{"metadata": {"vulnerability": "CVE-2022-24086", "count": 130, "kinds": {"milestone": 5, "sighting": 83, "kev": 17, "other": 25}}, "data": [{"timestamp": "2022-01-27T00:00:00Z", "date_only": false, "value": "2022-01-27T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-24086", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-02-13T00:00:00Z", "date_only": false, "value": "2022-02-13T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / adobe", "record": "CVE-2022-24086", "field": "containers.cna.datePublic"}, {"timestamp": "2022-02-13T23:00:00Z", "date_only": false, "value": "2022-02-13T23:00:00.000Z", "kind": "other", "label": "DATE PUBLIC", "source": "cvelistv5 / adobe", "record": "CVE-2022-24086", "field": "containers.cna.x_legacyV4Record.CVE_data_meta.DATE_PUBLIC"}, {"timestamp": "2022-02-13T23:00:00Z", "date_only": false, "value": "2022-02-13T23:00:00.000Z", "kind": "other", "label": "DATE PUBLIC", "source": "gsd \u00b7 GSD-2022-24086", "record": "GSD-2022-24086", "field": "namespaces.cve.org.CVE_data_meta.DATE_PUBLIC"}, {"timestamp": "2022-02-14T04:28:01Z", "date_only": false, "value": "2022-02-14T04:28:01.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/1883", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "e738e09a-fe99-483b-9c1d-b376eaff5b46", "content": "Cybercriminals have been found exploiting a new critical zero-day vulnerability (CVE-2022-24086 / CVSS 9.8) in the Adobe Commerce and Magento e-commerce platforms \u2014 Patch your online shopping sites now.\n\nRead details: https://thehackernews.com/2022/02/critical-magento-0-day-vulnerability.html", "url": "https://t.me/thehackernews/1883"}, {"timestamp": "2022-02-14T11:56:15Z", "date_only": false, "value": "2022-02-14T11:56:15.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ctinow/46881", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "063e08fa-08ab-400b-93ad-9fbed7295cf9", "content": "Critical Magento zero-day flaw CVE-2022-24086 actively exploited\n\nhttps://ift.tt/EfwToAN", "url": "https://t.me/ctinow/46881"}, {"timestamp": "2022-02-14T15:30:00Z", "date_only": false, "value": "2022-02-14T15:30:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/2626", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "42091831-bd67-4822-9bcf-3dc8391de173", "content": "Mayday, Mayday \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c Adobe Commerce \u0438 Magento.\n\n\u0412 \u0432\u043e\u0441\u043a\u0440\u0435\u0441\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Adobe \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0439 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0441 \u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445. CVE-2022-24086 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 9,8. \u041e\u0448\u0438\u0431\u043a\u0443 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442 \u043a\u0430\u043a \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0432\u0432\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0440\u0438\u0447\u0435\u043c \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0423\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043a\u043e\u043c\u043c\u0435\u0440\u0446\u0438\u0438 Magento \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0438 Adobe Commerce, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0432\u0435\u0440\u0441\u0438\u0438 2.4.3-p1 \u0438 2.3.7-p2, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432. \u0421\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u043f\u0430\u0442\u0447\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0434\u043b\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439.\n\n\u0412 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e CVE-2022-24086 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435, \u043d\u043e \u0432 \u043a\u0440\u0430\u0439\u043d\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043d\u0430 \u043f\u0440\u043e\u0434\u0430\u0432\u0446\u043e\u0432 Adobe Commerce.\n\n\u041d\u0438\u043a\u0430\u043a\u043e\u0439 \u0434\u0440\u0443\u0433\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043e \u043d\u0435 \u0431\u044b\u043b\u043e \u0438 Adobe \u043d\u0435 \u0443\u043f\u043e\u043c\u044f\u043d\u0443\u043b\u0430 \u0442\u0435\u0445, \u043a\u0442\u043e \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0435\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u041f\u043e\u043a\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u043d\u0435 \u0433\u043e\u0442\u043e\u0432 \u0434\u0435\u043b\u0438\u0442\u044c\u0441\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0435\u0439 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u0430\u0445 \u0437\u0430\u0449\u0438\u0442\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0441\u0432\u043e\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432.\n\n\u0412\u0441\u0435 \u043c\u044b \u043f\u0440\u0435\u043a\u0440\u0430\u0441\u043d\u043e \u0437\u043d\u0430\u0435\u043c, \u043a\u0430\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043a\u043e\u043c\u043c\u0435\u0440\u0446\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0441\u043f\u0440\u043e\u0441\u043e\u043c \u0443 \u0445\u0430\u043a\u0435\u0440\u043e\u0432 \u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432 \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445. \u041e\u0434\u0438\u043d \u043d\u0435\u0434\u0430\u0432\u043d\u0438\u0439 \u043f\u0440\u0438\u043c\u0435\u0440 \u044f\u0432\u043d\u043e \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u0435\u0442 \u0438\u043d\u0442\u0435\u0440\u0435\u0441, \u043a\u043e\u0433\u0434\u0430 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0430\u043c\u0438 \u0431\u044b\u043b\u043e \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043d\u043e \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 500 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u043e\u0432, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u043d\u0430 Magento 1 \u0441 \u0446\u0435\u043b\u044c\u044e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0432\u0435\u0431-\u0441\u043a\u0438\u043c\u043c\u0435\u0440\u043e\u0432 \u0434\u043b\u044f \u0441\u0431\u043e\u0440\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u0422\u043e\u0433\u0434\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043a\u043e\u043c\u0431\u0438\u043d\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0442\u043e, \u0447\u0442\u043e Magento 1 \u0431\u043e\u043b\u044c\u0448\u0435 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.", "url": "https://t.me/true_secator/2626"}, {"timestamp": "2022-02-15T00:00:00Z", "date_only": false, "value": "2022-02-15T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2022-24086", "field": "timestamps.asserted_at", "uuid": "c27ba220-7219-437a-bd14-d5b7081a3220", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-02-15T00:00:00Z", "date_only": false, "value": "2022-02-15T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2022-24086", "field": "timestamps.asserted_at", "uuid": "a59e5653-7e21-45f5-9b30-6835e389e6ec", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-02-15T00:00:00Z", "date_only": true, "value": "2022-02-15", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-24086", "field": "containers.adp.1.metrics.1.other.content.dateAdded"}, {"timestamp": "2022-02-15T00:00:00Z", "date_only": true, "value": "2022-02-15", "kind": "other", "label": "Catalog added", "source": "gsd \u00b7 GSD-2022-24086", "record": "GSD-2022-24086", "field": "namespaces.cisa.gov.dateAdded"}, {"timestamp": "2022-02-15T00:00:00Z", "date_only": false, "value": "2022-02-15T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2022-24086", "field": "evidence.0.details.added_date", "uuid": "a59e5653-7e21-45f5-9b30-6835e389e6ec", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-02-15T00:00:00Z", "date_only": true, "value": "2022-02-15", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2022-24086", "field": "evidence.0.details.date_added", "uuid": "c27ba220-7219-437a-bd14-d5b7081a3220", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-02-15T00:00:00Z", "date_only": false, "value": "2022-02-15T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2022-24086", "field": "timestamps.first_seen_at", "uuid": "c27ba220-7219-437a-bd14-d5b7081a3220", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-02-15T00:00:00Z", "date_only": false, "value": "2022-02-15T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2022-24086", "field": "timestamps.first_seen_at", "uuid": "a59e5653-7e21-45f5-9b30-6835e389e6ec", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-02-15T00:00:00Z", "date_only": false, "value": "2022-02-15T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2022-24086", "field": "status.status_updated_at", "uuid": "c27ba220-7219-437a-bd14-d5b7081a3220", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-02-15T00:00:00Z", "date_only": false, "value": "2022-02-15T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2022-24086", "field": "status.status_updated_at", "uuid": "a59e5653-7e21-45f5-9b30-6835e389e6ec", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-02-15T00:00:00Z", "date_only": true, "value": "2022-02-15", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2022-22100", "record": "CNVD-2022-22100", "field": "submitTime"}, {"timestamp": "2022-02-15T00:00:00Z", "date_only": false, "value": "2022-02-15T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-24086", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2022-02-15T10:38:24Z", "date_only": false, "value": "2022-02-15T10:38:24.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_4/2022", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "ea739c1a-d390-485f-9830-3cfc2731d9f4", "url": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_4/2022"}, {"timestamp": "2022-02-16T00:00:00Z", "date_only": true, "value": "2022-02-16", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2022-24086", "record": "GSD-2022-24086", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2022-02-16T11:05:06Z", "date_only": false, "value": "2022-02-16T11:05:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/5425", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "69f7e90f-0226-4236-ac51-fbb0e0fd9c49", "content": "#Threat_Research\n1. Hunting for bugs in VMware:\nView Planner and vRealize Business for Cloud\nhttps://swarm.ptsecurity.com/hunting-for-bugs-in-vmware-view-planner-and-vrealize-business-for-cloud\n2. Magento 2 Critical Vulnerability (CVE-2022-24086)\nhttps://sansec.io/research/magento-2-cve-2022-24086", "url": "https://t.me/CyberSecurityTechnologies/5425"}, {"timestamp": "2022-02-16T16:38:28Z", "date_only": false, "value": "2022-02-16T16:38:28.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / adobe", "record": "CVE-2022-24086", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-02-16T16:38:28.383Z", "date_only": false, "value": "2022-02-16T16:38:28.383Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-24086", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-02-16T17:15:00Z", "date_only": false, "value": "2022-02-16T17:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-F8FV-F786-9933", "record": "GHSA-F8FV-F786-9933", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-02-16T17:15:00Z", "date_only": false, "value": "2022-02-16T17:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-24086", "record": "GSD-2022-24086", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-02-16T17:15:13.307Z", "date_only": false, "value": "2022-02-16T17:15:13.307", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-24086", "record": "FKIE_CVE-2022-24086", "field": "published"}, {"timestamp": "2022-02-16T20:36:15Z", "date_only": false, "value": "2022-02-16T20:36:15.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/37590", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "4350b922-953b-42c5-b581-cbf07dcd146e", "content": "\u203c CVE-2022-24086 \u203c\n\nAdobe Commerce versions 2.4.3-p1 (and earlier) and 2.3.7-p2 (and earlier) are affected by an improper input validation vulnerability during the checkout process. Exploitation of this issue does not require user interaction and could result in arbitrary code execution.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/37590"}, {"timestamp": "2022-02-17T00:00:29Z", "date_only": false, "value": "2022-02-17T00:00:29Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-F8FV-F786-9933", "record": "GHSA-F8FV-F786-9933", "field": "published"}, {"timestamp": "2022-02-18T06:45:09Z", "date_only": false, "value": "2022-02-18T06:45:09.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ptswarm/107", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "da41c44b-247e-4d76-ba11-8e244ad6b7bb", "content": "We have reproduced the fresh CVE-2022-24086 Improper Input Validation vulnerability in Magento Open Source and Adobe Commerce.\n\nSuccessful exploitation could lead to RCE from an unauthenticated user.", "url": "https://t.me/ptswarm/107"}, {"timestamp": "2022-02-18T08:45:49Z", "date_only": false, "value": "2022-02-18T08:45:49.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ptswarm/108", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "75ba3493-1e6e-4f93-a819-af3977f60b2a", "content": "We have successfully bypassed the patch for RCE in Magento Open Source and Adobe Commerce (CVE-2022-24086), and have sent the report to Adobe (we weren't the first). The new CVE-2022-24087 was issued. Hotfix is available now. \n\nPatch ASAP!", "url": "https://t.me/ptswarm/108"}, {"timestamp": "2022-02-18T09:41:44Z", "date_only": false, "value": "2022-02-18T09:41:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ctinow/47196", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "44ebaa03-5094-4247-8135-649157c164b7", "content": "Researchers created a PoC exploit for recently disclosed critical Magento CVE-2022-24086 bug\n\nhttps://ift.tt/2IG59um", "url": "https://t.me/ctinow/47196"}, {"timestamp": "2022-02-18T13:15:57Z", "date_only": false, "value": "2022-02-18T13:15:57.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/2645", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "22864a0a-5c75-405d-9691-601d023a1d6d", "content": "\u200b\u200b\u041a\u0430\u043a \u043c\u044b \u0432\u0441\u0435 \u043f\u043e\u043c\u043d\u0438\u043c, \u0432 \u043f\u043e\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u0438\u043a \u0431\u044b\u043b\u043e \u043e\u0431\u044a\u044f\u0432\u043b\u0435\u043d\u043e \u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0438 \u0432 Adobe Commerce \u0438 Magento RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2022-24086, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e \u0437\u0430\u043a\u0440\u044b\u0442\u0430 \u0432\u043d\u0435\u043e\u0447\u0435\u0440\u0435\u0434\u043d\u044b\u043c \u043f\u0430\u0442\u0447\u0435\u043c.\n\n\u0410 \u0432\u0447\u0435\u0440\u0430 Adobe \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0438, \u0447\u0442\u043e \u043e\u043d\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438, \u0447\u0442\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043c\u043e\u0436\u043d\u043e \u043e\u0431\u043e\u0439\u0442\u0438 (CVE-2022-24087), \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0432\u0442\u043e\u0440\u043e\u0439 \u0432\u043d\u0435\u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u043f\u0430\u0442\u0447. \u0421\u0430\u043c\u0430 \u043f\u043e \u0441\u0435\u0431\u0435 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u0438\u0437 \u0440\u0430\u0437\u0440\u044f\u0434\u0430 \"\u043d\u0435 \u0447\u0430\u0441\u0442\u043e, \u043d\u043e \u0431\u044b\u0432\u0430\u0435\u0442\".\n\n\u041d\u043e \u0435\u0441\u0442\u044c \u043e\u0434\u043d\u0430 \u043f\u0438\u043a\u0430\u043d\u0442\u043d\u0430\u044f \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u044c.\n\n\u041f\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0443 \u0440\u0430\u0441\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f, \u0447\u0442\u043e \u043f\u0435\u0440\u0432\u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 CVE-2022-24087 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0448\u0432\u0435\u0439\u0446\u0430\u0440\u0441\u043a\u0438\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Eboda \u0438 Blaklis.\n\n\u0410 \u043f\u0430\u0440\u0443 \u0447\u0430\u0441\u043e\u0432 \u043d\u0430\u0437\u0430\u0434 \u041f\u043e\u0437\u0438\u0442\u0438\u0432\u044b \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u0432 Twitter, \u0447\u0442\u043e \u043e\u043d\u0438 \u0442\u043e\u0436\u0435 \u043e\u0431\u043e\u0448\u043b\u0438 \u0430\u043f\u0434\u0435\u0439\u0442 \u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u043b\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0432 Adobe (\u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0443\u043a\u0430\u0437\u0430\u043b\u0438, \u0447\u0442\u043e \u0431\u044b\u043b\u0438 \u043d\u0435 \u043f\u0435\u0440\u0432\u044b\u043c\u0438).\n\n\u0418 \u0432\u043e\u0442 \u043d\u0430\u043c \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e - \u0443\u043a\u0430\u0436\u0443\u0442 Adobe \u043f\u043e\u0437\u0438\u0442\u0438\u0432\u043e\u0432\u0441\u043a\u0438\u0445 \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u043e\u0432 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0430\u0432\u0442\u043e\u0440\u043e\u0432 CVE \u043d\u0430\u0440\u044f\u0434\u0443 \u0441\u043e \u0448\u0432\u0435\u0439\u0446\u0430\u0440\u0446\u0430\u043c\u0438? \u0418\u043b\u0438 \"\u0442\u0430\u043a\u0442\u0438\u0447\u043d\u043e\" \u043f\u0440\u043e\u043c\u043e\u043b\u0447\u0430\u0442 \u0438 \u043f\u0440\u0438\u0441\u043e\u0435\u0434\u0438\u043d\u044f\u0442\u0441\u044f \u043a \u043f\u0435\u0442\u0443\u0448\u0438\u043d\u043e\u043c\u0443 \u043a\u0443\u0442\u043a\u0443, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0443\u0436\u0435 \u0441\u0438\u0434\u044f\u0442 Citrix, \u0430 \u0442\u0430\u043a\u0436\u0435 SAP?", "url": "https://t.me/true_secator/2645"}, {"timestamp": "2022-02-18T21:48:44Z", "date_only": false, "value": "2022-02-18T21:48:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/xakep_ru/11977", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "df36f597-0329-48c8-a7b2-5dec6d27e37b", "content": "\u0414\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Magento \u043f\u043e\u044f\u0432\u0438\u043b\u0441\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442, \u0430 Adobe \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0432\u0442\u043e\u0440\u043e\u0439 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0439 \u0431\u0430\u0433\n\n\u0414\u043b\u044f \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Magento \u0438 Adobe Commerce (CVE-2022-24086) \u043f\u043e\u044f\u0432\u0438\u043b\u0441\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442, \u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Adobe \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0435\u0449\u0435 \u043e\u0434\u043d\u0438\u043c \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u043c, \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u043f\u0430\u0442\u0447 \u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0438\u043b\u0438 \u043d\u043e\u0432\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2022-24087.\n\nhttps://xakep.ru/2022/02/18/second-rce-in-magento-adobe-commerce/", "url": "https://t.me/xakep_ru/11977"}, {"timestamp": "2022-02-19T17:20:58Z", "date_only": false, "value": "2022-02-19T17:20:58.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/NeKaspersky/1828", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "a75d9823-2030-4b65-a914-7740aa7b7d23", "content": "Adobe \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430 \u043d\u0435\u0434\u0430\u0432\u043d\u0438\u0435 oob-\u043f\u0430\u0442\u0447\u0438 \u0434\u043b\u044f Magento, \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0432 \u0435\u0449\u0435 \u043e\u0434\u043d\u0443 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u043e\u0437\u0434\u0430\u043b\u0438 PoC \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u0439\n\n\u041d\u043e\u0432\u044b\u0439 0day \u0432 Magento \u0438 Adobe Commerce \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c RCE \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041e\u043d \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0442\u043e\u0442 \u0436\u0435 \u0441\u0447\u0435\u0442 \u0440\u0435\u0439\u0442\u0438\u043d\u0433 \u043f\u043e CVSS (9.8), \u0447\u0442\u043e \u0438 \u0435\u0433\u043e \u043f\u0440\u0435\u0434\u0448\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u0438\u043a, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0439 13 \u0444\u0435\u0432\u0440\u0430\u043b\u044f (\u043e \u043d\u0435\u043c \u043f\u0438\u0441\u0430\u043b\u0438 \u0440\u0430\u043d\u0435\u0435). \u041e\u043d \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2022-24087. \u0421\u0445\u043e\u0434\u0441\u0442\u0432\u0430 \u043d\u0430 \u044d\u0442\u043e\u043c \u043d\u0435 \u0437\u0430\u043a\u0430\u043d\u0447\u0438\u0432\u0430\u044e\u0442\u0441\u044f: \u043e\u0431\u0430 \u0431\u0430\u0433\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u044b \u043a\u043e\u0441\u044f\u043a\u0430\u043c\u0438 \u0432 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435 \u0432\u0432\u0435\u0434\u0435\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b \u0442\u0435 \u0436\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0441\u043e\u0444\u0442\u0430. \u0418\u0437 \u044d\u0442\u043e\u0433\u043e \u043d\u0435\u0441\u043b\u043e\u0436\u043d\u043e \u043f\u043e\u043d\u044f\u0442\u044c, \u0447\u0442\u043e \u043d\u043e\u0432\u044b\u0439 \u0431\u0430\u0433 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u0440\u043e\u0434\u0430 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u0444\u0438\u043a\u0441\u0430 \u0441\u0442\u0430\u0440\u043e\u0433\u043e.\n\n\u0415\u0441\u0442\u044c \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u0438\u044f: \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0432 \u043e\u0442\u043b\u0438\u0447\u0438\u0435 \u043e\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0430\u043d\u0435\u0435, CVE-2022-24087 \u043d\u0435 \u0431\u044b\u043b \u0437\u0430\u043c\u0435\u0447\u0435\u043d \u0432 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n\u0417\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u043f\u0435\u0440\u0432\u043e\u0433\u043e \u0431\u0430\u0433\u0430 \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Eboda \u0438 Blacklist, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0439 \u0442\u0430\u043a\u0436\u0435 \u043d\u0430\u043f\u0438\u0441\u0430\u043b \u043d\u0430 \u0441\u0432\u043e\u0435\u0439 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 \u0432 \u0442\u0432\u0438\u0442\u0442\u0435\u0440, \u0447\u0442\u043e \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0444\u0438\u043a\u0441\u0430 \u043d\u0435 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u0440\u0438\u0437\u0432\u0430\u043b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0441\u043d\u043e\u0432\u0430.\n\n\u0422\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0435\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Positive Technologies \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438, \u0447\u0442\u043e \u0438\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0441\u043e\u0437\u0434\u0430\u0442\u044c PoC \u0434\u043b\u044f CVE-2022-24086, \u043e\u0434\u043d\u0430\u043a\u043e \u043d\u0435 \u0441\u043f\u0435\u0448\u0430\u0442 \u0434\u0435\u043b\u0438\u0442\u044c\u0441\u044f \u0438\u043c \u0441 \u0448\u0438\u0440\u043e\u043a\u043e\u0439 \u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0439.\n@NeKaspersky", "url": "https://t.me/NeKaspersky/1828"}, {"timestamp": "2022-02-20T13:57:59Z", "date_only": false, "value": "2022-02-20T13:57:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1513", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "67b4b245-c817-49ea-a1b4-da9fa481dc2f", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-24086 about Magento RCE \nURL\uff1ahttps://github.com/Mr-xn/CVE-2022-24086", "url": "https://t.me/GithubRedTeam/1513"}, {"timestamp": "2022-02-21T00:00:00Z", "date_only": false, "value": "2022-02-21T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-167", "record": "CERTFR-2022-AVI-167", "field": "last_revision_date"}, {"timestamp": "2022-02-21T00:00:00Z", "date_only": false, "value": "2022-02-21T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-167", "record": "CERTFR-2022-AVI-167", "field": "initial_release_date"}, {"timestamp": "2022-02-21T00:00:00Z", "date_only": false, "value": "2022-02-21T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-167", "record": "CERTFR-2022-AVI-167", "field": "revisions.0.revision_date"}, {"timestamp": "2022-02-22T00:00:00Z", "date_only": true, "value": "2022-02-22", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2022-24086", "record": "GSD-2022-24086", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2022-02-22T17:40:00Z", "date_only": false, "value": "2022-02-22T17:40Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-24086", "record": "GSD-2022-24086", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-02-25T12:20:28Z", "date_only": false, "value": "2022-02-25T12:20:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1534", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "3df68132-747e-4493-8156-f75da2f7c731", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-24086 about Magento RCE \nURL\uff1ahttps://github.com/Mr-xn/CVE-2022-24086", "url": "https://t.me/GithubRedTeam/1534"}, {"timestamp": "2022-02-26T10:14:57Z", "date_only": false, "value": "2022-02-26T10:14:57.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1540", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "dcf1d38f-0825-45ad-b9ce-80bb46a2da3d", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-24086  RCE\nURL\uff1ahttps://github.com/shakeman8/CVE-2022-24086-RCE", "url": "https://t.me/GithubRedTeam/1540"}, {"timestamp": "2022-03-01T00:00:00Z", "date_only": true, "value": "2022-03-01", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2022-24086", "field": "evidence.0.details.due_date", "uuid": "c27ba220-7219-437a-bd14-d5b7081a3220", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-01T00:00:00Z", "date_only": true, "value": "2022-03-01", "kind": "other", "label": "Remediation due", "source": "gsd \u00b7 GSD-2022-24086", "record": "GSD-2022-24086", "field": "namespaces.cisa.gov.dueDate"}, {"timestamp": "2022-03-01T12:28:16Z", "date_only": false, "value": "2022-03-01T12:28:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reconshell/1200", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "fb5db36a-66e4-4a90-b09e-e7d4ee30aeaf", "content": "CVE-2022-24086 Magento RCE\n\n#vulnerability #RCE #Magento #Hacking #adobe\n#CVE-2022-24086 #CodeExecution #Exploitation\n\nhttps://reconshell.com/cve-2022-24086-magento-rce/", "url": "https://t.me/reconshell/1200"}, {"timestamp": "2022-03-02T15:36:43Z", "date_only": false, "value": "2022-03-02T15:36:43.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1567", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "3877c299-635f-41ed-afba-f052caf55bb0", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-24086 about Magento RCE \nURL\uff1ahttps://github.com/ComparedArray/printix-CVE-2022-25090", "url": "https://t.me/GithubRedTeam/1567"}, {"timestamp": "2022-03-17T02:42:38Z", "date_only": false, "value": "2022-03-17T02:42:38.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/BleepingComputer/11570", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "43a53fc7-b6d1-4cd1-95a6-91f69929055c", "content": "Emergency Magento update fixes zero-day bug exploited in attacks\n\nAdobe rolled out emergency updates for Adobe\u202fCommerce and\u202fMagento Open Source to fix a critical vulnerability tracked as CVE-2022-24086 that's being exploited in the wild. [...]\n\nhttps://www.bleepingcomputer.com/news/security/emergency-magento-update-fixes-zero-day-bug-exploited-in-attacks/", "url": "https://t.me/BleepingComputer/11570"}, {"timestamp": "2022-03-19T23:36:23Z", "date_only": false, "value": "2022-03-19T23:36:23.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/1688", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "41b8f994-52d0-440b-85c9-01a57b123fad", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-24086 and CVE-2022-24087 exploits proof of concept\nURL\uff1ahttps://github.com/Sam00rx/CVE-2022-24087\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/1688"}, {"timestamp": "2022-03-24T00:00:00Z", "date_only": true, "value": "2022-03-24", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2022-22100", "record": "CNVD-2022-22100", "field": "openTime"}, {"timestamp": "2022-05-19T22:29:25Z", "date_only": false, "value": "2022-05-19T22:29:25.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2238", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "7550097f-45bb-4149-8898-2fdcec2995c6", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aVerifed Proof of Concept on CVE-2022-24086\nURL\uff1ahttps://github.com/oK0mo/CVE-2022-24086-RCE-PoC\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2238"}, {"timestamp": "2022-05-30T10:13:49Z", "date_only": false, "value": "2022-05-30T10:13:49.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BlueRedTeam/2114", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "90748c7e-8ae3-4288-b2ca-977162d2e0f6", "content": "#CVE-2022\nCVE-2022-24086 and CVE-2022-24087 are an rce in adobe commerce and magento\n\nhttps://github.com/TomArni680/CVE-2022-24086-MASS-RCE\n\n@BlueRedTeam", "url": "https://t.me/BlueRedTeam/2114"}, {"timestamp": "2022-05-30T22:37:55Z", "date_only": false, "value": "2022-05-30T22:37:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2319", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "0bef76e0-f623-49ca-b8c8-2277dbdd5f13", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-24086 and CVE-2022-24087 are an rce in adobe commerce and magento\nURL\uff1ahttps://github.com/TomArni680/CVE-2022-24086-MASS-RCE\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2319"}, {"timestamp": "2022-06-01T03:00:26Z", "date_only": false, "value": "2022-06-01T03:00:26.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/crackcodes/630", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "ee5678f4-feb2-4e44-8ef7-5629f68d17a4", "content": "\u200bCVE-2022-24086-MASS-RCE\n\nCVE-2022-24086 and CVE-2022-24087 are an rce in adobe commerce and magento\n\nhttps://github.com/TomArni680/CVE-2022-24086-MASS-RCE\n\n#cve #RCE", "url": "https://t.me/crackcodes/630"}, {"timestamp": "2022-06-01T03:13:13Z", "date_only": false, "value": "2022-06-01T03:13:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/lYbwCy6Xnx8X3Kudt-yDQG5ZKfSE4jJ9Wlqxuu_oaY-QAA", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "508188e9-ae35-4aa0-8f3f-3648c5541b56"}, {"timestamp": "2022-07-19T10:14:46Z", "date_only": false, "value": "2022-07-19T10:14:46.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/_0C5Y8-7I5ffRtF75TRmjdgFMhj-WB5qRbCWmjeAxe01-VM", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "8691139f-06f0-4c83-afab-36bfd9163c0d"}, {"timestamp": "2022-07-19T12:12:47Z", "date_only": false, "value": "2022-07-19T12:12:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/BnM5S5zNNeaAgZhmsQ5GC58SGsVwUigmzA5S5tsXcbsUcw", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "d8b45cae-e158-4b8b-baf1-3fcaa1f43cb0"}, {"timestamp": "2022-07-19T13:38:52Z", "date_only": false, "value": "2022-07-19T13:38:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/crackcodes/862", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "bbca404b-872b-4354-8542-270a2d8f66bd", "content": "Updates On Hackbyte Forum:-\n\n\ud83d\udcccSmbpentest: Test Samba Servers which may have been configured improperly for anonymous access to vulnerable shares\n\n\ud83d\udcccLBOZO: A hybrid Windows Ransomware\n\n\ud83d\udcccHoaxshell: An unconventional Windows reverse shell, currently undetected by Microsoft Defender and other AV solutions, solely based on http(s) traffic\n\n\ud83d\udcccPing Castle Cloud\n\n\ud83d\udcccCoffeeLdr\n\n\ud83d\udcccZimbra #Exploit CVE-2022-30333\n\n\ud83d\udcccCVE-2022-24086 RCE POC\n\n\ud83d\udcccdata.gov.uk \u2013 UK Government Backups\n\n\ud83d\udccctelefonica Ecuador CRM Files Leaks\n\n\ud83d\udcccSvetlogorsk39.ru leak\n\n\ud83d\udcccrbcd-attack\n\n\ud83d\udcccRustyTokenManipulation\n\n\ud83d\udcccOralyzer - Open Redirection Analyzer\n\n\ud83d\udcccSalus \u2013 SBOM Tool\n\n\ud83d\udcccSliver GUI client.\n\n\ud83d\udcccCVE-2022-32119 - Arox-Unrestricted-File-Upload\n\n\ud83d\udcccNodeJS Ransomware\n\n\ud83d\udcccDirble - Fast directory scanning and scraping tool\n\n\ud83d\udcccWebView2-Cookie-Stealer\n\n\ud83d\udcccZombieThread - Another meterpreter injection technique using C# that attempts to bypass WD.\n\n\ud83d\udcccEvil Clippy\n\n\ud83d\udcccEvtx Log (xml) Browser\n\n\ud83d\udcccCVE-2022-30333\n\n\ud83d\udcccCVE-2022-23614: PoC for CVE-2022-23614 (Twig sort filter code execution/sandbox bypass)\n\n\ud83d\udcccCVE-2022-33891 - Apache Spark shell command injection\n\n\ud83d\udcccEJS, Server side template injection RCE (CVE-2022-29078)\n\n\ud83d\udcccBinary Ninja Commercial 3.1.3469 (2022-05-31)\n\n\ud83d\udccccitycollege.edu Health University Leak\n\n\ud83d\udcccFull HHIDE.ORG forum dump\n\n\ud83d\udcccdanish.my Leak\n\n\ud83d\udcccstripchat.com Leak\n\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014-\n\n\ud83d\udc49\ud83c\udffb\ud83d\udc49\ud83c\udffb Updates:- https://bit.ly/3yRyah3 \ud83d\udc48\ud83c\udffb\ud83d\udc48\ud83c\udffb", "url": "https://t.me/crackcodes/862"}, {"timestamp": "2022-07-23T05:04:31Z", "date_only": false, "value": "2022-07-23T05:04:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2732", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "8effa259-b478-4517-8a4e-bd3c2928db52", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aVerifed Proof of Concept on CVE-2022-24086 RCE\nURL\uff1ahttps://github.com/Cory65/CVE-2022-24086-POC\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2732"}, {"timestamp": "2022-07-28T06:52:18Z", "date_only": false, "value": "2022-07-28T06:52:18.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BlueRedTeam/2241", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "da2556fa-658b-4a15-872d-146bb419d858", "content": "#CVE-2022\n\nVerifed Proof of Concept on CVE-2022-24086 RCE\n\nhttps://github.com/Cory65/CVE-2022-24086-POC\n\n@BlueRedTeam", "url": "https://t.me/BlueRedTeam/2241"}, {"timestamp": "2022-09-22T17:30:54Z", "date_only": false, "value": "2022-09-22T17:30:54.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/BleepingComputer/13659", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "961ffd5e-3b41-47e5-999e-4a3b87ff397a", "content": "\u200aCritical Magento vulnerability targeted in new surge of attacks\n\nResearchers have observed a surge in hacking attempts targeting CVE-2022-24086, a critical Magento 2 vulnerability allowing unauthenticated attackers to execute code on unpatched sites. [...]\n\nhttps://www.bleepingcomputer.com/news/security/critical-magento-vulnerability-targeted-in-new-surge-of-attacks/", "url": "https://t.me/BleepingComputer/13659"}, {"timestamp": "2022-09-23T03:25:31Z", "date_only": false, "value": "2022-09-23T03:25:31.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/BleepingComputer/13670", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "fa1b206b-bce0-42c2-bdca-d453d43f2935", "content": "Latest news and stories from BleepingComputer.com\nCritical Magento vulnerability targeted in new surge of attacks\n\nResearchers have observed a surge in hacking attempts targeting CVE-2022-24086, a critical Magento 2 vulnerability allowing unauthenticated attackers to execute code on unpatched sites. [...]", "url": "https://t.me/BleepingComputer/13670"}, {"timestamp": "2022-09-23T15:14:23Z", "date_only": false, "value": "2022-09-23T15:14:23.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/anti_malware/13322", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "25038d33-7959-41ed-81c4-d6e9566b1c77", "content": "\u0412 Sansec \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u044e\u0442 \u0440\u043e\u0441\u0442 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u0430\u0442\u0430\u043a \u043d\u0430 \u0441\u0430\u0439\u0442\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 Magento 2; \u0432 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u044b\u0442\u0430\u044e\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 CVE-2022-24086 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u0431\u044d\u043a\u0434\u043e\u0440. \u0421\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Adobe \u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0438\u043b\u0430 \u0435\u0449\u0435 \u0432 \u0444\u0435\u0432\u0440\u0430\u043b\u0435.\n\nhttps://www.anti-malware.ru/news/2022-09-23-114534/39603", "url": "https://t.me/anti_malware/13322"}, {"timestamp": "2022-09-23T16:00:10Z", "date_only": false, "value": "2022-09-23T16:00:10.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/3461", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "e7433bfa-8925-4cbd-8d94-0bae24b947f0", "content": "\u041f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043a\u043e\u043c\u043c\u0435\u0440\u0446\u0438\u0438 Magento \u043f\u043e\u0434 \u0443\u0434\u0430\u0440\u043e\u043c, \u043f\u0440\u0438\u0447\u0435\u043c \u043f\u043e\u0434 \u0442\u0435\u043c \u0436\u0435, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u0435\u0449\u0435 \u0432 \u0444\u0435\u0432\u0440\u0430\u043b\u0435 2022 \u0433\u043e\u0434\u0430.\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0432\u0441\u043f\u043b\u0435\u0441\u043a \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0432\u0437\u043b\u043e\u043c\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2022-24086, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0430\u0439\u0442\u0430\u0445.\n\n\u041b\u0430\u043d\u0434\u0448\u0430\u0444\u0442 \u0443\u0433\u0440\u043e\u0437 \u043f\u0440\u0438\u043b\u0438\u0447\u043d\u044b\u0439, \u0442\u0430\u043a \u043a\u0430\u043a Magento \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0432 170 000 \u043e\u043d\u043b\u0430\u0439\u043d-\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u0430\u0445 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0435\u0449\u0435 \u0432 \u0444\u0435\u0432\u0440\u0430\u043b\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438. \u0412 \u0442\u043e \u0432\u0440\u0435\u043c\u044f CISA \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435, \u043f\u0440\u0438\u0437\u044b\u0432\u0430\u044e\u0449\u0435\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u0441\u0430\u0439\u0442\u0430 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u041d\u043e \u043c\u0435\u0434\u0432\u0435\u0436\u044c\u044e \u0443\u0441\u043b\u0443\u0433\u0443 \u043e\u043a\u0430\u0437\u0430\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u043a\u043e\u043d\u0446\u0435\u043f\u0446\u0438\u0438 (PoC) \u0434\u043b\u044f CVE-2022-24086, \u043e\u0442\u043a\u0440\u044b\u0432 \u0434\u043e\u0440\u043e\u0433\u0443 \u0434\u043b\u044f \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043e\u0442\u0447\u0435\u0442\u0443, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430\u043c\u0438 Sansec, \u0434\u043e\u0441\u0442\u0438\u0433\u043d\u0443\u0442\u0430 \u0441\u0442\u0430\u0434\u0438\u044f, \u043a\u043e\u0433\u0434\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0442\u0430\u043b\u0430 \u0444\u0430\u0432\u043e\u0440\u0438\u0442\u043e\u043c \u0441\u0440\u0435\u0434\u0438 \u043e\u0440\u0443\u0434\u0438\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0432 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u043e\u043c \u043f\u043e\u0434\u043f\u043e\u043b\u044c\u0435.\n\n\u0410\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0438 Sansec \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0442\u0440\u0438 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u0430 \u0430\u0442\u0430\u043a\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c CVE-2022-24086 \u0434\u043b\u044f \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0442\u0440\u043e\u044f\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0445\u043e\u0441\u0442\u0430\u0445.\n\n\u041f\u0435\u0440\u0432\u044b\u0439 \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u0441 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043d\u043e\u0432\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0448\u0430\u0431\u043b\u043e\u043d\u0430 \u0432 \u0438\u043c\u0435\u043d\u0438 \u0438 \u0444\u0430\u043c\u0438\u043b\u0438\u0438, \u0441 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u0438\u0435\u043c \u0437\u0430\u043a\u0430\u0437\u0430.\n\n\u0412\u0432\u0435\u0434\u0435\u043d\u043d\u044b\u0439 \u043a\u043e\u0434 \u0434\u0435\u043a\u043e\u0434\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432 \u043a\u043e\u043c\u0430\u043d\u0434\u0443, \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u044e\u0449\u0443\u044e \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b Linux (\u00ab223sam.jpg\u00bb), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u0432 \u0444\u043e\u043d\u043e\u0432\u043e\u043c \u0440\u0435\u0436\u0438\u043c\u0435 \u043a\u0430\u043a \u043f\u0440\u043e\u0446\u0435\u0441\u0441.\n\n\u041f\u043e \u0444\u0430\u043a\u0442\u0443 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442\u0441\u044f RAT, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0442\u0441\u0442\u0443\u043a\u0438\u0432\u0430\u0435\u0442 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u0432 \u0411\u043e\u043b\u0433\u0430\u0440\u0438\u0438 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0438\u0445 \u043a\u043e\u043c\u0430\u043d\u0434. \u0421 \u0441\u043b\u043e\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 RAT \u0438\u043c\u0435\u0435\u0442 \u043f\u043e\u043b\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430\u043c PHP \u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d \u043d\u0430 \u043b\u044e\u0431\u043e\u043c \u0438\u0437 \u0445\u043e\u0441\u0442\u043e\u0432 \u0432 \u043c\u043d\u043e\u0433\u043e\u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u0439 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435.\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0439 \u0430\u0442\u0430\u043a\u0438 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0432 \u0441\u0435\u0431\u044f \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u0431\u044d\u043a\u0434\u043e\u0440\u0430 PHP (\u00abhealth_check.php\u00bb) \u043f\u0443\u0442\u0435\u043c \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0448\u0430\u0431\u043b\u043e\u043d\u0430 \u0432 \u043f\u043e\u043b\u0435 \u041d\u0414\u0421 \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043d\u043e\u0433\u043e \u0437\u0430\u043a\u0430\u0437\u0430. \u041a\u043e\u0434 \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u043d\u043e\u0432\u044b\u0439 \u0444\u0430\u0439\u043b (\"pub/media/health_check.php\"), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0435\u0442 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0447\u0435\u0440\u0435\u0437 POST-\u0437\u0430\u043f\u0440\u043e\u0441\u044b.\n\n\u0418 \u043d\u0430\u043a\u043e\u043d\u0435\u0446, \u0442\u0440\u0435\u0442\u0438\u0439 \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u0430\u0442\u0430\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043a\u043e\u0434 \u0448\u0430\u0431\u043b\u043e\u043d\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u043c\u0435\u043d\u044f\u0435\u0442 \u00abgenerated/code/Magento/Framework/App/FrontController/Interceptor.php\u00bb \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0435\u0439 \u0441 \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u043c.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0438\u0437\u044b\u0432\u0430\u044e\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u0441\u0430\u0439\u0442\u043e\u0432 Magento \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u043c\u0438 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0432\u043e\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438. \u041d\u0443 \u0438\u043b\u0438 \u0445\u043e\u0442\u044f \u0431\u044b, \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c, \u0433\u043b\u044f\u043d\u0443\u0442\u044c \u043b\u043e\u0433\u0438 \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0445 \u0432\u0430\u0448\u0435 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u0432 \u0430\u0442\u0430\u043a.", "url": "https://t.me/true_secator/3461"}, {"timestamp": "2022-09-23T16:06:38Z", "date_only": false, "value": "2022-09-23T16:06:38.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/65300", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "fe34af87-a934-4d17-852b-81f2f88f5297", "content": "Surge in Magento 2 template attacks exploiting the CVE-2022-24086 flaw\n\nhttps://ift.tt/0YLgQu8", "url": "https://t.me/ctinow/65300"}, {"timestamp": "2022-10-17T15:55:04Z", "date_only": false, "value": "2022-10-17T15:55:04.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/0PQlTx2BOiLRyjW1tlYqXLRO4Pn0intlEzMU1N_0LXGfNQ", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "02d2a092-67f2-4b76-8f61-829ca62b4426"}, {"timestamp": "2022-10-19T10:17:56Z", "date_only": false, "value": "2022-10-19T10:17:56.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/G4oNSLzJU4Ek_5yUYClSehe7ticvwHawhvhORHGpTBSF9g", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "b21fcb80-3f39-4a7c-b484-571cc8322fdd"}, {"timestamp": "2022-10-28T06:07:40Z", "date_only": false, "value": "2022-10-28T06:07:40.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/y0IzSAdcbyRkrw8LJZvzxrKuSEo6r1ujmEnKs7Cg9KbiUQ", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "b4ef9241-1c08-4d60-98fe-59985408a8ee"}, {"timestamp": "2022-11-17T12:44:05Z", "date_only": false, "value": "2022-11-17T12:44:05.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/information_security_channel/48988", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "b28bed11-a8a5-4637-bfa9-5a666979021b", "content": "Magento Vulnerability Increasingly Exploited to Hack Online Stores\nhttps://www.securityweek.com/magento-vulnerability-increasingly-exploited-hack-online-stores\n\nE-commerce malware and vulnerability detection firm Sansec warns of a surge in cyberattacks targeting CVE-2022-24086, a critical mail template vulnerability affecting Adobe Commerce and Magento stores.\nread more (https://www.securityweek.com/magento-vulnerability-increasingly-exploited-hack-online-stores)", "url": "https://t.me/information_security_channel/48988"}, {"timestamp": "2022-11-18T15:19:21Z", "date_only": false, "value": "2022-11-18T15:19:21.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/xakep_ru/13233", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "d564e78a-725b-445d-8d84-7937bd02e03c", "content": "\u041c\u0430\u0433\u0430\u0437\u0438\u043d\u044b \u043d\u0430 \u0431\u0430\u0437\u0435 Magento \u0441\u0442\u0440\u0430\u0434\u0430\u044e\u0442 \u043e\u0442 \u0443\u0447\u0430\u0441\u0442\u0438\u0432\u0448\u0438\u0445\u0441\u044f \u0430\u0442\u0430\u043a TrojanOrders\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Sansec, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0449\u0435\u0439\u0441\u044f \u043d\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 e-commerce, \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u0441\u0435\u043c\u0438 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u0445 \u0433\u0440\u0443\u043f\u043f \u0441\u0442\u043e\u044f\u0442 \u0437\u0430 \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u043c \u0430\u0442\u0430\u043a\u0430\u043c\u0438 TrojanOrders, \u043e\u0442 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0441\u0442\u0440\u0430\u0434\u0430\u044e\u0442 \u0441\u0430\u0439\u0442\u044b \u043d\u0430 \u0431\u0430\u0437\u0435 Magento 2. \u0412 \u0442\u0430\u043a\u0438\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u0433\u043e\u0434\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-24086, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f Adobe Commerce \u0438 Magento. \n\u041e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432 \u0441\u0442\u0430\u043b\u043e \u0442\u0430\u043a \u043c\u043d\u043e\u0433\u043e, \u0447\u0442\u043e \u043e\u043d\u0438 \u043f\u0440\u043e\u0434\u0430\u044e\u0442\u0441\u044f \u0432\u0441\u0435\u0433\u043e \u0437\u0430 2500 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432, \u0445\u043e\u0442\u044f \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 2022 \u0433\u043e\u0434\u0430 \u0441\u0442\u043e\u0438\u043b\u0438 \u043e\u0442 20 000 \u0434\u043e 30 000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432.\n\nhttps://xakep.ru/2022/11/18/trojanorders/", "url": "https://t.me/xakep_ru/13233"}, {"timestamp": "2022-12-20T15:20:58Z", "date_only": false, "value": "2022-12-20T15:20:58.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/3606", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "a27c6037-6b56-4dab-8e8a-5d784f0632d7", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aProof of concept of CVE-2022-24086\nURL\uff1ahttps://github.com/pescepilota/CVE-2022-24086\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/3606"}, {"timestamp": "2023-01-07T04:51:48Z", "date_only": false, "value": "2023-01-07T04:51:48.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BlueRedTeam/2552", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "c0981160-4745-41c6-a24d-72ed257a1a51", "content": "#CVE-2022\nCVE-2022-36537\n\nhttps://github.com/agnihackers/CVE-2022-36537-EXPLOIT\n\nPOC for CVE-2022-21907: HTTP Protocol Stack Remote Code Execution Vulnerability.\n\nhttps://github.com/Malwareman007/CVE-2022-21907\n\nPOC of CVE-2022-36537\nhttps://github.com/Malwareman007/CVE-2022-36537\n\nDirty Pipe - CVE-2022-0847\nhttps://github.com/tmoneypenny/CVE-2022-0847\n\nProof of concept of CVE-2022-24086\n\nhttps://github.com/pescepilota/CVE-2022-24086\n\n@BlueRedTeam", "url": "https://t.me/BlueRedTeam/2552"}, {"timestamp": "2023-01-18T18:57:49Z", "date_only": false, "value": "2023-01-18T18:57:49.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/information_security_channel/49418", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "377b692d-8897-48e1-8041-81c3627f5d04", "content": "Vendors Actively Bypass Security Patch for Year-Old Magento Vulnerability\nhttps://www.securityweek.com/vendors-actively-bypass-security-patch-year-old-magento-vulnerability\n\nVendors and agencies are actively bypassing the security patch that Adobe released in February 2022 to address CVE-2022-24086, a critical mail template vulnerability in Adobe Commerce and Magento stores, ecommerce security firm Sansec warns.\nread more (https://www.securityweek.com/vendors-actively-bypass-security-patch-year-old-magento-vulnerability)", "url": "https://t.me/information_security_channel/49418"}, {"timestamp": "2023-01-19T17:00:10Z", "date_only": false, "value": "2023-01-19T17:00:10.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/3962", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "697bc439-e8d4-47ef-a27b-5e703a0820e1", "content": "\u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u0435\u043d\u0434\u043e\u0440\u044b \u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Adobe Commerce \u0438 Magento \u0440\u0435\u0448\u0438\u043b\u0438 \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u043d\u0435\u043b\u0435\u0433\u043a\u0438\u0439 \u0432\u044b\u0431\u043e\u0440 \u043c\u0435\u0436\u0434\u0443 \"\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\" \u0438 \"\u0443\u0434\u043e\u0431\u043d\u043e\".\n\n\u041a\u0430\u043a \u043c\u044b \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0438, \u0444\u0435\u0432\u0440\u0430\u043b\u044c\u0441\u043a\u0438\u0439 \u043f\u0430\u0442\u0447 \u043e\u0442 Adobe, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0445 \u0448\u0430\u0431\u043b\u043e\u043d\u043e\u0432 CVE-2022-24086 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 9,8), \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u043e\u0431\u0445\u043e\u0434\u0438\u043b\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\u0412\u043e \u0432\u0442\u043e\u0440\u043e\u0439 \u0441\u0435\u0440\u0438\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439, \u0441 \u0443\u0436\u0435 \u043d\u043e\u0432\u044b\u043c \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE (CVE-2022-24087) \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u043f\u0430\u0442\u0447.\n\n\u041f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0432 \u0442\u043e \u0436\u0435 \u0432\u0440\u0435\u043c\u044f \u0431\u044b\u043b \u0432\u044b\u043f\u0443\u0449\u0435\u043d PoC, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.\n\n\u0422\u0430\u043a \u0432 \u0447\u0435\u043c, \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e, \u0432\u0441\u044f \u0441\u043e\u043b\u044c \u0440\u0430\u0437\u044a\u044f\u0441\u043d\u0438\u043b\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043a\u043e\u043c\u043c\u0435\u0440\u0446\u0438\u0438 Sansec.\n\n\u0427\u0442\u043e\u0431\u044b \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, Adobe \u0443\u0434\u0430\u043b\u0438\u043b\u0430 \u00ab\u0443\u043c\u043d\u044b\u0435\u00bb \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0435 \u0448\u0430\u0431\u043b\u043e\u043d\u044b \u0438 \u0437\u0430\u043c\u0435\u043d\u0438\u043b\u0430 \u0441\u0442\u0430\u0440\u044b\u0439 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u0433\u043e \u0448\u0430\u0431\u043b\u043e\u043d\u0430 \u043d\u043e\u0432\u044b\u043c, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043f\u0443\u0442\u0435\u043c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u044d\u0442\u043e\u0442 \u0448\u0430\u0433 \u0437\u0430\u0441\u0442\u0430\u043b \u043c\u043d\u043e\u0433\u0438\u0445 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432 \u0432\u0440\u0430\u0441\u043f\u043b\u043e\u0445, \u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0438\u0437 \u043d\u0438\u0445 \u043f\u0440\u0438\u0448\u043b\u043e\u0441\u044c \u0432\u0435\u0440\u043d\u0443\u0442\u044c\u0441\u044f \u043a \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e\u043d\u0438 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043b\u0438 \u0441\u0435\u0431\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u043b\u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0438, \u043a\u0430\u043a \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0438 \u043f\u044b\u0442\u0430\u043b\u0438\u0441\u044c \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e \u0432\u0432\u0435\u0441\u0442\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0435\u0433\u043e \u0440\u0430\u0441\u043f\u043e\u0437\u043d\u0430\u0432\u0430\u0442\u0435\u043b\u044f \u0432 \u0440\u0430\u0431\u043e\u0447\u0438\u0435 \u043c\u0430\u0433\u0430\u0437\u0438\u043d\u044b Magento, \u043b\u0438\u0431\u043e \u043f\u0435\u0440\u0435\u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u043d\u043e\u0432\u043e\u0433\u043e \u0440\u0430\u0441\u043f\u043e\u0437\u043d\u0430\u0432\u0430\u0442\u0435\u043b\u044f, \u043b\u0438\u0431\u043e \u043a\u043e\u043f\u0438\u0440\u0443\u044f \u043a\u043e\u0434 \u0438\u0437 \u0431\u043e\u043b\u0435\u0435 \u0441\u0442\u0430\u0440\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 Magento \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0435\u0433\u043e \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u0440\u0435\u0434\u043f\u043e\u0447\u0442\u0435\u043d\u0438\u044f.\n\n\u0412 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0437\u0430\u044f\u0432\u0438\u043b\u0438, \u0447\u0442\u043e \u0440\u044f\u0434 \u0432\u0435\u043d\u0434\u043e\u0440\u043e\u0432 \u0432\u0441\u0435 \u0436\u0435 \u043f\u044b\u0442\u0430\u043b\u0438\u0441\u044c \u0441\u043d\u0438\u0437\u0438\u0442\u044c \u0440\u0438\u0441\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0437\u0430\u043a\u0430\u0437\u043e\u0432 \u0431\u0430\u0437\u043e\u0432\u0443\u044e \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u044e \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u044d\u0442\u0438 \u0448\u0430\u0433\u0438 \u043d\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u0438 \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e, \u0432\u0435\u0434\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0438\u0437 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c, \u0435\u0441\u043b\u0438 \u043e\u043d\u0438 \u043a\u0430\u0441\u0430\u044e\u0442\u0441\u044f \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u044b.", "url": "https://t.me/true_secator/3962"}, {"timestamp": "2023-06-14T21:10:04Z", "date_only": false, "value": "2023-06-14T21:10:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "7baccfb4-d4b0-41ee-b198-d18b6f215fd5"}, {"timestamp": "2023-08-14T09:46:33Z", "date_only": false, "value": "2023-08-14T09:46:33.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/kasperskyb2b/802", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "f0cc46bd-3e5c-4f62-a2c0-99e45f6f362c", "content": "\u23e9 \u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f APT \u0438 \u0418\u0411-\u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e\n\n\u0411\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0446\u0435\u043b\u043e\u0439 \u043f\u0430\u0447\u043a\u0435 \u00ab\u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u0445\u00bb \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0439, \u0418\u0411-\u043f\u043e\u0432\u0435\u0441\u0442\u043a\u0430 \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e \u0431\u044b\u043b\u0430 \u043e\u0447\u0435\u043d\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439, \u043e\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0432\u0441\u0451 \u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e. \u041a\u0441\u0442\u0430\u0442\u0438, \u043f\u043e\u043a\u043e\u043f\u0430\u0442\u044c\u0441\u044f \u0432 \u0441\u043b\u0430\u0439\u0434\u0430\u0445 \u0441\u043e \u0432\u0441\u0435\u0445 \u0434\u043e\u043a\u043b\u0430\u0434\u043e\u0432 BlackHat \u043c\u043e\u0436\u043d\u043e \u0437\u0434\u0435\u0441\u044c.\ud83e\udd20 \u041d\u0430\u0447\u043d\u0451\u043c \u0441 APT:\n\n\u26a1\ufe0f \u0410\u0442\u0430\u043a\u0438 \u043d\u0430 \u043e\u0431\u044a\u0435\u043a\u0442\u044b \u044d\u043d\u0435\u0440\u0433\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u2014 \u0432 \u042e\u0436\u043d\u043e\u0439 \u0410\u0444\u0440\u0438\u043a\u0435 \u043d\u0430\u0448\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0430\u0448\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u0431\u044d\u043a\u0434\u043e\u0440\u0430 SystemBC.  \u041a\u043e\u043c\u043f\u0430\u043a\u0442\u043d\u043e\u0435 (8 \u043a\u0431) \u0412\u041f\u041e DroxiDat \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u043e\u0441\u044c \u0434\u043b\u044f \u043f\u0435\u0440\u0432\u0438\u0447\u043d\u043e\u0439 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438 \u0438 \u0434\u043e\u043b\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u0437\u0430\u043a\u043e\u043d\u0447\u0438\u0442\u044c\u0441\u044f \u0430\u0442\u0430\u043a\u043e\u0439 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439, \u0447\u0442\u043e-\u0442\u043e \u0432 \u0441\u0442\u0438\u043b\u0435 Colonial Pipeline. \u041d\u0430 \u0442\u0435\u0445 \u0436\u0435 \u0445\u043e\u0441\u0442\u0430\u0445 \u0431\u044b\u043b \u043d\u0430\u0439\u0434\u0435\u043d \u043c\u0430\u044f\u0447\u043e\u043a Cobalt Strike.\n\n\ud83d\udee0 Kaspersky ICS CRT \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0442\u0440\u0435\u0442\u044c\u044e \u0447\u0430\u0441\u0442\u044c \u0441\u0430\u0433\u0438 (1, 2, 3) \u043f\u0440\u043e \u0430\u0442\u0430\u043a\u0438 APT31 \u043d\u0430 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f \u0412\u043e\u0441\u0442\u043e\u0447\u043d\u043e\u0439 \u0415\u0432\u0440\u043e\u043f\u044b.  \u0421\u043b\u043e\u0436\u043d\u0430\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u043e\u0432 (\u0441\u0443\u043c\u043c\u0430\u0440\u043d\u043e 15 \u0448\u0442\u0443\u043a) \u043f\u043e\u043c\u043e\u0433\u0430\u043b\u0430 \u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u0442\u0430\u0441\u043a\u0438\u0432\u0430\u0442\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0441 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0447\u0435\u0440\u0435\u0437 \u043a\u0440\u043e\u043f\u043e\u0442\u043b\u0438\u0432\u043e \u0441\u043e\u0431\u0440\u0430\u043d\u043d\u044b\u0439 \u0438\u0437 \u041b\u0435\u0433\u043e \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043f\u0440\u043e\u0444\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0444\u043b\u044d\u0448\u0435\u043a.\n\n\u0422\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0435\u043c CISA \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u043f\u043e \u043f\u043e\u0432\u043e\u0434\u0443 \u0443\u0436\u0435 \u0442\u0440\u0435\u0442\u044c\u0435\u0433\u043e \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u0430, \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u043e\u0433\u043e \u0432 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u0445, \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Barracuda ESG (CVE-2023-2868). \u041d\u043e\u0432\u043e\u0435 \u0412\u041f\u041e \u043d\u0430\u0437\u0432\u0430\u043d\u043e WHIRLPOOL \u0438 \u043f\u043e\u043c\u043e\u0433\u0430\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u043f\u043e\u0434\u043d\u044f\u0442\u044c TLS reverse shell \u043a \u0441\u0432\u043e\u0435\u043c\u0443 \u04212. \u0422\u0435\u043f\u0435\u0440\u044c \u0443\u0436\u0435 \u043d\u0435\u0443\u0434\u0438\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u0447\u0442\u043e Barracuda \u0432\u043c\u0435\u0441\u0442\u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u043f\u0430\u0442\u0447\u0435\u0439 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u043e \u043c\u0435\u043d\u044f\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0441\u0432\u043e\u0438 \u0436\u0435\u043b\u0435\u0437\u043a\u0438. \ud83d\uddff\n\n\u203c\ufe0f \u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0439 \u0433\u043e\u0434 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u0438\u043b\u044c\u043d\u043e \u0443\u043b\u0443\u0447\u0448\u0438\u043b\u0438 \u0441\u0432\u043e\u0438 \u0442\u0435\u0445\u043d\u0438\u043a\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 MFA, \u0434\u043e 35% \u0432\u0437\u043b\u043e\u043c\u043e\u0432 \u0442\u0435\u043f\u0435\u0440\u044c \u0441\u043b\u0443\u0447\u0430\u044e\u0442\u0441\u044f \u0441 \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u0430\u043c\u0438, \u0433\u0434\u0435 \u0431\u044b\u043b\u0430 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043a\u0430. \u041f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0438\u0441\u0430 EvilProxy, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0432\u044b\u0448\u0430\u0435\u0442 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u043e\u0432 \u0432 \u0434\u0432\u0430 \u0440\u0430\u0437\u0430.  \u041f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u0444\u043e\u043a\u0443\u0441\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u043d\u0430 \u0432\u0437\u043b\u043e\u043c\u0435 \u0432\u044b\u0441\u043e\u043a\u043e\u043f\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u043e\u0432, \u0430  EvilProxy \u043f\u043e\u043c\u043e\u0433\u0430\u0435\u0442 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c MFA \u0432 \u043f\u0435\u0440\u0432\u0443\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c \u043d\u0430 Microsoft 360, \u043d\u043e \u0442\u0430\u043a\u0436\u0435 Gmail, Dropbox, Twitter, \u0438 \u0442\u0430\u043a \u0434\u0430\u043b\u0435\u0435.  \u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u0440\u0438\u043c\u0430\u043d\u043e\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u043f\u0438\u0441\u044c\u043c\u0430, \u0432\u044b\u0433\u043b\u044f\u0434\u044f\u0449\u0438\u0435 \u043a\u0430\u043a \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 (Concure, DocuSign, Adobe).  \u0414\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0437\u0430\u0442\u0440\u0443\u0434\u043d\u044f\u0435\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0430\u0442\u0430\u043a\u0438 \u0446\u0435\u043b\u0430\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u0440\u0435\u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u044b.\n\n\u0410\u043d\u0430\u043b\u0438\u0437 \u0441\u043b\u043e\u0436\u043d\u043e\u0433\u043e \u043c\u043e\u0434\u0443\u043b\u044c\u043d\u043e\u0433\u043e \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u0430 MoustachedBouncer, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0433\u043e \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u043e\u0441\u043e\u043b\u044c\u0441\u0442\u0432\u0430\u0445 \u0438 \u0434\u0438\u043f\u043b\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u0445. \u0424\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0441 2014 \u0433\u043e\u0434\u0430, \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 SMTP \u0438 IMAP \u0434\u043b\u044f \u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0441 \u04212 \u0438 \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0430 \u0412\u041f\u041e \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0438 \u0436\u0435\u0440\u0442\u0432\u044b (\u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u0430).\n\n\u041d\u0435 APT, \u043d\u043e \u0442\u043e\u0436\u0435 \u0443\u0432\u043b\u0435\u043a\u0430\u0442\u0435\u043b\u044c\u043d\u043e\n\n\u041f\u044f\u0442\u043d\u0430\u0434\u0446\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 SDK \u0434\u043b\u044f \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f CODESYS V3 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u044b \u043a RCE \u0438 \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438.  \u041f\u043e\u043b\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u2014 \u0432 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 CODESYS, \u043d\u0430 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u041f\u041b\u041a  \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0430 Schneider Electric \u0438 WAGO.\n\n\ud83d\udc40 \u041d\u0435\u0432\u0435\u0440\u043d\u043e \u0441\u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u044b Kubernetes \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u044e\u0442\u0441\u044f \u0433\u043e\u0440\u0430\u0437\u0434\u043e \u0447\u0430\u0449\u0435, \u0447\u0435\u043c \u0432\u0441\u0435\u043c \u043d\u0430\u043c \u0445\u043e\u0442\u0435\u043b\u043e\u0441\u044c \u0431\u044b. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 350 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0438\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u043e\u0432, \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u0438\u043d\u0438\u043c\u0443\u043c 60% \u0431\u044b\u043b\u0438 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u044b \u0438 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u043b\u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u044b, \u043c\u0430\u0439\u043d\u0435\u0440\u044b \u0438 \u043f\u0440\u043e\u0447.  \u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u043e\u0432 \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0442 \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0438\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c, \u043d\u043e \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043a \u043a\u0440\u0443\u043f\u043d\u044b\u043c \u043c\u0435\u0436\u0434\u0443\u043d\u0430\u0440\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u043d\u0433\u043b\u043e\u043c\u0435\u0440\u0430\u0442\u0430\u043c \u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c \u0438\u0437 \u0441\u043f\u0438\u0441\u043a\u0430 Fortune 500. \n\n\u0410\u043d\u0430\u043b\u0438\u0437 \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u043a\u043e\u0434\u043e\u0432 \u0438\u0437 \u0443\u0442\u0435\u0447\u043a\u0438 \u042f\u043d\u0434\u0435\u043a\u0441\u0430. \u041e\u0441\u0442\u0430\u0432\u043b\u044f\u044f \u043f\u043e\u043b\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0432\u043e\u0437\u0437\u0440\u0435\u043d\u0438\u044f \u0430\u0432\u0442\u043e\u0440\u043e\u0432 \u0437\u0430 \u0441\u043a\u043e\u0431\u043a\u0430\u043c\u0438, \u043e\u0442\u043c\u0435\u0442\u0438\u043c \u0447\u0442\u043e \u0441\u0442\u0430\u0442\u044c\u044f \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u043e \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u044f\u0435\u0442, \u043a\u0430\u043a\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0442\u044f\u043d\u0443\u0442 \u0441 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u041c\u0435\u0442\u0440\u0438\u043a\u0430 \u0438 \u0410\u043f\u043f\u041c\u0435\u0442\u0440\u0438\u043a\u0430, \u043a\u0430\u043a \u043e\u043d\u0438  \u0441\u043e\u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0438 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u0443\u044e\u0442\u0441\u044f, \u0438 \u043a\u0430\u043a\u0438\u0435 \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u044b \u0438\u0437 \u044d\u0442\u043e\u0433\u043e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u044f\u0442\u0441\u044f. \n\n\ud83d\udd10 \u041f\u043e\u0447\u0442\u0438 \u0432\u0441\u0435 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u0438 \u0431\u044b\u0442\u043e\u0432\u044b\u0435 VPN \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u043a \u0430\u0442\u0430\u043a\u0430\u043c TunnelCrack, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u043c \u0432\u044b\u0432\u043e\u0434\u0438\u0442\u044c \u0447\u0430\u0441\u0442\u044c \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0439 \u0438\u0437 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0442\u0443\u043d\u043d\u0435\u043b\u044f. \u041a\u0440\u0430\u0442\u043a\u043e \u043e\u043f\u0438\u0441\u0430\u043b\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438 \u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u043d\u0430 \u0431\u043b\u043e\u0433\u0435.\n\n\u0410\u0442\u0430\u043a\u0438 \u043d\u0430 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u0443\u044e ecommerce \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 Magento 2 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e CVE-2022-24086 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442\u0441\u044f. \u0422\u043e, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 CVSS 9.8, \u0437\u0430\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u0443\u044e \u0433\u043e\u0434 \u043d\u0430\u0437\u0430\u0434, \u043c\u043e\u0436\u043d\u043e \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c, \u043c\u043d\u043e\u0433\u043e\u0435 \u0433\u043e\u0432\u043e\u0440\u0438\u0442 \u043f\u0440\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u043c\u0430\u0433\u0430\u0437\u0438\u043d\u043e\u0432 \ud83d\ude0f.  \u0412 \u0430\u0442\u0430\u043a\u0430\u0445 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0432\u0435\u0431-\u0448\u0435\u043b\u043b\u0430 \u043d\u043e\u0432\u043e\u0433\u043e \u043f\u043e\u043a\u043e\u043b\u0435\u043d\u0438\u044f,  wso-ng. \u0423 \u043d\u0435\u0433\u043e \u0435\u0441\u0442\u044c \u0446\u0435\u043b\u044b\u0439 \u0440\u044f\u0434 \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0439, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0440\u0435\u043f\u0443\u0442\u0430\u0446\u0438\u0438 \u0437\u0430\u0440\u0430\u0436\u0451\u043d\u043d\u043e\u0433\u043e \u0445\u043e\u0441\u0442\u0430 \u043d\u0430 VT \u0438 SecurityTrails.  \u0412\u043f\u0440\u043e\u0447\u0435\u043c, \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439  \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u043e\u0439 \u043d\u0430 \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043a\u043e\u043d\u0435\u0447\u043d\u043e \u0432\u0435\u0431-\u0441\u043a\u0438\u043c\u043c\u0435\u0440.  \n\n#APT #\u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 @\u041f2\u0422", "url": "https://t.me/kasperskyb2b/802"}, {"timestamp": "2023-08-14T15:18:23Z", "date_only": false, "value": "2023-08-14T15:18:23.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/3738", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "883bbe75-cc1b-4c79-bbe2-3916a86872cd", "content": "E-commerce sites using Adobe's Magento 2 software are under attack. Ongoing campaign called Xurum exploits critical flaw CVE-2022-24086, putting businesses at risk. \n \nRead: https://thehackernews.com/2023/08/ongoing-xurum-attacks-on-e-commerce.html", "url": "https://t.me/thehackernews/3738"}, {"timestamp": "2023-08-14T16:21:33Z", "date_only": false, "value": "2023-08-14T16:21:33.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/KomunitiSiber/648", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "11e87365-f233-4801-9d7e-46daeeec80d0", "content": "Ongoing Xurum Attacks on E-commerce Sites Exploiting Critical Magento 2 Vulnerability\nhttps://thehackernews.com/2023/08/ongoing-xurum-attacks-on-e-commerce.html\n\nE-commerce sites using Adobe's Magento 2 software are the target of an ongoing campaign that has been active since at least January 2023.\nThe attacks, dubbed\u00a0Xurum\u00a0by Akamai, leverage a now-patched critical security flaw (CVE-2022-24086, CVSS score: 9.8) in Adobe Commerce and Magento Open Source that, if successfully exploited, could lead to arbitrary code execution.\n\"The attacker seems to be", "url": "https://t.me/KomunitiSiber/648"}, {"timestamp": "2023-08-14T17:12:55Z", "date_only": false, "value": "2023-08-14T17:12:55.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/RskdKdQGtxCQ5SPjOGUWrpZUdOEUwH43jQgHLlnUCwqf0Q", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "ff5eff2f-16f4-48b6-92f8-29db141ff75e"}, {"timestamp": "2023-08-15T20:39:33Z", "date_only": false, "value": "2023-08-15T20:39:33.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/xakep_ru/14524", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "dad86d7a-dbb2-49e7-9bd6-6e6f0926bc30", "content": "\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f Xurum \u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f \u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Magento 2\n\nAkamai \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e e-commerce \u0441\u0430\u0439\u0442\u044b, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c Adobe Magento 2, \u0441\u0442\u0430\u043d\u043e\u0432\u044f\u0442\u0441\u044f \u0436\u0435\u0440\u0442\u0432\u0430\u043c\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 Xurum, \u043d\u0430\u0447\u0430\u0432\u0448\u0435\u0439\u0441\u044f \u0435\u0449\u0435 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 2023 \u0433\u043e\u0434\u0430. \u0425\u0430\u043a\u0435\u0440\u044b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u0443\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-24086 (9,8 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS) \u0432 Adobe Commerce \u0438 Magento Open Source, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u043c \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\nhttps://xakep.ru/2023/08/15/xurum/", "url": "https://t.me/xakep_ru/14524"}, {"timestamp": "2023-10-23T13:30:58Z", "date_only": false, "value": "2023-10-23T13:30:58.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/russian_gate/132249", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "e2b9b040-44f8-49fe-8251-90fda8266081", "content": "\u041f\u043e \u0441\u043b\u0435\u0434\u0430\u043c Magento: \u0430\u043d\u0430\u043b\u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2022-24086\n\n \u041f\u0440\u0438\u0432\u0435\u0442, \u0434\u0440\u0443\u0437\u044c\u044f! \u0418 \u0441\u043d\u043e\u0432\u0430 \u0443 \u043d\u0430\u0441 \u0440\u0443\u0431\u0440\u0438\u043a\u0430 \u00ab\u0431\u0443\u0434\u043d\u0438 \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0430\u00bb. \u041f\u043e\u043f\u0430\u043b\u0441\u044f \u043c\u043d\u0435 \u043a\u0430\u043a-\u0442\u043e \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043c\u0430\u0433\u0430\u0437\u0438\u043d \u043d\u0430 Magento. Magento \u2014 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u043e\u0432. \u041e\u043d\u0430 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u043d\u043b\u0430\u0439\u043d-\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u0430\u043c\u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043e\u0432. \u0421\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0434\u0432\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Magento: Magento Open Source (\u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u0430\u044f) \u0438 Magento Commerce (\u043f\u043b\u0430\u0442\u043d\u0430\u044f), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443. \u041f\u0435\u0440\u0432\u044b\u043c \u0434\u0435\u043b\u043e\u043c \u044f \u0441\u0440\u0430\u0437\u0443 \u0436\u0435 \u043f\u043e\u0448\u0435\u043b \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u0432\u0435\u0440\u0441\u0438\u044e, \u043e\u0431\u0440\u0430\u0442\u0438\u0432\u0448\u0438\u0441\u044c \u043d\u0430 url: http(s)://target/magento_version \u041f\u043e\u0438\u0441\u043a\u0430\u0432 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0432\u0435\u0440\u0441\u0438\u0438 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435, \u044f \u043d\u0430\u0442\u043a\u043d\u0443\u043b\u0441\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e Mag\u0435nto \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 2.4.4 \u0443\u044f\u0437\u0432\u0438\u043c\u0430 \u043a CVE-2022\u201324086. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0448\u0430\u0431\u043b\u043e\u043d\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u043c, \u0442. \u0435. \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u00abServer Side Template Injection (SSTI)\u00bb. \u041f\u0435\u0440\u0435\u0434\u043e \u043c\u043d\u043e\u0439 \u0432\u0441\u0442\u0430\u043b\u0430 \u0437\u0430\u0434\u0430\u0447\u0430 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0432\u0435\u0440\u0441\u0438\u044e Magento. \u0423 \u0432\u0430\u0441 \u0442\u0443\u0442 \u0436\u0435 \u0432\u043e\u0437\u043d\u0438\u043a\u043d\u0435\u0442 \u0432\u043e\u043f\u0440\u043e\u0441: \u0437\u0430\u0447\u0435\u043c ... \n\n http://waptools.net/component/k2/item/91555 \n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: @toshka_treniya \u0438 @kompromat_1", "url": "https://t.me/russian_gate/132249"}, {"timestamp": "2023-10-23T16:10:28Z", "date_only": false, "value": "2023-10-23T16:10:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/volci_volgograda/71815", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "a8de1a8d-1677-4c63-bbb1-055fd9306b33", "content": "\u041f\u043e \u0441\u043b\u0435\u0434\u0430\u043c Magento: \u0430\u043d\u0430\u043b\u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2022-24086\n\n \u041f\u0440\u0438\u0432\u0435\u0442, \u0434\u0440\u0443\u0437\u044c\u044f! \u0418 \u0441\u043d\u043e\u0432\u0430 \u0443 \u043d\u0430\u0441 \u0440\u0443\u0431\u0440\u0438\u043a\u0430 \u00ab\u0431\u0443\u0434\u043d\u0438 \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0430\u00bb. \u041f\u043e\u043f\u0430\u043b\u0441\u044f \u043c\u043d\u0435 \u043a\u0430\u043a-\u0442\u043e \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043c\u0430\u0433\u0430\u0437\u0438\u043d \u043d\u0430 Magento. Magento \u2014 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u043e\u0432. \u041e\u043d\u0430 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u043d\u043b\u0430\u0439\u043d-\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u0430\u043c\u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043e\u0432. \u0421\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0434\u0432\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Magento: Magento Open Source (\u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u0430\u044f) \u0438 Magento Commerce (\u043f\u043b\u0430\u0442\u043d\u0430\u044f), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443. \u041f\u0435\u0440\u0432\u044b\u043c \u0434\u0435\u043b\u043e\u043c \u044f \u0441\u0440\u0430\u0437\u0443 \u0436\u0435 \u043f\u043e\u0448\u0435\u043b \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u0432\u0435\u0440\u0441\u0438\u044e, \u043e\u0431\u0440\u0430\u0442\u0438\u0432\u0448\u0438\u0441\u044c \u043d\u0430 url: http(s)://target/magento_version \u041f\u043e\u0438\u0441\u043a\u0430\u0432 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0432\u0435\u0440\u0441\u0438\u0438 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435, \u044f \u043d\u0430\u0442\u043a\u043d\u0443\u043b\u0441\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e Mag\u0435nto \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 2.4.4 \u0443\u044f\u0437\u0432\u0438\u043c\u0430 \u043a CVE-2022\u201324086. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0448\u0430\u0431\u043b\u043e\u043d\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u043c, \u0442. \u0435. \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u00abServer Side Template Injection (SSTI)\u00bb. \u041f\u0435\u0440\u0435\u0434\u043e \u043c\u043d\u043e\u0439 \u0432\u0441\u0442\u0430\u043b\u0430 \u0437\u0430\u0434\u0430\u0447\u0430 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0432\u0435\u0440\u0441\u0438\u044e Magento. \u0423 \u0432\u0430\u0441 \u0442\u0443\u0442 \u0436\u0435 \u0432\u043e\u0437\u043d\u0438\u043a\u043d\u0435\u0442 \u0432\u043e\u043f\u0440\u043e\u0441: \u0437\u0430\u0447\u0435\u043c ... \n\n http://waptools.net/component/k2/item/91555 \n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: @gos_ded \u0438 @themoscow_post", "url": "https://t.me/volci_volgograda/71815"}, {"timestamp": "2023-10-23T22:18:35Z", "date_only": false, "value": "2023-10-23T22:18:35.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/podslush_cubanj/63077", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "e0e43878-6311-48cc-8085-41ef67d056aa", "content": "\u041f\u043e \u0441\u043b\u0435\u0434\u0430\u043c Magento: \u0430\u043d\u0430\u043b\u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2022-24086\n\n \u041f\u0440\u0438\u0432\u0435\u0442, \u0434\u0440\u0443\u0437\u044c\u044f! \u0418 \u0441\u043d\u043e\u0432\u0430 \u0443 \u043d\u0430\u0441 \u0440\u0443\u0431\u0440\u0438\u043a\u0430 \u00ab\u0431\u0443\u0434\u043d\u0438 \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0430\u00bb. \u041f\u043e\u043f\u0430\u043b\u0441\u044f \u043c\u043d\u0435 \u043a\u0430\u043a-\u0442\u043e \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043c\u0430\u0433\u0430\u0437\u0438\u043d \u043d\u0430 Magento. Magento \u2014 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u043e\u0432. \u041e\u043d\u0430 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u043d\u043b\u0430\u0439\u043d-\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u0430\u043c\u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043e\u0432. \u0421\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0434\u0432\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Magento: Magento Open Source (\u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u0430\u044f) \u0438 Magento Commerce (\u043f\u043b\u0430\u0442\u043d\u0430\u044f), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443. \u041f\u0435\u0440\u0432\u044b\u043c \u0434\u0435\u043b\u043e\u043c \u044f \u0441\u0440\u0430\u0437\u0443 \u0436\u0435 \u043f\u043e\u0448\u0435\u043b \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u0432\u0435\u0440\u0441\u0438\u044e, \u043e\u0431\u0440\u0430\u0442\u0438\u0432\u0448\u0438\u0441\u044c \u043d\u0430 url: http(s)://target/magento_version \u041f\u043e\u0438\u0441\u043a\u0430\u0432 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0432\u0435\u0440\u0441\u0438\u0438 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435, \u044f \u043d\u0430\u0442\u043a\u043d\u0443\u043b\u0441\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e Mag\u0435nto \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 2.4.4 \u0443\u044f\u0437\u0432\u0438\u043c\u0430 \u043a CVE-2022\u201324086. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0448\u0430\u0431\u043b\u043e\u043d\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u043c, \u0442. \u0435. \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u00abServer Side Template Injection (SSTI)\u00bb. \u041f\u0435\u0440\u0435\u0434\u043e \u043c\u043d\u043e\u0439 \u0432\u0441\u0442\u0430\u043b\u0430 \u0437\u0430\u0434\u0430\u0447\u0430 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0432\u0435\u0440\u0441\u0438\u044e Magento. \u0423 \u0432\u0430\u0441 \u0442\u0443\u0442 \u0436\u0435 \u0432\u043e\u0437\u043d\u0438\u043a\u043d\u0435\u0442 \u0432\u043e\u043f\u0440\u043e\u0441: \u0437\u0430\u0447\u0435\u043c ... \n\n http://waptools.net/component/k2/item/91555 \n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: @zamcadye \u0438 @komissar_katani", "url": "https://t.me/podslush_cubanj/63077"}, {"timestamp": "2023-10-23T22:55:43Z", "date_only": false, "value": "2023-10-23T22:55:43.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/beria_zvonit/125342", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "1504117b-41d0-4681-819c-7120a88f4679", "content": "\u041f\u043e \u0441\u043b\u0435\u0434\u0430\u043c Magento: \u0430\u043d\u0430\u043b\u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2022-24086\n\n \u041f\u0440\u0438\u0432\u0435\u0442, \u0434\u0440\u0443\u0437\u044c\u044f! \u0418 \u0441\u043d\u043e\u0432\u0430 \u0443 \u043d\u0430\u0441 \u0440\u0443\u0431\u0440\u0438\u043a\u0430 \u00ab\u0431\u0443\u0434\u043d\u0438 \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0430\u00bb. \u041f\u043e\u043f\u0430\u043b\u0441\u044f \u043c\u043d\u0435 \u043a\u0430\u043a-\u0442\u043e \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043c\u0430\u0433\u0430\u0437\u0438\u043d \u043d\u0430 Magento. Magento \u2014 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u043e\u0432. \u041e\u043d\u0430 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u043d\u043b\u0430\u0439\u043d-\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u0430\u043c\u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043e\u0432. \u0421\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0434\u0432\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Magento: Magento Open Source (\u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u0430\u044f) \u0438 Magento Commerce (\u043f\u043b\u0430\u0442\u043d\u0430\u044f), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443. \u041f\u0435\u0440\u0432\u044b\u043c \u0434\u0435\u043b\u043e\u043c \u044f \u0441\u0440\u0430\u0437\u0443 \u0436\u0435 \u043f\u043e\u0448\u0435\u043b \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u0432\u0435\u0440\u0441\u0438\u044e, \u043e\u0431\u0440\u0430\u0442\u0438\u0432\u0448\u0438\u0441\u044c \u043d\u0430 url: http(s)://target/magento_version \u041f\u043e\u0438\u0441\u043a\u0430\u0432 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0432\u0435\u0440\u0441\u0438\u0438 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435, \u044f \u043d\u0430\u0442\u043a\u043d\u0443\u043b\u0441\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e Mag\u0435nto \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 2.4.4 \u0443\u044f\u0437\u0432\u0438\u043c\u0430 \u043a CVE-2022\u201324086. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0448\u0430\u0431\u043b\u043e\u043d\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u043c, \u0442. \u0435. \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u00abServer Side Template Injection (SSTI)\u00bb. \u041f\u0435\u0440\u0435\u0434\u043e \u043c\u043d\u043e\u0439 \u0432\u0441\u0442\u0430\u043b\u0430 \u0437\u0430\u0434\u0430\u0447\u0430 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0432\u0435\u0440\u0441\u0438\u044e Magento. \u0423 \u0432\u0430\u0441 \u0442\u0443\u0442 \u0436\u0435 \u0432\u043e\u0437\u043d\u0438\u043a\u043d\u0435\u0442 \u0432\u043e\u043f\u0440\u043e\u0441: \u0437\u0430\u0447\u0435\u043c ... \n\n http://waptools.net/component/k2/item/91555 \n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: @poutina_putina \u0438 @crimerussia_info", "url": "https://t.me/beria_zvonit/125342"}, {"timestamp": "2023-10-23T22:56:30Z", "date_only": false, "value": "2023-10-23T22:56:30.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/na_carmany_capayet/71634", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "d7c88fd1-ead4-452f-8b19-02eadcd15e3b", "content": "\u041f\u043e \u0441\u043b\u0435\u0434\u0430\u043c Magento: \u0430\u043d\u0430\u043b\u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2022-24086\n\n \u041f\u0440\u0438\u0432\u0435\u0442, \u0434\u0440\u0443\u0437\u044c\u044f! \u0418 \u0441\u043d\u043e\u0432\u0430 \u0443 \u043d\u0430\u0441 \u0440\u0443\u0431\u0440\u0438\u043a\u0430 \u00ab\u0431\u0443\u0434\u043d\u0438 \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u0430\u00bb. \u041f\u043e\u043f\u0430\u043b\u0441\u044f \u043c\u043d\u0435 \u043a\u0430\u043a-\u0442\u043e \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043c\u0430\u0433\u0430\u0437\u0438\u043d \u043d\u0430 Magento. Magento \u2014 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u043e\u0432. \u041e\u043d\u0430 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u043d\u043b\u0430\u0439\u043d-\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u0430\u043c\u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043e\u0432. \u0421\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0434\u0432\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Magento: Magento Open Source (\u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u0430\u044f) \u0438 Magento Commerce (\u043f\u043b\u0430\u0442\u043d\u0430\u044f), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443. \u041f\u0435\u0440\u0432\u044b\u043c \u0434\u0435\u043b\u043e\u043c \u044f \u0441\u0440\u0430\u0437\u0443 \u0436\u0435 \u043f\u043e\u0448\u0435\u043b \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u0432\u0435\u0440\u0441\u0438\u044e, \u043e\u0431\u0440\u0430\u0442\u0438\u0432\u0448\u0438\u0441\u044c \u043d\u0430 url: http(s)://target/magento_version \u041f\u043e\u0438\u0441\u043a\u0430\u0432 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0432\u0435\u0440\u0441\u0438\u0438 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435, \u044f \u043d\u0430\u0442\u043a\u043d\u0443\u043b\u0441\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e Mag\u0435nto \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 2.4.4 \u0443\u044f\u0437\u0432\u0438\u043c\u0430 \u043a CVE-2022\u201324086. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0448\u0430\u0431\u043b\u043e\u043d\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u043c, \u0442. \u0435. \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u00abServer Side Template Injection (SSTI)\u00bb. \u041f\u0435\u0440\u0435\u0434\u043e \u043c\u043d\u043e\u0439 \u0432\u0441\u0442\u0430\u043b\u0430 \u0437\u0430\u0434\u0430\u0447\u0430 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0432\u0435\u0440\u0441\u0438\u044e Magento. \u0423 \u0432\u0430\u0441 \u0442\u0443\u0442 \u0436\u0435 \u0432\u043e\u0437\u043d\u0438\u043a\u043d\u0435\u0442 \u0432\u043e\u043f\u0440\u043e\u0441: \u0437\u0430\u0447\u0435\u043c ... \n\n http://waptools.net/component/k2/item/91555 \n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: @moscow_cream \u0438 @KAZAKHSTAN_2", "url": "https://t.me/na_carmany_capayet/71634"}, {"timestamp": "2023-11-16T15:36:03Z", "date_only": false, "value": "2023-11-16T15:36:03.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/RedTeamFeed/105", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "3143f6ce-c25b-4689-a39c-9e9f2e4daae3", "content": "Magento Template Engine, a story of CVE-2022-24086\n#synacktiv\n\nvia Synacktiv Blog (author: Antoine Gicquel)", "url": "https://t.me/RedTeamFeed/105"}, {"timestamp": "2023-12-04T10:39:43Z", "date_only": false, "value": "2023-12-04T10:39:43.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1182", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "b04e3329-cb5a-49af-84f0-081e22782105", "content": "#ExploitObserverAlert\n\nCVE-2022-24086\n\nDESCRIPTION: Exploit Observer has 32 entries related to CVE-2022-24086. Adobe Commerce versions 2.4.3-p1 (and earlier) and 2.3.7-p2 (and earlier) are affected by an improper input validation vulnerability during the checkout process. Exploitation of this issue does not require user interaction and could result in arbitrary code execution.\n\nFIRST-EPSS: 0.264450000\nNVD-IS: 5.9\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/1182"}, {"timestamp": "2023-12-13T01:19:42.942Z", "date_only": false, "value": "2023-12-13T01:19:42.942042Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-24086", "record": "GSD-2022-24086", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-02-14T15:46:45Z", "date_only": false, "value": "2024-02-14T15:46:45+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2022-24086", "field": "timestamps.asserted_at", "uuid": "a8c9050f-bfb2-4785-8db8-45a7da321082", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-02-14T15:46:45Z", "date_only": false, "value": "2024-02-14T15:46:45+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2022-24086", "field": "timestamps.first_seen_at", "uuid": "a8c9050f-bfb2-4785-8db8-45a7da321082", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-02-17T00:00:00Z", "date_only": false, "value": "2024-02-17T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2022-24086", "field": "timestamps.last_seen_at", "uuid": "a8c9050f-bfb2-4785-8db8-45a7da321082", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-02-17T00:00:00Z", "date_only": true, "value": "2024-02-17", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2022-24086", "field": "evidence.0.details.observation_date", "uuid": "a8c9050f-bfb2-4785-8db8-45a7da321082", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-02-17T00:00:00Z", "date_only": false, "value": "2024-02-17T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2022-24086", "field": "status.status_updated_at", "uuid": "a8c9050f-bfb2-4785-8db8-45a7da321082", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-02-27T18:35:53.490Z", "date_only": false, "value": "2024-02-27T18:35:53.490758Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-24086", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2024-02-27T18:35:53.490Z", "date_only": false, "value": "2024-02-27T18:35:53.490758Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-24086", "record": "FKIE_CVE-2022-24086", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-08-03T03:59:23.565Z", "date_only": false, "value": "2024-08-03T03:59:23.565Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-24086", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-12-24T20:26:40.506Z", "date_only": false, "value": "2024-12-24T20:26:40.506749Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971261", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "a465dcc3-3b9e-4fa1-aeae-84310a12a1b8", "url": "https://feedsin.space/feed/CISAKevBot/items/2971261"}, {"timestamp": "2025-02-23T02:10:35Z", "date_only": false, "value": "2025-02-23T02:10:35.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "f0ef583e-9e32-4b97-87b4-bc4795d19622"}, {"timestamp": "2025-07-23T22:36:05.705Z", "date_only": false, "value": "2025-07-23T22:36:05.705699Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3luo3dyt42jc2", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "5a04363c-cf15-43af-bb62-13e1004cdc0a", "url": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3luo3dyt42jc2"}, {"timestamp": "2025-07-23T22:50:15.954Z", "date_only": false, "value": "2025-07-23T22:50:15.954563Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3luo462cue5l2", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "7bac2d2a-ad61-4e2d-8895-3f70b54dbc16", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3luo462cue5l2"}, {"timestamp": "2025-10-21T23:15:46.117Z", "date_only": false, "value": "2025-10-21T23:15:46.117Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-24086", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:15:46.117Z", "date_only": false, "value": "2025-10-21T23:15:46.117Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-24086", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T19:14:04Z", "date_only": false, "value": "2025-10-22T19:14:04Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-F8FV-F786-9933", "record": "GHSA-F8FV-F786-9933", "field": "modified"}, {"timestamp": "2025-10-24T21:02:33.722Z", "date_only": false, "value": "2025-10-24T21:02:33.722619Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m3xrj3yxfk2e", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "6e8b2a6b-6d19-46ef-b421-1e9cef5f416b", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m3xrj3yxfk2e"}, {"timestamp": "2026-02-02T12:28:22.755Z", "date_only": false, "value": "2026-02-02T12:28:22.755617Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8923c6ef-b071-437d-b02b-e20781274be2", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "fa34ca58-45b2-45d9-a038-8548d3d7bf81", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8923c6ef-b071-437d-b02b-e20781274be2"}, {"timestamp": "2026-02-02T12:28:22.755Z", "date_only": false, "value": "2026-02-02T12:28:22.755617Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8923c6ef-b071-437d-b02b-e20781274be2", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "8631815a-3fc1-4656-b0be-e2db403260de", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8923c6ef-b071-437d-b02b-e20781274be2"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2022-24086", "field": "timestamps.recorded_at", "uuid": "c27ba220-7219-437a-bd14-d5b7081a3220", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-17T04:31:16.010Z", "date_only": false, "value": "2026-06-17T04:31:16.010", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-24086", "record": "FKIE_CVE-2022-24086", "field": "lastModified"}, {"timestamp": "2026-06-19T12:47:38.517Z", "date_only": false, "value": "2026-06-19T12:47:38.517053Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2f875b3b-fcc1-4611-9f56-28e5e36b56b3", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "3a0b134a-3c4e-4ae1-b5d9-c53132aba9e3", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2f875b3b-fcc1-4611-9f56-28e5e36b56b3"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2022-24086", "field": "timestamps.recorded_at", "uuid": "a59e5653-7e21-45f5-9b30-6835e389e6ec", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:13:30.348Z", "date_only": false, "value": "2026-06-23T11:13:30.348414Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/a59e5653-7e21-45f5-9b30-6835e389e6ec", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "d923bd02-3753-45b5-be7e-8f1815a1b884", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/a59e5653-7e21-45f5-9b30-6835e389e6ec"}, {"timestamp": "2026-06-23T14:04:57.608Z", "date_only": false, "value": "2026-06-23T14:04:57.608994Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ceaa9a25-b112-42ca-b512-b4fafb68d5c7", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "2ce34950-e281-4bcb-af40-baba951228e0", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ceaa9a25-b112-42ca-b512-b4fafb68d5c7"}, {"timestamp": "2026-06-30T12:40:24.962Z", "date_only": false, "value": "2026-06-30T12:40:24.962957Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/310472eb-fcc0-4dfa-a14e-2b5824505b9e", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "35f5a7a2-c43b-44ed-a3e9-70e67a1ddc11", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/310472eb-fcc0-4dfa-a14e-2b5824505b9e"}, {"timestamp": "2026-07-01T09:12:28.827Z", "date_only": false, "value": "2026-07-01T09:12:28.827804Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/a8c9050f-bfb2-4785-8db8-45a7da321082", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "19c5f9d2-6e21-4c46-872a-35a3a850f2b6", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/a8c9050f-bfb2-4785-8db8-45a7da321082"}, {"timestamp": "2026-07-01T10:27:13Z", "date_only": false, "value": "2026-07-01T10:27:13+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2022-24086", "field": "timestamps.recorded_at", "uuid": "a8c9050f-bfb2-4785-8db8-45a7da321082", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-26T02:02:40.034Z", "date_only": false, "value": "2026-07-26T02:02:40.034694Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/704", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "8eda6632-68b8-4f55-951b-119dd240df4c", "url": "https://t.me/EchelonEyes/704"}, {"timestamp": "2026-07-27T00:01:15.668Z", "date_only": false, "value": "2026-07-27T00:01:15.668670Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/704", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "bbc3c282-4e50-4431-a6c3-2cc34ade8378", "url": "https://t.me/EchelonEyes/704"}, {"timestamp": "2026-07-28T08:00:05.872Z", "date_only": false, "value": "2026-07-28T08:00:05.872391Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/EchelonEyes/704", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "d1e57397-9dd8-4afd-823d-a610731469e3", "url": "https://t.me/EchelonEyes/704"}, {"timestamp": "2026-07-29T00:00:43.602Z", "date_only": false, "value": "2026-07-29T00:00:43.602179Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/EchelonEyes/704", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "85617c63-6e87-4958-91ac-eb1d181e4f87", "url": "https://t.me/EchelonEyes/704"}, {"timestamp": "2026-07-29T12:01:05.941Z", "date_only": false, "value": "2026-07-29T12:01:05.941574Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/924", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "af3ce059-12ec-480a-adb2-1e5b54f39c34", "url": "https://t.me/CVEhub/924"}, {"timestamp": "2026-07-29T12:03:09.549Z", "date_only": false, "value": "2026-07-29T12:03:09.549209Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cisoclub/2723", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "74a6854d-bfc1-4bc9-aab4-4714a324b10a", "url": "https://t.me/cisoclub/2723"}, {"timestamp": "2026-07-30T00:01:45.540Z", "date_only": false, "value": "2026-07-30T00:01:45.540761Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/924", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "9690a8d8-244a-4a7f-ade9-4364370e4b1b", "url": "https://t.me/CVEhub/924"}, {"timestamp": "2026-07-30T00:02:56.173Z", "date_only": false, "value": "2026-07-30T00:02:56.173322Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cisoclub/2723", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "f43ca089-a07e-48f9-9e72-c2f47a76e51d", "url": "https://t.me/cisoclub/2723"}, {"timestamp": "2026-08-01T07:00:04.809Z", "date_only": false, "value": "2026-08-01T07:00:04.809514Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/924", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "4eca44bd-9f8e-4997-a979-9928c101a7a4", "url": "https://t.me/CVEhub/924"}, {"timestamp": "2026-08-02T00:01:13.395Z", "date_only": false, "value": "2026-08-02T00:01:13.395496Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/924", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "71195f4b-bc1a-4b7e-8c64-9093251371da", "url": "https://t.me/CVEhub/924"}, {"timestamp": "2026-08-03T19:00:04.174Z", "date_only": false, "value": "2026-08-03T19:00:04.174246Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cisoclub/2723", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "d7b6ae50-31d6-46bd-8629-97cfe436f92d", "url": "https://t.me/cisoclub/2723"}, {"timestamp": "2026-08-04T00:00:28.508Z", "date_only": false, "value": "2026-08-04T00:00:28.508236Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cisoclub/2723", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "64e015d2-5850-499a-82ed-d7a5aef90ce4", "url": "https://t.me/cisoclub/2723"}, {"timestamp": "2026-09-01T20:01:56.035Z", "date_only": false, "value": "2026-09-01T20:01:56.035789Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/42868", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "da0530eb-64b8-4106-b131-252f73e63e30", "url": "https://t.me/hacking_Attack/42868"}, {"timestamp": "2026-09-06T08:00:06.549Z", "date_only": false, "value": "2026-09-06T08:00:06.549309Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/hacking_Attack/42868", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "f4beda87-062c-48a1-9d44-0df9f8f2d017", "url": "https://t.me/hacking_Attack/42868"}, {"timestamp": "2026-09-29T11:23:44Z", "date_only": false, "value": "2026-09-29T11:23:44.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/ProxiBlue/2000292a9d30e556107509a14e2b2303", "record": "CVE-2022-24086", "field": "creation_timestamp", "uuid": "515510ed-6d96-4d30-95d3-c4f03c4dfa42", "url": "https://gist.github.com/ProxiBlue/2000292a9d30e556107509a14e2b2303"}]}