CVE-2024-32640Disclosure

MEDIUMCVSS 9.8 · CRITICAL

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Patch affected systems immediately
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

MASA CMS is an Enterprise Content Management platform based on open source technology. Versions prior to 7.4.5, 7.3.12, and 7.2.7 contain a SQL injection vulnerability in the `processAsyncObject` method that can result in remote code execution. Versions 7.4.5, 7.3.12, and 7.2.7 contain a fix for the issue.

Back to dashboard

4.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-89

Priority

MEDIUM

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

RISING

Threat summary

Public PoC and exploit tooling are both present
Patch or workaround signal is available
8 mentions across 5 observed days
Momentum state: rising

What's happening

Exploit tool or code specified in 4 signals
PoC mentioned or linked in 5 signals
Patch or workaround mentioned in 1 signal
Technical details provided in 5 signals
Disclosure: 4 classified signals
Peaked 1d ago at 4 mentions (2026-08-13); latest day: 1
8 total mentions across 5 days

Deep dive

Activity timeline8 mentions / 5d

Signal classification3 categories

Disclosure

450.0%

PoC

337.5%

Exploit

112.5%

Referenced assets8 URLs

By indicator

Classification over time

Date	Total	Labels

2026-07-13	1	Disclosure1
2026-07-14	1	Disclosure1
2026-07-16	1	PoC1
2026-08-13	4	Disclosure1Exploit1PoC2
2026-09-23	1	Disclosure1

Full discourse8 posts

I'M H4CK3R 42@luckyhacker4319d
Disclosure
Hacking Apple - SQL Injection to Remote Code Execution by Jaiswal & Rahul 🤯🔥 👨‍💻 Harsh Jaiswal & Rahul Maini (ProjectDiscovery) 🔗 https://projectdiscovery.io/blog/hacking-apple-with-sql-injection 🔗 https://www.cve.org/CVERecord?id=CVE-2024-32640 🔗 Join team 👉https://t.me/luckyhacker42 https://t.co/P93PY6rK0L
Post summary
The tweet discloses a SQL injection vulnerability in Apple products that can lead to remote code execution, citing CVE-2024-32640 and a ProjectDiscovery blog post, without referencing exploits, patches, or active attacks.
18059304.2K
5.0K followersView on X
N45HT@N45HTOfficial91d
Disclosure
Hacking Apple - SQL Injection to Remote Code Execution by Jaiswal & Rahul 🤯🔥 👨‍💻 Harsh Jaiswal & Rahul Maini (ProjectDiscovery) 🔗 https://projectdiscovery.io/blog/hacking-apple-with-sql-injection 🔗 https://www.cve.org/CVERecord?id=CVE-2024-32640 🔗 https://t.me/ZeroToBug 🔗 https://whatsapp.com/channel/0029VbCTM6RDp2QAFE8r140p https://t.co/RKPb1Jev8F
Post summary
The post announces the discovery of CVE‑2024‑32640, a SQL Injection vulnerability that can lead to remote code execution in Apple products, with a blog link providing further details.
15048327.5K
676 followersView on X
Densel@luckyhacker4388d
PoC
Hacking Apple - SQL Injection to Remote Code Execution by Jaiswal & Rahul 🤯🔥 👨‍💻 Harsh Jaiswal & Rahul Maini (ProjectDiscovery) 🔗 https://projectdiscovery.io/blog/hacking-apple-with-sql-injection 🔗 https://www.cve.org/CVERecord?id=CVE-2024-32640 🔗 https://t.me/luckyhacker42 https://t.co/rKTze0mw8D
Post summary
Post exposes Apple SQL injection RCE vulnerability and shares PoC
17029221.2K
4.2K followersView on X
ExploitGrid@exploitgrid61d
Exploit
[EXPLOIT] EGE-GH-CtaZ1KS [CRITICAL/PoC] Linked: CVE-2024-32640 CVE-2024-32640-SQLI-MuraCMS 🔗 https://exploitgrid.net/exploits/742d6f05-8209-4958-9975-c933689105e1
Post summary
An exploitable SQL injection in MuraCMS (CVE‑2024‑32640) is evident, with a PoC and likely functional code available via the ExploitGrid link.
1000035
30 followersView on X
ExploitGrid@exploitgrid61d
PoC
[EXPLOIT] EGE-GH-LGvem4p [CRITICAL/PoC] Linked: CVE-2024-32640 CVE-2024-32640 🔗 https://exploitgrid.net/exploits/0092e6b6-3abf-4c9a-bb52-47aeac41146e
Post summary
A PoC for CVE-2024-32640 is shared with a link to an exploit grid entry, indicating exploit code is available but no active exploitation or mitigation is reported.
1000028
30 followersView on X
ExploitGrid@exploitgrid61d
PoC
[EXPLOIT] EGE-GH-hw9Ghmy [CRITICAL/PoC] Linked: CVE-2024-32640 CVE-2024-32640 🔗 https://exploitgrid.net/exploits/1bde0412-7fb6-44ba-8bf7-bffaba28504e
Post summary
The post announces a proof‑of‑concept for CVE‑2024‑32640, linking to an exploit on ExploitGrid.
1000028
30 followersView on X
ExploitGrid@exploitgrid61d
Disclosure
🛡️ #ExploitGrid Daily #Threat Digest Critical Exploits disclosed today: EGE-EDB-UXR9LWZ ( CVE-2026-61447 ) EGE-GH-hw9Ghmy ( CVE-2024-32640 ) EGE-GH-LGvem4p ( CVE-2024-32640 ) EGE-GH-CtaZ1KS ( CVE-2024-32640 ) EGE-GH-ZqBTdPj ( CVE-2026-9198 ) ..🧵👇
Post summary
The tweet announces the disclosure of several critical exploits, listing their identifiers without providing technical details, proof‑of‑concepts, or evidence of active exploitation.
1000050
30 followersView on X
su8 / denchu@__su88891d
Disclosure
Masa/Mura CMSのコードレビューでApple社ポータルの重大なSQLインジェクション(CVE-2024-32640)を発見。CFMLパーサでcfqueryparam欠落を検出しsinkからsourceを追跡、RCEに到達。Appleは報告から2時間で修正 / Hacking Apple - SQL Injection to Remote Code Execution https://projectdiscovery.io/blog/hacking-apple-with-sql-injection
Post summary
A new SQL injection vulnerability (CVE‑2024‑32640) affecting an Apple portal was disclosed during a code review, with technical details indicating remote code execution; Apple patched the issue within two hours.
00010156
851 followersView on X

Explore more

Back to dashboard

What researchers are saying

CVE-2024-32640

I'M H4CK3R 42[verified]@luckyhacker43Disclosure

The tweet discloses a SQL injection vulnerability in Apple products that can lead to remote code execution, citing CVE-2024-32640 and a ProjectDiscovery blog post, without referencing exploits, patches, or active attacks.

Densel[verified]@luckyhacker43PoC

Post exposes Apple SQL injection RCE vulnerability and shares PoC

N45HT@N45HTOfficialDisclosure

The post announces the discovery of CVE‑2024‑32640, a SQL Injection vulnerability that can lead to remote code execution in Apple products, with a blog link providing further details.

ExploitGrid@exploitgridExploit

An exploitable SQL injection in MuraCMS (CVE‑2024‑32640) is evident, with a PoC and likely functional code available via the ExploitGrid link.

ExploitGrid@exploitgridPoC

A PoC for CVE-2024-32640 is shared with a link to an exploit grid entry, indicating exploit code is available but no active exploitation or mitigation is reported.

ExploitGrid@exploitgridPoC

The post announces a proof‑of‑concept for CVE‑2024‑32640, linking to an exploit on ExploitGrid.

ExploitGrid@exploitgridDisclosure

The tweet announces the disclosure of several critical exploits, listing their identifiers without providing technical details, proof‑of‑concepts, or evidence of active exploitation.

su8 / denchu@__su888Disclosure

A new SQL injection vulnerability (CVE‑2024‑32640) affecting an Apple portal was disclosed during a code review, with technical details indicating remote code execution; Apple patched the issue within two hours.