Update CVE list 2025-09-29 16:09

docs/CVE_list.json

@@ -1 +1 @@
-[{"cve": "CVE-2024-0010", "desc": "A reflected cross-site scripting (XSS) vulnerability in the GlobalProtect portal feature of Palo Alto Networks PAN-OS software enables execution of malicious JavaScript (in the context of a user’s browser) if a user clicks on a malicious link, allowing phishing attacks that could lead to credential theft.", "poc": ["https://github.com/afine-com/research"]}, {"cve": "CVE-2024-0014", "desc": "In startInstall of UpdateFetcher.java, there is a possible way to trigger a malicious config update due to a logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "poc": ["https://github.com/fkie-cad/nvd-json-data-feeds"]}, {"cve": "CVE-2024-0015", "desc": "In convertToComponentName of DreamService.java, there is a possible way to launch arbitrary protected activities due to intent redirection. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.", "poc": ["https://github.com/UmVfX1BvaW50/CVE-2024-0015", "https://github.com/nomi-sec/PoC-in-GitHub"]}, {"cve": "CVE-2024-0023", "desc": "In ConvertRGBToPlanarYUV of Codec2BufferUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "poc": ["https://android.googlesource.com/platform/frameworks/av/+/30b1b34cfd5abfcfee759e7d13167d368ac6c268", "https://github.com/nomi-sec/PoC-in-GitHub"]}, {"cve": "CVE-2024-0029", "desc": "In multiple files, there is a possible way to capture the device screen when disallowed by device policy due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "poc": ["https://github.com/fkie-cad/nvd-json-data-feeds"]}, {"cve": "CVE-2024-0030", "desc": "In btif_to_bta_response of btif_gatt_util.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.", "poc": ["https://github.com/fkie-cad/nvd-json-data-feeds", "https://github.com/nomi-sec/PoC-in-GitHub"]}, {"cve": "CVE-2024-0031", "desc": "In attp_build_read_by_type_value_cmd of att_protocol.cc , there is a possible out of bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.", "poc": ["https://github.com/fkie-cad/nvd-json-data-feeds"]}, {"cve": "CVE-2024-0032", "desc": "In queryChildDocuments of FileSystemProvider.java, there is a possible way to request access to directories that should be hidden due to improper input validation. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.", "poc": ["https://github.com/fkie-cad/nvd-json-data-feeds"]}, {"cve": "CVE-2024-0033", "desc": "In multiple functions of ashmem-dev.cpp, there is a possible missing seal due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "poc": ["https://github.com/fkie-cad/nvd-json-data-feeds"]}, {"cve": "CVE-2024-0034", "desc": "In BackgroundLaunchProcessController, there is a possible way to launch arbitrary activity from the background due to BAL Bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "poc": ["https://github.com/fkie-cad/nvd-json-data-feeds"]}, {"cve": "CVE-2024-0035", "desc": "In onNullBinding of TileLifecycleManager.java, there is a possible way to launch an activity from the background due to a missing null check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "poc": ["https://github.com/fkie-cad/nvd-json-data-feeds"]}, {"cve": "CVE-2024-0036", "desc": "In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible way to bypass the restrictions on starting activities from the background due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "poc": ["https://github.com/fkie-cad/nvd-json-data-feeds"]}, {"cve": "CVE-2024-0037", "desc": "In applyCustomDescription of SaveUi.java, there is a possible way to view images belonging to a different user due to a missing permission check. This could lead to local information disclosure with User execution privileges neededLine truncated
+[{"cve": "CVE-2024-0001", "desc": "A condition exists in FlashArray Purity whereby a local account intended for initial array configuration remains active potentially allowing a malicious actor to gain elevated privileges.", "poc": ["https://github.com/ADA-XiaoYao/ADA-XiaoYao-ADA-ZeroDay-Framework-CLI", "https://github.com/GerriaLeSure/cybersecurity-risk-assessment-platform", "https://github.com/Harrywang12/lockdown", "https://github.com/Mahdi-Assadi/Text_Clustering", "https://github.com/ProjectZeroDays/AI-Driven-Zero-Click-Exploit-Deployment-Framework", "https://github.com/RobloxSecurityResearcher/RobloxVulnerabilityCVE-2024-0001", "https://github.com/SV-ZeroOne/cyber-ai-info", "https://github.com/Victorkib/vulnscope", "https://github.com/allensuvorov/vuln-scan-query", "https://github.com/arshiyaazizi/Unique-Vulnerability-Identification-API-", "https://github.com/bendrorr/vulnerability-management", "https://github.com/jiupta/CVE-2024-0001-EXP", "https://github.com/mauvehed/kevvy", "https://github.com/miketigerblue/chroma-curator", "https://github.com/nomi-sec/PoC-in-GitHub", "https://github.com/pgdn-network/pgdn-cve", "https://github.com/shashwat12304/cyber-graph-viz", "https://github.com/zefparis/zero-click-benji"]}, {"cve": "CVE-2024-0002", "desc": "A condition exists in FlashArray Purity whereby an attacker can employ a privileged account allowing remote access to the array.", "poc": ["https://github.com/ProjectZeroDays/AI-Driven-Zero-Click-Exploit-Deployment-Framework", "https://github.com/Victorkib/vulnscope", "https://github.com/zefparis/zero-click-benji"]}, {"cve": "CVE-2024-0003", "desc": "A condition exists in FlashArray Purity whereby a malicious user could use a remote administrative service to create an account on the array allowing privileged access.", "poc": ["https://github.com/ProjectZeroDays/AI-Driven-Zero-Click-Exploit-Deployment-Framework", "https://github.com/Victorkib/vulnscope", "https://github.com/zefparis/zero-click-benji"]}, {"cve": "CVE-2024-0004", "desc": "A condition exists in FlashArray Purity whereby an user with array admin role can execute arbitrary commands remotely to escalate privilege on the array.", "poc": ["https://github.com/ProjectZeroDays/AI-Driven-Zero-Click-Exploit-Deployment-Framework", "https://github.com/zefparis/zero-click-benji"]}, {"cve": "CVE-2024-0005", "desc": "A condition exists in FlashArray and FlashBlade Purity whereby a malicious user could execute arbitrary commands remotely through a specifically crafted SNMP configuration.", "poc": ["https://github.com/ProjectZeroDays/AI-Driven-Zero-Click-Exploit-Deployment-Framework", "https://github.com/zefparis/zero-click-benji"]}, {"cve": "CVE-2024-0010", "desc": "A reflected cross-site scripting (XSS) vulnerability in the GlobalProtect portal feature of Palo Alto Networks PAN-OS software enables execution of malicious JavaScript (in the context of a user’s browser) if a user clicks on a malicious link, allowing phishing attacks that could lead to credential theft.", "poc": ["https://github.com/Manisha-03/XSS_Vulnerability", "https://github.com/afine-com/research"]}, {"cve": "CVE-2024-0012", "desc": "An authentication bypass in Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to gain PAN-OS administrator privileges to perform administrative actions, tamper with the configuration, or exploit other authenticated privilege escalation vulnerabilities like  CVE-2024-9474 https://security.paloaltonetworks.com/CVE-2024-9474 .The risk of this issue is greatly reduced if you secure access to the management web interface by restricting access to only trusted internal IP addresses according to our recommended  best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .This issue is applicable only to PAN-OS 10.2, PAN-OS 11.0, PAN-OS 11.1, and PAN-OS 11.2 software.Cloud NGFW and Prisma Access are not impacted by this vulnerability.", "poc": ["https://github.com/0xjessie21/CVE-2024-0012", "https://github.com/Mattb709/HELLCAT-Practical-Initial-Access-Guide-for-Red-Teams", "https://github.com/Ostorlab/KEV", "https://github.com/Regent8SH/PanOsExploitMultitool", "https://github.com/Sachinart/CVE-2024-0012-POC", "https://github.com/TalatumLabs/CVE-2024-0012_CVE-2024-9474_PoC", "https://github.com/Threekiii/CVE", "https://github.com/XiaomingX/awesome-cve-exp-poc", "https://github.com/XiaomingX/cve-2024-0012-poc", "https://github.com/aratane/CVE-2024-9474", "https://github.com/crosswk/paloalto-cve-parser", "https://github.com/dcollaoa/cve-2024-0012-gui-poc", "https://github.com/greaselovely/CVE-2024-0012", "https://github.com/iSee857/CVE-2024-0012-poc", "https://github.com/k4nfr3/CVE-2024-9474", "https://github.com/nomi-sec/PoC-in-GitHub", "https://github.com/packetinside/CISA_BOT", "https://github.com/plzheheplztrying/cve_monitor", "https://githuLine truncated