-time password for any user, except an Administrator, if they know the email of user. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-20T11:26:25.000000Z"}, {"uuid": "af616743-695f-4bd0-8fad-1651814056b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6694", "type": "seen", "source": "https://t.me/cvedetector/1242", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6694 - WordPress WP Mail SMTP SMTP Password Exposed pParent\u03af\", \n  \"Content\": \"CVE ID : CVE-2024-6694 \nPublished : July 20, 2024, 4:15 a.m. | 36\u00a0minutes ago \nDescription : The WP Mail SMTP plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 4.0.1. This is due to plugin providing the SMTP password in the SMTP Password field when viewing the settings. This makes it possible for authenticated attackers, with administrative-level access and above, to view the SMTP password for the supplied server. Although this would not be useful for attackers in most cases, if an administrator account becomes compromised this could be useful information to an attacker in a limited environment. \nSeverity: 2.7 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-20T07:15:33.000000Z"}, {"uuid": "7fe93a15-59b9-44e2-8a0e-5de6ccf1432d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6635", "type": "seen", "source": "https://t.me/cvedetector/1249", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6635 - WooCommerce Social Login - Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6635 \nPublished : July 20, 2024, 8:15 a.m. | 43\u00a0minutes ago \nDescription : The WooCommerce - Social Login plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.7.3. This is due to insufficient controls in the 'woo_slg_login_email' function. This makes it possible for unauthenticated attackers to log in as any existing user on the site, excluding an administrator, if they know the email of user. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-20T11:26:27.000000Z"}, {"uuid": "7bb9af47-3621-4da4-a353-39662adf3c57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6636", "type": "seen", "source": "https://t.me/cvedetector/1248", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6636 - WooCommerce Social Login Unauthenticated Data Modification Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6636 \nPublished : July 20, 2024, 8:15 a.m. | 43\u00a0minutes ago \nDescription : The WooCommerce - Social Login plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'woo_slg_login_email' function in all versions up to, and including, 2.7.3. This makes it possible for unauthenticated attackers to change the default role to Administrator while registering for an account. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-20T11:26:26.000000Z"}, {"uuid": "0800be67-4eb9-430b-8483-b38c56c9ab59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6698", "type": "seen", "source": "https://t.me/cvedetector/2208", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6698 - FundEngine WordPress Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6698 \nPublished : Aug. 1, 2024, 4:15 a.m. | 35\u00a0minutes ago \nDescription : The FundEngine plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.7.0. This is due to the plugin not properly verifying user meta updated through the update_user_meta function. This makes it possible for authenticated attackers, with subscriber-level access and above, to update their user meta which can be leveraged to update their capabilities to gain administrator access. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-01T07:03:43.000000Z"}, {"uuid": "89e19ba3-bb42-4283-84a9-f16fa9e78750", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6687", "type": "seen", "source": "https://t.me/cvedetector/2198", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6687 - CTT Expresso para WooCommerce File Exposure Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-6687 \nPublished : Aug. 1, 2024, 2:15 a.m. | 43\u00a0minutes ago \nDescription : The CTT Expresso para WooCommerce plugin for WordPress is vulnerable to sensitive information exposure in all versions up to and including 3.2.12 via the /wp-content/uploads/cepw directory. The generated .pdf and log files are publicly accessible and contain sensitive information such as sender and receiver names, phone numbers, physical addresses, and email addresses \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-01T05:23:18.000000Z"}, {"uuid": "6c5a910c-a09f-4953-8d77-b2643ba978bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6620", "type": "seen", "source": "https://t.me/cvedetector/1919", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6620 - Honeywell PC42t/PC42tp/PC42d Printers Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6620 \nPublished : July 29, 2024, 8:15 p.m. | 38\u00a0minutes ago \nDescription : Honeywell PC42t, PC42tp, and PC42d Printers, T10.19.020016 to T10.20.060398, contain a cross-site scripting vulnerability. A(n) attacker could potentially inject malicious code which may lead to information disclosure, session theft, or client-side request forgery. Honeywell recommends updating to the most recent version of this firmware, PC42 Printer Firmware Version 20.6 T10.20.060398. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-29T22:59:48.000000Z"}, {"uuid": "141c6929-56c8-4bda-bbea-ac8ef007d0d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6695", "type": "seen", "source": "https://t.me/cvedetector/2108", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6695 - Apache Struts Local File Inclusion\", \n  \"Content\": \"CVE ID : CVE-2024-6695 \nPublished : July 31, 2024, 6:15 a.m. | 39\u00a0minutes ago \nDescription : it's possible for an attacker to gain administrative access without having any kind of account on the targeted site and perform unauthorized actions. This is due to improper logic flow on the user registration process. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-31T09:18:37.000000Z"}, {"uuid": "e28ef5f9-d4c9-4387-928f-a6fb4b4a8a87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6634", "type": "seen", "source": "https://t.me/cvedetector/1734", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6634 - WordPress Master Currency Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-6634 \nPublished : July 27, 2024, 2:15 a.m. | 31\u00a0minutes ago \nDescription : The Master Currency WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's currencyconverterform shortcode in all versions up to, and including, 1.1.61 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-27T04:54:47.000000Z"}, {"uuid": "8e40fed2-b8cc-43cc-ba4d-b6594522fb2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6699", "type": "seen", "source": "https://t.me/cvedetector/2035", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6699 - Mikafon MA7 SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6699 \nPublished : July 30, 2024, 1:15 p.m. | 28\u00a0minutes ago \nDescription : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mikafon Electronic Inc. Mikafon MA7 allows SQL Injection.This issue affects Mikafon MA7: from v3.0 before v3.1. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-30T15:44:38.000000Z"}, {"uuid": "8849b1c8-1697-4d68-a0b9-8908db4fc50e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6679", "type": "seen", "source": "https://t.me/cvedetector/655", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6679 - A vulnerability classified as critical has been fo\", \n  \"Content\": \"CVE ID : CVE-2024-6679 \nPublished : July 11, 2024, 3:15 p.m. | 39\u00a0minutes ago \nDescription : A vulnerability classified as critical has been found in witmy my-springsecurity-plus up to 2024-07-04. Affected is an unknown function of the file /api/role. The manipulation of the argument params.dataScope leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-271152. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-11T18:19:09.000000Z"}, {"uuid": "e34a9e11-96f3-4e90-91bc-490d5ceb26d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6627", "type": "seen", "source": "https://t.me/cvedetector/1753", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6627 - \"Happy Addons for Elementor Stored Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-6627 \nPublished : July 27, 2024, 12:15 p.m. | 39\u00a0minutes ago \nDescription : The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's PDF View widget in all versions up to, and including, 3.11.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-27T14:57:08.000000Z"}, {"uuid": "aaac2ea0-4741-4071-bcdf-fd5edc670532", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6661", "type": "seen", "source": "https://t.me/cvedetector/1736", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6661 - \"ParityPress WordPress Parity Pricing with Discount Rules Stored Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-6661 \nPublished : July 27, 2024, 2:15 a.m. | 31\u00a0minutes ago \nDescription : The ParityPress \u2013 Parity Pricing with Discount Rules plugin for WordPress is vulnerable to Stored Cross-Site Scripting via  'Discount Text' in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-27T04:54:49.000000Z"}, {"uuid": "f794c534-e1ca-4e7b-82a7-e29b4b081689", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6625", "type": "seen", "source": "https://t.me/cvedetector/716", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6625 - The WP Total Branding \u2013 Complete branding solution\", \n  \"Content\": \"CVE ID : CVE-2024-6625 \nPublished : July 12, 2024, 8:15 a.m. | 42\u00a0minutes ago \nDescription : The WP Total Branding \u2013 Complete branding solution for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-12T11:03:46.000000Z"}, {"uuid": "a9b10f39-7518-43c7-adea-39e718730bae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6677", "type": "seen", "source": "https://t.me/cvedetector/701", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6677 - Privilege escalation in uberAgent\", \n  \"Content\": \"CVE ID : CVE-2024-6677 \nPublished : July 12, 2024, 3:15 a.m. | 40\u00a0minutes ago \nDescription : Privilege escalation in uberAgent \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-12T06:02:29.000000Z"}, {"uuid": "e6315c99-9fa8-4b25-afba-d1dcdc216a8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6676", "type": "seen", "source": "https://t.me/cvedetector/624", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6676 - A vulnerability has been found in witmy my-springs\", \n  \"Content\": \"CVE ID : CVE-2024-6676 \nPublished : July 11, 2024, 3:15 a.m. | 23\u00a0minutes ago \nDescription : A vulnerability has been found in witmy my-springsecurity-plus up to 2024-07-03 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /api/user. The manipulation of the argument params.dataScope leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The associated identifier of this vulnerability is VDB-271111. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-11T05:46:23.000000Z"}, {"uuid": "2766ff4f-f4fb-4533-b26d-aaf8eadfeb21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6681", "type": "seen", "source": "https://t.me/cvedetector/677", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6681 - A vulnerability, which was classified as critical,\", \n  \"Content\": \"CVE ID : CVE-2024-6681 \nPublished : July 11, 2024, 5:15 p.m. | 42\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in witmy my-springsecurity-plus up to 2024-07-04. Affected by this issue is some unknown functionality of the file /api/dept. The manipulation of the argument params.dataScope leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-271154 is the identifier assigned to this vulnerability. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-11T19:59:48.000000Z"}, {"uuid": "e22ad48e-57c6-45c4-b41c-1712e3ba257a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6680", "type": "seen", "source": "https://t.me/cvedetector/661", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6680 - A vulnerability classified as critical was found i\", \n  \"Content\": \"CVE ID : CVE-2024-6680 \nPublished : July 11, 2024, 4:15 p.m. | 39\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in witmy my-springsecurity-plus up to 2024-07-04. Affected by this vulnerability is an unknown functionality of the file /api/dept/build. The manipulation of the argument params.dataScope leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-271153 was assigned to this vulnerability. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-11T19:09:24.000000Z"}, {"uuid": "ed9fa6f5-af0e-4618-8a0c-2dcd0622cb05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6649", "type": "seen", "source": "https://t.me/cvedetector/571", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6649 - A vulnerability has been found in SourceCodester E\", \n  \"Content\": \"CVE ID : CVE-2024-6649 \nPublished : July 10, 2024, 7:15 p.m. | 26\u00a0minutes ago \nDescription : A vulnerability has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0 and classified as problematic. Affected by this vulnerability is the function save_users of the file Users.php. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-271057 was assigned to this vulnerability. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-10T21:48:59.000000Z"}, {"uuid": "197467cc-50fb-487e-b97d-0a1aa08e9b58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6624", "type": "seen", "source": "https://t.me/cvedetector/640", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6624 - The JSON API User plugin for WordPress is vulnerab\", \n  \"Content\": \"CVE ID : CVE-2024-6624 \nPublished : July 11, 2024, 7:15 a.m. | 38\u00a0minutes ago \nDescription : The JSON API User plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.9.3. This is due to improper controls on custom user meta fields. This makes it possible for unauthenticated attackers to register as administrators on the site. The plugin requires the JSON API plugin to also be installed. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-11T09:57:21.000000Z"}, {"uuid": "7774a962-3e3f-4524-8cfa-48a7b73b5340", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6666", "type": "seen", "source": "https://t.me/cvedetector/639", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6666 - The WP ERP plugin for WordPress is vulnerable to S\", \n  \"Content\": \"CVE ID : CVE-2024-6666 \nPublished : July 11, 2024, 7:15 a.m. | 38\u00a0minutes ago \nDescription : The WP ERP plugin for WordPress is vulnerable to SQL Injection via the \u2018vendor_id\u2019 parameter in all versions up to, and including, 1.13.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Accounting Manager access (erp_ac_view_sales_summary capability) and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-11T09:57:20.000000Z"}, {"uuid": "ea1f4219-4f6f-4c68-bd16-9598b82d8aae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6653", "type": "seen", "source": "https://t.me/cvedetector/619", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6653 - A vulnerability was found in code-projects Simple\", \n  \"Content\": \"CVE ID : CVE-2024-6653 \nPublished : July 11, 2024, 12:15 a.m. | 28\u00a0minutes ago \nDescription : A vulnerability was found in code-projects Simple Task List 1.0. It has been declared as critical. This vulnerability affects unknown code of the file loginForm.php of the component Login. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-271060. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-11T02:50:51.000000Z"}, {"uuid": "8b8828a5-6fe5-4368-9220-2d29beb7eb37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6608", "type": "seen", "source": "https://t.me/cvedetector/367", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6608 - It was possible to move the cursor using pointerlo\", \n  \"Content\": \"CVE ID : CVE-2024-6608 \nPublished : July 9, 2024, 3:15 p.m. | 16\u00a0minutes ago \nDescription : It was possible to move the cursor using pointerlock from an iframe. This allowed moving the cursor outside of the viewport and the Firefox window. This vulnerability affects Firefox Severity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T17:42:37.000000Z"}, {"uuid": "bbe9f91c-2b41-41f1-872f-d70e7ef149f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6609", "type": "seen", "source": "https://t.me/cvedetector/366", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6609 - When almost out-of-memory an elliptic curve key wh\", \n  \"Content\": \"CVE ID : CVE-2024-6609 \nPublished : July 9, 2024, 3:15 p.m. | 16\u00a0minutes ago \nDescription : When almost out-of-memory an elliptic curve key which was never allocated could have been freed again. This vulnerability affects Firefox Severity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T17:42:36.000000Z"}, {"uuid": "29a90b1a-8ac8-40e2-8400-28d8e2714ae9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6650", "type": "seen", "source": "https://t.me/cvedetector/600", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6650 - A vulnerability was found in SourceCodester Employ\", \n  \"Content\": \"CVE ID : CVE-2024-6650 \nPublished : July 10, 2024, 11:15 p.m. | 16\u00a0minutes ago \nDescription : A vulnerability was found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0 and classified as problematic. Affected by this issue is the function save_designation of the file /classes/Master.php. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-271058 is the identifier assigned to this vulnerability. \nSeverity: 2.4 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-11T01:35:15.000000Z"}, {"uuid": "966fbea3-c1ab-47a9-861d-9b397885904a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6652", "type": "seen", "source": "https://t.me/cvedetector/599", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6652 - A vulnerability was found in itsourcecode Gym Mana\", \n  \"Content\": \"CVE ID : CVE-2024-6652 \nPublished : July 10, 2024, 11:15 p.m. | 16\u00a0minutes ago \nDescription : A vulnerability was found in itsourcecode Gym Management System 1.0. It has been classified as critical. This affects an unknown part of the file manage_member.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-271059. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-11T01:35:14.000000Z"}, {"uuid": "43e35845-f781-4f11-82d8-c17bbcd525e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6646", "type": "seen", "source": "https://t.me/cvedetector/560", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6646 - A vulnerability was found in Netgear WN604 up to 2\", \n  \"Content\": \"CVE ID : CVE-2024-6646 \nPublished : July 10, 2024, 6:15 p.m. | 35\u00a0minutes ago \nDescription : A vulnerability was found in Netgear WN604 up to 20240710. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /downloadFile.php of the component Web Interface. The manipulation of the argument file with the input config leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-271052. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-10T20:58:40.000000Z"}, {"uuid": "d3f2fc53-9b93-41d2-b379-1d4eabe464d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6647", "type": "seen", "source": "https://t.me/cvedetector/559", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6647 - ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability cl\", \n  \"Content\": \"CVE ID : CVE-2024-6647 \nPublished : July 10, 2024, 6:15 p.m. | 35\u00a0minutes ago \nDescription : ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical has been found in Croogo up to 4.0.7. This affects an unknown part of the file admin/settings/settings/prefix/Theme of the component Setting Handler. The manipulation of the argument Content-Type leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-271053 was assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. \nSeverity: 4.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-10T20:58:39.000000Z"}, {"uuid": "7380d383-35a5-45cb-8d02-f16c3f599d71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6644", "type": "seen", "source": "https://t.me/cvedetector/556", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6644 - A vulnerability was found in zmops ArgusDBM up to\", \n  \"Content\": \"CVE ID : CVE-2024-6644 \nPublished : July 10, 2024, 5:15 p.m. | 24\u00a0minutes ago \nDescription : A vulnerability was found in zmops ArgusDBM up to 0.1.0. It has been classified as critical. Affected is the function getDefaultClassLoader of the file CalculateAlarm.java of the component AviatorScript Handler. The manipulation leads to deserialization. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-271050 is the identifier assigned to this vulnerability. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-10T19:43:21.000000Z"}, {"uuid": "56ac0cdb-d9ab-4bac-b10b-1cce34b77726", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6645", "type": "seen", "source": "https://t.me/cvedetector/553", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6645 - A vulnerability was found in WuKongOpenSource Wuko\", \n  \"Content\": \"CVE ID : CVE-2024-6645 \nPublished : July 10, 2024, 5:15 p.m. | 24\u00a0minutes ago \nDescription : A vulnerability was found in WuKongOpenSource Wukong_nocode up to 20230807. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file ExpressionUtil.java of the component AviatorScript Handler. The manipulation leads to deserialization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The associated identifier of this vulnerability is VDB-271051. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-10T19:43:18.000000Z"}, {"uuid": "c1cabec8-6732-41d2-b8c4-65b8f91d1249", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6606", "type": "seen", "source": "https://t.me/cvedetector/363", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6606 - Clipboard code failed to check the index on an arr\", \n  \"Content\": \"CVE ID : CVE-2024-6606 \nPublished : July 9, 2024, 3:15 p.m. | 16\u00a0minutes ago \nDescription : Clipboard code failed to check the index on an array access. This could have lead to an out-of-bounds read. This vulnerability affects Firefox Severity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T17:42:30.000000Z"}, {"uuid": "705ea5c9-99f4-44ce-9a52-3b7319e0f3b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6602", "type": "seen", "source": "https://t.me/cvedetector/362", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6602 - A mismatch between allocator and deallocator could\", \n  \"Content\": \"CVE ID : CVE-2024-6602 \nPublished : July 9, 2024, 3:15 p.m. | 16\u00a0minutes ago \nDescription : A mismatch between allocator and deallocator could have lead to memory corruption. This vulnerability affects Firefox Severity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T17:42:29.000000Z"}, {"uuid": "1a2c17e7-21ed-4475-b204-b3f0ea63a245", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6600", "type": "seen", "source": "https://t.me/cvedetector/361", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6600 - Due to large allocation checks in Angle for GLSL s\", \n  \"Content\": \"CVE ID : CVE-2024-6600 \nPublished : July 9, 2024, 3:15 p.m. | 16\u00a0minutes ago \nDescription : Due to large allocation checks in Angle for GLSL shaders being too lenient an out-of-bounds access could occur when allocating more than 8192 ints in private shader memory on mac OS. This vulnerability affects Firefox Severity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T17:42:28.000000Z"}, {"uuid": "8fb72d86-af35-460a-9d2e-2b9706aae954", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6605", "type": "seen", "source": "https://t.me/cvedetector/360", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6605 - Firefox Android allowed immediate interaction with\", \n  \"Content\": \"CVE ID : CVE-2024-6605 \nPublished : July 9, 2024, 3:15 p.m. | 16\u00a0minutes ago \nDescription : Firefox Android allowed immediate interaction with permission prompts. This could be used for tapjacking. This vulnerability affects Firefox Severity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T17:42:27.000000Z"}, {"uuid": "3904d6e3-bebf-46ae-9486-9a1df1c1c8f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6607", "type": "seen", "source": "https://t.me/cvedetector/359", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6607 - It was possible to prevent a user from exiting poi\", \n  \"Content\": \"CVE ID : CVE-2024-6607 \nPublished : July 9, 2024, 3:15 p.m. | 16\u00a0minutes ago \nDescription : It was possible to prevent a user from exiting pointerlock when pressing escape and to overlay customValidity notifications from a `` element over certain permission prompts. This could be used to confuse a user into giving a site unintended permissions. This vulnerability affects Firefox Severity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T17:42:26.000000Z"}, {"uuid": "fdf09fb0-6c17-420d-ae6e-b31d6c6b6b4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6615", "type": "seen", "source": "https://t.me/cvedetector/358", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6615 - Memory safety bugs present in Firefox 127. Some of\", \n  \"Content\": \"CVE ID : CVE-2024-6615 \nPublished : July 9, 2024, 3:15 p.m. | 16\u00a0minutes ago \nDescription : Memory safety bugs present in Firefox 127. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox Severity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T17:42:23.000000Z"}, {"uuid": "5e2964c8-185e-47a5-b0f9-f89122355afb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6611", "type": "seen", "source": "https://t.me/cvedetector/357", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6611 - A nested iframe, triggering a cross-site navigatio\", \n  \"Content\": \"CVE ID : CVE-2024-6611 \nPublished : July 9, 2024, 3:15 p.m. | 16\u00a0minutes ago \nDescription : A nested iframe, triggering a cross-site navigation, could send SameSite=Strict or Lax cookies. This vulnerability affects Firefox Severity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T17:42:22.000000Z"}, {"uuid": "14e04f13-b2ab-4847-9410-585bce093811", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6603", "type": "seen", "source": "https://t.me/cvedetector/369", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6603 - In an out-of-memory scenario an allocation could f\", \n  \"Content\": \"CVE ID : CVE-2024-6603 \nPublished : July 9, 2024, 3:15 p.m. | 16\u00a0minutes ago \nDescription : In an out-of-memory scenario an allocation could fail but free would have been called on the pointer afterwards leading to memory corruption. This vulnerability affects Firefox Severity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T17:42:42.000000Z"}, {"uuid": "79f7eae4-40d3-44b3-98fb-795df2d12cd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6601", "type": "seen", "source": "https://t.me/cvedetector/368", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6601 - A race condition could lead to a cross-origin cont\", \n  \"Content\": \"CVE ID : CVE-2024-6601 \nPublished : July 9, 2024, 3:15 p.m. | 16\u00a0minutes ago \nDescription : A race condition could lead to a cross-origin container obtaining permissions of the top-level origin. This vulnerability affects Firefox Severity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T17:42:38.000000Z"}, {"uuid": "5ff62ab4-06cd-4021-b109-2866a9c085f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6604", "type": "seen", "source": "https://t.me/cvedetector/365", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6604 - Memory safety bugs present in Firefox 127, Firefox\", \n  \"Content\": \"CVE ID : CVE-2024-6604 \nPublished : July 9, 2024, 3:15 p.m. | 16\u00a0minutes ago \nDescription : Memory safety bugs present in Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox Severity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T17:42:35.000000Z"}, {"uuid": "a6cd0964-45b2-423e-891a-f0679a601df8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6610", "type": "seen", "source": "https://t.me/cvedetector/364", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6610 - Form validation popups could capture escape key pr\", \n  \"Content\": \"CVE ID : CVE-2024-6610 \nPublished : July 9, 2024, 3:15 p.m. | 16\u00a0minutes ago \nDescription : Form validation popups could capture escape key presses. Therefore, spamming form validation messages could be used to prevent users from exiting full-screen mode. This vulnerability affects Firefox Severity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T17:42:34.000000Z"}, {"uuid": "04c058c3-c009-4bf8-880f-53003c8efecc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6613", "type": "seen", "source": "https://t.me/cvedetector/356", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6613 - The frame iterator could get stuck in a loop when\", \n  \"Content\": \"CVE ID : CVE-2024-6613 \nPublished : July 9, 2024, 3:15 p.m. | 16\u00a0minutes ago \nDescription : The frame iterator could get stuck in a loop when encountering certain wasm frames leading to incorrect stack traces. This vulnerability affects Firefox Severity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T17:42:21.000000Z"}, {"uuid": "5d58fcce-fa79-4c1a-9a2c-fdd355efd351", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6614", "type": "seen", "source": "https://t.me/cvedetector/355", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6614 - The frame iterator could get stuck in a loop when\", \n  \"Content\": \"CVE ID : CVE-2024-6614 \nPublished : July 9, 2024, 3:15 p.m. | 16\u00a0minutes ago \nDescription : The frame iterator could get stuck in a loop when encountering certain wasm frames leading to incorrect stack traces. This vulnerability affects Firefox Severity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T17:42:20.000000Z"}, {"uuid": "f4f95a7f-2ef7-40a2-8714-c8444eab5017", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6612", "type": "seen", "source": "https://t.me/cvedetector/354", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6612 - CSP violations generated links in the console tab\", \n  \"Content\": \"CVE ID : CVE-2024-6612 \nPublished : July 9, 2024, 3:15 p.m. | 16\u00a0minutes ago \nDescription : CSP violations generated links in the console tab of the developer tools, pointing to the violating resource. This caused a DNS prefetch which leaked that a CSP violation happened. This vulnerability affects Firefox Severity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T17:42:19.000000Z"}, {"uuid": "50bd479e-84df-42b5-bc66-827757f6df32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6669", "type": "seen", "source": "https://t.me/cvedetector/1056", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6669 - \"WordPress WPBot Stored Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-6669 \nPublished : July 17, 2024, 7:15 a.m. | 29\u00a0minutes ago \nDescription : The AI ChatBot for WordPress \u2013 WPBot plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 5.5.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-17T09:51:27.000000Z"}, {"uuid": "968d3995-997e-47ab-99e7-c62887b5a5ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6660", "type": "seen", "source": "https://t.me/cvedetector/1053", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6660 - BookingPress WordPress Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6660 \nPublished : July 17, 2024, 7:15 a.m. | 29\u00a0minutes ago \nDescription : The BookingPress \u2013 Appointment Booking Calendar Plugin and Online Scheduling Plugin plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the bookingpress_import_data_continue_process_func function in all versions up to, and including, 1.1.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary options on the WordPress site and upload arbitrary files. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-17T09:51:24.000000Z"}, {"uuid": "60cbc16c-f47a-4edd-9bd2-e0bc5eb74d20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6655", "type": "seen", "source": "https://t.me/cvedetector/970", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6655 - GTK Library DLL Hijacking Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6655 \nPublished : July 16, 2024, 3:15 p.m. | 35\u00a0minutes ago \nDescription : A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK application from the current working directory. \nSeverity: 7.0 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T17:57:35.000000Z"}, {"uuid": "5fc58c88-f91a-443d-8b81-68296ee3157f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6621", "type": "seen", "source": "https://t.me/cvedetector/928", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6621 - WordPress RSS Aggregator Unauthenticated RSS Feed Activation\", \n  \"Content\": \"CVE ID : CVE-2024-6621 \nPublished : July 16, 2024, 11:15 a.m. | 22\u00a0minutes ago \nDescription : The RSS Aggregator \u2013 RSS Import, News Feeds, Feed to Post, and Autoblogging plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wprss_activate_feed_source' and 'wprss_pause_feed_source' functions in all versions up to, and including, 4.23.11. This makes it possible for authenticated attackers, with Subscriber-level access and above, to activate or pause existing RSS feeds. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T13:45:50.000000Z"}, {"uuid": "f6314d59-fe6f-4404-8765-a7c5403d362e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6689", "type": "seen", "source": "https://t.me/cvedetector/867", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6689 - Baramundi Management Agent Local Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-6689 \nPublished : July 15, 2024, 2:15 p.m. | 33\u00a0minutes ago \nDescription : Local Privilege Escalation in MSI-Installer in baramundi Management Agent v23.1.172.0 on Windows allows a local unprivileged user to escalate privileges to SYSTEM. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-15T16:50:48.000000Z"}, {"uuid": "a442da01-0388-4f17-a7f3-da5df3c29a55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "published-proof-of-concept", "source": "https://t.me/BlackHat0Hackers/3396", "content": "Exploiting Pre-Auth SQL Injection In WhatsUp Gold\nCVE-2024-6670\n\nI discovered an unauthenticated SQL injection against the latest version of progress whatsup gold and turned it into a authentication bypass, after that the product by design allows you to achieve RCE (that part is up to you), lets talk about how this was possible\n\nPOC: https://github.com/sinsinology/CVE-2024-6670", "creation_timestamp": "2024-09-17T13:29:26.000000Z"}, {"uuid": "69900338-4cf3-40ec-83b2-b068e7684abd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "exploited", "source": "Telegram/RoJOASUAT7x49nZpxrcgbc0z3AsXJ43ePodyUpzTL9sQ6w", "content": "", "creation_timestamp": "2024-09-13T15:22:17.000000Z"}, {"uuid": "1eb43da8-171a-45e4-8e51-91566ed97a39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6678", "type": "seen", "source": "Telegram/avIu7Dl_RqAxLcyOEeume6rNGMtPgqjvTjZK7jKiIjv9OQ", "content": "", "creation_timestamp": "2024-09-12T19:20:57.000000Z"}, {"uuid": "9e28a778-7d1c-414f-8bf1-9640383eaa28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6633", "type": "seen", "source": "Telegram/m-1vGJqwzrmzvvAGgxuPe-sMCEC5Us-7EhPX0CxF1S9OYg", "content": "", "creation_timestamp": "2024-08-28T22:06:18.000000Z"}, {"uuid": "1fe5ee98-45db-4a11-9ca6-718b1e1e3360", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6646", "type": "published-proof-of-concept", "source": "https://t.me/realLulzSec/13058", "content": "CVE-2024-6646\n\nGET /downloadFile.php?file=config HTTP/1.1", "creation_timestamp": "2024-07-14T17:12:45.000000Z"}, {"uuid": "78a8505f-f687-4687-a4a5-5a3fec44d0a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6678", "type": "seen", "source": "https://t.me/HackingInsights/12852", "content": "\u200aGitLab Issues Critical Security Patch for CVE-2024-6678 (CVSS 9.9), Urges Immediate Update\n\nhttps://securityonline.info/gitlab-issues-critical-security-patch-for-cve-2024-6678-cvss-9-9-urges-immediate-update/", "creation_timestamp": "2024-09-12T10:08:54.000000Z"}, {"uuid": "0004deb2-dbff-4f66-be33-59c8df68f824", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6671", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/11136", "content": "\u200aCritical Vulnerabilities Uncovered in Progress WhatsUp Gold (CVE-2024-6670 & CVE-2024-6671)\n\nhttps://securityonline.info/critical-vulnerabilities-uncovered-in-progress-whatsup-gold-cve-2024-6670-cve-2024-6671/", "creation_timestamp": "2024-08-24T09:50:28.000000Z"}, {"uuid": "53d2d663-8fb1-46af-b247-667877e69075", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/11136", "content": "\u200aCritical Vulnerabilities Uncovered in Progress WhatsUp Gold (CVE-2024-6670 & CVE-2024-6671)\n\nhttps://securityonline.info/critical-vulnerabilities-uncovered-in-progress-whatsup-gold-cve-2024-6670-cve-2024-6671/", "creation_timestamp": "2024-08-24T09:50:28.000000Z"}, {"uuid": "5747e3a8-4213-488b-84cb-9e47e7a208eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6695", "type": "seen", "source": "https://t.me/HackingInsights/6181", "content": "\u200aCVE-2024-6695 (CVSS 9.8) in Popular WordPress Plugin Exposes 50,000 Sites to Admin Hijacking\n\nhttps://securityonline.info/cve-2024-6695-cvss-9-8-in-popular-wordpress-plugin-exposes-50000-sites-to-admin-hijacking/", "creation_timestamp": "2024-07-16T13:12:04.000000Z"}, {"uuid": "4a136b0f-8276-4cf1-97b9-99ebf97f73a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6637", "type": "seen", "source": "Telegram/aosrxDBMi4fR18eMLtm3jvV4e48kSEoLAQZ9Qf8EppOzq9vF", "content": "", "creation_timestamp": "2025-02-14T10:03:09.000000Z"}, {"uuid": "b2a88e6b-8d04-421d-a3e8-f0b94b1627ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6636", "type": "seen", "source": "Telegram/M_we_HcOzntS32wwlTuMwX35qtS5YrvDn7ODjeo59LqHURhw", "content": "", "creation_timestamp": "2025-02-14T10:03:09.000000Z"}, {"uuid": "ac6b8dcd-e712-48c6-98b0-aa57ce6235e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6635", "type": "seen", "source": "Telegram/QkjhCOrusEwPU1K-u5WxXEeJwfA_bdQVMmnoPH-ZKJw6PTmi", "content": "", "creation_timestamp": "2025-02-14T10:03:09.000000Z"}, {"uuid": "9fbf7d91-27b6-4222-aed3-8645c93c8653", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6633", "type": "seen", "source": "https://t.me/tengkorakcybercrewz/19075", "content": "The Hacker News\nFortra Issues Patch for High-Risk FileCatalyst Workflow Security Vulnerability\n\nFortra has addressed a critical security flaw impacting FileCatalyst Workflow that could be abused by a remote attacker to gain administrative access.\nThe vulnerability, tracked as CVE-2024-6633, carries a CVSS score of 9.8, and stems from the use of a static password to connect to a HSQL database.\n\"The default credentials for the setup HSQL database (HSQLDB) for FileCatalyst Workflow are", "creation_timestamp": "2024-08-28T22:06:17.000000Z"}, {"uuid": "a87135ee-0468-4c88-8d37-e11ddb6de3a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "exploited", "source": "https://t.me/tengkorakcybercrewz/20294", "content": "The Hacker News\nProgress WhatsUp Gold Exploited Just Hours After PoC Release for Critical Flaw\n\nMalicious actors are likely leveraging publicly available proof-of-concept (PoC) exploits for recently disclosed security flaws in Progress Software WhatsUp Gold to conduct opportunistic attacks.\nThe activity is said to have commenced on August 30, 2024, a mere five hours after a PoC was released for CVE-2024-6670 (CVSS score: 9.8) by security researcher Sina Kheirkhah of the Summoning Team, who", "creation_timestamp": "2024-09-13T15:22:18.000000Z"}, {"uuid": "f142f86c-7ed4-4688-a180-3e19c2254183", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6678", "type": "seen", "source": "https://t.me/tengkorakcybercrewz/20155", "content": "The Hacker News\nUrgent: GitLab Patches Critical Flaw Allowing Unauthorized Pipeline Job Execution\n\nGitLab on Wednesday released security updates to address 17 security vulnerabilities, including a critical flaw that allows an attacker to run pipeline jobs as an arbitrary user.\nThe issue, tracked as CVE-2024-6678, carries a CVSS score of 9.9 out of a maximum of 10.0\n\"An issue was discovered in GitLab CE/EE affecting all versions starting from 8.14 prior to 17.1.7, starting from 17.2 prior to", "creation_timestamp": "2024-09-12T19:20:10.000000Z"}, {"uuid": "36a60b90-f8dc-4a3c-8cc0-cd17030a0808", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6646", "type": "published-proof-of-concept", "source": "https://t.me/openSource3/368", "content": "CVE ID : CVE-2024-6646\nSystem : Netgear WN604\nType : Path Traversal \n\nExploit :\n\nGET /downloadFile.php?file=config HTTP/1.1", "creation_timestamp": "2024-09-30T07:43:01.000000Z"}, {"uuid": "398b36e5-f1a8-4e04-9f41-f4c7bc475822", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6678", "type": "seen", "source": "Telegram/bOrlg6BUE4TkgjeRTi3prV1H6DAB0mLQrfDeBJp8tex1kg", "content": "", "creation_timestamp": "2024-09-13T00:44:03.000000Z"}, {"uuid": "c4e106e0-2f48-4c08-8766-b2cff2bfee20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "exploited", "source": "Telegram/cKm0A_LiobX1aJHDz1pOXFXm6goRz5V_ldF-99M_FH8HdA", "content": "", "creation_timestamp": "2024-09-13T19:29:12.000000Z"}, {"uuid": "cc723472-8f6e-4af5-a2b9-33e3c8e6cf21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6633", "type": "seen", "source": "Telegram/YaZgnOkYmlGQPAi7PMYuW7QI7A2bgJIijsErVbnh6ifEQQ", "content": "", "creation_timestamp": "2024-08-28T18:54:08.000000Z"}, {"uuid": "6574fe6f-14da-4e19-a638-003686ea3e00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "published-proof-of-concept", "source": "Telegram/J51TBLI_qDDfUdde13aP_PP1XSlzsxDAR6FmMmDmB27KGvM", "content": "", "creation_timestamp": "2024-09-27T18:49:57.000000Z"}, {"uuid": "ee493ef0-7b2a-44d9-9556-ef747cf73180", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6633", "type": "seen", "source": "https://t.me/tengkorakcybercrewz/3833", "content": "The Hacker News\nFortra Issues Patch for High-Risk FileCatalyst Workflow Security Vulnerability\n\nFortra has addressed a critical security flaw impacting FileCatalyst Workflow that could be abused by a remote attacker to gain administrative access.\nThe vulnerability, tracked as CVE-2024-6633, carries a CVSS score of 9.8, and stems from the use of a static password to connect to a HSQL database.\n\"The default credentials for the setup HSQL database (HSQLDB) for FileCatalyst Workflow are", "creation_timestamp": "2024-08-28T22:06:17.000000Z"}, {"uuid": "9978158f-3056-4e44-ad4e-1120f3fb3652", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "published-proof-of-concept", "source": "https://t.me/CyberDilara/791", "content": "Tools  - Hackers Factory \n\nCallander is a simple system sandboxing tool for Linux.\n\nhttps://github.com/rpetrich/callander\n\nToolkit for Retrieval and Analysis of Cyber Evidence (TRACE)\n\nhttps://github.com/Gadzhovski/TRACE-Forensic-Toolkit\n\nhttps://github.com/Gadzhovski/TRACE-Forensic-Toolkit\n\nhttps://github.com/xElessaway/My-OSINT-CTF\n\nInformation about web3 security and programming tutorials/tools \n\nhttps://github.com/immunefi-team/Web3-Security-Library?tab=readme-ov-file#starting-guides\n\nThis repository is meant to catalog network and host artifacts associated with various EDR products \"shell\" and response functionalities. \n\nhttps://github.com/cbecks2/edr-artifacts\n\nPoC for Progress Software WhatsUp Gold HasErrors SQL Injection Authentication Bypass Vulnerability (CVE-2024-6670)\n\nhttps://github.com/sinsinology/CVE-2024-6670\n\nAmnezia VPN Client (Desktop+Mobile) \n\nhttps://github.com/amnezia-vpn/amnezia-client\n\n#CyberDilara \nhttps://t.me/CyberDilara", "creation_timestamp": "2024-09-02T09:40:40.000000Z"}, {"uuid": "4464d044-b258-45bc-8d7a-3ae8d9a16f7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "exploited", "source": "https://t.me/tengkorakcybercrewz/4109", "content": "The Hacker News\nProgress WhatsUp Gold Exploited Just Hours After PoC Release for Critical Flaw\n\nMalicious actors are likely leveraging publicly available proof-of-concept (PoC) exploits for recently disclosed security flaws in Progress Software WhatsUp Gold to conduct opportunistic attacks.\nThe activity is said to have commenced on August 30, 2024, a mere five hours after a PoC was released for CVE-2024-6670 (CVSS score: 9.8) by security researcher Sina Kheirkhah of the Summoning Team, who", "creation_timestamp": "2024-09-13T15:22:18.000000Z"}, {"uuid": "00be1422-9374-4404-9d16-4c75ed4b4cce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6678", "type": "seen", "source": "https://t.me/tengkorakcybercrewz/4075", "content": "The Hacker News\nUrgent: GitLab Patches Critical Flaw Allowing Unauthorized Pipeline Job Execution\n\nGitLab on Wednesday released security updates to address 17 security vulnerabilities, including a critical flaw that allows an attacker to run pipeline jobs as an arbitrary user.\nThe issue, tracked as CVE-2024-6678, carries a CVSS score of 9.9 out of a maximum of 10.0\n\"An issue was discovered in GitLab CE/EE affecting all versions starting from 8.14 prior to 17.1.7, starting from 17.2 prior to", "creation_timestamp": "2024-09-12T19:20:10.000000Z"}, {"uuid": "3803e517-9769-4138-9696-e76ec917ec1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6646", "type": "published-proof-of-concept", "source": "https://t.me/cybertrickzone/5699", "content": "CVE ID : CVE-2024-6646\nSystem : Netgear WN604\nType : Path Traversal \n\nExploit :\n\nGET /downloadFile.php?file=config HTTP/1.1", "creation_timestamp": "2024-11-03T06:41:02.000000Z"}, {"uuid": "d39ad4d5-6ca6-4381-bc5f-c06ea03caa5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6646", "type": "seen", "source": "Telegram/X2N_NjE0L31TJbxbWF4xN0meHofzsuhit0p8ttFOhp6n5oQT", "content": "", "creation_timestamp": "2024-07-14T15:55:16.000000Z"}, {"uuid": "9c279a8a-e2c8-44ac-a645-8dfe5e28209d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "exploited", "source": "https://t.me/KomunitiSiber/2566", "content": "Progress WhatsUp Gold Exploited Just Hours After PoC Release for Critical Flaw\nhttps://thehackernews.com/2024/09/progress-whatsup-gold-exploited-just.html\n\nMalicious actors are likely leveraging publicly available proof-of-concept (PoC) exploits for recently disclosed security flaws in Progress Software WhatsUp Gold to conduct opportunistic attacks.\nThe activity is said to have commenced on August 30, 2024, a mere five hours after a PoC was released for CVE-2024-6670 (CVSS score: 9.8) by security researcher Sina Kheirkhah of the Summoning Team, who", "creation_timestamp": "2024-09-13T15:24:42.000000Z"}, {"uuid": "5d6676f7-b832-4f0d-9215-1e9101358d3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6678", "type": "seen", "source": "https://t.me/KomunitiSiber/2563", "content": "Urgent: GitLab Patches Critical Flaw Allowing Unauthorized Pipeline Job Execution\nhttps://thehackernews.com/2024/09/urgent-gitlab-patches-critical-flaw.html\n\nGitLab on Wednesday released security updates to address 17 security vulnerabilities, including a critical flaw that allows an attacker to run pipeline jobs as an arbitrary user.\nThe issue, tracked as CVE-2024-6678, carries a CVSS score of 9.9 out of a maximum of 10.0\n\"An issue was discovered in GitLab CE/EE affecting all versions starting from 8.14 prior to 17.1.7, starting from 17.2 prior to", "creation_timestamp": "2024-09-13T01:23:25.000000Z"}, {"uuid": "6727b6aa-0b1b-441d-afc9-5857e188ed47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6633", "type": "seen", "source": "https://t.me/KomunitiSiber/2478", "content": "Fortra Issues Patch for High-Risk FileCatalyst Workflow Security Vulnerability\nhttps://thehackernews.com/2024/08/fortra-issues-patch-for-high-risk.html\n\nFortra has addressed a critical security flaw impacting FileCatalyst Workflow that could be abused by a remote attacker to gain administrative access.\nThe vulnerability, tracked as CVE-2024-6633, carries a CVSS score of 9.8, and stems from the use of a static password to connect to a HSQL database.\n\"The default credentials for the setup HSQL database (HSQLDB) for FileCatalyst Workflow are", "creation_timestamp": "2024-08-28T19:27:49.000000Z"}, {"uuid": "ca6feb17-f2df-43df-88dd-9aadbf426f47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6624", "type": "published-proof-of-concept", "source": "Telegram/mm0dibID7M-AdtrFuuG3wYTtJ0IX3ygHecVaHve0sD5pqjA", "content": "", "creation_timestamp": "2025-02-06T16:00:10.000000Z"}, {"uuid": "ecd8d6ba-b393-4f34-8480-8f72f2bedd24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6624", "type": "published-proof-of-concept", "source": "Telegram/Emfos1B_ry778nZeLXZUQDUE4A45ZiVElYgXfAdoaC3h9SE", "content": "", "creation_timestamp": "2025-02-06T20:00:07.000000Z"}, {"uuid": "6f01bb84-8f9b-4641-9218-86a9340f7251", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/8687", "content": "Tools  - Hackers Factory \n\nCallander is a simple system sandboxing tool for Linux.\n\nhttps://github.com/rpetrich/callander\n\nToolkit for Retrieval and Analysis of Cyber Evidence (TRACE)\n\nhttps://github.com/Gadzhovski/TRACE-Forensic-Toolkit\n\nhttps://github.com/Gadzhovski/TRACE-Forensic-Toolkit\n\nhttps://github.com/xElessaway/My-OSINT-CTF\n\nInformation about web3 security and programming tutorials/tools \n\nhttps://github.com/immunefi-team/Web3-Security-Library?tab=readme-ov-file#starting-guides\n\nThis repository is meant to catalog network and host artifacts associated with various EDR products \"shell\" and response functionalities. \n\nhttps://github.com/cbecks2/edr-artifacts\n\nPoC for Progress Software WhatsUp Gold HasErrors SQL Injection Authentication Bypass Vulnerability (CVE-2024-6670)\n\nhttps://github.com/sinsinology/CVE-2024-6670\n\nAmnezia VPN Client (Desktop+Mobile) \n\nhttps://github.com/amnezia-vpn/amnezia-client\n\n#CyberDilara \nhttps://t.me/CyberDilara", "creation_timestamp": "2024-09-02T09:49:11.000000Z"}, {"uuid": "fdd9d2f1-46d9-42c7-acfd-70bcb87d388c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "published-proof-of-concept", "source": "https://t.me/InfoSecInsider/23609", "content": "Tools  - Hackers Factory \n\nCallander is a simple system sandboxing tool for Linux.\n\nhttps://github.com/rpetrich/callander\n\nToolkit for Retrieval and Analysis of Cyber Evidence (TRACE)\n\nhttps://github.com/Gadzhovski/TRACE-Forensic-Toolkit\n\nhttps://github.com/Gadzhovski/TRACE-Forensic-Toolkit\n\nhttps://github.com/xElessaway/My-OSINT-CTF\n\nInformation about web3 security and programming tutorials/tools \n\nhttps://github.com/immunefi-team/Web3-Security-Library?tab=readme-ov-file#starting-guides\n\nThis repository is meant to catalog network and host artifacts associated with various EDR products \"shell\" and response functionalities. \n\nhttps://github.com/cbecks2/edr-artifacts\n\nPoC for Progress Software WhatsUp Gold HasErrors SQL Injection Authentication Bypass Vulnerability (CVE-2024-6670)\n\nhttps://github.com/sinsinology/CVE-2024-6670\n\nAmnezia VPN Client (Desktop+Mobile) \n\nhttps://github.com/amnezia-vpn/amnezia-client\n\n#CyberDilara \nhttps://t.me/CyberDilara", "creation_timestamp": "2024-09-02T09:41:03.000000Z"}, {"uuid": "0dc035e5-9a79-4536-9d24-e2485a87ea53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/3700", "content": "Tools  - Hackers Factory \n\nCallander is a simple system sandboxing tool for Linux.\n\nhttps://github.com/rpetrich/callander\n\nToolkit for Retrieval and Analysis of Cyber Evidence (TRACE)\n\nhttps://github.com/Gadzhovski/TRACE-Forensic-Toolkit\n\nhttps://github.com/Gadzhovski/TRACE-Forensic-Toolkit\n\nhttps://github.com/xElessaway/My-OSINT-CTF\n\nInformation about web3 security and programming tutorials/tools \n\nhttps://github.com/immunefi-team/Web3-Security-Library?tab=readme-ov-file#starting-guides\n\nThis repository is meant to catalog network and host artifacts associated with various EDR products \"shell\" and response functionalities. \n\nhttps://github.com/cbecks2/edr-artifacts\n\nPoC for Progress Software WhatsUp Gold HasErrors SQL Injection Authentication Bypass Vulnerability (CVE-2024-6670)\n\nhttps://github.com/sinsinology/CVE-2024-6670\n\nAmnezia VPN Client (Desktop+Mobile) \n\nhttps://github.com/amnezia-vpn/amnezia-client\n\n#CyberDilara \nhttps://t.me/CyberDilara", "creation_timestamp": "2024-09-02T09:40:50.000000Z"}, {"uuid": "b010420b-adf3-44ae-b557-ace9a6f5b2d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6694", "type": "published-proof-of-concept", "source": "https://t.me/v3n0mhack/331", "content": "WordPress Exploit Get smtps \u2764\ufe0f", "creation_timestamp": "2024-07-22T09:48:05.000000Z"}, {"uuid": "250766a1-a6db-4464-9a4e-59a57066f8f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/2254", "content": "CVE-2024-6670 WhatsUp Gold\n*\n\u0421\u0442\u0430\u0442\u044c\u044f Exploiting Pre-Auth SQL Injection in WhatsUp Gold\n*\nPOC exploit", "creation_timestamp": "2024-08-30T20:28:51.000000Z"}, {"uuid": "c0735e13-c66e-463e-9d76-17317916e358", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/7359", "content": "Tools  - Hackers Factory \n\nCallander is a simple system sandboxing tool for Linux.\n\nhttps://github.com/rpetrich/callander\n\nToolkit for Retrieval and Analysis of Cyber Evidence (TRACE)\n\nhttps://github.com/Gadzhovski/TRACE-Forensic-Toolkit\n\nhttps://github.com/Gadzhovski/TRACE-Forensic-Toolkit\n\nhttps://github.com/xElessaway/My-OSINT-CTF\n\nInformation about web3 security and programming tutorials/tools \n\nhttps://github.com/immunefi-team/Web3-Security-Library?tab=readme-ov-file#starting-guides\n\nThis repository is meant to catalog network and host artifacts associated with various EDR products \"shell\" and response functionalities. \n\nhttps://github.com/cbecks2/edr-artifacts\n\nPoC for Progress Software WhatsUp Gold HasErrors SQL Injection Authentication Bypass Vulnerability (CVE-2024-6670)\n\nhttps://github.com/sinsinology/CVE-2024-6670\n\nAmnezia VPN Client (Desktop+Mobile) \n\nhttps://github.com/amnezia-vpn/amnezia-client\n\n#CyberDilara \nhttps://t.me/CyberDilara", "creation_timestamp": "2024-09-02T09:49:11.000000Z"}, {"uuid": "1794e468-701b-4ab4-a358-fd566f65bf7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6694", "type": "published-proof-of-concept", "source": "https://t.me/codeb0ss/1514", "content": "New Wordpress, Enjoy;", "creation_timestamp": "2024-09-07T05:42:04.000000Z"}, {"uuid": "c8983386-e778-4cbc-bd77-e7d70d44c0d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6654", "type": "seen", "source": "https://t.me/true_secator/6241", "content": "ESET \u043f\u0440\u0435\u0434\u0443\u043f\u0435\u0436\u0434\u0430\u0435\u0442 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u044f\u0445 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f Windows \u0438 macOS.\n\n\u0421\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f CVE-2024-7400 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0414\u043c\u0438\u0442\u0440\u0438\u0435\u043c \u0417\u0443\u0437\u043b\u043e\u0432\u044b\u043c \u0438\u0437 Positive Technologies \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b Windows, \u0432\u043b\u0438\u044f\u044f \u043d\u0430 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0443 \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u043f\u0440\u043e\u0434\u0443\u043a\u0442 ESET, \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.\n\nESET \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 Cleaner 1251, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0434\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 ESET \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 Detection engine. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0442\u044c \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 \u0441\u0430\u043c\u0430 ESET, \u0434\u0435\u0444\u0435\u043a\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u0434\u043b\u044f \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u044b, \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u043c\u043e\u0434\u0443\u043b\u044c Cleaner \u0431\u044b\u043b \u0432\u044b\u043f\u0443\u0449\u0435\u043d \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 13 \u0430\u0432\u0433\u0443\u0441\u0442\u0430. \u0422\u0435\u043c, \u043a\u0442\u043e \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0435\u0442 \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u043e \u0441\u0432\u043e\u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b ESET, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0443 \u043f\u043e\u043a\u0430 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043f\u043e\u043a\u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0435 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043e.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f CVE-2024-6654, \u043e\u0448\u0438\u0431\u043a\u0438 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 ESET Cyber Security \u0432\u0435\u0440\u0441\u0438\u0439 7.0\u20137.4.1600.0 \u0438 Endpoint Antivirus \u0434\u043b\u044f macOS (\u0442\u0435\u043f\u0435\u0440\u044c Endpoint Security \u0434\u043b\u044f macOS) \u0432\u0435\u0440\u0441\u0438\u0439 7.0\u20137.5.50.0.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c ESET, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0433\u043b\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0440\u0430\u0437\u043c\u0435\u0441\u0442\u0438\u0442\u044c \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0441\u0441\u044b\u043b\u043a\u0443 \u043d\u0430 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0435 \u043c\u0435\u0441\u0442\u043e, \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c \u043f\u043e\u043c\u0435\u0448\u0430\u0432 \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e, \u0432\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0430\u0442\u0430\u043a\u0443 \u0442\u0438\u043f\u0430 DoS, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 ESET \u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0431\u0449\u0435\u0435 \u0437\u0430\u043c\u0435\u0434\u043b\u0435\u043d\u0438\u0435 \u0440\u0430\u0431\u043e\u0442\u044b \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\nESET \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Cyber Security \u0432\u0435\u0440\u0441\u0438\u0438 7.5.74.0 \u0438 Endpoint Security \u0434\u043b\u044f macOS \u0432\u0435\u0440\u0441\u0438\u0438 8.0.7200.0 \u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u0435\u0439 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u043f\u043e\u043f\u044b\u0442\u043a\u0430\u0445 \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.", "creation_timestamp": "2024-09-24T16:00:07.000000Z"}, {"uuid": "a8306753-962c-471f-ae17-871068ba0135", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6678", "type": "seen", "source": "https://t.me/true_secator/6205", "content": "GitLab \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0441\u0430\u043c\u0430\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 (CVE-2024-6678) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043a\u043e\u043d\u0432\u0435\u0439\u0435\u0440\u044b \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u0412\u044b\u043f\u0443\u0441\u043a \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d \u0434\u043b\u044f \u0432\u0435\u0440\u0441\u0438\u0439 17.3.2, 17.2.5 \u0438 17.1.7 \u043a\u0430\u043a \u0434\u043b\u044f GitLab Community Edition (CE), \u0442\u0430\u043a \u0438 \u0434\u043b\u044f Enterprise Edition (EE), \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u044f 18 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\nCVE-2024-6678 \u0441 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 9,9 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043f\u043e \u043e\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u0441\u0440\u0435\u0434\u044b \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430 \u0437\u0430\u0434\u0430\u043d\u0438\u044f.\n\n\u0421\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0435\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0438 \u043d\u0438\u0437\u043a\u0438\u043c \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u043b\u044f \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\nGitLab \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 CE/EE \u043e\u0442 8.14 \u0434\u043e 17.1.7, \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0442 17.2 \u0434\u043e 17.2.5 \u0438 \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0442 17.3 \u0434\u043e 17.3.2.\n\n\u0412\u00a0\u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435\u00a0\u0442\u0430\u043a\u0436\u0435 \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u044b \u0447\u0435\u0442\u044b\u0440\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0441 \u043e\u0446\u0435\u043d\u043a\u0430\u043c\u0438 \u043e\u0442 6,7 \u0434\u043e 8,5, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0443 \u0441\u043b\u0443\u0436\u0431, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0438\u043b\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u0443 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u044b.\n\n\u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435:\n\n- CVE-2024-8640: \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 Cube \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e YAML, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u0443 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0445. \u0412\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 GitLab EE, \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u0432\u0435\u0440\u0441\u0438\u0438 16.11.\n\n- CVE-2024-8635: \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c SSRF-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u043e\u0437\u0434\u0430\u0432 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 URL-\u0430\u0434\u0440\u0435\u0441 Maven Dependency Proxy \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c, \u0447\u0442\u043e \u0441\u0442\u0430\u0432\u0438\u0442 \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u0443 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u044e\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443. \u0412\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 GitLab EE, \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u0432\u0435\u0440\u0441\u0438\u0438 16.8.\n\n- CVE-2024-8124: \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u0442\u044c DoS-\u0430\u0442\u0430\u043a\u0443, \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0432 \u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 'glm_source', \u043f\u0435\u0440\u0435\u0433\u0440\u0443\u0436\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0438 \u0434\u0435\u043b\u0430\u044f \u0435\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439. \u0412\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 GitLab CE/EE, \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 16.4.\n\n- CVE-2024-8641: \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c CI_JOB_TOKEN \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0442\u043e\u043a\u0435\u043d\u0443 \u0441\u0435\u0430\u043d\u0441\u0430 GitLab \u0436\u0435\u0440\u0442\u0432\u044b, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u0438\u043c \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0441\u0435\u0430\u043d\u0441. \u0412\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 GitLab CE/EE, \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u0432\u0435\u0440\u0441\u0438\u0438 13.7.\n\n\u0418\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0439 \u043f\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044e, \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438 \u043f\u0430\u043a\u0435\u0442\u044b - \u043d\u0430 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u043c \u043f\u043e\u0440\u0442\u0430\u043b\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a GitLab, \u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043f\u0430\u043a\u0435\u0442\u044b GitLab Runner - \u0437\u0434\u0435\u0441\u044c.", "creation_timestamp": "2024-09-13T17:01:05.000000Z"}, {"uuid": "fb70d083-556b-4efe-8303-c20f44cd6f64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6633", "type": "exploited", "source": "https://t.me/true_secator/6145", "content": "Fortra \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043f\u0430\u0440\u043e\u043b\u044f \u0432 FileCatalyst Workflow, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0431\u0430\u0437\u0435 Workflow HyperSQL (HSQLDB), \u0432\u044b\u043a\u0440\u0430\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043d\u043e\u0432\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439-\u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432, \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044f \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043a \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044e FileCatalyst Workflow \u0438 \u043f\u043e \u0444\u0430\u043a\u0442\u0443 \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2024-6633 (CVSS v3.1: 9.8) \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 FileCatalyst Workflow 5.1.6 Build 139 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 5.1.7 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0435\u0439.\n\nFortra \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430 \u0432 \u0441\u0432\u043e\u0435\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435, \u0447\u0442\u043e HSQLDB \u0432\u043a\u043b\u044e\u0447\u0435\u043d \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0438 \u043d\u0435 \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d \u0434\u043b\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u043b\u0438 FileCatalyst Workflow \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u0441 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u043c\u0438, \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u0438\u0437 \u043b\u044e\u0431\u043e\u0433\u043e \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u0441\u0442\u0438\u0447\u044c HSQLDB.\n\n\u041c\u0435\u0442\u043e\u0434\u043e\u0432 \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044f \u0438\u043b\u0438 \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\nCVE-2024-6633 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 Tenable 1 \u0438\u044e\u043b\u044f 2024 \u0433\u043e\u0434\u0430, \u043a\u043e\u0433\u0434\u0430 \u0431\u044b\u043b \u043d\u0430\u0439\u0434\u0435\u043d \u043e\u0434\u0438\u043d \u0438 \u0442\u043e\u0442 \u0436\u0435 \u0441\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043f\u0430\u0440\u043e\u043b\u044c GOSENSGO613 \u0432\u043e \u0432\u0441\u0435\u0445 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f\u0445 FileCatalyst Workflow.\n\nTenable \u043f\u043e\u044f\u0441\u043d\u0438\u043b\u0430, \u0447\u0442\u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0439 \u0440\u0430\u0431\u043e\u0447\u0438\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 HSQLDB \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0440\u0442 TCP 4406 \u043f\u0440\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u0447\u0442\u043e \u0441\u0432\u0438\u0434\u0435\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0443\u0435\u0442 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u0421\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0435 \u043c\u043e\u0433\u0443\u0442 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u044d\u0442\u043e\u0442 \u043f\u0430\u0440\u043e\u043b\u044c \u043e\u0431\u044b\u0447\u043d\u044b\u043c\u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u0430\u043c\u0438, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0435\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u0440\u0435\u0448\u0435\u043d\u0438\u0435\u043c \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 5.1.7 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0435\u0439.\n\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043f\u0440\u043e\u0441\u0442\u043e\u0442\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0437\u043d\u0430\u0447\u0438\u043c\u0430\u044f \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 CVE-2024-6633, \u0434\u0435\u043b\u0430\u044e\u0442 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0447\u0440\u0435\u0437\u0432\u044b\u0447\u0430\u0439\u043d\u043e \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 FileCatalyst Workflow.\n\n\u0412\u0435\u0434\u044c \u043a\u0430\u043a \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0440\u0435\u0448\u0435\u043d\u0438\u044f Fortra \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u043f\u043e\u0434 \u043f\u0440\u0438\u0446\u0435\u043b\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u043d\u0438\u0445 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a\u00a0\u043c\u0430\u0441\u0441\u043e\u0432\u044b\u043c\u00a0\u0432\u0437\u043b\u043e\u043c\u0430\u043c\u00a0\u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445\u00a0\u0432\u0430\u0436\u043d\u044b\u0445 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439.\n\n\u0427\u0442\u043e, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u0438 \u043f\u0440\u043e\u0438\u0437\u043e\u0439\u0434\u0435\u0442 \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u0435 \u0432\u0440\u0435\u043c\u044f, \u043d\u043e \u0431\u0443\u0434\u0435\u043c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "creation_timestamp": "2024-08-29T12:21:47.000000Z"}, {"uuid": "fe61fd91-871e-4ca0-868f-34b719e47bb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-66666", "type": "seen", "source": "https://t.me/zorglub57/49", "content": "Cve-2024-66666", "creation_timestamp": "2025-05-13T18:52:14.000000Z"}, {"uuid": "c07c88e2-3186-45c2-ab18-acd9ee995705", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6633", "type": "seen", "source": "https://t.me/thehackernews/5489", "content": "\ud83d\udea8 A critical vulnerability in Fortra's FileCatalyst Workflow, tracked as CVE-2024-6633, exposes users to remote admin access attacks. \n \nSeverity Level: CVSS 9.8 \n \nLearn more: https://thehackernews.com/2024/08/fortra-issues-patch-for-high-risk.html \n \nIf you haven\u2019t patched your system yet, do it NOW.", "creation_timestamp": "2024-08-28T18:17:23.000000Z"}, {"uuid": "a403c64b-b5c0-46b2-bae8-0a8ef1f7e029", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6678", "type": "seen", "source": "https://t.me/thehackernews/5573", "content": "GitLab has just released patches for 17 vulnerabilities, including a critical flaw (CVE-2024-6678) with a CVSS score of 9.9/10. \n \nThis flaw could allow attackers to execute pipeline jobs as arbitrary users, posing a severe risk to your development environments. \n \nThis is the fourth critical flaw GitLab has patched in the past year. \n \nLearn more: https://thehackernews.com/2024/09/urgent-gitlab-patches-critical-flaw.html \n \nDon\u2019t wait for an exploit\u2014apply the update today!", "creation_timestamp": "2024-09-12T18:47:39.000000Z"}, {"uuid": "ea75e661-2b47-4330-905f-7ff85fdd8f07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6671", "type": "exploited", "source": "https://t.me/thehackernews/5577", "content": "\u26a0\ufe0f Cybercriminals are exploiting PoC exploits for two critical vulnerabilities (CVE-2024-6670, CVE-2024-6671) in WhatsUp Gold, with attacks starting just 5 hours after the PoC release. \n \nDetails here: https://thehackernews.com/2024/09/progress-whatsup-gold-exploited-just.html \n \nPatch your systems NOW to avoid becoming a target!", "creation_timestamp": "2024-09-13T13:06:50.000000Z"}, {"uuid": "aa1d2dea-3d55-4ffd-9248-a9f8604d7274", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "exploited", "source": "https://t.me/thehackernews/5577", "content": "\u26a0\ufe0f Cybercriminals are exploiting PoC exploits for two critical vulnerabilities (CVE-2024-6670, CVE-2024-6671) in WhatsUp Gold, with attacks starting just 5 hours after the PoC release. \n \nDetails here: https://thehackernews.com/2024/09/progress-whatsup-gold-exploited-just.html \n \nPatch your systems NOW to avoid becoming a target!", "creation_timestamp": "2024-09-13T13:06:50.000000Z"}, {"uuid": "2133d326-541b-4834-8f3c-bc85d01f8073", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6678", "type": "seen", "source": "https://t.me/xakep_ru/16399", "content": "GitLab \u043f\u0430\u0442\u0447\u0438\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u043f\u0430\u0439\u043f\u043b\u0430\u0439\u043d\u043e\u043c\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 GitLab \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043f\u0430\u0442\u0447\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 (CVE-2024-6678) \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0430\u0439\u043f\u043b\u0430\u0439\u043d\u044b \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\nhttps://xakep.ru/2024/09/13/cve-2024-6678/", "creation_timestamp": "2024-09-13T16:34:47.000000Z"}, {"uuid": "4a82438d-e928-4621-b3c4-74d936d42d8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6646", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/2789", "content": "CVE-2024-6646\n\nGET /downloadFile.php?file=config HTTP/1.1\n\n#exploit  #poc", "creation_timestamp": "2024-07-14T13:44:11.000000Z"}, {"uuid": "0718f448-3788-4ea9-a080-ea63f393d0ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/3093", "content": "https://summoning.team/blog/progress-whatsup-gold-sqli-cve-2024-6670/\n\nBreaking Down Barriers: Exploiting Pre-Auth SQL Injection In WhatsUp Gold\nCVE-2024-6670\n#\u5206\u6790", "creation_timestamp": "2024-09-01T06:09:11.000000Z"}, {"uuid": "478439d8-2c9b-4b45-b844-233dcd7db3c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "published-proof-of-concept", "source": "https://t.me/fattahh_ir/2726", "content": "https://summoning.team/blog/progress-whatsup-gold-sqli-cve-2024-6670/\n\nBreaking Down Barriers: Exploiting Pre-Auth SQL Injection In WhatsUp Gold\nCVE-2024-6670\n#\u5206\u6790", "creation_timestamp": "2024-09-01T00:57:54.000000Z"}, {"uuid": "d67e17ee-d0a3-486c-b6bc-bafc8f8e4112", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/11061", "content": "#exploit\n1. CVE-2024-6670:\nBreaking Down Barriers: Exploiting Pre-Auth SQL Injection in WhatsUp Gold\nhttps://summoning.team/blog/progress-whatsup-gold-sqli-cve-2024-6670\n\n2. CVE-2024-22263:\nSpring Cloud Dataflow Arbitrary File Writing Scanner\nhttps://github.com/securelayer7/CVE-2024-22263_Scanner", "creation_timestamp": "2024-10-02T10:55:23.000000Z"}, {"uuid": "391c5c46-fcd2-408c-89dc-6596ec437fa8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "published-proof-of-concept", "source": "https://t.me/InfoSecInsider/132", "content": "Tools  - Hackers Factory \n\nCallander is a simple system sandboxing tool for Linux.\n\nhttps://github.com/rpetrich/callander\n\nToolkit for Retrieval and Analysis of Cyber Evidence (TRACE)\n\nhttps://github.com/Gadzhovski/TRACE-Forensic-Toolkit\n\nhttps://github.com/Gadzhovski/TRACE-Forensic-Toolkit\n\nhttps://github.com/xElessaway/My-OSINT-CTF\n\nInformation about web3 security and programming tutorials/tools \n\nhttps://github.com/immunefi-team/Web3-Security-Library?tab=readme-ov-file#starting-guides\n\nThis repository is meant to catalog network and host artifacts associated with various EDR products \"shell\" and response functionalities. \n\nhttps://github.com/cbecks2/edr-artifacts\n\nPoC for Progress Software WhatsUp Gold HasErrors SQL Injection Authentication Bypass Vulnerability (CVE-2024-6670)\n\nhttps://github.com/sinsinology/CVE-2024-6670\n\nAmnezia VPN Client (Desktop+Mobile) \n\nhttps://github.com/amnezia-vpn/amnezia-client\n\n#CyberDilara \nhttps://t.me/CyberDilara", "creation_timestamp": "2024-09-02T09:41:03.000000Z"}, {"uuid": "04649c76-33da-41b5-8d60-da46e23d0dc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/4320", "content": "#exploit\n1. Breaking Down Barriers: Exploiting Pre-Auth SQL Injection in WhatsUp Gold\nhttps://summoning.team/blog/progress-whatsup-gold-sqli-cve-2024-6670\n\n2. CVE-2024-22263:\nSpring Cloud Dataflow Arbitrary File Writing Scanner\nhttps://github.com/securelayer7/CVE-2024-22263_Scanner", "creation_timestamp": "2024-09-01T04:26:06.000000Z"}, {"uuid": "a16229ad-903a-4195-b871-65f7ec11beb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-07)", "content": "", "creation_timestamp": "2026-05-07T00:00:00.000000Z"}, {"uuid": "52df540e-1bb7-4252-bc9b-82db79814148", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "seen", "source": "https://bsky.app/profile/threatchain.bsky.social/post/3mlecpccnwr2h", "content": "CVE of the week: CVE-2024-6670\n\nCVSS 9.8, EPSS 94.5% (top percentile), and on CISA's KEV \u2014 actively exploited.\n\nVendor: progress \u00b7 Product: whatsup_gold", "creation_timestamp": "2026-05-08T18:00:05.256634Z"}, {"uuid": "0c7ba85b-747f-4e90-a2ce-7ab8d86b50e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "seen", "source": "https://bsky.app/profile/threatchain.bsky.social/post/3mlecpetffj2s", "content": "In WhatsUp Gold versions released before 2024.0.0,\u00a0a SQL Injection vulnerability allows an unauthenticated attacker to retrieve the users encrypted password....\n\nFull EPSS score + KEV add-date + affected CPE list: threatchain.io/cve-detail?id=CVE-2024-6670", "creation_timestamp": "2026-05-08T18:00:06.915672Z"}, {"uuid": "604229c0-91dd-4fef-9022-11d6fc971b0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6678", "type": "published-proof-of-concept", "source": "https://t.me/pentestnotes/230", "content": "CVE-2024-6678 | GitLab: Pipeline Schedule Arbitrary User Trigger\n\n\u0412 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u0438\u044f \u043d\u043e\u0432\u043e\u0433\u043e \u0440\u0435\u0441\u0435\u0440\u0447\u0430, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b, \u0447\u0442\u043e \u0434\u043b\u044f \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0439 CVE \u043f\u043e\u0434 Gitlab - CVE-2024-6678 (9.9/10 CVSS) \u043f\u043e \u043a\u0430\u043a\u043e\u0439-\u0442\u043e \u043f\u0440\u0438\u0447\u0438\u043d\u0435 \u0432\u0441\u0451 \u0435\u0449\u0451 \u043d\u0435\u0442 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e PoC\u2019a. \u041f\u0440\u0438\u0448\u043b\u043e\u0441\u044c \u043d\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u0435\u0433\u043e \u0441\u0430\u043c\u043e\u043c\u0443 \ud83e\udd37\u200d\u2640\ufe0f\n\u0422\u0435\u043f\u0435\u0440\u044c \u0434\u0435\u043b\u044e\u0441\u044c \u0441 \u0432\u0430\u043c\u0438, \u0432\u0434\u0440\u0443\u0433 \u043a\u043e\u043c\u0443 \u043f\u0440\u0438\u0433\u043e\u0434\u0438\u0442\u0441\u044f.\n\n\u0421\u0443\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0430\u0439\u043f\u043b\u0430\u0439\u043d\u044b \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u042d\u0442\u043e \u0434\u0430\u0451\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u043c \u0438 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u043c, \u0441\u0442\u0430\u0449\u0438\u0442\u044c \u043a\u0440\u0435\u0434\u044b \u0438 \u0442\u043e\u043a\u0435\u043d\u044b, \u0438, \u043a\u0430\u043a \u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435 - \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c RCE. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u0441\u0442\u0430\u0442\u0438, \u043d\u0435 \u0437\u0430\u043c\u0435\u0447\u0430\u043b\u0438 \u0446\u0435\u043b\u044b\u0445 \u0434\u0435\u0441\u044f\u0442\u044c \u043b\u0435\u0442 (\u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0435\u0440\u0441\u0438\u0438 CE/EE \u0441 8.14 \u0434\u043e 17.1.7, \u0432\u0435\u0440\u0441\u0438\u0438 \u0441 17.2 \u0434\u043e 17.2.5 \u0438 \u0432\u0435\u0440\u0441\u0438\u0438 \u0441 17.3 \u0434\u043e 17.3.2).\n\n\u0426\u0435\u043f\u043e\u0447\u043a\u0430:\n\n\u27a1\ufe0fDeveloper \u0442\u0440\u0438\u0433\u0433\u0435\u0440\u0438\u0442 Pipeline Schedule, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 Owner/Maintainer\n\u27a1\ufe0f\u041f\u0430\u0439\u043f\u043b\u0430\u0439\u043d \u0441\u0442\u0430\u0440\u0442\u0443\u0435\u0442 \u0441 \u0432\u0441\u0435\u043c\u0438 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u043c\u0438 \u0440\u0430\u0441\u043f\u0438\u0441\u0430\u043d\u0438\u044f (DB_PASSWORD, SSH_PRIVATE_KEY, API-\u0442\u043e\u043a\u0435\u043d\u044b \u0438 \u0442.\u0434.)\n\u27a1\ufe0f\u0415\u0441\u043b\u0438 \u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e \u0435\u0441\u0442\u044c push-\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 (Developer \u043e\u0431\u044b\u0447\u043d\u043e \u0438\u043c\u0435\u0435\u0442), \u043e\u043d \u043f\u043e\u0434\u043c\u0435\u043d\u044f\u0435\u0442 .gitlab-ci.yml \u0432 \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0435 (develop/staging) - \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u0442 \u0442\u0443\u0434\u0430 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 env \u043d\u0430 \u0441\u0432\u043e\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438\u043b\u0438 \u0440\u0435\u0432\u0435\u0440\u0441-\u0448\u0435\u043b\u043b\n\u27a1\ufe0fGitLab Runner \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u044d\u0442\u043e\u0442 \u043f\u0430\u0439\u043f\u043b\u0430\u0439\u043d \u0441 \u043f\u043e\u043b\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0441\u0435\u043a\u0440\u0435\u0442\u0430\u043c \u0438 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044e\n\n\u27a1\ufe0fPoC\u2b05\ufe0f\n\n\ud83d\udcab @pentestnotes", "creation_timestamp": "2026-08-05T00:00:06.594219Z"}, {"uuid": "410b9aa9-d926-4825-89fc-62b052282105", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6678", "type": "seen", "source": "https://t.me/pentestnotes/230", "content": "CVE-2024-6678 | GitLab: Pipeline Schedule Arbitrary User Trigger\n\n\u0412 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u0438\u044f \u043d\u043e\u0432\u043e\u0433\u043e \u0440\u0435\u0441\u0435\u0440\u0447\u0430, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b, \u0447\u0442\u043e \u0434\u043b\u044f \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0439 CVE \u043f\u043e\u0434 Gitlab - CVE-2024-6678 (9.9/10 CVSS) \u043f\u043e \u043a\u0430\u043a\u043e\u0439-\u0442\u043e \u043f\u0440\u0438\u0447\u0438\u043d\u0435 \u0432\u0441\u0451 \u0435\u0449\u0451 \u043d\u0435\u0442 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e PoC\u2019a. \u041f\u0440\u0438\u0448\u043b\u043e\u0441\u044c \u043d\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u0435\u0433\u043e \u0441\u0430\u043c\u043e\u043c\u0443 \ud83e\udd37\u200d\u2640\ufe0f\n\u0422\u0435\u043f\u0435\u0440\u044c \u0434\u0435\u043b\u044e\u0441\u044c \u0441 \u0432\u0430\u043c\u0438, \u0432\u0434\u0440\u0443\u0433 \u043a\u043e\u043c\u0443 \u043f\u0440\u0438\u0433\u043e\u0434\u0438\u0442\u0441\u044f.\n\n\u0421\u0443\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0430\u0439\u043f\u043b\u0430\u0439\u043d\u044b \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u042d\u0442\u043e \u0434\u0430\u0451\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u043c \u0438 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u043c, \u0441\u0442\u0430\u0449\u0438\u0442\u044c \u043a\u0440\u0435\u0434\u044b \u0438 \u0442\u043e\u043a\u0435\u043d\u044b, \u0438, \u043a\u0430\u043a \u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435 - \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c RCE. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u0441\u0442\u0430\u0442\u0438, \u043d\u0435 \u0437\u0430\u043c\u0435\u0447\u0430\u043b\u0438 \u0446\u0435\u043b\u044b\u0445 \u0434\u0435\u0441\u044f\u0442\u044c \u043b\u0435\u0442 (\u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0435\u0440\u0441\u0438\u0438 CE/EE \u0441 8.14 \u0434\u043e 17.1.7, \u0432\u0435\u0440\u0441\u0438\u0438 \u0441 17.2 \u0434\u043e 17.2.5 \u0438 \u0432\u0435\u0440\u0441\u0438\u0438 \u0441 17.3 \u0434\u043e 17.3.2).\n\n\u0426\u0435\u043f\u043e\u0447\u043a\u0430:\n\n\u27a1\ufe0fDeveloper \u0442\u0440\u0438\u0433\u0433\u0435\u0440\u0438\u0442 Pipeline Schedule, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 Owner/Maintainer\n\u27a1\ufe0f\u041f\u0430\u0439\u043f\u043b\u0430\u0439\u043d \u0441\u0442\u0430\u0440\u0442\u0443\u0435\u0442 \u0441 \u0432\u0441\u0435\u043c\u0438 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u043c\u0438 \u0440\u0430\u0441\u043f\u0438\u0441\u0430\u043d\u0438\u044f (DB_PASSWORD, SSH_PRIVATE_KEY, API-\u0442\u043e\u043a\u0435\u043d\u044b \u0438 \u0442.\u0434.)\n\u27a1\ufe0f\u0415\u0441\u043b\u0438 \u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e \u0435\u0441\u0442\u044c push-\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 (Developer \u043e\u0431\u044b\u0447\u043d\u043e \u0438\u043c\u0435\u0435\u0442), \u043e\u043d \u043f\u043e\u0434\u043c\u0435\u043d\u044f\u0435\u0442 .gitlab-ci.yml \u0432 \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0435 (develop/staging) - \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u0442 \u0442\u0443\u0434\u0430 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 env \u043d\u0430 \u0441\u0432\u043e\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438\u043b\u0438 \u0440\u0435\u0432\u0435\u0440\u0441-\u0448\u0435\u043b\u043b\n\u27a1\ufe0fGitLab Runner \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u044d\u0442\u043e\u0442 \u043f\u0430\u0439\u043f\u043b\u0430\u0439\u043d \u0441 \u043f\u043e\u043b\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0441\u0435\u043a\u0440\u0435\u0442\u0430\u043c \u0438 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044e\n\n\u27a1\ufe0fPoC\u2b05\ufe0f\n\n\ud83d\udcab @pentestnotes", "creation_timestamp": "2026-08-04T13:00:17.260072Z"}, {"uuid": "dd0e259f-c6df-4381-9810-c969f835b187", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "seen", "source": "https://bsky.app/profile/threatchain.bsky.social/post/3mmhja7bcku24", "content": "CVE of the week: CVE-2024-6670\n\nCVSS 9.8, EPSS 94.5% (top percentile), and on CISA's KEV \u2014 actively exploited.\n\nVendor: progress \u00b7 Product: whatsup_gold", "creation_timestamp": "2026-05-22T18:00:05.164408Z"}, {"uuid": "3959c959-3cb7-4864-b03b-2d8017a19ce5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "seen", "source": "https://bsky.app/profile/threatchain.bsky.social/post/3mmhjabh3sy2x", "content": "In WhatsUp Gold versions released before 2024.0.0,\u00a0a SQL Injection vulnerability allows an unauthenticated attacker to retrieve the users encrypted password....\n\nFull EPSS score + KEV add-date + affected CPE list: threatchain.io/cve-detail?id=CVE-2024-6670", "creation_timestamp": "2026-05-22T18:00:06.207462Z"}, {"uuid": "2ecfeee6-d66b-43d5-8a2f-5ad9ec9ff6f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6678", "type": "seen", "source": "Telegram/m9LHBqRO3Be5S0g917eOul0ANUEreIg1WFHejaRiw5RvmBA", "content": "", "creation_timestamp": "2026-05-21T15:00:06.000000Z"}, {"uuid": "c70f402c-ef79-43c6-8698-93889058b1b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "creation_timestamp": "2026-05-27T00:00:00.000000Z"}, {"uuid": "b2650965-f300-4a85-b4d5-258a6acf2b2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "seen", "source": "https://bsky.app/profile/threatchain.bsky.social/post/3mmz4in4jnr23", "content": "CVE of the week: CVE-2024-6670\n\nCVSS 9.8, EPSS 94.5% (top percentile), and on CISA's KEV \u2014 actively exploited.\n\nVendor: progress \u00b7 Product: whatsup_gold", "creation_timestamp": "2026-05-29T18:00:07.813536Z"}, {"uuid": "c5f5eb33-d3c5-43bd-9d69-71c6df7b6ce5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "seen", "source": "https://bsky.app/profile/threatchain.bsky.social/post/3mmz4ipum6d2e", "content": "In WhatsUp Gold versions released before 2024.0.0,\u00a0a SQL Injection vulnerability allows an unauthenticated attacker to retrieve the users encrypted password....\n\nFull EPSS score + KEV add-date + affected CPE list: threatchain.io/cve-detail?id=CVE-2024-6670", "creation_timestamp": "2026-05-29T18:00:09.099053Z"}, {"uuid": "a48bb0ab-861e-4f94-a81e-6cd909b19aa3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6671", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-04)", "content": "", "creation_timestamp": "2026-06-04T00:00:00.000000Z"}, {"uuid": "fa03cfc1-bad3-41ec-8c8b-779b57307e24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-04)", "content": "", "creation_timestamp": "2026-06-04T00:00:00.000000Z"}, {"uuid": "056dcff9-820d-4730-a2e7-145da05dfbaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-13)", "content": "", "creation_timestamp": "2026-06-13T00:00:00.000000Z"}, {"uuid": "8ef1022b-1a0b-4f58-87f4-9f3166402fea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6671", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-13)", "content": "", "creation_timestamp": "2026-06-13T00:00:00.000000Z"}, {"uuid": "53001b17-3497-45b4-ae54-0564bdec4d90", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6671", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/01fec582-2764-4b29-bc71-044e608d322a", "content": "", "creation_timestamp": "2026-06-19T12:45:10.288791Z"}, {"uuid": "133fb36a-2532-43df-bd1a-95deb460b69b", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c3fae8ff-7fa9-44c0-94b1-29305bbb5991", "content": "", "creation_timestamp": "2026-06-19T12:46:35.163146Z"}, {"uuid": "1a47bb41-21aa-4c1f-a602-ebe6cb9100d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6671", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-22)", "content": "", "creation_timestamp": "2026-06-22T00:00:00.000000Z"}, {"uuid": "c06d32e2-d136-4ba6-972a-e773ae3d48b7", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6671", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/faf773da-2659-436f-8b61-182637a59be2", "content": "", "creation_timestamp": "2026-06-23T14:03:01.549339Z"}, {"uuid": "cae6f21b-112c-4207-94da-43ff3da7e9e6", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/686fc721-8f5a-4546-95bc-c7ae97fbb540", "content": "", "creation_timestamp": "2026-06-23T14:05:58.070946Z"}, {"uuid": "29af0e79-bb33-46b2-a462-765475699b4c", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-6670", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a02279e6-a340-44fa-83fd-41d68ff15bfe", "content": "", "creation_timestamp": "2026-06-30T09:23:21.177670Z"}, {"uuid": "6dc0afff-eb75-4e0e-b99a-415330033f78", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-6671", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/db3c364e-cb98-4a9e-be5b-d193a3729287", "content": "", "creation_timestamp": "2026-06-30T09:23:30.505194Z"}, {"uuid": "a6d0bb4e-3bb6-4256-8d74-a541e2769bed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-14)", "content": "", "creation_timestamp": "2026-07-15T10:00:16.708110Z"}, {"uuid": "04576bb5-441d-422e-bb7a-5c0f4f441cc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-66001", "type": "seen", "source": "Telegram/0Lzh2WjQOWsuTydOW_ekHZzZKDiwWQ3j_cpMbWJHlr9U_UA", "content": "", "creation_timestamp": "2026-08-24T21:00:05.261116Z"}, {"uuid": "ccb6c6db-5227-4fd0-a4c0-0b0a71f2fb84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-66001", "type": "published-proof-of-concept", "source": "Telegram/0Lzh2WjQOWsuTydOW_ekHZzZKDiwWQ3j_cpMbWJHlr9U_UA", "content": "", "creation_timestamp": "2026-08-25T00:00:08.414497Z"}, {"uuid": "01188c7a-4cb2-436d-90a2-6430bd5e2f8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6678", "type": "seen", "source": "https://t.me/EchelonEyes/3168", "content": "GitLab \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u0440\u0438\u0437\u044b\u0432\u0430\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f\n\nGitLab \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0441\u0440\u043e\u0447\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0435 17 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u0442\u0440\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 (CVE-2024-8640, CVE-2024-8635 \u0438 CVE-2024-8124) \u0438 \u043e\u0434\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f (CVE-2024-6678). \u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0432\u0441\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439, \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u2013 17.3.2, 17.2.5 \u0438 17.1.7.\n\n\u00ab\u042d\u0442\u0438 \u0432\u0435\u0440\u0441\u0438\u0438 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442 \u0432\u0430\u0436\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0448\u0438\u0431\u043e\u043a \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438 \u043c\u044b \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0432\u0441\u0435 \u0441\u0430\u043c\u043e\u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 GitLab \u0434\u043e \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u044d\u0442\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439. GitLab[.]com \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e. \u041a\u043b\u0438\u0435\u043d\u0442\u0430\u043c GitLab Dedicated \u043d\u0435 \u043d\u0443\u0436\u043d\u043e \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0442\u044c \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439\u00bb, \u2014 \u0437\u0430\u044f\u0432\u0438\u043b\u0438 \u0432 GitLab.\n\n\u0421\u0430\u043c\u0430\u044f \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0438\u0437\u043e \u0432\u0441\u0435\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u2013 CVE-2024-6678 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 9,6) \u2013 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u044b \u0432 \u043a\u043e\u043d\u0432\u0435\u0439\u0435\u0440\u0435 \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u043e\u0439 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438 (pipeline jobs) \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u043c \u0438 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u043c \u044d\u0442\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 CVE-2024-8635 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u043b\u043a\u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 (SSRF), \u0432\u043b\u0438\u044f\u044e\u0449\u0443\u044e \u043d\u0430 GitLab Enterprise Edition. \u041e\u043d\u0430 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e URL-\u0430\u0434\u0440\u0435\u0441\u0430 \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Maven.\n\nCVE-2024-8124 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0442\u043a\u0430\u0437\u043e\u043c \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438. \u041e\u043d\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u043e\u0439 \u0431\u043e\u043b\u044c\u0448\u043e\u0433\u043e \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 glm_source. \u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 GitLab Community \u0438 Enterprise Edition.\n\n\u0415\u0449\u0435 \u043e\u0434\u0438\u043d \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0439 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a, CVE-2024-8640, \u0432\u044b\u0437\u0432\u0430\u043d \u043d\u0435\u043f\u043e\u043b\u043d\u043e\u0439 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0435\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b \u0432\u0432\u043e\u0434\u0438\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 Cube \u0432 GitLab EE.\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u043c\u0438 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u043c\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b, \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u043e\u0434\u043e\u043c \u0438\u043b\u0438 \u043f\u043e\u0445\u0438\u0442\u0438\u0442\u044c \u043b\u0438\u0447\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e.\n\n\u0414\u0430\u043d\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u043b\u0438\u0448\u043d\u0438\u0439 \u0440\u0430\u0437 \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u0438\u0432\u0430\u044e\u0442 \u0432\u0430\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0430\u0434\u0435\u043a\u0432\u0430\u0442\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439. \u0421\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e CVE-2024-8640, CVE-2024-8635, CVE-2024-8124 \u0438 CVE-2024-6678 \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u00ab\u0421\u043a\u0430\u043d\u0435\u0440-\u0412\u0421 6\u00bb, \u0440\u0430\u0437\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u043c\u043e\u0439 \u0413\u041a \u00ab\u042d\u0448\u0435\u043b\u043e\u043d\u00bb. \u041f\u0430\u043a\u0435\u0442 \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u044f\u0432\u0438\u043b\u0441\u044f \u0432 \u0431\u0430\u0437\u0435 \u00ab\u0421\u043a\u0430\u043d\u0435\u0440\u0430-\u0412\u0421\u00bb \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u0432 8:36 \u0443\u0442\u0440\u0430. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0442\u044c \u0431\u0430\u0437\u0443 \u0432 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u043c \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0438, \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e \u043c\u0435\u0440\u0435 \u0438\u0445 \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://about.gitlab.com/releases/2024/09/11/patch-release-gitlab-17-3-2-released/ \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438", "creation_timestamp": "2026-07-26T02:02:02.995170Z"}, {"uuid": "9c719ee6-34c7-472d-86d2-cf473e91fdee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6678", "type": "seen", "source": "https://t.me/EchelonEyes/3168", "content": "GitLab \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u0440\u0438\u0437\u044b\u0432\u0430\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f\n\nGitLab \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0441\u0440\u043e\u0447\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0435 17 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u0442\u0440\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 (CVE-2024-8640, CVE-2024-8635 \u0438 CVE-2024-8124) \u0438 \u043e\u0434\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f (CVE-2024-6678). \u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0432\u0441\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439, \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u2013 17.3.2, 17.2.5 \u0438 17.1.7.\n\n\u00ab\u042d\u0442\u0438 \u0432\u0435\u0440\u0441\u0438\u0438 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442 \u0432\u0430\u0436\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0448\u0438\u0431\u043e\u043a \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438 \u043c\u044b \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0432\u0441\u0435 \u0441\u0430\u043c\u043e\u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 GitLab \u0434\u043e \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u044d\u0442\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439. GitLab[.]com \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e. \u041a\u043b\u0438\u0435\u043d\u0442\u0430\u043c GitLab Dedicated \u043d\u0435 \u043d\u0443\u0436\u043d\u043e \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0442\u044c \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439\u00bb, \u2014 \u0437\u0430\u044f\u0432\u0438\u043b\u0438 \u0432 GitLab.\n\n\u0421\u0430\u043c\u0430\u044f \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0438\u0437\u043e \u0432\u0441\u0435\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u2013 CVE-2024-6678 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 9,6) \u2013 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u044b \u0432 \u043a\u043e\u043d\u0432\u0435\u0439\u0435\u0440\u0435 \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u043e\u0439 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438 (pipeline jobs) \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u043c \u0438 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u043c \u044d\u0442\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 CVE-2024-8635 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u043b\u043a\u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 (SSRF), \u0432\u043b\u0438\u044f\u044e\u0449\u0443\u044e \u043d\u0430 GitLab Enterprise Edition. \u041e\u043d\u0430 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e URL-\u0430\u0434\u0440\u0435\u0441\u0430 \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Maven.\n\nCVE-2024-8124 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0442\u043a\u0430\u0437\u043e\u043c \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438. \u041e\u043d\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u043e\u0439 \u0431\u043e\u043b\u044c\u0448\u043e\u0433\u043e \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 glm_source. \u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 GitLab Community \u0438 Enterprise Edition.\n\n\u0415\u0449\u0435 \u043e\u0434\u0438\u043d \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0439 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a, CVE-2024-8640, \u0432\u044b\u0437\u0432\u0430\u043d \u043d\u0435\u043f\u043e\u043b\u043d\u043e\u0439 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0435\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b \u0432\u0432\u043e\u0434\u0438\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 Cube \u0432 GitLab EE.\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u043c\u0438 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u043c\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b, \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u043e\u0434\u043e\u043c \u0438\u043b\u0438 \u043f\u043e\u0445\u0438\u0442\u0438\u0442\u044c \u043b\u0438\u0447\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e.\n\n\u0414\u0430\u043d\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u043b\u0438\u0448\u043d\u0438\u0439 \u0440\u0430\u0437 \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u0438\u0432\u0430\u044e\u0442 \u0432\u0430\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0430\u0434\u0435\u043a\u0432\u0430\u0442\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439. \u0421\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e CVE-2024-8640, CVE-2024-8635, CVE-2024-8124 \u0438 CVE-2024-6678 \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u00ab\u0421\u043a\u0430\u043d\u0435\u0440-\u0412\u0421 6\u00bb, \u0440\u0430\u0437\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u043c\u043e\u0439 \u0413\u041a \u00ab\u042d\u0448\u0435\u043b\u043e\u043d\u00bb. \u041f\u0430\u043a\u0435\u0442 \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u044f\u0432\u0438\u043b\u0441\u044f \u0432 \u0431\u0430\u0437\u0435 \u00ab\u0421\u043a\u0430\u043d\u0435\u0440\u0430-\u0412\u0421\u00bb \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u0432 8:36 \u0443\u0442\u0440\u0430. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0442\u044c \u0431\u0430\u0437\u0443 \u0432 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u043c \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0438, \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e \u043c\u0435\u0440\u0435 \u0438\u0445 \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://about.gitlab.com/releases/2024/09/11/patch-release-gitlab-17-3-2-released/ \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438", "creation_timestamp": "2026-07-27T00:00:43.151170Z"}, {"uuid": "4e54c90f-189d-4044-8eeb-ca9c178d895a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6678", "type": "seen", "source": "https://t.me/EchelonEyes/3168", "content": "GitLab \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u0440\u0438\u0437\u044b\u0432\u0430\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f\n\nGitLab \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0441\u0440\u043e\u0447\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0435 17 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u0442\u0440\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 (CVE-2024-8640, CVE-2024-8635 \u0438 CVE-2024-8124) \u0438 \u043e\u0434\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f (CVE-2024-6678). \u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0432\u0441\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439, \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u2013 17.3.2, 17.2.5 \u0438 17.1.7.\n\n\u00ab\u042d\u0442\u0438 \u0432\u0435\u0440\u0441\u0438\u0438 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442 \u0432\u0430\u0436\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0448\u0438\u0431\u043e\u043a \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438 \u043c\u044b \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0432\u0441\u0435 \u0441\u0430\u043c\u043e\u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 GitLab \u0434\u043e \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u044d\u0442\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439. GitLab[.]com \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e. \u041a\u043b\u0438\u0435\u043d\u0442\u0430\u043c GitLab Dedicated \u043d\u0435 \u043d\u0443\u0436\u043d\u043e \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0442\u044c \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439\u00bb, \u2014 \u0437\u0430\u044f\u0432\u0438\u043b\u0438 \u0432 GitLab.\n\n\u0421\u0430\u043c\u0430\u044f \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0438\u0437\u043e \u0432\u0441\u0435\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u2013 CVE-2024-6678 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 9,6) \u2013 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u044b \u0432 \u043a\u043e\u043d\u0432\u0435\u0439\u0435\u0440\u0435 \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u043e\u0439 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438 (pipeline jobs) \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u043c \u0438 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u043c \u044d\u0442\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 CVE-2024-8635 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u043b\u043a\u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 (SSRF), \u0432\u043b\u0438\u044f\u044e\u0449\u0443\u044e \u043d\u0430 GitLab Enterprise Edition. \u041e\u043d\u0430 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e URL-\u0430\u0434\u0440\u0435\u0441\u0430 \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Maven.\n\nCVE-2024-8124 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0442\u043a\u0430\u0437\u043e\u043c \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438. \u041e\u043d\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u043e\u0439 \u0431\u043e\u043b\u044c\u0448\u043e\u0433\u043e \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 glm_source. \u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 GitLab Community \u0438 Enterprise Edition.\n\n\u0415\u0449\u0435 \u043e\u0434\u0438\u043d \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0439 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a, CVE-2024-8640, \u0432\u044b\u0437\u0432\u0430\u043d \u043d\u0435\u043f\u043e\u043b\u043d\u043e\u0439 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0435\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b \u0432\u0432\u043e\u0434\u0438\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 Cube \u0432 GitLab EE.\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u043c\u0438 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u043c\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b, \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u043e\u0434\u043e\u043c \u0438\u043b\u0438 \u043f\u043e\u0445\u0438\u0442\u0438\u0442\u044c \u043b\u0438\u0447\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e.\n\n\u0414\u0430\u043d\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u043b\u0438\u0448\u043d\u0438\u0439 \u0440\u0430\u0437 \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u0438\u0432\u0430\u044e\u0442 \u0432\u0430\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0430\u0434\u0435\u043a\u0432\u0430\u0442\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439. \u0421\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e CVE-2024-8640, CVE-2024-8635, CVE-2024-8124 \u0438 CVE-2024-6678 \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u00ab\u0421\u043a\u0430\u043d\u0435\u0440-\u0412\u0421 6\u00bb, \u0440\u0430\u0437\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u043c\u043e\u0439 \u0413\u041a \u00ab\u042d\u0448\u0435\u043b\u043e\u043d\u00bb. \u041f\u0430\u043a\u0435\u0442 \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u044f\u0432\u0438\u043b\u0441\u044f \u0432 \u0431\u0430\u0437\u0435 \u00ab\u0421\u043a\u0430\u043d\u0435\u0440\u0430-\u0412\u0421\u00bb \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u0432 8:36 \u0443\u0442\u0440\u0430. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0442\u044c \u0431\u0430\u0437\u0443 \u0432 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u043c \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0438, \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e \u043c\u0435\u0440\u0435 \u0438\u0445 \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://about.gitlab.com/releases/2024/09/11/patch-release-gitlab-17-3-2-released/ \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438", "creation_timestamp": "2026-07-28T00:00:46.259543Z"}, {"uuid": "b79b82ec-5bf6-4fc2-9b3c-ae7102a4ca6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6678", "type": "seen", "source": "https://t.me/Hackme_news/1012", "content": "GitLab \u0442\u043e\u043b\u044c\u043a\u043e \u0447\u0442\u043e \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f 17 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-6678) \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9,9/10.\n\nhttps://about.gitlab.com/releases/2024/09/11/patch-release-gitlab-17-3-2-released/", "creation_timestamp": "2026-09-01T17:00:05.878951Z"}, {"uuid": "20e18fe5-f13f-4c02-8e3f-657df0fd240c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6678", "type": "seen", "source": "https://t.me/Hackme_news/1012", "content": "GitLab \u0442\u043e\u043b\u044c\u043a\u043e \u0447\u0442\u043e \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f 17 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-6678) \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9,9/10.\n\nhttps://about.gitlab.com/releases/2024/09/11/patch-release-gitlab-17-3-2-released/", "creation_timestamp": "2026-09-02T01:03:33.926213Z"}, {"uuid": "2e0470ea-d972-407d-b999-e2d3508b85f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6670", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/whatsup_gold_sqli.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Michael Heinzl\", \"Sina Kheirkhah ( \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a SQL injection vulnerability in WhatsUp Gold, by changing the password of an existing user (such as of the default admin account)\\n          to an attacker-controlled one.\\n\\n          WhatsUp Gold versions < v24.0.0 are affected.\", \"disclosure_date\": \"2024-08-29\", \"fullname\": \"auxiliary/admin/http/whatsup_gold_sqli\", \"is_install_path\": true, \"mod_time\": \"2026-04-15 11:57:01 +0000\", \"name\": \"WhatsUp Gold SQL Injection (CVE-2024-6670)\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"config-changes\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/admin/http/whatsup_gold_sqli.rb\", \"platform\": \"\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"admin/http/whatsup_gold_sqli\", \"references\": [\"CVE-2024-6670\", \"URL-https://community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-August-2024\", \"URL-https://summoning.team/blog/progress-whatsup-gold-sqli-cve-2024-6670/\", \"URL-https://www.zerodayinitiative.com/advisories/ZDI-24-1185/\"], \"rport\": 443, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:46:51.462324Z"}]}