{"metadata": {"vulnerability": "CVE-2013-3587", "count": 53, "kinds": {"milestone": 8, "sighting": 15, "kev": 0, "other": 30}}, "data": [{"timestamp": "2012-09-20T00:00:00Z", "date_only": false, "value": "2012-09-20T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / certcc", "record": "CVE-2013-3587", "field": "containers.cna.datePublic"}, {"timestamp": "2013-05-21T00:00:00Z", "date_only": false, "value": "2013-05-21T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2013-3587", "field": "cveMetadata.dateReserved"}, {"timestamp": "2013-08-01T00:00:00Z", "date_only": false, "value": "2013-08-01T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202002-0569", "record": "VAR-202002-0569", "field": "sources_update_date.data.3.date"}, {"timestamp": "2013-08-02T00:00:00Z", "date_only": false, "value": "2013-08-02T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202002-0569", "record": "VAR-202002-0569", "field": "sources_release_date.data.0.date"}, {"timestamp": "2013-08-05T00:00:00Z", "date_only": false, "value": "2013-08-05T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202002-0569", "record": "VAR-202002-0569", "field": "sources_release_date.data.6.date"}, {"timestamp": "2013-08-08T00:00:00Z", "date_only": false, "value": "2013-08-08T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202002-0569", "record": "VAR-202002-0569", "field": "sources_update_date.data.0.date"}, {"timestamp": "2016-06-17T23:50:23Z", "date_only": false, "value": "2016-06-17T23:50:23", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202002-0569", "record": "VAR-202002-0569", "field": "sources_release_date.data.5.date"}, {"timestamp": "2020-02-21T00:00:00Z", "date_only": false, "value": "2020-02-21T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202002-0569", "record": "VAR-202002-0569", "field": "sources_release_date.data.1.date"}, {"timestamp": "2020-02-21T17:11:47Z", "date_only": false, "value": "2020-02-21T17:11:47.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2013-3587", "field": "cveMetadata.datePublished"}, {"timestamp": "2020-02-21T18:15:00Z", "date_only": false, "value": "2020-02-21T18:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-HH3M-FGXM-FQ25", "record": "GHSA-HH3M-FGXM-FQ25", "field": "database_specific.nvd_published_at"}, {"timestamp": "2020-02-21T18:15:00Z", "date_only": false, "value": "2020-02-21T18:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2013-3587", "record": "GSD-2013-3587", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2020-02-21T18:15:11.427Z", "date_only": false, "value": "2020-02-21T18:15:11.427000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202002-0569", "record": "VAR-202002-0569", "field": "sources_release_date.data.7.date"}, {"timestamp": "2020-02-21T18:15:11.427Z", "date_only": false, "value": "2020-02-21T18:15:11.427", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2013-3587", "record": "FKIE_CVE-2013-3587", "field": "published"}, {"timestamp": "2020-02-21T20:52:02Z", "date_only": false, "value": "2020-02-21T20:52:02.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/10017", "record": "CVE-2013-3587", "field": "creation_timestamp", "uuid": "ed494b31-4acb-4691-96ab-d4053141e981", "content": "ATENTION\u203c New - CVE-2013-3587\n\nThe HTTPS protocol, as used in unspecified web applications, can encrypt compressed data without properly obfuscating the length of the unencrypted data, which makes it easier for man-in-the-middle attackers to obtain plaintext secret values by observing length differences during a series of guesses in which a string in an HTTP request URL potentially matches an unknown string in an HTTP response body, aka a \"BREACH\" attack, a different issue than CVE-2012-4929.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/10017"}, {"timestamp": "2020-03-05T00:00:00Z", "date_only": false, "value": "2020-03-05T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202002-0569", "record": "VAR-202002-0569", "field": "sources_update_date.data.1.date"}, {"timestamp": "2021-04-10T00:06:26Z", "date_only": false, "value": "2021-04-10T00:06:26.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / certcc", "record": "CVE-2013-3587", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-04-12T00:00:00Z", "date_only": false, "value": "2021-04-12T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202002-0569", "record": "VAR-202002-0569", "field": "sources_update_date.data.5.date"}, {"timestamp": "2022-01-01T00:00:00Z", "date_only": false, "value": "2022-01-01T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202002-0569", "record": "VAR-202002-0569", "field": "sources_update_date.data.2.date"}, {"timestamp": "2022-01-01T19:44:00Z", "date_only": false, "value": "2022-01-01T19:44Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2013-3587", "record": "GSD-2013-3587", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-05-05T00:29:40Z", "date_only": false, "value": "2022-05-05T00:29:40Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-HH3M-FGXM-FQ25", "record": "GHSA-HH3M-FGXM-FQ25", "field": "published"}, {"timestamp": "2023-12-13T01:22:22.818Z", "date_only": false, "value": "2023-12-13T01:22:22.818313Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2013-3587", "record": "GSD-2013-3587", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-02-15T00:48:21Z", "date_only": false, "value": "2024-02-15T00:48:21.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/marianaalecu/3622", "record": "CVE-2013-3587", "field": "creation_timestamp", "uuid": "c2a0d51c-3985-4ba4-935c-58d3d9e7a548", "content": "====== Running in file batch mode with file=\"hosts/ips.txt\" ======\n\n==========================\n/root/Tools/testssl.sh/testssl.sh --quiet --color 0 -U --warnings=batch 77.81.101.111\n\n\n Start 2024-02-14 22:13:09                -->> 77.81.101.111:443 (77.81.101.111) <<--\n\n rDNS (77.81.101.111):   --\n Service detected:       HTTP\n\n\n Testing vulnerabilities\n\n Heartbleed (CVE-2014-0160)                not vulnerable (OK), no heartbeat extension\n CCS (CVE-2014-0224)                       not vulnerable (OK)\n Ticketbleed (CVE-2016-9244), experiment.  not vulnerable (OK)\n ROBOT                                     not vulnerable (OK)\n Secure Renegotiation (RFC 5746)           supported (OK)\n Secure Client-Initiated Renegotiation     not vulnerable (OK)\n CRIME, TLS (CVE-2012-4929)                not vulnerable (OK)\n BREACH (CVE-2013-3587)                    no gzip/deflate/compress/br HTTP compression (OK)  - only supplied \"/\" tested\n POODLE, SSL (CVE-2014-3566)               not vulnerable (OK)\n TLS_FALLBACK_SCSV (RFC 7507)              Downgrade attack prevention supported (OK)\n SWEET32 (CVE-2016-2183, CVE-2016-6329)    not vulnerable (OK)\n FREAK (CVE-2015-0204)                     not vulnerable (OK)\n DROWN (CVE-2016-0800, CVE-2016-0703)      not vulnerable on this host and port (OK)\n                                           make sure you don't use this certificate elsewhere with SSLv2 enabled services, see\n                                           https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=84359F27151AC6F21A23D865CCD523FADB0B99CE8E33878E67081E5BFF1D759C\n LOGJAM (CVE-2015-4000), experimental      common prime with 2048 bits detected: HAProxy (2048 bits),\n                                           but no DH EXPORT ciphers\n BEAST (CVE-2011-3389)                     TLS1: ECDHE-RSA-AES256-SHA\n                                                 HE-RSA-AES256-SHA\n                                                 CDHE-RSA-AES128-SHA\n                                                 HE-RSA-AES128-SHA\n                                                 ES256-SHA\n                                                 ES128-SHA\n                                           VULNERABLE -- but also supports higher protocols  TLSv1.1 TLSv1.2 (likely mitigated)\n LUCKY13 (CVE-2013-0169), experimental     potentially VULNERABLE, uses cipher block chaining (CBC) ciphers with TLS. Check patches\n Winshock (CVE-2014-6321), experimental    not vulnerable (OK)\n RC4 (CVE-2013-2566, CVE-2015-2808)        no RC4 ciphers detected (OK)\n\n\n Done 2024-02-14 22:15:15 [ 152s] -->> 77.81.101.111:443 (77.81.101.111) <<--\n\nYou got fucked RealitateaTV MOSSAD ISIS, Zionist Bastard \ud83d\ude01", "url": "https://t.me/marianaalecu/3622"}, {"timestamp": "2024-02-15T00:49:09Z", "date_only": false, "value": "2024-02-15T00:49:09.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/endsodomaofficial/7318", "record": "CVE-2013-3587", "field": "creation_timestamp", "uuid": "6f411fe3-37d7-42ba-8b9b-8db5cf367486", "content": "====== Running in file batch mode with file=\"hosts/ips.txt\" ======\n\n==========================\n/root/Tools/testssl.sh/testssl.sh --quiet --color 0 -U --warnings=batch 77.81.101.111\n\n\n Start 2024-02-14 22:13:09                -->> 77.81.101.111:443 (77.81.101.111) <<--\n\n rDNS (77.81.101.111):   --\n Service detected:       HTTP\n\n\n Testing vulnerabilities\n\n Heartbleed (CVE-2014-0160)                not vulnerable (OK), no heartbeat extension\n CCS (CVE-2014-0224)                       not vulnerable (OK)\n Ticketbleed (CVE-2016-9244), experiment.  not vulnerable (OK)\n ROBOT                                     not vulnerable (OK)\n Secure Renegotiation (RFC 5746)           supported (OK)\n Secure Client-Initiated Renegotiation     not vulnerable (OK)\n CRIME, TLS (CVE-2012-4929)                not vulnerable (OK)\n BREACH (CVE-2013-3587)                    no gzip/deflate/compress/br HTTP compression (OK)  - only supplied \"/\" tested\n POODLE, SSL (CVE-2014-3566)               not vulnerable (OK)\n TLS_FALLBACK_SCSV (RFC 7507)              Downgrade attack prevention supported (OK)\n SWEET32 (CVE-2016-2183, CVE-2016-6329)    not vulnerable (OK)\n FREAK (CVE-2015-0204)                     not vulnerable (OK)\n DROWN (CVE-2016-0800, CVE-2016-0703)      not vulnerable on this host and port (OK)\n                                           make sure you don't use this certificate elsewhere with SSLv2 enabled services, see\n                                           https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=84359F27151AC6F21A23D865CCD523FADB0B99CE8E33878E67081E5BFF1D759C\n LOGJAM (CVE-2015-4000), experimental      common prime with 2048 bits detected: HAProxy (2048 bits),\n                                           but no DH EXPORT ciphers\n BEAST (CVE-2011-3389)                     TLS1: ECDHE-RSA-AES256-SHA\n                                                 HE-RSA-AES256-SHA\n                                                 CDHE-RSA-AES128-SHA\n                                                 HE-RSA-AES128-SHA\n                                                 ES256-SHA\n                                                 ES128-SHA\n                                           VULNERABLE -- but also supports higher protocols  TLSv1.1 TLSv1.2 (likely mitigated)\n LUCKY13 (CVE-2013-0169), experimental     potentially VULNERABLE, uses cipher block chaining (CBC) ciphers with TLS. Check patches\n Winshock (CVE-2014-6321), experimental    not vulnerable (OK)\n RC4 (CVE-2013-2566, CVE-2015-2808)        no RC4 ciphers detected (OK)\n\n\n Done 2024-02-14 22:15:15 [ 152s] -->> 77.81.101.111:443 (77.81.101.111) <<--\n\nYou got fucked RealitateaTV MOSSAD ISIS, Zionist Bastard \ud83d\ude01", "url": "https://t.me/endsodomaofficial/7318"}, {"timestamp": "2024-02-15T02:55:48Z", "date_only": false, "value": "2024-02-15T02:55:48.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/fucklulzsecisrahell/6294", "record": "CVE-2013-3587", "field": "creation_timestamp", "uuid": "9d095021-8802-4b4a-8217-2ee8e4fd42d7", "content": "====== Running in file batch mode with file=\"hosts/ips.txt\" ======\n\n==========================\n/root/Tools/testssl.sh/testssl.sh --quiet --color 0 -U --warnings=batch 77.81.101.111\n\n\n Start 2024-02-14 22:13:09                -->> 77.81.101.111:443 (77.81.101.111) <<--\n\n rDNS (77.81.101.111):   --\n Service detected:       HTTP\n\n\n Testing vulnerabilities\n\n Heartbleed (CVE-2014-0160)                not vulnerable (OK), no heartbeat extension\n CCS (CVE-2014-0224)                       not vulnerable (OK)\n Ticketbleed (CVE-2016-9244), experiment.  not vulnerable (OK)\n ROBOT                                     not vulnerable (OK)\n Secure Renegotiation (RFC 5746)           supported (OK)\n Secure Client-Initiated Renegotiation     not vulnerable (OK)\n CRIME, TLS (CVE-2012-4929)                not vulnerable (OK)\n BREACH (CVE-2013-3587)                    no gzip/deflate/compress/br HTTP compression (OK)  - only supplied \"/\" tested\n POODLE, SSL (CVE-2014-3566)               not vulnerable (OK)\n TLS_FALLBACK_SCSV (RFC 7507)              Downgrade attack prevention supported (OK)\n SWEET32 (CVE-2016-2183, CVE-2016-6329)    not vulnerable (OK)\n FREAK (CVE-2015-0204)                     not vulnerable (OK)\n DROWN (CVE-2016-0800, CVE-2016-0703)      not vulnerable on this host and port (OK)\n                                           make sure you don't use this certificate elsewhere with SSLv2 enabled services, see\n                                           https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=84359F27151AC6F21A23D865CCD523FADB0B99CE8E33878E67081E5BFF1D759C\n LOGJAM (CVE-2015-4000), experimental      common prime with 2048 bits detected: HAProxy (2048 bits),\n                                           but no DH EXPORT ciphers\n BEAST (CVE-2011-3389)                     TLS1: ECDHE-RSA-AES256-SHA\n                                                 HE-RSA-AES256-SHA\n                                                 CDHE-RSA-AES128-SHA\n                                                 HE-RSA-AES128-SHA\n                                                 ES256-SHA\n                                                 ES128-SHA\n                                           VULNERABLE -- but also supports higher protocols  TLSv1.1 TLSv1.2 (likely mitigated)\n LUCKY13 (CVE-2013-0169), experimental     potentially VULNERABLE, uses cipher block chaining (CBC) ciphers with TLS. Check patches\n Winshock (CVE-2014-6321), experimental    not vulnerable (OK)\n RC4 (CVE-2013-2566, CVE-2015-2808)        no RC4 ciphers detected (OK)\n\n\n Done 2024-02-14 22:15:15 [ 152s] -->> 77.81.101.111:443 (77.81.101.111) <<--\n\nYou got fucked RealitateaTV MOSSAD ISIS, Zionist Bastard \ud83d\ude01", "url": "https://t.me/fucklulzsecisrahell/6294"}, {"timestamp": "2024-02-15T03:00:05Z", "date_only": false, "value": "2024-02-15T03:00:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/jokerssec/1351", "record": "CVE-2013-3587", "field": "creation_timestamp", "uuid": "91ea50fb-ce7e-4408-99ff-9fce095442af", "content": "====== Running in file batch mode with file=\"hosts/ips.txt\" ======\n\n==========================\n/root/Tools/testssl.sh/testssl.sh --quiet --color 0 -U --warnings=batch 77.81.101.111\n\n\n Start 2024-02-14 22:13:09                -->> 77.81.101.111:443 (77.81.101.111) <<--\n\n rDNS (77.81.101.111):   --\n Service detected:       HTTP\n\n\n Testing vulnerabilities\n\n Heartbleed (CVE-2014-0160)                not vulnerable (OK), no heartbeat extension\n CCS (CVE-2014-0224)                       not vulnerable (OK)\n Ticketbleed (CVE-2016-9244), experiment.  not vulnerable (OK)\n ROBOT                                     not vulnerable (OK)\n Secure Renegotiation (RFC 5746)           supported (OK)\n Secure Client-Initiated Renegotiation     not vulnerable (OK)\n CRIME, TLS (CVE-2012-4929)                not vulnerable (OK)\n BREACH (CVE-2013-3587)                    no gzip/deflate/compress/br HTTP compression (OK)  - only supplied \"/\" tested\n POODLE, SSL (CVE-2014-3566)               not vulnerable (OK)\n TLS_FALLBACK_SCSV (RFC 7507)              Downgrade attack prevention supported (OK)\n SWEET32 (CVE-2016-2183, CVE-2016-6329)    not vulnerable (OK)\n FREAK (CVE-2015-0204)                     not vulnerable (OK)\n DROWN (CVE-2016-0800, CVE-2016-0703)      not vulnerable on this host and port (OK)\n                                           make sure you don't use this certificate elsewhere with SSLv2 enabled services, see\n                                           https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=84359F27151AC6F21A23D865CCD523FADB0B99CE8E33878E67081E5BFF1D759C\n LOGJAM (CVE-2015-4000), experimental      common prime with 2048 bits detected: HAProxy (2048 bits),\n                                           but no DH EXPORT ciphers\n BEAST (CVE-2011-3389)                     TLS1: ECDHE-RSA-AES256-SHA\n                                                 HE-RSA-AES256-SHA\n                                                 CDHE-RSA-AES128-SHA\n                                                 HE-RSA-AES128-SHA\n                                                 ES256-SHA\n                                                 ES128-SHA\n                                           VULNERABLE -- but also supports higher protocols  TLSv1.1 TLSv1.2 (likely mitigated)\n LUCKY13 (CVE-2013-0169), experimental     potentially VULNERABLE, uses cipher block chaining (CBC) ciphers with TLS. Check patches\n Winshock (CVE-2014-6321), experimental    not vulnerable (OK)\n RC4 (CVE-2013-2566, CVE-2015-2808)        no RC4 ciphers detected (OK)\n\n\n Done 2024-02-14 22:15:15 [ 152s] -->> 77.81.101.111:443 (77.81.101.111) <<--\n\nYou got fucked RealitateaTV MOSSAD ISIS, Zionist Bastard \ud83d\ude01", "url": "https://t.me/jokerssec/1351"}, {"timestamp": "2024-02-15T03:02:07Z", "date_only": false, "value": "2024-02-15T03:02:07.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hex4gon1/908", "record": "CVE-2013-3587", "field": "creation_timestamp", "uuid": "3025a899-b969-43cc-ad5e-b5615880bc0f", "content": "====== Running in file batch mode with file=\"hosts/ips.txt\" ======\n\n==========================\n/root/Tools/testssl.sh/testssl.sh --quiet --color 0 -U --warnings=batch 77.81.101.111\n\n\n Start 2024-02-14 22:13:09                -->> 77.81.101.111:443 (77.81.101.111) <<--\n\n rDNS (77.81.101.111):   --\n Service detected:       HTTP\n\n\n Testing vulnerabilities\n\n Heartbleed (CVE-2014-0160)                not vulnerable (OK), no heartbeat extension\n CCS (CVE-2014-0224)                       not vulnerable (OK)\n Ticketbleed (CVE-2016-9244), experiment.  not vulnerable (OK)\n ROBOT                                     not vulnerable (OK)\n Secure Renegotiation (RFC 5746)           supported (OK)\n Secure Client-Initiated Renegotiation     not vulnerable (OK)\n CRIME, TLS (CVE-2012-4929)                not vulnerable (OK)\n BREACH (CVE-2013-3587)                    no gzip/deflate/compress/br HTTP compression (OK)  - only supplied \"/\" tested\n POODLE, SSL (CVE-2014-3566)               not vulnerable (OK)\n TLS_FALLBACK_SCSV (RFC 7507)              Downgrade attack prevention supported (OK)\n SWEET32 (CVE-2016-2183, CVE-2016-6329)    not vulnerable (OK)\n FREAK (CVE-2015-0204)                     not vulnerable (OK)\n DROWN (CVE-2016-0800, CVE-2016-0703)      not vulnerable on this host and port (OK)\n                                           make sure you don't use this certificate elsewhere with SSLv2 enabled services, see\n                                           https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=84359F27151AC6F21A23D865CCD523FADB0B99CE8E33878E67081E5BFF1D759C\n LOGJAM (CVE-2015-4000), experimental      common prime with 2048 bits detected: HAProxy (2048 bits),\n                                           but no DH EXPORT ciphers\n BEAST (CVE-2011-3389)                     TLS1: ECDHE-RSA-AES256-SHA\n                                                 HE-RSA-AES256-SHA\n                                                 CDHE-RSA-AES128-SHA\n                                                 HE-RSA-AES128-SHA\n                                                 ES256-SHA\n                                                 ES128-SHA\n                                           VULNERABLE -- but also supports higher protocols  TLSv1.1 TLSv1.2 (likely mitigated)\n LUCKY13 (CVE-2013-0169), experimental     potentially VULNERABLE, uses cipher block chaining (CBC) ciphers with TLS. Check patches\n Winshock (CVE-2014-6321), experimental    not vulnerable (OK)\n RC4 (CVE-2013-2566, CVE-2015-2808)        no RC4 ciphers detected (OK)\n\n\n Done 2024-02-14 22:15:15 [ 152s] -->> 77.81.101.111:443 (77.81.101.111) <<--\n\nYou got fucked RealitateaTV MOSSAD ISIS, Zionist Bastard \ud83d\ude01", "url": "https://t.me/hex4gon1/908"}, {"timestamp": "2024-02-15T03:24:44Z", "date_only": false, "value": "2024-02-15T03:24:44.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thegoodfatherag/8840", "record": "CVE-2013-3587", "field": "creation_timestamp", "uuid": "610c72ac-d92f-41a2-821f-ddc21a231158", "content": "====== Running in file batch mode with file=\"hosts/ips.txt\" ======\n\n==========================\n/root/Tools/testssl.sh/testssl.sh --quiet --color 0 -U --warnings=batch 77.81.101.111\n\n\n Start 2024-02-14 22:13:09                -->> 77.81.101.111:443 (77.81.101.111) <<--\n\n rDNS (77.81.101.111):   --\n Service detected:       HTTP\n\n\n Testing vulnerabilities\n\n Heartbleed (CVE-2014-0160)                not vulnerable (OK), no heartbeat extension\n CCS (CVE-2014-0224)                       not vulnerable (OK)\n Ticketbleed (CVE-2016-9244), experiment.  not vulnerable (OK)\n ROBOT                                     not vulnerable (OK)\n Secure Renegotiation (RFC 5746)           supported (OK)\n Secure Client-Initiated Renegotiation     not vulnerable (OK)\n CRIME, TLS (CVE-2012-4929)                not vulnerable (OK)\n BREACH (CVE-2013-3587)                    no gzip/deflate/compress/br HTTP compression (OK)  - only supplied \"/\" tested\n POODLE, SSL (CVE-2014-3566)               not vulnerable (OK)\n TLS_FALLBACK_SCSV (RFC 7507)              Downgrade attack prevention supported (OK)\n SWEET32 (CVE-2016-2183, CVE-2016-6329)    not vulnerable (OK)\n FREAK (CVE-2015-0204)                     not vulnerable (OK)\n DROWN (CVE-2016-0800, CVE-2016-0703)      not vulnerable on this host and port (OK)\n                                           make sure you don't use this certificate elsewhere with SSLv2 enabled services, see\n                                           https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=84359F27151AC6F21A23D865CCD523FADB0B99CE8E33878E67081E5BFF1D759C\n LOGJAM (CVE-2015-4000), experimental      common prime with 2048 bits detected: HAProxy (2048 bits),\n                                           but no DH EXPORT ciphers\n BEAST (CVE-2011-3389)                     TLS1: ECDHE-RSA-AES256-SHA\n                                                 HE-RSA-AES256-SHA\n                                                 CDHE-RSA-AES128-SHA\n                                                 HE-RSA-AES128-SHA\n                                                 ES256-SHA\n                                                 ES128-SHA\n                                           VULNERABLE -- but also supports higher protocols  TLSv1.1 TLSv1.2 (likely mitigated)\n LUCKY13 (CVE-2013-0169), experimental     potentially VULNERABLE, uses cipher block chaining (CBC) ciphers with TLS. Check patches\n Winshock (CVE-2014-6321), experimental    not vulnerable (OK)\n RC4 (CVE-2013-2566, CVE-2015-2808)        no RC4 ciphers detected (OK)\n\n\n Done 2024-02-14 22:15:15 [ 152s] -->> 77.81.101.111:443 (77.81.101.111) <<--\n\nYou got fucked RealitateaTV MOSSAD ISIS, Zionist Bastard \ud83d\ude01", "url": "https://t.me/thegoodfatherag/8840"}, {"timestamp": "2024-04-03T23:58:19Z", "date_only": false, "value": "2024-04-03T23:58:19Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-HH3M-FGXM-FQ25", "record": "GHSA-HH3M-FGXM-FQ25", "field": "modified"}, {"timestamp": "2024-08-06T16:14:56.365Z", "date_only": false, "value": "2024-08-06T16:14:56.365Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2013-3587", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-06T16:14:56.365Z", "date_only": false, "value": "2024-08-06T16:14:56.365Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2013-3587", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-09-09T00:00:00Z", "date_only": true, "value": "2024-09-09", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0754", "record": "CERTFR-2024-AVI-0754", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2024-09-09T22:00:00Z", "date_only": false, "value": "2024-09-09T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-2086", "record": "WID-SEC-W-2024-2086", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-09-09T22:00:00Z", "date_only": false, "value": "2024-09-09T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-2086", "record": "WID-SEC-W-2024-2086", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-09-09T22:00:00Z", "date_only": false, "value": "2024-09-09T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-2086", "record": "WID-SEC-W-2024-2086", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-09-09T22:00:00Z", "date_only": false, "value": "2024-09-09T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-2086", "record": "WID-SEC-W-2024-2086", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-09-10T00:00:00Z", "date_only": false, "value": "2024-09-10T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0754", "record": "CERTFR-2024-AVI-0754", "field": "last_revision_date"}, {"timestamp": "2024-09-10T00:00:00Z", "date_only": false, "value": "2024-09-10T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0754", "record": "CERTFR-2024-AVI-0754", "field": "initial_release_date"}, {"timestamp": "2024-09-10T00:00:00Z", "date_only": false, "value": "2024-09-10T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0754", "record": "CERTFR-2024-AVI-0754", "field": "revisions.0.revision_date"}, {"timestamp": "2024-09-10T10:03:41.307Z", "date_only": false, "value": "2024-09-10T10:03:41.307+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-2086", "record": "WID-SEC-W-2024-2086", "field": "document.tracking.generator.date"}, {"timestamp": "2024-09-19T11:37:39.757Z", "date_only": false, "value": "2024-09-19T11:37:39.757598Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2024-0378", "record": "NCSC-2024-0378", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-09-19T11:37:39.757Z", "date_only": false, "value": "2024-09-19T11:37:39.757598Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2024-0378", "record": "NCSC-2024-0378", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-09-19T11:37:39.757Z", "date_only": false, "value": "2024-09-19T11:37:39.757598Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2024-0378", "record": "NCSC-2024-0378", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-11-21T01:53:56.283Z", "date_only": false, "value": "2024-11-21T01:53:56.283000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202002-0569", "record": "VAR-202002-0569", "field": "sources_update_date.data.6.date"}, {"timestamp": "2024-11-23T19:58:10.169Z", "date_only": false, "value": "2024-11-23T19:58:10.169000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202002-0569", "record": "VAR-202002-0569", "field": "last_update_date"}, {"timestamp": "2024-12-08T10:53:05Z", "date_only": false, "value": "2024-12-08T10:53:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BABATATASASA/7285", "record": "CVE-2013-3587", "field": "creation_timestamp", "uuid": "734373c0-3ae2-42d3-8016-32b5a1955b03", "content": "CVSS Vector:\nAV:N/AC:M/Au:N/C:P/I:N/A:N\n\nCross-Ref:Common Vulnerability Exposure (CVE) ID: CVE-2013-3587\nhttp://breachattack.com/\nhttp://github.com/meldium/breach-mitigation-rails\nhttp://security.stackexchange.com/questions/20406/is-http-compression-safe#20407\nhttp://slashdot.org/story/13/08/05/233216\nhttp://www.iacr.org/cryptodb/archive/2002/FSE/3091/3091.pdf\nhttp://www.kb.cert.org/vuls/id/987798\nhttps://bugzilla.redhat.com/show_bug.cgi?id=995168\nhttps://hackerone.com/reports/254895\nhttps://support.f5.com/csp/article/K14634\nhttps://www.blackhat.com/us-13/briefings.html#Prado\nhttps://www.djangoproject.com/weblog/2013/aug/06/breach-and-django/\nhttps://lists.apache.org/thread.html/r7f0e9cfd166934172d43ca4c272b8bdda4a343036229d9937affd1e1@%3Cdev.httpd.apache.org%3E\nCopyrighty \ud83d\udc1d", "url": "https://t.me/BABATATASASA/7285"}, {"timestamp": "2025-09-23T01:16:09.278Z", "date_only": false, "value": "2025-09-23T01:16:09.278669Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/maida.kim/post/3lzhqr6cdos2o", "record": "CVE-2013-3587", "field": "creation_timestamp", "uuid": "1920e7c9-dc40-49ec-9909-4f79fd6a59b7", "url": "https://bsky.app/profile/maida.kim/post/3lzhqr6cdos2o"}, {"timestamp": "2026-03-01T01:43:27Z", "date_only": false, "value": "2026-03-01T01:43:27.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/aw-junaid/9f4a67eb2ab569d724a8a8910d2e972f", "record": "CVE-2013-3587", "field": "creation_timestamp", "uuid": "3e06124c-9233-4a70-abf3-6e82301f8e02", "url": "https://gist.github.com/aw-junaid/9f4a67eb2ab569d724a8a8910d2e972f"}, {"timestamp": "2026-06-16T23:55:28.233Z", "date_only": false, "value": "2026-06-16T23:55:28.233", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2013-3587", "record": "FKIE_CVE-2013-3587", "field": "lastModified"}, {"timestamp": "2026-07-02T07:27:37.131Z", "date_only": false, "value": "2026-07-02T07:27:37.131292Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/SixthHunter/03cef581e03578d6e37a331dc3a3abad", "record": "CVE-2013-3587", "field": "creation_timestamp", "uuid": "77acb906-641b-4053-a94d-bffb68e871c4", "url": "https://gist.github.com/SixthHunter/03cef581e03578d6e37a331dc3a3abad"}, {"timestamp": "2026-08-16T19:00:05.127Z", "date_only": false, "value": "2026-08-16T19:00:05.127956Z", "kind": "sighting", "label": "Seen", "source": "Telegram/KnPRe-0wwSDGmzuiFHO2soVdLfj9s5zDzyV73WxZoIG8e68", "record": "CVE-2013-3587", "field": "creation_timestamp", "uuid": "8aee8eee-0db5-477b-897e-e4fc00e19012"}, {"timestamp": "2026-08-25T16:06:29.324Z", "date_only": false, "value": "2026-08-25T16:06:29.324193Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/bbrk364/406ab37feb8b8752f624c07c13b3bb68", "record": "CVE-2013-3587", "field": "creation_timestamp", "uuid": "beff2b7d-1cd9-4cf6-9ff6-b71b4496806c", "url": "https://gist.github.com/bbrk364/406ab37feb8b8752f624c07c13b3bb68"}, {"timestamp": "2026-10-03T11:44:41Z", "date_only": false, "value": "2026-10-03T11:44:41.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/cuteone394/e9c3379d998e3fddb1ec20292482b0d0", "record": "CVE-2013-3587", "field": "creation_timestamp", "uuid": "d2872176-e9ca-4133-928e-b762fe33a52c", "url": "https://gist.github.com/cuteone394/e9c3379d998e3fddb1ec20292482b0d0"}, {"timestamp": "2026-10-07T04:34:50Z", "date_only": false, "value": "2026-10-07T04:34:50.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/citadelculture/72bf2b2c6c56cabad61da284b66f59bf", "record": "CVE-2013-3587", "field": "creation_timestamp", "uuid": "e04eab78-892c-4f86-a2aa-2e15c5385dbe", "url": "https://gist.github.com/citadelculture/72bf2b2c6c56cabad61da284b66f59bf"}]}