{"vulnerability": "cve-2024-52301", "sightings": [{"uuid": "9db4f04e-8907-48cc-ac67-d860061339f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-52301", "type": "seen", "source": "", "content": "", "creation_timestamp": "2024-11-18T07:03:43.802280Z"}, {"uuid": "863efa1d-b0d9-43b3-9aa4-f7a24fb75c07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-52301", "type": "seen", "source": "https://social.circl.lu/users/circl/statuses/113502690070415629", "content": "", "creation_timestamp": "2024-11-18T07:06:46.068505Z"}, {"uuid": "2a91cc3e-1b70-44fe-8b34-45edcadeadde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-52301", "type": "seen", "source": "https://www.cert.at/de/warnungen/2024/11/kritische-sicherheitslucke-in-laravel-framework-updates-verfugbar", "content": "", "creation_timestamp": "2024-11-15T16:41:44.000000Z"}, {"uuid": "e1c48f79-a149-45c8-a752-9ec58fa3e145", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-52301", "type": "seen", "source": "https://gist.github.com/LeonardoRiveraITC/2946052976dc9e115d9104adc0c74558", "content": "", "creation_timestamp": "2025-09-05T10:00:10.000000Z"}, {"uuid": "b962ba5d-941f-4cfe-a30f-e5cfc16ab363", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-52301", "type": "seen", "source": "https://vulnerability.circl.lu/comment/cb0ad24f-1243-4f18-9607-95a5717fb451", "content": "", "creation_timestamp": "2024-11-18T07:05:03.432836Z"}, {"uuid": "69f733b4-c877-4122-a551-e92615a7e17c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-52301", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/9252", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aArbitrary Argument Injection Scanner CVE-2024-52301\nURL\uff1ahttps://github.com/nanwinata/CVE-2024-52301\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-11-30T04:29:23.000000Z"}, {"uuid": "f2d82691-491c-4bdd-bc88-0357828c8927", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-52301", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/9045", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aA bit of research around CVE-2024-52301\nURL\uff1ahttps://github.com/martinhaunschmid/CVE-2024-52301-Research\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-11-15T19:16:43.000000Z"}, {"uuid": "ac33e445-08dd-45ae-af66-d057009dcd4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-52301", "type": "published-proof-of-concept", "source": "https://t.me/xakep_ru/18105", "content": "HTB Environment. \u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u0443\u0435\u043c \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u043c\u0438 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u043f\u0440\u0438 \u0430\u0442\u0430\u043a\u0435 \u043d\u0430 Linux #\u0441\u0442\u0430\u0442\u044c\u0438 #\u043f\u043e\u0434\u043f\u0438\u0441\u0447\u0438\u043a\u0430\u043c\n\n\u0421\u0435\u0433\u043e\u0434\u043d\u044f \u044f \u043f\u043e\u043a\u0430\u0436\u0443, \u043a\u0430\u043a\u00a0\u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432\u00a0Linux, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0443 env_keep \u0434\u043b\u044f\u00a0sudo. \u0427\u0442\u043e\u0431\u044b \u043f\u043e\u0434\u043e\u0431\u0440\u0430\u0442\u044c\u0441\u044f \u043a\u00a0\u041e\u0421, \u043d\u0430\u043c \u0441\u043d\u0430\u0447\u0430\u043b\u0430 \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u0438\u0442\u0441\u044f \u043f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0431\u0430\u0433 CVE-2024-52301\u00a0\u0432\u043e\u00a0\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Laravel, \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044e \u0438\u00a0\u0447\u0435\u0440\u0435\u0437 \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u0430 \u0434\u043e\u0431\u0430\u0432\u0438\u0442\u044c \u0432\u0435\u0431\u2011\u0448\u0435\u043b\u043b.\n\nhttps://xakep.ru/2025/09/08/htb-environment/", "creation_timestamp": "2025-09-08T13:47:35.000000Z"}, {"uuid": "9e71fb6c-add7-4d7c-bf0f-245c4f1663ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-52301", "type": "seen", "source": "https://t.me/cvedetector/10715", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-52301 - Laravel Environment Detection Denial of Service (DoS) Vuln\", \n  \"Content\": \"CVE ID : CVE-2024-52301 \nPublished : Nov. 12, 2024, 8:15 p.m. | 45\u00a0minutes ago \nDescription : Laravel is a web application framework. When the register_argc_argv php directive is set to on , and users call any URL with a special crafted query string, they are able to change the environment used by the framework when handling the request. The vulnerability fixed in 6.20.45, 7.30.7, 8.83.28, 9.52.17, 10.48.23, and 11.31.0. The framework now ignores argv values for environment detection on non-cli SAPIs. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T22:15:19.000000Z"}, {"uuid": "f1df8836-0f77-48ef-9417-264ebd3ffbbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-52301", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/5492", "content": "Critical Laravel Vulnerability CVE-2024-52301 Allows Unauthorized Access \u2013 gbhackers.com\n\nFri, 15 Nov 2024 17:26:05", "creation_timestamp": "2024-11-15T13:03:03.000000Z"}, {"uuid": "e4d3c791-5638-4ed4-9be6-1487e1a24f87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-52301", "type": "seen", "source": "https://t.me/nusantaraMYID/1296", "content": "Critical Laravel Vulnerability CVE-2024-52301 Allows Unauthorized Access \u2013 gbhackers.com\n\nFri, 15 Nov 2024 17:26:05", "creation_timestamp": "2024-11-15T13:03:00.000000Z"}, {"uuid": "3cc2d0af-52bf-48df-a4c0-0c6178077b7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-52301", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/449", "content": "Critical Laravel Vulnerability CVE-2024-52301 Allows Unauthorized Access \u2013 gbhackers.com\n\nFri, 15 Nov 2024 17:26:05", "creation_timestamp": "2024-11-15T13:03:03.000000Z"}, {"uuid": "6867ead5-cf86-4c7d-8a45-f31febc2bf4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-52301", "type": "seen", "source": "Telegram/WfjfuAdqF_eE1rSkcvQrADrgNJoWcaAV1zo-uhkA2rSSO9U", "content": "", "creation_timestamp": "2024-11-15T13:03:00.000000Z"}, {"uuid": "f20cb799-6dd5-4f1b-a139-d9493611ae5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-52301", "type": "seen", "source": "https://t.me/bagl3y_notes/134", "content": "\ud83c\udd95 \u041d\u043e\u0432\u044b\u0439 \u0432\u0438\u0434\u0435\u043e-\u0440\u0430\u0437\u0431\u043e\u0440 \u0442\u0430\u0447\u043a\u0438 HTB (HackTheBox) \u043e\u0442 ippsec'a\n\n\u2049\ufe0f \u041d\u0430 \u0441\u0442\u0430\u0440\u0442\u0435 \u0443 \u043d\u0430\u0441 Laravel \u0432 \u043e\u0442\u043b\u0430\u0434\u043e\u0447\u043d\u043e\u043c \u0440\u0435\u0436\u0438\u043c\u0435  (\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f CVE-2024-52301) \u27a1\ufe0f \u043f\u043e \u043e\u0448\u0438\u0431\u043a\u0435 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 grep.app \u043d\u0430\u0445\u043e\u0434\u0438\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0439 package - UniSharp\u2019s Laravel Filemanager (\u0441\u043e \u0441\u0432\u043e\u0435\u0439 CVE-2024-21546, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a RCE) \u27a1\ufe0f \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u044b\u0432\u0430\u0435\u043c Keyvault, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f gpg \u27a1\ufe0f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f env_keep+=\"ENV BASH_ENV\" \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f root\n\n#\ufe0f\u20e3 \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u044d\u0442\u043e Linux box - Environment, \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 Medium    \n#\ufe0f\u20e3 \u0410 \u0432\u043e\u0442 \u0435\u0449\u0435 \u0440\u0430\u0437\u0431\u043e\u0440 \u043e\u0442 \u043a\u0440\u0443\u0442\u043e\u0433\u043e \u0447\u0435\u043b\u0430 - 0xdf\n\n\n\u2754 \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u043f\u043e\u0441\u0442\u044b \u043a\u0430\u043d\u0430\u043b\u0430\n\n#video #HTB #ippsec #0xdf #Walkthroughs", "creation_timestamp": "2026-08-04T13:00:26.164759Z"}, {"uuid": "8fbf8277-107b-4ed9-9760-bc32c2575ad7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-52301", "type": "seen", "source": "https://t.me/bagl3y_notes/134", "content": "\ud83c\udd95 \u041d\u043e\u0432\u044b\u0439 \u0432\u0438\u0434\u0435\u043e-\u0440\u0430\u0437\u0431\u043e\u0440 \u0442\u0430\u0447\u043a\u0438 HTB (HackTheBox) \u043e\u0442 ippsec'a\n\n\u2049\ufe0f \u041d\u0430 \u0441\u0442\u0430\u0440\u0442\u0435 \u0443 \u043d\u0430\u0441 Laravel \u0432 \u043e\u0442\u043b\u0430\u0434\u043e\u0447\u043d\u043e\u043c \u0440\u0435\u0436\u0438\u043c\u0435  (\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f CVE-2024-52301) \u27a1\ufe0f \u043f\u043e \u043e\u0448\u0438\u0431\u043a\u0435 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 grep.app \u043d\u0430\u0445\u043e\u0434\u0438\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0439 package - UniSharp\u2019s Laravel Filemanager (\u0441\u043e \u0441\u0432\u043e\u0435\u0439 CVE-2024-21546, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a RCE) \u27a1\ufe0f \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u044b\u0432\u0430\u0435\u043c Keyvault, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f gpg \u27a1\ufe0f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f env_keep+=\"ENV BASH_ENV\" \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f root\n\n#\ufe0f\u20e3 \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u044d\u0442\u043e Linux box - Environment, \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 Medium    \n#\ufe0f\u20e3 \u0410 \u0432\u043e\u0442 \u0435\u0449\u0435 \u0440\u0430\u0437\u0431\u043e\u0440 \u043e\u0442 \u043a\u0440\u0443\u0442\u043e\u0433\u043e \u0447\u0435\u043b\u0430 - 0xdf\n\n\n\u2754 \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u043f\u043e\u0441\u0442\u044b \u043a\u0430\u043d\u0430\u043b\u0430\n\n#video #HTB #ippsec #0xdf #Walkthroughs", "creation_timestamp": "2026-08-05T00:00:41.908880Z"}, {"uuid": "07912745-ec89-483e-850d-736f45df586d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-52301", "type": "published-proof-of-concept", "source": "https://t.me/bagl3y_notes/134", "content": "\ud83c\udd95 \u041d\u043e\u0432\u044b\u0439 \u0432\u0438\u0434\u0435\u043e-\u0440\u0430\u0437\u0431\u043e\u0440 \u0442\u0430\u0447\u043a\u0438 HTB (HackTheBox) \u043e\u0442 ippsec'a\n\n\u2049\ufe0f \u041d\u0430 \u0441\u0442\u0430\u0440\u0442\u0435 \u0443 \u043d\u0430\u0441 Laravel \u0432 \u043e\u0442\u043b\u0430\u0434\u043e\u0447\u043d\u043e\u043c \u0440\u0435\u0436\u0438\u043c\u0435  (\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f CVE-2024-52301) \u27a1\ufe0f \u043f\u043e \u043e\u0448\u0438\u0431\u043a\u0435 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 grep.app \u043d\u0430\u0445\u043e\u0434\u0438\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0439 package - UniSharp\u2019s Laravel Filemanager (\u0441\u043e \u0441\u0432\u043e\u0435\u0439 CVE-2024-21546, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a RCE) \u27a1\ufe0f \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u044b\u0432\u0430\u0435\u043c Keyvault, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f gpg \u27a1\ufe0f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f env_keep+=\"ENV BASH_ENV\" \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f root\n\n#\ufe0f\u20e3 \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u044d\u0442\u043e Linux box - Environment, \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 Medium    \n#\ufe0f\u20e3 \u0410 \u0432\u043e\u0442 \u0435\u0449\u0435 \u0440\u0430\u0437\u0431\u043e\u0440 \u043e\u0442 \u043a\u0440\u0443\u0442\u043e\u0433\u043e \u0447\u0435\u043b\u0430 - 0xdf\n\n\n\u2754 \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u043f\u043e\u0441\u0442\u044b \u043a\u0430\u043d\u0430\u043b\u0430\n\n#video #HTB #ippsec #0xdf #Walkthroughs", "creation_timestamp": "2026-08-06T00:00:39.544653Z"}, {"uuid": "3e36c378-6d56-4703-9c85-feec34d1e220", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-52301", "type": "seen", "source": "https://t.me/brutsecurity/1117", "content": "CVE-2024-52301: Improper Input Validation in Laravel Framework, 8.7 rating\u2757\ufe0f\n\nThe vulnerability allows an attacker to change environment using a special crafted query string.\n\nMore then 830k instances at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/CDJgv\n\ud83d\udc49 Dork: http.headers.set_cookie:\"laravel_session=\"\n\nVendor's advisory: https://github.com/laravel/framework/security/advisories/GHSA-gv7v-rgg6-548h", "creation_timestamp": "2026-07-09T03:00:11.963109Z"}, {"uuid": "36d9fb70-d62f-48b6-9bdf-50c5733d7f06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-52301", "type": "seen", "source": "https://t.me/brutsecurity/1117", "content": "CVE-2024-52301: Improper Input Validation in Laravel Framework, 8.7 rating\u2757\ufe0f\n\nThe vulnerability allows an attacker to change environment using a special crafted query string.\n\nMore then 830k instances at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/CDJgv\n\ud83d\udc49 Dork: http.headers.set_cookie:\"laravel_session=\"\n\nVendor's advisory: https://github.com/laravel/framework/security/advisories/GHSA-gv7v-rgg6-548h", "creation_timestamp": "2026-07-10T00:00:35.873379Z"}, {"uuid": "8fb7d1a5-f483-4adc-ba8d-a386741cf7d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-52301", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/1117", "content": "CVE-2024-52301: Improper Input Validation in Laravel Framework, 8.7 rating\u2757\ufe0f\n\nThe vulnerability allows an attacker to change environment using a special crafted query string.\n\nMore then 830k instances at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/CDJgv\n\ud83d\udc49 Dork: http.headers.set_cookie:\"laravel_session=\"\n\nVendor's advisory: https://github.com/laravel/framework/security/advisories/GHSA-gv7v-rgg6-548h", "creation_timestamp": "2026-07-11T16:00:02.888599Z"}, {"uuid": "ed33becf-e03c-4393-a60b-a4cc51deafef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-52301", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/1117", "content": "CVE-2024-52301: Improper Input Validation in Laravel Framework, 8.7 rating\u2757\ufe0f\n\nThe vulnerability allows an attacker to change environment using a special crafted query string.\n\nMore then 830k instances at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/CDJgv\n\ud83d\udc49 Dork: http.headers.set_cookie:\"laravel_session=\"\n\nVendor's advisory: https://github.com/laravel/framework/security/advisories/GHSA-gv7v-rgg6-548h", "creation_timestamp": "2026-07-12T00:00:45.590441Z"}]}