{"vulnerability": "cve-2024-1800", "sightings": [{"uuid": "f338ddac-f2cb-467b-9ab2-0fc39e3f04a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:46.000000Z"}, {"uuid": "2251704c-c695-49b9-9171-74ec471e79b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:59.000000Z"}, {"uuid": "f0d7116e-b4a5-49a7-96c9-fc7cb0feacb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:02.000000Z"}, {"uuid": "9e882df9-2f28-4a1d-a81a-f68f4cd2a70f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/telerik_report_server_deserialization.rb", "content": "", "creation_timestamp": "2024-06-12T21:17:01.000000Z"}, {"uuid": "8475963d-080f-4fe3-a505-edbd82adcd87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7538", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aProgress Telerik Report Server pre-authenticated RCE chain (CVE-2024-4358/CVE-2024-1800)\nURL\uff1ahttps://github.com/sinsinology/CVE-2024-4358\n\n\u6807\u7b7e\uff1a#RCE", "creation_timestamp": "2024-06-06T10:09:47.000000Z"}, {"uuid": "6a649228-6366-4fec-8e4b-dcc3bb97a975", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "published-proof-of-concept", "source": "https://t.me/orderofsixangles/2311", "content": "Molding lies into reality || Exploiting CVE-2024-4358\n\nhttps://summoning.team/blog/progress-report-server-rce-cve-2024-4358-cve-2024-1800/", "creation_timestamp": "2024-06-03T12:53:24.000000Z"}, {"uuid": "83cd2b52-bed3-4166-bbfd-3771b05aa7d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8354", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aTelerik Report Server deserialization and authentication bypass exploit chain for CVE-2024-4358/CVE-2024-1800\nURL\uff1ahttps://github.com/fa-rrel/CVE-2024-4358.py\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-08-24T10:11:01.000000Z"}, {"uuid": "aa5a1d9e-2f3d-4d30-abb7-0832bffdd21f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8355", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aTelerik Report Server deserialization and authentication bypass exploit chain for CVE-2024-4358/CVE-2024-1800\nURL\uff1ahttps://github.com/fa-rrel/CVE-2024-4358\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-08-24T10:36:10.000000Z"}, {"uuid": "e2ded7d4-23ae-47f8-9f1b-a37641472325", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "seen", "source": "https://t.me/hackingbra/152", "content": "Always test the :83 default port on servers, maybe there is Telerik Report Server, you can take advantage of the newly revealed vulnerability.\n \n#CVE-2024-4358 / #CVE-2024-1800", "creation_timestamp": "2024-06-05T00:13:59.000000Z"}, {"uuid": "27155f81-ac72-4b98-baa6-f119c3855976", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "published-proof-of-concept", "source": "https://t.me/Celestial_Pulse24/1154", "content": "Server pre-authenticated #RCE chain (#CVE-2024-4358/CVE-2024-1800)\n\nhttps://github.com/sinsinology/CVE-2024-4358", "creation_timestamp": "2024-07-10T06:14:22.000000Z"}, {"uuid": "49478e85-3255-42bf-83bb-f13573194b30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "published-proof-of-concept", "source": "https://t.me/ap_security/732", "content": "#pentest  #exploit\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u0441\u0442\u043e\u043b\u0430\n\n\u0426\u0435\u043f\u043e\u0447\u043a\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0434\u043b\u044f CVE-2024-4358/CVE-2024-1800 \n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2024-4358 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9.8, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a. \u0425\u0435\u0439\u0440\u0445\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b, \u0447\u0442\u043e \u043c\u0435\u0442\u043e\u0434 \u00abRegister\u00bb \u0432 \u00abStartupController\u00bb \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0441\u0440\u0430\u0437\u0443 \u043f\u043e\u0441\u043b\u0435 \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0439 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438.\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u2014 CVE-2024-1800 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 8.8, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0440\u0430\u043d\u0435\u0435 \u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0430 \u0432\u0435\u043d\u0434\u043e\u0440\u0443 \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u0425\u043e\u0442\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u043b\u043e\u0436\u043d\u0430, \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0438 \u0441\u043a\u0440\u0438\u043f\u0442 \u043d\u0430 Python \u043e\u0442 \u0425\u0435\u0439\u0440\u0445\u0438 \u0434\u0435\u043b\u0430\u044e\u0442 \u0430\u0442\u0430\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043f\u043e\u043d\u044f\u0442\u043d\u043e\u0439 \u0434\u043b\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432. \u0418\u043c\u0435\u043d\u043d\u043e \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0442.\u0435. \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 10.1.24.514 \u0438\u043b\u0438 \u0432\u044b\u0448\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u043e\u0431\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.", "creation_timestamp": "2024-11-13T05:33:31.000000Z"}, {"uuid": "01c97950-f47f-44be-8fb2-e59b033eacbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "published-proof-of-concept", "source": "https://t.me/realLulzSec/17639", "content": "https://github.com/fa-rrel/CVE-2024-4358\n\nTelerik Report Server deserialization and authentication bypass exploit chain for CVE-2024-4358/CVE-2024-1800\n#github #exploit", "creation_timestamp": "2024-08-24T21:08:25.000000Z"}, {"uuid": "761c37a8-3caf-49fd-bd89-97b96d3c85ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "published-proof-of-concept", "source": "https://t.me/realLulzSec/1826", "content": "https://github.com/fa-rrel/CVE-2024-4358\n\nTelerik Report Server deserialization and authentication bypass exploit chain for CVE-2024-4358/CVE-2024-1800\n#github #exploit", "creation_timestamp": "2024-08-24T21:08:25.000000Z"}, {"uuid": "334e2889-757c-47dd-a8b4-f490c217abb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "seen", "source": "https://t.me/arpsyndicate/4292", "content": "#ExploitObserverAlert\n\nCVE-2024-1800\n\nDESCRIPTION: Exploit Observer has 3 entries in 1 file formats related to CVE-2024-1800. In Progress\u00ae Telerik\u00ae Report Server versions prior to 2024 Q1 (10.0.24.130), a remote code execution attack is possible through an insecure deserialization vulnerability.\n\nFIRST-EPSS: 0.000430000", "creation_timestamp": "2024-03-21T23:00:21.000000Z"}, {"uuid": "ed5a0666-dbc1-4f0e-8d54-8dd54a5af6eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "seen", "source": "https://t.me/lostsec/565", "content": "Latest Telerik Report Server deserialization and authentication bypass CVE-2024-4358/CVE-2024-1800\npoc comming soon..", "creation_timestamp": "2024-06-04T09:30:41.000000Z"}, {"uuid": "193df283-c994-430e-9278-8289a16936bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "published-proof-of-concept", "source": "https://t.me/CyberDilara/168", "content": "Tools - Hackers Factory\n\nThis tool extracts and displays data from the Recall feature in Windows 11, providing an easy way to access information about your PC's activity snapshots. \n\nhttps://github.com/xaitax/TotalRecall\n\nAn Event Tracing for Windows (ETW) tool that allows you to enumerate Manifest & MOF providers, as well as collect events from desired providers.\n\nhttps://github.com/jsecurity101/ETWInspector\n\nSearch and browse documents and data; find the people and companies you look for. \n\nhttps://github.com/alephdata/aleph\n\nDDoS -Web Scanning -Phone Hunter -CCTV Hunter -Deface -Mass Deface -Deface Maker -Bypass Maker -Auto Bypasser -Database Dump -Dorking -Admin Finder -Wifi Jammer -Executor -Simple Dirber -Trojan Maker -Mass Dork -Doxing / Osint \n\nhttps://github.com/MrSanZz/pandora\n\nSploitScan is a sophisticated cybersecurity utility designed to provide detailed information on vulnerabilities and associated exploits. \n\nhttps://github.com/xaitax/SploitScan\n\nProgress Telerik Report Server pre-authenticated RCE chain (CVE-2024-4358/CVE-2024-1800) \n\nhttps://github.com/sinsinology/CVE-2024-4358\n\nCVE-2024-24919 [Check Point Security Gateway Information Disclosure] \n\nhttps://github.com/ifconfig-me/CVE-2024-24919-Bulk-Scanner\n\nNew release of OneDriveExplorer. Mainly fixes for null value errors\n\nhttps://github.com/Beercow/OneDriveExplorer/releases/tag/v2024.05.17\n\nDLLirant is a tool to automatize the DLL Hijacking researches on a specified binary. \n\nhttps://github.com/redteamsocietegenerale/DLLirant\n\nAD Miner is an Active Directory audit tool that leverages cypher queries to crunch data from the #Bloodhound graph database to uncover security weaknesses \n\nhttps://github.com/Mazars-Tech/AD_Miner\n\n#HackersFactory", "creation_timestamp": "2024-06-17T14:10:12.000000Z"}, {"uuid": "b2d637ea-b641-4eed-b211-5fe9cfacf48d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "published-proof-of-concept", "source": "Telegram/91xq2yljWL5RObjqxZC8vMfawdPdbgsAg0W8g4_pLrCnJck", "content": "", "creation_timestamp": "2024-08-22T10:54:43.000000Z"}, {"uuid": "45fcb7a0-e805-472b-873a-a9f016f6a386", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/7918", "content": "Tools - Hackers Factory\n\nThis tool extracts and displays data from the Recall feature in Windows 11, providing an easy way to access information about your PC's activity snapshots. \n\nhttps://github.com/xaitax/TotalRecall\n\nAn Event Tracing for Windows (ETW) tool that allows you to enumerate Manifest & MOF providers, as well as collect events from desired providers.\n\nhttps://github.com/jsecurity101/ETWInspector\n\nSearch and browse documents and data; find the people and companies you look for. \n\nhttps://github.com/alephdata/aleph\n\nDDoS -Web Scanning -Phone Hunter -CCTV Hunter -Deface -Mass Deface -Deface Maker -Bypass Maker -Auto Bypasser -Database Dump -Dorking -Admin Finder -Wifi Jammer -Executor -Simple Dirber -Trojan Maker -Mass Dork -Doxing / Osint \n\nhttps://github.com/MrSanZz/pandora\n\nSploitScan is a sophisticated cybersecurity utility designed to provide detailed information on vulnerabilities and associated exploits. \n\nhttps://github.com/xaitax/SploitScan\n\nProgress Telerik Report Server pre-authenticated RCE chain (CVE-2024-4358/CVE-2024-1800) \n\nhttps://github.com/sinsinology/CVE-2024-4358\n\nCVE-2024-24919 [Check Point Security Gateway Information Disclosure] \n\nhttps://github.com/ifconfig-me/CVE-2024-24919-Bulk-Scanner\n\nNew release of OneDriveExplorer. Mainly fixes for null value errors\n\nhttps://github.com/Beercow/OneDriveExplorer/releases/tag/v2024.05.17\n\nDLLirant is a tool to automatize the DLL Hijacking researches on a specified binary. \n\nhttps://github.com/redteamsocietegenerale/DLLirant\n\nAD Miner is an Active Directory audit tool that leverages cypher queries to crunch data from the #Bloodhound graph database to uncover security weaknesses \n\nhttps://github.com/Mazars-Tech/AD_Miner\n\n#HackersFactory", "creation_timestamp": "2024-06-07T16:48:50.000000Z"}, {"uuid": "8beaa858-a015-42cd-b907-9940c33dc206", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "published-proof-of-concept", "source": "https://t.me/GhostsForum/21882", "content": "Tools - Hackers Factory\n\nThis tool extracts and displays data from the Recall feature in Windows 11, providing an easy way to access information about your PC's activity snapshots. \n\nhttps://github.com/xaitax/TotalRecall\n\nAn Event Tracing for Windows (ETW) tool that allows you to enumerate Manifest & MOF providers, as well as collect events from desired providers.\n\nhttps://github.com/jsecurity101/ETWInspector\n\nSearch and browse documents and data; find the people and companies you look for. \n\nhttps://github.com/alephdata/aleph\n\nDDoS -Web Scanning -Phone Hunter -CCTV Hunter -Deface -Mass Deface -Deface Maker -Bypass Maker -Auto Bypasser -Database Dump -Dorking -Admin Finder -Wifi Jammer -Executor -Simple Dirber -Trojan Maker -Mass Dork -Doxing / Osint \n\nhttps://github.com/MrSanZz/pandora\n\nSploitScan is a sophisticated cybersecurity utility designed to provide detailed information on vulnerabilities and associated exploits. \n\nhttps://github.com/xaitax/SploitScan\n\nProgress Telerik Report Server pre-authenticated RCE chain (CVE-2024-4358/CVE-2024-1800) \n\nhttps://github.com/sinsinology/CVE-2024-4358\n\nCVE-2024-24919 [Check Point Security Gateway Information Disclosure] \n\nhttps://github.com/ifconfig-me/CVE-2024-24919-Bulk-Scanner\n\nNew release of OneDriveExplorer. Mainly fixes for null value errors\n\nhttps://github.com/Beercow/OneDriveExplorer/releases/tag/v2024.05.17\n\nDLLirant is a tool to automatize the DLL Hijacking researches on a specified binary. \n\nhttps://github.com/redteamsocietegenerale/DLLirant\n\nAD Miner is an Active Directory audit tool that leverages cypher queries to crunch data from the #Bloodhound graph database to uncover security weaknesses \n\nhttps://github.com/Mazars-Tech/AD_Miner\n\n#HackersFactory", "creation_timestamp": "2024-06-07T11:02:07.000000Z"}, {"uuid": "55fd6963-2839-4f76-8da0-6c02126548e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/3273", "content": "Tools - Hackers Factory\n\nThis tool extracts and displays data from the Recall feature in Windows 11, providing an easy way to access information about your PC's activity snapshots. \n\nhttps://github.com/xaitax/TotalRecall\n\nAn Event Tracing for Windows (ETW) tool that allows you to enumerate Manifest & MOF providers, as well as collect events from desired providers.\n\nhttps://github.com/jsecurity101/ETWInspector\n\nSearch and browse documents and data; find the people and companies you look for. \n\nhttps://github.com/alephdata/aleph\n\nDDoS -Web Scanning -Phone Hunter -CCTV Hunter -Deface -Mass Deface -Deface Maker -Bypass Maker -Auto Bypasser -Database Dump -Dorking -Admin Finder -Wifi Jammer -Executor -Simple Dirber -Trojan Maker -Mass Dork -Doxing / Osint \n\nhttps://github.com/MrSanZz/pandora\n\nSploitScan is a sophisticated cybersecurity utility designed to provide detailed information on vulnerabilities and associated exploits. \n\nhttps://github.com/xaitax/SploitScan\n\nProgress Telerik Report Server pre-authenticated RCE chain (CVE-2024-4358/CVE-2024-1800) \n\nhttps://github.com/sinsinology/CVE-2024-4358\n\nCVE-2024-24919 [Check Point Security Gateway Information Disclosure] \n\nhttps://github.com/ifconfig-me/CVE-2024-24919-Bulk-Scanner\n\nNew release of OneDriveExplorer. Mainly fixes for null value errors\n\nhttps://github.com/Beercow/OneDriveExplorer/releases/tag/v2024.05.17\n\nDLLirant is a tool to automatize the DLL Hijacking researches on a specified binary. \n\nhttps://github.com/redteamsocietegenerale/DLLirant\n\nAD Miner is an Active Directory audit tool that leverages cypher queries to crunch data from the #Bloodhound graph database to uncover security weaknesses \n\nhttps://github.com/Mazars-Tech/AD_Miner\n\n#HackersFactory", "creation_timestamp": "2024-06-11T23:15:39.000000Z"}, {"uuid": "625a0024-0800-4bfb-a448-84495feae1e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "published-proof-of-concept", "source": "Telegram/lwiSO2a1dXoKgSo9TkQpWLtHcypZICpjDgayuGKJRW8bAME", "content": "", "creation_timestamp": "2024-07-10T04:56:04.000000Z"}, {"uuid": "4eca164c-4e5c-4e3a-a642-d7e235960292", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/6699", "content": "Tools - Hackers Factory\n\nThis tool extracts and displays data from the Recall feature in Windows 11, providing an easy way to access information about your PC's activity snapshots. \n\nhttps://github.com/xaitax/TotalRecall\n\nAn Event Tracing for Windows (ETW) tool that allows you to enumerate Manifest & MOF providers, as well as collect events from desired providers.\n\nhttps://github.com/jsecurity101/ETWInspector\n\nSearch and browse documents and data; find the people and companies you look for. \n\nhttps://github.com/alephdata/aleph\n\nDDoS -Web Scanning -Phone Hunter -CCTV Hunter -Deface -Mass Deface -Deface Maker -Bypass Maker -Auto Bypasser -Database Dump -Dorking -Admin Finder -Wifi Jammer -Executor -Simple Dirber -Trojan Maker -Mass Dork -Doxing / Osint \n\nhttps://github.com/MrSanZz/pandora\n\nSploitScan is a sophisticated cybersecurity utility designed to provide detailed information on vulnerabilities and associated exploits. \n\nhttps://github.com/xaitax/SploitScan\n\nProgress Telerik Report Server pre-authenticated RCE chain (CVE-2024-4358/CVE-2024-1800) \n\nhttps://github.com/sinsinology/CVE-2024-4358\n\nCVE-2024-24919 [Check Point Security Gateway Information Disclosure] \n\nhttps://github.com/ifconfig-me/CVE-2024-24919-Bulk-Scanner\n\nNew release of OneDriveExplorer. Mainly fixes for null value errors\n\nhttps://github.com/Beercow/OneDriveExplorer/releases/tag/v2024.05.17\n\nDLLirant is a tool to automatize the DLL Hijacking researches on a specified binary. \n\nhttps://github.com/redteamsocietegenerale/DLLirant\n\nAD Miner is an Active Directory audit tool that leverages cypher queries to crunch data from the #Bloodhound graph database to uncover security weaknesses \n\nhttps://github.com/Mazars-Tech/AD_Miner\n\n#HackersFactory", "creation_timestamp": "2024-06-07T16:48:50.000000Z"}, {"uuid": "62459e41-fed2-4b55-8127-fc142d29d373", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "seen", "source": "https://t.me/true_secator/6026", "content": "Progress Software \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0440\u043e\u0447\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Telerik Report Server, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\nTelerik Report Server \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0435 \u043e\u0442\u0447\u0435\u0442\u043e\u0432 \u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b, \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u0434\u043b\u044f \u0438\u0445 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f, \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f, \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u043c\u0438 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0432\u0441\u0435\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c,\u00a0\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u043a\u0430\u043a\u00a0CVE-2024-6327 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043d\u0430 \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Report Server 2024 Q2 (10.1.24.514) \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435 \u0438 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438\u00a02024 Q2 (10.1.24.709), \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 - \u044d\u0442\u043e \u0435\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.\n\nProgress \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439 \u0434\u043b\u044f \u0442\u0435\u0445, \u043a\u0442\u043e \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438.\n\n\u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f Report Server Application Pool \u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f\u043c\u0438, \u043b\u0438\u0431\u043e \u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u044c \u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u043e\u043c\u0443 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u0443.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e Progress \u043f\u043e\u043a\u0430 \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2024-6327, \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Telerik \u0443\u0436\u0435 \u043d\u0435 \u0440\u0430\u0437 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u043b\u0438\u0441\u044c \u0430\u0442\u0430\u043a\u0430\u043c.\n\n\u041a\u0440\u0430\u0439\u043d\u0438\u0439 \u043d\u0435\u0443\u0434\u0430\u0447\u043d\u044b\u0439 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442 \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u0435\u043b \u0432 2022 \u0433\u043e\u0434\u0443, \u043a\u043e\u0433\u0434\u0430 \u0431\u044b\u043b \u0432\u0437\u043b\u043e\u043c\u0430\u043d \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440 Microsoft Internet Information Services (IIS) \u0444\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u0430 \u0421\u0428\u0410\u00a0\u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 Progress Telerik CVE-2019-18935.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0441\u043e\u0432\u0441\u0435\u043c \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0442\u0430\u043a\u0436\u0435  \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u0438 \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0438 PoC \u0434\u043b\u044f RCE \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 Telerik Report \u043f\u0443\u0442\u0435\u043c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (CVE-2024-4358) \u0438 RCE \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (CVE-2024-1800).", "creation_timestamp": "2024-07-26T16:32:28.000000Z"}, {"uuid": "91baaf65-6550-4c4a-81e6-f337a369a19c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/2707", "content": "https://summoning.team/blog/progress-report-server-rce-cve-2024-4358-cve-2024-1800/\n\nMolding Lies Into Reality || Exploiting CVE-2024-4358\n#\u5206\u6790  #poc", "creation_timestamp": "2024-06-24T15:18:09.000000Z"}, {"uuid": "7e26cd67-26e2-44e0-b118-a27d3a137960", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/3056", "content": "https://github.com/fa-rrel/CVE-2024-4358\n\nTelerik Report Server deserialization and authentication bypass exploit chain for CVE-2024-4358/CVE-2024-1800\n#github #exploit", "creation_timestamp": "2024-08-24T16:27:52.000000Z"}, {"uuid": "4826a4c6-a7ad-4f75-863a-6cedd7ce3f9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "published-proof-of-concept", "source": "https://t.me/club31337/2138", "content": "https://www.tenable.com/blog/cve-2024-4358-cve-2024-1800-exploit-code-available-for-critical-exploit-chain\n\n\u269c\ufe0f @club1337", "creation_timestamp": "2024-11-11T02:28:51.000000Z"}, {"uuid": "c452e68d-2bd8-412d-bd57-ec6d07429a67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/10625", "content": "#exploit\n1. Exploring the Unknown: Beneath the Surface of Unpatched WordPress SSRF\nhttps://patchstack.com/articles/exploring-the-unpatched-wordpress-ssrf\n\n2. CVE-2024-4358/CVE-2024-1800:\nTelerik Report Server deserialization/authentication bypass exploit chain\nhttps://github.com/sinsinology/CVE-2024-4358\n\n3. CVE-2023-20938:\nAttacking Android Binder\nhttps://androidoffsec.withgoogle.com/posts/attacking-android-binder-analysis-and-exploitation-of-cve-2023-20938", "creation_timestamp": "2024-06-04T18:48:59.000000Z"}, {"uuid": "a3265523-c93f-4b70-afc2-cc4ba1ad22dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "seen", "source": "https://t.me/ZerodayAlert/244", "content": "\u041e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 Telerik Report Server: \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b RCE\n\n\ud83e\udded \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u044e\u0449\u0438\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 (RCE) \u0432 Telerik Report Server. \u0420\u0435\u0448\u0435\u043d\u0438\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c\u0438 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f, \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043e\u0442\u0447\u0435\u0442\u043e\u0432.\n\n\ud83d\udd11 \u041e\u0434\u043d\u0430 \u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (CVE-2024-4358) \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 9.8 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445. \u0412\u0442\u043e\u0440\u0430\u044f (CVE-2024-1800) \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 8.8 \u0434\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\ud83d\udcbb \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0421\u0438\u043d\u0430 \u0425\u0435\u0439\u0440\u0445\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043e\u0431\u0435\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u0441\u043b\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u043f\u0430\u0442\u0447\u0435\u0439 \u0432\u0435\u043d\u0434\u043e\u0440\u043e\u043c. \u041e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0441\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 10.1.24.514 \u0438\u043b\u0438 \u0432\u044b\u0448\u0435.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 #\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #RCE\n\n@ZerodayAlert", "creation_timestamp": "2026-07-06T11:00:06.199535Z"}, {"uuid": "7daf86cf-7083-468d-9b5b-9ba32acf095f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "seen", "source": "https://t.me/ZerodayAlert/244", "content": "\u041e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 Telerik Report Server: \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b RCE\n\n\ud83e\udded \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u044e\u0449\u0438\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 (RCE) \u0432 Telerik Report Server. \u0420\u0435\u0448\u0435\u043d\u0438\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c\u0438 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f, \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043e\u0442\u0447\u0435\u0442\u043e\u0432.\n\n\ud83d\udd11 \u041e\u0434\u043d\u0430 \u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (CVE-2024-4358) \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 9.8 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445. \u0412\u0442\u043e\u0440\u0430\u044f (CVE-2024-1800) \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 8.8 \u0434\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\ud83d\udcbb \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0421\u0438\u043d\u0430 \u0425\u0435\u0439\u0440\u0445\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043e\u0431\u0435\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u0441\u043b\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u043f\u0430\u0442\u0447\u0435\u0439 \u0432\u0435\u043d\u0434\u043e\u0440\u043e\u043c. \u041e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0441\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 10.1.24.514 \u0438\u043b\u0438 \u0432\u044b\u0448\u0435.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 #\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #RCE\n\n@ZerodayAlert", "creation_timestamp": "2026-07-07T00:00:11.444977Z"}, {"uuid": "06bda83e-33f3-4957-8988-c3b7f74c1ca1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "seen", "source": "https://t.me/brutsecurity/467", "content": "\ud83d\udea8Progress Telerik Report Server pre-authenticated RCE chain (CVE-2024-4358/CVE-2024-1800)\ud83d\udea8\n \n\ud83d\udce2PoC: https://github.com/sinsinology/CVE-2024-4358 \n \n\u26a0Detailed Analysis from @SinSinology https://summoning.team/blog/progress-report-server-rce-cve-2024-4358-cve-2024-1800/ \n \n\ud83d\udc49Dorks: \n\ud83d\udd38Hunter: /product.name=\"Telerik report server\" \n\ud83d\udd38FOFA: app=\"Telerik-Report-Server\" \n\ud83d\udd38SHODAN: http.title:\"Telerik report server\"", "creation_timestamp": "2026-07-09T03:00:13.813113Z"}, {"uuid": "f3377694-f427-4376-ab03-7b66b38ca467", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "seen", "source": "https://t.me/brutsecurity/467", "content": "\ud83d\udea8Progress Telerik Report Server pre-authenticated RCE chain (CVE-2024-4358/CVE-2024-1800)\ud83d\udea8\n \n\ud83d\udce2PoC: https://github.com/sinsinology/CVE-2024-4358 \n \n\u26a0Detailed Analysis from @SinSinology https://summoning.team/blog/progress-report-server-rce-cve-2024-4358-cve-2024-1800/ \n \n\ud83d\udc49Dorks: \n\ud83d\udd38Hunter: /product.name=\"Telerik report server\" \n\ud83d\udd38FOFA: app=\"Telerik-Report-Server\" \n\ud83d\udd38SHODAN: http.title:\"Telerik report server\"", "creation_timestamp": "2026-07-10T00:00:37.668094Z"}, {"uuid": "8160f668-70b6-44be-86dc-9e23e4129f2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/467", "content": "\ud83d\udea8Progress Telerik Report Server pre-authenticated RCE chain (CVE-2024-4358/CVE-2024-1800)\ud83d\udea8\n \n\ud83d\udce2PoC: https://github.com/sinsinology/CVE-2024-4358 \n \n\u26a0Detailed Analysis from @SinSinology https://summoning.team/blog/progress-report-server-rce-cve-2024-4358-cve-2024-1800/ \n \n\ud83d\udc49Dorks: \n\ud83d\udd38Hunter: /product.name=\"Telerik report server\" \n\ud83d\udd38FOFA: app=\"Telerik-Report-Server\" \n\ud83d\udd38SHODAN: http.title:\"Telerik report server\"", "creation_timestamp": "2026-07-11T18:00:04.119226Z"}, {"uuid": "7d642c0e-8db7-40e4-88eb-c86c6bd823c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/467", "content": "\ud83d\udea8Progress Telerik Report Server pre-authenticated RCE chain (CVE-2024-4358/CVE-2024-1800)\ud83d\udea8\n \n\ud83d\udce2PoC: https://github.com/sinsinology/CVE-2024-4358 \n \n\u26a0Detailed Analysis from @SinSinology https://summoning.team/blog/progress-report-server-rce-cve-2024-4358-cve-2024-1800/ \n \n\ud83d\udc49Dorks: \n\ud83d\udd38Hunter: /product.name=\"Telerik report server\" \n\ud83d\udd38FOFA: app=\"Telerik-Report-Server\" \n\ud83d\udd38SHODAN: http.title:\"Telerik report server\"", "creation_timestamp": "2026-07-12T00:00:41.202531Z"}, {"uuid": "43bb4eee-e404-4992-9bf8-668b48c43c69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "published-proof-of-concept", "source": "https://t.me/ZerodayAlert/244", "content": "\u041e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 Telerik Report Server: \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b RCE\n\n\ud83e\udded \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u044e\u0449\u0438\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 (RCE) \u0432 Telerik Report Server. \u0420\u0435\u0448\u0435\u043d\u0438\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c\u0438 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f, \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043e\u0442\u0447\u0435\u0442\u043e\u0432.\n\n\ud83d\udd11 \u041e\u0434\u043d\u0430 \u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (CVE-2024-4358) \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 9.8 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445. \u0412\u0442\u043e\u0440\u0430\u044f (CVE-2024-1800) \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 8.8 \u0434\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\ud83d\udcbb \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0421\u0438\u043d\u0430 \u0425\u0435\u0439\u0440\u0445\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043e\u0431\u0435\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u0441\u043b\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u043f\u0430\u0442\u0447\u0435\u0439 \u0432\u0435\u043d\u0434\u043e\u0440\u043e\u043c. \u041e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0441\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 10.1.24.514 \u0438\u043b\u0438 \u0432\u044b\u0448\u0435.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 #\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #RCE\n\n@ZerodayAlert", "creation_timestamp": "2026-07-11T23:00:04.568770Z"}, {"uuid": "a1e7715f-479f-4bc6-aeb9-30bbc80043b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "published-proof-of-concept", "source": "https://t.me/ZerodayAlert/244", "content": "\u041e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 Telerik Report Server: \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b RCE\n\n\ud83e\udded \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u044e\u0449\u0438\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 (RCE) \u0432 Telerik Report Server. \u0420\u0435\u0448\u0435\u043d\u0438\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c\u0438 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f, \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043e\u0442\u0447\u0435\u0442\u043e\u0432.\n\n\ud83d\udd11 \u041e\u0434\u043d\u0430 \u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (CVE-2024-4358) \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 9.8 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445. \u0412\u0442\u043e\u0440\u0430\u044f (CVE-2024-1800) \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 8.8 \u0434\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\ud83d\udcbb \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0421\u0438\u043d\u0430 \u0425\u0435\u0439\u0440\u0445\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043e\u0431\u0435\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u0441\u043b\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u043f\u0430\u0442\u0447\u0435\u0439 \u0432\u0435\u043d\u0434\u043e\u0440\u043e\u043c. \u041e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0441\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 10.1.24.514 \u0438\u043b\u0438 \u0432\u044b\u0448\u0435.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 #\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #RCE\n\n@ZerodayAlert", "creation_timestamp": "2026-07-12T00:00:19.092249Z"}, {"uuid": "8646d142-e26e-4fae-82ef-3d3dce4ac350", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1800", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/telerik_report_server_deserialization.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"SinSinology\", \"Soroush Dalili\", \"Unknown\", \"Spencer McIntyre\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module chains an authentication bypass vulnerability (CVE-2024-4358) with a deserialization vulnerability\\n          (CVE-2024-1800) to obtain remote code execution against Telerik Report Server version 10.0.24.130 and prior.\\n          The authentication bypass flaw allows an unauthenticated user to create a new user with administrative privileges.\\n          The USERNAME datastore option can be used to authenticate with an existing account to prevent the creation of a\\n          new one. The deserialization flaw works by uploading a specially crafted report that when loaded will execute an\\n          OS command as NT AUTHORITY\\\\SYSTEM. The module will automatically delete the created report but not the account\\n          because users are unable to delete themselves.\", \"disclosure_date\": \"2024-06-04\", \"fullname\": \"exploit/windows/http/telerik_report_server_deserialization\", \"is_install_path\": true, \"mod_time\": \"2026-06-03 06:46:27 +0000\", \"name\": \"Telerik Report Server Auth Bypass and Deserialization RCE\", \"needs_cleanup\": null, \"notes\": {\"RelatedModules\": [\"auxiliary/scanner/http/telerik_report_server_auth_bypass\"], \"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/windows/http/telerik_report_server_deserialization.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"windows/http/telerik_report_server_deserialization\", \"references\": [\"CVE-2024-1800\", \"CVE-2024-4358\", \"EDB-52103\", \"URL-https://summoning.team/blog/progress-report-server-rce-cve-2024-4358-cve-2024-1800/\"], \"rport\": 83, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:01.022877Z"}]}