{"metadata": {"vulnerability": "CVE-2023-38743", "count": 24, "kinds": {"milestone": 4, "sighting": 8, "kev": 0, "other": 12}}, "data": [{"timestamp": "2023-07-25T00:00:00Z", "date_only": false, "value": "2023-07-25T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-38743", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-09-11T00:00:00Z", "date_only": false, "value": "2023-09-11T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-38743", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-09-11T18:50:15.623Z", "date_only": false, "value": "2023-09-11T18:50:15.623Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2023-38743", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-09-11T19:15:00Z", "date_only": false, "value": "2023-09-11T19:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-38743", "record": "GSD-2023-38743", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2023-09-11T19:15:42Z", "date_only": false, "value": "2023-09-11T19:15:42Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-FQC8-FRH7-WJ3F", "record": "GHSA-FQC8-FRH7-WJ3F", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2023-09-11T19:15:42.890Z", "date_only": false, "value": "2023-09-11T19:15:42.890", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-38743", "record": "FKIE_CVE-2023-38743", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-09-11T21:30:16Z", "date_only": false, "value": "2023-09-11T21:30:16Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-FQC8-FRH7-WJ3F", "record": "GHSA-FQC8-FRH7-WJ3F", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-09-11T22:27:55Z", "date_only": false, "value": "2023-09-11T22:27:55.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/70231", "record": "CVE-2023-38743", "field": "creation_timestamp", "uuid": "880afe90-bc03-4139-84a9-18cccf8992db", "content": "\u203c CVE-2023-38743 \u203c\n\nZoho ManageEngine ADManager Plus before Build 7200 allows admin users to execute commands on the host machine.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/70231"}, {"timestamp": "2023-09-13T03:53:00Z", "date_only": false, "value": "2023-09-13T03:53Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-38743", "record": "GSD-2023-38743", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2023-10-05T16:38:00Z", "date_only": false, "value": "2023-10-05T16:38:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/1222", "record": "CVE-2023-38743", "field": "creation_timestamp", "uuid": "354b7531-a643-429d-a070-4a43cf5c2c5f", "content": "https://petrusviet.medium.com/cve-2023-38743-manageengine-admanager-command-injection-6afccbb196fe", "url": "https://t.me/CNArsenal/1222", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-10-06T06:39:32Z", "date_only": false, "value": "2023-10-06T06:39:32.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/9136", "record": "CVE-2023-38743", "field": "creation_timestamp", "uuid": "427d9ddc-40d5-4431-9c1e-48774e930459", "content": "#exploit\n1. MSIFortune - LPE with MSI Installers\nhttps://badoption.eu/blog/2023/10/03/MSIFortune.html\n\n2. CVE-2023-38743:\nManageEngine ADManager Command Injection\nhttps://github.com/PetrusViet/CVE-2023-38743\n\n3. IOS 17 Crash Exploit\nhttps://github.com/RapierXbox/ESP32-Sour-Apple\n\n4. CVE-2023-4911:\n\"Looney Tunables\"\nLPE in the glibc's ld*so\nhttps://www.qualys.com/2023/10/03/cve-2023-4911/looney-tunables-local-privilege-escalation-glibc-ld-so.txt\n]-> https://github.com/RickdeJager/CVE-2023-4911", "url": "https://t.me/CyberSecurityTechnologies/9136", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-10-08T23:47:00Z", "date_only": false, "value": "2023-10-08T23:47:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/3217", "record": "CVE-2023-38743", "field": "creation_timestamp", "uuid": "44b46ab3-2a03-419f-b4bb-bc3e21ac6282", "content": "Hackers Factory \n\nFast and customizable Firebase api and Project ID extractor .\n\nhttps://github.com/ProjectNull0/Firebase-exploit\n\n403/401 Bypass Methods + Bash Automation + Your Support \n\nhttps://github.com/Dheerajmadhukar/4-ZERO-3\n\nGCP-Pentest-Checklist - Reposting\n\nhttps://github.com/CyberSecurityUP/GCP-Pentest-Checklist\n\nOfficial repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( \u200c\u00b0 \u200c\u0296 \u200c\u00b0)...\n\nhttps://github.com/hktalent/scan4all\n\nUses a Exploit found by\u00a0@Willy-JL\u00a0and\u00a0@ECTO-1A\u00a0to crash IOS17 devices over bluetooth.\n\nhttps://github.com/RapierXbox/ESP32-Sour-Apple\n\nFind secrets and passwords in container images and file systems\n\nhttps://github.com/deepfence/SecretScanner\n\nManageEngine ADManager Command Injection\n\nhttps://github.com/PetrusViet/CVE-2023-38743\n\nCombining Sealighter with unpatched exploits to run the Threat-Intelligence ETW Provider\n\nhttps://github.com/pathtofile/SealighterTI\n\nSnoopy Command Logger is a small library that logs all program executions on your Linux/BSD system.\n\nhttps://github.com/a2o/snoopy\n\nA small and portable Windows C library for sandbox detection\n\nhttps://github.com/kargisimos/detenv\n\n\u514d\u8d39\u7684 ChatGPT \u955c\u50cf\u7f51\u7ad9\u5217\u8868\uff0c\u6301\u7eed\u66f4\u65b0\u3002List of free ChatGPT mirror sites, continuously updated\n\nhttps://github.com/LiLittleCat/awesome-free-chatgpt\n\nDocuments Exfiltration project for fun and educational purposes\n\nhttps://github.com/TheD1rkMtr/DocPlz\n\nDorks for Google, Shodan and BinaryEdge\n\nhttps://github.com/iGotRootSRC/Dorkers\n\nAwesome VirusTotal Intelligence Search Queries\n\nhttps://github.com/Neo23x0/vti-dorks\n\nTake a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more\n\nhttps://github.com/edoardottt/cariddi\n\nA lightweight tool for scraping current and historic Google Analytics data\n\nhttps://github.com/jclark1913/osint-google-analytics\n\nAthena OS is an Arch Linux-based distro focused on Cybersecurity. Learn, practice and enjoy with any hacking tool!\n\nhttps://github.com/Athena-OS/athena-iso\n\nOSINT tool to find informations about a github user (email2username, username2email, creation date\n\nhttps://github.com/hippiiee/osgint\n\nOSCP Cheatsheet \n\nhttps://github.com/0xSojalSec/OSCP-Cheatsheet\n\nThis repository contains Open Source freely usable Threat Intel feeds that can be used without additional requirements. Contains multiple types such as IP, URL, CVE and Hash.\n\nhttps://github.com/Bert-JanP/Open-Source-Threat-Intel-Feeds\n\nFree web-application vulnerability and version scanner\n\nhttps://github.com/fgeek/pyfiscan\n\nKubernetes Attack Graph\n\nhttps://github.com/DataDog/KubeHound\n\n#infosec #cybersecurity #hackersfactory \n\nhttps://t.me/dilagrafie", "url": "https://t.me/dilagrafie/3217", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-10-22T23:38:20Z", "date_only": false, "value": "2023-10-22T23:38:20.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/vWAIVOeT_IzeuZIw0wF5sXcBTpojv-A8JZVrt0MMrvV-", "record": "CVE-2023-38743", "field": "creation_timestamp", "uuid": "0843f40c-0827-4533-b3ee-c0aedb172130", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-12-13T01:20:36.106Z", "date_only": false, "value": "2023-12-13T01:20:36.106658Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-38743", "record": "GSD-2023-38743", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-04-04T07:35:48Z", "date_only": false, "value": "2024-04-04T07:35:48Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-FQC8-FRH7-WJ3F", "record": "GHSA-FQC8-FRH7-WJ3F", "field": "modified", "linked_record": true}, {"timestamp": "2024-08-02T17:54:38.338Z", "date_only": false, "value": "2024-08-02T17:54:38.338Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-38743", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-16T08:32:27Z", "date_only": false, "value": "2024-08-16T08:32:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Rootsec_2/1252", "record": "CVE-2023-38743", "field": "creation_timestamp", "uuid": "fc92cee0-974c-423a-801d-9aa088766d3c", "content": "#exploit\n1. MSIFortune - LPE with MSI Installers\nhttps://badoption.eu/blog/2023/10/03/MSIFortune.html\n\n2. CVE-2023-38743:\nManageEngine ADManager Command Injection\nhttps://github.com/PetrusViet/CVE-2023-38743\n\n3. IOS17 Crash Exploit\nhttps://github.com/RapierXbox/ESP32-Sour-Apple", "url": "https://t.me/Rootsec_2/1252", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-04-23T13:27:04.658Z", "date_only": false, "value": "2025-04-23T13:27:04.658440Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-38743", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-04-23T13:27:04.658Z", "date_only": false, "value": "2025-04-23T13:27:04.658440Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-38743", "record": "FKIE_CVE-2023-38743", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-05-05T15:18:09.400Z", "date_only": false, "value": "2025-05-05T15:18:09.400Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-38743", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-05-05T15:18:09.400Z", "date_only": false, "value": "2025-05-05T15:18:09.400Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-38743", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T06:11:05.010Z", "date_only": false, "value": "2026-06-17T06:11:05.010", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-38743", "record": "FKIE_CVE-2023-38743", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-09-01T17:00:17.131Z", "date_only": false, "value": "2026-09-01T17:00:17.131720Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/7244", "record": "CVE-2023-38743", "field": "creation_timestamp", "uuid": "c5d87211-b0ce-4fe6-a90f-d629e39a3600", "url": "https://t.me/cissp/7244"}, {"timestamp": "2026-09-09T20:00:06.404Z", "date_only": false, "value": "2026-09-09T20:00:06.404595Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/7244", "record": "CVE-2023-38743", "field": "creation_timestamp", "uuid": "88942f80-c19f-49dc-845a-560797475d04", "url": "https://t.me/cissp/7244", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}], "metrics": {"as_of": "2026-11-10T04:08:14.883Z", "anchors": {"origin": {"timestamp": "2023-09-11T00:00:00Z", "date_only": false, "value": "2023-09-11T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-38743", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2023-09-11T00:00:00Z", "date_only": false, "value": "2023-09-11T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-38743", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2023-10-05T16:38:00Z", "date_only": false, "value": "2023-10-05T16:38:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/1222", "record": "CVE-2023-38743", "field": "creation_timestamp", "uuid": "354b7531-a643-429d-a070-4a43cf5c2c5f", "content": "https://petrusviet.medium.com/cve-2023-38743-manageengine-admanager-command-injection-6afccbb196fe", "url": "https://t.me/CNArsenal/1222", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 2133480.0, "hours": 592.6333333333333, "days": 24.693055555555556, "min_seconds": 2047080.0, "max_seconds": 2133480.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-09-11T00:00:00Z", "date_only": false, "value": "2023-09-11T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-38743", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2023-10-05T16:38:00Z", "date_only": false, "value": "2023-10-05T16:38:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/1222", "record": "CVE-2023-38743", "field": "creation_timestamp", "uuid": "354b7531-a643-429d-a070-4a43cf5c2c5f", "content": "https://petrusviet.medium.com/cve-2023-38743-manageengine-admanager-command-injection-6afccbb196fe", "url": "https://t.me/CNArsenal/1222", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 99893294.88333, "hours": 27748.137467591667, "days": 1156.1723944829862, "min_seconds": 99806894.88333, "max_seconds": 99893294.88333, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-09-11T00:00:00Z", "date_only": false, "value": "2023-09-11T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-38743", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-10T04:08:14.883Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 97759814.88333, "hours": 27155.504134258335, "days": 1131.4793389274305, "min_seconds": 97759814.88333, "max_seconds": 97759814.88333, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-10-05T16:38:00Z", "date_only": false, "value": "2023-10-05T16:38:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/1222", "record": "CVE-2023-38743", "field": "creation_timestamp", "uuid": "354b7531-a643-429d-a070-4a43cf5c2c5f", "content": "https://petrusviet.medium.com/cve-2023-38743-manageengine-admanager-command-injection-6afccbb196fe", "url": "https://t.me/CNArsenal/1222", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-10T04:08:14.883Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}