{"metadata": {"vulnerability": "CVE-2017-11317", "count": 56, "kinds": {"milestone": 5, "sighting": 21, "kev": 11, "other": 19}}, "data": [{"timestamp": "2017-07-13T00:00:00Z", "date_only": false, "value": "2017-07-13T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2017-11317", "field": "cveMetadata.dateReserved"}, {"timestamp": "2017-08-23T00:00:00Z", "date_only": false, "value": "2017-08-23T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / mitre", "record": "CVE-2017-11317", "field": "containers.cna.datePublic"}, {"timestamp": "2017-08-23T17:00:00Z", "date_only": false, "value": "2017-08-23T17:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2017-11317", "field": "cveMetadata.datePublished"}, {"timestamp": "2017-08-23T17:29:00Z", "date_only": false, "value": "2017-08-23T17:29:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-9V96-J7X8-6WJV", "record": "GHSA-9V96-J7X8-6WJV", "field": "database_specific.nvd_published_at"}, {"timestamp": "2017-08-23T17:29:00Z", "date_only": false, "value": "2017-08-23T17:29Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2017-11317", "record": "GSD-2017-11317", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2017-08-23T17:29:00.177Z", "date_only": false, "value": "2017-08-23T17:29:00.177", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2017-11317", "record": "FKIE_CVE-2017-11317", "field": "published"}, {"timestamp": "2017-08-24T00:00:00Z", "date_only": true, "value": "2017-08-24", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2017-29530", "record": "CNVD-2017-29530", "field": "submitTime"}, {"timestamp": "2017-10-11T00:00:00Z", "date_only": true, "value": "2017-10-11", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2017-29530", "record": "CNVD-2017-29530", "field": "openTime"}, {"timestamp": "2020-10-20T15:57:21Z", "date_only": false, "value": "2020-10-20T15:57:21.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/42d04e94-bf5b-427d-acc8-f5d740675941", "record": "CVE-2017-11317", "field": "creation_timestamp", "uuid": "029584a6-d887-403f-bd44-2ddc3fc16a94"}, {"timestamp": "2020-10-20T15:58:04Z", "date_only": false, "value": "2020-10-20T15:58:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/d925a2ee-e7cf-46f6-bec1-ad8e19122730", "record": "CVE-2017-11317", "field": "creation_timestamp", "uuid": "1b6c56b0-21e3-41b9-a6ba-4ddbfc1c649f"}, {"timestamp": "2020-10-20T18:32:21Z", "date_only": false, "value": "2020-10-20T18:32:21.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/telerik_rau_deserialization.rb", "record": "CVE-2017-11317", "field": "creation_timestamp", "uuid": "0013351b-2e2a-4fb3-b048-6fcad6532879", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/telerik_rau_deserialization.rb"}, {"timestamp": "2020-10-20T21:06:21Z", "date_only": false, "value": "2020-10-20T21:06:21.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2017-11317", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2020-10-20T22:15:00Z", "date_only": false, "value": "2020-10-20T22:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2017-11317", "record": "GSD-2017-11317", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2021-03-18T00:00:00Z", "date_only": false, "value": "2021-03-18T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-21-077-03", "record": "ICSA-21-077-03", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-03-18T00:00:00Z", "date_only": false, "value": "2021-03-18T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-21-077-03", "record": "ICSA-21-077-03", "field": "document.tracking.initial_release_date"}, {"timestamp": "2021-03-18T00:00:00Z", "date_only": false, "value": "2021-03-18T00:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-21-077-03", "record": "ICSA-21-077-03", "field": "document.tracking.current_release_date"}, {"timestamp": "2022-04-11T00:00:00Z", "date_only": false, "value": "2022-04-11T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2017-11317", "field": "timestamps.asserted_at", "uuid": "127a9581-d4ff-4fb7-90bb-3400a3f781ca", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-04-11T00:00:00Z", "date_only": false, "value": "2022-04-11T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2017-11317", "field": "timestamps.asserted_at", "uuid": "2c24eb13-b440-465b-8038-ead36782fa02", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-04-11T00:00:00Z", "date_only": true, "value": "2022-04-11", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2017-11317", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2022-04-11T00:00:00Z", "date_only": false, "value": "2022-04-11T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2017-11317", "field": "evidence.0.details.added_date", "uuid": "2c24eb13-b440-465b-8038-ead36782fa02", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-04-11T00:00:00Z", "date_only": true, "value": "2022-04-11", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2017-11317", "field": "evidence.0.details.date_added", "uuid": "127a9581-d4ff-4fb7-90bb-3400a3f781ca", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-04-11T00:00:00Z", "date_only": false, "value": "2022-04-11T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2017-11317", "field": "timestamps.first_seen_at", "uuid": "127a9581-d4ff-4fb7-90bb-3400a3f781ca", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-04-11T00:00:00Z", "date_only": false, "value": "2022-04-11T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2017-11317", "field": "timestamps.first_seen_at", "uuid": "2c24eb13-b440-465b-8038-ead36782fa02", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-04-11T00:00:00Z", "date_only": false, "value": "2022-04-11T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2017-11317", "field": "status.status_updated_at", "uuid": "127a9581-d4ff-4fb7-90bb-3400a3f781ca", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-04-11T00:00:00Z", "date_only": false, "value": "2022-04-11T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2017-11317", "field": "status.status_updated_at", "uuid": "2c24eb13-b440-465b-8038-ead36782fa02", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-04-11T00:00:00Z", "date_only": false, "value": "2022-04-11T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2017-11317", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2022-05-02T00:00:00Z", "date_only": true, "value": "2022-05-02", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2017-11317", "field": "evidence.0.details.due_date", "uuid": "127a9581-d4ff-4fb7-90bb-3400a3f781ca", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-05-13T01:14:24Z", "date_only": false, "value": "2022-05-13T01:14:24Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-9V96-J7X8-6WJV", "record": "GHSA-9V96-J7X8-6WJV", "field": "published"}, {"timestamp": "2022-07-08T00:15:52Z", "date_only": false, "value": "2022-07-08T00:15:52.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/45793", "record": "CVE-2017-11317", "field": "creation_timestamp", "uuid": "42f1a1d3-cae1-427c-bfd2-cc27a551d8dc", "content": "\u203c CVE-2021-29281 \u203c\n\nFile upload vulnerability in GFI Mail Archiver versions up to and including 15.1 via insecure implementation of Telerik Web UI plugin which is affected by CVE-2014-2217, and CVE-2017-11317.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/45793"}, {"timestamp": "2023-03-17T15:50:29Z", "date_only": false, "value": "2023-03-17T15:50:29.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ics_cert/719", "record": "CVE-2017-11317", "field": "creation_timestamp", "uuid": "e8187e17-f68f-4aad-ba8b-802d8da3907d", "content": "\u062d\u0645\u0644\u0647 \u0633\u0627\u06cc\u0628\u0631\u06cc \u0627\u062e\u062a\u0635\u0627\u0635\u06cc \u0628\u0647 \u062f\u0648\u0644\u062a \u0641\u062f\u0631\u0627\u0644 \u0627\u06cc\u0627\u0644\u0627\u062a \u0645\u062a\u062d\u062f\u0647\n\n \u062f\u0648\u0644\u062a \u0641\u062f\u0631\u0627\u0644 \u0627\u06cc\u0627\u0644\u0627\u062a \u0645\u062a\u062d\u062f\u0647 \u0645\u0648\u0631\u062f \u062d\u0645\u0644\u0647 \u0633\u0627\u06cc\u0628\u0631\u06cc \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647 \u0627\u0633\u062a \u06a9\u0647 \u0627\u0632 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0627\u062a \u0646\u062a \u062f\u0631 \u0633\u0631\u0648\u0631 IIS Telerik \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a.  \u0647\u06a9\u0631\u0647\u0627 \u0627\u0632 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc deserialization .NET (CVE-2019-18935) \u0628\u0631\u0627\u06cc \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0646 \u062f\u0631 \u0645\u0639\u0631\u0636 \u0632\u0645\u0627\u0646\u06cc \u06a9\u0647 \u06a9\u0644\u06cc\u062f\u0647\u0627\u06cc \u0631\u0645\u0632\u06af\u0630\u0627\u0631\u06cc \u0628\u0647 \u062f\u0644\u06cc\u0644 \u0648\u062c\u0648\u062f\u00a0CVE-2017-11317 \u0634\u0646\u0627\u062e\u062a\u0647 \u0634\u062f\u0647\u200c\u0627\u0646\u062f\u060c \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f\u0646\u062f.\n\n \u0639\u0645\u0644\u06cc\u0627\u062a \u0645\u0634\u062a\u0631\u06a9\u06cc \u06a9\u0647 \u062a\u0648\u0633\u0637 DHS\u060c FCEB \u0648 CISA \u0627\u0646\u062c\u0627\u0645 \u0634\u062f\u060c \u0686\u0646\u062f\u06cc\u0646 \u062a\u0644\u0627\u0634 \u0628\u0631\u0627\u06cc \u062d\u0645\u0644\u0647 \u0633\u0627\u06cc\u0628\u0631\u06cc \u0628\u0647 \u0633\u0631\u0648\u0631 IIS \u062f\u0648\u0644\u062a \u0627\u06cc\u0627\u0644\u0627\u062a \u0645\u062a\u062d\u062f\u0647 \u0631\u0627 \u0628\u0627 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc Telerik deserialization \u062f\u0627\u062a \u0646\u062a \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u06a9\u0631\u062f.\n\n \u0686\u0646\u062f\u06cc\u0646 \u06af\u0631\u0648\u0647 \u0647\u06a9\u0631 \u0627\u06cc\u0646 \u062d\u0645\u0644\u0647 \u0631\u0627 \u0622\u063a\u0627\u0632 \u06a9\u0631\u062f\u0646\u062f\u060c \u0627\u0632 \u062c\u0645\u0644\u0647 \u0628\u0627\u0632\u06cc\u06af\u0631\u0627\u0646 APT.  \u0628\u0647\u0631\u0647 \u0628\u0631\u062f\u0627\u0631\u06cc \u0645\u0648\u0641\u0642\u06cc\u062a \u0622\u0645\u06cc\u0632 \u0627\u0632 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc \u062f\u0647\u062f \u062a\u0627 \u06cc\u06a9 \u06a9\u062f \u062f\u0644\u062e\u0648\u0627\u0647 \u0631\u0627 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u062f\u0631 \u0634\u0628\u06a9\u0647 \u0622\u0698\u0627\u0646\u0633 \u0634\u0639\u0628\u0647 \u0627\u062c\u0631\u0627\u06cc\u06cc \u063a\u06cc\u0631\u0646\u0638\u0627\u0645\u06cc \u0641\u062f\u0631\u0627\u0644 (FCEB) \u0627\u062c\u0631\u0627 \u06a9\u0646\u0646\u062f\u060c \u062c\u0627\u06cc\u06cc \u06a9\u0647 \u0631\u0627\u0628\u0637 \u06a9\u0627\u0631\u0628\u0631\u06cc \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631 Telerik (UI) \u062f\u0631 \u0648\u0628 \u0633\u0631\u0648\u0631 IIS \u0627\u0631\u0627\u0626\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a.\n\n IOC \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0634\u062f\u0647 \u062a\u0648\u0633\u0637 \u0622\u0698\u0627\u0646\u0633\u200c\u0647\u0627\u06cc \u0641\u062f\u0631\u0627\u0644 \u0645\u062a\u0639\u0644\u0642 \u0628\u0647 \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647\u200c\u0627\u06cc \u0627\u0633\u062a \u06a9\u0647 \u0631\u0627\u0628\u0637 \u06a9\u0627\u0631\u0628\u0631\u06cc Telerik \u0631\u0627 \u0628\u0631\u0627\u06cc \u0633\u0627\u062e\u062a\u200c\u0647\u0627\u06cc ASP.NET AJAX \u0642\u0628\u0644 \u0627\u0632 R1 2020 (2020.1.114) \u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u0645\u06cc\u200c\u06a9\u0646\u062f.\n\n \u0627\u06cc\u0646 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u0628\u0631\u0627\u06cc \u062f\u0633\u062a\u06cc\u0627\u0628\u06cc \u0628\u0647 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u062f\u0631 \u0633\u0631\u0648\u0631 IIS \u06a9\u0647 Windows Server 2003 SP2 \u0631\u0627 \u0627\u062c\u0631\u0627 \u0645\u06cc \u06a9\u0646\u062f\u060c \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0634\u062f.  \u0628\u0631\u062f\u0627\u0631 \u062d\u0645\u0644\u0647 \u0627\u0632 \u0637\u0631\u06cc\u0642 Telerik UI \u0628\u0631\u0627\u06cc \u0633\u0627\u062e\u062a\u200c\u0647\u0627\u06cc ASP.NET AJAX \u0642\u0628\u0644 \u0627\u0632 R1 2020 (2020.1.114) \u0645\u0648\u0631\u062f \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a.\n\n \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u0632 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u062a\u0627\u0628\u0639 deserialization.NET \u0627\u0632 \u06a9\u0644\u0627\u0633 RadAsyncUpload Telerik \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f\u0646\u062f\u060c \u06a9\u0647 \u0627\u0632 \u0622\u0646 \u0628\u0631\u0627\u06cc \u0627\u062c\u0631\u0627\u06cc \u06cc\u06a9 \u062d\u0645\u0644\u0647 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0628\u0631 \u0631\u0648\u06cc \u0633\u0631\u0648\u0631 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 IIS \u0628\u0627 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u062a\u0627\u0628\u0639 deserialization.NET \u0627\u0632 Telerik's RadA.\n\n \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062a\u0648\u0633\u0637 \u0686\u0646\u062f\u06cc\u0646 \u0622\u0698\u0627\u0646\u0633 \u0627\u0645\u0646\u06cc\u062a \u0645\u0644\u06cc \u0637\u06cc \u06cc\u06a9 \u0639\u0645\u0644\u06cc\u0627\u062a \u0628\u06cc\u0646 \u0633\u0627\u0632\u0645\u0627\u0646\u06cc \u0628\u0647 \u0646\u0627\u0645 Operation Pacifier \u06a9\u0647 \u0628\u06cc\u0646 \u0646\u0648\u0627\u0645\u0628\u0631 \u06f2\u06f0\u06f2\u06f2 \u062a\u0627 \u0627\u0648\u0627\u06cc\u0644 \u0698\u0627\u0646\u0648\u06cc\u0647 \u06f2\u06f0\u06f2\u06f3 \u0627\u0646\u062c\u0627\u0645 \u0634\u062f\u060c \u0628\u0627 \u0647\u062f\u0641 \u0642\u0631\u0627\u0631 \u062f\u0627\u062f\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc deserialization .NET (CVE-2019-18935) \u062f\u0631 \u062a\u0627\u0628\u0639 RadAsyncUpload \u067e\u06cc\u062f\u0627 \u0634\u062f.  \u0647\u0646\u06af\u0627\u0645\u06cc \u06a9\u0647 \u06a9\u0644\u06cc\u062f\u0647\u0627\u06cc \u0631\u0645\u0632\u06af\u0630\u0627\u0631\u06cc \u0628\u0647 \u062f\u0644\u06cc\u0644 \u0648\u062c\u0648\u062f CVE-2017-11317 \u0634\u0646\u0627\u062e\u062a\u0647 \u0634\u062f\u0647 \u0628\u0627\u0634\u0646\u062f\u060c \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u0632 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0646 \u062f\u0631 \u0645\u0639\u0631\u0636 \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc \u06a9\u0646\u0646\u062f.\n\n \u0627\u06cc\u0646 \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u0646\u062c\u0631 \u0628\u0647 \u062f\u0633\u062a\u0631\u0633\u06cc \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u0628\u0647 \u0641\u0627\u06cc\u0644 \u0647\u0627\u06cc \u0630\u062e\u06cc\u0631\u0647 \u0634\u062f\u0647 \u062f\u0631 \u0633\u06cc\u0633\u062a\u0645 \u0622\u0633\u06cc\u0628 \u062f\u06cc\u062f\u0647 \u0628\u0647 \u062f\u0644\u06cc\u0644 \u0631\u0645\u0632\u06af\u0630\u0627\u0631\u06cc \u0646\u0627\u062f\u0631\u0633\u062a \u062f\u0627\u062f\u0647 \u0647\u0627\u06cc \u0630\u062e\u06cc\u0631\u0647 \u0634\u062f\u0647 \u062a\u0648\u0633\u0637 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0634\u062f.  \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647\u200c\u0647\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0686\u0646\u062f\u06cc\u0646 \u0633\u0627\u0632\u0645\u0627\u0646 \u062f\u0631 \u0633\u0631\u0627\u0633\u0631 \u0627\u06cc\u0627\u0644\u0627\u062a \u0645\u062a\u062d\u062f\u0647\u060c \u06a9\u0627\u0646\u0627\u062f\u0627 \u0648 \u0627\u0631\u0648\u067e\u0627 \u06a9\u0647 \u0634\u0628\u06a9\u0647\u200c\u0647\u0627\u06cc \u0632\u06cc\u0631\u0633\u0627\u062e\u062a \u062d\u06cc\u0627\u062a\u06cc \u062f\u0631 \u0622\u0646 \u0642\u0631\u0627\u0631 \u062f\u0627\u0631\u0646\u062f\u060c \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0634\u062f\u0646\u062f.\n\n \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0645\u0627\u0631\u0633 2023 \u06a9\u0634\u0641 \u0648 \u062a\u0648\u0633\u0637 \u0645\u0631\u06a9\u0632 \u067e\u0627\u0633\u062e\u06af\u0648\u06cc\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0645\u0627\u06cc\u06a9\u0631\u0648\u0633\u0627\u0641\u062a \u0645\u0646\u062a\u0634\u0631 \u0634\u062f.\n\n \u0627\u06cc\u0646 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u0628\u0631\u0627\u06cc \u0628\u0647 \u062f\u0633\u062a \u0622\u0648\u0631\u062f\u0646 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u062f\u0631 \u0633\u0631\u0648\u0631 IIS \u062f\u0648\u0644\u062a \u0627\u06cc\u0627\u0644\u0627\u062a \u0645\u062a\u062d\u062f\u0647 \u0628\u0627 \u0628\u0647\u0631\u0647 \u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc Telerik deserialization .NET (CVE-2019-18935) \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0634\u062f.  \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0627 \u0646\u0627\u0645 CVE-2019-18935\u060c \u062a\u0627\u0628\u0639 RadAsyncUpload \u0634\u0646\u0627\u062e\u062a\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f\u060c \u06a9\u0647 \u0628\u0627\u0639\u062b \u0645\u06cc\u200c\u0634\u0648\u062f \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0628\u0647 \u062f\u0644\u06cc\u0644 \u0648\u062c\u0648\u062f CVE-2017-11317\u060c \u0627\u0632 \u0646\u0648\u0631\u062f\u0647\u06cc \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u0646\u062f\u060c \u0632\u0645\u0627\u0646\u06cc \u06a9\u0647 \u06a9\u0644\u06cc\u062f\u0647\u0627\u06cc \u0631\u0645\u0632\u06af\u0630\u0627\u0631\u06cc \u0634\u0646\u0627\u062e\u062a\u0647 \u0634\u062f\u0647\u200c\u0627\u0646\u062f.\n\n \u0628\u0631\u0627\u06cc \u062c\u0632\u0626\u06cc\u0627\u062a \u0628\u06cc\u0634\u062a\u0631: - https://lnkd.in/dSM-di75\n\n#infosec #websecurity #pentesting #securitysearch #ethicalhacking #\u0622\u0633\u06cc\u0628_\u067e\u0630\u06cc\u0631\u06cc \n\n\ud83d\udc6e\u200d\u2640\ufe0f\ud83d\udc6e\u200d\u2640\ufe0f \u0628\u0627\u0632\u0646\u0634\u0631 \u0645\u0637\u0627\u0644\u0628 \u0627\u06cc\u0646 \u06a9\u0627\u0646\u0627\u0644 \u0635\u0631\u0641\u0627 \u0628\u0627 \u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0648 \u0622\u062f\u0631\u0633 \u06a9\u0627\u0645\u0644 \u06a9\u0627\u0646\u0627\u0644 \u0645\u062c\u0627\u0632 \u0645\u06cc\u0628\u0627\u0634\u062f.\n\n\ud83c\udfed\u0648\u0628\u0633\u0627\u06cc\u062a \u0648 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n\n\u0627\u062f\u0645\u06cc\u0646:\nhttps://t.me/pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u062a\u0648\u06cc\u06cc\u062a\u0631:\nhttps://twitter.com/icscerti", "url": "https://t.me/ics_cert/719"}, {"timestamp": "2023-06-14T21:10:03Z", "date_only": false, "value": "2023-06-14T21:10:03.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2017-11317", "field": "creation_timestamp", "uuid": "819f0de1-95e2-4562-8c24-dbf25fc8090c"}, {"timestamp": "2023-06-17T09:49:44Z", "date_only": false, "value": "2023-06-17T09:49:44.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/0f91d6dd-6e90-4ff4-b535-99c3ac07aedf", "record": "CVE-2017-11317", "field": "creation_timestamp", "uuid": "00d71ce9-55a7-4ea4-a3d4-b750f7fcf473"}, {"timestamp": "2023-12-05T00:11:16Z", "date_only": false, "value": "2023-12-05T00:11:16.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1341", "record": "CVE-2017-11317", "field": "creation_timestamp", "uuid": "877517e5-8bca-45ce-b1d2-0218a7dd1b03", "content": "#ExploitObserverAlert\n\nCVE-2017-11317\n\nDESCRIPTION: Exploit Observer has 20 entries related to CVE-2017-11317. Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUpload encryption, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code.\n\nFIRST-EPSS: 0.108060000\nNVD-IS: 5.9\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/1341"}, {"timestamp": "2023-12-13T01:21:15.438Z", "date_only": false, "value": "2023-12-13T01:21:15.438466Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2017-11317", "record": "GSD-2017-11317", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-05T18:05:30.568Z", "date_only": false, "value": "2024-08-05T18:05:30.568Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2017-11317", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-11-14T06:10:06Z", "date_only": false, "value": "2024-11-14T06:10:06.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/cbb224f6-2aa0-4ea6-9d44-7bc802a4c19a", "record": "CVE-2017-11317", "field": "creation_timestamp", "uuid": "79f50a96-a4f6-4d97-9bda-8eb819450a8e"}, {"timestamp": "2024-12-24T20:30:15.583Z", "date_only": false, "value": "2024-12-24T20:30:15.583264Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971501", "record": "CVE-2017-11317", "field": "creation_timestamp", "uuid": "90cf7420-3370-4ef2-a63a-a5b2e27de57b", "url": "https://feedsin.space/feed/CISAKevBot/items/2971501"}, {"timestamp": "2025-02-06T02:42:30Z", "date_only": false, "value": "2025-02-06T02:42:30.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/QxUmQQxHqCkxTaysLBNBbpuc19gaa6hhliNR9D5GoirJ5b8y", "record": "CVE-2017-11317", "field": "creation_timestamp", "uuid": "ad9928c6-ee30-437a-bddb-ff5b6a198fa6"}, {"timestamp": "2025-02-06T03:13:43Z", "date_only": false, "value": "2025-02-06T03:13:43.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2017-11317", "field": "creation_timestamp", "uuid": "400c3c68-66c5-4c2a-b06a-ca69d799794a"}, {"timestamp": "2025-02-07T14:08:42.564Z", "date_only": false, "value": "2025-02-07T14:08:42.564379Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2017-11317", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-02-07T14:08:42.564Z", "date_only": false, "value": "2025-02-07T14:08:42.564379Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2017-11317", "record": "FKIE_CVE-2017-11317", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-23T02:10:14Z", "date_only": false, "value": "2025-02-23T02:10:14.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2017-11317", "field": "creation_timestamp", "uuid": "35363237-2102-4704-b186-8d047b5ab972"}, {"timestamp": "2025-02-23T04:09:52Z", "date_only": false, "value": "2025-02-23T04:09:52.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2017-11317", "field": "creation_timestamp", "uuid": "e813cc11-8c7b-4937-b8c7-e3b373fe60c0"}, {"timestamp": "2025-07-03T03:00:00Z", "date_only": false, "value": "2025-07-03T03:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-468/", "record": "CVE-2017-11317", "field": "creation_timestamp", "uuid": "cc6abb0c-e89d-4ea7-8021-0fbc43985920", "url": "http://www.zerodayinitiative.com/advisories/ZDI-25-468/"}, {"timestamp": "2025-10-21T23:55:35.342Z", "date_only": false, "value": "2025-10-21T23:55:35.342Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2017-11317", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:55:35.342Z", "date_only": false, "value": "2025-10-21T23:55:35.342Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2017-11317", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:31:24Z", "date_only": false, "value": "2025-10-22T00:31:24Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-9V96-J7X8-6WJV", "record": "GHSA-9V96-J7X8-6WJV", "field": "modified"}, {"timestamp": "2026-02-02T12:27:53.215Z", "date_only": false, "value": "2026-02-02T12:27:53.215758Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/69f21464-7f92-47fa-9176-befcfeb86555", "record": "CVE-2017-11317", "field": "creation_timestamp", "uuid": "9a5dfc7d-5ca2-420f-951d-59fc7920011d", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/69f21464-7f92-47fa-9176-befcfeb86555"}, {"timestamp": "2026-02-02T12:27:53.215Z", "date_only": false, "value": "2026-02-02T12:27:53.215758Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/69f21464-7f92-47fa-9176-befcfeb86555", "record": "CVE-2017-11317", "field": "creation_timestamp", "uuid": "f24da1ad-7cab-4ef8-9f67-75d308ac8d1d", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/69f21464-7f92-47fa-9176-befcfeb86555"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2017-11317", "field": "timestamps.recorded_at", "uuid": "127a9581-d4ff-4fb7-90bb-3400a3f781ca", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-17T01:01:36.190Z", "date_only": false, "value": "2026-06-17T01:01:36.190", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2017-11317", "record": "FKIE_CVE-2017-11317", "field": "lastModified"}, {"timestamp": "2026-06-19T12:47:19.020Z", "date_only": false, "value": "2026-06-19T12:47:19.020360Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b7d025f8-afec-4a50-9d57-25b8e0e298d7", "record": "CVE-2017-11317", "field": "creation_timestamp", "uuid": "8015a390-2245-4870-b0c1-57e96a7fd2ee", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b7d025f8-afec-4a50-9d57-25b8e0e298d7"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2017-11317", "field": "timestamps.recorded_at", "uuid": "2c24eb13-b440-465b-8038-ead36782fa02", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:13:47.492Z", "date_only": false, "value": "2026-06-23T11:13:47.492733Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/2c24eb13-b440-465b-8038-ead36782fa02", "record": "CVE-2017-11317", "field": "creation_timestamp", "uuid": "c1295e81-0c34-4970-8666-4d4695920d45", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/2c24eb13-b440-465b-8038-ead36782fa02"}, {"timestamp": "2026-06-23T14:05:17.634Z", "date_only": false, "value": "2026-06-23T14:05:17.634501Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0fb8de65-0291-4f97-96c0-096a3f425008", "record": "CVE-2017-11317", "field": "creation_timestamp", "uuid": "7e33e8bb-a450-4539-8b4b-4cabfa815567", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0fb8de65-0291-4f97-96c0-096a3f425008"}, {"timestamp": "2026-09-01T20:02:21.089Z", "date_only": false, "value": "2026-09-01T20:02:21.089920Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/24366", "record": "CVE-2017-11317", "field": "creation_timestamp", "uuid": "5768bf5d-0000-40e7-89ee-dd8d0cbf5824", "url": "https://t.me/hacking_Attack/24366"}]}