{"vulnerability": "cve-2024-3705", "sightings": [{"uuid": "8d7b9681-a68f-4470-9331-f801b5acef70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-37054", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lx6f2nvko52b", "content": "", "creation_timestamp": "2025-08-24T21:02:22.756602Z"}, {"uuid": "55a52cd9-b833-4fd1-b349-4e374dffccd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-37051", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7606", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-37051 poc and exploit\nURL\uff1ahttps://github.com/LeadroyaL/CVE-2024-37051-EXP\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-06-11T16:07:22.000000Z"}, {"uuid": "62a04633-40dd-4dbc-8586-32706267edb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-37051", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7639", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aUsers of JetBrains IDEs at risk of GitHub access token compromise (CVE-2024-37051)\nURL\uff1ahttps://github.com/mrblackstar26/CVE-2024-37051\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-06-13T09:24:16.000000Z"}, {"uuid": "eae9429e-5667-472d-bfa8-280e88282890", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-37054", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/48661", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aThis repository contains a Proof of Concept (PoC) for CVE-2024-37054, a critical deserialization vulnerability in MLflow that allows for Remote Code Execution (RCE).\nURL\uff1ahttps://github.com/NiteeshPujari/CVE-2024-37054-MLflow-RCE\n\n\u6807\u7b7e\uff1a#RCE", "creation_timestamp": "2025-08-22T12:58:56.000000Z"}, {"uuid": "f0131b18-7c6a-4e85-a795-09ce45cf941d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-37054", "type": "published-proof-of-concept", "source": "Telegram/DOBfrk2dyhFzkyen0Qpzsdfs3pgTsKY3tpML2V_jo-xel9A", "content": "", "creation_timestamp": "2025-08-22T21:00:04.000000Z"}, {"uuid": "6a009abd-b10a-4dde-bb70-c1f2be3d8960", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-37051", "type": "published-proof-of-concept", "source": "Telegram/4lKfVaZrZBUPAqaN-KfS0gYl2mUTAlRYJCjMWEYsRx5tjg", "content": "", "creation_timestamp": "2024-06-24T16:32:09.000000Z"}, {"uuid": "b831f92c-e582-4b4b-9445-5902e55f3594", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-37051", "type": "published-proof-of-concept", "source": "https://t.me/BlackHat0Hackers/88", "content": "https://github.com/LeadroyaL/CVE-2024-37051-EXP", "creation_timestamp": "2024-06-15T11:02:04.000000Z"}, {"uuid": "f1d5b74d-bbca-4631-9ea4-7a34a1e8461e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-37051", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/2519", "content": "\u200aCVE-2024-37051: Critical JetBrains Flaw Exposes GitHub Tokens in IntelliJ IDEs, PoC Published\n\nhttps://securityonline.info/cve-2024-37051-exploit-poc-jetbrains-github-tokens/", "creation_timestamp": "2024-06-14T18:42:14.000000Z"}, {"uuid": "b11a86c5-0d14-4802-915e-c2eae74d6305", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-37058", "type": "seen", "source": "Telegram/xbCe-j-X2zsRgU85jcbXJF0sthZfZww2jAH9buQqxvPiko1E", "content": "", "creation_timestamp": "2025-02-06T02:39:17.000000Z"}, {"uuid": "f37aa980-cd2b-43dd-a31d-34f8bdf51930", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-37056", "type": "seen", "source": "Telegram/GUBRSLALG_7pp9aFIcqtnw-oyTlJeDGIM4pYyRgktzZqTfT9", "content": "", "creation_timestamp": "2025-02-06T02:39:17.000000Z"}, {"uuid": "eace5d37-96ca-4bee-b636-909d48e990af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-37057", "type": "seen", "source": "Telegram/HrC3npwt5k0zfat3F27PktjOIkhVVBM6cqOrz4MQYDbx7p9D", "content": "", "creation_timestamp": "2025-02-06T02:39:17.000000Z"}, {"uuid": "4cc9c675-e584-43a7-bfa9-77d478ee3769", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-37054", "type": "seen", "source": "Telegram/GBbuuXlcv1JSLV91LXeNb7plkxq98dIUDeUDuVqk1SCmTlr-", "content": "", "creation_timestamp": "2025-02-06T02:39:17.000000Z"}, {"uuid": "e34dafc9-e66a-4b64-978c-ab005165211a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-37051", "type": "seen", "source": "https://t.me/MrVGunz/1182", "content": "\ud83d\udcf0 \u0647\u0634\u062f\u0627\u0631 JetBrains \u062f\u0631 \u0645\u0648\u0631\u062f \u0628\u0627\u06af IntelliJ IDE \u0628\u0631\u0627\u06cc \u0627\u0641\u0634\u0627\u06cc \u062a\u0648\u06a9\u0646\u200c\u0647\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc GitHub\n\n\ud83d\udcac \u0634\u0631\u06a9\u062a JetBrains \u0628\u0647 \u0645\u0634\u062a\u0631\u06cc\u0627\u0646 \u0647\u0634\u062f\u0627\u0631 \u062f\u0627\u062f\u0647 \u06a9\u0647 \u0628\u0631\u0646\u0627\u0645\u0647 IntelliJ \u062e\u0648\u062f \u0631\u0627 \u0633\u0631\u06cc\u0639\u0627 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u0646\u062f. \u0627\u06cc\u0646 \u0628\u0627\u06af \u06a9\u0647 \u0628\u0647\u200c\u0639\u0646\u0648\u0627\u0646 CVE-2024-37051 \u0634\u0646\u0627\u062e\u062a\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f\u060c \u062a\u0648\u06a9\u0646\u200c\u0647\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc GitHub \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0631\u0627 \u062f\u0631 \u0645\u0639\u0631\u0636 \u0646\u0645\u0627\u06cc\u0634 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u062f\u0647\u062f \u0648 \u0628\u0631 IDE\u200c\u0647\u0627\u06cc \u0645\u0628\u062a\u0646\u06cc \u0628\u0631 IntelliJ \u0627\u0632 \u0646\u0633\u062e\u0647 \u06f2\u06f0\u06f2\u06f3\u066b\u06f1 \u0628\u0647 \u0628\u0639\u062f \u062a\u0623\u062b\u06cc\u0631 \u0645\u06cc\u200c\u06af\u0630\u0627\u0631\u062f. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0632\u0645\u0627\u0646\u06cc \u0641\u0639\u0627\u0644 \u0645\u06cc\u200c\u0634\u0648\u062f \u06a9\u0647 \u0627\u0641\u0632\u0648\u0646\u0647 JetBrains GitHub \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0634\u0648\u062f. JetBrains \u062f\u0631 \u06f2\u06f9 \u0645\u0647 \u06f2\u06f0\u06f2\u06f4 \u0627\u0632 \u0627\u06cc\u0646 \u0646\u0642\u0635 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0645\u0637\u0644\u0639 \u0634\u062f.\n\n\ud83d\udd17 \u0645\u0634\u0627\u0647\u062f\u0647 \u0627\u062f\u0627\u0645\u0647 \u062e\u0628\u0631\n\n\n\ud83d\udcf0 JetBrains Warning Regarding IntelliJ IDE Bug Exposing GitHub Access Tokens\n\n\ud83d\udcac JetBrains has issued a warning to its customers to promptly update their IntelliJ IDE software. This bug, identified as CVE-2024-37051, exposes GitHub access tokens of users and affects IntelliJ-based IDEs from version 2023.1 onwards. The vulnerability becomes active when the JetBrains GitHub plugin is utilized. JetBrains became aware of this security flaw on May 29, 2024.\n\n\ud83d\udd17 Read more", "creation_timestamp": "2024-06-18T17:12:19.000000Z"}, {"uuid": "9f89cef4-844f-4042-b7ff-7f36d5eb48fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-37051", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/2706", "content": "https://github.com/LeadroyaL/CVE-2024-37051-EXP\n\nCVE-2024-37051 poc and exploit\n#github  #exploit", "creation_timestamp": "2024-06-24T15:14:54.000000Z"}, {"uuid": "a18a69b2-79fa-4465-8048-bcc1b75d3584", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-37051", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/10736", "content": "#exploit\n1. CVE-2024-37051:\nIDE JetBrains Insufficiently Protected Credentials\nhttps://github.com/LeadroyaL/CVE-2024-37051-EXP\n\n2. CVE-2024-37032:\nOllama AI - RCE\nhttps://www.wiz.io/blog/probllama-ollama-vulnerability-cve-2024-37032\n\n3. CVE-2024-27815:\nBuffer Overflow in the XNU Kernel\nhttps://jprx.io/cve-2024-27815\n]-> https://github.com/jprx/CVE-2024-27815", "creation_timestamp": "2024-06-25T12:43:29.000000Z"}, {"uuid": "435f4557-6ac4-4ec3-9039-b37f577a9537", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-37051", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/3355", "content": "#exploit\n1. CVE-2024-37051:\nIDE JetBrains Insufficiently Protected Credentials\nhttps://github.com/LeadroyaL/CVE-2024-37051-EXP\n\n2. CVE-2024-37032:\nOllama AI - RCE\nhttps://www.wiz.io/blog/probllama-ollama-vulnerability-cve-2024-37032\n\n3. CVE-2024-27815:\nBuffer Overflow in the XNU Kernel\nhttps://jprx.io/cve-2024-27815\n]-> https://github.com/jprx/CVE-2024-27815", "creation_timestamp": "2024-08-16T11:16:21.000000Z"}, {"uuid": "79c4f43a-8d01-4d12-a182-be7a6225c2c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-37054", "type": "seen", "source": "https://t.me/GithubRedTeam/85096", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #Remote Code Execution\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2024-37054\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a vanhari\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-20 21:01:25\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\na proof-of-concept for MLflow RCE (remote code execution)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-20T21:05:32.000000Z"}, {"uuid": "2200e1d8-1e37-4977-9f38-7c03ae77a1f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-37054", "type": "published-proof-of-concept", "source": "Telegram/eEkK6PVbdDfglsyujSuxBWIZjJpDuh84Njq8yhH-Zu1Cfr8", "content": "", "creation_timestamp": "2026-05-18T03:00:06.000000Z"}, {"uuid": "ce27876c-965f-4aeb-89ea-76a5962cb2cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-37054", "type": "published-proof-of-concept", "source": "Telegram/xh4XcnfPk8jKp2qpT8jzWwwvaCwZdGZH1ZOpAikcTE7X2rw", "content": "", "creation_timestamp": "2026-05-20T03:00:06.000000Z"}, {"uuid": "ff462310-85fd-4939-ac9e-762d3199ed15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-37054", "type": "published-proof-of-concept", "source": "Telegram/Ut-FjakO3aXzYeDJVS314i2vHRpchsUAjvXH-nUbNwT5URU", "content": "", "creation_timestamp": "2026-05-20T21:00:04.000000Z"}, {"uuid": "5a9dae30-c8c0-487e-be6f-b55681fe03fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-37054", "type": "seen", "source": "https://t.me/GithubRedTeam/94759", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a SmartHire---Hack-The-Box-WriteUp\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Cosm3No1de\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a HTML\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-23 04:43:06\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nFull kill chain for HTB SmartHire: from reconnaissance to root. Covers vhost discovery, MLflow RCE (CVE-2024-37054), bind shell, and privilege escalation using Python module hijacking. A clean writeup for cybersecurity portfolio.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-23T06:00:03.851144Z"}, {"uuid": "9a4eb43a-6058-4434-b941-e775883df9c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-37054", "type": "seen", "source": "Telegram/lyQjgrzss-14q92fKQzooVmz9KnQq83SmXqNbV8WBn3n-CQ", "content": "", "creation_timestamp": "2026-07-23T11:00:03.800937Z"}, {"uuid": "89701e20-d28c-4a31-a458-55215c6e4c34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-37054", "type": "published-proof-of-concept", "source": "Telegram/lyQjgrzss-14q92fKQzooVmz9KnQq83SmXqNbV8WBn3n-CQ", "content": "", "creation_timestamp": "2026-07-24T00:00:08.742684Z"}, {"uuid": "e0ab1365-a995-4899-ad39-f0c66c39aeca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-37054", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94759", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a SmartHire---Hack-The-Box-WriteUp\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Cosm3No1de\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a HTML\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-23 04:43:06\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nFull kill chain for HTB SmartHire: from reconnaissance to root. Covers vhost discovery, MLflow RCE (CVE-2024-37054), bind shell, and privilege escalation using Python module hijacking. A clean writeup for cybersecurity portfolio.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-24T00:00:09.992257Z"}]}