{"metadata": {"vulnerability": "CVE-2024-5910", "count": 92, "kinds": {"milestone": 7, "sighting": 49, "kev": 17, "other": 19}}, "data": [{"timestamp": "2024-06-12T15:27:55.854Z", "date_only": false, "value": "2024-06-12T15:27:55.854Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-5910", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-07-10T00:00:00Z", "date_only": true, "value": "2024-07-10", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0567", "record": "CERTFR-2024-AVI-0567", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2024-07-10T16:00:00Z", "date_only": false, "value": "2024-07-10T16:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / palo_alto", "record": "CVE-2024-5910", "field": "containers.cna.datePublic"}, {"timestamp": "2024-07-10T16:00:00Z", "date_only": false, "value": "2024-07-10T16:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / palo_alto", "record": "CVE-2024-5910", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2024-07-10T18:39:26.006Z", "date_only": false, "value": "2024-07-10T18:39:26.006Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-5910", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-07-10T18:39:26.006Z", "date_only": false, "value": "2024-07-10T18:39:26.006Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / palo_alto", "record": "CVE-2024-5910", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-07-10T19:15:11Z", "date_only": false, "value": "2024-07-10T19:15:11Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-PX3F-FC5J-2FQV", "record": "GHSA-PX3F-FC5J-2FQV", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-07-10T19:15:11.390Z", "date_only": false, "value": "2024-07-10T19:15:11.390", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-5910", "record": "FKIE_CVE-2024-5910", "field": "published"}, {"timestamp": "2024-07-10T21:30:38Z", "date_only": false, "value": "2024-07-10T21:30:38Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-PX3F-FC5J-2FQV", "record": "GHSA-PX3F-FC5J-2FQV", "field": "published"}, {"timestamp": "2024-07-10T21:49:07Z", "date_only": false, "value": "2024-07-10T21:49:07.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/576", "record": "CVE-2024-5910", "field": "creation_timestamp", "uuid": "28124997-f2a1-4a4a-bffc-abf236013809", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5910 - Missing authentication for a critical function in\", \n  \"Content\": \"CVE ID : CVE-2024-5910 \nPublished : July 10, 2024, 7:15 p.m. | 26\u00a0minutes ago \nDescription : Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with network access to Expedition.  \n  \nNote: Expedition is a tool aiding in configuration migration, tuning, and enrichment. Configuration secrets, credentials, and other data imported into Expedition is at risk due to this issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/576"}, {"timestamp": "2024-07-11T00:00:00Z", "date_only": false, "value": "2024-07-11T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0567", "record": "CERTFR-2024-AVI-0567", "field": "last_revision_date"}, {"timestamp": "2024-07-11T00:00:00Z", "date_only": false, "value": "2024-07-11T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0567", "record": "CERTFR-2024-AVI-0567", "field": "initial_release_date"}, {"timestamp": "2024-07-11T00:00:00Z", "date_only": false, "value": "2024-07-11T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0567", "record": "CERTFR-2024-AVI-0567", "field": "revisions.0.revision_date"}, {"timestamp": "2024-07-11T18:30:56Z", "date_only": false, "value": "2024-07-11T18:30:56.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/eiA4EV3lx2Xj5K19_ERbsqWvZ2LELjbyg0wyACGwCEiaNQ", "record": "CVE-2024-5910", "field": "creation_timestamp", "uuid": "9508a2de-612e-4e74-94ab-cb6028488c09"}, {"timestamp": "2024-07-11T19:22:11Z", "date_only": false, "value": "2024-07-11T19:22:11.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/KomunitiSiber/2241", "record": "CVE-2024-5910", "field": "creation_timestamp", "uuid": "94705bbd-429d-42c9-b3df-67a6d4f135ff", "content": "Palo Alto Networks Patches Critical Flaw in Expedition Migration Tool\nhttps://thehackernews.com/2024/07/palo-alto-networks-patches-critical.html\n\nPalo Alto Networks has released security updates to address five security flaws impacting its products, including a critical bug that could lead to an authentication bypass.\nCataloged as CVE-2024-5910 (CVSS score: 9.3), the vulnerability has been described as a case of missing authentication in its Expedition migration tool that could lead to an admin account takeover.\n\"Missing authentication", "url": "https://t.me/KomunitiSiber/2241"}, {"timestamp": "2024-07-11T20:09:42Z", "date_only": false, "value": "2024-07-11T20:09:42.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/tengkorakcybercrewz/14843", "record": "CVE-2024-5910", "field": "creation_timestamp", "uuid": "5b786c6e-f839-453c-a5fa-d2d0d033afaf", "content": "The Hacker News\nPalo Alto Networks Patches Critical Flaw in Expedition Migration Tool\n\nPalo Alto Networks has released security updates to address five security flaws impacting its products, including a critical bug that could lead to an authentication bypass.\nCataloged as CVE-2024-5910 (CVSS score: 9.3), the vulnerability has been described as a case of missing authentication in its Expedition migration tool that could lead to an admin account takeover.\n\"Missing authentication", "url": "https://t.me/tengkorakcybercrewz/14843"}, {"timestamp": "2024-07-11T20:09:42Z", "date_only": false, "value": "2024-07-11T20:09:42.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/tengkorakcybercrewz/2889", "record": "CVE-2024-5910", "field": "creation_timestamp", "uuid": "b0152067-a2c7-43f5-9ff2-b5bbf718dd30", "content": "The Hacker News\nPalo Alto Networks Patches Critical Flaw in Expedition Migration Tool\n\nPalo Alto Networks has released security updates to address five security flaws impacting its products, including a critical bug that could lead to an authentication bypass.\nCataloged as CVE-2024-5910 (CVSS score: 9.3), the vulnerability has been described as a case of missing authentication in its Expedition migration tool that could lead to an admin account takeover.\n\"Missing authentication", "url": "https://t.me/tengkorakcybercrewz/2889"}, {"timestamp": "2024-07-11T20:09:43Z", "date_only": false, "value": "2024-07-11T20:09:43.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/cFz4y_M6xEoer0BSY5q3YiGv30fS4GkYMArEw1-2EtDKnQ", "record": "CVE-2024-5910", "field": "creation_timestamp", "uuid": "7180b063-dd88-43e1-955a-d0cec7158791"}, {"timestamp": "2024-07-12T04:00:00Z", "date_only": false, "value": "2024-07-12T04:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1331", "record": "CVE-2024-5910", "field": "creation_timestamp", "uuid": "06d02eb0-99d7-431b-8249-258693b25bda", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1331"}, {"timestamp": "2024-07-12T13:28:14Z", "date_only": false, "value": "2024-07-12T13:28:14.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/HackingInsights/5817", "record": "CVE-2024-5910", "field": "creation_timestamp", "uuid": "23317287-3e34-4e5c-9195-9ba4b4c339ec", "content": "\u200aCVE-2024-5910: Critical Vulnerability Threatens Palo Alto Networks\u2019 Expedition\n\nhttps://securityonline.info/cve-2024-5910-critical-vulnerability-threatens-palo-alto-networks-expedition/", "url": "https://t.me/HackingInsights/5817"}, {"timestamp": "2024-10-10T13:17:11Z", "date_only": false, "value": "2024-10-10T13:17:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/true_secator/6304", "record": "CVE-2024-5910", "field": "creation_timestamp", "uuid": "3e6eb380-d1d4-42c0-ae62-340e78d7bf40", "content": "\u0422\u0435\u043f\u0435\u0440\u044c \u043e \u0433\u0440\u0443\u0441\u0442\u043d\u043e\u043c, \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Fortinet RCE \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u0420\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e CVE-2024-23113, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u0442\u0435\u043c, \u0447\u0442\u043e \u0434\u0435\u043c\u043e\u043d fgfmd \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0435\u0442 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u0430 \u0441\u0442\u0440\u043e\u043a\u0443 \u0444\u043e\u0440\u043c\u0430\u0442\u0430, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u0443\u044e \u0438\u0437\u0432\u043d\u0435, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0438\u043b\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043d\u0435\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438, \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0445 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u041a\u0430\u043a \u043f\u043e\u044f\u0441\u043d\u044f\u0435\u0442 Fortinet, \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u0434\u0435\u043c\u043e\u043d fgfmd \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043d\u0430 FortiGate \u0438 FortiManager, \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044f \u0432\u0441\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u044f \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u043c\u0435\u0436\u0434\u0443 \u043d\u0438\u043c\u0438.\n\nCVE-2024-23113\u00a0\u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 FortiOS 7.0 \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438, FortiPAM 1.0 \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438, FortiProxy 7.0 \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 FortiWeb 7.4.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0435\u0449\u0435 \u0432 \u0444\u0435\u0432\u0440\u0430\u043b\u0435, \u043f\u043e\u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u0432 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0437\u0430\u043a\u0440\u044b\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0435\u043c\u043e\u043d\u0443 fgfmd \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u043e\u0432 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439, \u043f\u0440\u0438\u0437\u0432\u0430\u043d\u043d\u043e\u0439 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c Fortinet \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430 \u0441\u0432\u043e\u0438 \u0444\u0435\u0432\u0440\u0430\u043b\u044c\u0441\u043a\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0447\u0430\u0441\u0442\u0438 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CVE-2024-23113, \u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044f \u0441\u0432\u043e\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0432 \u043d\u0435\u0432\u0435\u0434\u0435\u043d\u0438\u0438.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u0438 \u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430 Palo Alto Networks, \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442 \u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u044d\u043a\u0440\u0430\u043d\u044b PAN-OS. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445:\n\n- CVE-2024-9463\u00a0(\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434)\n- CVE-2024-9464\u00a0(\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434)\n- CVE-2024-9465\u00a0(\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438)\n- CVE-2024-9466\u00a0(\u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0445\u0440\u0430\u043d\u044f\u0442\u0441\u044f \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435 \u0432 \u0436\u0443\u0440\u043d\u0430\u043b\u0430\u0445)\n- CVE-2024-9467\u00a0(\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c XSS \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438)\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432 \u0440\u0435\u0448\u0435\u043d\u0438\u0438 Expedition. \u0418\u0445 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c (\u0438\u043c\u0435\u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043f\u0430\u0440\u043e\u043b\u0438, \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0438 \u043a\u043b\u044e\u0447\u0438 API \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u043e\u0432 PAN-OS), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0441\u043a\u0438\u0435 \u0443\u0442\u0435\u0447\u043a\u0438.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Horizon3.ai, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u0435 \u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u0432\u0448\u0438\u0435 \u043e \u0447\u0435\u0442\u044b\u0440\u0435\u0445 \u043e\u0448\u0438\u0431\u043a\u0430\u0445, \u0443\u0436\u0435 \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043e\u0442\u0447\u0435\u0442, \u0430 Hanley - PoC, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u0432\u044f\u0437\u044b\u0432\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u044e\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0431\u0440\u043e\u0441\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 CVE-2024-5910 \u0441 CVE-2024-9464 \u0434\u043b\u044f \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 Expedition.\n\n\u0412 Palo Alto Networks \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u043d\u0435\u0442 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0434\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a. \u041d\u043e \u044d\u0442\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u043a\u0430.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043f\u043e\u0441\u043b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e \u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 Expedition \u0437\u0430\u043c\u0435\u043d\u0438\u0442\u044c \u0432\u0441\u0435 \u0438\u043c\u0435\u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043f\u0430\u0440\u043e\u043b\u0438 \u0438 \u043a\u043b\u044e\u0447\u0438 API, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0434\u043b\u044f \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430.\n\n\u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u043c\u043e\u0433\u0443\u0442 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0438 Expedition \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0445\u043e\u0441\u0442\u043e\u0432 \u0438\u043b\u0438 \u0441\u0435\u0442\u0435\u0439.", "url": "https://t.me/true_secator/6304"}, {"timestamp": "2024-10-12T06:26:23Z", "date_only": false, "value": "2024-10-12T06:26:23.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/11267", "record": "CVE-2024-5910", "field": "creation_timestamp", "uuid": "e117c316-334d-44e7-8929-8d88bc135a65", "content": "#exploit\n1. CVE-2024-5910:\nMissing Authentication Leads to Palo Alto Admin Account Takeover\nhttps://www.horizon3.ai/attack-research/palo-alto-expedition-from-n-day-to-full-compromise\n\n2. CVE-2024-9473:\nPalo Alto Global Protect LPE\nhttps://packetstormsecurity.com/files/182142\n\n3. CVE-2024-8698:\nImproper Verification of SAML Responses Leading to Privilege Escalation in Keycloak\nhttps://github.com/huydoppaz/CVE-2024-8698-POC", "url": "https://t.me/CyberSecurityTechnologies/11267"}, {"timestamp": "2024-11-07T00:00:00Z", "date_only": false, "value": "2024-11-07T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2024-5910", "field": "timestamps.asserted_at", "uuid": "ad267723-27c1-42df-8d1a-63b263453ef4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-11-07T00:00:00Z", "date_only": false, "value": "2024-11-07T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2024-5910", "field": "timestamps.asserted_at", "uuid": "a36c2603-21ce-4d64-a40c-942e568f3254", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-11-07T00:00:00Z", "date_only": true, "value": "2024-11-07", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-5910", "field": "containers.adp.0.metrics.1.other.content.dateAdded"}, {"timestamp": "2024-11-07T00:00:00Z", "date_only": false, "value": "2024-11-07T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2024-5910", "field": "evidence.0.details.added_date", "uuid": "a36c2603-21ce-4d64-a40c-942e568f3254", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-11-07T00:00:00Z", "date_only": true, "value": "2024-11-07", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2024-5910", "field": "evidence.0.details.date_added", "uuid": "ad267723-27c1-42df-8d1a-63b263453ef4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-11-07T00:00:00Z", "date_only": false, "value": "2024-11-07T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2024-5910", "field": "timestamps.first_seen_at", "uuid": "ad267723-27c1-42df-8d1a-63b263453ef4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-11-07T00:00:00Z", "date_only": false, "value": "2024-11-07T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2024-5910", "field": "timestamps.first_seen_at", "uuid": "a36c2603-21ce-4d64-a40c-942e568f3254", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-11-07T00:00:00Z", "date_only": false, "value": "2024-11-07T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2024-5910", "field": "status.status_updated_at", "uuid": "ad267723-27c1-42df-8d1a-63b263453ef4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-11-07T00:00:00Z", "date_only": false, "value": "2024-11-07T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2024-5910", "field": "status.status_updated_at", "uuid": "a36c2603-21ce-4d64-a40c-942e568f3254", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-11-07T00:00:00Z", "date_only": false, "value": "2024-11-07T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-5910", "field": "containers.adp.0.timeline.0.time"}, {"timestamp": "2024-11-07T04:55:50.697Z", "date_only": false, "value": "2024-11-07T04:55:50.697197Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-5910", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-11-07T04:55:50.697Z", "date_only": false, "value": "2024-11-07T04:55:50.697197Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-5910", "record": "FKIE_CVE-2024-5910", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-11-07T15:35:10.432Z", "date_only": false, "value": "2024-11-07T15:35:10.432154Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113442403763317792", "record": "CVE-2024-5910", "field": "creation_timestamp", "uuid": "82d8b482-234c-44e4-af08-22254bf68f84", "url": "https://infosec.exchange/users/screaminggoat/statuses/113442403763317792"}, {"timestamp": "2024-11-07T16:43:47.514Z", "date_only": false, "value": "2024-11-07T16:43:47.514644Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/hrbrmstr/statuses/113442673510281546", "record": "CVE-2024-5910", "field": "creation_timestamp", "uuid": "0176a53f-4e36-425e-b616-d6eca32573b8", "url": "https://mastodon.social/users/hrbrmstr/statuses/113442673510281546"}, {"timestamp": "2024-11-07T18:10:03Z", "date_only": false, "value": "2024-11-07T18:10:03.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2024-5910", "field": "creation_timestamp", "uuid": "f291cc0b-3346-42be-a9c5-f10ee151f608"}, {"timestamp": "2024-11-07T18:26:12.774Z", "date_only": false, "value": "2024-11-07T18:26:12.774733Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2623045", "record": "CVE-2024-5910", "field": "creation_timestamp", "uuid": "597e1975-e867-4832-a646-b34c4c28d9a4", "url": "https://feedsin.space/feed/CISAKevBot/items/2623045"}, {"timestamp": "2024-11-07T20:16:32.104Z", "date_only": false, "value": "2024-11-07T20:16:32.104587Z", "kind": "sighting", "label": "Exploited", "source": "Source not specified", "record": "CVE-2024-5910", "field": "creation_timestamp", "uuid": "79cc6411-208f-4ee9-9e61-cfbbce30f59c"}, {"timestamp": "2024-11-07T22:25:00Z", "date_only": false, "value": "2024-11-07T22:25:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://security.paloaltonetworks.com/CVE-2024-5910", "record": "CVE-2024-5910", "field": "creation_timestamp", "uuid": "a23a2d9e-da51-4ae9-9816-e9b93517c277", "url": "https://security.paloaltonetworks.com/CVE-2024-5910"}, {"timestamp": "2024-11-07T23:00:00Z", "date_only": false, "value": "2024-11-07T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3371", "record": "WID-SEC-W-2024-3371", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-11-07T23:00:00Z", "date_only": false, "value": "2024-11-07T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3371", "record": "WID-SEC-W-2024-3371", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-11-07T23:00:00Z", "date_only": false, "value": "2024-11-07T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3371", "record": "WID-SEC-W-2024-3371", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-11-07T23:00:00Z", "date_only": false, "value": "2024-11-07T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3371", "record": "WID-SEC-W-2024-3371", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-11-08T03:10:31.337Z", "date_only": false, "value": "2024-11-08T03:10:31.337611Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/patchnow24x7/statuses/113445137999456682", "record": "CVE-2024-5910", "field": "creation_timestamp", "uuid": "a8924efb-cc50-48a7-80da-ed9a4fff6ee4", "url": "https://infosec.exchange/users/patchnow24x7/statuses/113445137999456682"}, {"timestamp": "2024-11-08T05:17:00Z", "date_only": false, "value": "2024-11-08T05:17:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2024/11/cisa-alerts-to-active-exploitation-of.html", "record": "CVE-2024-5910", "field": "creation_timestamp", "uuid": "fa5e3aa3-57a4-4ccb-9edf-fab280e61c8b", "url": "https://thehackernews.com/2024/11/cisa-alerts-to-active-exploitation-of.html"}, {"timestamp": "2024-11-08T06:59:23Z", "date_only": false, "value": "2024-11-08T06:59:23.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/5853", "record": "CVE-2024-5910", "field": "creation_timestamp", "uuid": "649f9e32-ddba-4254-9d71-668e5cbb8ae5", "content": "\ud83d\udea8 CISA has added a critical #vulnerability (CVE-2024-5910) in Palo Alto Networks Expedition to its Known Exploited Vulnerabilities catalog. \n \nThis flaw allows attackers to take over admin accounts, risking sensitive data. \n \n\ud83d\udc49 Read details: https://thehackernews.com/2024/11/cisa-alerts-to-active-exploitation-of.html", "url": "https://t.me/thehackernews/5853"}, {"timestamp": "2024-11-08T07:17:57Z", "date_only": false, "value": "2024-11-08T07:17:57.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/KomunitiSiber/2830", "record": "CVE-2024-5910", "field": "creation_timestamp", "uuid": "185361a4-d9eb-4459-b779-28193d3b065c", "content": "CISA Alerts to Active Exploitation of Critical Palo Alto Networks Vulnerability\nhttps://thehackernews.com/2024/11/cisa-alerts-to-active-exploitation-of.html\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a now-patched critical security flaw impacting Palo Alto Networks Expedition to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.\nThe vulnerability, tracked as CVE-2024-5910 (CVSS score: 9.3), concerns a case of missing authentication in the Expedition migration tool that", "url": "https://t.me/KomunitiSiber/2830"}, {"timestamp": "2024-11-08T10:03:32.650Z", "date_only": false, "value": "2024-11-08T10:03:32.650+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3371", "record": "WID-SEC-W-2024-3371", "field": "document.tracking.generator.date"}, {"timestamp": "2024-11-08T10:33:06Z", "date_only": false, "value": "2024-11-08T10:33:06.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/iyUqZxi-ZOHA5q31WG-CECdljikAI2NtqNSD96URfONYlw", "record": "CVE-2024-5910", "field": "creation_timestamp", "uuid": "682eabf4-1e57-48f6-8358-d34592337e5f"}, {"timestamp": "2024-11-08T12:20:11.040Z", "date_only": false, "value": "2024-11-08T12:20:11.040340Z", "kind": "sighting", "label": "Seen", "source": "https://social.skynetcloud.site/users/jos1264/statuses/113447298873185006", "record": "cve-2024-5910", "field": "creation_timestamp", "uuid": "c2a6d088-793a-4fe7-89fa-e1fbafb5b707", "url": "https://social.skynetcloud.site/users/jos1264/statuses/113447298873185006"}, {"timestamp": "2024-11-08T12:20:14.985Z", "date_only": false, "value": "2024-11-08T12:20:14.985215Z", "kind": "sighting", "label": "Seen", "source": "https://social.skynetcloud.site/users/jos1264/statuses/113447298943606421", "record": "cve-2024-5910", "field": "creation_timestamp", "uuid": "6f448a6d-83d4-416b-9993-7f5e8f252704", "url": "https://social.skynetcloud.site/users/jos1264/statuses/113447298943606421"}, {"timestamp": "2024-11-08T12:55:20.668Z", "date_only": false, "value": "2024-11-08T12:55:20.668515Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/jbhall56/statuses/113447437619338174", "record": "CVE-2024-5910", "field": "creation_timestamp", "uuid": "18c490c1-d4d6-4a03-b603-21693fb42234", "url": "https://infosec.exchange/users/jbhall56/statuses/113447437619338174"}, {"timestamp": "2024-11-08T16:22:45Z", "date_only": false, "value": "2024-11-08T16:22:45.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/0VBmeHghnmPXCpG5kVpjQga_lAOHxnlgefDdqk8JVcn2kjU", "record": "CVE-2024-5910", "field": "creation_timestamp", "uuid": "c56ef0a7-6446-4896-b644-7327b635f9b0"}, {"timestamp": "2024-11-08T16:40:17.301Z", "date_only": false, "value": "2024-11-08T16:40:17.301Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2024-5910", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-11-08T16:40:25.542Z", "date_only": false, "value": "2024-11-08T16:40:25.542987Z", "kind": "sighting", "label": "Seen", "source": "https://social.skynetcloud.site/users/jos1264/statuses/113448321255399528", "record": "cve-2024-5910", "field": "creation_timestamp", "uuid": "d5e60917-b8e7-4163-bbb4-0af09cb16b1e", "url": "https://social.skynetcloud.site/users/jos1264/statuses/113448321255399528"}, {"timestamp": "2024-11-08T20:01:43Z", "date_only": false, "value": "2024-11-08T20:01:43.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cibsecurity/80881", "record": "CVE-2024-5910", "field": "creation_timestamp", "uuid": "19f8d316-1f06-497e-b765-82f6e58eb4e7", "content": "\ud83e\udd85 CISA Finds Palo Alto Networks\u2019 CVE-2024-5910 Exploited in the Wild \ud83e\udd85\n\n  Overview     The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday alerted federal agencies regarding active exploitation of a critical missing authentication vulnerability in Palo Alto Networks Expedition, a tool widely used by administrators for firewall migration and configuration management.   This flaw, designated CVE20245910, has been actively exploited by attackers since its patch release in July, underscoring the urgency for immediate remediation.   Expedition is a popular migration tool designed to assist administrators in transitioning firewall configurations from vendors such as Check Point and Cisco to Palo Altos PANOS. However, due to a missing authentication mechanism, this tool now presents a significant risk for compromised credentials and potentia...\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"CYBLE\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity", "url": "https://t.me/cibsecurity/80881"}, {"timestamp": "2024-11-09T01:20:04.635Z", "date_only": false, "value": "2024-11-09T01:20:04.635063Z", "kind": "sighting", "label": "Seen", "source": "https://social.skynetcloud.site/users/jos1264/statuses/113450365884278213", "record": "CVE-2024-5910", "field": "creation_timestamp", "uuid": "c1cec65b-e4d7-4b84-b1b2-db8147f9668b", "url": "https://social.skynetcloud.site/users/jos1264/statuses/113450365884278213"}, {"timestamp": "2024-11-11T12:30:17Z", "date_only": false, "value": "2024-11-11T12:30:17.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/6413", "record": "CVE-2024-5910", "field": "creation_timestamp", "uuid": "3f7b9423-7c69-41e2-b694-15488388bc91", "content": "\u0412 Palo Alto Networks \u0432\u0438\u0434\u0438\u043c\u043e \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0441\u0442\u0430\u0440\u044b\u043c \u0434\u043e\u0431\u0440\u044b\u043c \u00ab\u043a\u043e\u0440\u0430\u0431\u0435\u043b\u044c\u043d\u044b\u043c\u00bb \u043f\u0440\u0430\u0432\u0438\u043b\u043e\u043c \u043f\u043e \u0447\u0430\u0441\u0442\u0438 \u0432\u044b\u0431\u043e\u0440\u0430 \u043d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0439 \u0434\u043b\u044f \u0441\u0432\u043e\u0438\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u0438 \u0442\u0435\u043f\u0435\u0440\u044c \u0432\u044b\u043d\u0443\u0436\u0434\u0435\u043d\u044b \u0432 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u0440\u0430\u0437 \u0442\u0440\u0443\u0431\u0438\u0442\u044c \u0442\u0440\u0435\u0432\u043e\u0433\u0443, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044f \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u0440\u0438\u0437\u0432\u0430\u043b\u0430 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c (\u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c) \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u043c \u044d\u043a\u0440\u0430\u043d\u0430\u043c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0433\u043e \u043f\u043e\u043a\u043e\u043b\u0435\u043d\u0438\u044f \u0438\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u043a \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f PAN-OS \u0441\u0432\u043e\u0438\u0445 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u043e\u0432 \u0438\u0437-\u0437\u0430 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\n\u041f\u0440\u0430\u0432\u0434\u0430, \u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442 \u043d\u0438\u043a\u0430\u043a\u043e\u0439 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0435\u0439 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u044b\u0442\u0430\u044f\u0441\u044c \u0435\u0435 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0442\u0435\u043c \u043f\u043e\u043d\u044f\u0442\u044c \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0438 \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\nPalo Alto Networks \u0441\u0435\u0439\u0447\u0430\u0441 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0438 \u043b\u044e\u0431\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044f \u043f\u0440\u043e\u0434\u0435\u043b\u044b\u0432\u0430\u0442\u044c \u0442\u043e\u0436\u0435 \u0441\u0430\u043c\u043e\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0438 \u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u044c \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u043c \u0434\u043b\u044f \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439.\n\n\u0418 \u0432\u0441\u0435 \u044d\u0442\u043e \u043d\u0430 \u0444\u043e\u043d\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0441\u0438\u0433\u043d\u0430\u043b\u043e\u0432 CISA \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0449\u0438\u0445\u0441\u044f \u0430\u0442\u0430\u043a, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 Palo Alto Networks Expedition (CVE-2024-5910), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430\u00a0\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0438\u044e\u043b\u0435 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0441\u0431\u0440\u043e\u0441\u0438\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442.", "url": "https://t.me/true_secator/6413"}, {"timestamp": "2024-11-12T23:19:17Z", "date_only": false, "value": "2024-11-12T23:19:17.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/paloalto_expedition_rce.rb", "record": "CVE-2024-5910", "field": "creation_timestamp", "uuid": "92f99b3c-cf07-4baf-b3a8-ae4f6e1c24ea", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/paloalto_expedition_rce.rb"}, {"timestamp": "2024-11-13T14:55:01Z", "date_only": false, "value": "2024-11-13T14:55:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://packetstormsecurity.com/files/182665/paloalto_expedition_rce.rb.txt", "record": "CVE-2024-5910", "field": "creation_timestamp", "uuid": "7b4389e3-a2f1-47e7-8bcc-fd26f89a30dc", "url": "https://packetstormsecurity.com/files/182665/paloalto_expedition_rce.rb.txt"}, {"timestamp": "2024-11-28T00:00:00Z", "date_only": true, "value": "2024-11-28", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2024-5910", "field": "evidence.0.details.due_date", "uuid": "ad267723-27c1-42df-8d1a-63b263453ef4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-12-04T07:09:02Z", "date_only": false, "value": "2024-12-04T07:09:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/9307", "record": "CVE-2024-5910", "field": "creation_timestamp", "uuid": "ed477601-e4aa-4496-af2f-30b57179762b", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-5910 PoC\nURL\uff1ahttps://github.com/Farzan-Kh/CVE-2024-5910\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/9307"}, {"timestamp": "2024-12-16T17:19:38Z", "date_only": false, "value": "2024-12-16T17:19:38+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2024-5910", "field": "timestamps.asserted_at", "uuid": "2f534af1-c582-45e8-8a18-36a8f8f23a20", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-12-16T17:19:38Z", "date_only": false, "value": "2024-12-16T17:19:38+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2024-5910", "field": "timestamps.first_seen_at", "uuid": "2f534af1-c582-45e8-8a18-36a8f8f23a20", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-02-06T03:13:46Z", "date_only": false, "value": "2025-02-06T03:13:46.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2024-5910", "field": "creation_timestamp", "uuid": "c54a4d8e-51de-463a-984d-440cbb2cfef6"}, {"timestamp": "2025-02-23T02:11:01Z", "date_only": false, "value": "2025-02-23T02:11:01.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2024-5910", "field": "creation_timestamp", "uuid": "e3738776-1223-43e5-a59b-ff5bab71f73b"}, {"timestamp": "2025-02-23T04:11:05Z", "date_only": false, "value": "2025-02-23T04:11:05.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2024-5910", "field": "creation_timestamp", "uuid": "59519df6-fd8e-49d7-8db7-ea5fee0f99a4"}, {"timestamp": "2025-10-21T22:55:49.276Z", "date_only": false, "value": "2025-10-21T22:55:49.276Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-5910", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T22:55:49.276Z", "date_only": false, "value": "2025-10-21T22:55:49.276Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-5910", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:33:04Z", "date_only": false, "value": "2025-10-22T00:33:04Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-PX3F-FC5J-2FQV", "record": "GHSA-PX3F-FC5J-2FQV", "field": "modified"}, {"timestamp": "2025-10-23T21:13:04Z", "date_only": false, "value": "2025-10-23T21:13:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "record": "CVE-2024-5910", "field": "creation_timestamp", "uuid": "2f6da5e6-b7f1-4512-8043-0a388da403f4"}, {"timestamp": "2026-02-02T12:26:24.793Z", "date_only": false, "value": "2026-02-02T12:26:24.793081Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9a244593-1a18-488c-b958-136fe4591610", "record": "CVE-2024-5910", "field": "creation_timestamp", "uuid": "9190ece4-e5f0-44fb-b2c0-5f102efd8919", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9a244593-1a18-488c-b958-136fe4591610"}, {"timestamp": "2026-02-02T12:26:24.793Z", "date_only": false, "value": "2026-02-02T12:26:24.793081Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9a244593-1a18-488c-b958-136fe4591610", "record": "CVE-2024-5910", "field": "creation_timestamp", "uuid": "45aa4e21-ab73-4bed-a349-02caab4789af", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9a244593-1a18-488c-b958-136fe4591610"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2024-5910", "field": "timestamps.recorded_at", "uuid": "ad267723-27c1-42df-8d1a-63b263453ef4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-17T08:16:53.600Z", "date_only": false, "value": "2026-06-17T08:16:53.600", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-5910", "record": "FKIE_CVE-2024-5910", "field": "lastModified"}, {"timestamp": "2026-06-19T12:46:32.384Z", "date_only": false, "value": "2026-06-19T12:46:32.384533Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b671c22a-21bc-4b98-9ffc-88b9435a5208", "record": "CVE-2024-5910", "field": "creation_timestamp", "uuid": "c4877753-aa34-492c-ab81-e04230f898bb", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b671c22a-21bc-4b98-9ffc-88b9435a5208"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2024-5910", "field": "timestamps.recorded_at", "uuid": "a36c2603-21ce-4d64-a40c-942e568f3254", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:14:29.514Z", "date_only": false, "value": "2026-06-23T11:14:29.514514Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/a36c2603-21ce-4d64-a40c-942e568f3254", "record": "CVE-2024-5910", "field": "creation_timestamp", "uuid": "4e09ef11-c03d-4b7a-9776-d18acfd81f93", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/a36c2603-21ce-4d64-a40c-942e568f3254"}, {"timestamp": "2026-06-23T14:06:00.317Z", "date_only": false, "value": "2026-06-23T14:06:00.317814Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ba27a083-fcb3-4e00-9e7a-d0297ccecd34", "record": "CVE-2024-5910", "field": "creation_timestamp", "uuid": "6920ab6c-2e5e-4715-b70e-07541296a2b0", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ba27a083-fcb3-4e00-9e7a-d0297ccecd34"}, {"timestamp": "2026-06-30T11:54:49.966Z", "date_only": false, "value": "2026-06-30T11:54:49.966917Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f1cbc51e-dd34-444c-b7dd-d44caf81f394", "record": "CVE-2024-5910", "field": "creation_timestamp", "uuid": "bd189719-e8b5-4564-a4a0-c219e78594fc", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f1cbc51e-dd34-444c-b7dd-d44caf81f394"}, {"timestamp": "2026-07-01T07:17:59.354Z", "date_only": false, "value": "2026-07-01T07:17:59.354150Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/2f534af1-c582-45e8-8a18-36a8f8f23a20", "record": "CVE-2024-5910", "field": "creation_timestamp", "uuid": "29aa9d9f-9bba-4f2f-8151-6ec3c68584a9", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/2f534af1-c582-45e8-8a18-36a8f8f23a20"}, {"timestamp": "2026-07-02T00:00:00Z", "date_only": false, "value": "2026-07-02T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2024-5910", "field": "timestamps.last_seen_at", "uuid": "2f534af1-c582-45e8-8a18-36a8f8f23a20", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-02T00:00:00Z", "date_only": true, "value": "2026-07-02", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2024-5910", "field": "evidence.0.details.observation_date", "uuid": "2f534af1-c582-45e8-8a18-36a8f8f23a20", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-02T00:00:00Z", "date_only": false, "value": "2026-07-02T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2024-5910", "field": "status.status_updated_at", "uuid": "2f534af1-c582-45e8-8a18-36a8f8f23a20", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-04T01:00:01Z", "date_only": false, "value": "2026-07-04T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2024-5910", "field": "timestamps.recorded_at", "uuid": "2f534af1-c582-45e8-8a18-36a8f8f23a20", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-12T22:00:09.810Z", "date_only": false, "value": "2026-07-12T22:00:09.810444Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/securixy_kz/1019", "record": "CVE-2024-5910", "field": "creation_timestamp", "uuid": "b1d8ade8-1e9b-4c25-96ab-93de9bc81cab", "url": "https://t.me/securixy_kz/1019"}, {"timestamp": "2026-07-13T00:00:34.336Z", "date_only": false, "value": "2026-07-13T00:00:34.336913Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/securixy_kz/1019", "record": "CVE-2024-5910", "field": "creation_timestamp", "uuid": "178fe7b5-ab81-45ab-aaf1-f8fd83ac8153", "url": "https://t.me/securixy_kz/1019"}, {"timestamp": "2026-07-14T00:01:00.753Z", "date_only": false, "value": "2026-07-14T00:01:00.753027Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/securixy_kz/1019", "record": "CVE-2024-5910", "field": "creation_timestamp", "uuid": "21f5384b-2987-4366-a97f-0a0382a07d5d", "url": "https://t.me/securixy_kz/1019"}, {"timestamp": "2026-07-29T12:03:16.605Z", "date_only": false, "value": "2026-07-29T12:03:16.605083Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/sysadm_in_up/2279", "record": "CVE-2024-5910", "field": "creation_timestamp", "uuid": "1fae130b-3e23-4a12-b055-41c10ae1bf74", "url": "https://t.me/sysadm_in_up/2279"}, {"timestamp": "2026-07-30T00:03:01.360Z", "date_only": false, "value": "2026-07-30T00:03:01.360815Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/sysadm_in_up/2279", "record": "CVE-2024-5910", "field": "creation_timestamp", "uuid": "3f8019dd-9df0-435f-bd5b-826bd9e436f0", "url": "https://t.me/sysadm_in_up/2279"}, {"timestamp": "2026-08-04T00:00:06.698Z", "date_only": false, "value": "2026-08-04T00:00:06.698505Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/sysadm_in_up/2279", "record": "CVE-2024-5910", "field": "creation_timestamp", "uuid": "dbe75a38-c0e6-4314-9677-e1ad797c16ee", "url": "https://t.me/sysadm_in_up/2279"}]}