{"metadata": {"vulnerability": "cve-2017-3506", "count": 69, "kinds": {"milestone": 5, "sighting": 30, "kev": 11, "other": 23}}, "data": [{"timestamp": "2016-12-06T00:00:00Z", "date_only": false, "value": "2016-12-06T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2017-3506", "field": "cveMetadata.dateReserved"}, {"timestamp": "2017-04-18T00:00:00Z", "date_only": false, "value": "2017-04-18T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / oracle", "record": "cve-2017-3506", "field": "containers.cna.datePublic"}, {"timestamp": "2017-04-18T22:00:00Z", "date_only": false, "value": "2017-04-18T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1277", "record": "WID-SEC-W-2024-1277", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2017-04-18T22:00:00Z", "date_only": false, "value": "2017-04-18T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1277", "record": "WID-SEC-W-2024-1277", "field": "document.tracking.initial_release_date"}, {"timestamp": "2017-04-18T22:00:00Z", "date_only": false, "value": "2017-04-18T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1277", "record": "WID-SEC-W-2024-1277", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2017-04-21T00:00:00Z", "date_only": true, "value": "2017-04-21", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2017-06089", "record": "CNVD-2017-06089", "field": "submitTime"}, {"timestamp": "2017-04-24T19:00:00Z", "date_only": false, "value": "2017-04-24T19:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2017-3506", "field": "cveMetadata.datePublished"}, {"timestamp": "2017-04-24T19:59:00Z", "date_only": false, "value": "2017-04-24T19:59:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-2F3C-CHF6-54V5", "record": "GHSA-2F3C-CHF6-54V5", "field": "database_specific.nvd_published_at"}, {"timestamp": "2017-04-24T19:59:00Z", "date_only": false, "value": "2017-04-24T19:59Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2017-3506", "record": "GSD-2017-3506", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2017-04-24T19:59:03.037Z", "date_only": false, "value": "2017-04-24T19:59:03.037", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2017-3506", "record": "FKIE_CVE-2017-3506", "field": "published"}, {"timestamp": "2017-05-08T00:00:00Z", "date_only": true, "value": "2017-05-08", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2017-06089", "record": "CNVD-2017-06089", "field": "openTime"}, {"timestamp": "2017-07-10T09:57:01Z", "date_only": false, "value": "2017-07-10T09:57:01.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / oracle", "record": "cve-2017-3506", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2018-09-19T17:29:15Z", "date_only": false, "value": "2018-09-19T17:29:15.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/5ba281fe-cc88-4bf3-a9ef-3c290a021402", "record": "CVE-2017-3506", "field": "creation_timestamp", "uuid": "dce07f6a-8107-451c-8b09-c3dcb9db0e69"}, {"timestamp": "2019-06-20T12:20:36Z", "date_only": false, "value": "2019-06-20T12:20:36.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Pen7esting/216", "record": "CVE-2017-3506", "field": "creation_timestamp", "uuid": "23f9970a-9ab6-441a-be7a-d1bee881860c", "content": "Oracle WebLogic Deserialization RCE Vulnerability 2017~2019\n\nCVE-2019-2729\nCVE-2019-2725\nCVE-2017-10271\nCVE-2017-3506https://t.co/AFSK2UUXyL", "url": "https://t.me/Pen7esting/216"}, {"timestamp": "2019-10-03T00:03:00Z", "date_only": false, "value": "2019-10-03T00:03Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2017-3506", "record": "GSD-2017-3506", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2020-10-09T16:07:00Z", "date_only": false, "value": "2020-10-09T16:07:00.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/fab9047e-3eb6-4d8e-a967-65c02cd3e253", "record": "CVE-2017-3506", "field": "creation_timestamp", "uuid": "0c14905f-4bbc-4606-8725-3bdfb9e30712"}, {"timestamp": "2022-05-13T01:45:32Z", "date_only": false, "value": "2022-05-13T01:45:32Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-2F3C-CHF6-54V5", "record": "GHSA-2F3C-CHF6-54V5", "field": "published"}, {"timestamp": "2023-05-18T12:43:27Z", "date_only": false, "value": "2023-05-18T12:43:27.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/KomunitiSiber/222", "record": "CVE-2017-3506", "field": "creation_timestamp", "uuid": "ffa4b201-93f0-4d3e-ba79-8395284b1c1d", "content": "8220 Gang Exploiting Oracle WebLogic Flaw to Hijack Servers and Mine Cryptocurrency\nhttps://thehackernews.com/2023/05/8220-gang-exploiting-oracle-weblogic.html\n\nThe notorious cryptojacking group tracked as\u00a08220 Gang\u00a0has been spotted weaponizing a six-year-old security flaw in Oracle WebLogic servers to ensnare vulnerable instances into a botnet and distribute cryptocurrency mining malware.\nThe flaw in question is\u00a0CVE-2017-3506\u00a0(CVSS score: 7.4), which, when successfully exploited, could allow an unauthenticated attacker to execute arbitrary commands", "url": "https://t.me/KomunitiSiber/222"}, {"timestamp": "2023-05-18T13:59:53Z", "date_only": false, "value": "2023-05-18T13:59:53.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/Z8pumVuZ4KIKbD3z_qLVtKX2ZId1jIc9RnB-nq_iS7ix3Q", "record": "CVE-2017-3506", "field": "creation_timestamp", "uuid": "893690bb-eb8c-4e97-be35-95b41c7a6073"}, {"timestamp": "2023-11-25T03:21:41Z", "date_only": false, "value": "2023-11-25T03:21:41.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/564", "record": "CVE-2017-3506", "field": "creation_timestamp", "uuid": "0ea81fac-e907-4557-bae2-d5cf16355c85", "content": "#ExploitObserverAlert\n\nCVE-2017-3506\n\nDESCRIPTION: Exploit Observer has 93 entries related to CVE-2017-3506. Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.0, 12.2.1.1 and 12.2.1.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle WebLogic Server accessible data as well as unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).\n\nFIRST-EPSS: 0.969270000\nNVD-IS: 5.2\nNVD-ES: 2.2", "url": "https://t.me/arpsyndicate/564"}, {"timestamp": "2023-12-13T01:21:16.327Z", "date_only": false, "value": "2023-12-13T01:21:16.327309Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2017-3506", "record": "GSD-2017-3506", "field": "gsd.osvSchema.modified"}, {"timestamp": "2023-12-19T17:39:29Z", "date_only": false, "value": "2023-12-19T17:39:29.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/itsec_news/3872", "record": "CVE-2017-3506", "field": "creation_timestamp", "uuid": "a2659495-99d7-414f-817a-db9f51dd4f6f", "content": "\u200b\u26a1\ufe0f\u0413\u0440\u0443\u043f\u043f\u0430 8220 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0442\u0440\u0451\u0445 \u043a\u043e\u043d\u0442\u0438\u043d\u0435\u043d\u0442\u0430\u0445 \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Oracle WebLogic\n\n\ud83d\udcac \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Imperva \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 8220, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0449\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u043e\u0441\u0442\u0438 \u0432 Oracle WebLogic Server \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f.\n\n\u0420\u0435\u0447\u044c \u0438\u0434\u0451\u0442 \u043e CVE-2020-14883 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 7.2), \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0439 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 (RCE), \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432.\n\n\u00ab\u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0433\u0430\u0434\u0436\u0435\u0442\u043e\u0432 \u0438 \u0447\u0430\u0441\u0442\u043e \u0441\u0432\u044f\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0441 CVE-2020-14882 (\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 Oracle WebLogic Server) \u0438\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0443\u0442\u0435\u0447\u0435\u043a, \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0445 \u0438\u043b\u0438 \u0441\u043b\u0430\u0431\u044b\u0445 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445\u00bb, \u2014 \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u043e\u0442\u0447\u0451\u0442\u0435 Imperva.\n\n\u0413\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 8220 \u0443\u0436\u0435 \u0438\u043c\u0435\u0435\u0442 \u043e\u043f\u044b\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0441 \u0446\u0435\u043b\u044c\u044e \u043a\u0440\u0438\u043f\u0442\u043e\u0434\u0436\u0435\u043a\u0438\u043d\u0433\u0430. \u0412 \u043c\u0430\u0435 \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430 \u043e\u043d\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0434\u0440\u0443\u0433\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Oracle WebLogic ( CVE-2017-3506 , \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 7.4) \u0434\u043b\u044f \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0432 \u0431\u043e\u0442\u043d\u0435\u0442 \u0434\u043b\u044f \u043c\u0430\u0439\u043d\u0438\u043d\u0433\u0430 \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u044b.\n\n\u041d\u0435\u0434\u0430\u0432\u043d\u0438\u0435 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0430\u0442\u0430\u043a, \u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 Imperva, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 CVE-2020-14883 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 XML-\u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0433\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043a\u043e\u0434\u0430, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0435\u0433\u043e \u0437\u0430 \u0440\u0430\u0437\u0432\u0451\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043c\u0430\u0439\u043d\u0438\u043d\u0433\u0430 \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u044b, \u0442\u0430\u043a\u043e\u0433\u043e \u043a\u0430\u043a Agent Tesla, rhajk \u0438 nasqa.\n\n\u00ab\u0421\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043e\u0449\u0443\u0449\u0435\u043d\u0438\u0435, \u0447\u0442\u043e \u0433\u0440\u0443\u043f\u043f\u0430 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u043d\u0435\u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e, \u0431\u0435\u0437 \u044f\u0432\u043d\u043e\u0439 \u0442\u0435\u043d\u0434\u0435\u043d\u0446\u0438\u0438 \u0432 \u0432\u044b\u0431\u043e\u0440\u0435 \u0441\u0442\u0440\u0430\u043d\u044b \u0438\u043b\u0438 \u043e\u0442\u0440\u0430\u0441\u043b\u0438\u00bb, \u2014 \u043e\u0442\u043c\u0435\u0442\u0438\u043b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 Imperva \u0414\u0430\u043d\u0438\u044d\u043b\u044c \u0414\u0436\u043e\u043d\u0441\u0442\u043e\u043d.\n\n\u0426\u0435\u043b\u044f\u043c\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 8220 \u0443\u0436\u0435 \u0441\u0442\u0430\u043b\u0438 \u0441\u0435\u043a\u0442\u043e\u0440\u0430 \u0437\u0434\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f, \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0439 \u0438 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u0445 \u0443\u0441\u043b\u0443\u0433 \u0432 \u0421\u0428\u0410, \u042e\u0436\u043d\u043e\u0439 \u0410\u0444\u0440\u0438\u043a\u0435, \u0418\u0441\u043f\u0430\u043d\u0438\u0438, \u041a\u043e\u043b\u0443\u043c\u0431\u0438\u0438 \u0438 \u041c\u0435\u043a\u0441\u0438\u043a\u0435.\n\n\u00ab\u0413\u0440\u0443\u043f\u043f\u0430 \u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f \u043d\u0430 \u043f\u0440\u043e\u0441\u0442\u044b\u0435, \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\u00bb, \u2014 \u0434\u043e\u0431\u0430\u0432\u0438\u043b \u0414\u0436\u043e\u043d\u0441\u0442\u043e\u043d. \u00ab\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0438\u0445 \u043c\u0435\u0442\u043e\u0434\u044b \u0441\u0447\u0438\u0442\u0430\u044e\u0442\u0441\u044f \u043d\u0435\u0441\u043b\u043e\u0436\u043d\u044b\u043c\u0438, \u043e\u043d\u0438 \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e \u044d\u0432\u043e\u043b\u044e\u0446\u0438\u043e\u043d\u0438\u0440\u0443\u044e\u0442 \u0432 \u0441\u0432\u043e\u0438\u0445 \u0442\u0430\u043a\u0442\u0438\u043a\u0430\u0445 \u0438 \u0442\u0435\u0445\u043d\u0438\u043a\u0430\u0445, \u0447\u0442\u043e\u0431\u044b \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f\u00bb.\n\n\ud83d\udd14 ITsec NEWS", "url": "https://t.me/itsec_news/3872"}, {"timestamp": "2024-06-03T00:00:00Z", "date_only": false, "value": "2024-06-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2017-3506", "field": "timestamps.asserted_at", "uuid": "8263e2e0-c0a9-4039-98bd-82a75b76ba8f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-06-03T00:00:00Z", "date_only": false, "value": "2024-06-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2017-3506", "field": "timestamps.asserted_at", "uuid": "e70a30b7-6221-4a46-800d-7b8cba1f80b8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-06-03T00:00:00Z", "date_only": true, "value": "2024-06-03", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "cve-2017-3506", "field": "containers.adp.0.metrics.2.other.content.dateAdded"}, {"timestamp": "2024-06-03T00:00:00Z", "date_only": false, "value": "2024-06-03T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2017-3506", "field": "evidence.0.details.added_date", "uuid": "e70a30b7-6221-4a46-800d-7b8cba1f80b8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-06-03T00:00:00Z", "date_only": true, "value": "2024-06-03", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2017-3506", "field": "evidence.0.details.date_added", "uuid": "8263e2e0-c0a9-4039-98bd-82a75b76ba8f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-06-03T00:00:00Z", "date_only": false, "value": "2024-06-03T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2017-3506", "field": "timestamps.first_seen_at", "uuid": "8263e2e0-c0a9-4039-98bd-82a75b76ba8f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-06-03T00:00:00Z", "date_only": false, "value": "2024-06-03T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2017-3506", "field": "timestamps.first_seen_at", "uuid": "e70a30b7-6221-4a46-800d-7b8cba1f80b8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-06-03T00:00:00Z", "date_only": false, "value": "2024-06-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2017-3506", "field": "status.status_updated_at", "uuid": "8263e2e0-c0a9-4039-98bd-82a75b76ba8f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-06-03T00:00:00Z", "date_only": false, "value": "2024-06-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2017-3506", "field": "status.status_updated_at", "uuid": "e70a30b7-6221-4a46-800d-7b8cba1f80b8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-06-03T00:00:00Z", "date_only": false, "value": "2024-06-03T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "cve-2017-3506", "field": "containers.adp.0.timeline.0.time"}, {"timestamp": "2024-06-03T18:10:02Z", "date_only": false, "value": "2024-06-03T18:10:02.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2017-3506", "field": "creation_timestamp", "uuid": "b4406605-4189-4bf2-9657-80440a82a9e2"}, {"timestamp": "2024-06-03T22:00:00Z", "date_only": false, "value": "2024-06-03T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1277", "record": "WID-SEC-W-2024-1277", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2024-06-04T06:05:48Z", "date_only": false, "value": "2024-06-04T06:05:48.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/5057", "record": "CVE-2017-3506", "field": "creation_timestamp", "uuid": "ac19adcc-0bbd-4790-9256-73a05abc75d8", "content": "\ud83d\udea8 Alert - CISA has added a critical flaw in Oracle WebLogic Server to its KEV catalog due to active exploitation. \n \nDetails: https://thehackernews.com/2024/06/oracle-weblogic-server-os-command.html \n \nThis OS command injection vulnerability (CVE-2017-3506) could allow attackers to take control of affected servers.", "url": "https://t.me/thehackernews/5057"}, {"timestamp": "2024-06-04T06:24:23Z", "date_only": false, "value": "2024-06-04T06:24:23.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/-FwDw_-0oYCibu6JaJ5TIUZcecQ8JUkHzwVeEJh8I4mLXlE", "record": "CVE-2017-3506", "field": "creation_timestamp", "uuid": "95e859c1-9e55-436d-aaa5-c9c400ea3e3b"}, {"timestamp": "2024-06-04T06:46:17Z", "date_only": false, "value": "2024-06-04T06:46:17.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/KomunitiSiber/2049", "record": "CVE-2017-3506", "field": "creation_timestamp", "uuid": "c3c5942b-c566-4c54-b7d0-b735f255c525", "content": "Oracle WebLogic Server OS Command Injection Flaw Under Active Attack\nhttps://thehackernews.com/2024/06/oracle-weblogic-server-os-command.html\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a security flaw impacting the Oracle WebLogic Server to the Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.\nTracked as CVE-2017-3506 (CVSS score: 7.4), the issue concerns an operating system (OS) command injection vulnerability that could be exploited to obtain unauthorized", "url": "https://t.me/KomunitiSiber/2049"}, {"timestamp": "2024-06-04T06:53:47Z", "date_only": false, "value": "2024-06-04T06:53:47.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/Xo4DxTRP5onBu8JpH-tADiU4VEmiyg4rFzQ7W1Mupb_5Lw", "record": "CVE-2017-3506", "field": "creation_timestamp", "uuid": "2fa3b0b9-0c9e-46a5-a9ae-22bb70a4be91"}, {"timestamp": "2024-06-04T08:29:07Z", "date_only": false, "value": "2024-06-04T08:29:07.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/HRtGTTdcgrdFfC4KgRublbD9-xH8YcnZ9X4OpnsoX9pmDw", "record": "CVE-2017-3506", "field": "creation_timestamp", "uuid": "fe2faf60-fd5a-4748-a88c-5179e79d84e7"}, {"timestamp": "2024-06-04T08:29:08Z", "date_only": false, "value": "2024-06-04T08:29:08.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/tengkorakcybercrewz/10531", "record": "CVE-2017-3506", "field": "creation_timestamp", "uuid": "38fcd2c6-415d-4fa2-9273-1f5901064bfd", "content": "The Hacker News\nOracle WebLogic Server OS Command Injection Flaw Under Active Attack\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a security flaw impacting the Oracle WebLogic Server to the Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.\nTracked as CVE-2017-3506 (CVSS score: 7.4), the issue concerns an operating system (OS) command injection vulnerability that could be exploited to obtain unauthorized", "url": "https://t.me/tengkorakcybercrewz/10531"}, {"timestamp": "2024-06-04T08:29:08Z", "date_only": false, "value": "2024-06-04T08:29:08.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/tengkorakcybercrewz/2083", "record": "CVE-2017-3506", "field": "creation_timestamp", "uuid": "c3bd6eff-b976-4ac1-b7d9-657fcf850d81", "content": "The Hacker News\nOracle WebLogic Server OS Command Injection Flaw Under Active Attack\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a security flaw impacting the Oracle WebLogic Server to the Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.\nTracked as CVE-2017-3506 (CVSS score: 7.4), the issue concerns an operating system (OS) command injection vulnerability that could be exploited to obtain unauthorized", "url": "https://t.me/tengkorakcybercrewz/2083"}, {"timestamp": "2024-06-04T15:07:07Z", "date_only": false, "value": "2024-06-04T15:07:07.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/information_security_channel/52310", "record": "CVE-2017-3506", "field": "creation_timestamp", "uuid": "716b89ef-8f62-48f5-92c2-318d574010eb", "content": "CISA Warns of Attacks Exploiting Old Oracle WebLogic Vulnerability\nhttps://www.securityweek.com/cisa-warns-of-attacks-exploiting-old-oracle-weblogic-vulnerability/\n\nCISA has added an old Oracle WebLogic flaw tracked as CVE-2017-3506 to its known exploited vulnerabilities catalog.\nThe post CISA Warns of Attacks Exploiting Old Oracle WebLogic Vulnerability (https://www.securityweek.com/cisa-warns-of-attacks-exploiting-old-oracle-weblogic-vulnerability/) appeared first on SecurityWeek (https://www.securityweek.com/).", "url": "https://t.me/information_security_channel/52310"}, {"timestamp": "2024-06-06T19:08:56Z", "date_only": false, "value": "2024-06-06T19:08:56.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/zv0-WN1ekGzYSPAJbDAdNFDyGxKQy119XVSjXkoYLwf1MgNb", "record": "CVE-2017-3506", "field": "creation_timestamp", "uuid": "af48b9ff-9a16-4b25-add0-0dc467f3e950"}, {"timestamp": "2024-06-13T14:24:39Z", "date_only": false, "value": "2024-06-13T14:24:39.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/TWFAujDiM9Q_sDIuwdzuCj1B9CB6p4iXNPfDtcfRQau4qapO", "record": "CVE-2017-3506", "field": "creation_timestamp", "uuid": "96052e9b-f3ba-4aa7-aa13-270b9cde6920"}, {"timestamp": "2024-06-24T00:00:00Z", "date_only": true, "value": "2024-06-24", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2017-3506", "field": "evidence.0.details.due_date", "uuid": "8263e2e0-c0a9-4039-98bd-82a75b76ba8f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-06-28T03:55:18.693Z", "date_only": false, "value": "2024-06-28T03:55:18.693969Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2017-3506", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2024-06-28T03:55:18.693Z", "date_only": false, "value": "2024-06-28T03:55:18.693969Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2017-3506", "record": "FKIE_CVE-2017-3506", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-06-28T19:48:04Z", "date_only": false, "value": "2024-06-28T19:48:04.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/itsec_news/4519", "record": "CVE-2017-3506", "field": "creation_timestamp", "uuid": "098b6f94-4226-4d64-9028-bce37e60aac2", "content": "\u200b\u26a1\ufe0f\u041c\u0430\u0439\u043d\u0435\u0440\u044b-\u043d\u0435\u0432\u0438\u0434\u0438\u043c\u043a\u0438: 8220 Gang \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 WireGuard \u0434\u043b\u044f \u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0430\u0442\u0430\u043a\n\n\ud83d\udcac\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u043d\u043e\u0432\u044b\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u043f\u043e \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043c\u0430\u0439\u043d\u0438\u043d\u0433\u0443 \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u044b (\u043a\u0440\u0438\u043f\u0442\u043e\u0434\u0436\u0435\u043a\u0438\u043d\u0433\u0443), \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043c\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u043e\u0439 8220 Gang, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Oracle WebLogic Server.\n\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u0438\u0437 Trend Micro \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u0432 \u0441\u0432\u043e\u0451\u043c \u0441\u0432\u0435\u0436\u0435\u043c \u043e\u0442\u0447\u0451\u0442\u0435, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0442 \u0442\u0435\u0445\u043d\u0438\u043a\u0438 \u0431\u0435\u0441\u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a Reflective DLL Loading. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u041f\u041e \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0432 \u043f\u0430\u043c\u044f\u0442\u0438, \u0438\u0437\u0431\u0435\u0433\u0430\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u043d\u0430 \u0434\u0438\u0441\u043a\u0435.\n8220 Gang, \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c Water Sigbin, \u0447\u0430\u0441\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0432 \u0441\u0432\u043e\u0438\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Oracle WebLogic Server, \u0432\u043a\u043b\u044e\u0447\u0430\u044f CVE-2017-3506, CVE-2017-10271 \u0438 CVE-2023-21839. \u0423\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0442\u0441\u044f \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043a\u0440\u0438\u043f\u0442\u043e\u043c\u0430\u0439\u043d\u0435\u0440\u0430.\n\n\u041f\u043e\u0441\u043b\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u044e\u0442 \u0441\u043a\u0440\u0438\u043f\u0442 PowerShell, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u043f\u0435\u0440\u0432\u044b\u0439 \u044d\u0442\u0430\u043f \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430 (\u00abwireguard2-3.exe\u00bb). \u042d\u0442\u043e\u0442 \u0444\u0430\u0439\u043b \u043c\u0430\u0441\u043a\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 WireGuard VPN, \u043d\u043e \u043d\u0430 \u0441\u0430\u043c\u043e\u043c \u0434\u0435\u043b\u0435 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0434\u0440\u0443\u0433\u043e\u0439 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b (\u00abcvtres.exe\u00bb) \u043f\u0440\u044f\u043c\u043e \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e DLL (\u00abZxpus.dll\u00bb).\n\n\u042d\u0442\u043e\u0442 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b \u0441\u043b\u0443\u0436\u0438\u0442 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430 PureCrypter (\u00abTixrgtluffu.dll\u00bb), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043d\u0430 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0437\u0430\u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u0430\u0434\u0430\u0447\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0434\u043b\u044f \u0430\u043a\u0442\u0438\u0432\u0430\u0446\u0438\u0438 \u043c\u0430\u0439\u043d\u0435\u0440\u0430, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0432 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u0430 Microsoft Defender.\n\n\u041a\u043e\u043c\u0430\u043d\u0434\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u043e\u0442\u0432\u0435\u0447\u0430\u0435\u0442 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435\u043c, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u043c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f XMRig, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0435\u0442 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u043c\u0430\u0439\u043d\u0435\u0440 \u0441 \u0434\u043e\u043c\u0435\u043d\u0430, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u043e\u0433\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438. \u0421\u0430\u043c \u043c\u0430\u0439\u043d\u0435\u0440 \u043c\u0430\u0441\u043a\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0439 \u0431\u0438\u043d\u0430\u0440\u043d\u044b\u0439 \u0444\u0430\u0439\u043b Microsoft (\u00abAddinProcess.exe\u00bb).\n\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e \u0441\u043a\u0440\u044b\u0432\u0430\u0442\u044c\u0441\u044f \u043e\u0442 \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0438 \u0437\u0430\u0449\u0438\u0442\u044b. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0431\u0435\u0441\u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0445 \u0442\u0435\u0445\u043d\u0438\u043a \u0437\u0430\u0442\u0440\u0443\u0434\u043d\u044f\u0435\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Oracle WebLogic Server, \u0433\u0440\u0443\u043f\u043f\u0430 8220 Gang \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0438\u0436\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0438\u0445 \u0446\u0435\u043b\u0435\u0439. \u0418\u0445 \u043c\u0435\u0442\u043e\u0434\u044b \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0441\u0442\u0432\u0443\u044e\u0442\u0441\u044f, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0430\u0442\u0430\u043a\u0438 \u0433\u0440\u0443\u043f\u043f\u044b \u0432\u0441\u0451 \u0431\u043e\u043b\u0435\u0435 \u0438\u0437\u043e\u0449\u0440\u0435\u043d\u043d\u044b\u043c\u0438 \u0438 \u043e\u043f\u0430\u0441\u043d\u044b\u043c\u0438.\n\n\u041e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u043c\u0438\u0448\u0435\u043d\u044c\u044e \u044d\u0442\u0438\u0445 \u0445\u0430\u043a\u0435\u0440\u043e\u0432 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u0438 \u0441\u0442\u0430\u0440\u044b\u043c\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0438\u0445 \u043b\u0451\u0433\u043a\u043e\u0439 \u0434\u043e\u0431\u044b\u0447\u0435\u0439 \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0442\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c \u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c \u0441\u0432\u043e\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0447\u0442\u043e\u0431\u044b \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0430\u0442\u0430\u043a.\n\n\ud83d\udd14 ITsec NEWS", "url": "https://t.me/itsec_news/4519"}, {"timestamp": "2024-08-05T14:30:57.671Z", "date_only": false, "value": "2024-08-05T14:30:57.671Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2017-3506", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-11-11T23:00:00Z", "date_only": false, "value": "2024-11-11T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1277", "record": "WID-SEC-W-2024-1277", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2024-11-11T23:00:00Z", "date_only": false, "value": "2024-11-11T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1277", "record": "WID-SEC-W-2024-1277", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-11-12T10:06:32.931Z", "date_only": false, "value": "2024-11-12T10:06:32.931+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1277", "record": "WID-SEC-W-2024-1277", "field": "document.tracking.generator.date"}, {"timestamp": "2025-02-23T02:10:55Z", "date_only": false, "value": "2025-02-23T02:10:55.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2017-3506", "field": "creation_timestamp", "uuid": "4c8b7171-a927-41ac-a74b-52cb299cc90e"}, {"timestamp": "2025-08-31T03:01:24Z", "date_only": false, "value": "2025-08-31T03:01:24.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "record": "CVE-2017-3506", "field": "creation_timestamp", "uuid": "d189d63c-e657-4856-8903-79cf77ba4ac1"}, {"timestamp": "2025-10-21T23:55:42.100Z", "date_only": false, "value": "2025-10-21T23:55:42.100Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2017-3506", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:55:42.100Z", "date_only": false, "value": "2025-10-21T23:55:42.100Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2017-3506", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:31:20Z", "date_only": false, "value": "2025-10-22T00:31:20Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-2F3C-CHF6-54V5", "record": "GHSA-2F3C-CHF6-54V5", "field": "modified"}, {"timestamp": "2026-02-02T12:26:35.357Z", "date_only": false, "value": "2026-02-02T12:26:35.357998Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/143f687a-1e49-4246-8875-715d23ee0553", "record": "CVE-2017-3506", "field": "creation_timestamp", "uuid": "663ae268-63b5-4d67-a1a4-bb18ba6698b2", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/143f687a-1e49-4246-8875-715d23ee0553"}, {"timestamp": "2026-02-02T12:26:35.357Z", "date_only": false, "value": "2026-02-02T12:26:35.357998Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/143f687a-1e49-4246-8875-715d23ee0553", "record": "CVE-2017-3506", "field": "creation_timestamp", "uuid": "8fd6c565-553b-4070-9de1-e8a893781799", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/143f687a-1e49-4246-8875-715d23ee0553"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2017-3506", "field": "timestamps.recorded_at", "uuid": "8263e2e0-c0a9-4039-98bd-82a75b76ba8f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-17T01:18:26.670Z", "date_only": false, "value": "2026-06-17T01:18:26.670", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2017-3506", "record": "FKIE_CVE-2017-3506", "field": "lastModified"}, {"timestamp": "2026-06-19T12:46:39.334Z", "date_only": false, "value": "2026-06-19T12:46:39.334327Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fb3cac0e-618e-40e3-9481-9cf1e62b67b4", "record": "CVE-2017-3506", "field": "creation_timestamp", "uuid": "d801f74e-ac5a-436f-8088-2f8cd22b7a52", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fb3cac0e-618e-40e3-9481-9cf1e62b67b4"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2017-3506", "field": "timestamps.recorded_at", "uuid": "e70a30b7-6221-4a46-800d-7b8cba1f80b8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:14:21.931Z", "date_only": false, "value": "2026-06-23T11:14:21.931385Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/e70a30b7-6221-4a46-800d-7b8cba1f80b8", "record": "CVE-2017-3506", "field": "creation_timestamp", "uuid": "81daa465-810c-46a4-8ec7-be3a8937faf6", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/e70a30b7-6221-4a46-800d-7b8cba1f80b8"}, {"timestamp": "2026-06-23T14:05:54.186Z", "date_only": false, "value": "2026-06-23T14:05:54.186416Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/172c0c7f-f4fe-44f8-8f67-28a81c935f62", "record": "CVE-2017-3506", "field": "creation_timestamp", "uuid": "68f257e6-c900-4c60-8020-2670bee698a4", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/172c0c7f-f4fe-44f8-8f67-28a81c935f62"}, {"timestamp": "2026-07-06T11:00:14.684Z", "date_only": false, "value": "2026-07-06T11:00:14.684337Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/123", "record": "CVE-2017-3506", "field": "creation_timestamp", "uuid": "37a0df70-e289-46d0-abfe-a941b47665e3", "url": "https://t.me/ZerodayAlert/123"}, {"timestamp": "2026-07-07T00:00:22.949Z", "date_only": false, "value": "2026-07-07T00:00:22.949969Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/123", "record": "CVE-2017-3506", "field": "creation_timestamp", "uuid": "61c45d7f-a442-4201-b2ac-9d3e6308c6cf", "url": "https://t.me/ZerodayAlert/123"}, {"timestamp": "2026-07-12T04:00:04.881Z", "date_only": false, "value": "2026-07-12T04:00:04.881667Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ZerodayAlert/123", "record": "CVE-2017-3506", "field": "creation_timestamp", "uuid": "54814802-8d81-474c-a02b-2cb510cedc07", "url": "https://t.me/ZerodayAlert/123"}, {"timestamp": "2026-07-13T00:00:53.235Z", "date_only": false, "value": "2026-07-13T00:00:53.235959Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ZerodayAlert/123", "record": "CVE-2017-3506", "field": "creation_timestamp", "uuid": "d8bfc92f-bf8f-4bc2-bd15-ea0d897e7cc0", "url": "https://t.me/ZerodayAlert/123"}]}