{"metadata": {"vulnerability": "CVE-2023-39238", "count": 34, "kinds": {"milestone": 5, "sighting": 11, "kev": 0, "other": 18}}, "data": [{"timestamp": "2023-07-26T00:58:24.844Z", "date_only": false, "value": "2023-07-26T00:58:24.844Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-39238", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-09-06T10:16:19Z", "date_only": false, "value": "2023-09-06T10:16:19.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Russian_OSINT/2996", "record": "CVE-2023-39238", "field": "creation_timestamp", "uuid": "850a7837-6669-42c6-9364-87cadd1f3c4f", "content": "\u041c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u044b ASUS RT-AX55, RT-AX56U_V2 \u0438 RT-AC86U \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u2194\ufe0f3 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0432\u043b\u0430\u0434\u0435\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438.\n\n1\ufe0f\u20e3CVE-2023-39238 (CVSS 9.8)\n2\ufe0f\u20e3CVE-2023-39239 (CVSS 9.8)\n3\ufe0f\u20e3CVE-2023-39240 (CVSS 9.8)\n\nhttps://securityaffairs.com/150399/iot/asus-routers-critical-rces.html\n\n\ud83d\udee1 \u041f\u043e\u0434\u043f\u0438\u0441\u0430\u0442\u044c\u0441\u044f @Russian_OSINT", "url": "https://t.me/Russian_OSINT/2996"}, {"timestamp": "2023-09-07T00:00:00Z", "date_only": false, "value": "2023-09-07T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202309-0494", "record": "VAR-202309-0494", "field": "sources_update_date.data.0.date"}, {"timestamp": "2023-09-07T07:10:47.153Z", "date_only": false, "value": "2023-09-07T07:10:47.153Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-39238", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-09-07T08:15:07Z", "date_only": false, "value": "2023-09-07T08:15:07Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-R2Q6-VC3H-88W5", "record": "GHSA-R2Q6-VC3H-88W5", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-09-07T08:15:07.533Z", "date_only": false, "value": "2023-09-07T08:15:07.533000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202309-0494", "record": "VAR-202309-0494", "field": "sources_release_date.data.2.date"}, {"timestamp": "2023-09-07T08:15:07.533Z", "date_only": false, "value": "2023-09-07T08:15:07.533", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-39238", "record": "FKIE_CVE-2023-39238", "field": "published"}, {"timestamp": "2023-09-07T08:15:07.533Z", "date_only": false, "value": "2023-09-07T08:15:07.533", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2023-39238", "record": "GSD-2023-39238", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2023-09-07T09:30:15Z", "date_only": false, "value": "2023-09-07T09:30:15Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-R2Q6-VC3H-88W5", "record": "GHSA-R2Q6-VC3H-88W5", "field": "published"}, {"timestamp": "2023-09-07T12:18:30Z", "date_only": false, "value": "2023-09-07T12:18:30.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/70049", "record": "CVE-2023-39238", "field": "creation_timestamp", "uuid": "37284bab-67a4-4984-9e20-1b40857d6154", "content": "\u203c CVE-2023-39238 \u203c\n\nIt is identified a format string vulnerability in ASUS RT-AX56U V2. This vulnerability is caused by lacking validation for a specific value\u00c2\u00a0within its set_iperf3_svr.cgi module. An unauthenticated remote attacker can exploit this vulnerability without privilege to perform remote arbitrary code execution, arbitrary system operation or disrupt service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/70049"}, {"timestamp": "2023-09-15T01:00:00Z", "date_only": false, "value": "2023-09-15T01:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / twcert", "record": "CVE-2023-39238", "field": "containers.cna.datePublic"}, {"timestamp": "2023-12-13T01:20:33.784Z", "date_only": false, "value": "2023-12-13T01:20:33.784792Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-39238", "record": "GSD-2023-39238", "field": "gsd.osvSchema.modified"}, {"timestamp": "2023-12-15T00:00:00Z", "date_only": false, "value": "2023-12-15T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202309-0494", "record": "VAR-202309-0494", "field": "sources_release_date.data.1.date"}, {"timestamp": "2024-03-27T07:06:35.024Z", "date_only": false, "value": "2024-03-27T07:06:35.024Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / twcert", "record": "CVE-2023-39238", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-03-27T07:15:47.557Z", "date_only": false, "value": "2024-03-27T07:15:47.557000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202309-0494", "record": "VAR-202309-0494", "field": "sources_update_date.data.2.date"}, {"timestamp": "2024-03-27T07:15:47.557Z", "date_only": false, "value": "2024-03-27T07:15:47.557", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-39238", "record": "GSD-2023-39238", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-03-27T09:30:39Z", "date_only": false, "value": "2024-03-27T09:30:39Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-R2Q6-VC3H-88W5", "record": "GHSA-R2Q6-VC3H-88W5", "field": "modified"}, {"timestamp": "2024-05-31T05:28:00Z", "date_only": false, "value": "2024-05-31T05:28:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202309-0494", "record": "VAR-202309-0494", "field": "sources_update_date.data.1.date"}, {"timestamp": "2024-08-02T18:02:06.603Z", "date_only": false, "value": "2024-08-02T18:02:06.603Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-39238", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-14T15:36:46.328Z", "date_only": false, "value": "2024-08-14T15:36:46.328000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202309-0494", "record": "VAR-202309-0494", "field": "last_update_date"}, {"timestamp": "2024-09-21T22:29:39Z", "date_only": false, "value": "2024-09-21T22:29:39.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/3747", "record": "CVE-2023-39238", "field": "creation_timestamp", "uuid": "cf64e3ce-86be-44fe-93e3-321b67910136", "content": "Tools - Hackers Factory \n\nSUDO_KILLER: identify and exploit sudo rules\u2019 misconfigurations and vulnerabilities within sudo\n\nhttps://github.com/TH3xACE/SUDO_KILLER\n\n    ./sudo_killer.sh -c -e -r report.txt -p /tmp\n\nhttpx commands cheat sheet \n \nhttps://github.com/Ignitetechnologies/Mindmap/tree/main/httpx\n\nHunting for Unauthenticated n-days in Asus Routers \n \nhttps://github.com/ShielderSec/poc/tree/main/CVE-2023-39238\n\nIt's a bash script to help bypass HTTP 403 errors using path & header fuzzing, HTTP method & protocol version testing, and more. \n \nhttps://github.com/nazmul-ethi/Bypass-Four03\n\nGolang Function Recovery. java\n\nhttps://github.com/advanced-threat-research/GhidraScripts/blob/main/GolangFunctionRecovery.java\n\nDocker container for running CobaltStrike 4.10\n\nhttps://github.com/ZSECURE/zDocker-cobaltstrike\n\nGitHub - RootUp/SmuggleSheild: Basic protection against HTML smuggling attempts.\n\nhttps://github.com/RootUp/SmuggleSheild\n\nSome good tools for Bug Bounty Hunting\n\nhttps://github.com/Ignitetechnologies/Mindmap/blob/main/Tools/Bug%20Bounty%20Tools%20HD.png\n\n#CyberDilara\nhttps://t.me/CyberDilara", "url": "https://t.me/dilagrafie/3747"}, {"timestamp": "2024-09-21T23:29:28Z", "date_only": false, "value": "2024-09-21T23:29:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberDilara/943", "record": "CVE-2023-39238", "field": "creation_timestamp", "uuid": "90b907e6-32af-4d26-aae1-0aae2ea060f4", "content": "Tools - Hackers Factory \n\nSUDO_KILLER: identify and exploit sudo rules\u2019 misconfigurations and vulnerabilities within sudo\n\nhttps://github.com/TH3xACE/SUDO_KILLER\n\n\u00a0\u00a0\u00a0 ./sudo_killer.sh -c -e -r report.txt -p /tmp\n\nhttpx commands cheat sheet \n\nhttps://github.com/Ignitetechnologies/Mindmap/tree/main/httpx\n\nHunting for Unauthenticated n-days in Asus Routers \n\nhttps://github.com/ShielderSec/poc/tree/main/CVE-2023-39238\n\nIt's a bash script to help bypass HTTP 403 errors using path & header fuzzing, HTTP method & protocol version testing, and more. \n\nhttps://github.com/nazmul-ethi/Bypass-Four03\n\nGolang Function Recovery. java\n\nhttps://github.com/advanced-threat-research/GhidraScripts/blob/main/GolangFunctionRecovery.java\n\nDocker container for running CobaltStrike 4.10\n\nhttps://github.com/ZSECURE/zDocker-cobaltstrike\n\nGitHub - RootUp/SmuggleSheild: Basic protection against HTML smuggling attempts.\n\nhttps://github.com/RootUp/SmuggleSheild\n\nSome good tools for Bug Bounty Hunting\n\nhttps://github.com/Ignitetechnologies/Mindmap/blob/main/Tools/Bug%20Bounty%20Tools%20HD.png\n\n#CyberDilara\nhttps://t.me/CyberDilara", "url": "https://t.me/CyberDilara/943"}, {"timestamp": "2024-09-22T16:40:28Z", "date_only": false, "value": "2024-09-22T16:40:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/InfoSecInsider/23840", "record": "CVE-2023-39238", "field": "creation_timestamp", "uuid": "4256ae9f-3aca-4dbf-a81c-3371726a0468", "content": "Tools - Hackers Factory \n\nSUDO_KILLER: identify and exploit sudo rules\u2019 misconfigurations and vulnerabilities within sudo\n\nhttps://github.com/TH3xACE/SUDO_KILLER\n\n\u00a0\u00a0\u00a0 ./sudo_killer.sh -c -e -r report.txt -p /tmp\n\nhttpx commands cheat sheet \n\nhttps://github.com/Ignitetechnologies/Mindmap/tree/main/httpx\n\nHunting for Unauthenticated n-days in Asus Routers \n\nhttps://github.com/ShielderSec/poc/tree/main/CVE-2023-39238\n\nIt's a bash script to help bypass HTTP 403 errors using path & header fuzzing, HTTP method & protocol version testing, and more. \n\nhttps://github.com/nazmul-ethi/Bypass-Four03\n\nGolang Function Recovery. java\n\nhttps://github.com/advanced-threat-research/GhidraScripts/blob/main/GolangFunctionRecovery.java\n\nDocker container for running CobaltStrike 4.10\n\nhttps://github.com/ZSECURE/zDocker-cobaltstrike\n\nGitHub - RootUp/SmuggleSheild: Basic protection against HTML smuggling attempts.\n\nhttps://github.com/RootUp/SmuggleSheild\n\nSome good tools for Bug Bounty Hunting\n\nhttps://github.com/Ignitetechnologies/Mindmap/blob/main/Tools/Bug%20Bounty%20Tools%20HD.png\n\n#CyberDilara\nhttps://t.me/CyberDilara", "url": "https://t.me/InfoSecInsider/23840"}, {"timestamp": "2024-09-22T16:40:28Z", "date_only": false, "value": "2024-09-22T16:40:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/InfoSecInsider/343", "record": "CVE-2023-39238", "field": "creation_timestamp", "uuid": "38406854-3296-4744-b78d-b3b6abf004e4", "content": "Tools - Hackers Factory \n\nSUDO_KILLER: identify and exploit sudo rules\u2019 misconfigurations and vulnerabilities within sudo\n\nhttps://github.com/TH3xACE/SUDO_KILLER\n\n\u00a0\u00a0\u00a0 ./sudo_killer.sh -c -e -r report.txt -p /tmp\n\nhttpx commands cheat sheet \n\nhttps://github.com/Ignitetechnologies/Mindmap/tree/main/httpx\n\nHunting for Unauthenticated n-days in Asus Routers \n\nhttps://github.com/ShielderSec/poc/tree/main/CVE-2023-39238\n\nIt's a bash script to help bypass HTTP 403 errors using path & header fuzzing, HTTP method & protocol version testing, and more. \n\nhttps://github.com/nazmul-ethi/Bypass-Four03\n\nGolang Function Recovery. java\n\nhttps://github.com/advanced-threat-research/GhidraScripts/blob/main/GolangFunctionRecovery.java\n\nDocker container for running CobaltStrike 4.10\n\nhttps://github.com/ZSECURE/zDocker-cobaltstrike\n\nGitHub - RootUp/SmuggleSheild: Basic protection against HTML smuggling attempts.\n\nhttps://github.com/RootUp/SmuggleSheild\n\nSome good tools for Bug Bounty Hunting\n\nhttps://github.com/Ignitetechnologies/Mindmap/blob/main/Tools/Bug%20Bounty%20Tools%20HD.png\n\n#CyberDilara\nhttps://t.me/CyberDilara", "url": "https://t.me/InfoSecInsider/343"}, {"timestamp": "2024-09-22T21:41:16Z", "date_only": false, "value": "2024-09-22T21:41:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GrayHatsHack/7446", "record": "CVE-2023-39238", "field": "creation_timestamp", "uuid": "bc5e264b-5423-4815-b9d9-b205503a6070", "content": "Tools - Hackers Factory \n\nSUDO_KILLER: identify and exploit sudo rules\u2019 misconfigurations and vulnerabilities within sudo\n\nhttps://github.com/TH3xACE/SUDO_KILLER\n\n\u00a0\u00a0\u00a0 ./sudo_killer.sh -c -e -r report.txt -p /tmp\n\nhttpx commands cheat sheet \n\nhttps://github.com/Ignitetechnologies/Mindmap/tree/main/httpx\n\nHunting for Unauthenticated n-days in Asus Routers \n\nhttps://github.com/ShielderSec/poc/tree/main/CVE-2023-39238\n\nIt's a bash script to help bypass HTTP 403 errors using path & header fuzzing, HTTP method & protocol version testing, and more. \n\nhttps://github.com/nazmul-ethi/Bypass-Four03\n\nGolang Function Recovery. java\n\nhttps://github.com/advanced-threat-research/GhidraScripts/blob/main/GolangFunctionRecovery.java\n\nDocker container for running CobaltStrike 4.10\n\nhttps://github.com/ZSECURE/zDocker-cobaltstrike\n\nGitHub - RootUp/SmuggleSheild: Basic protection against HTML smuggling attempts.\n\nhttps://github.com/RootUp/SmuggleSheild\n\nSome good tools for Bug Bounty Hunting\n\nhttps://github.com/Ignitetechnologies/Mindmap/blob/main/Tools/Bug%20Bounty%20Tools%20HD.png\n\n#CyberDilara\nhttps://t.me/CyberDilara", "url": "https://t.me/GrayHatsHack/7446"}, {"timestamp": "2024-09-22T21:41:16Z", "date_only": false, "value": "2024-09-22T21:41:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GrayHatsHack/8785", "record": "CVE-2023-39238", "field": "creation_timestamp", "uuid": "d4f43d07-e8ed-43c6-a119-dbde10cfad33", "content": "Tools - Hackers Factory \n\nSUDO_KILLER: identify and exploit sudo rules\u2019 misconfigurations and vulnerabilities within sudo\n\nhttps://github.com/TH3xACE/SUDO_KILLER\n\n\u00a0\u00a0\u00a0 ./sudo_killer.sh -c -e -r report.txt -p /tmp\n\nhttpx commands cheat sheet \n\nhttps://github.com/Ignitetechnologies/Mindmap/tree/main/httpx\n\nHunting for Unauthenticated n-days in Asus Routers \n\nhttps://github.com/ShielderSec/poc/tree/main/CVE-2023-39238\n\nIt's a bash script to help bypass HTTP 403 errors using path & header fuzzing, HTTP method & protocol version testing, and more. \n\nhttps://github.com/nazmul-ethi/Bypass-Four03\n\nGolang Function Recovery. java\n\nhttps://github.com/advanced-threat-research/GhidraScripts/blob/main/GolangFunctionRecovery.java\n\nDocker container for running CobaltStrike 4.10\n\nhttps://github.com/ZSECURE/zDocker-cobaltstrike\n\nGitHub - RootUp/SmuggleSheild: Basic protection against HTML smuggling attempts.\n\nhttps://github.com/RootUp/SmuggleSheild\n\nSome good tools for Bug Bounty Hunting\n\nhttps://github.com/Ignitetechnologies/Mindmap/blob/main/Tools/Bug%20Bounty%20Tools%20HD.png\n\n#CyberDilara\nhttps://t.me/CyberDilara", "url": "https://t.me/GrayHatsHack/8785"}, {"timestamp": "2024-09-26T18:57:07.141Z", "date_only": false, "value": "2024-09-26T18:57:07.141155Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-39238", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2024-09-26T18:57:07.141Z", "date_only": false, "value": "2024-09-26T18:57:07.141155Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-39238", "record": "FKIE_CVE-2023-39238", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-09-26T18:58:30.829Z", "date_only": false, "value": "2024-09-26T18:58:30.829Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-39238", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-09-26T18:58:30.829Z", "date_only": false, "value": "2024-09-26T18:58:30.829Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-39238", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-13T12:01:29.286Z", "date_only": false, "value": "2025-01-13T12:01:29.286416Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/dragonjar/statuses/113820938242909207", "record": "CVE-2023-39238", "field": "creation_timestamp", "uuid": "721aaf1a-0204-4987-911b-149da549b6d6", "url": "https://infosec.exchange/users/dragonjar/statuses/113820938242909207"}, {"timestamp": "2026-06-17T06:11:49.580Z", "date_only": false, "value": "2026-06-17T06:11:49.580", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-39238", "record": "FKIE_CVE-2023-39238", "field": "lastModified"}, {"timestamp": "2026-08-27T09:00:03.534Z", "date_only": false, "value": "2026-08-27T09:00:03.534922Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehaking/2933", "record": "CVE-2023-39238", "field": "creation_timestamp", "uuid": "d6dbd654-ab58-490f-a21d-f95837e8ab3d", "url": "https://t.me/thehaking/2933"}, {"timestamp": "2026-08-28T00:01:00.074Z", "date_only": false, "value": "2026-08-28T00:01:00.074030Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thehaking/2933", "record": "CVE-2023-39238", "field": "creation_timestamp", "uuid": "90d98789-23fe-4877-811c-72458e531b74", "url": "https://t.me/thehaking/2933"}]}