deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-41007
Published: 2024-07-15
Description: In the Linux kernel, the following vulnerability has been resolved:

tcp: avoid too many retransmit packets

If a TCP socket is using TCP_USER_TIMEOUT, and the other peer
retracted its window to zero, tcp_retransmit_timer() can
retransmit a packet every two jiffies (2 ms for HZ=1000),
for about 4 minutes after TCP_USER_TIMEOUT has 'expired'.

The fix is to make sure tcp_rtx_probe0_timed_out() takes
icsk->icsk_user_timeout into account.

Before blamed commit, the socket would not timeout after
icsk->icsk_user_timeout, but would use standard exponential
backoff for the retransmits.

Also worth noting that before commit e89688e3e978 ("net: tcp:
fix unexcepted socket die when snd_wnd is 0"), the issue
would last 2 minutes instead of 4.
CVSS Score: 3.3 (LOW)
References: https://git.kernel.org/stable/c/04317a2471c2f637b4c49cbd0e9c0d04a519f570; https://git.kernel.org/stable/c/5d7e64d70a11d988553a08239c810a658e841982; https://git.kernel.org/stable/c/66cb64a1d2239cd0309f9b5038b05462570a5be1
CVE: CVE-2024-6398
Published: 2024-07-15
Description: An information disclosure vulnerability in SWG in versions 12.x prior to 12.2.10 and 11.x prior to 11.2.24 allows information stored in a customizable block page to be disclosed to third-party websites due to Same Origin Policy Bypass of browsers in certain scenarios. The risk is low, because other recommended default security policies such as URL categorization and GTI are in place in most policies to block access to uncategorized/high risk websites. Any information disclosed depends on how the customers have customized the block pages.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://thrive.trellix.com/s/article/000013694; https://thrive.trellix.com/s/article/000013694
CVE: CVE-2024-6741
Published: 2024-07-15
Description: Openfind's Mail2000 has a vulnerability that allows the HttpOnly flag to be bypassed. Unauthenticated remote attackers can exploit this vulnerability using specific JavaScript code to obtain the session cookie with the HttpOnly flag enabled.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-693
References: https://www.openfind.com.tw/taiwan/download/Openfind_OF-ISAC-24-007.pdf; https://www.twcert.org.tw/en/cp-139-7941-b66e7-2.html; https://www.twcert.org.tw/tw/cp-132-7940-0177a-1.html
CVE: CVE-2024-6745
Published: 2024-07-15
Description: A vulnerability classified as critical has been found in code-projects Simple Ticket Booking 1.0. Affected is an unknown function of the file adminauthenticate.php of the component Login. The manipulation of the argument email/password leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-271476.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://github.com/xzyxiaohaha/cve/issues/2; https://vuldb.com/?ctiid.271476; https://vuldb.com/?id.271476
CVE: CVE-2024-5402
Published: 2024-07-15
Description: Unquoted Search Path or Element vulnerability in ABB Mint Workbench.



A local attacker who successfully exploited this vulnerability could gain elevated privileges by inserting an executable file in the path of the affected service.


This issue affects Mint Workbench I versions: from 5866 before 5868.
CVSS Score: 7.8 (HIGH)
CWE: CWE-428
References: https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7912&LanguageCode=en&DocumentPartId=1&Action=Launch; https://search.abb.com/library/Download.aspx?DocumentID=9AKK108469A7912&LanguageCode=en&DocumentPartId=1&Action=Launch
CVE: CVE-2024-6746
Published: 2024-07-15
Description: A vulnerability classified as problematic was found in NaiboWang EasySpider 0.6.2 on Windows. Affected by this vulnerability is an unknown functionality of the file \EasySpider\resources\app\server.js of the component HTTP GET Request Handler. The manipulation with the input /../../../../../../../../../Windows/win.ini leads to path traversal: '../filedir'. The attack needs to be done within the local network. The exploit has been disclosed to the public and may be used. The identifier VDB-271477 was assigned to this vulnerability. NOTE: The code maintainer explains, that this is not a big issue "because the default is that the software runs locally without going through the Internet".
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-24, CWE-22
References: https://github.com/NaiboWang/EasySpider/issues/466; https://vuldb.com/?ctiid.271477; https://vuldb.com/?id.271477
CVE: CVE-2024-6721
Published: 2024-07-15
Description: Rejected reason: ** REJECT **

DO NOT USE THIS CVE RECORD. Consult IDs: CVE-2024-5324. Reason: This record is a reservation duplicate of CVE-2024-5324. Notes: All CVE users should reference CVE-2024-5324 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.
CVE: CVE-2024-36455
Published: 2024-07-15
Description: An improper input validation allows an unauthenticated attacker to achieve remote command execution on the affected PAM system by sending a specially crafted HTTP request.
CWE: CWE-665
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24678; https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24678
CVE: CVE-2024-36456
Published: 2024-07-15
Description: This vulnerability allows an unauthenticated attacker to achieve remote command execution on the affected PAM system by uploading a specially crafted PAM upgrade file.
CWE: CWE-94
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24678; https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24678
CVE: CVE-2024-36457
Published: 2024-07-15
Description: The vulnerability allows an attacker to bypass the authentication requirements for a specific PAM endpoint.
CWE: CWE-306
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24678; https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24678
CVE: CVE-2024-36458
Published: 2024-07-15
Description: The vulnerability allows a malicious low-privileged PAM user to perform server upgrade related actions.
CWE: CWE-918
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24678; https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24678
CVE: CVE-2024-38491
Published: 2024-07-15
Description: The vulnerability allows an unauthenticated attacker to read arbitrary information from the database.
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24678; https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24678
CVE: CVE-2024-38492
Published: 2024-07-15
Description: This vulnerability allows an unauthenticated attacker to achieve remote command execution on the affected PAM system by uploading a specially crafted PAM upgrade file.
CWE: CWE-77
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24678; https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24678
CVE: CVE-2024-38493
Published: 2024-07-15
Description: A reflected cross-site scripting (XSS) vulnerability exists in the PAM UI web interface. A remote attacker able to convince a PAM user to click on a specially crafted link to the PAM UI web interface could potentially execute arbitrary client-side code in the context of PAM UI.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24678; https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24678
CVE: CVE-2024-38494
Published: 2024-07-15
Description: This vulnerability allows a high-privileged authenticated PAM user to achieve remote command execution on the affected PAM system by sending a specially crafted HTTP request.
CWE: CWE-444
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24678; https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24678
CVE: CVE-2024-6689
Published: 2024-07-15
Description: Local Privilege Escalation in MSI-Installer in baramundi Management Agent v23.1.172.0 on Windows allows a local unprivileged user to escalate privileges to SYSTEM.
CVSS Score: 7.8 (HIGH)
CWE: CWE-749
References: https://www.baramundi.com/en-us/security-info/s-2024-01/; https://www.baramundi.com/en-us/security-info/s-2024-01/
CVE: CVE-2024-38495
Published: 2024-07-15
Description: A specific authentication strategy allows a malicious attacker to learn ids of all PAM users defined in its database.
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24678; https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24678
CVE: CVE-2024-38496
Published: 2024-07-15
Description: The vulnerability allows a malicious low-privileged PAM user to access information about other PAM users and their group memberships.
CWE: CWE-922
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24678; https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24678
CVE: CVE-2024-6716
Published: 2024-07-15
Description: Rejected reason: Invalid security issue.
CVE: CVE-2024-40553
Published: 2024-07-15
Description: Tmall_demo v2024.07.03 was discovered to contain an arbitrary file upload via the component uploadUserHeadImage.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-434
References: https://gitee.com/project_team/Tmall_demo/issues/IAANVC; https://gitee.com/project_team/Tmall_demo/issues/IAANVC
CVE: CVE-2024-40554
Published: 2024-07-15
Description: An access control issue in Tmall_demo v2024.07.03 allows attackers to obtain sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://gitee.com/project_team/Tmall_demo/issues/IAANYB; https://gitee.com/project_team/Tmall_demo/issues/IAANYB
CVE: CVE-2024-40555
Published: 2024-07-15
Description: Tmall_demo v2024.07.03 was discovered to contain an arbitrary file upload vulnerability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-434
References: https://gitee.com/project_team/Tmall_demo/issues/IAAO1T; https://gitee.com/project_team/Tmall_demo/issues/IAAO1T
CVE: CVE-2024-40560
Published: 2024-07-15
Description: Tmall_demo before v2024.07.03 was discovered to contain a SQL injection vulnerability.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://gitee.com/project_team/Tmall_demo/issues/IAAOT1; https://gitee.com/project_team/Tmall_demo/issues/IAAOT1
CVE: CVE-2024-40414
Published: 2024-07-15
Description: A vulnerability in /goform/SetNetControlList in the sub_656BC function in Tenda AX1806 1.0.0.1 firmware leads to stack-based buffer overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-121
References: https://github.com/Feng-ZZ-pwn/IOT/blob/main/Tenda%20AX_1806/2/SetNetControlList.md; https://github.com/Feng-ZZ-pwn/IOT/blob/main/Tenda%20AX_1806/2/SetNetControlList.md
CVE: CVE-2024-27238
Published: 2024-07-15
Description: Race condition in the installer for some Zoom Apps and SDKs for Windows before version 6.0.0 may allow an authenticated user to conduct a privilege escalation via local access.
CVSS Score: 7.1 (HIGH)
CWE: CWE-367
References: https://www.zoom.com/en/trust/security-bulletin/zsb-24021; https://www.zoom.com/en/trust/security-bulletin/zsb-24021
CVE: CVE-2024-27240
Published: 2024-07-15
Description: Improper input validation in the installer for some Zoom Apps for Windows may allow an authenticated user to conduct a privilege escalation via local access.
CVSS Score: 7.1 (HIGH)
CWE: CWE-20
References: https://www.zoom.com/en/trust/security-bulletin/zsb-24019; https://www.zoom.com/en/trust/security-bulletin/zsb-24019
CVE: CVE-2024-27241
Published: 2024-07-15
Description: Improper input validation in some Zoom Apps and SDKs may allow an authenticated user to conduct a denial of service via network access.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: https://www.zoom.com/en/trust/security-bulletin/zsb-24020; https://www.zoom.com/en/trust/security-bulletin/zsb-24020
CVE: CVE-2024-37016
Published: 2024-07-15
Description: Mengshen Wireless Door Alarm M70 2024-05-24 allows Authentication Bypass via a Capture-Replay approach.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-294
References: https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-045.txt; https://www.syss.de/pentest-blog/; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-045.txt
CVE: CVE-2024-39819
Published: 2024-07-15
Description: Integrity check in the installer for some Zoom Workplace Apps and SDKs for Windows may allow an authenticated user to conduct a privilege escalation via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-494
References: https://www.zoom.com/en/trust/security-bulletin/zsb-24026; https://www.zoom.com/en/trust/security-bulletin/zsb-24026
CVE: CVE-2024-39820
Published: 2024-07-15
Description: Uncontrolled search path element in the installer for Zoom Workplace Desktop App for macOS before version 6.0.10 may allow an authenticated user to conduct a denial of service via local access.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-427
References: https://www.zoom.com/en/trust/security-bulletin/zsb-24027; https://www.zoom.com/en/trust/security-bulletin/zsb-24027
CVE: CVE-2024-39821
Published: 2024-07-15
Description: Race condition in the installer for Zoom Workplace App for Windows and Zoom Rooms App for Windows may allow an authenticated user to conduct a denial of service via local access.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-367
References: https://www.zoom.com/en/trust/security-bulletin/zsb-24028; https://www.zoom.com/en/trust/security-bulletin/zsb-24028
CVE: CVE-2024-39826
Published: 2024-07-15
Description: Race condition in Team Chat for some Zoom Workplace Apps and SDKs for Windows may allow an authenticated user to conduct information disclosure via network access.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-367, CWE-22
References: https://www.zoom.com/en/trust/security-bulletin/zsb-24023; https://www.zoom.com/en/trust/security-bulletin/zsb-24023
CVE: CVE-2024-39827
Published: 2024-07-15
Description: Improper input validation in the installer for Zoom Workplace Desktop App for Windows before version 6.0.10 may allow an authenticated user to conduct a denial of service via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://www.zoom.com/en/trust/security-bulletin/zsb-24024; https://www.zoom.com/en/trust/security-bulletin/zsb-24024
CVE: CVE-2024-40415
Published: 2024-07-15
Description: A vulnerability in /goform/SetStaticRouteCfg in the sub_519F4 function in Tenda AX1806 1.0.0.1 firmware leads to stack-based buffer overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-120
References: https://github.com/Feng-ZZ-pwn/IOT/blob/main/Tenda%20AX_1806/4/SetStaticRouteCfg.md; https://github.com/Feng-ZZ-pwn/IOT/blob/main/Tenda%20AX_1806/4/SetStaticRouteCfg.md
CVE: CVE-2024-40416
Published: 2024-07-15
Description: A vulnerability in /goform/SetVirtualServerCfg in the sub_6320C function in Tenda AX1806 1.0.0.1 firmware leads to stack-based buffer overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-121
References: https://github.com/Feng-ZZ-pwn/IOT/blob/main/Tenda%20AX_1806/3/SetVirtualServerCfg.md; https://github.com/Feng-ZZ-pwn/IOT/blob/main/Tenda%20AX_1806/3/SetVirtualServerCfg.md
CVE: CVE-2024-31946
Published: 2024-07-15
Description: An issue was discovered in Stormshield Network Security (SNS) 3.7.0 through 3.7.41, 3.10.0 through 3.11.29, 4.0 through 4.3.24, and 4.4.0 through 4.7.4. A user who has access to the SNS with write access on the email alerts page has the ability to create alert email containing malicious JavaScript, executed by the template preview. The following versions fix this: 3.7.42, 3.11.30, 4.3.25, and 4.7.5.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-79
References: https://advisories.stormshield.eu/2024-007; https://advisories.stormshield.eu/2024-007
CVE: CVE-2024-36432
Published: 2024-07-15
Description: An arbitrary memory write vulnerability was discovered in Supermicro X11DPG-HGX2, X11PDG-QT, X11PDG-OT, and X11PDG-SN motherboards with BIOS firmware before 4.4.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1246
References: https://www.supermicro.com/en/support/security_center#%21advisories; https://www.supermicro.com/zh_tw/support/security_BIOS_Jul_2024; https://www.supermicro.com/en/support/security_center#%21advisories
CVE: CVE-2024-36433
Published: 2024-07-15
Description: An arbitrary memory write vulnerability was discovered in Supermicro X11DPH-T, X11DPH-Tq, and X11DPH-i motherboards with BIOS firmware before 4.4.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: https://www.supermicro.com/en/support/security_BIOS_Jul_2024; https://www.supermicro.com/en/support/security_center#%21advisories; https://www.supermicro.com/en/support/security_BIOS_Jul_2024
CVE: CVE-2024-36434
Published: 2024-07-15
Description: An SMM callout vulnerability was discovered in Supermicro X11DPH-T, X11DPH-Tq, and X11DPH-i motherboards with BIOS firmware before 4.4.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: https://www.supermicro.com/en/support/security_BIOS_Jul_2024; https://www.supermicro.com/en/support/security_center#%21advisories; https://www.supermicro.com/en/support/security_BIOS_Jul_2024
CVE: CVE-2024-36438
Published: 2024-07-15
Description: eLinkSmart Hidden Smart Cabinet Lock 2024-05-22 has Incorrect Access Control and fails to perform an authorization check which can lead to card duplication and other attacks.
CVSS Score: 7.3 (HIGH)
CWE: CWE-284, CWE-285, CWE-1263
References: https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-044.txt; https://www.syss.de/pentest-blog/; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-044.txt
CVE: CVE-2024-37386
Published: 2024-07-15
Description: An issue was discovered in Stormshield Network Security (SNS) 4.0.0 through 4.3.25, 4.4.0 through 4.7.5, and 4.8.0. Certain manipulations allow restarting in single-user mode despite the activation of secure boot. The following versions fix this: 4.3.27, 4.7.6, and 4.8.2.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-284
References: https://advisories.stormshield.eu/2024-017; https://advisories.stormshield.eu/2024-017
CVE: CVE-2024-40631
Published: 2024-07-15
Description: Plate media is an open source, rich-text editor for React. Editors that use `MediaEmbedElement` and pass custom `urlParsers` to the `useMediaState` hook may be vulnerable to XSS if a custom parser allows `javascript:`, `data:` or `vbscript:` URLs to be embedded. Editors that do not use `urlParsers` and consume the `url` property directly may also be vulnerable if the URL is not sanitised. The default parsers `parseTwitterUrl` and `parseVideoUrl` are not affected. `@udecode/plate-media` 36.0.10 resolves this issue by only allowing HTTP and HTTPS URLs during parsing. This affects only the `embed` property returned from `useMediaState`. In addition, the `url` property returned from `useMediaState` has been renamed to `unsafeUrl` to indicate that it has not been sanitised. The `url` property on `element` is also unsafe, but has not been renamed. If you're using either of these properties directly, you will still need to validate the URL yourself. Users are advised to upgrade. Users unable to upgrade should ensure that any custom `urlParsers` do not allow `javascript:`, `data:` or `vbscript:` URLs to be returned in the `url` property of their return values. If `url` is consumed directly, validate the URL protocol before passing it to the `iframe` element.


CVSS Score: 8.1 (HIGH)
CWE: CWE-79
References: https://github.com/udecode/plate/commit/1bc0971774fbfb770780c9bdb94746a6f0f196a0; https://github.com/udecode/plate/security/advisories/GHSA-h3pq-667x-r789; https://stackoverflow.com/a/43467144
CVE: CVE-2024-38360
Published: 2024-07-15
Description: Discourse is an open source platform for community discussion. In affected versions by creating replacement words with an almost unlimited number of characters, a moderator can reduce the availability of a Discourse instance. This issue has been addressed in stable version 3.2.3 and in current betas. Users are advised to upgrade. Users unable to upgrade may manually remove the long watched words either via SQL or Rails console.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-400
References: https://github.com/discourse/discourse/commit/7b53e610c17e38be982dffefa4e5b5a709a3b990; https://github.com/discourse/discourse/security/advisories/GHSA-68pm-hm8x-pq2p; https://github.com/discourse/discourse/commit/7b53e610c17e38be982dffefa4e5b5a709a3b990
CVE: CVE-2024-39912
Published: 2024-07-15
Description: web-auth/webauthn-lib is an open source set of PHP libraries and a Symfony bundle to allow developers to integrate that authentication mechanism into their web applications. The ProfileBasedRequestOptionsBuilder method returns allowedCredentials without any credentials if no username was found. When WebAuthn is used as the first or only authentication method, an attacker can enumerate usernames based on the absence of the `allowedCredentials` property in the assertion options response. This allows enumeration of valid or invalid usernames. By knowing which usernames are valid, attackers can focus their efforts on a smaller set of potential targets, increasing the efficiency and likelihood of successful attacks. This issue has been addressed in version 4.9.0 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-204
References: https://github.com/web-auth/webauthn-framework/commit/64de11f6cddc71e56c76e0cc4573bf94d02be045; https://github.com/web-auth/webauthn-framework/security/advisories/GHSA-875x-g8p7-5w27; https://github.com/web-auth/webauthn-framework/commit/64de11f6cddc71e56c76e0cc4573bf94d02be045
CVE: CVE-2024-39915
Published: 2024-07-15
Description: Thruk is a multibackend monitoring webinterface for Naemon, Nagios, Icinga and Shinken using the Livestatus API. This authenticated RCE in Thruk allows authorized users with network access to inject arbitrary commands via the URL parameter during PDF report generation. The Thruk web application does not properly process the url parameter when generating a PDF report. An authorized attacker with access to the reporting functionality could inject arbitrary commands that would be executed when the script /script/html2pdf.sh is called. The vulnerability can be exploited by an authorized user with network access. This issue has been addressed in version 3.16. Users are advised to upgrade. There are no known workarounds for this vulnerability.

CVSS Score: 9.9 (CRITICAL)
CWE: CWE-94
References: https://github.com/sni/Thruk/commit/7e7eb251e76718a07639c4781f0d959d817f173b; https://github.com/sni/Thruk/security/advisories/GHSA-r7gx-h738-4w6f; https://github.com/sni/Thruk/commit/7e7eb251e76718a07639c4781f0d959d817f173b