{"metadata": {"vulnerability": "CVE-2023-35080", "count": 40, "kinds": {"milestone": 5, "sighting": 21, "kev": 0, "other": 14}}, "data": [{"timestamp": "2023-06-13T01:00:11.784Z", "date_only": false, "value": "2023-06-13T01:00:11.784Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-35080", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-11-14T23:18:08.387Z", "date_only": false, "value": "2023-11-14T23:18:08.387Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-35080", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-11-14T23:18:08.387Z", "date_only": false, "value": "2023-11-14T23:18:08.387Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / hackerone", "record": "CVE-2023-35080", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-11-15T00:15:00Z", "date_only": false, "value": "2023-11-15T00:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-35080", "record": "GSD-2023-35080", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2023-11-15T00:15:07Z", "date_only": false, "value": "2023-11-15T00:15:07Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-G78X-643M-9QMF", "record": "GHSA-G78X-643M-9QMF", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-11-15T00:15:07.787Z", "date_only": false, "value": "2023-11-15T00:15:07.787", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-35080", "record": "FKIE_CVE-2023-35080", "field": "published"}, {"timestamp": "2023-11-15T00:31:08Z", "date_only": false, "value": "2023-11-15T00:31:08Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-G78X-643M-9QMF", "record": "GHSA-G78X-643M-9QMF", "field": "published"}, {"timestamp": "2023-11-15T00:31:08Z", "date_only": false, "value": "2023-11-15T00:31:08Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-G78X-643M-9QMF", "record": "GHSA-G78X-643M-9QMF", "field": "modified"}, {"timestamp": "2023-11-22T15:08:00Z", "date_only": false, "value": "2023-11-22T15:08Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-35080", "record": "GSD-2023-35080", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-11-23T00:00:00Z", "date_only": false, "value": "2023-11-23T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0975", "record": "CERTFR-2023-AVI-0975", "field": "last_revision_date"}, {"timestamp": "2023-11-23T00:00:00Z", "date_only": false, "value": "2023-11-23T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0975", "record": "CERTFR-2023-AVI-0975", "field": "initial_release_date"}, {"timestamp": "2023-11-23T00:00:00Z", "date_only": false, "value": "2023-11-23T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0975", "record": "CERTFR-2023-AVI-0975", "field": "revisions.0.revision_date"}, {"timestamp": "2023-12-13T01:20:45.915Z", "date_only": false, "value": "2023-12-13T01:20:45.915621Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-35080", "record": "GSD-2023-35080", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-02-12T00:32:41Z", "date_only": false, "value": "2024-02-12T00:32:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/9952", "record": "CVE-2023-35080", "field": "creation_timestamp", "uuid": "ef399193-29ed-4e83-a48f-8b1c7153ef09", "content": "#exploit\n1. CVE-2024-20328:\nClamAV Command Injection Bug\nhttps://amitschendel.github.io/vulnerabilites/CVE-2024-20328\n\n2. CVE-2024-24816:\nCKEditor XSS vulnerability\nhttps://github.com/afine-com/CVE-2024-24816\n\n3. CVE-2023-35080:\nIvanti/Pulse VPN Client Exploit\nhttps://github.com/HopHouse/Ivanti-Pulse_VPN-Client_Exploit-CVE-2023-35080_Privilege-escalation", "url": "https://t.me/CyberSecurityTechnologies/9952"}, {"timestamp": "2024-07-27T20:28:47Z", "date_only": false, "value": "2024-07-27T20:28:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackerArsenal/36", "record": "CVE-2023-35080", "field": "creation_timestamp", "uuid": "9c5a01e3-a60d-4448-b24f-76e133cbbd29", "content": "#exploit\n1. CVE-2024-20328:\nClamAV Command Injection Bug\nhttps://amitschendel.github.io/vulnerabilites/CVE-2024-20328\n\n2. CVE-2024-24816:\nCKEditor XSS vulnerability\nhttps://github.com/afine-com/CVE-2024-24816\n\n3. CVE-2023-35080:\nIvanti/Pulse VPN Client Exploit\nhttps://github.com/HopHouse/Ivanti-Pulse_VPN-Client_Exploit-CVE-2023-35080_Privilege-escalation", "url": "https://t.me/HackerArsenal/36"}, {"timestamp": "2024-07-27T20:30:55Z", "date_only": false, "value": "2024-07-27T20:30:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Kelvinseccommunity/610", "record": "CVE-2023-35080", "field": "creation_timestamp", "uuid": "c449fb73-f7d1-4cc4-88fb-2020ba7e614b", "content": "#exploit\n1. CVE-2024-20328:\nClamAV Command Injection Bug\nhttps://amitschendel.github.io/vulnerabilites/CVE-2024-20328\n\n2. CVE-2024-24816:\nCKEditor XSS vulnerability\nhttps://github.com/afine-com/CVE-2024-24816\n\n3. CVE-2023-35080:\nIvanti/Pulse VPN Client Exploit\nhttps://github.com/HopHouse/Ivanti-Pulse_VPN-Client_Exploit-CVE-2023-35080_Privilege-escalation", "url": "https://t.me/Kelvinseccommunity/610"}, {"timestamp": "2024-08-02T16:23:58.310Z", "date_only": false, "value": "2024-08-02T16:23:58.310Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-35080", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-04T00:51:08Z", "date_only": false, "value": "2024-10-04T00:51:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/1yNdYtjM167PWJ8z4QCuhWfayRW6CDLYSnp7378ajV5EDt8", "record": "CVE-2023-35080", "field": "creation_timestamp", "uuid": "13f07587-4112-4ca9-a3d1-ef567656411e"}, {"timestamp": "2024-10-04T00:51:11Z", "date_only": false, "value": "2024-10-04T00:51:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/UrNq84zyBC1oMAufBesPTpXAbedIsqXaSNJFq3mfmDUScAM", "record": "CVE-2023-35080", "field": "creation_timestamp", "uuid": "0e7d0878-2b9e-41a0-88be-f08072c2ecdf"}, {"timestamp": "2024-10-04T00:51:53Z", "date_only": false, "value": "2024-10-04T00:51:53.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/LockBitChannels/119126", "record": "CVE-2023-35080", "field": "creation_timestamp", "uuid": "9e72ec84-b83a-4d6d-8086-739c3985892e", "content": "#exploit\nCVE-2024-20328:\nClamAV Command Injection Bug\nhttps://amitschendel.github.io/vulnerabilites/CVE-2024-20328\n\nCVE-2024-24816:\nCKEditor XSS vulnerability\nhttps://github.com/afine-com/CVE-2024-24816\n\nCVE-2023-35080:\nIvanti/Pulse VPN Client Exploit\nhttps://github.com/HopHouse/Ivanti-Pulse_VPN-Client_Exploit-CVE-2023-35080_Privilege-escalation\n\nCVE-2024-0811:\nChrome pageCapture.saveAsMHTML() Extension API Blocked Origin Bypass\nhttps://packetstormsecurity.com/files/177172/Chrome-chrome.pageCapture.saveAsMHTML-Extension-API-Blocked-Origin-Bypass.html\n\nCVE-2023-50387:\nKeyTrap in DNS/DNSSEC\nhttps://github.com/knqyf263/CVE-2023-50387\n\nCVE-2024-22369:\nApache Camel Unsafe Deserialization\nhttps://github.com/oscerd/CVE-2024-22369\n\nCVE-2024-1708/CVE-2024-1709:\nScreenConnect Authentication Bypass\nhttps://www.huntress.com/blog/a-catastrophe-for-control-understanding-the-screenconnect-authentication-bypass\n\nCCE-2024-21413:\nMicrosoft Outlook RCE\nhttps://github.com/Mdusmandasthaheer/CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability\n\nCVE-2024-24401:\nNagios Authenticated SQL Injection\nhttps://github.com/MAWK0235/CVE-2024-24401\n\nCVE-2024-1071:\nWordPress Ultimate Member Unauthorized Database Access/SQLi\nhttps://github.com/gbrsh/CVE-2024-1071\n\nCVE-2024-1651:\nTorrentpier RCE Exploit\nhttps://github.com/sharpicx/CVE-2024-1651-PoC\n\nCVE-2023-50386:\nApache Solr Backup/Restore APIs RCE\nhttps://github.com/vvmdx/Apache-Solr-RCE_CVE-2023-50386_POC\n\nCVE-2024-21762:\nFortiOS 6.0 - 7.4 - OoB/RCE\nhttps://github.com/c0d3b3af/CVE-2024-21762-POC\n\nCVE-2024-26521:\nCE Phoenix v1.0.x Html Injection\nhttps://github.com/hackervegas001/CVE-2024-26521\n\nCVE-2024-21672:\nConfluence Data Center/ Server RCE\nhttps://github.com/swagcrafted/CVE-2024-21672-POC\n\nCVE-2023-49109:\nRCE in Apache Dolphinscheduler\nhttps://xz.aliyun.com/t/13913?time__1311=mqmxnQ0%3D3eqQqGNDQiFbFD9Q7fCKAKx\n\nCVE-2024-21410:\nMS Exchange Privilege Escalation\nhttps://github.com/FreakyM0ndy/CVE-2024-21410-poc", "url": "https://t.me/LockBitChannels/119126"}, {"timestamp": "2024-10-04T00:51:54Z", "date_only": false, "value": "2024-10-04T00:51:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/LockBitChannels/56148", "record": "CVE-2023-35080", "field": "creation_timestamp", "uuid": "d2249990-0488-4932-a8b3-5324fda4b106", "content": "#exploit\nCVE-2024-20328:\nClamAV Command Injection Bug\nhttps://amitschendel.github.io/vulnerabilites/CVE-2024-20328\n\nCVE-2024-24816:\nCKEditor XSS vulnerability\nhttps://github.com/afine-com/CVE-2024-24816\n\nCVE-2023-35080:\nIvanti/Pulse VPN Client Exploit\nhttps://github.com/HopHouse/Ivanti-Pulse_VPN-Client_Exploit-CVE-2023-35080_Privilege-escalation\n\nCVE-2024-0811:\nChrome pageCapture.saveAsMHTML() Extension API Blocked Origin Bypass\nhttps://packetstormsecurity.com/files/177172/Chrome-chrome.pageCapture.saveAsMHTML-Extension-API-Blocked-Origin-Bypass.html\n\nCVE-2023-50387:\nKeyTrap in DNS/DNSSEC\nhttps://github.com/knqyf263/CVE-2023-50387\n\nCVE-2024-22369:\nApache Camel Unsafe Deserialization\nhttps://github.com/oscerd/CVE-2024-22369\n\nCVE-2024-1708/CVE-2024-1709:\nScreenConnect Authentication Bypass\nhttps://www.huntress.com/blog/a-catastrophe-for-control-understanding-the-screenconnect-authentication-bypass\n\nCCE-2024-21413:\nMicrosoft Outlook RCE\nhttps://github.com/Mdusmandasthaheer/CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability\n\nCVE-2024-24401:\nNagios Authenticated SQL Injection\nhttps://github.com/MAWK0235/CVE-2024-24401\n\nCVE-2024-1071:\nWordPress Ultimate Member Unauthorized Database Access/SQLi\nhttps://github.com/gbrsh/CVE-2024-1071\n\nCVE-2024-1651:\nTorrentpier RCE Exploit\nhttps://github.com/sharpicx/CVE-2024-1651-PoC\n\nCVE-2023-50386:\nApache Solr Backup/Restore APIs RCE\nhttps://github.com/vvmdx/Apache-Solr-RCE_CVE-2023-50386_POC\n\nCVE-2024-21762:\nFortiOS 6.0 - 7.4 - OoB/RCE\nhttps://github.com/c0d3b3af/CVE-2024-21762-POC\n\nCVE-2024-26521:\nCE Phoenix v1.0.x Html Injection\nhttps://github.com/hackervegas001/CVE-2024-26521\n\nCVE-2024-21672:\nConfluence Data Center/ Server RCE\nhttps://github.com/swagcrafted/CVE-2024-21672-POC\n\nCVE-2023-49109:\nRCE in Apache Dolphinscheduler\nhttps://xz.aliyun.com/t/13913?time__1311=mqmxnQ0%3D3eqQqGNDQiFbFD9Q7fCKAKx\n\nCVE-2024-21410:\nMS Exchange Privilege Escalation\nhttps://github.com/FreakyM0ndy/CVE-2024-21410-poc", "url": "https://t.me/LockBitChannels/56148"}, {"timestamp": "2024-12-22T22:15:27Z", "date_only": false, "value": "2024-12-22T22:15:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/7b0KDMH2WfquipCst9Tv71iesbtnEU4bQJg16OEgDf9nbvsj", "record": "CVE-2023-35080", "field": "creation_timestamp", "uuid": "9869d290-ef43-40e7-b1a0-44d32b52c7d3"}, {"timestamp": "2024-12-22T22:15:30Z", "date_only": false, "value": "2024-12-22T22:15:30.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/V1VUnV7rs7gBAtSdtSG9YU8DOLHIzu1kUZjtLh94w5_yW5C9", "record": "CVE-2023-35080", "field": "creation_timestamp", "uuid": "af482577-775e-4d2f-a167-ca6b5597af55"}, {"timestamp": "2025-01-07T18:55:15.855Z", "date_only": false, "value": "2025-01-07T18:55:15.855270Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-35080", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-01-07T18:55:15.855Z", "date_only": false, "value": "2025-01-07T18:55:15.855270Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-35080", "record": "FKIE_CVE-2023-35080", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-01-07T18:56:18.735Z", "date_only": false, "value": "2025-01-07T18:56:18.735Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-35080", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-01-07T18:56:18.735Z", "date_only": false, "value": "2025-01-07T18:56:18.735Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-35080", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-19T09:05:11Z", "date_only": false, "value": "2025-01-19T09:05:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/CRo72oop6ZwQnESqwzNS9o-UvXAtRRZBbTaMpkpQIbIEQGCv", "record": "CVE-2023-35080", "field": "creation_timestamp", "uuid": "225b60fd-7c66-4804-bf3b-cf603c964aea"}, {"timestamp": "2025-01-19T09:05:12Z", "date_only": false, "value": "2025-01-19T09:05:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/MI65lLGsaGTIv40PK1J154YyMiL63QZNJWuw9XlT_YRsFb40", "record": "CVE-2023-35080", "field": "creation_timestamp", "uuid": "06ad57c8-6fee-48ed-af7c-f1b51430d3b0"}, {"timestamp": "2025-01-19T10:45:19Z", "date_only": false, "value": "2025-01-19T10:45:19.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/sSOYy9sa0Jc9yTev23pVTCXx5ZwCCV54W3-F49CmFMjcWAGd", "record": "CVE-2023-35080", "field": "creation_timestamp", "uuid": "a562dc8e-a837-4fdd-b6d9-640bd6d4d3d1"}, {"timestamp": "2025-01-19T10:45:24Z", "date_only": false, "value": "2025-01-19T10:45:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/OIy-vi5ELr4cctl8ownkSK8SkQmdcofc4nGKbyP-zK6wBJzg", "record": "CVE-2023-35080", "field": "creation_timestamp", "uuid": "e6aa1eac-567d-4d08-9f70-03f2cf4b28e4"}, {"timestamp": "2025-01-19T10:54:11Z", "date_only": false, "value": "2025-01-19T10:54:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/m_uXFR_n3tw3cdqXp4eNTFp75GNkXoZP5JCdghj_BLdvWjAh", "record": "CVE-2023-35080", "field": "creation_timestamp", "uuid": "17c24348-e317-4335-aecf-453d0d26e0b4"}, {"timestamp": "2025-01-19T10:54:13Z", "date_only": false, "value": "2025-01-19T10:54:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/PfifvZz7tMW-Pq-u9dIIWpX49EGHHaNBJSKvwqdUIESB65tP", "record": "CVE-2023-35080", "field": "creation_timestamp", "uuid": "2ce6ecce-aa06-45e3-a762-3acb35f5837e"}, {"timestamp": "2025-01-20T11:03:16Z", "date_only": false, "value": "2025-01-20T11:03:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/1Z5p7xYqKVRAHiS5stM6LcQjCrKKZtV6q5K3lriQD01vETjY", "record": "CVE-2023-35080", "field": "creation_timestamp", "uuid": "183c685d-ee61-47ad-ba36-9dca841692ba"}, {"timestamp": "2025-01-20T11:03:21Z", "date_only": false, "value": "2025-01-20T11:03:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/1o3RyjbxkBAdqVV1IakPcUVDj3AIfLmG662gmZzR_AzpiWSm", "record": "CVE-2023-35080", "field": "creation_timestamp", "uuid": "dc9261ba-ef6c-4dad-8e20-728a05b0f93c"}, {"timestamp": "2025-05-04T05:10:20Z", "date_only": false, "value": "2025-05-04T05:10:20.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/7Ml4_lMheQFWoLP8HS6G4y2kPw4O-CbsZ96PEHQtUpuC3WA", "record": "CVE-2023-35080", "field": "creation_timestamp", "uuid": "5c0585b6-d3d0-4b96-92c1-5b85e7112bc4"}, {"timestamp": "2025-05-04T05:11:16Z", "date_only": false, "value": "2025-05-04T05:11:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/P054ImMwjqD_rl7lBAm-hCz5MlTq06QbnDeiIVFMTFFsHy4", "record": "CVE-2023-35080", "field": "creation_timestamp", "uuid": "043c3c79-2d1c-473c-8786-7f250fb810bf"}, {"timestamp": "2026-06-17T06:04:23.507Z", "date_only": false, "value": "2026-06-17T06:04:23.507", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-35080", "record": "FKIE_CVE-2023-35080", "field": "lastModified"}, {"timestamp": "2026-07-17T11:00:04.944Z", "date_only": false, "value": "2026-07-17T11:00:04.944944Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cyberwarehouse/319", "record": "CVE-2023-35080", "field": "creation_timestamp", "uuid": "d90b64dc-71c1-40d5-8b89-edc32874e1c2", "url": "https://t.me/cyberwarehouse/319"}, {"timestamp": "2026-07-18T00:00:32.503Z", "date_only": false, "value": "2026-07-18T00:00:32.503719Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cyberwarehouse/319", "record": "CVE-2023-35080", "field": "creation_timestamp", "uuid": "3411cdca-8db5-44f3-9174-6448435f3f27", "url": "https://t.me/cyberwarehouse/319"}]}