{"vulnerability": "cve-2024-5614", "sightings": [{"uuid": "cedbecb9-815d-45de-a5b7-6bacd4463052", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56145", "type": "seen", "source": "https://bsky.app/profile/darkwebinformer.bsky.social/post/3ldquwugsv22d", "content": "", "creation_timestamp": "2024-12-20T17:10:48.500365Z"}, {"uuid": "a24732d6-3db3-4007-91db-40d015712c8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56145", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113677310750656920", "content": "", "creation_timestamp": "2024-12-19T03:15:06.760723Z"}, {"uuid": "a855e2fe-304a-4488-b1d9-b5e507bec5dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56142", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113670348307536287", "content": "", "creation_timestamp": "2024-12-17T21:44:27.977283Z"}, {"uuid": "c2e36f35-fcec-4e21-89f9-e3894fc8ffc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56145", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3ldotxzz3um2p", "content": "", "creation_timestamp": "2024-12-19T21:48:04.180986Z"}, {"uuid": "550d3b49-383c-4b0e-ab35-cb5cdf05b265", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-56145", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/113686258222808930", "content": "", "creation_timestamp": "2024-12-20T17:10:33.875125Z"}, {"uuid": "3a8f8c32-74c2-41dc-9893-fe13d788cd12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56145", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3ldx4ywtuzs2g", "content": "", "creation_timestamp": "2024-12-23T04:50:59.632195Z"}, {"uuid": "1ba09100-2bcd-4bc1-8876-493fa057295a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56145", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3ldxpyipgb42h", "content": "", "creation_timestamp": "2024-12-23T10:30:41.162655Z"}, {"uuid": "fa1c579d-8e37-4ff5-b068-51d59a1b7966", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56145", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-56145.yaml", "content": "", "creation_timestamp": "2024-12-29T16:51:28.000000Z"}, {"uuid": "97fae789-71a7-41e9-b5a7-5056a17e2bfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56144", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfvgy64u5k2r", "content": "", "creation_timestamp": "2025-01-16T23:34:32.383935Z"}, {"uuid": "308d51fe-a9bb-4815-8e87-50450c202475", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56144", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfvfwe77yn2n", "content": "", "creation_timestamp": "2025-01-16T23:15:35.173904Z"}, {"uuid": "7fc72cad-af00-4f1f-aee9-82ca362b2747", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56145", "type": "seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3lg72ulm2bc2u", "content": "", "creation_timestamp": "2025-01-20T19:24:22.863901Z"}, {"uuid": "897977d4-b76b-4966-8835-dc023c016b94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56145", "type": "seen", "source": "https://bsky.app/profile/rajsamani.bsky.social/post/3lhdnkyl6u22p", "content": "", "creation_timestamp": "2025-02-04T08:34:54.541796Z"}, {"uuid": "a8ce953e-afb2-4c3d-bc09-f4341221675c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56145", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:46.000000Z"}, {"uuid": "e067603c-a654-4d7b-a1cb-77c3727fae4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56145", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/4135364", "content": "", "creation_timestamp": "2025-06-02T17:59:15.809622Z"}, {"uuid": "59d0c16d-8f54-4c1f-b46c-647f977795ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56145", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:11:05.000000Z"}, {"uuid": "5a636f8f-d89e-44e4-a50c-89ee56758d3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56145", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lqnpf52wqc2y", "content": "", "creation_timestamp": "2025-06-02T21:20:45.416566Z"}, {"uuid": "7fda5604-bf70-4e64-bea6-a6b4a0abc3ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56145", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lqngqig4nq23", "content": "", "creation_timestamp": "2025-06-02T18:46:02.263078Z"}, {"uuid": "50f2bd8e-90cb-4301-85a2-1d50565c6ede", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56145", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "22fb744e-c646-4999-bfcd-a0cd047d5e95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56145", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lqq6swxcwz2u", "content": "", "creation_timestamp": "2025-06-03T21:02:17.391888Z"}, {"uuid": "df7e5192-cca9-44e8-94f3-dd45f0ca3c51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56145", "type": "seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3lrq66mkjbs2n", "content": "", "creation_timestamp": "2025-06-16T14:16:04.414481Z"}, {"uuid": "2b26340e-1aeb-452f-8e7a-2cc5934eaf68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56145", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lqq7dt73ss2d", "content": "", "creation_timestamp": "2025-06-03T21:11:41.239028Z"}, {"uuid": "0a0b78a9-fa94-4b36-be14-33572822de00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56145", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-09-29T03:12:15.000000Z"}, {"uuid": "e47901c4-15c9-4568-8dd0-1648f2b614e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56145", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-09-28T08:23:31.000000Z"}, {"uuid": "20990b62-4320-4364-9580-311c2fddf54c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56145", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/craftcms_ftp_template.rb", "content": "", "creation_timestamp": "2025-01-23T19:28:55.000000Z"}, {"uuid": "7cdcc4f5-fe00-407b-bb9c-89d689b03e8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56143", "type": "seen", "source": "https://bsky.app/profile/checkmarxzero.bsky.social/post/3m3fiqfxa6d24", "content": "", "creation_timestamp": "2025-10-17T14:37:37.067904Z"}, {"uuid": "7424eb80-28a0-4551-af80-e6e109b6768d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-56145", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/35bf156b-807c-4906-a342-c933314e81b0", "content": "", "creation_timestamp": "2026-02-02T12:26:00.163113Z"}, {"uuid": "5a531a1e-e8c6-4680-8c31-f51e7f103b94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56145", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/9518", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aUnauthenticated RCE on CraftCMS when PHP `register_argc_argv` config setting is enabled\nURL\uff1ahttps://github.com/Chocapikk/CVE-2024-56145\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-12-20T03:36:40.000000Z"}, {"uuid": "04b8160e-2949-4752-bec5-3846642bdcaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56145", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/9557", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-56145 SSTI to RCE - twig templates \nURL\uff1ahttps://github.com/Sachinart/CVE-2024-56145-craftcms-rce\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-12-22T11:56:55.000000Z"}, {"uuid": "e039a0e6-cb5d-4817-9b4a-e45e9aace609", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56145", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/30088", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aA POC lab environment for CVE-2024-56145 CraftCMS RCE.\nURL\uff1ahttps://github.com/hmhlol/craft-cms-RCE-CVE-2024-56145\n\n\u6807\u7b7e\uff1a#RCE", "creation_timestamp": "2025-04-06T10:20:39.000000Z"}, {"uuid": "bc2bd092-3057-4ce0-8465-4dc1a48304d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56144", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2069", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-56144\n\ud83d\udd39 Description: librenms is a community-based GPL-licensed network monitoring system. Affected versions are subject to a stored XSS on the parameters (Replace $DEVICE_ID with your specific $DEVICE_ID value):`/device/$DEVICE_ID/edit` -&gt; param: display. Librenms versions up to 24.11.0 allow remote attackers to inject malicious scripts. When a user views or interacts with the page displaying the data, the malicious script executes immediately, leading to potential unauthorized actions or data exposure. This issue has been addressed in release version 24.12.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.\n\ud83d\udccf Published: 2025-01-16T22:28:03.567Z\n\ud83d\udccf Modified: 2025-01-16T22:28:03.567Z\n\ud83d\udd17 References:\n1. https://github.com/librenms/librenms/security/advisories/GHSA-2f4w-6mc7-4w78", "creation_timestamp": "2025-01-16T22:56:24.000000Z"}, {"uuid": "d6ea57f7-9ac5-4dad-a732-893025404247", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56145", "type": "published-proof-of-concept", "source": "https://t.me/cybersecplayground/46", "content": "\ud83d\udea8 [CVE-2024-56145] Exploit released! \ud83d\udea8\n\nDetails, PoC, and setup instructions:\n\ud83d\udd17 https://github.com/Chocapikk/CVE-2024-56145\n\nLearn more:\n\ud83d\udcd6 https://assetnote.io/resources/research/how-an-obscure-php-footgun-led-to-rce-in-craft-cms\n\n#bugbountytips #BugBounty", "creation_timestamp": "2025-01-19T13:02:09.000000Z"}, {"uuid": "9222c6a9-0716-4425-abb4-d76c68c482d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56144", "type": "seen", "source": "https://t.me/cvedetector/15671", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-56144 - Librenms Device Edit Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-56144 \nPublished : Jan. 16, 2025, 11:15 p.m. | 33\u00a0minutes ago \nDescription : librenms is a community-based GPL-licensed network monitoring system. Affected versions are subject to a stored XSS on the parameters (Replace $DEVICE_ID with your specific $DEVICE_ID value):`/device/$DEVICE_ID/edit` -&gt; param: display. Librenms versions up to 24.11.0 allow remote attackers to inject malicious scripts. When a user views or interacts with the page displaying the data, the malicious script executes immediately, leading to potential unauthorized actions or data exposure. This issue has been addressed in release version 24.12.0. Users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 4.6 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T00:54:55.000000Z"}, {"uuid": "1d099cf4-cf4a-45cb-af74-e352d5c5129f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56145", "type": "published-proof-of-concept", "source": "https://t.me/CyberBulletin/1809", "content": "\u26a1\ufe0fCVE-2024-56145 (CVSS 9.3): Remote Code Execution Vulnerability in Craft CMS, PoC Published.\n\n#CyberBulletin", "creation_timestamp": "2024-12-23T14:08:10.000000Z"}, {"uuid": "df2b4e51-700f-4337-8012-062d85da6225", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56142", "type": "seen", "source": "https://t.me/cvedetector/13137", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-56142 - PostgreSQL pghoard Unsafely Permits Path Traversal\", \n  \"Content\": \"CVE ID : CVE-2024-56142 \nPublished : Dec. 17, 2024, 10:15 p.m. | 43\u00a0minutes ago \nDescription : pghoard is a PostgreSQL backup daemon and restore tooling that stores backup data in cloud object stores. A vulnerability has been discovered that could allow an attacker to acquire disk access with privileges equivalent to those of pghoard, allowing for unintended path traversal. Depending on the permissions/privileges assigned to pghoard, this could allow disclosure of sensitive information. This issue has been addressed in releases after 2.2.2a. Users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T00:18:40.000000Z"}, {"uuid": "bde7ef75-f05b-4994-bb48-72c22f175a67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56145", "type": "seen", "source": "https://t.me/cvedetector/13254", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-56145 - Craft CMS Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-56145 \nPublished : Dec. 18, 2024, 9:15 p.m. | 35\u00a0minutes ago \nDescription : Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. Users of affected versions are affected by this vulnerability if their php.ini configuration has `register_argc_argv` enabled. For these users an unspecified remote code execution vector is present. Users are advised to update to version 4.13.2 or 5.5.2. Users unable to upgrade should disable `register_argc_argv` to mitigate the issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T22:54:13.000000Z"}, {"uuid": "ff9999d1-787b-46f4-bddf-80a3533e8cc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56140", "type": "seen", "source": "https://t.me/cvedetector/13252", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-56140 - Astro Cross-Site Request Forgery Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-56140 \nPublished : Dec. 18, 2024, 9:15 p.m. | 35\u00a0minutes ago \nDescription : Astro is a web framework for content-driven websites. In affected versions a bug in Astro\u2019s CSRF-protection middleware allows requests to bypass CSRF checks. When the `security.checkOrigin` configuration option is set to `true`, Astro middleware will perform a CSRF check. However, a vulnerability exists that can bypass this security. A semicolon-delimited parameter is allowed after the type in `Content-Type`. Web browsers will treat a `Content-Type` such as `application/x-www-form-urlencoded; abc` as a `simple request` and will not perform preflight validation. In this case, CSRF is not blocked as expected. Additionally, the `Content-Type` header is not required for a request. This issue has been addressed in version 4.16.17 and all users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T22:54:11.000000Z"}, {"uuid": "fc865e7c-8360-4084-adfd-a218516d3da3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5614", "type": "seen", "source": "https://t.me/cvedetector/1757", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5614 - Piotnet Addons For Elementor Sensitive Information Exposure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5614 \nPublished : July 27, 2024, 12:15 p.m. | 39\u00a0minutes ago \nDescription : The Piotnet Addons For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.4.29 via the 'pafe_posts_list' function. This makes it possible for unauthenticated attackers to extract sensitive data including titles and excerpts of future, draft, and pending blog posts. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-27T14:57:15.000000Z"}, {"uuid": "9d715c67-95cb-42b1-bdb4-973f41d8a621", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56145", "type": "published-proof-of-concept", "source": "Telegram/NrFS1vH1WavVxj_H0c0XFengHrO1O3JJshG2_jFb_SesJi4", "content": "", "creation_timestamp": "2025-01-19T13:33:13.000000Z"}, {"uuid": "6c7bf5c8-a334-4c10-a8d6-42c59d466673", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56145", "type": "seen", "source": "https://t.me/evilzoneforum/11876", "content": "\ud83d\udfe2 Forum: Evil Zone | Zone For Hackers  \n\ud83d\udc7e Post in: Tools/Bots/Validators  \n\ud83d\udd14 Post Title: [CVE-2024-56145] Exploit released!", "creation_timestamp": "2024-12-20T13:48:39.000000Z"}, {"uuid": "6d2a90c8-f776-4ba0-b692-dc9cd7d2a39c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56145", "type": "published-proof-of-concept", "source": "https://t.me/TheDarkWebInformer/9340", "content": "\ud83d\udea8CVE-2024-56145: Craft CMS Exploitation Tool\n\nhttps://darkwebinformer.com/cve-2024-56145-craft-cms-exploitation-tool/", "creation_timestamp": "2024-12-20T18:10:40.000000Z"}, {"uuid": "f4223467-0b8a-4eaa-be12-6959884ce753", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56145", "type": "published-proof-of-concept", "source": "https://t.me/suboxone_chatroom/938", "content": "\ud83d\udea8 [CVE-2024-56145] Exploit released! \ud83d\udea8\n\nDetails, PoC, and setup instructions:\n\ud83d\udd17 https://github.com/Chocapikk/CVE-2024-56145\n\nLearn more:\n\ud83d\udcd6 https://www.assetnote.io/resources/research/how-an-obscure-php-footgun-led-to-rce-in-craft-cms\n\n#bugbountytips #BugBounty", "creation_timestamp": "2025-01-13T11:04:46.000000Z"}, {"uuid": "96eaed4d-d0e3-4ca4-a5e3-e702c8d2e47e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56145", "type": "published-proof-of-concept", "source": "Telegram/Iegk-mk7b4gRMuoPBuKGulcUZlutdsJ2Znl-MBCh_FpJK8g", "content": "", "creation_timestamp": "2025-04-06T17:00:06.000000Z"}, {"uuid": "f209c9a5-333a-4c50-bf1e-55b55a96b772", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56145", "type": "published-proof-of-concept", "source": "Telegram/wJJNpcmq9kx21MPfY9-4icgXC2_RjU8KWi9ZvsTo6oz7fwk", "content": "", "creation_timestamp": "2025-04-07T01:00:08.000000Z"}, {"uuid": "716a15ef-8b5e-496d-97c9-2e9a829eb443", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56145", "type": "published-proof-of-concept", "source": "Telegram/XqIJgszFbCCQHvLhbO3hDQF6wY4k0qpbQcB94XvncHDwfks", "content": "", "creation_timestamp": "2025-01-19T13:33:13.000000Z"}, {"uuid": "66b138d4-0c74-4266-8e0c-756236f9091e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56145", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/2442", "content": "CVE-2024-56145: Craft CMS\n*\nRCE \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438\n\u041d\u041e, \u0442\u043e\u043b\u044c\u043a\u043e \u0435\u0441\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 PHP `register_argc_argv`\n*\nExploit Command:\npython exploit.py exploit -u  -lh  -lp  -px \n*\nEXploit", "creation_timestamp": "2024-12-20T08:55:05.000000Z"}, {"uuid": "7d2874bf-6fcf-4970-a089-9bb8edd7b873", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56145", "type": "published-proof-of-concept", "source": "https://t.me/CyberBulletin/26894", "content": "\u26a1\ufe0fCVE-2024-56145 (CVSS 9.3): Remote Code Execution Vulnerability in Craft CMS, PoC Published.\n\n#CyberBulletin", "creation_timestamp": "2024-12-23T13:20:53.000000Z"}, {"uuid": "28f02743-5df9-4e13-a8ba-02b8f6f1117f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-56143", "type": "published-proof-of-concept", "source": "https://github.com/strapi/strapi/security/advisories/GHSA-495j-h493-42q2", "content": "", "creation_timestamp": "2025-10-16T15:07:22.000000Z"}]}