onyx

onyx --cves cve-2024-29059

CVE-2024-29059

score
<0.1
cvss
—
epss
98.6%
published
—
kev added
2025-02-04
first seen

Microsoft .NET Framework contains an information disclosure vulnerability that exposes the ObjRef URI to an attacker, ultimately enabling remote code execution.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

events2025-02-04 — Added to CISA KEVK2026-10-21 (seen by) — Tracked by OnyxT2026-10-21 (seen by) — Nuclei template: .NET Framework - Leaking ObjRefs via HTTP .NET RemotingNscore2026-10-21: score <0.1<0.1epss2026-09-22: epss 98.6%2026-09-23: epss 98.6%2026-09-24: epss 98.6%2026-09-25: epss 98.6%2026-09-26: epss 98.6%2026-09-27: epss 98.6%2026-09-28: epss 98.6%2026-09-29: epss 98.6%2026-09-30: epss 98.6%2026-10-01: epss 98.6%2026-10-02: epss 98.6%2026-10-03: epss 98.6%2026-10-04: epss 98.6%2026-10-05: epss 98.6%2026-10-06: epss 98.6%2026-10-07: epss 98.6%2026-10-08: epss 98.6%2026-10-09: epss 98.6%2026-10-10: epss 98.6%2026-10-11: epss 98.6%2026-10-12: epss 98.6%2026-10-13: epss 98.6%2026-10-14: epss 98.6%2026-10-15: epss 98.6%2026-10-16: epss 98.6%2026-10-18: epss 98.6%2026-10-19: epss 98.6%2026-10-20: epss 98.6%2026-10-21: epss 98.6%98.6%mentions/day0no mentions in 30 days2026-09-22today
  1. Added to CISA KEV
  2. Tracked by Onyx
  3. Nuclei template .NET Framework - Leaking ObjRefs via HTTP .NET Remoting

Nuclei template

A verified check exists — you can scan for this today, and so can everyone else.

template
.NET Framework - Leaking ObjRefs via HTTP .NET Remoting
severity
HIGH
first seen
nuclei -id CVE-2024-29059 -u https://target.example

Weaknesses

CWE-209

References 2