{"vulnerability": "cve-2024-3705", "sightings": [{"uuid": "8d7b9681-a68f-4470-9331-f801b5acef70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-37054", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lx6f2nvko52b", "content": "", "creation_timestamp": "2025-08-24T21:02:22.756602Z"}, {"uuid": "55a52cd9-b833-4fd1-b349-4e374dffccd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-37051", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7606", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-37051 poc and exploit\nURL\uff1ahttps://github.com/LeadroyaL/CVE-2024-37051-EXP\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-06-11T16:07:22.000000Z"}, {"uuid": "62a04633-40dd-4dbc-8586-32706267edb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-37051", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7639", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aUsers of JetBrains IDEs at risk of GitHub access token compromise (CVE-2024-37051)\nURL\uff1ahttps://github.com/mrblackstar26/CVE-2024-37051\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-06-13T09:24:16.000000Z"}, {"uuid": "eae9429e-5667-472d-bfa8-280e88282890", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-37054", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/48661", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aThis repository contains a Proof of Concept (PoC) for CVE-2024-37054, a critical deserialization vulnerability in MLflow that allows for Remote Code Execution (RCE).\nURL\uff1ahttps://github.com/NiteeshPujari/CVE-2024-37054-MLflow-RCE\n\n\u6807\u7b7e\uff1a#RCE", "creation_timestamp": "2025-08-22T12:58:56.000000Z"}, {"uuid": "f0131b18-7c6a-4e85-a795-09ce45cf941d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-37054", "type": "published-proof-of-concept", "source": "Telegram/DOBfrk2dyhFzkyen0Qpzsdfs3pgTsKY3tpML2V_jo-xel9A", "content": "", "creation_timestamp": "2025-08-22T21:00:04.000000Z"}, {"uuid": "6a009abd-b10a-4dde-bb70-c1f2be3d8960", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-37051", "type": "published-proof-of-concept", "source": "Telegram/4lKfVaZrZBUPAqaN-KfS0gYl2mUTAlRYJCjMWEYsRx5tjg", "content": "", "creation_timestamp": "2024-06-24T16:32:09.000000Z"}, {"uuid": "b831f92c-e582-4b4b-9445-5902e55f3594", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-37051", "type": "published-proof-of-concept", "source": "https://t.me/BlackHat0Hackers/88", "content": "https://github.com/LeadroyaL/CVE-2024-37051-EXP", "creation_timestamp": "2024-06-15T11:02:04.000000Z"}, {"uuid": "f1d5b74d-bbca-4631-9ea4-7a34a1e8461e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-37051", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/2519", "content": "\u200aCVE-2024-37051: Critical JetBrains Flaw Exposes GitHub Tokens in IntelliJ IDEs, PoC Published\n\nhttps://securityonline.info/cve-2024-37051-exploit-poc-jetbrains-github-tokens/", "creation_timestamp": "2024-06-14T18:42:14.000000Z"}, {"uuid": "b11a86c5-0d14-4802-915e-c2eae74d6305", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-37058", "type": "seen", "source": "Telegram/xbCe-j-X2zsRgU85jcbXJF0sthZfZww2jAH9buQqxvPiko1E", "content": "", "creation_timestamp": "2025-02-06T02:39:17.000000Z"}, {"uuid": "f37aa980-cd2b-43dd-a31d-34f8bdf51930", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-37056", "type": "seen", "source": "Telegram/GUBRSLALG_7pp9aFIcqtnw-oyTlJeDGIM4pYyRgktzZqTfT9", "content": "", "creation_timestamp": "2025-02-06T02:39:17.000000Z"}, {"uuid": "eace5d37-96ca-4bee-b636-909d48e990af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-37057", "type": "seen", "source": "Telegram/HrC3npwt5k0zfat3F27PktjOIkhVVBM6cqOrz4MQYDbx7p9D", "content": "", "creation_timestamp": "2025-02-06T02:39:17.000000Z"}, {"uuid": "4cc9c675-e584-43a7-bfa9-77d478ee3769", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-37054", "type": "seen", "source": "Telegram/GBbuuXlcv1JSLV91LXeNb7plkxq98dIUDeUDuVqk1SCmTlr-", "content": "", "creation_timestamp": "2025-02-06T02:39:17.000000Z"}, {"uuid": "e34dafc9-e66a-4b64-978c-ab005165211a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-37051", "type": "seen", "source": "https://t.me/MrVGunz/1182", "content": "\ud83d\udcf0 \u0647\u0634\u062f\u0627\u0631 JetBrains \u062f\u0631 \u0645\u0648\u0631\u062f \u0628\u0627\u06af IntelliJ IDE \u0628\u0631\u0627\u06cc \u0627\u0641\u0634\u0627\u06cc \u062a\u0648\u06a9\u0646\u200c\u0647\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc GitHub\n\n\ud83d\udcac \u0634\u0631\u06a9\u062a JetBrains \u0628\u0647 \u0645\u0634\u062a\u0631\u06cc\u0627\u0646 \u0647\u0634\u062f\u0627\u0631 \u062f\u0627\u062f\u0647 \u06a9\u0647 \u0628\u0631\u0646\u0627\u0645\u0647 IntelliJ \u062e\u0648\u062f \u0631\u0627 \u0633\u0631\u06cc\u0639\u0627 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u0646\u062f. \u0627\u06cc\u0646 \u0628\u0627\u06af \u06a9\u0647 \u0628\u0647\u200c\u0639\u0646\u0648\u0627\u0646 CVE-2024-37051 \u0634\u0646\u0627\u062e\u062a\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f\u060c \u062a\u0648\u06a9\u0646\u200c\u0647\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc GitHub \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0631\u0627 \u062f\u0631 \u0645\u0639\u0631\u0636 \u0646\u0645\u0627\u06cc\u0634 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u062f\u0647\u062f \u0648 \u0628\u0631 IDE\u200c\u0647\u0627\u06cc \u0645\u0628\u062a\u0646\u06cc \u0628\u0631 IntelliJ \u0627\u0632 \u0646\u0633\u062e\u0647 \u06f2\u06f0\u06f2\u06f3\u066b\u06f1 \u0628\u0647 \u0628\u0639\u062f \u062a\u0623\u062b\u06cc\u0631 \u0645\u06cc\u200c\u06af\u0630\u0627\u0631\u062f. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0632\u0645\u0627\u0646\u06cc \u0641\u0639\u0627\u0644 \u0645\u06cc\u200c\u0634\u0648\u062f \u06a9\u0647 \u0627\u0641\u0632\u0648\u0646\u0647 JetBrains GitHub \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0634\u0648\u062f. JetBrains \u062f\u0631 \u06f2\u06f9 \u0645\u0647 \u06f2\u06f0\u06f2\u06f4 \u0627\u0632 \u0627\u06cc\u0646 \u0646\u0642\u0635 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0645\u0637\u0644\u0639 \u0634\u062f.\n\n\ud83d\udd17 \u0645\u0634\u0627\u0647\u062f\u0647 \u0627\u062f\u0627\u0645\u0647 \u062e\u0628\u0631\n\n\n\ud83d\udcf0 JetBrains Warning Regarding IntelliJ IDE Bug Exposing GitHub Access Tokens\n\n\ud83d\udcac JetBrains has issued a warning to its customers to promptly update their IntelliJ IDE software. This bug, identified as CVE-2024-37051, exposes GitHub access tokens of users and affects IntelliJ-based IDEs from version 2023.1 onwards. The vulnerability becomes active when the JetBrains GitHub plugin is utilized. JetBrains became aware of this security flaw on May 29, 2024.\n\n\ud83d\udd17 Read more", "creation_timestamp": "2024-06-18T17:12:19.000000Z"}, {"uuid": "9f89cef4-844f-4042-b7ff-7f36d5eb48fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-37051", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/2706", "content": "https://github.com/LeadroyaL/CVE-2024-37051-EXP\n\nCVE-2024-37051 poc and exploit\n#github  #exploit", "creation_timestamp": "2024-06-24T15:14:54.000000Z"}, {"uuid": "a18a69b2-79fa-4465-8048-bcc1b75d3584", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-37051", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/10736", "content": "#exploit\n1. CVE-2024-37051:\nIDE JetBrains Insufficiently Protected Credentials\nhttps://github.com/LeadroyaL/CVE-2024-37051-EXP\n\n2. CVE-2024-37032:\nOllama AI - RCE\nhttps://www.wiz.io/blog/probllama-ollama-vulnerability-cve-2024-37032\n\n3. CVE-2024-27815:\nBuffer Overflow in the XNU Kernel\nhttps://jprx.io/cve-2024-27815\n]-> https://github.com/jprx/CVE-2024-27815", "creation_timestamp": "2024-06-25T12:43:29.000000Z"}, {"uuid": "435f4557-6ac4-4ec3-9039-b37f577a9537", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-37051", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/3355", "content": "#exploit\n1. CVE-2024-37051:\nIDE JetBrains Insufficiently Protected Credentials\nhttps://github.com/LeadroyaL/CVE-2024-37051-EXP\n\n2. CVE-2024-37032:\nOllama AI - RCE\nhttps://www.wiz.io/blog/probllama-ollama-vulnerability-cve-2024-37032\n\n3. CVE-2024-27815:\nBuffer Overflow in the XNU Kernel\nhttps://jprx.io/cve-2024-27815\n]-> https://github.com/jprx/CVE-2024-27815", "creation_timestamp": "2024-08-16T11:16:21.000000Z"}, {"uuid": "79c4f43a-8d01-4d12-a182-be7a6225c2c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-37054", "type": "seen", "source": "https://t.me/GithubRedTeam/85096", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #Remote Code Execution\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2024-37054\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a vanhari\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-20 21:01:25\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\na proof-of-concept for MLflow RCE (remote code execution)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-20T21:05:32.000000Z"}, {"uuid": "2200e1d8-1e37-4977-9f38-7c03ae77a1f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-37054", "type": "published-proof-of-concept", "source": "Telegram/eEkK6PVbdDfglsyujSuxBWIZjJpDuh84Njq8yhH-Zu1Cfr8", "content": "", "creation_timestamp": "2026-05-18T03:00:06.000000Z"}, {"uuid": "ce27876c-965f-4aeb-89ea-76a5962cb2cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-37054", "type": "published-proof-of-concept", "source": "Telegram/xh4XcnfPk8jKp2qpT8jzWwwvaCwZdGZH1ZOpAikcTE7X2rw", "content": "", "creation_timestamp": "2026-05-20T03:00:06.000000Z"}, {"uuid": "ff462310-85fd-4939-ac9e-762d3199ed15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-37054", "type": "published-proof-of-concept", "source": "Telegram/Ut-FjakO3aXzYeDJVS314i2vHRpchsUAjvXH-nUbNwT5URU", "content": "", "creation_timestamp": "2026-05-20T21:00:04.000000Z"}]}