{"vulnerability": "CVE-2024-1314", "sightings": [{"uuid": "cdbe287a-2b6c-474e-9c99-fb8433db78c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13140", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113775527773279774", "content": "", "creation_timestamp": "2025-01-05T11:32:59.262960Z"}, {"uuid": "2587479b-da55-4830-bbea-4a9fb95c913d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13140", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3leylvnqz4f2a", "content": "", "creation_timestamp": "2025-01-05T12:15:21.928091Z"}, {"uuid": "3662a56e-0e95-4ea7-9912-192375c35a4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13140", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3leynpq4ohf2w", "content": "", "creation_timestamp": "2025-01-05T12:47:50.555495Z"}, {"uuid": "30bbcf6b-baa2-45b6-8ce0-f475176a7aa2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13141", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113776257997595115", "content": "", "creation_timestamp": "2025-01-05T14:38:41.679259Z"}, {"uuid": "2530a8cf-93ed-41d2-9a28-eab1d15906f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13141", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3leyvxorzav2o", "content": "", "creation_timestamp": "2025-01-05T15:15:27.659553Z"}, {"uuid": "e04a782d-bb7b-4d70-8d50-05e9849d6473", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13141", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3leyydu2r2q2r", "content": "", "creation_timestamp": "2025-01-05T15:58:03.551757Z"}, {"uuid": "af397b2a-35fb-4a75-a153-a6ea0e2fb1a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13142", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113778267937874515", "content": "", "creation_timestamp": "2025-01-05T23:09:50.848670Z"}, {"uuid": "af994ec0-4f5e-4d3e-87e6-66d0d5204688", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13142", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lezqrzdydp2m", "content": "", "creation_timestamp": "2025-01-05T23:15:28.362546Z"}, {"uuid": "42886997-92cd-45ae-9d91-25492d52040e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13143", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113778357658231168", "content": "", "creation_timestamp": "2025-01-05T23:32:39.875272Z"}, {"uuid": "feb58298-cdf9-4ce7-8a99-1df8b375ed56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13142", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lezsuajuc52r", "content": "", "creation_timestamp": "2025-01-05T23:52:30.347021Z"}, {"uuid": "d1bc41cd-3352-4d05-b7a1-63942dec08ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13144", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113778519374692503", "content": "", "creation_timestamp": "2025-01-06T00:13:49.251198Z"}, {"uuid": "b99a87ed-0940-412e-9859-4b4f51ce5c32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13143", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lezu5edbeu2i", "content": "", "creation_timestamp": "2025-01-06T00:15:30.114073Z"}, {"uuid": "223d7aac-8271-47fe-9ab7-bfd495954d54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13144", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lezu5gqkck25", "content": "", "creation_timestamp": "2025-01-06T00:15:32.518566Z"}, {"uuid": "fd5dd533-ee13-4fbb-9771-34369334f8fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13145", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113778614006646037", "content": "", "creation_timestamp": "2025-01-06T00:37:51.466701Z"}, {"uuid": "29cf2444-d642-4581-a453-0bf9809e6173", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13144", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lezwilq2fs2e", "content": "", "creation_timestamp": "2025-01-06T00:57:34.308363Z"}, {"uuid": "329af61b-5994-40a9-a8d5-3ef9087bfa64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13143", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lezwilzoz62y", "content": "", "creation_timestamp": "2025-01-06T00:57:34.946154Z"}, {"uuid": "9a147ade-0a90-444c-9cf2-8ce2f9e208f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13145", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lezxihyv4t25", "content": "", "creation_timestamp": "2025-01-06T01:15:24.332548Z"}, {"uuid": "3fa65f8d-938a-4f52-838a-04e8d5aa7ab3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13145", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lezyq5t3eg2h", "content": "", "creation_timestamp": "2025-01-06T01:37:35.749415Z"}, {"uuid": "496542b1-770e-4e7d-beb1-ea66ffaaed90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13148", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljaea3eqtl27", "content": "", "creation_timestamp": "2025-02-28T12:00:06.707868Z"}, {"uuid": "91bdf0f9-79d0-445e-b7df-cfe13023a610", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13147", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljpgzuux5m2b", "content": "", "creation_timestamp": "2025-03-06T12:00:34.244550Z"}, {"uuid": "53601bb6-3d1b-44ba-9b35-eb9259ad2fbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13148", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114076531254128083", "content": "", "creation_timestamp": "2025-02-27T15:22:07.861403Z"}, {"uuid": "1d103358-7fb7-440d-a1c2-bd6df5e95cd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13148", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114077109535316307", "content": "", "creation_timestamp": "2025-02-27T17:49:12.153184Z"}, {"uuid": "643a56a4-2f8f-46c8-a328-b0409d3f54aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13148", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj6i3bwbzm2t", "content": "", "creation_timestamp": "2025-02-27T18:03:41.212775Z"}, {"uuid": "d16fb0df-8aff-4840-b167-3857e548cb07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13146", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3llb7h5osla2b", "content": "", "creation_timestamp": "2025-03-26T06:57:37.608537Z"}, {"uuid": "0e79f1f0-4143-41d5-b12c-bbc3713c0c33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13148", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lj73ynaibz2q", "content": "", "creation_timestamp": "2025-02-28T00:00:08.171872Z"}, {"uuid": "5fc23f47-2a2f-49cc-912e-b14647ee6c62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13148", "type": "seen", "source": "MISP/24306fae-b16b-4478-9297-d2973cdb583c", "content": "", "creation_timestamp": "2025-08-22T14:52:22.000000Z"}, {"uuid": "b856c2e9-a21f-434c-8f8a-81acfccac497", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13149", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lyxuw4ji7j2c", "content": "", "creation_timestamp": "2025-09-16T17:47:53.848795Z"}, {"uuid": "315409e5-6c33-492f-b0b6-827a732da3e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13140", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/128", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-jh2f-9mvc-3m3p\n\ud83d\udd17 Aliases: CVE-2024-13140\n\ud83d\udd39 Details: A vulnerability classified as problematic has been found in Emlog Pro up to 2.4.3. Affected is an unknown function of the file /admin/article.php?action=upload_cover of the component Cover Upload Handler. The manipulation of the argument image leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udd22 Severity: CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N, CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\n\ud83d\uddd3\ufe0f Modified: 2025-01-05T12:30:30Z\n\ud83d\uddd3\ufe0f Published: 2025-01-05T12:30:30Z\n\ud83c\udff7\ufe0f CWE IDs: CWE-79\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13140\n2. https://github.com/emlog/emlog/issues/312\n3. https://github.com/emlog/emlog/issues/312#issue-25854683\n4. https://vuldb.com/?ctiid.290214\n5. https://vuldb.com/?id.290214\n6. https://vuldb.com/?submit.46853", "creation_timestamp": "2025-01-05T12:39:38.000000Z"}, {"uuid": "013a1b63-196f-46bd-99e1-85a500575145", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13141", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/131", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-cmmx-wwp2-x696\n\ud83d\udd17 Aliases: CVE-2024-13141\n\ud83d\udd39 Details: A vulnerability classified as problematic was found in osuuu LightPicture up to 1.2.2. This vulnerability affects unknown code of the file /api/upload of the component SVG File Upload Handler. The manipulation of the argument file leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udd22 Severity: CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N, CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\n\ud83d\uddd3\ufe0f Modified: 2025-01-05T15:30:30Z\n\ud83d\uddd3\ufe0f Published: 2025-01-05T15:30:30Z\n\ud83c\udff7\ufe0f CWE IDs: CWE-79\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13141\n2. https://github.com/Hebing123/cve/issues/83\n3. https://vuldb.com/?ctiid.290224\n4. https://vuldb.com/?id.290224\n5. https://vuldb.com/?submit.468645", "creation_timestamp": "2025-01-05T15:38:11.000000Z"}, {"uuid": "5ccf66b8-c153-4753-bef0-5288d695b032", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13142", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/143", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-q7wx-v3rg-fjvx\n\ud83d\udd17 Aliases: CVE-2024-13142\n\ud83d\udd39 Details: A vulnerability was found in ZeroWdd studentmanager 1.0. It has been declared as problematic. This vulnerability affects the function submitAddRole of the file src/main/java/com/zero/system/controller/RoleController. java. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely.\n\ud83d\udd22 Severity: CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N, CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\n\ud83d\uddd3\ufe0f Modified: 2025-01-06T00:30:41Z\n\ud83d\uddd3\ufe0f Published: 2025-01-06T00:30:41Z\n\ud83c\udff7\ufe0f CWE IDs: CWE-79\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13142\n2. https://github.com/ZeroWdd/manager-system/issues/6\n3. https://vuldb.com/?ctiid.290230\n4. https://vuldb.com/?id.290230\n5. https://vuldb.com/?submit.469213", "creation_timestamp": "2025-01-06T00:35:49.000000Z"}, {"uuid": "15eea860-37ec-4586-9020-d0345879a479", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13145", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/148", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-x83j-h8x8-cj5h\n\ud83d\udd17 Aliases: CVE-2024-13145\n\ud83d\udd39 Details: A vulnerability classified as critical was found in zhenfeng13 My-Blog 1.0. Affected by this vulnerability is the function upload of the file src/main/java/com/site/blog/my/core/controller/admin/uploadController. java. The manipulation of the argument file leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udd22 Severity: CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L, CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\n\ud83d\uddd3\ufe0f Modified: 2025-01-06T03:30:39Z\n\ud83d\uddd3\ufe0f Published: 2025-01-06T03:30:39Z\n\ud83c\udff7\ufe0f CWE IDs: CWE-284\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13145\n2. https://github.com/ZHENFENG13/My-Blog/issues/141\n3. https://github.com/ZHENFENG13/My-Blog/issues/141#issue-259820153\n4. https://vuldb.com/?ctiid.290233\n5. https://vuldb.com/?id.290233\n6. https://vuldb.com/?submit.469221", "creation_timestamp": "2025-01-06T03:37:27.000000Z"}, {"uuid": "e4ed9c14-163f-4b84-b116-f07626ef6ee3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13143", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/145", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-j4jc-69x3-7rr6\n\ud83d\udd17 Aliases: CVE-2024-13143\n\ud83d\udd39 Details: A vulnerability was found in ZeroWdd studentmanager 1.0. It has been rated as problematic. This issue affects the function submitAddPermission of the file src/main/java/com/zero/system/controller/PermissionController. java. The manipulation of the argument url leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.\n\ud83d\udd22 Severity: CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N, CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\n\ud83d\uddd3\ufe0f Modified: 2025-01-06T00:30:41Z\n\ud83d\uddd3\ufe0f Published: 2025-01-06T00:30:41Z\n\ud83c\udff7\ufe0f CWE IDs: CWE-79\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13143\n2. https://github.com/ZeroWdd/manager-system/issues/\n3. https://vuldb.com/?ctiid.290231\n4. https://vuldb.com/?id.290231\n5. https://vuldb.com/?submit.46921", "creation_timestamp": "2025-01-06T00:35:52.000000Z"}, {"uuid": "f7618f77-a7be-48e7-92f4-d927e2636dbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13144", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/147", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-8464-8v52-xm79\n\ud83d\udd17 Aliases: CVE-2024-13144\n\ud83d\udd39 Details: A vulnerability classified as critical has been found in zhenfeng13 My-Blog 1.0. Affected is the function uploadFileByEditomd of the file src/main/java/com/site/blog/my/core/controller/admin/BlogController.java. The manipulation of the argument editormd-image-file leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udd22 Severity: CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L, CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\n\ud83d\uddd3\ufe0f Modified: 2025-01-06T00:30:41Z\n\ud83d\uddd3\ufe0f Published: 2025-01-06T00:30:41Z\n\ud83c\udff7\ufe0f CWE IDs: CWE-284\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13144\n2. https://github.com/ZHENFENG13/My-Blog/issues/140\n3. https://github.com/ZHENFENG13/My-Blog/issues/140#issue-259813820\n4. https://vuldb.com/?ctiid.290232\n5. https://vuldb.com/?id.290232\n6. https://vuldb.com/?submit.469220", "creation_timestamp": "2025-01-06T00:35:56.000000Z"}, {"uuid": "77673402-bb71-47ad-b00d-400fdce5c877", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13146", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8807", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13146\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Booknetic WordPress plugin before 4.1.5 does not have CSRF check when creating Staff accounts, which could allow attackers to make logged in admin add arbitrary Staff members via a CSRF attack\n\ud83d\udccf Published: 2025-03-26T06:00:08.756Z\n\ud83d\udccf Modified: 2025-03-26T06:00:08.756Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/19cb40dd-53b0-46db-beb0-1841e385ce09/", "creation_timestamp": "2025-03-26T06:25:16.000000Z"}, {"uuid": "5fcf8303-0094-4e33-ab7c-5c0d89e626fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13146", "type": "seen", "source": "https://t.me/cvedetector/21152", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13146 - Booknetic WordPress CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13146 \nPublished : March 26, 2025, 6:15 a.m. | 2\u00a0hours, 17\u00a0minutes ago \nDescription : The Booknetic WordPress plugin before 4.1.5 does not have CSRF check when creating Staff accounts, which could allow attackers to make logged in admin add arbitrary Staff members via a CSRF attack \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-26T09:42:19.000000Z"}, {"uuid": "e739ea64-e439-41f1-aa8e-3625903666db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13147", "type": "seen", "source": "https://t.me/cvedetector/19634", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13147 - Merkur Software B2B Login Panel SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-13147 \nPublished : March 5, 2025, 2:15 p.m. | 53\u00a0minutes ago \nDescription : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Merkur Software B2B Login Panel allows SQL Injection.This issue affects B2B Login Panel: before 15.01.2025. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T16:56:39.000000Z"}, {"uuid": "b65bff5d-cb16-4272-b63c-fe46d35935f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13145", "type": "seen", "source": "https://t.me/cvedetector/14321", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13145 - Zhenfeng13 My-Blog Unrestricted File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13145 \nPublished : Jan. 6, 2025, 1:15 a.m. | 19\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in zhenfeng13 My-Blog 1.0. Affected by this vulnerability is the function upload of the file src/main/java/com/site/blog/my/core/controller/admin/uploadController. java. The manipulation of the argument file leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-06T02:42:40.000000Z"}, {"uuid": "e378582f-7276-4305-a49d-8888d0079fa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13144", "type": "seen", "source": "https://t.me/cvedetector/14320", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13144 - Zhenfeng13 My-Blog File Upload Vulnerability (Unrestricted File Upload)\", \n  \"Content\": \"CVE ID : CVE-2024-13144 \nPublished : Jan. 6, 2025, 12:15 a.m. | 28\u00a0minutes ago \nDescription : A vulnerability classified as critical has been found in zhenfeng13 My-Blog 1.0. Affected is the function uploadFileByEditomd of the file src/main/java/com/site/blog/my/core/controller/admin/BlogController.java. The manipulation of the argument editormd-image-file leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-06T01:52:30.000000Z"}, {"uuid": "7bd7316c-7562-45f9-b412-8b24c3b4be33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13143", "type": "seen", "source": "https://t.me/cvedetector/14319", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13143 - ZeroWdd Studentmanager Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13143 \nPublished : Jan. 6, 2025, 12:15 a.m. | 28\u00a0minutes ago \nDescription : A vulnerability was found in ZeroWdd studentmanager 1.0. It has been rated as problematic. This issue affects the function submitAddPermission of the file src/main/java/com/zero/system/controller/PermissionController. java. The manipulation of the argument url leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. \nSeverity: 2.4 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-06T01:52:29.000000Z"}, {"uuid": "5c9442bb-ab42-4fff-9329-0c805ad1822a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13142", "type": "seen", "source": "https://t.me/cvedetector/14318", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13142 - ZeroWd StudentManager Remote Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13142 \nPublished : Jan. 5, 2025, 11:15 p.m. | 36\u00a0minutes ago \nDescription : A vulnerability was found in ZeroWdd studentmanager 1.0. It has been declared as problematic. This vulnerability affects the function submitAddRole of the file src/main/java/com/zero/system/controller/RoleController. java. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. \nSeverity: 2.4 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-06T01:02:22.000000Z"}, {"uuid": "b944ed50-b68a-4ff5-b0b8-f268335f3487", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13141", "type": "seen", "source": "https://t.me/cvedetector/14304", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13141 - \"osuuu LightPicture Cross-Site Scripting\"\", \n  \"Content\": \"CVE ID : CVE-2024-13141 \nPublished : Jan. 5, 2025, 3:15 p.m. | 18\u00a0minutes ago \nDescription : A vulnerability classified as problematic was found in osuuu LightPicture up to 1.2.2. This vulnerability affects unknown code of the file /api/upload of the component SVG File Upload Handler. The manipulation of the argument file leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-05T16:40:35.000000Z"}, {"uuid": "1b2e5470-733a-4943-91f1-583914ce099f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13140", "type": "seen", "source": "https://t.me/cvedetector/14302", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13140 - Emlog Pro Cross-Site Scripting Vulnerability in Cover Upload Handler\", \n  \"Content\": \"CVE ID : CVE-2024-13140 \nPublished : Jan. 5, 2025, 12:15 p.m. | 45\u00a0minutes ago \nDescription : A vulnerability classified as problematic has been found in Emlog Pro up to 2.4.3. Affected is an unknown function of the file /admin/article.php?action=upload_cover of the component Cover Upload Handler. The manipulation of the argument image leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-05T14:10:10.000000Z"}]}