{"metadata": {"vulnerability": "CVE-2019-18818", "count": 64, "kinds": {"milestone": 4, "sighting": 38, "kev": 11, "other": 11}}, "data": [{"timestamp": "2019-11-07T00:00:00Z", "date_only": true, "value": "2019-11-07", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2019-18818", "record": "GSD-2019-18818", "field": "namespaces.gitlab.com.advisories.0.pubdate", "linked_record": true}, {"timestamp": "2019-11-07T00:00:00Z", "date_only": false, "value": "2019-11-07T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2019-18818", "field": "cveMetadata.dateReserved"}, {"timestamp": "2019-11-07T21:02:58Z", "date_only": false, "value": "2019-11-07T21:02:58.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2019-18818", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2019-11-07T22:15:00Z", "date_only": false, "value": "2019-11-07T22:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-6XC2-MJ39-Q599", "record": "GHSA-6XC2-MJ39-Q599", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2019-11-07T22:15:00Z", "date_only": false, "value": "2019-11-07T22:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2019-18818", "record": "GSD-2019-18818", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2019-11-07T22:15:10.570Z", "date_only": false, "value": "2019-11-07T22:15:10.570", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2019-18818", "record": "FKIE_CVE-2019-18818", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2019-11-13T00:00:00Z", "date_only": true, "value": "2019-11-13", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2019-18818", "record": "GSD-2019-18818", "field": "namespaces.gitlab.com.advisories.0.date", "linked_record": true}, {"timestamp": "2019-12-02T18:20:41Z", "date_only": false, "value": "2019-12-02T18:20:41Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-6XC2-MJ39-Q599", "record": "GHSA-6XC2-MJ39-Q599", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-02-08T18:06:16Z", "date_only": false, "value": "2022-02-08T18:06:16.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2019-18818", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-02-20T06:22:00Z", "date_only": false, "value": "2022-02-20T06:22Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2019-18818", "record": "GSD-2019-18818", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2022-06-18T10:22:36Z", "date_only": false, "value": "2022-06-18T10:22:36.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/arm1tage/129", "record": "CVE-2019-18818", "field": "creation_timestamp", "uuid": "ef67133a-7a20-4621-9dd0-9c7822d8e2c4", "content": "HackTheBox:\n\n\u2014Easy Machines\u2014\n\nDriver - WinRM (evil-winrm), printnightmare CVE-2021-1675 (https://habr.com/ru/sandbox/156538/)\nhttps://0xdf.gitlab.io/2022/02/26/htb-driver.html\n\nSecret - JWT, Git source (tig), crush-dumps\nhttps://0xdf.gitlab.io/2022/03/26/htb-secret.html\n\nBackDoor - Wordpress eBook Dir Trav (https://www.exploit-db.com/exploits/39575), gdb exploit (https://www.exploit-db.com/exploits/50539, https://www.rapid7.com/db/modules/exploit/multi/gdb/gdb_server_exec/) \nhttps://0xdf.gitlab.io/2022/04/23/htb-backdoor.html\n\nPrevise - Backup, Site Reverse Shell, low-encrypted passwords\nhttps://0xdf.gitlab.io/2022/01/08/htb-previse.html\n\nBountyHunter - XXE, (root) NOPASSWD python code\nhttps://0xdf.gitlab.io/2021/11/20/htb-bountyhunter.html\n\nHorizontal - Strapi CMS 3.0.0 CVE-2019-18818/CVE-2019-19609 (https://www.exploit-db.com/exploits/50239, https://github.com/diego-tella/CVE-2019-19609-EXPLOIT), Laravel v8 (https://www.exploit-db.com/exploits/49424)\nhttps://0xdf.gitlab.io/2022/02/05/htb-horizontall.html\n\nOptimum - Windows 2012 (https://www.rapid7.com/db/modules/exploit/windows/http/rejetto_hfs_exec/, https://www.rapid7.com/db/modules/exploit/windows/local/ms16_032_secondary_logon_handle_privesc/)\nhttps://0xdf.gitlab.io/2021/03/17/htb-optimum.html\n\nLame - FTP Anonymous, SAMBA exploit (https://github.com/amriunix/CVE-2007-2447)\nhttps://0xdf.gitlab.io/2020/04/07/htb-lame.html\n\nJerry - Tomcat Default Cred, shell via .WAR\nhttps://0xdf.gitlab.io/2018/11/17/htb-jerry.html\n\nBlue - Win7 eternalblue (https://www.rapid7.com/db/modules/exploit/windows/smb/ms17_010_eternalblue/)\nhttps://0xdf.gitlab.io/2021/05/11/htb-blue.html\n\nDevel - Microsoft IIS httpd 7.5 reverse shell via .ASPX, MS11-046 or ms10_015_kitrap0d (https://github.com/abatchy17/WindowsExploits/tree/master/MS11-046)\nhttps://0xdf.gitlab.io/2019/03/05/htb-devel.html\n\nNetmon - PRTG Network Monitor 18.1.37.13946, Backup credentials, CVE-2018-9276 (https://github.com/A1vinSmith/CVE-2018-9276) / (https://www.exploit-db.com/exploits/46527) + evil-winrm\nhttps://0xdf.gitlab.io/2019/06/29/htb-netmon.html\n\nExplore (Android) - 59777 port CVE-2019-6447 (https://www.exploit-db.com/exploits/50070), SSH Creds on Photo, adb shell\nhttps://0xdf.gitlab.io/2021/10/30/htb-explore.html\n\nAntique - Telnet password via snmpget (https://www.irongeek.com/i.php?page=security/networkprinterhacking#JetDirect%20password%20notes), CUPS 1.6.1 (https://github.com/jpillora/chisel) \nhttps://0xdf.gitlab.io/2022/05/03/htb-antique.html\n\nReturn - evil-winrm, Server Operators in net user svc-printer /domain, sc.exe\nhttps://0xdf.gitlab.io/2022/05/05/htb-return.html\n\nGrandpa - CVE-2017-7269 (https://www.rapid7.com/db/modules/exploit/windows/iis/iis_webdav_scstoragepathfromurl/), SEImpersonalPrivilege Churrasco (https://github.com/Re4son/Churrasco/)\nhttps://0xdf.gitlab.io/2020/05/28/htb-grandpa.html\n\nBeep - ShellShock or Elastix 2.2.0 - 'graph.php' Local File Inclusion, (root) NOPASSWD nmap\nhttps://0xdf.gitlab.io/2021/02/23/htb-beep.html\n\nPandora - snmpwalk creds, CVE-2021-32099, Site Reverse Shell\nhttps://0xdf.gitlab.io/2022/05/21/htb-pandora.html\n\nPaper - WPS 5.2.3 - Cve-2019-17671 (https://www.exploit-db.com/exploits/47690, https://0day.work/proof-of-concept-for-wordpress-5-2-3-viewing-unauthenticated-posts/), Chat Bot Dir Trav, CVE-2021-3560 (https://github.com/Almorabea/Polkit-exploit/blob/main/CVE-2021-3560.py)\nhttps://0xjin.medium.com/paper-hackthebox-write-up-2abca22d3b54\n\n\n#hackthebox #ctf", "url": "https://t.me/arm1tage/129", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-08-02T15:09:07Z", "date_only": false, "value": "2022-08-02T15:09:07Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-6XC2-MJ39-Q599", "record": "GHSA-6XC2-MJ39-Q599", "field": "modified", "linked_record": true}, {"timestamp": "2023-10-14T14:56:09Z", "date_only": false, "value": "2023-10-14T14:56:09+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2019-18818", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "32b21251-06b5-404f-b9a2-d59a2fa537ac", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-14T14:56:09Z", "date_only": false, "value": "2023-10-14T14:56:09+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2019-18818", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "batch_listing": true, "uuid": "32b21251-06b5-404f-b9a2-d59a2fa537ac", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-12-13T01:23:50.385Z", "date_only": false, "value": "2023-12-13T01:23:50.385963Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2019-18818", "record": "GSD-2019-18818", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-02-05T16:16:29Z", "date_only": false, "value": "2024-02-05T16:16:29.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/179297", "record": "CVE-2019-18818", "field": "creation_timestamp", "uuid": "a90d94ec-1293-4f96-bac3-475d7601977f", "content": "https://ift.tt/kEX5lvV\nCVE-2019-18818 | strapi up to 3.0.0-beta.17.4 Password Reset Auth.js password recovery (ID 163939)", "url": "https://t.me/ctinow/179297"}, {"timestamp": "2024-08-05T02:02:39.859Z", "date_only": false, "value": "2024-08-05T02:02:39.859Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2019-18818", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-05T02:02:39.859Z", "date_only": false, "value": "2024-08-05T02:02:39.859Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2019-18818", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-11-14T06:10:00Z", "date_only": false, "value": "2024-11-14T06:10:00.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/e95bd878-d7d0-432b-98eb-5357f4615dad", "record": "CVE-2019-18818", "field": "creation_timestamp", "uuid": "ff5d46db-d8b5-49ac-9786-45d36f2f0229"}, {"timestamp": "2024-11-21T12:42:37Z", "date_only": false, "value": "2024-11-21T12:42:37.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/strapi_3_password_reset.rb", "record": "CVE-2019-18818", "field": "creation_timestamp", "uuid": "e0925a1d-629e-4867-9b5b-90441fa1e88e", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/strapi_3_password_reset.rb"}, {"timestamp": "2025-01-26T00:00:00Z", "date_only": false, "value": "2025-01-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-26)", "record": "CVE-2019-18818", "field": "creation_timestamp", "uuid": "25071dbe-a6bf-4f3a-9ee3-2c95180007e0"}, {"timestamp": "2025-02-06T03:13:44Z", "date_only": false, "value": "2025-02-06T03:13:44.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2019-18818", "field": "creation_timestamp", "uuid": "e4979525-3c82-437f-b839-cd9dbd18ef81"}, {"timestamp": "2025-02-11T00:00:00Z", "date_only": false, "value": "2025-02-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-11)", "record": "CVE-2019-18818", "field": "creation_timestamp", "uuid": "71071955-1997-4217-ae54-4d3035194f42", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-02-14T00:00:00Z", "date_only": false, "value": "2025-02-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-14)", "record": "CVE-2019-18818", "field": "creation_timestamp", "uuid": "dc2c6377-e09b-4655-ad64-fa75864cddd2", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-02-17T04:00:07Z", "date_only": false, "value": "2025-02-17T04:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/lRUCC0BJHYPhHSLUp64yC2-a8BbOW7ihAUJb144dihN1Y0A", "record": "CVE-2019-18818", "field": "creation_timestamp", "uuid": "ef2c6cd9-bcbb-4af4-b354-a7a147a36cde", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-02-20T00:00:00Z", "date_only": false, "value": "2025-02-20T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-20)", "record": "CVE-2019-18818", "field": "creation_timestamp", "uuid": "efb9b233-6b8c-4a58-bd50-c12acb511ca3"}, {"timestamp": "2025-02-23T04:10:14Z", "date_only": false, "value": "2025-02-23T04:10:14.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2019-18818", "field": "creation_timestamp", "uuid": "cd581ff0-4af7-4387-a475-aafd7640453d"}, {"timestamp": "2025-02-26T00:00:00Z", "date_only": false, "value": "2025-02-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-26)", "record": "CVE-2019-18818", "field": "creation_timestamp", "uuid": "25ec0e44-01d5-4e1c-9fbd-323ab50c01dd", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-02-27T00:00:00Z", "date_only": false, "value": "2025-02-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-27)", "record": "CVE-2019-18818", "field": "creation_timestamp", "uuid": "2c436215-dd10-47df-8ac3-7ab1c73be613", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-05-26T00:00:00Z", "date_only": false, "value": "2025-05-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-26)", "record": "CVE-2019-18818", "field": "creation_timestamp", "uuid": "54b2784f-9f18-4c75-9cdb-90e020371293", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-06-08T00:00:00Z", "date_only": false, "value": "2025-06-08T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2019-18818", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "231cccac-1bfd-4086-89fb-477a6c0ef494", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-06-08T00:00:00Z", "date_only": false, "value": "2025-06-08T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2019-18818", "field": "evidence.0.details.added_date", "uuid": "231cccac-1bfd-4086-89fb-477a6c0ef494", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-06-08T00:00:00Z", "date_only": false, "value": "2025-06-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-08)", "record": "CVE-2019-18818", "field": "creation_timestamp", "uuid": "07aead12-e422-4111-9b7c-b2dbab08a8ae", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-06-08T00:00:00Z", "date_only": false, "value": "2025-06-08T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2019-18818", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "231cccac-1bfd-4086-89fb-477a6c0ef494", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-06-08T00:00:00Z", "date_only": false, "value": "2025-06-08T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2019-18818", "field": "status.status_updated_at", "uuid": "231cccac-1bfd-4086-89fb-477a6c0ef494", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-06-28T00:00:00Z", "date_only": false, "value": "2025-06-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-28)", "record": "CVE-2019-18818", "field": "creation_timestamp", "uuid": "9084feb5-9621-463b-bdde-9a6d3ea81818", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-07-05T00:00:00Z", "date_only": false, "value": "2025-07-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-05)", "record": "CVE-2019-18818", "field": "creation_timestamp", "uuid": "1a362675-572e-4ae4-8b08-421d38a7b99c", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-09-04T00:00:00Z", "date_only": false, "value": "2025-09-04T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-04)", "record": "CVE-2019-18818", "field": "creation_timestamp", "uuid": "b8c0b46c-8711-4097-8895-6defbcba28ea"}, {"timestamp": "2025-10-23T21:12:58Z", "date_only": false, "value": "2025-10-23T21:12:58.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "record": "CVE-2019-18818", "field": "creation_timestamp", "uuid": "435a70c9-97d0-4b45-bcfe-9be136c68be2"}, {"timestamp": "2025-11-07T00:00:00Z", "date_only": false, "value": "2025-11-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-07)", "record": "CVE-2019-18818", "field": "creation_timestamp", "uuid": "7a1c1d8e-1100-4a6e-be86-0b99f455ec1a", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-12-07T00:00:00Z", "date_only": false, "value": "2025-12-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-07)", "record": "CVE-2019-18818", "field": "creation_timestamp", "uuid": "a5e96a7b-cb03-40f3-814d-4adb5c7f83cd", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-01-04T00:00:00Z", "date_only": false, "value": "2026-01-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-04)", "record": "CVE-2019-18818", "field": "creation_timestamp", "uuid": "ec4f873f-002e-41e3-a51c-e94f18a35a1e", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-02-25T00:00:00Z", "date_only": false, "value": "2026-02-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-25)", "record": "CVE-2019-18818", "field": "creation_timestamp", "uuid": "9cb4d1da-d109-4b4c-8249-456b22e8e0ff", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-05-11T00:00:00Z", "date_only": false, "value": "2026-05-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-11)", "record": "CVE-2019-18818", "field": "creation_timestamp", "uuid": "c4a98cce-d4f9-4e97-9aeb-d38eecb9338d", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-05-23T00:00:00Z", "date_only": false, "value": "2026-05-23T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-23)", "record": "CVE-2019-18818", "field": "creation_timestamp", "uuid": "6b6c70ab-70a5-46dc-b0f5-77d04dabb683"}, {"timestamp": "2026-06-06T00:00:00Z", "date_only": false, "value": "2026-06-06T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-06)", "record": "CVE-2019-18818", "field": "creation_timestamp", "uuid": "fde41e85-1cd2-45ae-bf02-c005ac5f1c0a"}, {"timestamp": "2026-06-17T02:25:23.883Z", "date_only": false, "value": "2026-06-17T02:25:23.883", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2019-18818", "record": "FKIE_CVE-2019-18818", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-06-19T12:46:11.967Z", "date_only": false, "value": "2026-06-19T12:46:11.967377Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/92c88308-f7f9-42db-a60f-a1b280239575", "record": "CVE-2019-18818", "field": "creation_timestamp", "uuid": "048e1911-d8dd-4312-b92c-d72f1714ec1b", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/92c88308-f7f9-42db-a60f-a1b280239575", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2019-18818", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "231cccac-1bfd-4086-89fb-477a6c0ef494", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:12:16.368Z", "date_only": false, "value": "2026-06-23T11:12:16.368104Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/231cccac-1bfd-4086-89fb-477a6c0ef494", "record": "CVE-2019-18818", "field": "creation_timestamp", "uuid": "afa65e17-baad-4ea7-b65d-d7059171c58e", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/231cccac-1bfd-4086-89fb-477a6c0ef494", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T14:03:33.076Z", "date_only": false, "value": "2026-06-23T14:03:33.076868Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e66ffb1e-9a9a-4e0a-a06f-23a20da78487", "record": "CVE-2019-18818", "field": "creation_timestamp", "uuid": "fe655bbb-b0ff-4bce-b9dd-73581761833f", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e66ffb1e-9a9a-4e0a-a06f-23a20da78487", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-30T09:23:24.518Z", "date_only": false, "value": "2026-06-30T09:23:24.518453Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bcb0b0c3-bb21-4920-b584-9e9bf0e87e75", "record": "CVE-2019-18818", "field": "creation_timestamp", "uuid": "737f4670-24c4-4d87-87d0-78c5741ec543", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bcb0b0c3-bb21-4920-b584-9e9bf0e87e75", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-01T05:54:24.269Z", "date_only": false, "value": "2026-07-01T05:54:24.269890Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/32b21251-06b5-404f-b9a2-d59a2fa537ac", "record": "CVE-2019-18818", "field": "creation_timestamp", "uuid": "ab3c78bd-1ef3-4e06-b4e5-4a9be6d73e67", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/32b21251-06b5-404f-b9a2-d59a2fa537ac", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-25T10:15:09.884Z", "date_only": false, "value": "2026-08-25T10:15:09.884538Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-24)", "record": "CVE-2019-18818", "field": "creation_timestamp", "uuid": "3ef1f33e-bf98-48da-b8b8-0affa887941b", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-01T20:01:55.060Z", "date_only": false, "value": "2026-09-01T20:01:55.060745Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/42979", "record": "CVE-2019-18818", "field": "creation_timestamp", "uuid": "119ae031-c146-4119-9b5d-e170595adaeb", "url": "https://t.me/hacking_Attack/42979"}, {"timestamp": "2026-09-01T20:01:55.150Z", "date_only": false, "value": "2026-09-01T20:01:55.150155Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/42952", "record": "CVE-2019-18818", "field": "creation_timestamp", "uuid": "43d3dad3-e171-4a9a-9998-18dc7c8fde2c", "url": "https://t.me/hacking_Attack/42952"}, {"timestamp": "2026-09-01T20:01:56.471Z", "date_only": false, "value": "2026-09-01T20:01:56.471604Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/42048", "record": "CVE-2019-18818", "field": "creation_timestamp", "uuid": "2c6a42f5-17b8-4c0b-aa0c-b77655b18113", "url": "https://t.me/hacking_Attack/42048"}, {"timestamp": "2026-09-06T08:00:06.828Z", "date_only": false, "value": "2026-09-06T08:00:06.828962Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/42952", "record": "CVE-2019-18818", "field": "creation_timestamp", "uuid": "54ffa9c2-3dfe-477a-879b-f27049b3f960", "url": "https://t.me/hacking_Attack/42952", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-06T08:00:07.016Z", "date_only": false, "value": "2026-09-06T08:00:07.016380Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/42979", "record": "CVE-2019-18818", "field": "creation_timestamp", "uuid": "48855e2a-f601-4ae5-b35b-fd6faab29863", "url": "https://t.me/hacking_Attack/42979", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-06T10:00:06.511Z", "date_only": false, "value": "2026-09-06T10:00:06.511533Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/42048", "record": "CVE-2019-18818", "field": "creation_timestamp", "uuid": "4fb1f7c7-91b4-419e-b91d-0b0551f522c0", "url": "https://t.me/hacking_Attack/42048", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-04T00:00:00Z", "date_only": false, "value": "2026-11-04T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2019-18818", "field": "timestamps.last_seen_at", "uuid": "32b21251-06b5-404f-b9a2-d59a2fa537ac", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-04T00:00:00Z", "date_only": true, "value": "2026-11-04", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2019-18818", "field": "evidence.0.details.observation_date", "uuid": "32b21251-06b5-404f-b9a2-d59a2fa537ac", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-04T00:00:00Z", "date_only": false, "value": "2026-11-04T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2019-18818", "field": "status.status_updated_at", "uuid": "32b21251-06b5-404f-b9a2-d59a2fa537ac", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-06T01:00:01Z", "date_only": false, "value": "2026-11-06T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2019-18818", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "32b21251-06b5-404f-b9a2-d59a2fa537ac", "status": {"status_reason": "confirmed", "exploited": true}}], "metrics": {"as_of": "2026-11-09T02:11:26.514Z", "anchors": {"origin": {"timestamp": "2019-11-07T21:02:58Z", "date_only": false, "value": "2019-11-07T21:02:58.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2019-18818", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2019-11-07T21:02:58Z", "date_only": false, "value": "2019-11-07T21:02:58.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2019-18818", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2022-06-18T10:22:36Z", "date_only": false, "value": "2022-06-18T10:22:36.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/arm1tage/129", "record": "CVE-2019-18818", "field": "creation_timestamp", "uuid": "ef67133a-7a20-4621-9dd0-9c7822d8e2c4", "content": "HackTheBox:\n\n\u2014Easy Machines\u2014\n\nDriver - WinRM (evil-winrm), printnightmare CVE-2021-1675 (https://habr.com/ru/sandbox/156538/)\nhttps://0xdf.gitlab.io/2022/02/26/htb-driver.html\n\nSecret - JWT, Git source (tig), crush-dumps\nhttps://0xdf.gitlab.io/2022/03/26/htb-secret.html\n\nBackDoor - Wordpress eBook Dir Trav (https://www.exploit-db.com/exploits/39575), gdb exploit (https://www.exploit-db.com/exploits/50539, https://www.rapid7.com/db/modules/exploit/multi/gdb/gdb_server_exec/) \nhttps://0xdf.gitlab.io/2022/04/23/htb-backdoor.html\n\nPrevise - Backup, Site Reverse Shell, low-encrypted passwords\nhttps://0xdf.gitlab.io/2022/01/08/htb-previse.html\n\nBountyHunter - XXE, (root) NOPASSWD python code\nhttps://0xdf.gitlab.io/2021/11/20/htb-bountyhunter.html\n\nHorizontal - Strapi CMS 3.0.0 CVE-2019-18818/CVE-2019-19609 (https://www.exploit-db.com/exploits/50239, https://github.com/diego-tella/CVE-2019-19609-EXPLOIT), Laravel v8 (https://www.exploit-db.com/exploits/49424)\nhttps://0xdf.gitlab.io/2022/02/05/htb-horizontall.html\n\nOptimum - Windows 2012 (https://www.rapid7.com/db/modules/exploit/windows/http/rejetto_hfs_exec/, https://www.rapid7.com/db/modules/exploit/windows/local/ms16_032_secondary_logon_handle_privesc/)\nhttps://0xdf.gitlab.io/2021/03/17/htb-optimum.html\n\nLame - FTP Anonymous, SAMBA exploit (https://github.com/amriunix/CVE-2007-2447)\nhttps://0xdf.gitlab.io/2020/04/07/htb-lame.html\n\nJerry - Tomcat Default Cred, shell via .WAR\nhttps://0xdf.gitlab.io/2018/11/17/htb-jerry.html\n\nBlue - Win7 eternalblue (https://www.rapid7.com/db/modules/exploit/windows/smb/ms17_010_eternalblue/)\nhttps://0xdf.gitlab.io/2021/05/11/htb-blue.html\n\nDevel - Microsoft IIS httpd 7.5 reverse shell via .ASPX, MS11-046 or ms10_015_kitrap0d (https://github.com/abatchy17/WindowsExploits/tree/master/MS11-046)\nhttps://0xdf.gitlab.io/2019/03/05/htb-devel.html\n\nNetmon - PRTG Network Monitor 18.1.37.13946, Backup credentials, CVE-2018-9276 (https://github.com/A1vinSmith/CVE-2018-9276) / (https://www.exploit-db.com/exploits/46527) + evil-winrm\nhttps://0xdf.gitlab.io/2019/06/29/htb-netmon.html\n\nExplore (Android) - 59777 port CVE-2019-6447 (https://www.exploit-db.com/exploits/50070), SSH Creds on Photo, adb shell\nhttps://0xdf.gitlab.io/2021/10/30/htb-explore.html\n\nAntique - Telnet password via snmpget (https://www.irongeek.com/i.php?page=security/networkprinterhacking#JetDirect%20password%20notes), CUPS 1.6.1 (https://github.com/jpillora/chisel) \nhttps://0xdf.gitlab.io/2022/05/03/htb-antique.html\n\nReturn - evil-winrm, Server Operators in net user svc-printer /domain, sc.exe\nhttps://0xdf.gitlab.io/2022/05/05/htb-return.html\n\nGrandpa - CVE-2017-7269 (https://www.rapid7.com/db/modules/exploit/windows/iis/iis_webdav_scstoragepathfromurl/), SEImpersonalPrivilege Churrasco (https://github.com/Re4son/Churrasco/)\nhttps://0xdf.gitlab.io/2020/05/28/htb-grandpa.html\n\nBeep - ShellShock or Elastix 2.2.0 - 'graph.php' Local File Inclusion, (root) NOPASSWD nmap\nhttps://0xdf.gitlab.io/2021/02/23/htb-beep.html\n\nPandora - snmpwalk creds, CVE-2021-32099, Site Reverse Shell\nhttps://0xdf.gitlab.io/2022/05/21/htb-pandora.html\n\nPaper - WPS 5.2.3 - Cve-2019-17671 (https://www.exploit-db.com/exploits/47690, https://0day.work/proof-of-concept-for-wordpress-5-2-3-viewing-unauthenticated-posts/), Chat Bot Dir Trav, CVE-2021-3560 (https://github.com/Almorabea/Polkit-exploit/blob/main/CVE-2021-3560.py)\nhttps://0xjin.medium.com/paper-hackthebox-write-up-2abca22d3b54\n\n\n#hackthebox #ctf", "url": "https://t.me/arm1tage/129", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2023-10-14T14:56:09Z", "date_only": false, "value": "2023-10-14T14:56:09+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2019-18818", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "batch_listing": true, "uuid": "32b21251-06b5-404f-b9a2-d59a2fa537ac", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 124134791.0, "hours": 34481.88638888889, "days": 1436.7452662037037, "min_seconds": 124134791.0, "max_seconds": 124134791.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": true, "end_before_start": false, "start": {"timestamp": "2019-11-07T21:02:58Z", "date_only": false, "value": "2019-11-07T21:02:58.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2019-18818", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2023-10-14T14:56:09Z", "date_only": false, "value": "2023-10-14T14:56:09+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2019-18818", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "batch_listing": true, "uuid": "32b21251-06b5-404f-b9a2-d59a2fa537ac", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": 124134791.0, "hours": 34481.88638888889, "days": 1436.7452662037037, "min_seconds": 124134791.0, "max_seconds": 124134791.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": true, "end_before_start": false, "start": {"timestamp": "2019-11-07T21:02:58Z", "date_only": false, "value": "2019-11-07T21:02:58.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2019-18818", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2023-10-14T14:56:09Z", "date_only": false, "value": "2023-10-14T14:56:09+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2019-18818", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "batch_listing": true, "uuid": "32b21251-06b5-404f-b9a2-d59a2fa537ac", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 82387178.0, "hours": 22885.327222222222, "days": 953.555300925926, "min_seconds": 82387178.0, "max_seconds": 82387178.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2019-11-07T21:02:58Z", "date_only": false, "value": "2019-11-07T21:02:58.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2019-18818", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2022-06-18T10:22:36Z", "date_only": false, "value": "2022-06-18T10:22:36.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/arm1tage/129", "record": "CVE-2019-18818", "field": "creation_timestamp", "uuid": "ef67133a-7a20-4621-9dd0-9c7822d8e2c4", "content": "HackTheBox:\n\n\u2014Easy Machines\u2014\n\nDriver - WinRM (evil-winrm), printnightmare CVE-2021-1675 (https://habr.com/ru/sandbox/156538/)\nhttps://0xdf.gitlab.io/2022/02/26/htb-driver.html\n\nSecret - JWT, Git source (tig), crush-dumps\nhttps://0xdf.gitlab.io/2022/03/26/htb-secret.html\n\nBackDoor - Wordpress eBook Dir Trav (https://www.exploit-db.com/exploits/39575), gdb exploit (https://www.exploit-db.com/exploits/50539, https://www.rapid7.com/db/modules/exploit/multi/gdb/gdb_server_exec/) \nhttps://0xdf.gitlab.io/2022/04/23/htb-backdoor.html\n\nPrevise - Backup, Site Reverse Shell, low-encrypted passwords\nhttps://0xdf.gitlab.io/2022/01/08/htb-previse.html\n\nBountyHunter - XXE, (root) NOPASSWD python code\nhttps://0xdf.gitlab.io/2021/11/20/htb-bountyhunter.html\n\nHorizontal - Strapi CMS 3.0.0 CVE-2019-18818/CVE-2019-19609 (https://www.exploit-db.com/exploits/50239, https://github.com/diego-tella/CVE-2019-19609-EXPLOIT), Laravel v8 (https://www.exploit-db.com/exploits/49424)\nhttps://0xdf.gitlab.io/2022/02/05/htb-horizontall.html\n\nOptimum - Windows 2012 (https://www.rapid7.com/db/modules/exploit/windows/http/rejetto_hfs_exec/, https://www.rapid7.com/db/modules/exploit/windows/local/ms16_032_secondary_logon_handle_privesc/)\nhttps://0xdf.gitlab.io/2021/03/17/htb-optimum.html\n\nLame - FTP Anonymous, SAMBA exploit (https://github.com/amriunix/CVE-2007-2447)\nhttps://0xdf.gitlab.io/2020/04/07/htb-lame.html\n\nJerry - Tomcat Default Cred, shell via .WAR\nhttps://0xdf.gitlab.io/2018/11/17/htb-jerry.html\n\nBlue - Win7 eternalblue (https://www.rapid7.com/db/modules/exploit/windows/smb/ms17_010_eternalblue/)\nhttps://0xdf.gitlab.io/2021/05/11/htb-blue.html\n\nDevel - Microsoft IIS httpd 7.5 reverse shell via .ASPX, MS11-046 or ms10_015_kitrap0d (https://github.com/abatchy17/WindowsExploits/tree/master/MS11-046)\nhttps://0xdf.gitlab.io/2019/03/05/htb-devel.html\n\nNetmon - PRTG Network Monitor 18.1.37.13946, Backup credentials, CVE-2018-9276 (https://github.com/A1vinSmith/CVE-2018-9276) / (https://www.exploit-db.com/exploits/46527) + evil-winrm\nhttps://0xdf.gitlab.io/2019/06/29/htb-netmon.html\n\nExplore (Android) - 59777 port CVE-2019-6447 (https://www.exploit-db.com/exploits/50070), SSH Creds on Photo, adb shell\nhttps://0xdf.gitlab.io/2021/10/30/htb-explore.html\n\nAntique - Telnet password via snmpget (https://www.irongeek.com/i.php?page=security/networkprinterhacking#JetDirect%20password%20notes), CUPS 1.6.1 (https://github.com/jpillora/chisel) \nhttps://0xdf.gitlab.io/2022/05/03/htb-antique.html\n\nReturn - evil-winrm, Server Operators in net user svc-printer /domain, sc.exe\nhttps://0xdf.gitlab.io/2022/05/05/htb-return.html\n\nGrandpa - CVE-2017-7269 (https://www.rapid7.com/db/modules/exploit/windows/iis/iis_webdav_scstoragepathfromurl/), SEImpersonalPrivilege Churrasco (https://github.com/Re4son/Churrasco/)\nhttps://0xdf.gitlab.io/2020/05/28/htb-grandpa.html\n\nBeep - ShellShock or Elastix 2.2.0 - 'graph.php' Local File Inclusion, (root) NOPASSWD nmap\nhttps://0xdf.gitlab.io/2021/02/23/htb-beep.html\n\nPandora - snmpwalk creds, CVE-2021-32099, Site Reverse Shell\nhttps://0xdf.gitlab.io/2022/05/21/htb-pandora.html\n\nPaper - WPS 5.2.3 - Cve-2019-17671 (https://www.exploit-db.com/exploits/47690, https://0day.work/proof-of-concept-for-wordpress-5-2-3-viewing-unauthenticated-posts/), Chat Bot Dir Trav, CVE-2021-3560 (https://github.com/Almorabea/Polkit-exploit/blob/main/CVE-2021-3560.py)\nhttps://0xjin.medium.com/paper-hackthebox-write-up-2abca22d3b54\n\n\n#hackthebox #ctf", "url": "https://t.me/arm1tage/129", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 221029708.514655, "hours": 61397.14125407083, "days": 2558.214218919618, "min_seconds": 221029708.514655, "max_seconds": 221029708.514655, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2019-11-07T21:02:58Z", "date_only": false, "value": "2019-11-07T21:02:58.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2019-18818", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-09T02:11:26.514Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 96894917.514655, "hours": 26915.25486518194, "days": 1121.4689527159144, "min_seconds": 96894917.514655, "max_seconds": 96894917.514655, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": true, "end_before_start": false, "start": {"timestamp": "2023-10-14T14:56:09Z", "date_only": false, "value": "2023-10-14T14:56:09+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2019-18818", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "batch_listing": true, "uuid": "32b21251-06b5-404f-b9a2-d59a2fa537ac", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2026-11-09T02:11:26.514Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 138642530.514655, "hours": 38511.81403184861, "days": 1604.658917993692, "min_seconds": 138642530.514655, "max_seconds": 138642530.514655, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-06-18T10:22:36Z", "date_only": false, "value": "2022-06-18T10:22:36.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/arm1tage/129", "record": "CVE-2019-18818", "field": "creation_timestamp", "uuid": "ef67133a-7a20-4621-9dd0-9c7822d8e2c4", "content": "HackTheBox:\n\n\u2014Easy Machines\u2014\n\nDriver - WinRM (evil-winrm), printnightmare CVE-2021-1675 (https://habr.com/ru/sandbox/156538/)\nhttps://0xdf.gitlab.io/2022/02/26/htb-driver.html\n\nSecret - JWT, Git source (tig), crush-dumps\nhttps://0xdf.gitlab.io/2022/03/26/htb-secret.html\n\nBackDoor - Wordpress eBook Dir Trav (https://www.exploit-db.com/exploits/39575), gdb exploit (https://www.exploit-db.com/exploits/50539, https://www.rapid7.com/db/modules/exploit/multi/gdb/gdb_server_exec/) \nhttps://0xdf.gitlab.io/2022/04/23/htb-backdoor.html\n\nPrevise - Backup, Site Reverse Shell, low-encrypted passwords\nhttps://0xdf.gitlab.io/2022/01/08/htb-previse.html\n\nBountyHunter - XXE, (root) NOPASSWD python code\nhttps://0xdf.gitlab.io/2021/11/20/htb-bountyhunter.html\n\nHorizontal - Strapi CMS 3.0.0 CVE-2019-18818/CVE-2019-19609 (https://www.exploit-db.com/exploits/50239, https://github.com/diego-tella/CVE-2019-19609-EXPLOIT), Laravel v8 (https://www.exploit-db.com/exploits/49424)\nhttps://0xdf.gitlab.io/2022/02/05/htb-horizontall.html\n\nOptimum - Windows 2012 (https://www.rapid7.com/db/modules/exploit/windows/http/rejetto_hfs_exec/, https://www.rapid7.com/db/modules/exploit/windows/local/ms16_032_secondary_logon_handle_privesc/)\nhttps://0xdf.gitlab.io/2021/03/17/htb-optimum.html\n\nLame - FTP Anonymous, SAMBA exploit (https://github.com/amriunix/CVE-2007-2447)\nhttps://0xdf.gitlab.io/2020/04/07/htb-lame.html\n\nJerry - Tomcat Default Cred, shell via .WAR\nhttps://0xdf.gitlab.io/2018/11/17/htb-jerry.html\n\nBlue - Win7 eternalblue (https://www.rapid7.com/db/modules/exploit/windows/smb/ms17_010_eternalblue/)\nhttps://0xdf.gitlab.io/2021/05/11/htb-blue.html\n\nDevel - Microsoft IIS httpd 7.5 reverse shell via .ASPX, MS11-046 or ms10_015_kitrap0d (https://github.com/abatchy17/WindowsExploits/tree/master/MS11-046)\nhttps://0xdf.gitlab.io/2019/03/05/htb-devel.html\n\nNetmon - PRTG Network Monitor 18.1.37.13946, Backup credentials, CVE-2018-9276 (https://github.com/A1vinSmith/CVE-2018-9276) / (https://www.exploit-db.com/exploits/46527) + evil-winrm\nhttps://0xdf.gitlab.io/2019/06/29/htb-netmon.html\n\nExplore (Android) - 59777 port CVE-2019-6447 (https://www.exploit-db.com/exploits/50070), SSH Creds on Photo, adb shell\nhttps://0xdf.gitlab.io/2021/10/30/htb-explore.html\n\nAntique - Telnet password via snmpget (https://www.irongeek.com/i.php?page=security/networkprinterhacking#JetDirect%20password%20notes), CUPS 1.6.1 (https://github.com/jpillora/chisel) \nhttps://0xdf.gitlab.io/2022/05/03/htb-antique.html\n\nReturn - evil-winrm, Server Operators in net user svc-printer /domain, sc.exe\nhttps://0xdf.gitlab.io/2022/05/05/htb-return.html\n\nGrandpa - CVE-2017-7269 (https://www.rapid7.com/db/modules/exploit/windows/iis/iis_webdav_scstoragepathfromurl/), SEImpersonalPrivilege Churrasco (https://github.com/Re4son/Churrasco/)\nhttps://0xdf.gitlab.io/2020/05/28/htb-grandpa.html\n\nBeep - ShellShock or Elastix 2.2.0 - 'graph.php' Local File Inclusion, (root) NOPASSWD nmap\nhttps://0xdf.gitlab.io/2021/02/23/htb-beep.html\n\nPandora - snmpwalk creds, CVE-2021-32099, Site Reverse Shell\nhttps://0xdf.gitlab.io/2022/05/21/htb-pandora.html\n\nPaper - WPS 5.2.3 - Cve-2019-17671 (https://www.exploit-db.com/exploits/47690, https://0day.work/proof-of-concept-for-wordpress-5-2-3-viewing-unauthenticated-posts/), Chat Bot Dir Trav, CVE-2021-3560 (https://github.com/Almorabea/Polkit-exploit/blob/main/CVE-2021-3560.py)\nhttps://0xjin.medium.com/paper-hackthebox-write-up-2abca22d3b54\n\n\n#hackthebox #ctf", "url": "https://t.me/arm1tage/129", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-09T02:11:26.514Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}