{"metadata": {"vulnerability": "CVE-2023-35885", "count": 62, "kinds": {"milestone": 4, "sighting": 35, "kev": 11, "other": 12}}, "data": [{"timestamp": "2023-06-19T00:00:00Z", "date_only": false, "value": "2023-06-19T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-35885", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-06-20T00:00:00Z", "date_only": false, "value": "2023-06-20T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-35885", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-06-20T20:15:00Z", "date_only": false, "value": "2023-06-20T20:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-35885", "record": "GSD-2023-35885", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2023-06-20T20:15:09Z", "date_only": false, "value": "2023-06-20T20:15:09Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-WMRX-G8F2-RGWH", "record": "GHSA-WMRX-G8F2-RGWH", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-06-20T20:15:09.687Z", "date_only": false, "value": "2023-06-20T20:15:09.687", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-35885", "record": "FKIE_CVE-2023-35885", "field": "published"}, {"timestamp": "2023-06-20T21:30:56Z", "date_only": false, "value": "2023-06-20T21:30:56Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-WMRX-G8F2-RGWH", "record": "GHSA-WMRX-G8F2-RGWH", "field": "published"}, {"timestamp": "2023-07-20T00:00:00Z", "date_only": false, "value": "2023-07-20T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2023-35885", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-07-21T10:59:01Z", "date_only": false, "value": "2023-07-21T10:59:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/8707", "record": "CVE-2023-35885", "field": "creation_timestamp", "uuid": "357c60b3-0794-4168-84b8-b08dd231fde6", "content": "#exploit\n1. CVE-2023-28121:\nWooCommerce Payments: Unauthorized Admin Access Exploit\nhttps://github.com/gbrsh/CVE-2023-28121\n]-> https://github.com/Jenderal92/CVE-2023-28121\n\n2. CVE-2023-35885:\nCloudpanel 0-day Exploit\nhttps://github.com/datackmy/FallingSkies-CVE-2023-35885", "url": "https://t.me/CyberSecurityTechnologies/8707"}, {"timestamp": "2023-07-22T15:31:47Z", "date_only": false, "value": "2023-07-22T15:31:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/72q_6K-Gw2SSBLexfL7RRBs4aQAazbzl569yjTYRGLrjOQ", "record": "CVE-2023-35885", "field": "creation_timestamp", "uuid": "260e161c-75a7-4164-a1f6-94c768de7f4c"}, {"timestamp": "2023-07-23T03:58:34Z", "date_only": false, "value": "2023-07-23T03:58:34.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/crackcodes/3925", "record": "CVE-2023-35885", "field": "creation_timestamp", "uuid": "99e4189a-4ebc-4285-997f-acf549c878a7", "content": "\ud83d\udc7e\ud83c\udf7aWindows11 Exploits : https://system32.ink/windows11-exploits/\n\n\ud83d\udca9\ud83d\udca5TCL Chinese Theatres Data Leak : https://system32.ink/tcl-chinese-theatres-data-leak/\n\n\u2b50\ud83d\udd30Chrome CVE-2023-2033 PoC : https://system32.ink/chrome-cve-2023-2033-poc/\n\n\ud83d\udc7e\ud83d\udca5\u26a1Cloudpanel 0-day Exploit : https://system32.ink/cloudpanel-0-day-exploit-cve-2023-35885/\n\n\u2623\ufe0f\u26a1WooCommerce Payments: Unauthorized Admin Access Exploit : https://system32.ink/woocommerce-payments-unauthorized-admin-access-exploit-cve-2023-28121/\n\n@Crackcodes | System32.ink | Crackcodes.in", "url": "https://t.me/crackcodes/3925"}, {"timestamp": "2023-07-23T12:08:55Z", "date_only": false, "value": "2023-07-23T12:08:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/3126", "record": "CVE-2023-35885", "field": "creation_timestamp", "uuid": "0e92b1f5-5bb1-41b9-bd58-b2eeb1bef79d", "content": "Tools \ud83d\udd27 \ud83d\udd28 \ud83d\udd27 \ud83d\udd28  - Hackers Factory\n\n\u200b\u200bTor / Darknet Links\n\nVerified darknet market and darknet service links on the Tor Network.\n\nhttps://github.com/DarkNetEye/tor-links\n\nWeb:\nhttps://darkneteye.com/\n\n#cybersecurity #infosec #privacy\n\n\u200b\u200bDragondoom\n\nThe PAKE Dragonfly is used as SAE in WPA3 authentication. A critical point during the authentication is when the password needs to be derived into an elliptic curve point.\n\nhttps://gitlab.inria.fr/ddealmei/artifact_dragondoom\n\n#cybersecurity #infosec\n\n\u200b\u200bwhatlicense\n\nFull tool chain to extract WinLicense secrets from a protected program then launch it bypassing all verification steps, utlizing an Intel PIN tool and license file builder.\n\nhttps://github.com/charlesnathansmith/whatlicense\n\n#infosec #pentesting #bugbounty\n\n\u200b\u200bCVE-2022-44875\n\nTesting CVE-2022-44875\n\nhttps://github.com/c0d30d1n/CVE-2022-44875-Test\n\n#cve #cybersecurity #infosec\n\n\u200b\u200bWiFi-OSINT\n\nSome great Wifi, resources, tools and blogs if Wi-Fi #OSINT is your thing.\n\nhttps://github.com/cqcore/WiFi-OSINT\n\n#cybersecurity #infosec #pentesting\n\n\u200b\u200bCVE-2023-35885\n\nCloudpanel 0-day Exploit\n\nhttps://github.com/datackmy/FallingSkies-CVE-2023-35885\n\n#cve #cybersecurity #infosec\n\n\u200b\u200bCVE-2023-3519\n\nThis script is a basic Citrix Scanner for CVE-2023-3519. We try to identify vulnerable Citrix Gateways/ADCs by looking at the HTTP headers.\n\nhttps://github.com/telekom-security/cve-2023-3519-citrix-scanner\n\n#cve #infosec #pentesting\n\n\u200b\u200bvala-vala-hey\n\nThis is a 0day root LPE for latest #Manjaro distro, tested on embedded ARM and x86_64 desktop installs.\n\nhttps://github.com/c-skills/vala-vala-hey\n\n#cve #cybersecurity #infosec\n\n\u200b\u200bCVE-2020-1472\n\nA Python script that uses the Impacket library to test vulnerability for the Zerologon exploit (CVE-2020-1472).\n\nhttps://github.com/SecuraBV/CVE-2020-1472\n\n#cve #cybersecurity #infosec\n\nEX-SQLi\n\nA tool for scanning and exploiting the famous SQL injection vulnerability in more than millions of sites. The exploit was programmed by the TYG team.\n\nhttps://github.com/mr-sami-x/SQLi\n\n#infosec #pentesting #redteam\n\n\u200b\u200bCVE-2023-38632\n\nAsync-sockets-cpp <0.3.1 TCP Packet tcpsocket.hpp Stack-based Overflow\n\nhttps://github.com/Halcy0nic/CVE-2023-38632\n\n#cve #cybersecurity #infosec\n\n\u200b\u200bCVE-2023-3519\n\nThis Nuclei template checks for the presence of the CVE-2023-3519 vulnerability in a target web server.\n\nhttps://github.com/SalehLardhi/CVE-2023-3519\n\n#cybersecurity #infosec #pentesting\n\n\u200b\u200bCVE-2023-28121\n\nWooCommerce Payments: Unauthorized Admin Access #Exploit.\n\nhttps://github.com/gbrsh/CVE-2023-28121\n\n#cve #cybersecurity #infosec\n\n\u200b\u200bVanMoof Encryption Key Exporter\n\nExport all bike details (such as encryption key) of your VanMoof bikes.\n\nhttps://github.com/grossartig/vanmoof-encryption-key-exporter\n\nWeb:\nhttps://keyexporter.grossartig.io/\n\n#cybersecurity #infosec\n\n\u200b\u200bPowershellKerberos\n\nSome scripts to abuse kerberos using Powershell.\n\nhttps://github.com/MzHmO/PowershellKerberos\n\n#infosec #pentesting #redteam\n\nhttps://t.me/dilagrafie", "url": "https://t.me/dilagrafie/3126"}, {"timestamp": "2023-07-23T16:31:42Z", "date_only": false, "value": "2023-07-23T16:31:42.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/crackcodes/3929", "record": "CVE-2023-35885", "field": "creation_timestamp", "uuid": "22086ecc-90cc-4add-8255-50484ed22c4f", "content": "\ud83d\udc7e\ud83c\udf7aWindows11 Exploits : https://system32.ink/windows11-exploits/\n\n\ud83d\udca9\ud83d\udca5TCL Chinese Theatres Data Leak : https://system32.ink/tcl-chinese-theatres-data-leak/\n\n\u2b50\ud83d\udd30Chrome CVE-2023-2033 PoC : https://system32.ink/chrome-cve-2023-2033-poc/\n\n\ud83d\udc7e\ud83d\udca5\u26a1Cloudpanel 0-day Exploit : https://system32.ink/cloudpanel-0-day-exploit-cve-2023-35885/\n\n\u2623\ufe0f\u26a1WooCommerce Payments: Unauthorized Admin Access Exploit : https://system32.ink/woocommerce-payments-unauthorized-admin-access-exploit-cve-2023-28121/\n\n@Crackcodes | System32.ink | Crackcodes.in", "url": "https://t.me/crackcodes/3929"}, {"timestamp": "2023-07-28T10:25:51Z", "date_only": false, "value": "2023-07-28T10:25:51.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/proxy_bar/1648", "record": "CVE-2023-35885", "field": "creation_timestamp", "uuid": "132ecfed-dce4-44ba-b7aa-a28ee0b2840e", "content": "\u0421\u0438\u0441\u0430\u0434\u043c\u0438\u043d\u044b \u0441 \u043f\u0440\u0430\u0437\u0434\u043d\u0438\u043a\u043e\u043c. \u0412\u043e\u0442 \u0432\u0430\u043c \u043f\u043e\u0434\u0430\u0440\u043e\u043a )\nCVE-2023-35885 Cloudpanel 1-day Exploit\n\u0414\u043b\u044f \u0432\u0435\u0440\u0441\u0438\u0439 : v2.0.0 \u2013 v2.3.0\n\u041f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043e : 20-06-2023  (v2.3.1)\n*\nExploit + shell\n\n#\u043f\u0440\u0430\u0437\u0434\u043d\u0438\u043a\u044a #\u043a\u043b\u043e\u0443\u043dpanel #xploet #sh\u044bll", "url": "https://t.me/proxy_bar/1648"}, {"timestamp": "2023-08-02T16:42:00Z", "date_only": false, "value": "2023-08-02T16:42Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-35885", "record": "GSD-2023-35885", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-08-14T01:40:46Z", "date_only": false, "value": "2023-08-14T01:40:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/3153", "record": "CVE-2023-35885", "field": "creation_timestamp", "uuid": "4fb712a1-1809-42d1-ba8d-317bb120303d", "content": "Hackers Factory \n\nBlack Hat USA 2023\nDefender-Pretender: When Windows Defender Updates Become a Security Risk\n\nhttps://github.com/SafeBreach-Labs/wd-pretender\n\n#BlackHat #blackhat23 #Infosec #Windows #Security #cyberattacks\n\nRCE exploit for CVE-2023-3519\n\nhttps://github.com/BishopFox/CVE-2023-3519\n\nCVE-2023-37979\n\nhttps://github.com/Fire-Null/CVE-2023-37979\n\nGolang client for querying SecurityTrails API data\n\nhttps://github.com/hakluke/haktrails\n\nExtract URLs, paths, secrets, and other interesting bits from JavaScript\n\nhttps://github.com/BishopFox/jsluice\n\nCVE-2023-35078 Remote Unauthenticated API Access Vulnerability Exploit POC\n\nhttps://github.com/vchan-in/CVE-2023-35078-Exploit-POC\n\nSub-Domain TakeOver Vulnerability Scanner\n\nhttps://github.com/m4ll0k/takeover\n\nCloudpanel 0-day Exploit\n\nhttps://github.com/datackmy/FallingSkies-CVE-2023-35885\n\nnse script to identify server vulnerable to CVE-2023-3519\n\nhttps://github.com/dorkerdevil/CitrixFall\n\nCVE-2023-34960 Chamilo PoC\n\nhttps://github.com/Aituglo/CVE-2023-34960/blob/master/poc.py\n\nVMWare vRealize Network Insight pre-authenticated RCE CVE-2023-20887\n\nhttps://github.com/projectdiscovery/nuclei-templates/pull/7405\n\nKeyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.\n\nhttps://github.com/streaak/keyhacks\n\n#Infosec #cybersec #hackersfactory \n\nhttps://t.me/dilagrafie", "url": "https://t.me/dilagrafie/3153"}, {"timestamp": "2023-08-22T23:19:52Z", "date_only": false, "value": "2023-08-22T23:19:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/MrVGunz/854", "record": "CVE-2023-35885", "field": "creation_timestamp", "uuid": "f3e5e74c-5d1f-4071-8af0-e4e63b943109", "content": "CVE-2023-35885 : Cloudpanel 2.0.0 - 2.3.0- Insecure File-manager Cookie Authentication\nPOC : https://github.com/passwa11/FallingSkies-CVE-2023-35885\nBlog : https://www.datack.my/fallingskies-cloudpanel-0-day/", "url": "https://t.me/MrVGunz/854"}, {"timestamp": "2023-08-23T16:41:53Z", "date_only": false, "value": "2023-08-23T16:41:53.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/qihKOwJuGsTUiCFmLBsc4EI5plaPiMBmeeW9n4dX5E2KRwc", "record": "CVE-2023-35885", "field": "creation_timestamp", "uuid": "ed08c709-b2b1-41da-b5e0-2fc1dd74bb6e"}, {"timestamp": "2023-08-23T18:39:02Z", "date_only": false, "value": "2023-08-23T18:39:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/2988", "record": "CVE-2023-35885", "field": "creation_timestamp", "uuid": "9b2cb73c-8d54-4aed-b309-6cc767b036c1", "content": "CVE-2023-35885 Cloudpanel 0-day Exploit\n\n\nhttps://github.com/datackmy/FallingSkies-CVE-2023-35885", "url": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/2988"}, {"timestamp": "2023-08-23T18:42:16Z", "date_only": false, "value": "2023-08-23T18:42:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackingVidhya/380", "record": "CVE-2023-35885", "field": "creation_timestamp", "uuid": "30983889-88e5-48d5-8e64-87f89a4f2b15", "content": "CVE-2023-35885 Cloudpanel 0-day Exploit\n\n\nhttps://github.com/datackmy/FallingSkies-CVE-2023-35885", "url": "https://t.me/HackingVidhya/380"}, {"timestamp": "2023-12-13T01:20:46.029Z", "date_only": false, "value": "2023-12-13T01:20:46.029745Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-35885", "record": "GSD-2023-35885", "field": "gsd.osvSchema.modified"}, {"timestamp": "2023-12-28T05:23:44Z", "date_only": false, "value": "2023-12-28T05:23:44.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/2195", "record": "CVE-2023-35885", "field": "creation_timestamp", "uuid": "ccd7b892-af4d-48d4-af3e-f052edc45335", "content": "#ExploitObserverAlert\n\nCVE-2023-35885\n\nDESCRIPTION: Exploit Observer has 10 entries related to CVE-2023-35885. CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication.\n\nFIRST-EPSS: 0.022660000\nNVD-IS: 5.9\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/2195"}, {"timestamp": "2024-02-14T13:01:29Z", "date_only": false, "value": "2024-02-14T13:01:29+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2023-35885", "field": "timestamps.asserted_at", "uuid": "28212077-72e6-42e2-9ef0-5039766f3793", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-02-14T13:01:29Z", "date_only": false, "value": "2024-02-14T13:01:29+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2023-35885", "field": "timestamps.first_seen_at", "uuid": "28212077-72e6-42e2-9ef0-5039766f3793", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-04-04T04:59:06Z", "date_only": false, "value": "2024-04-04T04:59:06Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-WMRX-G8F2-RGWH", "record": "GHSA-WMRX-G8F2-RGWH", "field": "modified"}, {"timestamp": "2024-08-02T16:37:39.857Z", "date_only": false, "value": "2024-08-02T16:37:39.857Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-35885", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-12-09T19:01:26.193Z", "date_only": false, "value": "2024-12-09T19:01:26.193056Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-35885", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2024-12-09T19:01:26.193Z", "date_only": false, "value": "2024-12-09T19:01:26.193056Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-35885", "record": "FKIE_CVE-2023-35885", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-12-09T19:01:40.906Z", "date_only": false, "value": "2024-12-09T19:01:40.906Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-35885", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-12-09T19:01:40.906Z", "date_only": false, "value": "2024-12-09T19:01:40.906Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-35885", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-02T00:00:00Z", "date_only": false, "value": "2025-01-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-02)", "record": "CVE-2023-35885", "field": "creation_timestamp", "uuid": "4f0ec828-873e-4e68-833d-540ecd5079a7"}, {"timestamp": "2025-01-31T00:00:00Z", "date_only": false, "value": "2025-01-31T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-31)", "record": "CVE-2023-35885", "field": "creation_timestamp", "uuid": "062dc5ea-a74c-4bca-917f-80e3bba28683"}, {"timestamp": "2025-02-21T00:00:00Z", "date_only": false, "value": "2025-02-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-21)", "record": "CVE-2023-35885", "field": "creation_timestamp", "uuid": "fd133101-997d-4208-b0e1-eb9f3ab0fa4c"}, {"timestamp": "2025-03-22T00:00:00Z", "date_only": false, "value": "2025-03-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-22)", "record": "CVE-2023-35885", "field": "creation_timestamp", "uuid": "26f644f7-33a6-4d02-ae46-8842178bdf9d"}, {"timestamp": "2025-03-27T00:00:00Z", "date_only": false, "value": "2025-03-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-27)", "record": "CVE-2023-35885", "field": "creation_timestamp", "uuid": "57b3b2d6-f962-4331-bace-54373ec1890c"}, {"timestamp": "2025-07-07T00:00:00Z", "date_only": false, "value": "2025-07-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-07)", "record": "CVE-2023-35885", "field": "creation_timestamp", "uuid": "cf9012ed-4978-421e-a96e-1900c74afa36"}, {"timestamp": "2025-07-08T00:00:00Z", "date_only": false, "value": "2025-07-08T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2023-35885", "field": "timestamps.asserted_at", "uuid": "5a933c6d-0a76-42e2-ba26-cdd814571bb0", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-07-08T00:00:00Z", "date_only": false, "value": "2025-07-08T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2023-35885", "field": "evidence.0.details.added_date", "uuid": "5a933c6d-0a76-42e2-ba26-cdd814571bb0", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-07-08T00:00:00Z", "date_only": false, "value": "2025-07-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-08)", "record": "CVE-2023-35885", "field": "creation_timestamp", "uuid": "270ca257-c640-4916-bfe1-c49447e7cc75"}, {"timestamp": "2025-07-08T00:00:00Z", "date_only": false, "value": "2025-07-08T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2023-35885", "field": "timestamps.first_seen_at", "uuid": "5a933c6d-0a76-42e2-ba26-cdd814571bb0", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-07-08T00:00:00Z", "date_only": false, "value": "2025-07-08T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2023-35885", "field": "status.status_updated_at", "uuid": "5a933c6d-0a76-42e2-ba26-cdd814571bb0", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-07-13T00:00:00Z", "date_only": false, "value": "2025-07-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-13)", "record": "CVE-2023-35885", "field": "creation_timestamp", "uuid": "5bdec55b-1802-4827-a8b2-edc86a2d7d30"}, {"timestamp": "2025-07-21T00:00:00Z", "date_only": false, "value": "2025-07-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-21)", "record": "CVE-2023-35885", "field": "creation_timestamp", "uuid": "bda3ddcb-a0ab-4759-8677-96a75d083028"}, {"timestamp": "2025-07-29T00:00:00Z", "date_only": false, "value": "2025-07-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-29)", "record": "CVE-2023-35885", "field": "creation_timestamp", "uuid": "70d60d3a-15c8-4a2e-a8e8-5ebec4f02d1b"}, {"timestamp": "2025-12-17T00:00:00Z", "date_only": false, "value": "2025-12-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-17)", "record": "CVE-2023-35885", "field": "creation_timestamp", "uuid": "3886bdb2-424f-4009-bd84-7d008f9621e5"}, {"timestamp": "2026-01-30T00:00:00Z", "date_only": false, "value": "2026-01-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-30)", "record": "CVE-2023-35885", "field": "creation_timestamp", "uuid": "acc1fd40-b177-4419-88d3-eac18e1ebb34"}, {"timestamp": "2026-06-13T00:00:00Z", "date_only": false, "value": "2026-06-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-13)", "record": "CVE-2023-35885", "field": "creation_timestamp", "uuid": "1997f504-df95-4ca8-aca5-338e9847813a"}, {"timestamp": "2026-06-17T06:05:24.570Z", "date_only": false, "value": "2026-06-17T06:05:24.570", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-35885", "record": "FKIE_CVE-2023-35885", "field": "lastModified"}, {"timestamp": "2026-06-19T12:46:01.003Z", "date_only": false, "value": "2026-06-19T12:46:01.003746Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cc256510-b0cf-4b4d-92ab-630a3a36be73", "record": "CVE-2023-35885", "field": "creation_timestamp", "uuid": "093f2aaf-f050-47e4-a4fa-a62be9d07ac3", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cc256510-b0cf-4b4d-92ab-630a3a36be73"}, {"timestamp": "2026-06-22T00:00:00Z", "date_only": false, "value": "2026-06-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-22)", "record": "CVE-2023-35885", "field": "creation_timestamp", "uuid": "6a06f7d1-266e-4bca-8b19-47b5843aa724"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2023-35885", "field": "timestamps.recorded_at", "uuid": "5a933c6d-0a76-42e2-ba26-cdd814571bb0", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:12:10.761Z", "date_only": false, "value": "2026-06-23T11:12:10.761159Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/5a933c6d-0a76-42e2-ba26-cdd814571bb0", "record": "CVE-2023-35885", "field": "creation_timestamp", "uuid": "06b72252-30bd-461d-8b44-6021f334506b", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/5a933c6d-0a76-42e2-ba26-cdd814571bb0"}, {"timestamp": "2026-06-23T14:03:26.691Z", "date_only": false, "value": "2026-06-23T14:03:26.691799Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d26d4eac-4665-43e6-aa08-774ad91441e7", "record": "CVE-2023-35885", "field": "creation_timestamp", "uuid": "b4f44e5a-0149-4ad1-b36f-6135a365d44e", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d26d4eac-4665-43e6-aa08-774ad91441e7"}, {"timestamp": "2026-06-30T09:23:15.088Z", "date_only": false, "value": "2026-06-30T09:23:15.088397Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/49e32cd3-bde7-440d-bc3c-e3cd522a9e64", "record": "CVE-2023-35885", "field": "creation_timestamp", "uuid": "536c8a5d-8be2-4eb1-ab5e-a700dd1f915a", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/49e32cd3-bde7-440d-bc3c-e3cd522a9e64"}, {"timestamp": "2026-07-01T05:54:37.747Z", "date_only": false, "value": "2026-07-01T05:54:37.747092Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/28212077-72e6-42e2-9ef0-5039766f3793", "record": "CVE-2023-35885", "field": "creation_timestamp", "uuid": "834d5e51-11f4-4f84-9b89-a3c164fd6171", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/28212077-72e6-42e2-9ef0-5039766f3793"}, {"timestamp": "2026-07-29T12:00:14.788Z", "date_only": false, "value": "2026-07-29T12:00:14.788448Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/17331", "record": "CVE-2023-35885", "field": "creation_timestamp", "uuid": "f3640024-521e-4f94-8c19-ebe5806b5491", "url": "https://t.me/CVEhub/17331"}, {"timestamp": "2026-07-30T00:00:33.395Z", "date_only": false, "value": "2026-07-30T00:00:33.395257Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/17331", "record": "CVE-2023-35885", "field": "creation_timestamp", "uuid": "83fa7393-f457-45d4-9f4e-81c92afe7448", "url": "https://t.me/CVEhub/17331"}, {"timestamp": "2026-07-31T00:00:43.433Z", "date_only": false, "value": "2026-07-31T00:00:43.433190Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/17331", "record": "CVE-2023-35885", "field": "creation_timestamp", "uuid": "9788c6b3-ed2b-4de8-90cf-e7473f9c2f38", "url": "https://t.me/CVEhub/17331"}, {"timestamp": "2026-08-31T10:15:16.816Z", "date_only": false, "value": "2026-08-31T10:15:16.816984Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-30)", "record": "CVE-2023-35885", "field": "creation_timestamp", "uuid": "6843ab57-f761-4995-a74e-318ef29c4928"}, {"timestamp": "2026-11-03T00:00:00Z", "date_only": false, "value": "2026-11-03T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2023-35885", "field": "timestamps.last_seen_at", "uuid": "28212077-72e6-42e2-9ef0-5039766f3793", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-03T00:00:00Z", "date_only": true, "value": "2026-11-03", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2023-35885", "field": "evidence.0.details.observation_date", "uuid": "28212077-72e6-42e2-9ef0-5039766f3793", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-03T00:00:00Z", "date_only": false, "value": "2026-11-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2023-35885", "field": "status.status_updated_at", "uuid": "28212077-72e6-42e2-9ef0-5039766f3793", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-05T01:00:01Z", "date_only": false, "value": "2026-11-05T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2023-35885", "field": "timestamps.recorded_at", "uuid": "28212077-72e6-42e2-9ef0-5039766f3793", "status": {"status_reason": "confirmed", "exploited": true}}]}