{"metadata": {"vulnerability": "CVE-2019-2215", "count": 230, "kinds": {"milestone": 9, "sighting": 170, "kev": 11, "other": 40}}, "data": [{"timestamp": "2018-12-10T00:00:00Z", "date_only": false, "value": "2018-12-10T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2019-2215", "field": "cveMetadata.dateReserved"}, {"timestamp": "2019-10-04T00:00:00Z", "date_only": false, "value": "2019-10-04T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201910-0902", "record": "VAR-201910-0902", "field": "sources_release_date.data.4.date"}, {"timestamp": "2019-10-04T00:00:00Z", "date_only": false, "value": "2019-10-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://www.exploit-db.com/exploits/47463", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "eaeb7394-4ad2-4e35-951b-b15fd3778846", "url": "https://www.exploit-db.com/exploits/47463"}, {"timestamp": "2019-10-04T05:41:24Z", "date_only": false, "value": "2019-10-04T05:41:24.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/androidMalware/422", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "24438e3e-5fa0-4118-bde6-48eaebc8c937", "content": "Kernel privilege escalation bug in Android affecting fully patched Pixel 2 & others\nThe bug was allegedly being used or sold by the NSO Group.\nLocal PoC exploit included. CVE-2019-2215\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=1942", "url": "https://t.me/androidMalware/422"}, {"timestamp": "2019-10-06T19:14:11Z", "date_only": false, "value": "2019-10-06T19:14:11.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/-_j8UgE87NOECrqZ3KDP0NkvSl22TTLP3GgkgXUff5a_hF4", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "588ea9b0-2748-48dd-be71-b1ad76fca901"}, {"timestamp": "2019-10-06T19:58:41Z", "date_only": false, "value": "2019-10-06T19:58:41.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/wnKxIqmrA6wsmUfM50aZ9f7ztSEFBAbywcwZbgixvq8y_T8", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "6bb12abf-240b-4eeb-81d6-10b12c4ddbab"}, {"timestamp": "2019-10-07T16:05:18Z", "date_only": false, "value": "2019-10-07T16:05:18.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/xakep_ru/7883", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "d6c7f8d6-3306-4db9-9daf-f581c6984fa5", "content": "0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Android \u043e\u043f\u0430\u0441\u043d\u0430 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Samsung, Xiaomi, Pixel \u0438 \u0442\u0430\u043a \u0434\u0430\u043b\u0435\u0435\n\n\u0410\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b Google Project Zero \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0432 \u044f\u0434\u0440\u0435 Android \u043e\u043f\u0430\u0441\u043d\u044b\u0439 \u0431\u0430\u0433, \u043f\u0435\u0440\u0435\u0434 \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u043c\u043d\u043e\u0433\u0438\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Pixel 2, Samsung S7, S8, S9 \u0438 \u0442\u0430\u043a \u0434\u0430\u043b\u0435\u0435. \n\nhttps://xakep.ru/2019/10/07/cve-2019-2215/", "url": "https://t.me/xakep_ru/7883"}, {"timestamp": "2019-10-08T00:00:00Z", "date_only": false, "value": "2019-10-08T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2019-AVI-484", "record": "CERTFR-2019-AVI-484", "field": "last_revision_date"}, {"timestamp": "2019-10-08T00:00:00Z", "date_only": false, "value": "2019-10-08T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2019-AVI-484", "record": "CERTFR-2019-AVI-484", "field": "initial_release_date"}, {"timestamp": "2019-10-08T00:00:00Z", "date_only": false, "value": "2019-10-08T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2019-AVI-484", "record": "CERTFR-2019-AVI-484", "field": "revisions.0.revision_date"}, {"timestamp": "2019-10-08T00:00:00Z", "date_only": true, "value": "2019-10-08", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2019-38253", "record": "CNVD-2019-38253", "field": "submitTime"}, {"timestamp": "2019-10-09T19:17:50Z", "date_only": false, "value": "2019-10-09T19:17:50.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/zxnJoHkYAzFuvofYABqxZ_5eADQaz-T5A5RmEVwCQe508Eg", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "c6bf4260-c1d5-48e3-bedb-b13d56d2a8d4"}, {"timestamp": "2019-10-11T00:00:00Z", "date_only": false, "value": "2019-10-11T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201910-0902", "record": "VAR-201910-0902", "field": "sources_release_date.data.0.date"}, {"timestamp": "2019-10-11T18:16:48Z", "date_only": false, "value": "2019-10-11T18:16:48.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2019-2215", "field": "cveMetadata.datePublished"}, {"timestamp": "2019-10-11T19:15:00Z", "date_only": false, "value": "2019-10-11T19:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-M7G6-9CWP-6JGM", "record": "GHSA-M7G6-9CWP-6JGM", "field": "database_specific.nvd_published_at"}, {"timestamp": "2019-10-11T19:15:00Z", "date_only": false, "value": "2019-10-11T19:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2019-2215", "record": "UBUNTU-CVE-2019-2215", "field": "published"}, {"timestamp": "2019-10-11T19:15:00Z", "date_only": false, "value": "2019-10-11T19:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2019-2215", "record": "GSD-2019-2215", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2019-10-11T19:15:10.947Z", "date_only": false, "value": "2019-10-11T19:15:10.947000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201910-0902", "record": "VAR-201910-0902", "field": "sources_release_date.data.6.date"}, {"timestamp": "2019-10-11T19:15:10.947Z", "date_only": false, "value": "2019-10-11T19:15:10.947", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2019-2215", "record": "FKIE_CVE-2019-2215", "field": "published"}, {"timestamp": "2019-10-16T22:00:00Z", "date_only": false, "value": "2019-10-16T22:00:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/canyoupwnme/6059", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "b184a8cf-06db-4ba8-a689-e64ab5bc9ba3", "content": "Tailoring CVE-2019-2215 to Achieve Root\nhttps://hernan.de/blog/2019/10/15/tailoring-cve-2019-2215-to-achieve-root/", "url": "https://t.me/canyoupwnme/6059"}, {"timestamp": "2019-10-17T06:14:24Z", "date_only": false, "value": "2019-10-17T06:14:24.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/androidMalware/445", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "d026946f-63ee-4cce-b35f-08b56c26cf6d", "content": "Qu1ckR00t - Exploit CVE-2019-2215 to Achieve Root\nBlog: https://hernan.de/blog/2019/10/15/tailoring-cve-2019-2215-to-achieve-root/\nPoC exploit: https://github.com/grant-h/qu1ckr00t", "url": "https://t.me/androidMalware/445"}, {"timestamp": "2019-10-17T10:35:15Z", "date_only": false, "value": "2019-10-17T10:35:15.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/xakep_ru/7975", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "44075475-505d-47fd-9bdc-9bb3465f9b25", "content": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u0434\u043b\u044f \u0441\u0432\u0435\u0436\u0435\u0439 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Android\n\n\u041f\u043e\u044f\u0432\u0438\u043b\u0441\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u0434\u043b\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b CVE-2019-2215, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0436\u0435 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u043f\u043e\u0434 \u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0446\u0435\u043b\u0435\u0432\u043e\u043c\u0443 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443. \n\nhttps://xakep.ru/2019/10/17/qu1ckr00t/", "url": "https://t.me/xakep_ru/7975"}, {"timestamp": "2019-10-17T11:58:14Z", "date_only": false, "value": "2019-10-17T11:58:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DC8044_Info/429", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "683b8791-fbae-4f82-9e31-626bec8952d2", "content": "https://github.com/grant-h/qu1ckr00t \u043f\u043e\u0434\u044c\u0435\u0445\u0430\u043b PoC  Android kernel arbitrary R/W (CVE-2019-2215)", "url": "https://t.me/DC8044_Info/429"}, {"timestamp": "2019-10-18T00:00:00Z", "date_only": false, "value": "2019-10-18T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201910-0902", "record": "VAR-201910-0902", "field": "sources_update_date.data.0.date"}, {"timestamp": "2019-10-18T18:03:17Z", "date_only": false, "value": "2019-10-18T18:03:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackerOne/2532", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "2bfe2322-26de-489d-bdb7-f9adeb28ecdc", "content": "Researcher released PoC exploit code for CVE-2019-2215 Android zero-day flaw\nhttps://ift.tt/33Fa8TX", "url": "https://t.me/HackerOne/2532"}, {"timestamp": "2019-10-18T19:15:00Z", "date_only": false, "value": "2019-10-18T19:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2019-2215", "record": "GSD-2019-2215", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2019-10-21T00:00:00Z", "date_only": false, "value": "2019-10-21T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201910-0902", "record": "VAR-201910-0902", "field": "sources_update_date.data.2.date"}, {"timestamp": "2019-10-21T19:41:28Z", "date_only": false, "value": "2019-10-21T19:41:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/orderofsixangles/40", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "d95ee6ef-55fb-4175-9384-af849616b704", "content": "\u0421\u043b\u0435\u0434\u043e\u043c \u0438\u0434\u0435\u0442, \u0442\u0430\u043a \u043d\u0430\u0437\u044b\u0432\u0430\u0435\u043c\u044b\u0439 0-day \u0432 Android. \u0427\u0442\u043e \u043c\u044b \u0438\u043c\u0435\u0435\u043c \u043d\u0430 \u0434\u0435\u043b\u0435? \n\n\u0418\u043c\u0435\u0435\u043c \u043d\u043e\u0432\u043e\u0441\u0442\u044c:\nhttps://xakep.ru/2019/10/17/qu1ckr00t/\n\n\u0411\u044b\u043b\u0430 \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u0443\u044f\u0432\u0437\u0438\u043c\u043e\u0441\u0442\u044c Use-After-Free (https://bugs.chromium.org/p/project-zero/issues/detail?id=1942), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u0435\u043b\u0430 \u043a privlege escalation. \u0422\u0435\u043c \u0441\u0430\u043c\u044b\u043c \u043e\u043d\u0430 \u0434\u0430\u0432\u0430\u043b\u0430 \u043f\u043e\u043b\u043d\u044b\u0439 Read Write \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u044f\u0434\u0440\u0443 \u0438 \u0432 \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u0435 \u0438 \u0432\u0441\u0451. \u0414\u0430\u043b\u0435\u0435 \u0447\u0443\u0432\u0430\u043a \u0432\u0437\u044f\u043b \u044d\u0442\u0443 \u0434\u0438\u0447\u044c, \u0438 \u0442\u0430\u043a \u043a\u0430\u043a \u043e\u043d \u0438\u043c\u0435\u0435\u0442 \u043f\u043e\u043b\u043d\u044b\u0435 \u043f\u0440\u0430\u0432\u0430 \u043a kernel, \u043d\u0430\u0448\u0435\u043b \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 task_struct \u0432 \u044f\u0434\u0435\u0440\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0438 \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u0438, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0438\u0435 \u0437\u0430 SECCOMP, SELinux \u0438 \u0442.\u0434, \u0438 \u0442\u0443\u043f\u043e \u043f\u043e\u043e\u0442\u043a\u043b\u044e\u0447\u0430\u043b \u0432\u0441\u0451. (https://hernan.de/blog/2019/10/15/tailoring-cve-2019-2215-to-achieve-root/). \n\n\u0422\u043e \u0435\u0441\u0442\u044c, \u0441\u0430\u043c\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u044b \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u0432 \u0441\u043f\u0438\u0441\u043a\u0435, \u0430 \u0438\u043c\u0435\u043d\u043d\u043e \u0440\u0443\u0442\u043e\u0432\u0430\u043d\u0438\u044e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0442\u043e\u043b\u044c\u043a\u043e Pixel 2 \u0438 \u0438\u043c\u0435\u043d\u043d\u043e \u0442\u043e\u0439 \u0441\u0431\u043e\u0440\u043a\u0438 \u044f\u0434\u0440\u0430, \u0447\u0442\u043e \u0432 \u0441\u0442\u0430\u0442\u044c\u0435.\n\n\u0422\u0430\u043a \u0447\u0442\u043e, \u043d\u0435 \u0442\u0430\u043a\u043e\u0439 \u0443\u0436 \u0438 \u0446\u0435\u043d\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442, \u0431\u0435\u0437 \u0434\u043e\u0440\u0430\u0431\u043e\u0442\u043a\u0438 *(", "url": "https://t.me/orderofsixangles/40"}, {"timestamp": "2019-10-30T00:00:00Z", "date_only": true, "value": "2019-10-30", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2019-38253", "record": "CNVD-2019-38253", "field": "openTime"}, {"timestamp": "2019-11-05T00:00:00Z", "date_only": false, "value": "2019-11-05T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2019-AVI-545", "record": "CERTFR-2019-AVI-545", "field": "initial_release_date"}, {"timestamp": "2019-11-05T00:00:00Z", "date_only": false, "value": "2019-11-05T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2019-AVI-545", "record": "CERTFR-2019-AVI-545", "field": "revisions.0.revision_date"}, {"timestamp": "2019-11-07T00:00:00Z", "date_only": false, "value": "2019-11-07T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2019-AVI-545", "record": "CERTFR-2019-AVI-545", "field": "last_revision_date"}, {"timestamp": "2019-11-07T00:00:00Z", "date_only": false, "value": "2019-11-07T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2019-AVI-545", "record": "CERTFR-2019-AVI-545", "field": "revisions.1.revision_date"}, {"timestamp": "2019-11-08T15:37:19Z", "date_only": false, "value": "2019-11-08T15:37:19", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201910-0902", "record": "VAR-201910-0902", "field": "sources_release_date.data.2.date"}, {"timestamp": "2019-11-09T21:28:10Z", "date_only": false, "value": "2019-11-09T21:28:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/canyoupwnme/6122", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "380d5b33-35dc-4096-88ab-35eda97df67e", "content": "Analyzing Android's CVE-2019-2215 (/dev/binder UAF)\nhttps://dayzerosec.com/posts/analyzing-androids-cve-2019-2215-dev-binder-uaf/", "url": "https://t.me/canyoupwnme/6122"}, {"timestamp": "2019-11-13T00:00:00Z", "date_only": false, "value": "2019-11-13T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2019-AVI-555", "record": "CERTFR-2019-AVI-555", "field": "initial_release_date"}, {"timestamp": "2019-11-13T00:00:00Z", "date_only": false, "value": "2019-11-13T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2019-AVI-555", "record": "CERTFR-2019-AVI-555", "field": "revisions.0.revision_date"}, {"timestamp": "2019-11-13T17:16:22Z", "date_only": false, "value": "2019-11-13T17:16:22", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201910-0902", "record": "VAR-201910-0902", "field": "sources_release_date.data.1.date"}, {"timestamp": "2019-11-14T00:00:00Z", "date_only": false, "value": "2019-11-14T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2019-AVI-555", "record": "CERTFR-2019-AVI-555", "field": "last_revision_date"}, {"timestamp": "2019-11-14T00:00:00Z", "date_only": false, "value": "2019-11-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2019-AVI-555", "record": "CERTFR-2019-AVI-555", "field": "revisions.1.revision_date"}, {"timestamp": "2019-11-14T15:56:10Z", "date_only": false, "value": "2019-11-14T15:56:10", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201910-0902", "record": "VAR-201910-0902", "field": "sources_release_date.data.3.date"}, {"timestamp": "2019-11-22T05:31:17Z", "date_only": false, "value": "2019-11-22T05:31:17.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/secinfosex/23", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "ef82cc6b-55ab-431a-9352-3c4b2a803396", "content": "\u0420\u0435\u0431\u044f\u0442\u0430 \u0438\u0437 Project Zero \u043e\u043f\u0438\u0441\u0430\u043b\u0438 CVE-2019-2215, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0443\u044e \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 0day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430\u0445 \u0448\u043f\u0438\u043e\u043d\u0430 Pegasus \u043e\u0442 NSO Group. \n\n\u041a\u0440\u0430\u0442\u043a\u043e:\n\n\u0418\u0441\u0445\u043e\u0434\u044f \u0438\u0437 \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u043e\u0432 NSO Group - \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0447\u0435\u0440\u0435\u0437 \u0431\u0440\u0430\u0443\u0437\u0435\u0440, \u0434\u0430\u0432\u043d\u043e. \u0424\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u043f\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 Pegasus, \u043e\u0447\u0435\u043d\u044c \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0430\u043b\u044c\u043d\u043e.\n\n\u0418\u0441\u0445\u043e\u0434\u044f \u0438\u0437 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0433\u0443\u0433\u043b\u0430 - UAF, \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 Binder, \u044f\u0434\u0440\u043e, Linux kernel >= 4.14, SELinux isolated_app \u043d\u0435 \u0441\u043f\u0430\u0441\u0430\u0435\u0442, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0438\u0437 Chrome, \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0430 \u043d\u0435 \u0441\u043f\u0430\u0441\u0430\u0435\u0442.\n\n\u043e Pegasus:\n\u041c\u043e\u0434\u0443\u043b\u044c\u043d\u0430\u044f \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0430\u044f \u0441\u043f\u0430\u0439\u0432\u0430\u0440\u044c \u043e\u0442 NSO Group. \n\u0427\u0438\u0442\u0430\u0435\u0442 sms, \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u043a\u0443, \u0434\u0435\u043b\u0430\u0435\u0442 \u0441\u043a\u0440\u0438\u043d\u0448\u043e\u0442\u044b, \u043f\u0438\u0448\u0435\u0442 \u0437\u0432\u0443\u043a, \u043b\u043e\u0433\u0433\u0438\u0440\u0443\u0435\u0442 \u0432\u0432\u043e\u0434, \u044d\u043a\u0441\u043f\u043e\u0440\u0442\u0438\u0440\u0443\u0435\u0442 \u043a\u043e\u043d\u0442\u0430\u043a\u0442\u044b - \u043f\u043e\u043b\u043d\u044b\u0439 \u043d\u0430\u0431\u043e\u0440 \u0434\u043b\u044f \u0441\u043e\u043b\u0438\u0434\u043d\u044b\u0445 \u0433\u043e\u0441\u043f\u043e\u0434.\n\n\u043e\u0431 NSO Group:\n\u0418\u0437\u0440\u0430\u0438\u043b\u044c\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f, \u0440\u0430\u0437\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0430\u044f  \u0438 \u043f\u0440\u043e\u0434\u0430\u044e\u0449\u0430\u044f \u043c\u0435\u0442\u043e\u0434\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0441\u043b\u0435\u0436\u0435\u043d\u0438\u044f \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442, \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c Pegasus \u0438 Chrysaor.  \n\n# https://googleprojectzero.blogspot.com/2019/11/bad-binder-android-in-wild-exploit.html\n# https://www.kaspersky.ru/blog/pegasus-spyware/14569/\n# https://en.wikipedia.org/wiki/NSO_Group", "url": "https://t.me/secinfosex/23"}, {"timestamp": "2019-11-22T09:12:16Z", "date_only": false, "value": "2019-11-22T09:12:16.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/androidMalware/500", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "cc657e50-0da8-44de-acd6-8d4d89193794", "content": "Analysis of use-after-free in Binder vulnerability - CVE-2019-2215\n\nThis exploit was used in-the-wild to install NSO group malware - Pegasus.\nThe bug is a local privilege escalation vulnerability that allows for a full compromise of a vulnerable device. If chained with a browser renderer exploit, this bug could fully compromise a device through a malicious website.\nhttps://googleprojectzero.blogspot.com/2019/11/bad-binder-android-in-wild-exploit.html", "url": "https://t.me/androidMalware/500"}, {"timestamp": "2019-12-05T18:57:27Z", "date_only": false, "value": "2019-12-05T18:57:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/novitoll_ch/43", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "1dfc8e83-28f3-4d97-9fab-cdfa54a3bc49", "content": "\u041e\u0442 \u0430\u0432\u0442\u043e\u0440\u0430 CVE-2019-2215 \u0441 Google p0\nhttps://maddiestone.github.io/AndroidAppRE/", "url": "https://t.me/novitoll_ch/43"}, {"timestamp": "2019-12-10T19:38:44Z", "date_only": false, "value": "2019-12-10T19:38:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/orderofsixangles/110", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "f80f8395-0305-487c-bf35-dfff8c67a18d", "content": "\u203c\ufe0f\u203c\ufe0f \n21-\u0433\u043e \u0434\u0435\u043a\u0430\u0431\u0440\u044f (\u0441\u0443\u0431\u0431\u043e\u0442\u0430), \u0432 \u0410\u0441\u0442\u0430\u043d\u0435, \u0432 18:00, \u0431\u0443\u0434\u0435\u0442 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u0430\u044f \u0432\u0441\u0442\u0440\u0435\u0447\u0430 r0crewKZ! \u041f\u0440\u043e\u0445\u043e\u0434\u0438\u0442\u044c \u0432\u0441\u0451 \u0431\u0443\u0434\u0435\u0442 \u0432 \u0442\u043e\u043c \u0436\u0435 \u043c\u0435\u0441\u0442\u0435, \u0432 Burger Shop! + \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u043e\u0435 \u043f\u0438\u0432\u043e \u043e\u0442 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 (\u0432 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u043c \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0435)\n\n\u0422\u0435\u043c\u044b \u0434\u043e\u043a\u043b\u0430\u0434\u043e\u0432:\n\n1) CVE-2019-2215: Android Binder UAF exploitation research\n2) \u0421\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u0430\u044f \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u0438\u044f: \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u044f\n3) cat web gsm > khs_cyberpolygon_2019.ppt\n4) RFID raw spoofing\n5) SDR \u0434\u043b\u044f \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0449\u0438\u0445\n\n\u041c\u0435\u0441\u0442\u043e: Burger shop (http://burgershop.kz/). \u041d\u0430 \u0441\u0430\u0439\u0442\u0435 \u043d\u0430\u0439\u0434\u0435\u0442\u0435 \u043c\u0435\u043d\u044e \u0438 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435\n\u041d\u0430 \u043a\u0430\u0440\u0442\u0435: https://2gis.kz/nur_sultan/firm/70000001028880208\n\u0418\u043d\u0441\u0442\u0430\u0433\u0440\u0430\u043c: https://www.instagram.com/burgershop.astana/", "url": "https://t.me/orderofsixangles/110"}, {"timestamp": "2019-12-18T17:12:23Z", "date_only": false, "value": "2019-12-18T17:12:23.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Anonymous_TV_AR/5", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "df913bf6-27a1-49d2-9676-18e59bbc6013", "content": "\u062b\u063a\u0631\u0629 CVE-2019-2215 \u062a\u0639\u0648\u062f \u0645\u0633\u062a\u0647\u062f\u0641\u062a\u0627\u064b \u0627\u0644\u0627\u062c\u0647\u0632\u0629 \u0627\u0644\u062d\u062f\u064a\u062b\u0629 \n\n\u0623\u0648\u0636\u062d\u062a \u0634\u0631\u0643\u0629 \u063a\u0648\u063a\u0644 \u0623\u0646\u0647\u0627 \u0639\u062b\u0631\u062a \u0639\u0644\u0649 \u062f\u0644\u064a\u0644 \u0628\u0634\u0623\u0646 \u0648\u062c\u0648\u062f \u062b\u063a\u0631\u0629 \u0623\u0645\u0646\u064a\u0629 \u063a\u064a\u0631 \u0645\u0635\u062d\u062d\u0629 \u0641\u064a \u0646\u0638\u0627\u0645 \u0627\u0644\u062a\u0634\u063a\u064a\u0644 \u0623\u0646\u062f\u0631\u0648\u064a\u062f \u062a\u0633\u062a\u062e\u062f\u0645 \u0641\u064a \u0627\u0644\u0647\u062c\u0645\u0627\u062a \u0641\u064a \u0627\u0644\u0639\u0627\u0644\u0645 \u0627\u0644\u062d\u0642\u064a\u0642\u064a \u062a\u062d\u0645\u0644 \u062d\u0627\u0644\u064a\u0627 \u0627\u0644\u0627\u0633\u0645 (CVE-2019-2215).\n\u0648\u0623\u0634\u0627\u0631\u062a \u0627\u0644\u0649 \u0627\u0646\u0647 \u0628\u0627\u0644\u0631\u063a\u0645 \u0645\u0646 \u0623\u0646 \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0642\u062f \u062c\u0631\u0649 \u0625\u0635\u0644\u0627\u062d\u0647\u0627 \u0641\u064a \u0627\u0644\u0625\u0635\u062f\u0627\u0631\u0627\u062a \u0627\u0644\u0623\u0642\u062f\u0645 \u0645\u0646 \u0623\u0646\u062f\u0631\u0648\u064a\u062f\u060c \u0625\u0644\u0627 \u0623\u0646\u0647\u0627 \u0639\u0627\u0648\u062f\u062a \u0627\u0644\u0638\u0647\u0648\u0631 \u0641\u064a \u0627\u0644\u0625\u0635\u062f\u0627\u0631\u0627\u062a \u0627\u0644\u0623\u062d\u062f\u062b.\n\u0648\u062a\u0648\u062c\u062f \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0641\u064a \u0646\u0648\u0627\u0629 \u0646\u0638\u0627\u0645 \u0627\u0644\u062a\u0634\u063a\u064a\u0644 \u0623\u0646\u062f\u0631\u0648\u064a\u062f\u060c \u0648\u064a\u0645\u0643\u0646 \u0627\u0633\u062a\u062e\u062f\u0627\u0645\u0647\u0627 \u0644\u0645\u0633\u0627\u0639\u062f\u0629 \u0627\u0644\u0645\u0647\u0627\u062c\u0645 \u0641\u064a \u0627\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u0648\u0635\u0648\u0644 \u0625\u0644\u0649 \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645 \u0627\u0644\u062c\u0630\u0631 \u0644\u0644\u062c\u0647\u0627\u0632.\n\u0648\u0630\u0643\u0631\u062a \u0623\u0646 \u0627\u0644\u062b\u063a\u0631\u0629 \u062a\u0645 \u062a\u0635\u062d\u064a\u062d\u0647\u0627 \u0641\u064a \u0634\u0647\u0631 \u0643\u0627\u0646\u0648\u0646 \u0627\u0644\u0627\u0648\u0644 2017 \u0641\u064a \u0625\u0635\u062f\u0627\u0631\u0627\u062a \u0623\u0646\u062f\u0631\u0648\u064a\u062f 3.18 \u0648 4.14 \u0648 4.4 \u0648 4.9\u060c \u0644\u0643\u0646\u0647\u0627 \u0639\u062b\u0631\u062a \u0639\u0644\u064a\u0647\u0627 \u0641\u064a \u0627\u0644\u0625\u0635\u062f\u0627\u0631\u0627\u062a \u0627\u0644\u0623\u062d\u062f\u062b \u0645\u0646 \u0646\u0638\u0627\u0645 \u0623\u0646\u062f\u0631\u0648\u064a\u062f.\n\u0648\u0627\u0634\u0627\u0631\u062a \u0627\u0644\u0634\u0631\u0643\u0629 \u0627\u0644\u0649 \u0627\u0646 \u0628\u0627\u062d\u062b\u064a \u063a\u0648\u063a\u0644 \u064a\u0639\u062a\u0642\u062f\u0648\u0646 \u0623\u0646 \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u062a\u0624\u062b\u0631 \u0639\u0644\u0649 \u0646\u0645\u0627\u0630\u062c \u0647\u0648\u0627\u062a\u0641 \u0623\u0646\u062f\u0631\u0648\u064a\u062f \u0627\u0644\u062a\u0627\u0644\u064a\u0629 \u0627\u0644\u0639\u0627\u0645\u0644\u0629 \u0628\u0646\u0633\u062e\u0629 \u0623\u0646\u062f\u0631\u0648\u064a\u062f 8.0 \u0648\u0645\u0627 \u0628\u0639\u062f\u0647:\nGoogle Pixel.\nGoogle Pixel 1 XL.\nGoogle Pixel 2.\nGoogle Pixel 2 XL\nHuawei P20.\nXiaomi Redmi 5A.\nXiaomi Redmi Note 5.\nXiaomi A1.\nOppo A3.\nMoto Z3.\nSamsung Galaxy S7.\nSamsung Galaxy S8.\nSamsung Galaxy S9.\n+ \u0647\u0648\u0627\u062a\u0641 \u0634\u0631\u0643\u0629 \u0625\u0644 \u062c\u064a \u0627\u0644\u0639\u0627\u0645\u0644\u0629 \u0628\u0646\u0638\u0627\u0645 \u0623\u0646\u062f\u0631\u0648\u064a\u062f \u0623\u0648\u0631\u064a\u0648.", "url": "https://t.me/Anonymous_TV_AR/5"}, {"timestamp": "2019-12-26T09:42:22Z", "date_only": false, "value": "2019-12-26T09:42:22.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/orderofsixangles/207", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "7a073b6f-90de-4c2b-a027-d26b3e66f20e", "content": "29-\u0433\u043e \u0434\u0435\u043a\u0430\u0431\u0440\u044f \u0432 21:00 (GMT +6) \u0431\u0443\u0434\u0435\u0442 \u0441\u0442\u0440\u0438\u043c \u043f\u043e \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u043c\u0443 \u0440\u0430\u0437\u0431\u043e\u0440\u0443 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430 CVE-2019-2215: Android Binder UAF. \n\u0411\u0443\u0434\u0435\u043c \u0434\u0435\u0431\u0430\u0436\u0438\u0442\u044c, \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 PoC \u0434\u043e r00t \u043d\u0430 Android-x86 VM, v4.14.150.\n\n\u041f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u043d\u0430 2 \u0447\u0430\u0441\u0430.\n\nhttps://www.twitch.tv/novitoll", "url": "https://t.me/orderofsixangles/207"}, {"timestamp": "2020-01-06T14:29:02Z", "date_only": false, "value": "2020-01-06T14:29:02.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/5e1343da-fac8-4558-a459-07670a3b4631", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "07d06295-af53-4648-9e7d-05bc8a49e81d"}, {"timestamp": "2020-01-06T18:40:26Z", "date_only": false, "value": "2020-01-06T18:40:26.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/androidMalware/588", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "3c52e970-9510-4261-8334-4efa0b312926", "content": "First Attack Exploiting CVE-2019-2215 (use-after-free vulnerability) Found on Google Play #SideWinder\nhttps://blog.trendmicro.com/trendlabs-security-intelligence/first-active-attack-exploiting-cve-2019-2215-found-on-google-play-linked-to-sidewinder-apt-group/", "url": "https://t.me/androidMalware/588"}, {"timestamp": "2020-01-06T19:10:31Z", "date_only": false, "value": "2020-01-06T19:10:31.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/antichat/7563", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "9a7863f7-351a-44f0-a5cc-7ce5e27bca11", "content": "https://blog.trendmicro.com/trendlabs-security-intelligence/first-active-attack-exploiting-cve-2019-2215-found-on-google-play-linked-to-sidewinder-apt-group", "url": "https://t.me/antichat/7563"}, {"timestamp": "2020-01-06T23:48:14Z", "date_only": false, "value": "2020-01-06T23:48:14.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ctinow/19080", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "8d66246b-28a6-44df-aa1b-8c939ae2f4a5", "content": "Malicious Google Play Apps Linked to SideWinder APT The active attack involving three malicious Android applications is the first exploiting CVE-2019-2215, Trend Micro researchers report. https://www.darkreading.com/application-security/malicious-google-play-apps-linked-to-sidewinder-apt/d/d-id/1336728?_mc=rss_x_drr_edt_aud_dr_x_x-rss-simple", "url": "https://t.me/ctinow/19080"}, {"timestamp": "2020-01-06T23:56:41Z", "date_only": false, "value": "2020-01-06T23:56:41.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/9009", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "aa3d7c32-ea4e-4582-bbd5-f2d149db8420", "content": "\ud83d\udd74 Malicious Google Play Apps Linked to SideWinder APT \ud83d\udd74\n\nThe active attack involving three malicious Android applications is the first exploiting CVE-2019-2215, Trend Micro researchers report.\n\n\ud83d\udcd6 Read\n\nvia \"Dark Reading: \".", "url": "https://t.me/cibsecurity/9009"}, {"timestamp": "2020-01-07T00:17:42Z", "date_only": false, "value": "2020-01-07T00:17:42.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/information_security_channel/33872", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "eccb7bee-9c2d-42d5-8472-1b4af4649e66", "content": "Malicious Google Play Apps Linked to SideWinder APT\nhttps://www.darkreading.com/application-security/malicious-google-play-apps-linked-to-sidewinder-apt/d/d-id/1336728?_mc=rss_x_drr_edt_aud_dr_x_x-rss-simple\n\nThe active attack involving three malicious Android applications is the first exploiting CVE-2019-2215, Trend Micro researchers report.", "url": "https://t.me/information_security_channel/33872"}, {"timestamp": "2020-01-07T01:06:59Z", "date_only": false, "value": "2020-01-07T01:06:59.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/information_security_channel/33875", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "b55d4dca-b762-4194-b34e-694191fb8758", "content": "Security researchers from Trend Micro observed three malicious apps on Google play that aims to compromise victim\u2019s devices and to steal information. The three apps include \u201cCamero, FileCryptManager & CallCam,\u201d among the three Camero is the one exploits use-after-free vulnerability CVE-2019-2215. This is the first attack spotted in wild using exploits CVE-2019-2215 that resides in [\u2026]\nThe post Hackers Exploit Android Vulnerability to Install Malware Without User Interaction Via Google Play (https://gbhackers.com/sidewinder-apt-group/) appeared first on GBHackers On Security (https://gbhackers.com/).", "url": "https://t.me/information_security_channel/33875"}, {"timestamp": "2020-01-07T18:00:34Z", "date_only": false, "value": "2020-01-07T18:00:34.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/572", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "79f8ade1-c47a-4f6e-bf32-cdf9472483d4", "content": "3 Malicious apps distributed via Google Play Store were exploiting a critical Android rooting flaw (CVE-2019-2215) almost 6 months before it was discovered that Israeli surveillance firm NSO Group used the flaw as zero-day\n.\n\nRead: https://thehackernews.com/2020/01/android-zero-day-malware-apps.html", "url": "https://t.me/thehackernews/572"}, {"timestamp": "2020-01-07T18:12:11Z", "date_only": false, "value": "2020-01-07T18:12:11.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/19103", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "36cc91b6-bca9-4526-a3ae-9758d7f26ce6", "content": "Three Android Apps Have Been Exploiting CVE-2019-2215 Since March\n\nhttps://ift.tt/2usREdd", "url": "https://t.me/ctinow/19103"}, {"timestamp": "2020-01-08T19:14:41Z", "date_only": false, "value": "2020-01-08T19:14:41.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/orderofsixangles/212", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "b0444f19-b10b-4079-9248-20e4ede18f24", "content": "\ud83d\udc7e CVE-2019-2215 \ud83d\udc7e\n\n\u0410\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b Google Project Zero \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0432 \u044f\u0434\u0440\u0435 Android \u043e\u043f\u0430\u0441\u043d\u044b\u0439 \u0431\u0430\u0433, \u043f\u0435\u0440\u0435\u0434 \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u043c\u043d\u043e\u0433\u0438\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c Android. \u041f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0443\u0436\u0435 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u043f\u043e\u0434 \u0430\u0442\u0430\u043a\u0430\u043c\u0438. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043c\u043e\u0447\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0446\u0435\u043b\u0435\u0432\u043e\u043c\u0443 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443.\n\n\ud83d\udcac \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Google \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0439 \u0438\u043c\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u0434\u043b\u044f CVE-2019-2215 \u2013 \u0434\u0435\u043b\u043e \u0440\u0443\u043a \u043d\u0435\u0431\u0435\u0437\u044b\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 \u0438\u0437\u0440\u0430\u0438\u043b\u044c\u0441\u043a\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 NSO Group. \n\n\u261d\ud83c\udffb \u041d\u0430\u043f\u043e\u043c\u043d\u044e, \u0447\u0442\u043e NSO Group \u0431\u044b\u043b\u0430 \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u0430 \u0432 2010 \u0433\u043e\u0434\u0443 \u0438 \u0441 \u0442\u0435\u0445 \u043f\u043e\u0440 \u0437\u0430\u043d\u0438\u043c\u0430\u0435\u0442\u0441\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u043e\u0439 \u043b\u0435\u0433\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u043b\u0432\u0430\u0440\u0438, \u043a\u043e\u0442\u043e\u0440\u0443\u044e, \u043d\u0430\u0440\u044f\u0434\u0443 \u0441 \u044d\u043a\u043f\u043b\u043e\u0438\u0442\u0430\u043c\u0438 \u0434\u043b\u044f \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 0-day, \u043f\u0440\u043e\u0434\u0430\u0435\u0442 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430\u043c \u0438 \u0441\u043f\u0435\u0446\u0441\u043b\u0443\u0436\u0431\u0430\u043c \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443.\n\n\u0420\u0430\u0437\u0431\u043e\u0440 \u0434\u0430\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0430 \u0420\u0443\u0441\u0441\u043a\u043e\u043c \u044f\u0437\u044b\u043a\u0435 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u043d\u0430 \u0422\u0432\u0438\u0447\u0435.\n\n\ud83d\udccc https://www.twitch.tv/videos/527925171\n\n\ud83d\ude0e \u0410\u0432\u0442\u043e\u0440 @novitoll_ch | @novitoll\n\n\ud83d\udc68\ud83c\udffb\u200d\ud83d\udcbb \u0422\u0432\u0438\u0447 \u0430\u0432\u0442\u043e\u0440\u0430: https://www.twitch.tv/novitoll\n\n\u203c\ufe0f \u041f\u043e \u0440\u0435\u0433\u043b\u0430\u043c\u0435\u043d\u0442\u0430\u043c \u0442\u0432\u0438\u0447\u0430 \u0432\u0438\u0434\u0435\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e 14 \u0434\u043d\u0435\u0439 \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438. \u0414\u0430\u043d\u043d\u044b\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u0431\u044b\u043b \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d 10 \u0434\u043d\u0435\u0439 \u043d\u0430\u0437\u0430\u0434. \u0423 \u0412\u0430\u0441 \u0435\u0441\u0442\u044c \u0432\u0440\u0435\u043c\u044f 4-5 \u0434\u043d\u0435\u0439 \u0434\u043b\u044f \u043e\u0437\u043d\u0430\u043a\u043e\u043c\u043b\u0435\u043d\u0438\u044f\u203c\ufe0f\n\n\u041f\u043e\u0441\u0442\u0430\u0440\u0430\u0435\u043c\u0441\u044f \u0441\u043a\u0430\u0447\u0430\u0442\u044c \u0438 \u0437\u0430\u043b\u0438\u0442\u044c \u0432 \u043f\u0440\u0438\u0432\u0430\u0442 \u043a\u0430\u043d\u0430\u043b. \u0427\u0442\u043e \u0431\u044b \u0432\u0438\u0434\u0435\u043e \u043d\u0435 \u043f\u0440\u043e\u043f\u0430\u043b\u043e. \u041e\u0447\u0435\u043d\u044c \u0446\u0435\u043d\u043d\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f. \u0418\u0437\u0443\u0447\u0430\u0439\u0442\u0435.\n\n#cve #2019 #2215", "url": "https://t.me/orderofsixangles/212"}, {"timestamp": "2020-01-09T14:07:21Z", "date_only": false, "value": "2020-01-09T14:07:21.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/alexmakus/3223", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "32d5023e-b436-49e6-bfe1-e56ca651f400", "content": "\u041f\u0440\u0438\u0432\u0435\u0442. \u0411\u0443\u0434\u0435\u043c \u043f\u043e\u0442\u0438\u0445\u043e\u043d\u044c\u043a\u0443 \u0432\u044b\u0445\u043e\u0434\u0438\u0442\u044c \u0438\u0437 \u043f\u0440\u0430\u0437\u0434\u043d\u0438\u0447\u043d\u043e\u0439 \u043a\u043e\u043c\u044b, \u0442\u0435\u043c \u0431\u043e\u043b\u0435\u0435, \u0447\u0442\u043e \u0432 \u043c\u0438\u0440\u0435 \u0438\u043d\u0444\u043e\u0441\u0435\u043a\u0430 \u0436\u0438\u0437\u043d\u044c \u043d\u0435 \u043e\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0441\u044c, \u0430 \u0434\u0430\u0436\u0435 \u0441\u0438\u043b\u044c\u043d\u043e \u0431\u0443\u0440\u043b\u0438\u0442. \u0433\u0435\u043e\u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430, \u043a \u0441\u043e\u0436\u0430\u043b\u0435\u043d\u0438\u044e, \u0441\u0442\u0430\u043b\u0430 \u043d\u0435\u043e\u0442\u0434\u0435\u043b\u0438\u043c\u0430 \u043e\u0442 \u0438\u043d\u0444\u043e\u0441\u0435\u043a\u0430, \u0438, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043c\u044b \u0443\u0432\u0438\u0434\u0438\u043c \u043c\u043d\u043e\u0433\u043e \u0438\u043d\u0444\u043e\u0441\u0435\u043a \u043d\u043e\u0432\u043e\u0441\u0442\u0435\u0439, \u0433\u0434\u0435 \u0431\u0443\u0434\u0443\u0442 \u0444\u0438\u0433\u0443\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0421\u0428\u0410 \u0438 \u0418\u0440\u0430\u043d. \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043f\u0430\u0440\u0443 \u0434\u043d\u0435\u0439 \u0443\u0436\u0435 \u043f\u043e\u044f\u0432\u0438\u043b\u043e\u0441\u044c \u043c\u043d\u043e\u0433\u043e \u0430\u043f\u0434\u0435\u0439\u0442\u043e\u0432 \u0441 \u0434\u0435\u0444\u0435\u0439\u0441\u0430\u043c\u0438 \u0441\u0430\u0439\u0442\u043e\u0432, \u043d\u043e \u0441\u0442\u043e\u0438\u0442 \u043e\u0436\u0438\u0434\u0430\u0442\u044c \u0438 \u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u044d\u043a\u0448\u0435\u043d\u043e\u0432. \n\n\u043d\u043e \u043f\u043e\u043a\u0430 \u0447\u0442\u043e \u043f\u043e\u043f\u0440\u043e\u0449\u0435 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u2014\u00a0\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0432 Google Play (Camero, FileCrypt \u0438 callCam) \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442 \u0432 \u0441\u0432\u043e\u0435\u0439 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 NSO Group. \u041f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0432\u0442\u0438\u0445\u0430\u0440\u044f \u0440\u0443\u0442\u044f\u0442 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0438 \u043f\u043e\u0442\u043e\u043c \u0432\u044b\u0433\u0440\u0435\u0431\u0430\u044e\u0442 \u0432\u0441\u044e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0441 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043e\u0432 \n\nhttps://blog.trendmicro.com/trendlabs-security-intelligence/first-active-attack-exploiting-cve-2019-2215-found-on-google-play-linked-to-sidewinder-apt-group/", "url": "https://t.me/alexmakus/3223"}, {"timestamp": "2020-01-31T20:38:28Z", "date_only": false, "value": "2020-01-31T20:38:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/codeby_sec/2717", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "d14371cb-087d-4b7a-9cc0-bedcb80cf9ed", "content": "\u200b\u200b\u0410\u043d\u0430\u043b\u0438\u0437 CVE-2019-2215(/dev/binder UAF)\n\n\u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043d\u0435\u0434\u0435\u043b\u044c, \u044f \u043f\u044b\u0442\u0430\u043b\u0441\u044f \u043f\u043e\u043d\u044f\u0442\u044c \u043d\u0435\u0434\u0430\u0432\u043d\u0438\u0439 Android Binder Use-After-Free (UAF), \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u041f\u0440\u043e\u0435\u043a\u0442\u043e\u043c Google Project Zero (p0). \u042d\u0442\u043e\u0442 \u0431\u0430\u0433 \u043d\u0430 \u0441\u0430\u043c\u043e\u043c \u0434\u0435\u043b\u0435 \u043d\u0435 \u043d\u043e\u0432\u044b\u0439, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u044f\u0434\u0440\u0435 \u0432 \u0444\u0435\u0432\u0440\u0430\u043b\u0435 2018 \u0433\u043e\u0434\u0430, \u043e\u0434\u043d\u0430\u043a\u043e, p0 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b, \u0447\u0442\u043e \u043c\u043d\u043e\u0433\u0438\u0435 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043f\u0430\u0442\u0447\n\n\u0427\u0438\u0442\u0430\u0442\u044c \u0441\u0442\u0430\u0442\u044c\u044e \u043d\u0430 \u043a\u043e\u0434\u0435\u0431\u0430\u0439: https://codeby.net/threads/analiz-cve-2019-2215-dev-binder-uaf.69977/\n\n#android #cve #java #kernelleak", "url": "https://t.me/codeby_sec/2717"}, {"timestamp": "2020-02-18T20:18:03Z", "date_only": false, "value": "2020-02-18T20:18:03.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/androidMalware/681", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "593b655d-d5a4-42e1-aa06-c638070bbb67", "content": "The Android Binder PoC exploit (CVE-2019-2215)\nhttps://github.com/DimitriFourny/cve-2019-2215", "url": "https://t.me/androidMalware/681"}, {"timestamp": "2020-02-23T09:15:48Z", "date_only": false, "value": "2020-02-23T09:15:48.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/android/local/binder_uaf.rb", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "5eb21c9f-e5fb-4275-aa6f-e67f6f08d394", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/android/local/binder_uaf.rb"}, {"timestamp": "2020-02-24T00:00:00Z", "date_only": false, "value": "2020-02-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://www.exploit-db.com/exploits/48129", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "0d8d4857-2011-416e-8a6f-cd410094e87e", "url": "https://www.exploit-db.com/exploits/48129"}, {"timestamp": "2020-03-02T19:06:43Z", "date_only": false, "value": "2020-03-02T19:06:43.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / google_android", "record": "CVE-2019-2215", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2020-03-04T00:00:00Z", "date_only": false, "value": "2020-03-04T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2020-AVI-123", "record": "CERTFR-2020-AVI-123", "field": "last_revision_date"}, {"timestamp": "2020-03-04T00:00:00Z", "date_only": false, "value": "2020-03-04T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2020-AVI-123", "record": "CERTFR-2020-AVI-123", "field": "initial_release_date"}, {"timestamp": "2020-03-04T00:00:00Z", "date_only": false, "value": "2020-03-04T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2020-AVI-123", "record": "CERTFR-2020-AVI-123", "field": "revisions.0.revision_date"}, {"timestamp": "2020-03-20T07:07:57Z", "date_only": false, "value": "2020-03-20T07:07:57.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/jFjf8KlZQyyL5_1x0nAuLdWnAtEkx6djpi_LpaJNCl3ZBg", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "d4710a90-929f-4ec8-862e-c4526bd62433"}, {"timestamp": "2020-04-09T00:00:00Z", "date_only": false, "value": "2020-04-09T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201910-0902", "record": "VAR-201910-0902", "field": "sources_update_date.data.1.date"}, {"timestamp": "2020-04-16T21:01:31Z", "date_only": false, "value": "2020-04-16T21:01:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/androidMalware/768", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "0e741af4-f9e5-420a-8930-129152ae234f", "content": "Android workshop: kernel vulnerability analysis and exploitation (CVE-2019-2215 - Use after Free)\nhttps://cloudfuzz.github.io/android-kernel-exploitation/\nhttps://github.com/cloudfuzz/android-kernel-exploitation", "url": "https://t.me/androidMalware/768"}, {"timestamp": "2020-05-03T10:48:24Z", "date_only": false, "value": "2020-05-03T10:48:24.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/novitoll_ch/68", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "2f5879ab-eac4-4dda-8ec7-31af6d424a0e", "content": "\u0417\u0430\u0433\u0440\u0443\u0437\u0438\u043b \u043d\u0430 \u042e\u0442\u0443\u0431 \u0441\u0442\u0430\u0440\u044b\u0439 \u043c\u043e\u0439 \u0441\u0442\u0440\u0438\u043c (\u0414\u0435\u043a\u0430\u0431\u0440\u044c 29, 2019) \u043f\u0440\u043e CVE-2019-2215.\nhttps://www.youtube.com/watch?v=iu6xPThoHZ8\n\n\u0418 \u043c\u043e\u0438 \u043d\u043e\u0432\u044b\u0435 \u0432\u0438\u0434\u043e\u0441\u044b \u043d\u0430 \u0430\u043d\u0433\u043b\u0438\u0439\u0441\u043a\u043e\u043c:\n\n-  CVE-2019-2215: TL;DR *no demo*\nhttps://www.youtube.com/watch?v=RT7BjSACrv0\n\n- Vulnserver KSTET (socket reuse)\nhttps://www.youtube.com/watch?v=6MFUR9J_gro", "url": "https://t.me/novitoll_ch/68"}, {"timestamp": "2020-05-18T18:34:25Z", "date_only": false, "value": "2020-05-18T18:34:25.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/novitoll_ch/69", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "269f1ab8-2031-4e96-9e47-59659afeb360", "content": "RnD \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439 \u0426\u0410\u0420\u041a\u0410, \u0432 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0446\u0435\u043b\u044f\u0445, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0432 \u0432\u0438\u0434\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u043e\u0432 \u043d\u0430 \u0431\u0430\u0437\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Android. \u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Android \u2013 CVE-2019-2215 Android Bad Binder Use-After-Free [1]. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 (root) \u043d\u0430 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u0435 \u043f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u043f\u043e\u0434 \u043b\u044e\u0431\u044b\u043c \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u044e\u0437\u0435\u0440\u043e\u043c. \u041e\u0448\u0438\u0431\u043a\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439 Google Project Zero (Maddie Stone) 27 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f 2019 \u0433\u043e\u0434\u0430 [2]. \n\n\u0414\u043b\u044f \u043f\u043e\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u043f\u043e\u044f\u0441\u043d\u0438\u043c, \u0430\u043d\u0430\u043b\u043e\u0433 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u0433\u043e \u043d\u0430\u043c\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u043c\u0430\u0441\u0441\u043e\u0432\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438 \u043a\u0430\u043a \u043a\u0438\u0431\u0435\u0440\u043e\u0440\u0443\u0436\u0438\u0435, \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c, \u0441 2017 \u0433\u043e\u0434\u0430 \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443. \u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Android, \u041d\u041e \u0434\u043b\u044f \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0430 \u0441\u0442\u0430\u0440\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435, \u0441\u043a\u043e\u0440\u0435\u0435 \u0432\u0441\u0435\u0433\u043e, \u043d\u0435 \u0432\u044b\u0439\u0434\u0435\u0442, \u0442\u0430\u043a \u043a\u0430\u043a \u043f\u0435\u0440\u0438\u043e\u0434 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0443\u0436\u0435 \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d.\n\n\u041f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0447\u0435\u043d\u044c \u0440\u0435\u0434\u043a\u043e \u043f\u0440\u043e\u0432\u043e\u0434\u044f\u0442\u0441\u044f \u0432 \u041a\u0430\u0437\u0430\u0445\u0441\u0442\u0430\u043d\u0435 \u0432\u0432\u0438\u0434\u0443 \u043a\u0430\u0442\u0430\u0441\u0442\u0440\u043e\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0434\u0435\u0444\u0438\u0446\u0438\u0442\u0430 \u043a\u043e\u043c\u043f\u0435\u0442\u0435\u043d\u0446\u0438\u0438. \u041c\u044b \u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043f\u0435\u0440\u0435\u0434 \u0441\u043e\u0431\u043e\u0439 \u0437\u0430\u0434\u0430\u0447\u0443 \u043e\u0446\u0435\u043d\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0441\u0438\u043b\u044b \u0432 \u0442\u0430\u043a\u043e\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0439 \u0437\u0430\u0434\u0430\u0447\u0435 \u043a\u0430\u043a \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Android \u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u0446\u0435\u043d\u043d\u043e\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430. \u0414\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u043d\u0430\u043c\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0430 \u043f\u0440\u0438\u0440\u043e\u0434\u0430 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438 \u0441\u043b\u043e\u0436\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Android.\n\n\u041d\u0430\u0448\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \u0443\u0436\u0435 \u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u043f\u0440\u043e\u043c\u0435\u0436\u0443\u0442\u043e\u0447\u043d\u044b\u043c\u0438 \u043d\u0430\u0440\u0430\u0431\u043e\u0442\u043a\u0430\u043c\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u0437\u043d\u0430\u043d\u0438\u044f\u043c\u0438 \u043d\u0430 \u0432\u0441\u0442\u0440\u0435\u0447\u0435 \u00abR0 crew KZ\u00bb (https://t.me/r0crewKZ) \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 2019 \u0433\u043e\u0434\u0430, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0432\u0435\u043b\u0430 \u043e\u0431\u0443\u0447\u0430\u044e\u0449\u0438\u0439 \u0441\u0442\u0440\u0438\u043c [3].\n\n\u0412 \u0441\u0435\u0442\u0438 \u0443\u0436\u0435 \u0438\u043c\u0435\u044e\u0442\u0441\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0440\u0430\u0437\u043d\u044b\u0445 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043d\u043e \u0434\u043b\u044f \u043a\u0430\u0437\u0430\u0445\u0441\u0442\u0430\u043d\u0441\u043a\u0438\u0445 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 \u044d\u0442\u043e \u043d\u043e\u0432\u044b\u0439 \u043e\u043f\u044b\u0442. \u042d\u0442\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u043e\u0439 \u043c\u044b \u0440\u0435\u0448\u0430\u043b\u0438 \u0437\u0430\u0434\u0430\u0447\u0443 \u0440\u0430\u0437\u043e\u0431\u0440\u0430\u0442\u044c\u0441\u044f \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u043c\u043e\u0434\u0438\u0444\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0435\u0435 \u043f\u043e\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435\u0442 \u0433\u043e\u0442\u043e\u0432\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432. \u0414\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043c\u044b \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043b\u0438 \u0434\u0432\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u2013 Xiaomi Redmi 5 \u0438 Samsung A520F (Galaxy A5).\n\n\u041d\u0430 \u0432\u0438\u0434\u0435\u043e \u043c\u043e\u0436\u043d\u043e \u0432\u0438\u0434\u0435\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043d\u0430 \u043d\u0435\u043c \u043f\u0440\u0430\u0432 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0438 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435. \u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0443\u0440\u043e\u0432\u043d\u044f \u0437\u0430\u0440\u044f\u0434\u0430 \u0431\u0430\u0442\u0430\u0440\u0435\u0438 \u043d\u0430 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 1 000 000 %.\n\n\u041f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0435, \u0432 \u0445\u043e\u0434\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f, \u0437\u043d\u0430\u043d\u0438\u044f \u043e \u043c\u0435\u0442\u043e\u0434\u0430\u0445 \u0438 \u0442\u0435\u0445\u043d\u0438\u043a\u0435 \u0430\u0442\u0430\u043a, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0442 \u043d\u0430\u043c \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u0435\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0441\u0432\u043e\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432. \n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043b\u043e\u0441\u044c \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0426\u0410\u0420\u041a\u0410 \u043f\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u0439 \u044d\u043a\u043e\u0441\u0438\u0441\u0442\u0435\u043c\u044b BULAQ, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u0439 \u0432 \u0441\u0435\u0431\u044f \u0446\u0435\u043b\u0443\u044e \u043b\u0438\u043d\u0435\u0439\u043a\u0443 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0437\u0430\u0449\u0438\u0442\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438. \u041e\u0434\u043d\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u2013 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0439 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d.\n\n[1] https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2215\n[2] https://bugs.chromium.org/p/project-zero/issues/detail?id=1942\n[3] https://youtu.be/iu6xPThoHZ8?t=2459, https://youtu.be/RT7BjSACrv0?t=33", "url": "https://t.me/novitoll_ch/69"}, {"timestamp": "2020-10-09T14:06:38Z", "date_only": false, "value": "2020-10-09T14:06:38.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/f6a84ed8-143b-4c4c-a232-4529f4878764", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "296e0126-dce1-415b-84bb-80314e83946c"}, {"timestamp": "2020-12-09T17:20:33Z", "date_only": false, "value": "2020-12-09T17:20:33.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/6133782e-8869-430d-ac0f-9a161f6dca52", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "1dcf619e-0059-4181-9eae-185b165b133e"}, {"timestamp": "2021-09-21T06:42:55Z", "date_only": false, "value": "2021-09-21T06:42:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/pwnwiki_zhchannel/5", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "ed462b24-b415-4f07-ab43-b9ddb22dbd32", "content": "Android\u5167\u6838\u63d0\u6b0a\u6f0f\u6d1eCVE-2019-2215 Binder UAF\nhttps://www.pwnwiki.org/index.php?title=Android%E5%85%A7%E6%A0%B8%E6%8F%90%E6%AC%8A%E6%BC%8F%E6%B4%9ECVE-2019-2215_Binder_UAF", "url": "https://t.me/pwnwiki_zhchannel/5"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2019-2215", "field": "timestamps.asserted_at", "uuid": "06247a73-63dd-4f23-8cc9-abcfa101f503", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2019-2215", "field": "timestamps.asserted_at", "uuid": "83e673cc-4ffa-4b18-9343-2732ed7ca1fd", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2019-2215", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "other", "label": "Catalog added", "source": "gsd \u00b7 GSD-2019-2215", "record": "GSD-2019-2215", "field": "namespaces.cisa.gov.dateAdded"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2019-2215", "field": "evidence.0.details.added_date", "uuid": "83e673cc-4ffa-4b18-9343-2732ed7ca1fd", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2019-2215", "field": "evidence.0.details.date_added", "uuid": "06247a73-63dd-4f23-8cc9-abcfa101f503", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2019-2215", "field": "timestamps.first_seen_at", "uuid": "06247a73-63dd-4f23-8cc9-abcfa101f503", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2019-2215", "field": "timestamps.first_seen_at", "uuid": "83e673cc-4ffa-4b18-9343-2732ed7ca1fd", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2019-2215", "field": "status.status_updated_at", "uuid": "06247a73-63dd-4f23-8cc9-abcfa101f503", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2019-2215", "field": "status.status_updated_at", "uuid": "83e673cc-4ffa-4b18-9343-2732ed7ca1fd", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2019-2215", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2021-11-08T08:58:16Z", "date_only": false, "value": "2021-11-08T08:58:16.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "12bc9f03-bdfa-4567-ad6b-c91a30b32acb"}, {"timestamp": "2021-11-20T09:53:52Z", "date_only": false, "value": "2021-11-20T09:53:52.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "2763a275-3670-435a-969a-243e0998f373"}, {"timestamp": "2022-02-01T04:44:53Z", "date_only": false, "value": "2022-02-01T04:44:53.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CyberSecurityTechnologies/512", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "0e63051f-ff85-459c-8a6a-f8bbaab367da", "content": "#Threat_Research\n1. First Active Attack Exploiting CVE-2019-2215 Found on Google Play, Linked to SideWinder APT Group\nhttps://blog.trendmicro.com/trendlabs-security-intelligence/first-active-attack-exploiting-cve-2019-2215-found-on-google-play-linked-to-sidewinder-apt-group\n2. Zero day vulnerabilities in Determine Selectica Contract Lifecycle Management (SCLM)\nhttps://www.n00py.io/2020/01/zero-day-exploit-in-determine-selectica-contract-lifecycle-management-sclm-v5-4", "url": "https://t.me/CyberSecurityTechnologies/512"}, {"timestamp": "2022-02-19T10:18:40Z", "date_only": false, "value": "2022-02-19T10:18:40.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BlueRedTeam/1738", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "c0eadd0f-5d08-40bb-ac74-f47b08daa973", "content": "#exploit\nExploiting CVE-2019-2215:\nBrief introduction to binder, eventpoll subsystem and Vectored I/O\nhttps://cutesmilee.github.io/kernel/linux/android/2022/02/17/cve-2019-2215_writeup.html\n]-> PoC: https://github.com/cutesmilee/cutesmilee.github.io/blob/main/code/cve-2019-2215-exploit.c\n\n@BlueRedTeam", "url": "https://t.me/BlueRedTeam/1738"}, {"timestamp": "2022-02-19T13:30:24Z", "date_only": false, "value": "2022-02-19T13:30:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/5449", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "2c0a9663-6717-4037-978a-bfcbf15b398f", "content": "#exploit\nExploiting CVE-2019-2215:\nBrief introduction to binder, eventpoll subsystem and Vectored I/O\nhttps://cutesmilee.github.io/kernel/linux/android/2022/02/17/cve-2019-2215_writeup.html\n]-> PoC: https://github.com/cutesmilee/cutesmilee.github.io/blob/main/code/cve-2019-2215-exploit.c", "url": "https://t.me/CyberSecurityTechnologies/5449"}, {"timestamp": "2022-05-03T00:00:00Z", "date_only": true, "value": "2022-05-03", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2019-2215", "field": "evidence.0.details.due_date", "uuid": "06247a73-63dd-4f23-8cc9-abcfa101f503", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-05-03T00:00:00Z", "date_only": true, "value": "2022-05-03", "kind": "other", "label": "Remediation due", "source": "gsd \u00b7 GSD-2019-2215", "record": "GSD-2019-2215", "field": "namespaces.cisa.gov.dueDate"}, {"timestamp": "2022-05-24T16:58:40Z", "date_only": false, "value": "2022-05-24T16:58:40Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-M7G6-9CWP-6JGM", "record": "GHSA-M7G6-9CWP-6JGM", "field": "published"}, {"timestamp": "2022-09-08T08:03:41Z", "date_only": false, "value": "2022-09-08T08:03:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/10167", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "2c12a72c-d9cf-46f4-b28e-38930d28aac2", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 Kernel exploitation - CVE-2019-2215\n\nhttps://github.com/ameetsaahu/Kernel-exploitation/blob/main/CVE-2019-2215/exploit.c", "url": "https://t.me/cKure/10167"}, {"timestamp": "2022-11-04T15:50:00Z", "date_only": false, "value": "2022-11-04T15:50:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://googleprojectzero.blogspot.com/2022/11/a-very-powerful-clipboard-samsung-in-the-wild-exploit-chain.html", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "f5af9261-28f1-496a-a094-2b9a3e29954f", "url": "https://googleprojectzero.blogspot.com/2022/11/a-very-powerful-clipboard-samsung-in-the-wild-exploit-chain.html"}, {"timestamp": "2023-11-28T11:40:27Z", "date_only": false, "value": "2023-11-28T11:40:27.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/629", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "f10cb5c3-7a92-46ae-b22e-1110152fe70a", "content": "#ExploitObserverAlert\n\nCVE-2019-2215\n\nDESCRIPTION: Exploit Observer has 66 entries related to CVE-2019-2215. A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095\n\nFIRST-EPSS: 0.003000000\nNVD-IS: 5.9\nNVD-ES: 1.8", "url": "https://t.me/arpsyndicate/629"}, {"timestamp": "2023-12-03T13:18:45Z", "date_only": false, "value": "2023-12-03T13:18:45.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/940", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "13f663d1-a433-4545-b6f1-722237aa84ab", "content": "#ExploitObserverAlert\n\nCVE-2019-2215\n\nDESCRIPTION: Exploit Observer has 65 entries related to CVE-2019-2215. A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095\n\nFIRST-EPSS: 0.003000000\nNVD-IS: 5.9\nNVD-ES: 1.8", "url": "https://t.me/arpsyndicate/940"}, {"timestamp": "2023-12-13T01:23:46.057Z", "date_only": false, "value": "2023-12-13T01:23:46.057153Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2019-2215", "record": "GSD-2019-2215", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-02-28T11:10:03Z", "date_only": false, "value": "2024-02-28T11:10:03.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c9fa790-f4b2-44e5-bd3c-593bd7113bef", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "c383d985-67ba-430f-bb7e-692b27ca1791"}, {"timestamp": "2024-08-04T18:42:50.933Z", "date_only": false, "value": "2024-08-04T18:42:50.933Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2019-2215", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-09-19T15:14:12Z", "date_only": false, "value": "2024-09-19T15:14:12.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/HJe9oA1GC8_YbmZuFCP-7wna5xe1Ce0txJlZSEsUniShhv3O", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "01408dbf-5415-4cc7-86ce-268af2753acc"}, {"timestamp": "2024-10-11T21:29:41Z", "date_only": false, "value": "2024-10-11T21:29:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/424", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "3028668b-fce8-4f5d-81df-c0385527b9f0", "content": "#exploit\n1. Tailoring CVE-2019-2215 to Achieve Root\nhttps://hernan.de/blog/2019/10/15/tailoring-cve-2019-2215-to-achieve-root\n]->  PoC1,  PoC2 \n\n2. CVE-2019-16663, CVE-2019-16662:\nrConfig v3.9.2 auth/unauth RCE\nhttps://shells.systems/rconfig-v3-9-2-authenticated-and-unauthenticated-rce-cve-2019-16663-and-cve-2019-16662", "url": "https://t.me/CyberSecurityTechnologies/424"}, {"timestamp": "2024-12-24T20:25:08.478Z", "date_only": false, "value": "2024-12-24T20:25:08.478237Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971159", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "6eafea1c-2a66-4599-8127-a4729d7bc343", "url": "https://feedsin.space/feed/CISAKevBot/items/2971159"}, {"timestamp": "2024-12-24T20:25:09.438Z", "date_only": false, "value": "2024-12-24T20:25:09.438610Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971160", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "5059480c-abac-4547-b1b1-43f3dff0f355", "url": "https://feedsin.space/feed/CISAKevBot/items/2971160"}, {"timestamp": "2024-12-24T20:25:10.300Z", "date_only": false, "value": "2024-12-24T20:25:10.300438Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971161", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "0b4a5845-48c6-4d21-9d9c-344e8b6ac40e", "url": "https://feedsin.space/feed/CISAKevBot/items/2971161"}, {"timestamp": "2025-01-30T18:05:01Z", "date_only": false, "value": "2025-01-30T18:05:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DaleelCyberSecurity/80", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "9cc78efb-ad13-4ea5-a0be-55bdd99f16b4", "content": "\u0645\u0627 \u0647\u064a \u062b\u063a\u0631\u0629 \u064a\u0648\u0645 \u0627\u0644\u0635\u0641\u0631 (Zero-Day Exploit)\u061f\n\n\u0647\u064a \u062b\u063a\u0631\u0629 \u0623\u0645\u0646\u064a\u0629 \u063a\u064a\u0631 \u0645\u0639\u0631\u0648\u0641\u0629 \u0644\u0644\u0645\u0637\u0648\u0631\u064a\u0646 \u0623\u0648 \u0627\u0644\u0634\u0631\u0643\u0627\u062a \u0627\u0644\u0645\u0633\u0624\u0648\u0644\u0629 \u0639\u0646 \u0627\u0644\u0646\u0638\u0627\u0645\u060c \u0645\u0645\u0627 \u064a\u0639\u0646\u064a \u0623\u0646\u0647\u0627 \u0644\u0645 \u062a\u064f\u0635\u0644\u062d \u0628\u0639\u062f \u0648\u064a\u0645\u0643\u0646 \u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0627 \u0642\u0628\u0644 \u0623\u0646 \u064a\u062a\u0645 \u0627\u0643\u062a\u0634\u0627\u0641\u0647\u0627 \u0623\u0648 \u0625\u0635\u062f\u0627\u0631 \u062a\u062d\u062f\u064a\u062b \u0644\u0647\u0627.\n\n\n---\n\n\u0643\u064a\u0641 \u062a\u0639\u0645\u0644\u061f\n\n\u0639\u0646\u062f \u0627\u0643\u062a\u0634\u0627\u0641 \u062b\u063a\u0631\u0629 \u062c\u062f\u064a\u062f\u0629\u060c \u064a\u0645\u0643\u0646 \u0644\u0644\u0645\u0647\u0627\u062c\u0645 \u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0627 \u0642\u0628\u0644 \u0623\u0646 \u062a\u0635\u062f\u0631 \u0627\u0644\u0634\u0631\u0643\u0629 \u062a\u0635\u062d\u064a\u062d\u064b\u0627 \u0623\u0645\u0646\u064a\u064b\u0627. \u064a\u062a\u0645 \u0630\u0644\u0643 \u0639\u0627\u062f\u0629\u064b \u0645\u0646 \u062e\u0644\u0627\u0644:\n\n\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0623\u062e\u0637\u0627\u0621 \u0628\u0631\u0645\u062c\u064a\u0629 \u0641\u064a \u0627\u0644\u0646\u0638\u0627\u0645 \u0623\u0648 \u0627\u0644\u062a\u0637\u0628\u064a\u0642\u0627\u062a.\n\n\u062a\u062c\u0627\u0648\u0632 \u0622\u0644\u064a\u0627\u062a \u0627\u0644\u062d\u0645\u0627\u064a\u0629 \u0645\u062b\u0644 SELinux \u0623\u0648 Google Play Protect.\n\n\u062a\u0646\u0641\u064a\u0630 \u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0628\u0631\u0645\u062c\u064a\u0629 \u062e\u0628\u064a\u062b\u0629 \u0644\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u0635\u0644\u0627\u062d\u064a\u0627\u062a \u0645\u0631\u062a\u0641\u0639\u0629 (Root \u0623\u0648 SYSTEM).\n\n\n\n---\n\n\u0643\u064a\u0641 \u064a\u0645\u0643\u0646 \u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0627 \u0641\u064a \u0623\u0646\u062f\u0631\u0648\u064a\u062f\u061f\n\n\u062b\u063a\u0631\u0627\u062a \u064a\u0648\u0645 \u0627\u0644\u0635\u0641\u0631 \u0641\u064a \u0623\u0646\u062f\u0631\u0648\u064a\u062f \u064a\u0645\u0643\u0646 \u0623\u0646 \u062a\u0643\u0648\u0646 \u0641\u064a \u0639\u062f\u0629 \u0623\u0645\u0627\u0643\u0646:\n\n1. \u062b\u063a\u0631\u0627\u062a \u0641\u064a \u0627\u0644\u0646\u0638\u0627\u0645 (Kernel Exploits):\n\n\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0623\u062e\u0637\u0627\u0621 \u0641\u064a \u0646\u0648\u0627\u0629 \u0627\u0644\u0646\u0638\u0627\u0645 \u0644\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u0635\u0644\u0627\u062d\u064a\u0627\u062a \u0645\u0631\u062a\u0641\u0639\u0629.\n\n\u0623\u0645\u062b\u0644\u0629: \u062b\u063a\u0631\u0629 Dirty Cow (CVE-2016-5195)\u060c \u0648\u062b\u063a\u0631\u0627\u062a \u062a\u062c\u0627\u0648\u0632 SELinux.\n\n\n\n2. \u062b\u063a\u0631\u0627\u062a \u0641\u064a \u0627\u0644\u062a\u0637\u0628\u064a\u0642\u0627\u062a \u0627\u0644\u0623\u0633\u0627\u0633\u064a\u0629 (Framework Exploits):\n\n\u0627\u0633\u062a\u0647\u062f\u0627\u0641 \u0645\u0643\u0648\u0646\u0627\u062a \u0627\u0644\u0646\u0638\u0627\u0645 \u0645\u062b\u0644 MediaServer \u0623\u0648 WebView.\n\n\u062a\u0646\u0641\u064a\u0630 \u0623\u0643\u0648\u0627\u062f \u062e\u0628\u064a\u062b\u0629 \u0645\u0646 \u062e\u0644\u0627\u0644 \u0645\u0644\u0641\u0627\u062a PDF \u0623\u0648 MP4 \u0623\u0648 \u0635\u0648\u0631 \u0645\u0634\u0648\u0647\u0629.\n\n\n\n3. \u062b\u063a\u0631\u0627\u062a \u0641\u064a \u0627\u0644\u0645\u062a\u0635\u0641\u062d\u0627\u062a (Browser Exploits):\n\n\u062a\u0646\u0641\u064a\u0630 \u0623\u0643\u0648\u0627\u062f \u062c\u0627\u0641\u0627\u0633\u0643\u0631\u064a\u0628\u062a \u062e\u0628\u064a\u062b\u0629 \u0645\u0646 \u062e\u0644\u0627\u0644 WebView \u0623\u0648 Chrome.\n\n\u0627\u0633\u062a\u063a\u0644\u0627\u0644 JavaScript Engine \u0644\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u062a\u0646\u0641\u064a\u0630 \u0643\u0648\u062f \u0639\u0646 \u0628\u0639\u062f (RCE).\n\n\n\n4. \u062b\u063a\u0631\u0627\u062a \u0641\u064a \u0625\u062f\u0627\u0631\u0629 \u0627\u0644\u0630\u0627\u0643\u0631\u0629 (Heap / Stack Exploits):\n\n\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u062a\u0642\u0646\u064a\u0627\u062a \u0645\u062b\u0644 Buffer Overflow \u0623\u0648 Use-After-Free \u0644\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u062a\u062d\u0643\u0645 \u0643\u0627\u0645\u0644 \u0628\u0627\u0644\u062c\u0647\u0627\u0632.\n\n\n\n5. \u062b\u063a\u0631\u0627\u062a \u0641\u064a \u062e\u062f\u0645\u0627\u062a \u0627\u0644\u0646\u0638\u0627\u0645 (System Services Exploits):\n\n\u0645\u062b\u0644 \u0627\u0633\u062a\u063a\u0644\u0627\u0644 ADB \u0641\u064a \u0627\u0644\u0623\u062c\u0647\u0632\u0629 \u0627\u0644\u062a\u064a \u062a\u062a\u0631\u0643\u0647 \u0645\u0641\u0639\u0651\u0644\u064b\u0627.\n\n\n\n\n\n---\n\n\u0643\u064a\u0641 \u064a\u062d\u0635\u0644 \u0627\u0644\u0647\u0627\u0643\u0631\u0632 \u0639\u0644\u0649 \u062b\u063a\u0631\u0627\u062a \u064a\u0648\u0645 \u0627\u0644\u0635\u0641\u0631\u061f\n\n\u062a\u062d\u0644\u064a\u0644 \u0627\u0644\u062a\u062d\u062f\u064a\u062b\u0627\u062a \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0644\u0644\u0628\u062d\u062b \u0639\u0646 \u062a\u063a\u064a\u064a\u0631\u0627\u062a \u064a\u0645\u0643\u0646 \u0639\u0643\u0633\u0647\u0627 \u0644\u0627\u0633\u062a\u0646\u062a\u0627\u062c \u0627\u0644\u062b\u063a\u0631\u0627\u062a.\n\n\u0645\u0631\u0627\u062c\u0639\u0629 \u0627\u0644\u0643\u0648\u062f \u0627\u0644\u0645\u0635\u062f\u0631\u064a \u0644\u0623\u0646\u0638\u0645\u0629 \u0623\u0646\u062f\u0631\u0648\u064a\u062f \u0645\u0641\u062a\u0648\u062d\u0629 \u0627\u0644\u0645\u0635\u062f\u0631 (AOSP).\n\n\u0627\u0633\u062a\u062e\u062f\u0627\u0645 Fuzzing \u0644\u0625\u0631\u0633\u0627\u0644 \u0628\u064a\u0627\u0646\u0627\u062a \u0639\u0634\u0648\u0627\u0626\u064a\u0629 \u0644\u0627\u062e\u062a\u0628\u0627\u0631 \u0633\u0644\u0648\u0643 \u0627\u0644\u062a\u0637\u0628\u064a\u0642\u0627\u062a.\n\n\u0627\u0644\u0628\u062d\u062b \u0641\u064a \u0627\u0644\u062a\u0633\u0631\u064a\u0628\u0627\u062a \u0648\u0627\u0644\u0645\u0646\u062a\u062f\u064a\u0627\u062a \u0627\u0644\u0633\u0631\u064a\u0629 \u062d\u064a\u062b \u064a\u062a\u0645 \u0628\u064a\u0639 \u0627\u0644\u062b\u063a\u0631\u0627\u062a.\n\n\n\n---\n\n\u0647\u0644 \u064a\u0645\u0643\u0646\u0646\u064a \u0627\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u062b\u063a\u0631\u0629 \u064a\u0648\u0645 \u0627\u0644\u0635\u0641\u0631\u061f\n\n\u0625\u0630\u0627 \u0643\u0646\u062a \u0628\u0627\u062d\u062b\u064b\u0627 \u0623\u0645\u0646\u064a\u064b\u0627\u060c \u064a\u0645\u0643\u0646\u0643 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0623\u062f\u0648\u0627\u062a \u0645\u062b\u0644 AFL\u060c Frida\u060c Ghidra\u060c IDA Pro \u0644\u062a\u062d\u0644\u064a\u0644 \u0627\u0644\u062a\u0637\u0628\u064a\u0642\u0627\u062a \u0648\u0627\u0643\u062a\u0634\u0627\u0641 \u0627\u0644\u062b\u063a\u0631\u0627\u062a.\n\n\u0625\u0630\u0627 \u0643\u0646\u062a \u062a\u0631\u064a\u062f \u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0627 \u0641\u0642\u0637\u060c \u0641\u0645\u0639\u0638\u0645 \u062b\u063a\u0631\u0627\u062a Zero-Day \u062a\u0643\u0648\u0646 \u062e\u0627\u0635\u0629 \u0648\u064a\u062a\u0645 \u0628\u064a\u0639\u0647\u0627 \u0641\u064a \u0627\u0644\u0633\u0648\u0642 \u0627\u0644\u0633\u0648\u062f\u0627\u0621 \u0628\u0623\u0633\u0639\u0627\u0631 \u062a\u0628\u062f\u0623 \u0645\u0646 10,000$ \u0648\u0642\u062f \u062a\u0635\u0644 \u0625\u0644\u0649 \u0645\u0644\u064a\u0648\u0646 \u062f\u0648\u0644\u0627\u0631 (\u062e\u0627\u0635\u0629 \u062b\u063a\u0631\u0627\u062a iOS \u0648\u0623\u0646\u062f\u0631\u0648\u064a\u062f).\n\n\n\n---\n\n\u0623\u0634\u0647\u0631 \u062b\u063a\u0631\u0627\u062a \u064a\u0648\u0645 \u0627\u0644\u0635\u0641\u0631 \u0641\u064a \u0623\u0646\u062f\u0631\u0648\u064a\u062f\n\nCVE-2019-2215: \u062b\u063a\u0631\u0629 \u062a\u062c\u0627\u0648\u0632 Kernel Sandbox.\n\nCVE-2020-0022: \u062b\u063a\u0631\u0629 Bluetooth RCE \u062a\u062a\u064a\u062d \u062a\u0646\u0641\u064a\u0630 \u0623\u0648\u0627\u0645\u0631 \u0639\u0646 \u0628\u0639\u062f.\n\nCVE-2023-20963: \u0627\u0633\u062a\u063a\u0644\u0627\u0644 Intent \u0644\u0644\u0647\u0631\u0648\u0628 \u0645\u0646 \u0627\u0644\u062d\u0645\u0627\u064a\u0629.\n\nCVE-2024-XXXX (\u062a\u064f\u0643\u062a\u0634\u0641 \u0628\u0627\u0633\u062a\u0645\u0631\u0627\u0631).\n\n\n\n---\n\n\u0643\u064a\u0641 \u062a\u062d\u0645\u064a \u0646\u0641\u0633\u0643\u061f\n\n\u062a\u062d\u062f\u064a\u062b \u0627\u0644\u0646\u0638\u0627\u0645 \u0648\u0627\u0644\u062a\u0637\u0628\u064a\u0642\u0627\u062a \u0628\u0627\u0633\u062a\u0645\u0631\u0627\u0631.\n\n\u062a\u0639\u0637\u064a\u0644 ADB \u0648 Debugging \u0639\u0646\u062f \u0639\u062f\u0645 \u0627\u0644\u062d\u0627\u062c\u0629 \u0625\u0644\u064a\u0647.\n\n\u062a\u062c\u0646\u0628 \u062a\u062d\u0645\u064a\u0644 \u062a\u0637\u0628\u064a\u0642\u0627\u062a APK \u0645\u0646 \u0645\u0635\u0627\u062f\u0631 \u063a\u064a\u0631 \u0645\u0648\u062b\u0648\u0642\u0629.\n\n\u0627\u0633\u062a\u062e\u062f\u0627\u0645 ROMs \u0645\u0639\u062f\u0644\u0629 \u0628\u0645\u064a\u0632\u0627\u062a \u0623\u0645\u0627\u0646 \u0625\u0636\u0627\u0641\u064a\u0629 \u0645\u062b\u0644 GrapheneOS \u0623\u0648 CalyxOS.\n\n\n\u0625\u0630\u0627 \u0643\u0646\u062a \u062a\u0631\u064a\u062f \u062a\u0639\u0644\u0645 \u0627\u0643\u062a\u0634\u0627\u0641 \u0623\u0648 \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u062b\u063a\u0631\u0627\u062a \u064a\u0648\u0645 \u0627\u0644\u0635\u0641\u0631\u060c \u0623\u0646\u0635\u062d\u0643 \u0628\u062f\u0631\u0627\u0633\u0629 \u0647\u0646\u062f\u0633\u0629 \u0639\u0643\u0633\u064a\u0629 (Reverse Engineering) \u0648\u062a\u062d\u0644\u064a\u0644 \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0627\u062a \u0627\u0644\u062e\u0628\u064a\u062b\u0629 (Malware Analysis).", "url": "https://t.me/DaleelCyberSecurity/80"}, {"timestamp": "2025-02-04T16:00:09Z", "date_only": false, "value": "2025-02-04T16:00:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Zrldk8z1EwjpYU8Vg3CSH1QFx-z50lEQp2XdvPCkQk6RQ8I", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "9704c193-483f-4150-a74e-d0237bc4ba95"}, {"timestamp": "2025-02-06T03:13:44Z", "date_only": false, "value": "2025-02-06T03:13:44.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "21d32145-c4e1-4b27-9f40-4cc7496a9e6f"}, {"timestamp": "2025-02-07T13:04:20.328Z", "date_only": false, "value": "2025-02-07T13:04:20.328785Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2019-2215", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-02-07T13:04:20.328Z", "date_only": false, "value": "2025-02-07T13:04:20.328785Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2019-2215", "record": "FKIE_CVE-2019-2215", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-23T02:09:43Z", "date_only": false, "value": "2025-02-23T02:09:43.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "bfeffe15-15f7-4f3f-9c3d-564ca44eb487"}, {"timestamp": "2025-02-23T04:10:15Z", "date_only": false, "value": "2025-02-23T04:10:15.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "0e4067dd-78a6-4ab0-9262-a4009f6c6cf9"}, {"timestamp": "2025-03-30T12:50:01Z", "date_only": false, "value": "2025-03-30T12:50:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/63BYuvlMwmvtLowrCF3MHX2SuwSGWGBYchele8q3SvC5U-Q", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "a55cd109-2f55-4664-8bc7-dc7c381f0b4d"}, {"timestamp": "2025-04-18T02:19:21Z", "date_only": false, "value": "2025-04-18T02:19:21.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/bernielampe1/9e1b0221f50120ee61fc17977dc046bb", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "3935a5ca-6744-4d54-a305-b14fe04e7757", "url": "https://gist.github.com/bernielampe1/9e1b0221f50120ee61fc17977dc046bb"}, {"timestamp": "2025-08-31T03:00:56Z", "date_only": false, "value": "2025-08-31T03:00:56.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "464024a6-c6cf-4316-b7ec-7dfc0f8f10ca"}, {"timestamp": "2025-10-21T23:45:29.242Z", "date_only": false, "value": "2025-10-21T23:45:29.242Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2019-2215", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:45:29.242Z", "date_only": false, "value": "2025-10-21T23:45:29.242Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2019-2215", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:31:49Z", "date_only": false, "value": "2025-10-22T00:31:49Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-M7G6-9CWP-6JGM", "record": "GHSA-M7G6-9CWP-6JGM", "field": "modified"}, {"timestamp": "2025-10-24T14:11:31.703Z", "date_only": false, "value": "2025-10-24T14:11:31.703000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201910-0902", "record": "VAR-201910-0902", "field": "sources_update_date.data.3.date"}, {"timestamp": "2025-11-07T03:00:06Z", "date_only": false, "value": "2025-11-07T03:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Z22ddpILY-yeUUVWiXwyxi9IfQjGUAfHXsS4qd56wYck-To", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "849e2057-88c7-4447-a934-a874e5327a93"}, {"timestamp": "2025-11-18T12:23:03.833Z", "date_only": false, "value": "2025-11-18T12:23:03.833000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-201910-0902", "record": "VAR-201910-0902", "field": "last_update_date"}, {"timestamp": "2026-02-02T12:28:34.488Z", "date_only": false, "value": "2026-02-02T12:28:34.488868Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fd98c742-c296-4f75-878c-9671726e5bf1", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "11f755ad-642b-4202-80ba-3d75bb7dc325", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fd98c742-c296-4f75-878c-9671726e5bf1"}, {"timestamp": "2026-02-02T12:28:34.488Z", "date_only": false, "value": "2026-02-02T12:28:34.488868Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fd98c742-c296-4f75-878c-9671726e5bf1", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "7ba5fcf6-8c99-4b31-804a-bd62334c7a13", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fd98c742-c296-4f75-878c-9671726e5bf1"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2019-2215", "field": "timestamps.recorded_at", "uuid": "06247a73-63dd-4f23-8cc9-abcfa101f503", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-03-27T23:02:22Z", "date_only": false, "value": "2026-03-27T23:02:22.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/prof-hac/76f2a4b0a2937cff2ca4b95dc94a2d2c", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "2947ed74-14b3-43da-9a15-63789f9d523e", "url": "https://gist.github.com/prof-hac/76f2a4b0a2937cff2ca4b95dc94a2d2c"}, {"timestamp": "2026-04-22T15:00:07Z", "date_only": false, "value": "2026-04-22T15:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/UcOXFA8nSOttq6tnEv5GYCOJTlyoQN894TbAmd-Usu-nlPU", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "3b4a28db-42d0-4218-b78d-e4416879dab3"}, {"timestamp": "2026-06-17T02:33:27.307Z", "date_only": false, "value": "2026-06-17T02:33:27.307", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2019-2215", "record": "FKIE_CVE-2019-2215", "field": "lastModified"}, {"timestamp": "2026-06-19T12:47:54.316Z", "date_only": false, "value": "2026-06-19T12:47:54.316715Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0d536931-a304-42ea-9490-0fec386f39af", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "25dd7d7f-5b68-43e5-a661-626200083599", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0d536931-a304-42ea-9490-0fec386f39af"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2019-2215", "field": "timestamps.recorded_at", "uuid": "83e673cc-4ffa-4b18-9343-2732ed7ca1fd", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:13:24.769Z", "date_only": false, "value": "2026-06-23T11:13:24.769957Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/83e673cc-4ffa-4b18-9343-2732ed7ca1fd", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "ba227ce7-b1fd-4299-a12a-21ae6b3ede7f", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/83e673cc-4ffa-4b18-9343-2732ed7ca1fd"}, {"timestamp": "2026-06-23T14:04:49.386Z", "date_only": false, "value": "2026-06-23T14:04:49.386341Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b9d91a31-f5f7-484e-9e9b-bfcb87b6861a", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "4b93ed03-e2db-4f2e-95df-ba9ace8b0adc", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b9d91a31-f5f7-484e-9e9b-bfcb87b6861a"}, {"timestamp": "2026-07-13T15:40:18.533Z", "date_only": false, "value": "2026-07-13T15:40:18.533541Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/dretsdigitals.bsky.social/post/3mqjzo6cg6726", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "6a05d5a9-2cd0-4e8e-b8fe-6fa458ca9d1b", "url": "https://bsky.app/profile/dretsdigitals.bsky.social/post/3mqjzo6cg6726"}, {"timestamp": "2026-07-16T19:00:26.335Z", "date_only": false, "value": "2026-07-16T19:00:26.335976Z", "kind": "sighting", "label": "Seen", "source": "Telegram/kQBPOJZRPfFE-rjb5OWBI31fcS08jxE2VBe_KgzBWEfjeHI", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "b1ee2f83-92ea-4d06-99cd-3ea33139ebeb"}, {"timestamp": "2026-07-17T00:00:42.639Z", "date_only": false, "value": "2026-07-17T00:00:42.639877Z", "kind": "sighting", "label": "Seen", "source": "Telegram/kQBPOJZRPfFE-rjb5OWBI31fcS08jxE2VBe_KgzBWEfjeHI", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "884c8528-70d5-4253-8bf7-caef986f2bdb"}, {"timestamp": "2026-07-18T00:00:08.714Z", "date_only": false, "value": "2026-07-18T00:00:08.714261Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/kQBPOJZRPfFE-rjb5OWBI31fcS08jxE2VBe_KgzBWEfjeHI", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "c834a1cd-f272-4a99-9d0e-2648f6f46b7d"}, {"timestamp": "2026-07-29T12:00:27.687Z", "date_only": false, "value": "2026-07-29T12:00:27.687912Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/13875", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "fd1633d6-5872-460e-bf9a-2001ea30cddc", "url": "https://t.me/CVEhub/13875"}, {"timestamp": "2026-07-29T12:01:51.666Z", "date_only": false, "value": "2026-07-29T12:01:51.666651Z", "kind": "sighting", "label": "Seen", "source": "Telegram/-b6NlrJOEw_zJimIAmB4c1D3ncCBS2EwpVRGFVG3RYkxug", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "d8d4c76d-0c6c-461e-99f8-3e1c019ae9ee"}, {"timestamp": "2026-07-29T12:01:51.744Z", "date_only": false, "value": "2026-07-29T12:01:51.744163Z", "kind": "sighting", "label": "Seen", "source": "Telegram/0tzsqneLPQcsbkHzmybZ1BW-muV3sI_nhq0plzKZxs2e9w", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "58141c22-3560-4a7b-90bb-77db4a0ee355"}, {"timestamp": "2026-07-29T12:01:51.780Z", "date_only": false, "value": "2026-07-29T12:01:51.780487Z", "kind": "sighting", "label": "Seen", "source": "Telegram/pcZuxYaCj876A99MH88og5kILjRCZFWLKNXkMlxnBvaTIQ", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "b4003674-1959-4d92-8b7c-7bb25ed94743"}, {"timestamp": "2026-07-29T12:01:51.818Z", "date_only": false, "value": "2026-07-29T12:01:51.818501Z", "kind": "sighting", "label": "Seen", "source": "Telegram/7A159i0HACT4Drsy_6fG96JlPj6F-S9nuRggGWrJ5pf22Q", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "5212ec6e-9658-4f72-adea-5ebb1de8d6b2"}, {"timestamp": "2026-07-29T12:01:51.863Z", "date_only": false, "value": "2026-07-29T12:01:51.863318Z", "kind": "sighting", "label": "Seen", "source": "Telegram/OiwVIyW_JjHaUCKYuOHkhUVJpeH8qfWqqyhRANHbaFZOSg", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "890fcdde-9698-4245-9c58-131817efbd83"}, {"timestamp": "2026-07-29T12:01:51.908Z", "date_only": false, "value": "2026-07-29T12:01:51.908240Z", "kind": "sighting", "label": "Seen", "source": "Telegram/sNnj3eUSfcnX912-SMrE3_4KpfDf4yGIruDYN0OwGBLAUg", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "b68a0bfc-2629-4d75-8b26-ae9de9a058b0"}, {"timestamp": "2026-07-29T12:01:51.955Z", "date_only": false, "value": "2026-07-29T12:01:51.955840Z", "kind": "sighting", "label": "Seen", "source": "Telegram/5G2OhRr6Ae4asZCGTWDljIKNsiqC2xI2fkug87oPNSBQSQ", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "8c08457e-19be-4c6a-92e1-57ed0e95d849"}, {"timestamp": "2026-07-29T12:01:52.006Z", "date_only": false, "value": "2026-07-29T12:01:52.006121Z", "kind": "sighting", "label": "Seen", "source": "Telegram/i45cnCXhxEBiS9_rafy4gdo1inNIRU43ixs1ol6DRa1GUg", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "652b26f6-3976-4f86-a576-fca8baf00357"}, {"timestamp": "2026-07-29T12:01:52.051Z", "date_only": false, "value": "2026-07-29T12:01:52.051912Z", "kind": "sighting", "label": "Seen", "source": "Telegram/AYMZkvCYLPEzR6D6Q8GOStQMo3Jq2Z-lMrQ2PjeKRjKnzw", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "34206150-a0d4-4521-8189-7f582d86179c"}, {"timestamp": "2026-07-29T12:01:52.095Z", "date_only": false, "value": "2026-07-29T12:01:52.095684Z", "kind": "sighting", "label": "Seen", "source": "Telegram/GLzhBsjYNgS3LSDZc3rIHHZlH6Nj6wVS6BCAEIrMViD3Qg", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "f939d0a4-89c6-4405-b780-c07a7f4eb5b7"}, {"timestamp": "2026-07-29T12:01:54.423Z", "date_only": false, "value": "2026-07-29T12:01:54.423261Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/certkznews/641", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "0ba0b5b9-87c4-4b45-809d-8583d39eebcc", "url": "https://t.me/certkznews/641"}, {"timestamp": "2026-07-29T12:02:34.924Z", "date_only": false, "value": "2026-07-29T12:02:34.924433Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/2997", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "54499004-a170-4f74-8785-a91b324737b0", "url": "https://t.me/reverseame/2997"}, {"timestamp": "2026-07-29T12:02:45.270Z", "date_only": false, "value": "2026-07-29T12:02:45.270479Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/2130", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "c6bb6523-239c-4c97-9d62-f297b233b12b", "url": "https://t.me/reverseame/2130"}, {"timestamp": "2026-07-30T00:00:51.661Z", "date_only": false, "value": "2026-07-30T00:00:51.661446Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/13875", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "d53144e5-aefc-4798-9163-d7dfddc3fda6", "url": "https://t.me/CVEhub/13875"}, {"timestamp": "2026-07-30T00:02:03.190Z", "date_only": false, "value": "2026-07-30T00:02:03.190013Z", "kind": "sighting", "label": "Seen", "source": "Telegram/-b6NlrJOEw_zJimIAmB4c1D3ncCBS2EwpVRGFVG3RYkxug", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "90e41bb4-ae58-449c-9c62-b44f64e92935"}, {"timestamp": "2026-07-30T00:02:03.234Z", "date_only": false, "value": "2026-07-30T00:02:03.234233Z", "kind": "sighting", "label": "Seen", "source": "Telegram/0tzsqneLPQcsbkHzmybZ1BW-muV3sI_nhq0plzKZxs2e9w", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "4f52b23a-1eaa-4d74-b4d4-d90e271524d7"}, {"timestamp": "2026-07-30T00:02:04.198Z", "date_only": false, "value": "2026-07-30T00:02:04.198428Z", "kind": "sighting", "label": "Seen", "source": "Telegram/pcZuxYaCj876A99MH88og5kILjRCZFWLKNXkMlxnBvaTIQ", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "6cded6b6-5091-466b-8657-f02951f15c7f"}, {"timestamp": "2026-07-30T00:02:04.221Z", "date_only": false, "value": "2026-07-30T00:02:04.221955Z", "kind": "sighting", "label": "Seen", "source": "Telegram/7A159i0HACT4Drsy_6fG96JlPj6F-S9nuRggGWrJ5pf22Q", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "20c92f52-5f8e-4fcf-a10b-7f6f973754a5"}, {"timestamp": "2026-07-30T00:02:04.243Z", "date_only": false, "value": "2026-07-30T00:02:04.243773Z", "kind": "sighting", "label": "Seen", "source": "Telegram/OiwVIyW_JjHaUCKYuOHkhUVJpeH8qfWqqyhRANHbaFZOSg", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "b55abd9d-b3f7-4306-af04-7cd7c42761c2"}, {"timestamp": "2026-07-30T00:02:04.264Z", "date_only": false, "value": "2026-07-30T00:02:04.264797Z", "kind": "sighting", "label": "Seen", "source": "Telegram/sNnj3eUSfcnX912-SMrE3_4KpfDf4yGIruDYN0OwGBLAUg", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "527f2462-80d3-45e6-ae8e-ee58b33343a4"}, {"timestamp": "2026-07-30T00:02:04.285Z", "date_only": false, "value": "2026-07-30T00:02:04.285567Z", "kind": "sighting", "label": "Seen", "source": "Telegram/5G2OhRr6Ae4asZCGTWDljIKNsiqC2xI2fkug87oPNSBQSQ", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "498574fa-6357-465f-b049-76c7d0a1c64a"}, {"timestamp": "2026-07-30T00:02:04.305Z", "date_only": false, "value": "2026-07-30T00:02:04.305136Z", "kind": "sighting", "label": "Seen", "source": "Telegram/i45cnCXhxEBiS9_rafy4gdo1inNIRU43ixs1ol6DRa1GUg", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "b6788a42-cb05-4bd7-995f-1162ce5b91f2"}, {"timestamp": "2026-07-30T00:02:04.325Z", "date_only": false, "value": "2026-07-30T00:02:04.325690Z", "kind": "sighting", "label": "Seen", "source": "Telegram/AYMZkvCYLPEzR6D6Q8GOStQMo3Jq2Z-lMrQ2PjeKRjKnzw", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "f351ec0f-408b-4538-b2d8-a5e0832e296a"}, {"timestamp": "2026-07-30T00:02:04.345Z", "date_only": false, "value": "2026-07-30T00:02:04.345384Z", "kind": "sighting", "label": "Seen", "source": "Telegram/GLzhBsjYNgS3LSDZc3rIHHZlH6Nj6wVS6BCAEIrMViD3Qg", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "94c09f76-ae85-4a99-9c25-18f7b5c74674"}, {"timestamp": "2026-07-30T00:02:05.779Z", "date_only": false, "value": "2026-07-30T00:02:05.779188Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/certkznews/641", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "addf0c20-7587-41f6-9609-09fff3f840d0", "url": "https://t.me/certkznews/641"}, {"timestamp": "2026-07-30T00:02:33.156Z", "date_only": false, "value": "2026-07-30T00:02:33.156716Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/2997", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "f9f4a725-d7be-47f9-8796-a0d315fb6740", "url": "https://t.me/reverseame/2997"}, {"timestamp": "2026-07-30T00:02:39.103Z", "date_only": false, "value": "2026-07-30T00:02:39.103618Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/2130", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "e625b21d-869a-4baf-8533-b1e0cf20ad1d", "url": "https://t.me/reverseame/2130"}, {"timestamp": "2026-07-31T00:00:24.694Z", "date_only": false, "value": "2026-07-31T00:00:24.694253Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/13875", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "d83a5d95-6b70-4895-968d-519a16461450", "url": "https://t.me/CVEhub/13875"}, {"timestamp": "2026-08-01T16:00:04.742Z", "date_only": false, "value": "2026-08-01T16:00:04.742428Z", "kind": "sighting", "label": "Seen", "source": "Telegram/AYMZkvCYLPEzR6D6Q8GOStQMo3Jq2Z-lMrQ2PjeKRjKnzw", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "013dccd4-4af4-4f24-9660-bd9758c5fae9"}, {"timestamp": "2026-08-01T16:00:04.791Z", "date_only": false, "value": "2026-08-01T16:00:04.791593Z", "kind": "sighting", "label": "Seen", "source": "Telegram/i45cnCXhxEBiS9_rafy4gdo1inNIRU43ixs1ol6DRa1GUg", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "c0cc3ec9-5196-404f-96d9-e702c14df097"}, {"timestamp": "2026-08-01T16:00:04.835Z", "date_only": false, "value": "2026-08-01T16:00:04.835120Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/5G2OhRr6Ae4asZCGTWDljIKNsiqC2xI2fkug87oPNSBQSQ", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "3e39a7a1-ac80-404f-9107-fc5e0a8a1f69"}, {"timestamp": "2026-08-01T16:00:04.885Z", "date_only": false, "value": "2026-08-01T16:00:04.885388Z", "kind": "sighting", "label": "Seen", "source": "Telegram/sNnj3eUSfcnX912-SMrE3_4KpfDf4yGIruDYN0OwGBLAUg", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "c3c95f25-131d-413b-b951-6dceb79571f5"}, {"timestamp": "2026-08-01T16:00:04.934Z", "date_only": false, "value": "2026-08-01T16:00:04.934071Z", "kind": "sighting", "label": "Seen", "source": "Telegram/OiwVIyW_JjHaUCKYuOHkhUVJpeH8qfWqqyhRANHbaFZOSg", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "c3a9ea99-2e1d-45b4-802d-c9e8b0e6f486"}, {"timestamp": "2026-08-01T16:00:04.986Z", "date_only": false, "value": "2026-08-01T16:00:04.986454Z", "kind": "sighting", "label": "Seen", "source": "Telegram/7A159i0HACT4Drsy_6fG96JlPj6F-S9nuRggGWrJ5pf22Q", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "23bb9bf6-eb7c-4f80-9233-019fcd41e7b4"}, {"timestamp": "2026-08-01T16:00:05.028Z", "date_only": false, "value": "2026-08-01T16:00:05.028154Z", "kind": "sighting", "label": "Seen", "source": "Telegram/pcZuxYaCj876A99MH88og5kILjRCZFWLKNXkMlxnBvaTIQ", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "2aa649c0-acda-469e-8b6f-e6002253d705"}, {"timestamp": "2026-08-01T16:00:05.059Z", "date_only": false, "value": "2026-08-01T16:00:05.059240Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/0tzsqneLPQcsbkHzmybZ1BW-muV3sI_nhq0plzKZxs2e9w", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "e714710e-b3ae-4f7f-87dc-c09a67214563"}, {"timestamp": "2026-08-01T16:00:05.124Z", "date_only": false, "value": "2026-08-01T16:00:05.124774Z", "kind": "sighting", "label": "Seen", "source": "Telegram/-b6NlrJOEw_zJimIAmB4c1D3ncCBS2EwpVRGFVG3RYkxug", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "80111aab-d76d-4255-b6a8-e66b1822ef85"}, {"timestamp": "2026-08-01T17:00:05.027Z", "date_only": false, "value": "2026-08-01T17:00:05.027521Z", "kind": "sighting", "label": "Seen", "source": "Telegram/GLzhBsjYNgS3LSDZc3rIHHZlH6Nj6wVS6BCAEIrMViD3Qg", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "0205578f-1b48-45c4-b217-fe218de5086d"}, {"timestamp": "2026-08-01T19:00:04.160Z", "date_only": false, "value": "2026-08-01T19:00:04.160852Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/certkznews/641", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "acdfd4fa-7abb-4bdc-bd28-f823d2821ab4", "url": "https://t.me/certkznews/641"}, {"timestamp": "2026-08-02T00:00:23.245Z", "date_only": false, "value": "2026-08-02T00:00:23.245673Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/certkznews/641", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "27e034d9-3f3c-46bd-a776-d624e61b724b", "url": "https://t.me/certkznews/641"}, {"timestamp": "2026-08-02T00:00:42.019Z", "date_only": false, "value": "2026-08-02T00:00:42.019081Z", "kind": "sighting", "label": "Seen", "source": "Telegram/GLzhBsjYNgS3LSDZc3rIHHZlH6Nj6wVS6BCAEIrMViD3Qg", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "2e1c8cda-9cc8-41fe-9365-fecb6df7bbf0"}, {"timestamp": "2026-08-02T00:00:42.055Z", "date_only": false, "value": "2026-08-02T00:00:42.055944Z", "kind": "sighting", "label": "Seen", "source": "Telegram/AYMZkvCYLPEzR6D6Q8GOStQMo3Jq2Z-lMrQ2PjeKRjKnzw", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "075e39ec-ba0a-45bc-a8af-6a7103361bbc"}, {"timestamp": "2026-08-02T00:00:42.098Z", "date_only": false, "value": "2026-08-02T00:00:42.098884Z", "kind": "sighting", "label": "Seen", "source": "Telegram/i45cnCXhxEBiS9_rafy4gdo1inNIRU43ixs1ol6DRa1GUg", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "1426dd19-269b-40b3-ac73-844f8ba6c999"}, {"timestamp": "2026-08-02T00:00:42.141Z", "date_only": false, "value": "2026-08-02T00:00:42.141609Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/5G2OhRr6Ae4asZCGTWDljIKNsiqC2xI2fkug87oPNSBQSQ", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "5980674d-e421-4e41-b604-54de6ffddc23"}, {"timestamp": "2026-08-02T00:00:42.190Z", "date_only": false, "value": "2026-08-02T00:00:42.190800Z", "kind": "sighting", "label": "Seen", "source": "Telegram/sNnj3eUSfcnX912-SMrE3_4KpfDf4yGIruDYN0OwGBLAUg", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "8853546a-5440-4513-900c-2e3da088769f"}, {"timestamp": "2026-08-02T00:00:42.236Z", "date_only": false, "value": "2026-08-02T00:00:42.236083Z", "kind": "sighting", "label": "Seen", "source": "Telegram/OiwVIyW_JjHaUCKYuOHkhUVJpeH8qfWqqyhRANHbaFZOSg", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "c1bb3bf2-1909-4f20-89fe-dfb002178031"}, {"timestamp": "2026-08-02T00:00:42.285Z", "date_only": false, "value": "2026-08-02T00:00:42.285741Z", "kind": "sighting", "label": "Seen", "source": "Telegram/7A159i0HACT4Drsy_6fG96JlPj6F-S9nuRggGWrJ5pf22Q", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "33706165-f63c-4134-a140-b433e30aca62"}, {"timestamp": "2026-08-02T00:00:42.327Z", "date_only": false, "value": "2026-08-02T00:00:42.327982Z", "kind": "sighting", "label": "Seen", "source": "Telegram/pcZuxYaCj876A99MH88og5kILjRCZFWLKNXkMlxnBvaTIQ", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "c1c60e86-0c43-416a-bc4e-a197ae009f93"}, {"timestamp": "2026-08-02T00:00:42.374Z", "date_only": false, "value": "2026-08-02T00:00:42.374082Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/0tzsqneLPQcsbkHzmybZ1BW-muV3sI_nhq0plzKZxs2e9w", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "29fd57e9-8140-4905-b68b-426fd36b858a"}, {"timestamp": "2026-08-02T00:00:42.463Z", "date_only": false, "value": "2026-08-02T00:00:42.463626Z", "kind": "sighting", "label": "Seen", "source": "Telegram/-b6NlrJOEw_zJimIAmB4c1D3ncCBS2EwpVRGFVG3RYkxug", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "2ded076a-739a-42ac-a06d-c2bc21dcaf17"}, {"timestamp": "2026-08-02T21:14:36.227Z", "date_only": false, "value": "2026-08-02T21:14:36.227087Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/2997", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "fb1f90a3-e5fa-44b7-ad95-903b5bb6b047", "url": "https://t.me/reverseame/2997"}, {"timestamp": "2026-08-03T01:03:35.309Z", "date_only": false, "value": "2026-08-03T01:03:35.309498Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/2997", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "84d5a0a2-1095-40c3-a1b5-92f92148cc38", "url": "https://t.me/reverseame/2997"}, {"timestamp": "2026-08-03T02:13:40.310Z", "date_only": false, "value": "2026-08-03T02:13:40.310085Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/2130", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "ad50aadf-3c1b-4d32-abbe-e8d3dce87600", "url": "https://t.me/reverseame/2130"}, {"timestamp": "2026-08-03T18:50:48.018Z", "date_only": false, "value": "2026-08-03T18:50:48.018207Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/KRW0090/166c655e59c71f63be65acf67641b33d", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "77fa0056-4c6b-4394-98b6-52d9b1537961", "url": "https://gist.github.com/KRW0090/166c655e59c71f63be65acf67641b33d"}, {"timestamp": "2026-08-04T00:00:53.575Z", "date_only": false, "value": "2026-08-04T00:00:53.575360Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/2130", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "2f63fa4b-b78b-4622-8962-4c22a75210ac", "url": "https://t.me/reverseame/2130"}, {"timestamp": "2026-08-05T05:00:07.929Z", "date_only": false, "value": "2026-08-05T05:00:07.929343Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/timcore_hacking/810", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "cdfd5f36-adbf-4e61-89e0-199362de7737", "url": "https://t.me/timcore_hacking/810"}, {"timestamp": "2026-08-06T00:00:49.886Z", "date_only": false, "value": "2026-08-06T00:00:49.886984Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/timcore_hacking/810", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "68949d70-cae7-48b7-9829-7ab396682fb5", "url": "https://t.me/timcore_hacking/810"}, {"timestamp": "2026-08-22T21:00:05.552Z", "date_only": false, "value": "2026-08-22T21:00:05.552735Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/nuancesprognews/639", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "f648eb01-67ca-4903-b400-bdc6286f6477", "url": "https://t.me/nuancesprognews/639"}, {"timestamp": "2026-08-22T22:00:04.912Z", "date_only": false, "value": "2026-08-22T22:00:04.912563Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/25mLFKuVy8UKLdbQugnyRLveX4s-n1eUB4jQvqeZ0RCnT94", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "d695d453-0fa3-4ec6-86cc-ec92fe044a18"}, {"timestamp": "2026-09-01T20:02:51.245Z", "date_only": false, "value": "2026-09-01T20:02:51.245502Z", "kind": "sighting", "label": "Seen", "source": "Telegram/6qjOSGz2rITD2x_SNIoQHd-DZkODcpodubtghS_wd2V0nZGz", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "ec324fe5-9e5d-4b00-b5b5-596957b1f77e"}, {"timestamp": "2026-09-04T05:00:03.708Z", "date_only": false, "value": "2026-09-04T05:00:03.708941Z", "kind": "sighting", "label": "Seen", "source": "Telegram/lVgH1s8o3BEPOa07KzwMpLSHxMHP_3LqYIgOPKG006RedI8", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "c4fbf510-9946-4088-b5a8-270bf5d047c8"}, {"timestamp": "2026-09-04T05:00:04.311Z", "date_only": false, "value": "2026-09-04T05:00:04.311831Z", "kind": "sighting", "label": "Seen", "source": "Telegram/wsozqluPl_W06A_oXbzfIKTVzNLR6fGSgCNc8JJ1fbOlU5U", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "6137f4c2-e6d3-425b-ae57-2e4378c99a54"}, {"timestamp": "2026-09-05T01:00:38.531Z", "date_only": false, "value": "2026-09-05T01:00:38.531588Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/lVgH1s8o3BEPOa07KzwMpLSHxMHP_3LqYIgOPKG006RedI8", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "7c8f8455-d9cc-456f-84a4-b5c1486cf7b8"}, {"timestamp": "2026-09-05T01:00:38.969Z", "date_only": false, "value": "2026-09-05T01:00:38.969799Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/wsozqluPl_W06A_oXbzfIKTVzNLR6fGSgCNc8JJ1fbOlU5U", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "0cd3d867-5c7d-498d-a908-3bec651fd3cc"}, {"timestamp": "2026-09-08T19:00:05.643Z", "date_only": false, "value": "2026-09-08T19:00:05.643616Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/6qjOSGz2rITD2x_SNIoQHd-DZkODcpodubtghS_wd2V0nZGz", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "37f30c63-42a6-4f32-b931-3683658601e1"}, {"timestamp": "2026-09-12T12:00:05.347Z", "date_only": false, "value": "2026-09-12T12:00:05.347129Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/OmvZqlZzjGZFLdJb1Q1KMJ6kqdti669uRggn5kTYcsdoC98", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "fa31f58f-6d53-41c1-843e-ee78dbd2a7e3"}, {"timestamp": "2026-09-12T18:00:06.391Z", "date_only": false, "value": "2026-09-12T18:00:06.391137Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/yLFyayC8woaXON6gBP0uC2dhqPyYy7otPitMryQ7HGKFwmU", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "35e6b0a6-b119-45dc-bb77-a5e0b6c4649f"}, {"timestamp": "2026-09-12T22:00:05.489Z", "date_only": false, "value": "2026-09-12T22:00:05.489535Z", "kind": "sighting", "label": "Seen", "source": "Telegram/89mqymHLrliYqD2lpNbDrV-QJtERDlku7-I3J8T1VfuOS7o", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "df5a8f7e-dd20-4c15-a448-24b6eb51a1e6"}, {"timestamp": "2026-09-13T00:00:06.249Z", "date_only": false, "value": "2026-09-13T00:00:06.249518Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/89mqymHLrliYqD2lpNbDrV-QJtERDlku7-I3J8T1VfuOS7o", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "727a5a92-a8b2-475f-8244-90aa79c1a3b5"}, {"timestamp": "2026-09-13T05:00:04.562Z", "date_only": false, "value": "2026-09-13T05:00:04.562303Z", "kind": "sighting", "label": "Seen", "source": "Telegram/enuFtfy7_La2nhky1baL4f3PHQ7zXYHTXyMen1yRgFStmpo", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "4295629e-9c26-4470-969b-016265b6034d"}, {"timestamp": "2026-09-13T15:00:04.955Z", "date_only": false, "value": "2026-09-13T15:00:04.955457Z", "kind": "sighting", "label": "Seen", "source": "Telegram/_ItBW2ISPfXTP_GQ1u33hZLuQB32BZCCcm6UD9oQHRUit34", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "518cbfb4-f610-4ae7-ad0a-ac35610b9510"}, {"timestamp": "2026-09-13T19:00:06.986Z", "date_only": false, "value": "2026-09-13T19:00:06.986754Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/fCYfsp7T0HvdgYUk6fpwx7PmCBxDyJrWdAt8KHajAR5t990", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "eac3e558-90c5-4128-96cf-c4777a6e5352"}, {"timestamp": "2026-09-14T00:00:08.747Z", "date_only": false, "value": "2026-09-14T00:00:08.747678Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Sw7w0mgYZztNyKRF3fWi-eeav_uu22vd4Rf64ipdmjeMdzo", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "0000525c-f94a-42cd-b856-1025e316cbe6"}, {"timestamp": "2026-09-14T00:00:13.244Z", "date_only": false, "value": "2026-09-14T00:00:13.244516Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/_ItBW2ISPfXTP_GQ1u33hZLuQB32BZCCcm6UD9oQHRUit34", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "799a2457-f136-4db2-b379-074027a66d27"}, {"timestamp": "2026-09-14T00:00:30.577Z", "date_only": false, "value": "2026-09-14T00:00:30.577568Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/enuFtfy7_La2nhky1baL4f3PHQ7zXYHTXyMen1yRgFStmpo", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "47479512-8743-4416-a2cf-40f73141ee04"}, {"timestamp": "2026-09-14T08:00:06.740Z", "date_only": false, "value": "2026-09-14T08:00:06.740866Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/gyuJkhwE1QW5dp6T2sqLY0W_FIihZTaffwzmEDVTb_8A9F0", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "5a67f565-4e76-4503-9bdb-56dd9f8d8f54"}, {"timestamp": "2026-09-14T15:00:05.180Z", "date_only": false, "value": "2026-09-14T15:00:05.180406Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/61abUJDSbFymRymM4Ih08MIeup8wZ1kM30Vo8fPpc00h4nk", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "ec12000f-e1c7-4284-aa49-e0b61a1185db"}, {"timestamp": "2026-09-14T20:00:06.181Z", "date_only": false, "value": "2026-09-14T20:00:06.181448Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/EGBdybLD2huAAn1sVkecjoZQ9tzhmpQFII0lcy95UfJwU3I", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "f6c0f1a1-83f5-41a0-a4d8-3233b7b3bdee"}, {"timestamp": "2026-09-14T23:00:03.635Z", "date_only": false, "value": "2026-09-14T23:00:03.635129Z", "kind": "sighting", "label": "Seen", "source": "Telegram/x38-sxvf4qgSSEOQO0rIsdAof5ij13oL7xnEFNSRLy91YY4", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "acf01914-bee2-49c8-b88a-138b3ad60e9e"}, {"timestamp": "2026-09-15T00:00:32.051Z", "date_only": false, "value": "2026-09-15T00:00:32.051530Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Sw7w0mgYZztNyKRF3fWi-eeav_uu22vd4Rf64ipdmjeMdzo", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "080725a6-75c7-411c-9be8-8c32fe06b05d"}, {"timestamp": "2026-09-15T01:00:03.761Z", "date_only": false, "value": "2026-09-15T01:00:03.761514Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/bMxyT3RashzRlEqesMAot9dl-uO8YU-FByy-p5IzSSXZEFI", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "903d9eec-f786-4217-99e1-bd9e460a3ca9"}, {"timestamp": "2026-09-15T07:00:05.757Z", "date_only": false, "value": "2026-09-15T07:00:05.757921Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/KbOEosNsbtDItspwyIfguqHva0LkSUJ6VXT3bej9m7sg9NA", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "1906b407-7be2-4913-8993-b1dd34f14a91"}, {"timestamp": "2026-09-15T14:00:05.528Z", "date_only": false, "value": "2026-09-15T14:00:05.528109Z", "kind": "sighting", "label": "Seen", "source": "Telegram/M1_uN704NAQqARlK10J1RV2V4jZMloD0xAwA5jP4rCMGPaU", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "91c0bbef-e00f-41cf-a864-3d25f1fdc957"}, {"timestamp": "2026-09-15T20:00:04.588Z", "date_only": false, "value": "2026-09-15T20:00:04.588582Z", "kind": "sighting", "label": "Seen", "source": "Telegram/oWUBOeYSyM3NQf0XW-8Drdwpqd4EcAE5j0qMZRO3tnY8-xc", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "2f0c868b-69af-40cb-a4df-f449f8aed1fc"}, {"timestamp": "2026-09-15T23:00:05.055Z", "date_only": false, "value": "2026-09-15T23:00:05.055778Z", "kind": "sighting", "label": "Seen", "source": "Telegram/YkyluepN76ij9Ij5tEEjyQwEQrptqDukdN9BPlyExWtLz5s", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "15117681-9675-4f72-9526-b77ec780d8d9"}, {"timestamp": "2026-09-16T00:00:09.580Z", "date_only": false, "value": "2026-09-16T00:00:09.580261Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/YkyluepN76ij9Ij5tEEjyQwEQrptqDukdN9BPlyExWtLz5s", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "709df198-adef-4efc-83a5-055a55c79159"}, {"timestamp": "2026-09-16T00:00:12.052Z", "date_only": false, "value": "2026-09-16T00:00:12.052648Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/oWUBOeYSyM3NQf0XW-8Drdwpqd4EcAE5j0qMZRO3tnY8-xc", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "7dba12f0-27e5-4994-b5bd-9bb2269f9c78"}, {"timestamp": "2026-09-16T00:00:31.113Z", "date_only": false, "value": "2026-09-16T00:00:31.113392Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/M1_uN704NAQqARlK10J1RV2V4jZMloD0xAwA5jP4rCMGPaU", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "8c5e3d2b-3f20-44a3-aabf-10bfa086582f"}, {"timestamp": "2026-09-17T13:00:04.774Z", "date_only": false, "value": "2026-09-17T13:00:04.774430Z", "kind": "sighting", "label": "Seen", "source": "Telegram/ifJivUowikeMOW_QrouBCq7ccus6NqBb3jRfVEFjYmZ_jxo", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "75c1d29c-1f15-46f1-815b-7ed497ceb7e9"}, {"timestamp": "2026-09-18T00:00:06.080Z", "date_only": false, "value": "2026-09-18T00:00:06.080434Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/ifJivUowikeMOW_QrouBCq7ccus6NqBb3jRfVEFjYmZ_jxo", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "0375574d-a6b7-4b75-9d42-907b102b0372"}, {"timestamp": "2026-09-25T09:14:51Z", "date_only": false, "value": "2026-09-25T09:14:51.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/_HB286DIGoIh24iXPSSHTf2y9v8CxhkI8N_vcSD8uV1hZ7w", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "88e3e428-0749-48a7-9ea5-7a899a62b895"}, {"timestamp": "2026-09-25T09:14:51Z", "date_only": false, "value": "2026-09-25T09:14:51.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/_HB286DIGoIh24iXPSSHTf2y9v8CxhkI8N_vcSD8uV1hZ7w", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "53231d9b-4f59-4706-b7e0-e2107526b0a9"}, {"timestamp": "2026-10-05T15:49:11Z", "date_only": false, "value": "2026-10-05T15:49:11Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2019-2215", "record": "UBUNTU-CVE-2019-2215", "field": "modified"}, {"timestamp": "2026-10-07T12:06:52Z", "date_only": false, "value": "2026-10-07T12:06:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/104533", "record": "CVE-2019-2215", "field": "creation_timestamp", "uuid": "c2a40081-6505-4507-8511-eead3a9135ad", "url": "https://t.me/GithubRedTeam/104533"}]}