CVE-2024-52583

The WesHacks GitHub repository provides the official Hackathon competition website source code for the Muweilah Wesgreen Hackathon. The page `schedule.html` before 17 November 2024 or commit 93dfb83 contains links to `Leostop`, a site that hosts a malicious injected JavaScript file that occurs when bootstrap is run as well as jquery. `Leostop` may be a tracking malware and creates 2 JavaScript files, but little else is known about it. The WesHacks website remove all references to `Leostop` as of 17 November 2024.

• CWE-494

• https://github.com/DefinetlyNotAI/WesHacks/commit/93dfb83cb23a8d44e81dc12424ad8a5ea05e8f96
• https://github.com/DefinetlyNotAI/WesHacks/commit/ea5a4112d94bfe47beb74b8a1ba9b631d10f64f0
• https://github.com/DefinetlyNotAI/WesHacks/security/advisories/GHSA-462m-5c66-4pmh

Published

Nov 18, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-52574A vulnerability has been identified in Teamcenter Visualizat…7.8
• CVE-2024-52577In Apache Ignite versions from 2.6.0 and before 2.17.0, conf…9
• CVE-2024-52579Misskey is an open source, federated social media platform. …5.4
• CVE-2024-5258An authorization vulnerability exists within GitLab from ver…4.3
• CVE-2024-52581Litestar is an Asynchronous Server Gateway Interface (ASGI) …7.5
• CVE-2024-52582Cachi2 is a command-line interface tool that pre-fetches a p…4.7
• CVE-2024-52584Autolab is a course management service that enables auto-gra…5.4
• CVE-2024-52585Autolab is a course management service that enables auto-gra…5.4
• CVE-2024-52586eLabFTW is an open source electronic lab notebook for resear…7.8
• CVE-2024-52587StepSecurity's Harden-Runner provides network egress filteri…8.8
• CVE-2024-52588Strapi is an open-source content management system. Prior to…7.5
• CVE-2024-52589Discourse is an open source platform for community discussio…2.7