{"metadata": {"vulnerability": "CVE-2023-43770", "count": 81, "kinds": {"milestone": 8, "sighting": 38, "kev": 11, "other": 24}}, "data": [{"timestamp": "2023-09-21T22:00:00Z", "date_only": false, "value": "2023-09-21T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2425", "record": "WID-SEC-W-2023-2425", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-09-21T22:00:00Z", "date_only": false, "value": "2023-09-21T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2425", "record": "WID-SEC-W-2023-2425", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-09-21T22:00:00Z", "date_only": false, "value": "2023-09-21T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2425", "record": "WID-SEC-W-2023-2425", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-09-22T00:00:00Z", "date_only": false, "value": "2023-09-22T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-43770", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-09-22T00:00:00Z", "date_only": false, "value": "2023-09-22T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-43770", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-09-22T06:15:00Z", "date_only": false, "value": "2023-09-22T06:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2023-43770", "record": "UBUNTU-CVE-2023-43770", "field": "published"}, {"timestamp": "2023-09-22T06:15:10Z", "date_only": false, "value": "2023-09-22T06:15:10Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-G3FV-4F2H-XWV4", "record": "GHSA-G3FV-4F2H-XWV4", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-09-22T06:15:10.090Z", "date_only": false, "value": "2023-09-22T06:15:10.090", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-43770", "record": "FKIE_CVE-2023-43770", "field": "published"}, {"timestamp": "2023-09-22T06:15:10.090Z", "date_only": false, "value": "2023-09-22T06:15:10.090", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2023-43770", "record": "GSD-2023-43770", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2023-09-22T06:30:19Z", "date_only": false, "value": "2023-09-22T06:30:19Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-G3FV-4F2H-XWV4", "record": "GHSA-G3FV-4F2H-XWV4", "field": "published"}, {"timestamp": "2023-09-22T13:06:08.676Z", "date_only": false, "value": "2023-09-22T13:06:08.676Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2023-43770", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-09-24T22:00:00Z", "date_only": false, "value": "2023-09-24T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2425", "record": "WID-SEC-W-2023-2425", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-09-28T00:00:00Z", "date_only": false, "value": "2023-09-28T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0786", "record": "CERTFR-2023-AVI-0786", "field": "initial_release_date"}, {"timestamp": "2023-09-28T00:00:00Z", "date_only": false, "value": "2023-09-28T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0786", "record": "CERTFR-2023-AVI-0786", "field": "revisions.0.revision_date"}, {"timestamp": "2023-09-28T11:42:17Z", "date_only": false, "value": "2023-09-28T11:42:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/1202", "record": "CVE-2023-43770", "field": "creation_timestamp", "uuid": "0cff5d5b-63a9-42c1-86ad-1c8bf867576c", "content": "https://github.com/s3cb0y/CVE-2023-43770-POC\n\n#github #poc", "url": "https://t.me/CNArsenal/1202"}, {"timestamp": "2023-09-28T13:52:57Z", "date_only": false, "value": "2023-09-28T13:52:57.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/5238", "record": "CVE-2023-43770", "field": "creation_timestamp", "uuid": "f0571bf0-2abd-473d-972b-c72b10aceaa8", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aPoC for Stored XSS (CVE-2023-43770) Vulnerability\nURL\uff1ahttps://github.com/knight0x07/CVE-2023-43770-PoC\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/5238"}, {"timestamp": "2023-09-28T15:18:12Z", "date_only": false, "value": "2023-09-28T15:18:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/proxy_bar/1739", "record": "CVE-2023-43770", "field": "creation_timestamp", "uuid": "c146bd7b-f334-44a5-a734-71403345ab70", "content": "CVE-2023-43770\nmail server Roundcube\n*\nusage:\npython cve-2023-43770.py -e attacker@gmail.com -p Attack3rPwd -t victim@example.com\n*\nPOC exploit", "url": "https://t.me/proxy_bar/1739"}, {"timestamp": "2023-09-29T00:00:00Z", "date_only": false, "value": "2023-09-29T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0786", "record": "CERTFR-2023-AVI-0786", "field": "revisions.1.revision_date"}, {"timestamp": "2023-09-29T12:56:46Z", "date_only": false, "value": "2023-09-29T12:56:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/3148", "record": "CVE-2023-43770", "field": "creation_timestamp", "uuid": "d2f0a81c-f46e-4f81-980d-abe3611735ca", "content": "https://github.com/s3cb0y/CVE-2023-43770-POC", "url": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/3148"}, {"timestamp": "2023-09-29T21:53:15Z", "date_only": false, "value": "2023-09-29T21:53:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/jokerplstaeen/21199", "record": "CVE-2023-43770", "field": "creation_timestamp", "uuid": "0d6ce9c1-2821-4e39-b8ab-e6957b0ab607", "content": "\u062e\u0627\u062f\u0645 \u0627\u0644\u0628\u0631\u064a\u062f CVE-2023-43770 Roundcube * \u0627\u0644\u0627\u0633\u062a\u062e\u062f\u0627\u0645: python http:// cve-2023-43770.py -e Attacker@gmail.com -p Attack3rPwd -t \u0627\u0644\u0636\u062d\u064a\u0629@example.com * \u0627\u0633\u062a\u063a\u0644\u0627\u0644 POC \n https:// github.com /s3cb0y/CVE-202 3-43770-POC  \u062a\u062d\u0642\u0642 \u0645\u0646 \u0627\u0644\u062a\u063a\u0631\u064a\u062f\u0627\u062a \u0627\u0644\u0642\u062f\u064a\u0645\u0629 \u0644\u0640", "url": "https://t.me/jokerplstaeen/21199"}, {"timestamp": "2023-09-30T04:24:47Z", "date_only": false, "value": "2023-09-30T04:24:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/crackcodes/4393", "record": "CVE-2023-43770", "field": "creation_timestamp", "uuid": "112ebba2-1660-4da1-b085-25a051952cd7", "content": "Roundcube CVE-2023-43770 POC : Check\n\nCVE-2023-34040 RCE Exploit : Check\n\nNightmangle: Telegram Command And Control (C2) Agent : Check", "url": "https://t.me/crackcodes/4393"}, {"timestamp": "2023-09-30T04:25:30Z", "date_only": false, "value": "2023-09-30T04:25:30.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/wQTtnJs4bu2qpdkfBduUtEA8WULI7A-GTXrtlXHlEfx64Q", "record": "CVE-2023-43770", "field": "creation_timestamp", "uuid": "3db36f97-a4a7-43c5-9923-fd5042d433e5"}, {"timestamp": "2023-10-01T18:17:48Z", "date_only": false, "value": "2023-10-01T18:17:48.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ap_security/154", "record": "CVE-2023-43770", "field": "creation_timestamp", "uuid": "df510a7d-4a02-46cf-ac24-93c4efdb2baf", "content": "\u2604\ufe0fCVE-2023-43770: Mail Server Roundcube\n\n\ud83d\udce3\u0421\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 PoC:\nhttps://github.com/s3cb0y/CVE-2023-43770-POC\n\n#exploit  #poc #cve", "url": "https://t.me/ap_security/154"}, {"timestamp": "2023-10-01T18:17:48Z", "date_only": false, "value": "2023-10-01T18:17:48.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ap_security/89", "record": "CVE-2023-43770", "field": "creation_timestamp", "uuid": "8473fab6-4f35-4de0-9c62-f663e333c0e9", "content": "\u2604\ufe0fCVE-2023-43770: Mail Server Roundcube\n\n\ud83d\udce3\u0421\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 PoC:\nhttps://github.com/s3cb0y/CVE-2023-43770-POC\n\n#exploit  #poc #cve", "url": "https://t.me/ap_security/89"}, {"timestamp": "2023-10-10T20:32:25Z", "date_only": false, "value": "2023-10-10T20:32:25.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/3213", "record": "CVE-2023-43770", "field": "creation_timestamp", "uuid": "62958de2-dd15-4c99-83d7-b4d8cdc243dd", "content": "Hackers Factory \n\nInstagram-py performs slick brute force attack on Instagram without any type of password limiting\n\nand also resumes your attack in ease.\n\n\u2014DeathSec\n\nhttps://github.com/deathsec/instagram-py\n\nAn open-source self-hosted purple team management web application.\n\nhttps://github.com/CyberCX-STA/PurpleOps?mibextid=Zxz2cZ\n\nJust some lists of Malware Configs\n\nhttps://github.com/Gi7w0rm/MalwareConfigLists\n\na unique vocabulary that is 90% generated with OpenAI ChatGPT.\n\nhttps://github.com/reewardius/bbFuzzing.txt\n\nCVE-2023-20209\n\nhttps://github.com/0x41-Researcher/CVE-2023-20209\n\nOfficial repo for GPTFUZZER : Red Teaming Large Language Models with Auto-Generated Jailbreak Prompts\n\nhttps://github.com/sherdencooper/GPTFuzz\n\nAttackGen is a cybersecurity incident response testing tool that leverages the power of large language models and the comprehensive MITRE ATT&CK framework. The tool generates tailored incident response scenarios based on user-selected threat actor groups and your organisation's details\n\nhttps://github.com/mrwadams/attackgen\n\nA Proof-Of-Concept for the CVE-2023-43770 vulnerability.\n\nhttps://github.com/s3cb0y/CVE-2023-43770-POC\n\nreverse shell using curl\n\nhttps://github.com/irsl/curlshell\n\nCVE-2023-42820\n\nhttps://github.com/h4m5t/CVE-2023-42820\n\nGoCrack is a management frontend for password cracking tools written in Go\n\nhttps://github.com/mandiant/gocrack\n\nAsk a TGS on behalf of another user without password\n\nhttps://github.com/foxlox/GIUDA\n\nCVE-2023-42442\n\nhttps://github.com/HolyGu/CVE-2023-42442\n\nBypass the Event Trace Windows(ETW) and unhook ntdll.\n\nhttps://github.com/unkvolism/Fuck-Etw\n\nMicrosoft SharePoint Server Elevation of Privilege Vulnerability\n\nhttps://github.com/Chocapikk/CVE-2023-29357\n\nDorks-collections-list/onion.txt at main \u00b7 cipher387/Dorks-collections-list\n\nhttps://github.com/cipher387/Dorks-collections-list/blob/main/onion.txt\n\n#infosec #cybersecurity #hackersfactory\n\nhttps://t.me/dilagrafie", "url": "https://t.me/dilagrafie/3213"}, {"timestamp": "2023-11-13T00:00:00Z", "date_only": false, "value": "2023-11-13T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0786", "record": "CERTFR-2023-AVI-0786", "field": "last_revision_date"}, {"timestamp": "2023-11-13T00:00:00Z", "date_only": false, "value": "2023-11-13T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0786", "record": "CERTFR-2023-AVI-0786", "field": "revisions.2.revision_date"}, {"timestamp": "2023-11-16T15:04:39Z", "date_only": false, "value": "2023-11-16T15:04:39.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/hEtOOzXQkysV-hCJvvNeqNqzwY3K3JGquXeHHV3ZOFWEjw", "record": "CVE-2023-43770", "field": "creation_timestamp", "uuid": "750ede04-5ff2-4a8e-99a7-eca8faa3ecf5"}, {"timestamp": "2023-12-13T01:20:44.663Z", "date_only": false, "value": "2023-12-13T01:20:44.663605Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-43770", "record": "GSD-2023-43770", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-02-03T03:56:47Z", "date_only": false, "value": "2024-02-03T03:56:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/9109", "record": "CVE-2023-43770", "field": "creation_timestamp", "uuid": "6d5ddb7d-b113-40df-8d2a-ee3be312905d", "content": "#exploit\n1. CVE-2023-42442:\nJumpServer unauthorized access vulnerability\nhttps://github.com/HolyGu/CVE-2023-42442\n\n2. CVE-2023-43770:\nRoundcube allows XSS via text/plain e-mail messages\nhttps://github.com/s3cb0y/CVE-2023-43770-POC", "url": "https://t.me/CyberSecurityTechnologies/9109"}, {"timestamp": "2024-02-12T00:00:00Z", "date_only": false, "value": "2024-02-12T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2023-43770", "field": "timestamps.asserted_at", "uuid": "bea5bce6-24a4-443e-b2ef-9632e171d239", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-02-12T00:00:00Z", "date_only": false, "value": "2024-02-12T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2023-43770", "field": "timestamps.asserted_at", "uuid": "3c3c1d30-b0e3-4c0c-aaa3-57e166879818", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-02-12T00:00:00Z", "date_only": true, "value": "2024-02-12", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-43770", "field": "containers.adp.0.metrics.1.other.content.dateAdded"}, {"timestamp": "2024-02-12T00:00:00Z", "date_only": false, "value": "2024-02-12T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2023-43770", "field": "evidence.0.details.added_date", "uuid": "3c3c1d30-b0e3-4c0c-aaa3-57e166879818", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-02-12T00:00:00Z", "date_only": true, "value": "2024-02-12", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2023-43770", "field": "evidence.0.details.date_added", "uuid": "bea5bce6-24a4-443e-b2ef-9632e171d239", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-02-12T00:00:00Z", "date_only": false, "value": "2024-02-12T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2023-43770", "field": "timestamps.first_seen_at", "uuid": "bea5bce6-24a4-443e-b2ef-9632e171d239", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-02-12T00:00:00Z", "date_only": false, "value": "2024-02-12T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2023-43770", "field": "timestamps.first_seen_at", "uuid": "3c3c1d30-b0e3-4c0c-aaa3-57e166879818", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-02-12T00:00:00Z", "date_only": false, "value": "2024-02-12T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2023-43770", "field": "status.status_updated_at", "uuid": "bea5bce6-24a4-443e-b2ef-9632e171d239", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-02-12T00:00:00Z", "date_only": false, "value": "2024-02-12T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2023-43770", "field": "status.status_updated_at", "uuid": "3c3c1d30-b0e3-4c0c-aaa3-57e166879818", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-02-12T00:00:00Z", "date_only": false, "value": "2024-02-12T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-43770", "field": "containers.adp.0.timeline.0.time"}, {"timestamp": "2024-02-12T18:10:02Z", "date_only": false, "value": "2024-02-12T18:10:02.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2023-43770", "field": "creation_timestamp", "uuid": "1080e183-30c9-4185-bc5a-75577a833d23"}, {"timestamp": "2024-02-12T23:00:00Z", "date_only": false, "value": "2024-02-12T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2425", "record": "WID-SEC-W-2023-2425", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2024-02-12T23:00:00Z", "date_only": false, "value": "2024-02-12T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2425", "record": "WID-SEC-W-2023-2425", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-02-13T02:00:01.627Z", "date_only": false, "value": "2024-02-13T02:00:01.627", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-43770", "record": "GSD-2023-43770", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-02-13T06:14:55Z", "date_only": false, "value": "2024-02-13T06:14:55.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/KomunitiSiber/1481", "record": "CVE-2023-43770", "field": "creation_timestamp", "uuid": "55fb2419-8587-4150-b340-4dd013a85cd3", "content": "Alert: CISA Warns of Active 'Roundcube' Email Attacks - Patch Now\nhttps://thehackernews.com/2024/02/alert-cisa-warns-of-active-roundcube.html\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday\u00a0added\u00a0a medium-severity security flaw impacting Roundcube email software to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation.\nThe issue, tracked as\u00a0CVE-2023-43770\u00a0(CVSS score: 6.1), relates to a cross-site scripting (XSS) flaw that stems from the handling of", "url": "https://t.me/KomunitiSiber/1481"}, {"timestamp": "2024-02-13T06:35:27Z", "date_only": false, "value": "2024-02-13T06:35:27.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/xxgJ75DlLasyAbmQXHJZiGiEmTmR8CCae0CrlGGlkWkSAw", "record": "CVE-2023-43770", "field": "creation_timestamp", "uuid": "65c7309a-8c5f-46e6-9e19-48ce283e2e2a"}, {"timestamp": "2024-02-13T11:04:58Z", "date_only": false, "value": "2024-02-13T11:04:58.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/hXd4Pvb-dXWthzLckrqlrV-_CHqSIy3_moHpaUoT3WPw4Q", "record": "CVE-2023-43770", "field": "creation_timestamp", "uuid": "4f928c99-58d0-4e09-9813-542493e60c9b"}, {"timestamp": "2024-02-13T11:31:15Z", "date_only": false, "value": "2024-02-13T11:31:15.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/183745", "record": "CVE-2023-43770", "field": "creation_timestamp", "uuid": "be808164-8315-4e05-8ef7-98adfb3018bb", "content": "https://ift.tt/ua2Nshc\nRoundcube webmail XSS vulnerability exploited by attackers (CVE-2023-43770)", "url": "https://t.me/ctinow/183745"}, {"timestamp": "2024-02-13T14:09:32Z", "date_only": false, "value": "2024-02-13T14:09:32.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/information_security_channel/51522", "record": "CVE-2023-43770", "field": "creation_timestamp", "uuid": "0726f836-2144-4139-98e6-871aa76b33c5", "content": "CISA Warns of Roundcube Webmail Vulnerability Exploitation\nhttps://www.securityweek.com/cisa-warns-of-roundcube-webmail-vulnerability-exploitation/\n\nCISA has added the Roundcube flaw tracked as CVE-2023-43770 to its known exploited vulnerabilities catalog.\nThe post CISA Warns of Roundcube Webmail Vulnerability Exploitation (https://www.securityweek.com/cisa-warns-of-roundcube-webmail-vulnerability-exploitation/) appeared first on SecurityWeek (https://www.securityweek.com/).", "url": "https://t.me/information_security_channel/51522"}, {"timestamp": "2024-03-01T11:16:50Z", "date_only": false, "value": "2024-03-01T11:16:50.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/197505", "record": "CVE-2023-43770", "field": "creation_timestamp", "uuid": "89200c83-a9c2-43a3-8f1d-ec64c8c434a6", "content": "https://ift.tt/SDPKxH5\nCVE-2023-43770 Exploitation", "url": "https://t.me/ctinow/197505"}, {"timestamp": "2024-03-04T00:00:00Z", "date_only": true, "value": "2024-03-04", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2023-43770", "field": "evidence.0.details.due_date", "uuid": "bea5bce6-24a4-443e-b2ef-9632e171d239", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-03-12T15:01:01Z", "date_only": false, "value": "2024-03-12T15:01:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/beaverdreamer/99", "record": "CVE-2023-43770", "field": "creation_timestamp", "uuid": "834eb89e-166f-4c7e-b5b6-de7eb7002662", "content": "#Roundcube #phishing\n\nRoundcube CVE-2023-43770\n\nXSS \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u043f\u0438\u0441\u044c\u043c\u0430.\n\u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0441\u0432\u043e\u0434\u0438\u0442\u0441\u044f \u043a \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \\n[alert('CVE-2023-43770 POC')]\\n \u0432 \u043f\u0438\u0441\u044c\u043c\u0435 plain-\u0444\u043e\u0440\u043c\u0430\u0442\u0430\n\n\u041f\u0440\u0438\u043c\u0435\u0440 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 https://github.com/s3cb0y/CVE-2023-43770-POC", "url": "https://t.me/beaverdreamer/99"}, {"timestamp": "2024-04-24T17:42:10Z", "date_only": false, "value": "2024-04-24T17:42:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/T3PwYAaLXNUvxf0sq-I7OtOMJ9gXcLl3YbizQw_6jK9FM8w", "record": "CVE-2023-43770", "field": "creation_timestamp", "uuid": "1e73d571-560d-4007-9643-cc0ddcafbc68"}, {"timestamp": "2024-04-24T17:42:11Z", "date_only": false, "value": "2024-04-24T17:42:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/LockBitRaasRansomware/22825", "record": "CVE-2023-43770", "field": "creation_timestamp", "uuid": "54d7d35f-bfe7-4364-bcf1-bbe94a66ef16", "content": "https://github.com/s3cb0y/CVE-2023-43770-POC", "url": "https://t.me/LockBitRaasRansomware/22825"}, {"timestamp": "2024-05-01T18:43:07.516Z", "date_only": false, "value": "2024-05-01T18:43:07.516175Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-43770", "field": "containers.adp.0.metrics.2.other.content.timestamp"}, {"timestamp": "2024-05-01T18:43:07.516Z", "date_only": false, "value": "2024-05-01T18:43:07.516175Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-43770", "record": "FKIE_CVE-2023-43770", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-08-02T19:52:11.104Z", "date_only": false, "value": "2024-08-02T19:52:11.104Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-43770", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T17:58:45.783Z", "date_only": false, "value": "2024-08-15T17:58:45.783+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2425", "record": "WID-SEC-W-2023-2425", "field": "document.tracking.generator.date"}, {"timestamp": "2024-08-16T08:30:20Z", "date_only": false, "value": "2024-08-16T08:30:20.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Rootsec_2/1153", "record": "CVE-2023-43770", "field": "creation_timestamp", "uuid": "ba04f769-d0c6-4c50-b8b1-2f00d86aa6f3", "content": "#exploit\n1. CVE-2023-42442:\nJumpServer unauthorized access vulnerability\nhttps://github.com/HolyGu/CVE-2023-42442\n\n2. CVE-2023-43770:\nRoundcube allows XSS via text/plain e-mail messages\nhttps://github.com/s3cb0y/CVE-2023-43770-POC\n\n3. CVE-2023-42820:\nJumpServer - Random seed leakage results in the user password being reset\nhttps://github.com/h4m5t/CVE-2023-42820", "url": "https://t.me/Rootsec_2/1153"}, {"timestamp": "2025-02-23T02:10:52Z", "date_only": false, "value": "2025-02-23T02:10:52.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2023-43770", "field": "creation_timestamp", "uuid": "7ddf5f49-fcc7-4df5-965d-6169db573965"}, {"timestamp": "2025-04-20T17:00:09Z", "date_only": false, "value": "2025-04-20T17:00:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/_2iZhze6jswijCm6NsMkH5GB7hxCAMET0bj118-njZt1foI", "record": "CVE-2023-43770", "field": "creation_timestamp", "uuid": "3c226e33-cbcc-4b44-a499-767b3a9e1cb3"}, {"timestamp": "2025-10-21T23:05:36.969Z", "date_only": false, "value": "2025-10-21T23:05:36.969Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-43770", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:05:36.969Z", "date_only": false, "value": "2025-10-21T23:05:36.969Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-43770", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:32:50Z", "date_only": false, "value": "2025-10-22T00:32:50Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-G3FV-4F2H-XWV4", "record": "GHSA-G3FV-4F2H-XWV4", "field": "modified"}, {"timestamp": "2025-10-24T05:02:17Z", "date_only": false, "value": "2025-10-24T05:02:17Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2023-43770", "record": "UBUNTU-CVE-2023-43770", "field": "modified"}, {"timestamp": "2026-02-02T12:26:41.510Z", "date_only": false, "value": "2026-02-02T12:26:41.510614Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5715499d-83d3-4440-9649-c3058b603350", "record": "CVE-2023-43770", "field": "creation_timestamp", "uuid": "0c9f0099-2f69-42ae-95ec-d3f7e2fbb102", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5715499d-83d3-4440-9649-c3058b603350"}, {"timestamp": "2026-02-02T12:26:41.510Z", "date_only": false, "value": "2026-02-02T12:26:41.510614Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5715499d-83d3-4440-9649-c3058b603350", "record": "CVE-2023-43770", "field": "creation_timestamp", "uuid": "ad5bfa6f-4245-4b32-84cd-33d3720dcbc1", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5715499d-83d3-4440-9649-c3058b603350"}, {"timestamp": "2026-03-17T08:10:46.452Z", "date_only": false, "value": "2026-03-17T08:10:46.452834Z", "kind": "sighting", "label": "Seen", "source": "https://swecyb.com/ap/users/116080658609901341/statuses/116243491835752303", "record": "CVE-2023-43770", "field": "creation_timestamp", "uuid": "6dc5a8fa-e8be-46e7-8dfe-cca4e3c5618d", "url": "https://swecyb.com/ap/users/116080658609901341/statuses/116243491835752303"}, {"timestamp": "2026-06-17T06:26:24.770Z", "date_only": false, "value": "2026-06-17T06:26:24.770", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-43770", "record": "FKIE_CVE-2023-43770", "field": "lastModified"}, {"timestamp": "2026-06-19T12:46:42.409Z", "date_only": false, "value": "2026-06-19T12:46:42.409193Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/dde1bcd4-6191-47c2-846b-92bdfaacb397", "record": "CVE-2023-43770", "field": "creation_timestamp", "uuid": "4a9e7622-1dea-4ffd-8f4f-b45cdc75d463", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/dde1bcd4-6191-47c2-846b-92bdfaacb397"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2023-43770", "field": "timestamps.recorded_at", "uuid": "3c3c1d30-b0e3-4c0c-aaa3-57e166879818", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:14:19.634Z", "date_only": false, "value": "2026-06-23T11:14:19.634988Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/3c3c1d30-b0e3-4c0c-aaa3-57e166879818", "record": "CVE-2023-43770", "field": "creation_timestamp", "uuid": "1dc29e83-9a1d-4e16-848c-29b48636bbe2", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/3c3c1d30-b0e3-4c0c-aaa3-57e166879818"}, {"timestamp": "2026-06-23T14:05:51.193Z", "date_only": false, "value": "2026-06-23T14:05:51.193493Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0ced653c-00f1-44bc-83d7-2f384114a2a7", "record": "CVE-2023-43770", "field": "creation_timestamp", "uuid": "def401b2-12db-4447-a68a-d456ee785acc", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0ced653c-00f1-44bc-83d7-2f384114a2a7"}, {"timestamp": "2026-07-06T11:00:13.309Z", "date_only": false, "value": "2026-07-06T11:00:13.309433Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/169", "record": "CVE-2023-43770", "field": "creation_timestamp", "uuid": "9acab6c8-d401-4c80-a393-6d145d5b20db", "url": "https://t.me/ZerodayAlert/169"}, {"timestamp": "2026-07-07T00:00:21.394Z", "date_only": false, "value": "2026-07-07T00:00:21.394646Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/169", "record": "CVE-2023-43770", "field": "creation_timestamp", "uuid": "f8ac36a7-e470-4615-8c5e-828c8b46bc09", "url": "https://t.me/ZerodayAlert/169"}, {"timestamp": "2026-07-12T02:00:05.656Z", "date_only": false, "value": "2026-07-12T02:00:05.656754Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/169", "record": "CVE-2023-43770", "field": "creation_timestamp", "uuid": "7c2c4cc6-ebdf-405b-81a5-34c9ad0740bc", "url": "https://t.me/ZerodayAlert/169"}, {"timestamp": "2026-07-13T00:00:54.442Z", "date_only": false, "value": "2026-07-13T00:00:54.442039Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/169", "record": "CVE-2023-43770", "field": "creation_timestamp", "uuid": "02753fec-1c56-4d92-a042-2af69298d60d", "url": "https://t.me/ZerodayAlert/169"}, {"timestamp": "2026-08-27T16:00:03.476Z", "date_only": false, "value": "2026-08-27T16:00:03.476641Z", "kind": "sighting", "label": "Seen", "source": "Telegram/tjdPFWmK8d3uOi_c7fBL4_SWiO2RjxR5x57I46YuEU7JS4U", "record": "CVE-2023-43770", "field": "creation_timestamp", "uuid": "3a8eb81e-1f71-4524-9a72-04b56428a7a9"}, {"timestamp": "2026-09-01T20:00:46.379Z", "date_only": false, "value": "2026-09-01T20:00:46.379378Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/122042", "record": "CVE-2023-43770", "field": "creation_timestamp", "uuid": "fee7a5bc-224e-4cf9-89c0-428c6d317a73", "url": "https://t.me/hacking_Attack/122042"}, {"timestamp": "2026-09-04T03:00:04.292Z", "date_only": false, "value": "2026-09-04T03:00:04.292243Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/122042", "record": "CVE-2023-43770", "field": "creation_timestamp", "uuid": "4bcc7bc1-7233-4c63-9a8b-86c6d6588d20", "url": "https://t.me/hacking_Attack/122042"}, {"timestamp": "2026-11-04T13:00:01Z", "date_only": false, "value": "2026-11-04T13:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2023-43770", "field": "timestamps.recorded_at", "uuid": "bea5bce6-24a4-443e-b2ef-9632e171d239", "status": {"status_reason": "confirmed", "exploited": true}}]}