{"metadata": {"vulnerability": "CVE-2023-46817", "count": 20, "kinds": {"milestone": 4, "sighting": 4, "kev": 0, "other": 12}}, "data": [{"timestamp": "2023-10-27T00:00:00Z", "date_only": false, "value": "2023-10-27T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-46817", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-11-03T00:00:00Z", "date_only": false, "value": "2023-11-03T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-46817", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-11-03T04:44:07.604Z", "date_only": false, "value": "2023-11-03T04:44:07.604Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2023-46817", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-11-03T05:15:00Z", "date_only": false, "value": "2023-11-03T05:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-46817", "record": "GSD-2023-46817", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2023-11-03T05:15:30Z", "date_only": false, "value": "2023-11-03T05:15:30Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-23QJ-5QGC-98RC", "record": "GHSA-23QJ-5QGC-98RC", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-11-03T05:15:30.867Z", "date_only": false, "value": "2023-11-03T05:15:30.867", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-46817", "record": "FKIE_CVE-2023-46817", "field": "published"}, {"timestamp": "2023-11-03T06:36:30Z", "date_only": false, "value": "2023-11-03T06:36:30Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-23QJ-5QGC-98RC", "record": "GHSA-23QJ-5QGC-98RC", "field": "published"}, {"timestamp": "2023-11-13T19:30:00Z", "date_only": false, "value": "2023-11-13T19:30Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-46817", "record": "GSD-2023-46817", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-12-13T01:20:52.878Z", "date_only": false, "value": "2023-12-13T01:20:52.878280Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-46817", "record": "GSD-2023-46817", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-06-16T22:40:45Z", "date_only": false, "value": "2024-06-16T22:40:45.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/10686", "record": "CVE-2023-46817", "field": "creation_timestamp", "uuid": "77eb5e90-c26b-4f11-b448-b04c5636cbbe", "content": "#exploit\n1. CVE-2023-46817:\nphpFox <=4.8.13 (redirect) PHP Object Injection\nhttps://karmainsecurity.com/pocs/CVE-2023-46817.php\n\n2. Magento CE RCE Exploit\nhttps://github.com/Hackhoven/Magento-RCE", "url": "https://t.me/CyberSecurityTechnologies/10686"}, {"timestamp": "2024-06-18T09:33:42Z", "date_only": false, "value": "2024-06-18T09:33:42.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/3316", "record": "CVE-2023-46817", "field": "creation_timestamp", "uuid": "75b8fc10-b392-49d3-90ca-9d47676e9851", "content": "Tools - Hackers Factory\n\nThis project generates DNS zonefiles with custom NSEC3 parameters to reproduce and evaluate the attacks in CVE-2023-50868. \n\nhttps://github.com/Goethe-Universitat-Cybersecurity/NSEC3-Encloser-Attack\n\nGitHub - kgdn/buffet: Web-based virtual machine manager - BSc. Computer Systems dissertation project (Heriot-Watt University)\n\nhttps://github.com/kgdn/buffet\n\nA full Mod_Security guide to use local software like clam-av, chkrootkit, fail2ban, rkhunter for Nginx & Apache \n\nhttps://github.com/VolkanSah/ModSecurity-Webserver-Protection-Guide\n\nMac RDP Client: Kerberos and Protected Users Guide\nhttps://awakecoding.com/posts/mac-rdp-client-kerberos-and-protected-users-guide/\n\n#exploit\n1. CVE-2023-46817:\nphpFox <=4.8.13 (redirect) PHP Object Injection\nhttps://karmainsecurity.com/pocs/CVE-2023-46817.php\n\n2. Magento CE RCE Exploit\nhttps://github.com/Hackhoven/Magento-RCE\n\n#tools #Offensive_security\n\n1. Tools for analyzing EDR agents\nhttps://github.com/outflanknl/edr-internals\n\n2. Benevolent Shellcode Loader\nhttps://github.com/jakobfriedl/BenevolentLoader\n\n#exploit\n1. CVE-2024-30850, CVE-2024-31839:\nCHAOS RAT v5.01 web panel RCE\nhttps://github.com/chebuya/CVE-2024-30850-chaos-rat-rce-poc\n\n2. CVE-2024-28995:\nSolarWinds Serv-U directory transversal\nhttps://github.com/rapid7/metasploit-framework/pull/19255\n\nhttps://attackerkb.com/topics/2k7UrkHyl3/cve-2024-28995/rapid7-analysis\n\n#reversing\n1. TempleOS Reverse Engineering\nhttps://starkeblog.com/bootsector/templeos/2024/06/13/templeos-reverse-engineering-part-i.html\n2. Thecus NAS Firmware Decryption\nhttps://starkeblog.com/cryptography/firmware/2024/06/11/thecus-nas-firmware-decrypt.html\n\nhttps://github.com/nstarke/thecus-firmware-decrypt\n\nHijack clicks on and within links, probably for client-side routing \n\n#Research\n\"Hyperlink Hijacking: Exploiting Erroneous URL Links to Phantom Domains\", 2024.\n\nhttps://github.com/mapbox/link-hijacker\n\n#exploit\n1. CVE-2022-41034:\nVSCode ipynb RCE\nhttps://packetstormsecurity.com/files/179029/VSCode-ipynb-Remote-Code-Execution.html\n\n2. CVE-2024-27801:\nUaF in NSXPC on all Apple platforms\nhttps://github.com/wangtielei/POCs/tree/main/CVE-2024-27801\n+ UAF in AGX (iOS <13):\nhttps://github.com/wangtielei/POCs/tree/main/No_CVE\n\n#HackersFactory", "url": "https://t.me/dilagrafie/3316"}, {"timestamp": "2024-06-18T09:33:59Z", "date_only": false, "value": "2024-06-18T09:33:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberDilara/200", "record": "CVE-2023-46817", "field": "creation_timestamp", "uuid": "89a9dea1-bc3d-4f7f-ae3d-affefaf09197", "content": "Tools - Hackers Factory\n\nThis project generates DNS zonefiles with custom NSEC3 parameters to reproduce and evaluate the attacks in CVE-2023-50868. \n\nhttps://github.com/Goethe-Universitat-Cybersecurity/NSEC3-Encloser-Attack\n\nGitHub - kgdn/buffet: Web-based virtual machine manager - BSc. Computer Systems dissertation project (Heriot-Watt University)\n\nhttps://github.com/kgdn/buffet\n\nA full Mod_Security guide to use local software like clam-av, chkrootkit, fail2ban, rkhunter for Nginx & Apache \n\nhttps://github.com/VolkanSah/ModSecurity-Webserver-Protection-Guide\n\nMac RDP Client: Kerberos and Protected Users Guide\nhttps://awakecoding.com/posts/mac-rdp-client-kerberos-and-protected-users-guide/\n\n#exploit\n1. CVE-2023-46817:\nphpFox <=4.8.13 (redirect) PHP Object Injection\nhttps://karmainsecurity.com/pocs/CVE-2023-46817.php\n\n2. Magento CE RCE Exploit\nhttps://github.com/Hackhoven/Magento-RCE\n\n#tools #Offensive_security\n\n1. Tools for analyzing EDR agents\nhttps://github.com/outflanknl/edr-internals\n\n2. Benevolent Shellcode Loader\nhttps://github.com/jakobfriedl/BenevolentLoader\n\n#exploit\n1. CVE-2024-30850, CVE-2024-31839:\nCHAOS RAT v5.01 web panel RCE\nhttps://github.com/chebuya/CVE-2024-30850-chaos-rat-rce-poc\n\n2. CVE-2024-28995:\nSolarWinds Serv-U directory transversal\nhttps://github.com/rapid7/metasploit-framework/pull/19255\n\nhttps://attackerkb.com/topics/2k7UrkHyl3/cve-2024-28995/rapid7-analysis\n\n#reversing\n1. TempleOS Reverse Engineering\nhttps://starkeblog.com/bootsector/templeos/2024/06/13/templeos-reverse-engineering-part-i.html\n2. Thecus NAS Firmware Decryption\nhttps://starkeblog.com/cryptography/firmware/2024/06/11/thecus-nas-firmware-decrypt.html\n\nhttps://github.com/nstarke/thecus-firmware-decrypt\n\nHijack clicks on and within links, probably for client-side routing \n\n#Research\n\"Hyperlink Hijacking: Exploiting Erroneous URL Links to Phantom Domains\", 2024.\n\nhttps://github.com/mapbox/link-hijacker\n\n#exploit\n1. CVE-2022-41034:\nVSCode ipynb RCE\nhttps://packetstormsecurity.com/files/179029/VSCode-ipynb-Remote-Code-Execution.html\n\n2. CVE-2024-27801:\nUaF in NSXPC on all Apple platforms\nhttps://github.com/wangtielei/POCs/tree/main/CVE-2024-27801\n+ UAF in AGX (iOS <13):\nhttps://github.com/wangtielei/POCs/tree/main/No_CVE\n\n#HackersFactory", "url": "https://t.me/CyberDilara/200"}, {"timestamp": "2024-06-18T09:34:50Z", "date_only": false, "value": "2024-06-18T09:34:50.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GrayHatsHack/6752", "record": "CVE-2023-46817", "field": "creation_timestamp", "uuid": "1f56bc79-fc51-46e0-b27f-cde2eb70917e", "content": "Tools - Hackers Factory\n\nThis project generates DNS zonefiles with custom NSEC3 parameters to reproduce and evaluate the attacks in CVE-2023-50868. \n\nhttps://github.com/Goethe-Universitat-Cybersecurity/NSEC3-Encloser-Attack\n\nGitHub - kgdn/buffet: Web-based virtual machine manager - BSc. Computer Systems dissertation project (Heriot-Watt University)\n\nhttps://github.com/kgdn/buffet\n\nA full Mod_Security guide to use local software like clam-av, chkrootkit, fail2ban, rkhunter for Nginx & Apache \n\nhttps://github.com/VolkanSah/ModSecurity-Webserver-Protection-Guide\n\nMac RDP Client: Kerberos and Protected Users Guide\nhttps://awakecoding.com/posts/mac-rdp-client-kerberos-and-protected-users-guide/\n\n#exploit\n1. CVE-2023-46817:\nphpFox <=4.8.13 (redirect) PHP Object Injection\nhttps://karmainsecurity.com/pocs/CVE-2023-46817.php\n\n2. Magento CE RCE Exploit\nhttps://github.com/Hackhoven/Magento-RCE\n\n#tools #Offensive_security\n\n1. Tools for analyzing EDR agents\nhttps://github.com/outflanknl/edr-internals\n\n2. Benevolent Shellcode Loader\nhttps://github.com/jakobfriedl/BenevolentLoader\n\n#exploit\n1. CVE-2024-30850, CVE-2024-31839:\nCHAOS RAT v5.01 web panel RCE\nhttps://github.com/chebuya/CVE-2024-30850-chaos-rat-rce-poc\n\n2. CVE-2024-28995:\nSolarWinds Serv-U directory transversal\nhttps://github.com/rapid7/metasploit-framework/pull/19255\n\nhttps://attackerkb.com/topics/2k7UrkHyl3/cve-2024-28995/rapid7-analysis\n\n#reversing\n1. TempleOS Reverse Engineering\nhttps://starkeblog.com/bootsector/templeos/2024/06/13/templeos-reverse-engineering-part-i.html\n2. Thecus NAS Firmware Decryption\nhttps://starkeblog.com/cryptography/firmware/2024/06/11/thecus-nas-firmware-decrypt.html\n\nhttps://github.com/nstarke/thecus-firmware-decrypt\n\nHijack clicks on and within links, probably for client-side routing \n\n#Research\n\"Hyperlink Hijacking: Exploiting Erroneous URL Links to Phantom Domains\", 2024.\n\nhttps://github.com/mapbox/link-hijacker\n\n#exploit\n1. CVE-2022-41034:\nVSCode ipynb RCE\nhttps://packetstormsecurity.com/files/179029/VSCode-ipynb-Remote-Code-Execution.html\n\n2. CVE-2024-27801:\nUaF in NSXPC on all Apple platforms\nhttps://github.com/wangtielei/POCs/tree/main/CVE-2024-27801\n+ UAF in AGX (iOS <13):\nhttps://github.com/wangtielei/POCs/tree/main/No_CVE\n\n#HackersFactory", "url": "https://t.me/GrayHatsHack/6752"}, {"timestamp": "2024-08-02T20:53:21.761Z", "date_only": false, "value": "2024-08-02T20:53:21.761Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-46817", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-09-06T13:48:02.933Z", "date_only": false, "value": "2024-09-06T13:48:02.933660Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-46817", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2024-09-06T13:48:02.933Z", "date_only": false, "value": "2024-09-06T13:48:02.933660Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-46817", "record": "FKIE_CVE-2023-46817", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-09-06T13:48:48.784Z", "date_only": false, "value": "2024-09-06T13:48:48.784Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-46817", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-09-06T13:48:48.784Z", "date_only": false, "value": "2024-09-06T13:48:48.784Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-46817", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-09-06T15:32:54Z", "date_only": false, "value": "2024-09-06T15:32:54Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-23QJ-5QGC-98RC", "record": "GHSA-23QJ-5QGC-98RC", "field": "modified"}, {"timestamp": "2026-06-17T06:31:41.930Z", "date_only": false, "value": "2026-06-17T06:31:41.930", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-46817", "record": "FKIE_CVE-2023-46817", "field": "lastModified"}]}