{"metadata": {"vulnerability": "CVE-2024-43044", "count": 114, "kinds": {"milestone": 14, "sighting": 44, "kev": 0, "other": 56}}, "data": [{"timestamp": "2024-08-05T12:46:38.501Z", "date_only": false, "value": "2024-08-05T12:46:38.501Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-43044", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-08-07T00:00:00Z", "date_only": false, "value": "2024-08-07T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2024:5405", "record": "RHSA-2024:5405", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-08-07T00:00:00Z", "date_only": false, "value": "2024-08-07T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2024:5406", "record": "RHSA-2024:5406", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-08-07T00:00:00Z", "date_only": false, "value": "2024-08-07T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2024:5410", "record": "RHSA-2024:5410", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-08-07T00:00:00Z", "date_only": false, "value": "2024-08-07T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2024:5411", "record": "RHSA-2024:5411", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-08-07T13:27:11.438Z", "date_only": false, "value": "2024-08-07T13:27:11.438Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-43044", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-08-07T13:27:11.438Z", "date_only": false, "value": "2024-08-07T13:27:11.438Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / jenkins", "record": "CVE-2024-43044", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-07T14:15:33Z", "date_only": false, "value": "2024-08-07T14:15:33Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-H856-FFVV-XVR4", "record": "GHSA-H856-FFVV-XVR4", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-08-07T14:15:33Z", "date_only": false, "value": "2024-08-07T14:15:33.000", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-43044", "record": "FKIE_CVE-2024-43044", "field": "published"}, {"timestamp": "2024-08-07T14:20:25.491Z", "date_only": false, "value": "2024-08-07T14:20:25.491155+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2024:5405", "record": "RHSA-2024:5405", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2024-08-07T14:20:25.491Z", "date_only": false, "value": "2024-08-07T14:20:25.491155+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2024:5406", "record": "RHSA-2024:5406", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2024-08-07T14:20:25.491Z", "date_only": false, "value": "2024-08-07T14:20:25.491155+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2024:5410", "record": "RHSA-2024:5410", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2024-08-07T14:20:25.491Z", "date_only": false, "value": "2024-08-07T14:20:25.491155+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2024:5411", "record": "RHSA-2024:5411", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2024-08-07T15:30:42Z", "date_only": false, "value": "2024-08-07T15:30:42Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-H856-FFVV-XVR4", "record": "GHSA-H856-FFVV-XVR4", "field": "published"}, {"timestamp": "2024-08-07T16:58:03Z", "date_only": false, "value": "2024-08-07T16:58:03.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/2685", "record": "CVE-2024-43044", "field": "creation_timestamp", "uuid": "bc3511d2-8640-45f9-a1bb-5c8b92295f0e", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-43044 - Jenkins Remoting ClassLoaderProxy File Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-43044 \nPublished : Aug. 7, 2024, 2:15 p.m. | 33\u00a0minutes ago \nDescription : Jenkins 2.470 and earlier, LTS 2.452.3 and earlier allows agent processes to read arbitrary files from the Jenkins controller file system by using the `ClassLoaderProxy#fetchJar` method in the Remoting library. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/2685"}, {"timestamp": "2024-08-07T17:28:25.431Z", "date_only": false, "value": "2024-08-07T17:28:25.431874Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-43044", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2024-08-07T17:28:25.431Z", "date_only": false, "value": "2024-08-07T17:28:25.431874Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-43044", "record": "FKIE_CVE-2024-43044", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-08-07T22:00:00Z", "date_only": false, "value": "2024-08-07T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1795", "record": "WID-SEC-W-2024-1795", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-08-07T22:00:00Z", "date_only": false, "value": "2024-08-07T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1795", "record": "WID-SEC-W-2024-1795", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-08-07T22:00:00Z", "date_only": false, "value": "2024-08-07T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1795", "record": "WID-SEC-W-2024-1795", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-08-09T07:23:05.050Z", "date_only": false, "value": "2024-08-09T07:23:05.050Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-JENKINS-2024-43044", "record": "BIT-JENKINS-2024-43044", "field": "published"}, {"timestamp": "2024-08-09T15:10:26Z", "date_only": false, "value": "2024-08-09T15:10:26.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8222", "record": "CVE-2024-43044", "field": "creation_timestamp", "uuid": "54e8d20f-2ec5-489b-9d60-8428a5f64e3a", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aThis repository provides a workaround preventing exploitation of SECURITY-3430 / CVE-2024-43044\nURL\uff1ahttps://github.com/jenkinsci-cert/SECURITY-3430\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8222"}, {"timestamp": "2024-08-13T07:41:52Z", "date_only": false, "value": "2024-08-13T07:41:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8253", "record": "CVE-2024-43044", "field": "creation_timestamp", "uuid": "8416df51-599f-4bed-bd39-818fb8080861", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-43044\u7684\u5229\u7528\u65b9\u5f0f\nURL\uff1ahttps://github.com/v9d0g/CVE-2024-43044-POC\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8253"}, {"timestamp": "2024-08-14T15:47:29Z", "date_only": false, "value": "2024-08-14T15:47:29+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2024:5405", "record": "RHSA-2024:5405", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-08-14T15:47:29Z", "date_only": false, "value": "2024-08-14T15:47:29+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2024:5405", "record": "RHSA-2024:5405", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2024-08-14T15:47:29Z", "date_only": false, "value": "2024-08-14T15:47:29+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2024:5405", "record": "RHSA-2024:5405", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-08-14T16:14:19Z", "date_only": false, "value": "2024-08-14T16:14:19+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2024:5406", "record": "RHSA-2024:5406", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-08-14T16:14:19Z", "date_only": false, "value": "2024-08-14T16:14:19+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2024:5406", "record": "RHSA-2024:5406", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2024-08-14T16:14:19Z", "date_only": false, "value": "2024-08-14T16:14:19+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2024:5406", "record": "RHSA-2024:5406", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-08-14T17:42:05Z", "date_only": false, "value": "2024-08-14T17:42:05+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2024:5410", "record": "RHSA-2024:5410", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-08-14T17:42:05Z", "date_only": false, "value": "2024-08-14T17:42:05+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2024:5410", "record": "RHSA-2024:5410", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2024-08-14T17:42:05Z", "date_only": false, "value": "2024-08-14T17:42:05+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2024:5410", "record": "RHSA-2024:5410", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-08-14T17:42:14Z", "date_only": false, "value": "2024-08-14T17:42:14+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2024:5411", "record": "RHSA-2024:5411", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-08-14T17:42:14Z", "date_only": false, "value": "2024-08-14T17:42:14+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2024:5411", "record": "RHSA-2024:5411", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2024-08-14T17:42:14Z", "date_only": false, "value": "2024-08-14T17:42:14+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2024:5411", "record": "RHSA-2024:5411", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-08-14T22:00:00Z", "date_only": false, "value": "2024-08-14T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1795", "record": "WID-SEC-W-2024-1795", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2024-08-14T22:00:00Z", "date_only": false, "value": "2024-08-14T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1795", "record": "WID-SEC-W-2024-1795", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-08-15T18:12:05.671Z", "date_only": false, "value": "2024-08-15T18:12:05.671+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1795", "record": "WID-SEC-W-2024-1795", "field": "document.tracking.generator.date"}, {"timestamp": "2024-08-29T14:57:41Z", "date_only": false, "value": "2024-08-29T14:57:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8407", "record": "CVE-2024-43044", "field": "creation_timestamp", "uuid": "b10660f1-d6ef-4059-9887-d6859af1f012", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aExploit for the vulnerability CVE-2024-43044 in Jenkins\nURL\uff1ahttps://github.com/convisolabs/CVE-2024-43044-jenkins\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8407"}, {"timestamp": "2024-08-29T15:19:28Z", "date_only": false, "value": "2024-08-29T15:19:28.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/8408", "record": "CVE-2024-43044", "field": "creation_timestamp", "uuid": "39f93569-c6d2-454a-9764-d05e3ba6dcd4", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aExploit for the vulnerability CVE-2024-43044 in Jenkins\nURL\uff1ahttps://github.com/identity-threat-labs/Article-RegreSSHion-CVE-2024-6387\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8408"}, {"timestamp": "2024-08-30T10:45:41Z", "date_only": false, "value": "2024-08-30T10:45:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thebugbountyhunter/9079", "record": "CVE-2024-43044", "field": "creation_timestamp", "uuid": "a8e18f0f-8f7b-4bb5-a01c-d0abbe68eb5c", "content": "Analysis of CVE-2024-43044 \u2014 From file read to RCE in Jenkins through agents\n\nhttps://blog.convisoappsec.com/en/analysis-of-cve-2024-43044/", "url": "https://t.me/thebugbountyhunter/9079"}, {"timestamp": "2024-08-30T12:03:40Z", "date_only": false, "value": "2024-08-30T12:03:40.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/proxy_bar/2253", "record": "CVE-2024-43044", "field": "creation_timestamp", "uuid": "7fbb8da6-bd5a-40e1-9c54-437bcdfb2089", "content": "CVE-2024-43044  Jenkins \n*\nWriteUP\n*\nPOC exploit\n\n#jenkins", "url": "https://t.me/proxy_bar/2253"}, {"timestamp": "2024-08-30T16:58:51Z", "date_only": false, "value": "2024-08-30T16:58:51.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BlackHat0Hackers/3134", "record": "CVE-2024-43044", "field": "creation_timestamp", "uuid": "f0ecce00-6a1c-45a5-ac57-a189a8ae4208", "content": "CVE-2024-43044 Arbitrary file read vulnerability through agent connections can lead to RCE in Jenkins\n\nThe exploit will use the vulnerability to read files to forge a remember-me cookie for an admin account and gain access to Jenkins scripting engine.\n\nBlog: https://blog.convisoappsec.com/en/analysis-of-cve-2024-43044/\n\nSearch Query:\nHUNTER:/product.name=\"Jenkins\"\nSHODAN: product:\"Jenkins\"\nFOFA: app=\"Jenkins\"\nZoomEye: app:\"Jenkins\"", "url": "https://t.me/BlackHat0Hackers/3134"}, {"timestamp": "2024-08-30T18:57:16Z", "date_only": false, "value": "2024-08-30T18:57:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackerArsenal/237", "record": "CVE-2024-43044", "field": "creation_timestamp", "uuid": "c2c55805-6f05-4d5e-b96c-eaccfaa8b114", "content": "CVE-2024-43044  Jenkins \n*\nWriteUP\n*\nPOC exploit\n\n#jenkins", "url": "https://t.me/HackerArsenal/237"}, {"timestamp": "2024-08-30T21:07:09Z", "date_only": false, "value": "2024-08-30T21:07:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/zer0day1ab/227", "record": "CVE-2024-43044", "field": "creation_timestamp", "uuid": "31497d21-5522-4873-b440-227c77859157", "content": "CVE-2024-43044 Arbitrary file read vulnerability through agent connections can lead to RCE\n\nThe exploit will use the vulnerability to read files to forge a remember-me cookie for an admin account and gain access to Jenkins scripting engine.\n\nBlog: https://blog.convisoappsec.com/en/analysis-of-cve-2024-43044/\n\nSearch Query:\nHUNTER:/product.name=\"Jenkins\"\nSHODAN: product:\"Jenkins\"\nFOFA: app=\"Jenkins\"\nZoomEye: app:\"Jenkins\"", "url": "https://t.me/zer0day1ab/227"}, {"timestamp": "2024-08-30T21:14:44Z", "date_only": false, "value": "2024-08-30T21:14:44.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/Rootsec_2/4316", "record": "CVE-2024-43044", "field": "creation_timestamp", "uuid": "8343e8cf-1df8-49b0-9bd5-17b5c1b9a3f8", "content": "CVE-2024-43044 Arbitrary file read vulnerability through agent connections can lead to RCE\n\nThe exploit will use the vulnerability to read files to forge a remember-me cookie for an admin account and gain access to Jenkins scripting engine.\n\nBlog: https://blog.convisoappsec.com/en/analysis-of-cve-2024-43044/\n\nSearch Query:\nHUNTER:/product.name=\"Jenkins\"\nSHODAN: product:\"Jenkins\"\nFOFA: app=\"Jenkins\"\nZoomEye: app:\"Jenkins\"", "url": "https://t.me/Rootsec_2/4316"}, {"timestamp": "2024-08-30T22:05:23Z", "date_only": false, "value": "2024-08-30T22:05:23.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dc_main/6608", "record": "CVE-2024-43044", "field": "creation_timestamp", "uuid": "ac007f95-8678-4e8c-be3e-c4436fec9d46", "content": "CVE-2024-43044 Arbitrary file read vulnerability through agent connections can lead to RCE\n\nThe exploit will use the vulnerability to read files to forge a remember-me cookie for an admin account and gain access to Jenkins scripting engine.\n\nBlog: https://blog.convisoappsec.com/en/analysis-of-cve-2024-43044/\n\nSearch Query:\nHUNTER:/product.name=\"Jenkins\"\nSHODAN: product:\"Jenkins\"\nFOFA: app=\"Jenkins\"\nZoomEye: app:\"Jenkins\"", "url": "https://t.me/dc_main/6608"}, {"timestamp": "2024-09-02T07:27:44Z", "date_only": false, "value": "2024-09-02T07:27:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/purple_medved/285", "record": "CVE-2024-43044", "field": "creation_timestamp", "uuid": "7f706b1f-3797-46ae-bf69-ca5688d0ee42", "content": "CVE-2024-43044: From file read to RCE in Jenkins\n\n\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0434\u0435\u0442\u0430\u043b\u0438 \u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2024-43044 (\u043e\u0446\u0435\u043d\u043a\u0430 \u043f\u043e CVSS=8.8) Path Traversal, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 Jenkins.\n\n\u0421\u0443\u0442\u044c \u0431\u0430\u0433\u0438 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u0439 \u0430\u0433\u0435\u043d\u0442 \u043c\u043e\u0436\u0435\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0441 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430, \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e Path Traversal \u0432 ClassLoaderProxy#fetchJar \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 Remoting/Hudson library, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0442\u0432\u0435\u0447\u0430\u0435\u0442 \u0437\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 jar \u0444\u0430\u0439\u043b\u043e\u0432 \u0441 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u043d\u0430 \u0430\u0433\u0435\u043d\u0442\u044b.\n\n\u041f\u043e\u043b\u0443\u0447\u0438\u0432 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0447\u0442\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u043c\u043e\u0436\u043d\u043e \u043f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c CVE-2024-23897, \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0432\u0430\u043b\u0438\u0434\u043d\u044b\u0435 \"Remember me\" cookie \u0434\u043b\u044f \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u043d\u0441\u043e\u043b\u044c Groovy (Jenkins Scripting Engine).\n\n\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u0438\u043c\u0435\u0435\u0442 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0440\u0435\u0436\u0438\u043c\u043e\u0432 \u0440\u0430\u0431\u043e\u0442\u044b \u0434\u043b\u044f Inbound (JNLP) \u0438\u043b\u0438 SSH \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u0432 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0430\u0433\u0435\u043d\u0442\u043e\u0432 \u043a \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0443 \u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u044b\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u0445\u044d\u0448\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0432\u0441\u0435\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 John The Ripper\ud83d\ude0e\n\u0422\u0430\u043a\u0438\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u043e\u0442\u043b\u043e\u043c\u0430\u0432 \u0442\u0430\u0447\u043a\u0443 \u0441 \u0430\u0433\u0435\u043d\u0442\u043e\u043c, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0442\u044c \u0430\u0442\u0430\u043a\u0443 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 Jenkins \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u0435 \u0442\u0430\u0447\u043a\u0438 \u0441 \u0430\u0433\u0435\u043d\u0442\u0430\u043c\u0438.\n\n\u2699\ufe0f POC: https://github.com/convisolabs/CVE-2024-43044-jenkins\n\ud83e\udeb2 \u0423\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u041f\u041e: Jenkins \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 Jenkins 2.471 \u0438 LTS 2.452.4, LTS 2.462.1\n\u2705 \u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438: \u041f\u0430\u0442\u0447 \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d, \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 32.471 \u0438 LTS 2.452.4, LTS 2.462.1", "url": "https://t.me/purple_medved/285"}, {"timestamp": "2024-09-03T15:37:31Z", "date_only": false, "value": "2024-09-03T15:37:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackerArsenal/253", "record": "CVE-2024-43044", "field": "creation_timestamp", "uuid": "be525946-b26a-42e8-8a6b-1dbd72938eba", "content": "#exploit\n1. CVE-2024-43044:\nFrom file read to RCE in Jenkins through agents\nhttps://blog.convisoappsec.com/en/analysis-of-cve-2024-43044\n\n2. CVE-2024-42815:\nBuffer Overflow in TP-Link Routers\nhttps://securityonline.info/cve-2024-42815-cvss-9-8-buffer-overflow-flaw-in-tp-link-routers-opens-door-to-rce", "url": "https://t.me/HackerArsenal/253"}, {"timestamp": "2024-09-03T18:35:59Z", "date_only": false, "value": "2024-09-03T18:35:59.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CNArsenal/3109", "record": "CVE-2024-43044", "field": "creation_timestamp", "uuid": "5a6dcb2f-621b-4331-9b92-03764364c25f", "content": "https://blog.convisoappsec.com/en/analysis-of-cve-2024-43044/\n\nAnalysis of CVE-2024-43044 \u2014 From file read to RCE in Jenkins through agents\n#\u5206\u6790", "url": "https://t.me/CNArsenal/3109"}, {"timestamp": "2024-09-04T04:21:25Z", "date_only": false, "value": "2024-09-04T04:21:25.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/11077", "record": "CVE-2024-43044", "field": "creation_timestamp", "uuid": "e703a03a-a8ce-4fee-ac0d-09adb897f1ad", "content": "#exploit\n1. CVE-2024-43044:\nFrom file read to RCE in Jenkins through agents\nhttps://blog.convisoappsec.com/en/analysis-of-cve-2024-43044\n\n2. CVE-2024-42815:\nBuffer Overflow in TP-Link Routers\nhttps://securityonline.info/cve-2024-42815-cvss-9-8-buffer-overflow-flaw-in-tp-link-routers-opens-door-to-rce\n\n3. CVE-2024-37084:\nSpring Cloud RCE\nhttps://blog.securelayer7.net/spring-cloud-skipper-vulnerability", "url": "https://t.me/CyberSecurityTechnologies/11077"}, {"timestamp": "2024-09-08T17:47:08Z", "date_only": false, "value": "2024-09-08T17:47:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackingInsights/12387", "record": "CVE-2024-43044", "field": "creation_timestamp", "uuid": "7bb247d8-0696-43b9-adfb-945379b0fba8", "content": "\u200aCVE-2024-43044: Critical Jenkins Vulnerability Exposes Servers to RCE, PoC Exploit Published\n\nhttps://securityonline.info/cve-2024-43044-critical-jenkins-vulnerability-exposes-servers-to-rce-poc-exploit-published/", "url": "https://t.me/HackingInsights/12387"}, {"timestamp": "2024-09-27T18:49:57Z", "date_only": false, "value": "2024-09-27T18:49:57.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/JGfzzXtxFrlVd1kwyDuMoX5gNQqU-o9-vKMbvbjyj_iKe9k", "record": "CVE-2024-43044", "field": "creation_timestamp", "uuid": "69cc071f-05f6-432b-962d-514ca7fc8dc4"}, {"timestamp": "2024-10-11T17:57:47Z", "date_only": false, "value": "2024-10-11T17:57:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/3308", "record": "CVE-2024-43044", "field": "creation_timestamp", "uuid": "f58685d1-e4bd-4f09-b6c2-ff5c3a17f2bd", "content": "https://github.com/convisolabs/CVE-2024-43044-jenkins\n\nExploit for the vulnerability CVE-2024-43044 in Jenkins\n#github #exploit", "url": "https://t.me/CNArsenal/3308"}, {"timestamp": "2024-10-11T18:10:11Z", "date_only": false, "value": "2024-10-11T18:10:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/realLulzSec/2270", "record": "CVE-2024-43044", "field": "creation_timestamp", "uuid": "875ab3de-3ee7-4940-991a-e9f1bb8ce811", "content": "https://github.com/convisolabs/CVE-2024-43044-jenkins\n\nExploit for the vulnerability CVE-2024-43044 in Jenkins\n#github #exploit", "url": "https://t.me/realLulzSec/2270"}, {"timestamp": "2024-10-13T13:15:10Z", "date_only": false, "value": "2024-10-13T13:15:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/haccking/11305", "record": "CVE-2024-43044", "field": "creation_timestamp", "uuid": "421b4379-0b72-47d9-b7f0-9519efca5759", "content": "\u0410\u043d\u0430\u043b\u0438\u0437 CVE-2024-43044 \u2014 \u043e\u0442 \u0447\u0442\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432 \u0434\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 Jenkins \u0447\u0435\u0440\u0435\u0437 \u0430\u0433\u0435\u043d\u0442\u043e\u0432\n\n#cve #rce #\u043f\u0435\u0440\u0435\u0432\u043e\u0434 #\u0441\u0442\u0430\u0442\u044c\u044f #Jenkins\n\n\u0412 \u044d\u0442\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u043c\u044b \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u043a\u043e\u043d\u0441\u0443\u043b\u044c\u0442\u0430\u0442\u0438\u0432\u043d\u043e\u0435 \u0437\u0430\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u043f\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2024-43044, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u043c \u0447\u0442\u0435\u043d\u0438\u0435\u043c \u0444\u0430\u0439\u043b\u043e\u0432 \u0432 Jenkins. \u041c\u044b \u043f\u043e\u043a\u0430\u0436\u0435\u043c, \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u044d\u0441\u043a\u0430\u043b\u0430\u0446\u0438\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0441 \u0446\u0435\u043b\u044c\u044e \u0434\u043e\u0441\u0442\u0438\u0436\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 (RCE) \u043d\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435 Jenkins \u043f\u0440\u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u0435 \u0430\u0433\u0435\u043d\u0442\u0430 Jenkins.\n\n\u0421\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 \u0441\u0442\u0430\u0442\u044c\u044e.\n\nLH | \u041d\u043e\u0432\u043e\u0441\u0442\u0438 | \u041a\u0443\u0440\u0441\u044b | \u041c\u0435\u043c\u044b\n\n#\u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\n#\u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438", "url": "https://t.me/haccking/11305"}, {"timestamp": "2024-10-14T16:03:44Z", "date_only": false, "value": "2024-10-14T16:03:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/critical_bug/1564", "record": "CVE-2024-43044", "field": "creation_timestamp", "uuid": "f9a432f2-b7e4-495f-b087-d61fd579b902", "content": "\ud83d\udc1e\u26a0\ufe0f\ud83d\udda5 \u041e\u0442 \u0447\u0442\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432 \u0434\u043e RCE: \u0430\u043d\u0430\u043b\u0438\u0437 CVE-2024-43044 \u0432 Jenkins\n\n\ud83d\udca1 \u0412 \u0441\u0442\u0430\u0442\u044c\u0435 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2024-43044 \u0432 Jenkins, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0433\u0435\u043d\u0442\u0430\u043c \u0447\u0438\u0442\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0441 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u0438 \u044d\u0441\u043a\u0430\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 (RCE). \u0410\u0432\u0442\u043e\u0440\u044b \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 Jenkins.\n\n\u0421\u0442\u0430\u0442\u044c\u044f \u0442\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u0435\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0443 Jenkins \u0438 \u043e\u0431\u044a\u044f\u0441\u043d\u044f\u0435\u0442, \u043a\u0430\u043a \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u043c\u0435\u0436\u0434\u0443 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u043c \u0438 \u0430\u0433\u0435\u043d\u0442\u0430\u043c\u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043e. \u041e\u0441\u043e\u0431\u043e\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u0443\u0434\u0435\u043b\u044f\u0435\u0442\u0441\u044f \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0443 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 JAR-\u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0442\u043e\u043c\u0443, \u043a\u0430\u043a \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0432 \u043c\u0435\u0442\u043e\u0434\u0435 fetchJar \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0444\u0430\u0439\u043b\u0430\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430.\n\n\u261d\ufe0f \u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \"Agent -> Controller\", \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u0443\u044e \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0441 \u0432\u0435\u0440\u0441\u0438\u0438 Jenkins 2.326. \u042d\u0442\u043e \u043f\u043e\u0434\u0447\u0451\u0440\u043a\u0438\u0432\u0430\u0435\u0442 \u0432\u0430\u0436\u043d\u043e\u0441\u0442\u044c \u0441\u0432\u043e\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c \u0438 \u0441\u0442\u0440\u043e\u0433\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043c\u0435\u0436\u0434\u0443 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u043c\u0438.\n\n\u041a \u0442\u043e\u043c\u0443 \u0436\u0435, \u0430\u0432\u0442\u043e\u0440\u044b \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u044b\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430, \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044f, \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u042d\u0442\u043e \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u0435\u0442 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u043e\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0438\u043d\u044f\u0442\u0438\u044f \u043c\u0435\u0440 \u043f\u043e \u0435\u0451 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e.\n\n\ud83d\udd25 \u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043f\u043e\u0434\u0445\u043e\u0434\u044b, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u043a\u0443\u043a\u0438 \"remember-me\" \u0434\u043b\u044f \u043f\u043e\u0434\u0434\u0435\u043b\u043a\u0438 \u0441\u0435\u0441\u0441\u0438\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434 \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u043d\u0441\u043e\u043b\u044c \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432 Jenkins. \u0414\u0430\u043d\u043d\u044b\u0439 \u043f\u0440\u0438\u043c\u0435\u0440 \u043f\u043e\u0434\u0447\u0451\u0440\u043a\u0438\u0432\u0430\u0435\u0442 \u0432\u0430\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u044b \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432, \u043d\u043e \u0438 \u0432\u0441\u043f\u043e\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u0430\u0433\u0435\u043d\u0442\u044b \u0438 \u043a\u0430\u043d\u0430\u043b\u044b \u0441\u0432\u044f\u0437\u0438.\n\n\u0410\u0432\u0442\u043e\u0440: Adm1ngmz\n\u041e\u0446\u0435\u043d\u043a\u0430: 9 - \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u044b\u0439 \u0438 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0430\u043d\u0430\u043b\u0438\u0437\n\n#cve #rce #jenkins", "url": "https://t.me/critical_bug/1564"}, {"timestamp": "2024-10-15T05:09:09Z", "date_only": false, "value": "2024-10-15T05:09:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/KbPnlrKlxSy1hwpSbv5unTg7jjETTWf7qelsyzy5hg3zUw", "record": "CVE-2024-43044", "field": "creation_timestamp", "uuid": "61cce7f1-dad8-4107-8148-05df6a80ca7d"}, {"timestamp": "2024-10-15T22:00:00Z", "date_only": false, "value": "2024-10-15T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3195", "record": "WID-SEC-W-2024-3195", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-10-15T22:00:00Z", "date_only": false, "value": "2024-10-15T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3195", "record": "WID-SEC-W-2024-3195", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-10-15T22:00:00Z", "date_only": false, "value": "2024-10-15T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3195", "record": "WID-SEC-W-2024-3195", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-10-15T22:00:00Z", "date_only": false, "value": "2024-10-15T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3195", "record": "WID-SEC-W-2024-3195", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-10-16T10:12:35.400Z", "date_only": false, "value": "2024-10-16T10:12:35.400+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3195", "record": "WID-SEC-W-2024-3195", "field": "document.tracking.generator.date"}, {"timestamp": "2024-10-17T13:17:52.103Z", "date_only": false, "value": "2024-10-17T13:17:52.103171Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2024-0414", "record": "NCSC-2024-0414", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-10-17T13:17:52.103Z", "date_only": false, "value": "2024-10-17T13:17:52.103171Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2024-0414", "record": "NCSC-2024-0414", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-10-17T13:17:52.103Z", "date_only": false, "value": "2024-10-17T13:17:52.103171Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2024-0414", "record": "NCSC-2024-0414", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-11-18T16:27:00Z", "date_only": false, "value": "2024-11-18T16:27:00Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-H856-FFVV-XVR4", "record": "GHSA-H856-FFVV-XVR4", "field": "modified"}, {"timestamp": "2025-01-13T03:57:23.305Z", "date_only": false, "value": "2025-01-13T03:57:23.305596Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/gothburz.bsky.social/post/3lfltsksvms27", "record": "CVE-2024-43044", "field": "creation_timestamp", "uuid": "3ac9397f-253d-4e1b-ac10-f4d6f747d5c2", "url": "https://bsky.app/profile/gothburz.bsky.social/post/3lfltsksvms27"}, {"timestamp": "2025-02-25T15:15:00Z", "date_only": false, "value": "2025-02-25T15:15:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2025-0124", "record": "NCSC-2025-0124", "field": "document.tracking.generator.date"}, {"timestamp": "2025-03-14T19:38:08.229Z", "date_only": false, "value": "2025-03-14T19:38:08.229Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-43044", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-03-14T19:38:08.229Z", "date_only": false, "value": "2025-03-14T19:38:08.229Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-43044", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-03-14T19:44:54Z", "date_only": false, "value": "2025-03-14T19:44:54.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7627", "record": "CVE-2024-43044", "field": "creation_timestamp", "uuid": "8b2582b4-6909-4ccb-8474-28b151c7189e", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-43044\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Jenkins 2.470 and earlier, LTS 2.452.3 and earlier allows agent processes to read arbitrary files from the Jenkins controller file system by using the `ClassLoaderProxy#fetchJar` method in the Remoting library.\n\ud83d\udccf Published: 2024-08-07T13:27:11.438Z\n\ud83d\udccf Modified: 2025-03-14T19:38:08.229Z\n\ud83d\udd17 References:\n1. https://www.jenkins.io/security/advisory/2024-08-07/#SECURITY-3430", "url": "https://t.me/DarkWebInformer_CVEAlerts/7627"}, {"timestamp": "2025-04-15T22:00:00Z", "date_only": false, "value": "2025-04-15T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0823", "record": "WID-SEC-W-2025-0823", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-04-15T22:00:00Z", "date_only": false, "value": "2025-04-15T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0823", "record": "WID-SEC-W-2025-0823", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-04-15T22:00:00Z", "date_only": false, "value": "2025-04-15T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0823", "record": "WID-SEC-W-2025-0823", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-04-16T08:39:55.217Z", "date_only": false, "value": "2025-04-16T08:39:55.217751Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2025-0124", "record": "NCSC-2025-0124", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-04-16T08:39:55.217Z", "date_only": false, "value": "2025-04-16T08:39:55.217751Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2025-0124", "record": "NCSC-2025-0124", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-04-16T08:39:55.217Z", "date_only": false, "value": "2025-04-16T08:39:55.217751Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2025-0124", "record": "NCSC-2025-0124", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-06-03T22:00:00Z", "date_only": false, "value": "2025-06-03T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0823", "record": "WID-SEC-W-2025-0823", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2025-06-03T22:00:00Z", "date_only": false, "value": "2025-06-03T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0823", "record": "WID-SEC-W-2025-0823", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-06-04T09:28:41.594Z", "date_only": false, "value": "2025-06-04T09:28:41.594+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0823", "record": "WID-SEC-W-2025-0823", "field": "document.tracking.generator.date"}, {"timestamp": "2026-02-17T16:41:10Z", "date_only": false, "value": "2026-02-17T16:41:10+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2024:5405", "record": "RHSA-2024:5405", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-02-17T16:41:10Z", "date_only": false, "value": "2026-02-17T16:41:10+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2024:5405", "record": "RHSA-2024:5405", "field": "document.tracking.generator.date"}, {"timestamp": "2026-02-17T16:41:10Z", "date_only": false, "value": "2026-02-17T16:41:10+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2024:5405", "record": "RHSA-2024:5405", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-02-17T16:41:11Z", "date_only": false, "value": "2026-02-17T16:41:11+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2024:5410", "record": "RHSA-2024:5410", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-02-17T16:41:11Z", "date_only": false, "value": "2026-02-17T16:41:11+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2024:5410", "record": "RHSA-2024:5410", "field": "document.tracking.generator.date"}, {"timestamp": "2026-02-17T16:41:11Z", "date_only": false, "value": "2026-02-17T16:41:11+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2024:5410", "record": "RHSA-2024:5410", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-06-17T07:50:18.060Z", "date_only": false, "value": "2026-06-17T07:50:18.060", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-43044", "record": "FKIE_CVE-2024-43044", "field": "lastModified"}, {"timestamp": "2026-07-12T22:00:10.370Z", "date_only": false, "value": "2026-07-12T22:00:10.370003Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/securixy_kz/972", "record": "CVE-2024-43044", "field": "creation_timestamp", "uuid": "6e96161f-5fc0-4087-8b9a-17e6217569d9", "url": "https://t.me/securixy_kz/972"}, {"timestamp": "2026-07-12T22:00:10.394Z", "date_only": false, "value": "2026-07-12T22:00:10.394493Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/securixy_kz/976", "record": "CVE-2024-43044", "field": "creation_timestamp", "uuid": "bee6abb1-d798-4d6a-a480-abea38aba78c", "url": "https://t.me/securixy_kz/976"}, {"timestamp": "2026-07-12T22:00:10.604Z", "date_only": false, "value": "2026-07-12T22:00:10.604841Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/securixy_kz/959", "record": "CVE-2024-43044", "field": "creation_timestamp", "uuid": "023874ee-e683-4a62-810f-2559a176cdd2", "url": "https://t.me/securixy_kz/959"}, {"timestamp": "2026-07-13T00:00:34.768Z", "date_only": false, "value": "2026-07-13T00:00:34.768814Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/securixy_kz/972", "record": "CVE-2024-43044", "field": "creation_timestamp", "uuid": "f189aaa4-2c08-468e-9fa6-c1ccbe6211ec", "url": "https://t.me/securixy_kz/972"}, {"timestamp": "2026-07-13T00:00:34.789Z", "date_only": false, "value": "2026-07-13T00:00:34.789658Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/securixy_kz/976", "record": "CVE-2024-43044", "field": "creation_timestamp", "uuid": "4995d4b8-0446-4550-a8b8-776673793dd2", "url": "https://t.me/securixy_kz/976"}, {"timestamp": "2026-07-13T00:00:34.934Z", "date_only": false, "value": "2026-07-13T00:00:34.934346Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/securixy_kz/959", "record": "CVE-2024-43044", "field": "creation_timestamp", "uuid": "3a19919d-8bc9-4255-bd43-f887f6e8782f", "url": "https://t.me/securixy_kz/959"}, {"timestamp": "2026-07-14T00:00:59.004Z", "date_only": false, "value": "2026-07-14T00:00:59.004590Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/securixy_kz/959", "record": "CVE-2024-43044", "field": "creation_timestamp", "uuid": "3a022a23-3311-4731-a9e3-ecf75f3edeac", "url": "https://t.me/securixy_kz/959"}, {"timestamp": "2026-07-14T00:00:59.817Z", "date_only": false, "value": "2026-07-14T00:00:59.817883Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/securixy_kz/976", "record": "CVE-2024-43044", "field": "creation_timestamp", "uuid": "0efc6d09-43f3-4ae9-9daf-4842ea46e367", "url": "https://t.me/securixy_kz/976"}, {"timestamp": "2026-07-14T00:00:59.855Z", "date_only": false, "value": "2026-07-14T00:00:59.855092Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/securixy_kz/972", "record": "CVE-2024-43044", "field": "creation_timestamp", "uuid": "02251dbd-db2e-439e-9e63-138935dc426a", "url": "https://t.me/securixy_kz/972"}, {"timestamp": "2026-07-26T02:00:18.669Z", "date_only": false, "value": "2026-07-26T02:00:18.669487Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberwarehouse/507", "record": "CVE-2024-43044", "field": "creation_timestamp", "uuid": "ee6b504b-54b8-4f82-a80e-2810f03edf55", "url": "https://t.me/cyberwarehouse/507"}, {"timestamp": "2026-07-26T02:00:18.850Z", "date_only": false, "value": "2026-07-26T02:00:18.850191Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberwarehouse/506", "record": "CVE-2024-43044", "field": "creation_timestamp", "uuid": "307e750f-ea52-4de1-a8b6-e75fb3054c4e", "url": "https://t.me/cyberwarehouse/506"}, {"timestamp": "2026-07-27T00:00:24.169Z", "date_only": false, "value": "2026-07-27T00:00:24.169688Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cyberwarehouse/506", "record": "CVE-2024-43044", "field": "creation_timestamp", "uuid": "da8eda54-62c7-43c2-a7b9-b345413c763e", "url": "https://t.me/cyberwarehouse/506"}, {"timestamp": "2026-07-27T00:00:24.313Z", "date_only": false, "value": "2026-07-27T00:00:24.313506Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cyberwarehouse/507", "record": "CVE-2024-43044", "field": "creation_timestamp", "uuid": "92889f8b-f8ae-43cb-9b35-4daeae9272f6", "url": "https://t.me/cyberwarehouse/507"}, {"timestamp": "2026-07-29T12:02:11.232Z", "date_only": false, "value": "2026-07-29T12:02:11.232133Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/4700", "record": "CVE-2024-43044", "field": "creation_timestamp", "uuid": "15b9d2c2-8753-4d21-a591-b0640383ef47", "url": "https://t.me/reverseame/4700"}, {"timestamp": "2026-07-30T00:02:18.867Z", "date_only": false, "value": "2026-07-30T00:02:18.867900Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/4700", "record": "CVE-2024-43044", "field": "creation_timestamp", "uuid": "8bc47737-9446-41a9-9113-cd66dc32aa2c", "url": "https://t.me/reverseame/4700"}, {"timestamp": "2026-08-02T05:06:35.694Z", "date_only": false, "value": "2026-08-02T05:06:35.694988Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/4700", "record": "CVE-2024-43044", "field": "creation_timestamp", "uuid": "5e34ff2a-491c-4ab0-8deb-d3c8e5c4b97b", "url": "https://t.me/reverseame/4700"}, {"timestamp": "2026-08-03T02:13:58.019Z", "date_only": false, "value": "2026-08-03T02:13:58.019935Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/4700", "record": "CVE-2024-43044", "field": "creation_timestamp", "uuid": "0e3d8509-dae3-49d6-a39b-28a694c47254", "url": "https://t.me/reverseame/4700"}, {"timestamp": "2026-08-11T20:33:50Z", "date_only": false, "value": "2026-08-11T20:33:50+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2024:5411", "record": "RHSA-2024:5411", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-08-11T20:33:50Z", "date_only": false, "value": "2026-08-11T20:33:50+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2024:5411", "record": "RHSA-2024:5411", "field": "document.tracking.generator.date"}, {"timestamp": "2026-08-11T20:33:50Z", "date_only": false, "value": "2026-08-11T20:33:50+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2024:5411", "record": "RHSA-2024:5411", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-08-11T20:33:52Z", "date_only": false, "value": "2026-08-11T20:33:52+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2024:5406", "record": "RHSA-2024:5406", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-08-11T20:33:52Z", "date_only": false, "value": "2026-08-11T20:33:52+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2024:5406", "record": "RHSA-2024:5406", "field": "document.tracking.generator.date"}, {"timestamp": "2026-08-11T20:33:52Z", "date_only": false, "value": "2026-08-11T20:33:52+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2024:5406", "record": "RHSA-2024:5406", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-03T12:00:04.746Z", "date_only": false, "value": "2026-09-03T12:00:04.746766Z", "kind": "sighting", "label": "Seen", "source": "Telegram/m8FGpeRgIbMGkYpwkX53cfSsNnX-7RNucV-DfzD5UDxdA3o", "record": "CVE-2024-43044", "field": "creation_timestamp", "uuid": "de9d7214-7c05-4da2-88f9-b97901f4b26a"}, {"timestamp": "2026-09-04T00:00:49.012Z", "date_only": false, "value": "2026-09-04T00:00:49.012746Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/m8FGpeRgIbMGkYpwkX53cfSsNnX-7RNucV-DfzD5UDxdA3o", "record": "CVE-2024-43044", "field": "creation_timestamp", "uuid": "77b787d5-a963-4023-861f-e2e7c54ba6db"}, {"timestamp": "2026-09-08T08:34:36.952Z", "date_only": false, "value": "2026-09-08T08:34:36.952Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-JENKINS-2024-43044", "record": "BIT-JENKINS-2024-43044", "field": "modified"}]}