{"metadata": {"vulnerability": "cve-2021-3156", "count": 526, "kinds": {"milestone": 61, "sighting": 159, "kev": 11, "other": 295}}, "data": [{"timestamp": "2020-09-03T00:00:00Z", "date_only": false, "value": "2020-09-03T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2021:0395", "record": "RHSA-2021:0395", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2020-09-03T00:00:00Z", "date_only": false, "value": "2020-09-03T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2021:0401", "record": "RHSA-2021:0401", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2021-01-15T00:00:00Z", "date_only": false, "value": "2021-01-15T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2021-3156", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-01-19T00:00:00Z", "date_only": false, "value": "2021-01-19T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2021:0219", "record": "RHSA-2021:0219", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2021-01-19T00:00:00Z", "date_only": false, "value": "2021-01-19T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2021:0220", "record": "RHSA-2021:0220", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2021-01-19T00:00:00Z", "date_only": false, "value": "2021-01-19T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2021:0222", "record": "RHSA-2021:0222", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2021-01-19T00:00:00Z", "date_only": false, "value": "2021-01-19T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2021:0223", "record": "RHSA-2021:0223", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2021-01-19T00:00:00Z", "date_only": false, "value": "2021-01-19T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2021:0224", "record": "RHSA-2021:0224", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2021-01-19T00:00:00Z", "date_only": false, "value": "2021-01-19T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2021:0225", "record": "RHSA-2021:0225", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2021-01-19T00:00:00Z", "date_only": false, "value": "2021-01-19T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2021:0226", "record": "RHSA-2021:0226", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2021-01-19T00:00:00Z", "date_only": false, "value": "2021-01-19T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2021:0227", "record": "RHSA-2021:0227", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2021-01-19T00:00:00Z", "date_only": false, "value": "2021-01-19T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2021:0395", "record": "RHSA-2021:0395", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2021-01-19T00:00:00Z", "date_only": false, "value": "2021-01-19T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2021:0401", "record": "RHSA-2021:0401", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2021-01-19T00:00:00Z", "date_only": false, "value": "2021-01-19T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2021:0395", "record": "RHSA-2021:0395", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2021-01-19T00:00:00Z", "date_only": false, "value": "2021-01-19T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2021:0401", "record": "RHSA-2021:0401", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2021-01-26T00:00:00Z", "date_only": false, "value": "2021-01-26T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2021:0218", "record": "RHSA-2021:0218", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-01-26T00:00:00Z", "date_only": false, "value": "2021-01-26T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2021:0221", "record": "RHSA-2021:0221", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-01-26T00:00:00Z", "date_only": false, "value": "2021-01-26T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 RHSA-2021:0218", "record": "RHSA-2021:0218", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2021-01-26T00:00:00Z", "date_only": false, "value": "2021-01-26T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 RHSA-2021:0221", "record": "RHSA-2021:0221", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2021-01-26T00:00:00Z", "date_only": false, "value": "2021-01-26T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202101-1926", "record": "VAR-202101-1926", "field": "sources_release_date.data.1.date"}, {"timestamp": "2021-01-26T00:00:00Z", "date_only": false, "value": "2021-01-26T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 RHSA-2021:0218", "record": "RHSA-2021:0218", "field": "document.tracking.generator.date"}, {"timestamp": "2021-01-26T00:00:00Z", "date_only": false, "value": "2021-01-26T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 RHSA-2021:0221", "record": "RHSA-2021:0221", "field": "document.tracking.generator.date"}, {"timestamp": "2021-01-26T00:00:00Z", "date_only": true, "value": "2021-01-26", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-063", "record": "CERTFR-2021-AVI-063", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2021-01-26T00:00:00Z", "date_only": false, "value": "2021-01-26T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 RHSA-2021:0218", "record": "RHSA-2021:0218", "field": "document.tracking.initial_release_date"}, {"timestamp": "2021-01-26T00:00:00Z", "date_only": false, "value": "2021-01-26T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 RHSA-2021:0221", "record": "RHSA-2021:0221", "field": "document.tracking.initial_release_date"}, {"timestamp": "2021-01-26T00:00:00Z", "date_only": false, "value": "2021-01-26T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2021-3156", "field": "cveMetadata.datePublished"}, {"timestamp": "2021-01-26T18:00:00Z", "date_only": false, "value": "2021-01-26T18:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2021-3156", "record": "UBUNTU-CVE-2021-3156", "field": "published"}, {"timestamp": "2021-01-26T18:00:00Z", "date_only": false, "value": "2021-01-26T18:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2021:0219", "record": "RHSA-2021:0219", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2021-01-26T18:00:00Z", "date_only": false, "value": "2021-01-26T18:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2021:0220", "record": "RHSA-2021:0220", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2021-01-26T18:00:00Z", "date_only": false, "value": "2021-01-26T18:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2021:0222", "record": "RHSA-2021:0222", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2021-01-26T18:00:00Z", "date_only": false, "value": "2021-01-26T18:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2021:0223", "record": "RHSA-2021:0223", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2021-01-26T18:00:00Z", "date_only": false, "value": "2021-01-26T18:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2021:0224", "record": "RHSA-2021:0224", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2021-01-26T18:00:00Z", "date_only": false, "value": "2021-01-26T18:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2021:0225", "record": "RHSA-2021:0225", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2021-01-26T18:00:00Z", "date_only": false, "value": "2021-01-26T18:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2021:0226", "record": "RHSA-2021:0226", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2021-01-26T18:00:00Z", "date_only": false, "value": "2021-01-26T18:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2021:0227", "record": "RHSA-2021:0227", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2021-01-26T18:00:00Z", "date_only": false, "value": "2021-01-26T18:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2021:0395", "record": "RHSA-2021:0395", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2021-01-26T18:00:00Z", "date_only": false, "value": "2021-01-26T18:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2021:0401", "record": "RHSA-2021:0401", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2021-01-26T18:20:20Z", "date_only": false, "value": "2021-01-26T18:20:20Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2021:0225-1", "record": "SUSE-SU-2021:0225-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-01-26T18:20:20Z", "date_only": false, "value": "2021-01-26T18:20:20Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2021:0225-1", "record": "SUSE-SU-2021:0225-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2021-01-26T18:20:20Z", "date_only": false, "value": "2021-01-26T18:20:20Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2021:0225-1", "record": "SUSE-SU-2021:0225-1", "field": "document.tracking.generator.date"}, {"timestamp": "2021-01-26T18:20:20Z", "date_only": false, "value": "2021-01-26T18:20:20Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2021:0225-1", "record": "SUSE-SU-2021:0225-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2021-01-26T18:21:06Z", "date_only": false, "value": "2021-01-26T18:21:06Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2021:0226-1", "record": "SUSE-SU-2021:0226-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-01-26T18:21:06Z", "date_only": false, "value": "2021-01-26T18:21:06Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2021:0226-1", "record": "SUSE-SU-2021:0226-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2021-01-26T18:21:06Z", "date_only": false, "value": "2021-01-26T18:21:06Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2021:0226-1", "record": "SUSE-SU-2021:0226-1", "field": "document.tracking.generator.date"}, {"timestamp": "2021-01-26T18:21:06Z", "date_only": false, "value": "2021-01-26T18:21:06Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2021:0226-1", "record": "SUSE-SU-2021:0226-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2021-01-26T18:23:08Z", "date_only": false, "value": "2021-01-26T18:23:08Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2021:0227-1", "record": "SUSE-SU-2021:0227-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-01-26T18:23:08Z", "date_only": false, "value": "2021-01-26T18:23:08Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2021:0227-1", "record": "SUSE-SU-2021:0227-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2021-01-26T18:23:08Z", "date_only": false, "value": "2021-01-26T18:23:08Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2021:0227-1", "record": "SUSE-SU-2021:0227-1", "field": "document.tracking.generator.date"}, {"timestamp": "2021-01-26T18:23:08Z", "date_only": false, "value": "2021-01-26T18:23:08Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2021:0227-1", "record": "SUSE-SU-2021:0227-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2021-01-26T19:30:14Z", "date_only": false, "value": "2021-01-26T19:30:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/tech_b0lt_Genona/2423", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "e4f629ad-4038-4ef6-9877-1af981a982a8", "content": "Heap-based buffer overflow in Sudo (CVE-2021-3156)\n\nNice write-up and root cause analysis of the bug. \n\nSummary\n========================================================================\n\nWe discovered a heap-based buffer overflow in Sudo\n(https://www.sudo.ws/). This vulnerability:\n\n- is exploitable by any local user (normal users and system users,\n  sudoers and non-sudoers), without authentication (i.e., the attacker\n  does not need to know the user's password);\n\n- was introduced in July 2011 (commit 8255ed69), and affects all legacy\n  versions from 1.8.2 to 1.8.31p2 and all stable versions from 1.9.0 to\n  1.9.5p1, in their default configuration.\n\nWe developed three different exploits for this vulnerability, and\nobtained full root privileges on Ubuntu 20.04 (Sudo 1.8.31), Debian 10\n(Sudo 1.8.27), and Fedora 33 (Sudo 1.9.2). Other operating systems and\ndistributions are probably also exploitable.\n\nhttps://www.openwall.com/lists/oss-security/2021/01/26/3", "url": "https://t.me/tech_b0lt_Genona/2423"}, {"timestamp": "2021-01-26T19:34:17Z", "date_only": false, "value": "2021-01-26T19:34:17+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2021:0226", "record": "RHSA-2021:0226", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-01-26T19:34:17Z", "date_only": false, "value": "2021-01-26T19:34:17+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2021:0226", "record": "RHSA-2021:0226", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2021-01-26T19:34:17Z", "date_only": false, "value": "2021-01-26T19:34:17+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2021:0226", "record": "RHSA-2021:0226", "field": "document.tracking.initial_release_date"}, {"timestamp": "2021-01-26T19:36:08Z", "date_only": false, "value": "2021-01-26T19:36:08+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2021:0220", "record": "RHSA-2021:0220", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-01-26T19:36:08Z", "date_only": false, "value": "2021-01-26T19:36:08+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2021:0220", "record": "RHSA-2021:0220", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2021-01-26T19:36:08Z", "date_only": false, "value": "2021-01-26T19:36:08+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2021:0220", "record": "RHSA-2021:0220", "field": "document.tracking.initial_release_date"}, {"timestamp": "2021-01-26T19:47:02Z", "date_only": false, "value": "2021-01-26T19:47:02+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2021:0225", "record": "RHSA-2021:0225", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-01-26T19:47:02Z", "date_only": false, "value": "2021-01-26T19:47:02+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2021:0225", "record": "RHSA-2021:0225", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2021-01-26T19:47:02Z", "date_only": false, "value": "2021-01-26T19:47:02+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2021:0225", "record": "RHSA-2021:0225", "field": "document.tracking.initial_release_date"}, {"timestamp": "2021-01-26T19:53:08Z", "date_only": false, "value": "2021-01-26T19:53:08+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2021:0219", "record": "RHSA-2021:0219", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-01-26T19:53:08Z", "date_only": false, "value": "2021-01-26T19:53:08+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2021:0219", "record": "RHSA-2021:0219", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2021-01-26T19:53:08Z", "date_only": false, "value": "2021-01-26T19:53:08+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2021:0219", "record": "RHSA-2021:0219", "field": "document.tracking.initial_release_date"}, {"timestamp": "2021-01-26T19:56:43Z", "date_only": false, "value": "2021-01-26T19:56:43+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2021:0227", "record": "RHSA-2021:0227", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-01-26T19:56:43Z", "date_only": false, "value": "2021-01-26T19:56:43+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2021:0227", "record": "RHSA-2021:0227", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2021-01-26T19:56:43Z", "date_only": false, "value": "2021-01-26T19:56:43+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2021:0227", "record": "RHSA-2021:0227", "field": "document.tracking.initial_release_date"}, {"timestamp": "2021-01-26T20:06:15Z", "date_only": false, "value": "2021-01-26T20:06:15+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2021:0224", "record": "RHSA-2021:0224", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-01-26T20:06:15Z", "date_only": false, "value": "2021-01-26T20:06:15+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2021:0224", "record": "RHSA-2021:0224", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2021-01-26T20:06:15Z", "date_only": false, "value": "2021-01-26T20:06:15+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2021:0224", "record": "RHSA-2021:0224", "field": "document.tracking.initial_release_date"}, {"timestamp": "2021-01-26T20:51:11Z", "date_only": false, "value": "2021-01-26T20:51:11+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2021:0222", "record": "RHSA-2021:0222", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-01-26T20:51:11Z", "date_only": false, "value": "2021-01-26T20:51:11+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2021:0222", "record": "RHSA-2021:0222", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2021-01-26T20:51:11Z", "date_only": false, "value": "2021-01-26T20:51:11+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2021:0222", "record": "RHSA-2021:0222", "field": "document.tracking.initial_release_date"}, {"timestamp": "2021-01-26T21:15:00Z", "date_only": false, "value": "2021-01-26T21:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-W5VH-2923-GP5C", "record": "GHSA-W5VH-2923-GP5C", "field": "database_specific.nvd_published_at"}, {"timestamp": "2021-01-26T21:15:12.987Z", "date_only": false, "value": "2021-01-26T21:15:12.987000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202101-1926", "record": "VAR-202101-1926", "field": "sources_release_date.data.9.date"}, {"timestamp": "2021-01-26T21:15:12.987Z", "date_only": false, "value": "2021-01-26T21:15:12.987", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-3156", "record": "FKIE_CVE-2021-3156", "field": "published"}, {"timestamp": "2021-01-26T21:15:12.987Z", "date_only": false, "value": "2021-01-26T21:15:12.987", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2021-3156", "record": "GSD-2021-3156", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2021-01-26T23:00:00Z", "date_only": false, "value": "2021-01-26T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0066", "record": "WID-SEC-W-2023-0066", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-01-26T23:00:00Z", "date_only": false, "value": "2021-01-26T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0066", "record": "WID-SEC-W-2023-0066", "field": "document.tracking.initial_release_date"}, {"timestamp": "2021-01-26T23:00:00Z", "date_only": false, "value": "2021-01-26T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0066", "record": "WID-SEC-W-2023-0066", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2021-01-27T00:00:00Z", "date_only": false, "value": "2021-01-27T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-063", "record": "CERTFR-2021-AVI-063", "field": "last_revision_date"}, {"timestamp": "2021-01-27T00:00:00Z", "date_only": false, "value": "2021-01-27T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-063", "record": "CERTFR-2021-AVI-063", "field": "initial_release_date"}, {"timestamp": "2021-01-27T00:00:00Z", "date_only": false, "value": "2021-01-27T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-063", "record": "CERTFR-2021-AVI-063", "field": "revisions.0.revision_date"}, {"timestamp": "2021-01-27T00:00:00Z", "date_only": true, "value": "2021-01-27", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2021-07130", "record": "CNVD-2021-07130", "field": "submitTime"}, {"timestamp": "2021-01-27T00:36:47Z", "date_only": false, "value": "2021-01-27T00:36:47.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/22691", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "d1195315-2a20-4c22-965b-99bbce73376e", "content": "\u203c CVE-2021-3156 \u203c\n\nSudo before 1.9.5p2 has a Heap-based Buffer Overflow, allowing privilege escalation to root via \"sudoedit -s\" and a command-line argument that ends with a single backslash character:\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/22691"}, {"timestamp": "2021-01-27T00:53:43Z", "date_only": false, "value": "2021-01-27T00:53:43+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2021:0223", "record": "RHSA-2021:0223", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-01-27T00:53:43Z", "date_only": false, "value": "2021-01-27T00:53:43+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2021:0223", "record": "RHSA-2021:0223", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2021-01-27T00:53:43Z", "date_only": false, "value": "2021-01-27T00:53:43+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2021:0223", "record": "RHSA-2021:0223", "field": "document.tracking.initial_release_date"}, {"timestamp": "2021-01-27T05:27:10Z", "date_only": false, "value": "2021-01-27T05:27:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/3799", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "6daa9fff-7e15-4619-9015-58cd68034c4a", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 \ud83d\udce2 CVE-2021-3156 | Buffer overflow in command line unescaping.\n\nhttps://www.sudo.ws/alerts/unescape_overflow.html", "url": "https://t.me/cKure/3799"}, {"timestamp": "2021-01-27T05:30:07Z", "date_only": false, "value": "2021-01-27T05:30:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/3800", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "c4c0be6f-f481-4595-aab7-9959b0c65c3b", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 #Zeroday in sudo command. #0day. Technical details. \n\nhttps://blog.qualys.com/vulnerabilities-research/2021/01/26/cve-2021-3156-heap-based-buffer-overflow-in-sudo-baron-samedit", "url": "https://t.me/cKure/3800"}, {"timestamp": "2021-01-27T05:39:27Z", "date_only": false, "value": "2021-01-27T05:39:27.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cKure/3803", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "ab3a17f7-5ed8-4c98-ad5c-b5dfcd3682e8", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 \u26a0\ufe0f AWS statement on CVE-2021-3156.\n\nhttps://aws.amazon.com/security/security-bulletins/AWS-2021-001/", "url": "https://t.me/cKure/3803"}, {"timestamp": "2021-01-27T05:47:34Z", "date_only": false, "value": "2021-01-27T05:47:34.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/3805", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "0b24f68a-b357-44da-b917-248062aa3323", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 Test payload for CVE-2021-3156. This will cause DoS.\n\nsudoedit -s '\\' `perl -e 'print \"A\" x 65536'", "url": "https://t.me/cKure/3805"}, {"timestamp": "2021-01-27T07:24:44Z", "date_only": false, "value": "2021-01-27T07:24:44Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:0169-1", "record": "OPENSUSE-SU-2021:0169-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-01-27T07:24:44Z", "date_only": false, "value": "2021-01-27T07:24:44Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:0169-1", "record": "OPENSUSE-SU-2021:0169-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2021-01-27T07:24:44Z", "date_only": false, "value": "2021-01-27T07:24:44Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:0169-1", "record": "OPENSUSE-SU-2021:0169-1", "field": "document.tracking.generator.date"}, {"timestamp": "2021-01-27T07:24:44Z", "date_only": false, "value": "2021-01-27T07:24:44Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:0169-1", "record": "OPENSUSE-SU-2021:0169-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2021-01-27T07:25:26Z", "date_only": false, "value": "2021-01-27T07:25:26Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:0170-1", "record": "OPENSUSE-SU-2021:0170-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-01-27T07:25:26Z", "date_only": false, "value": "2021-01-27T07:25:26Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:0170-1", "record": "OPENSUSE-SU-2021:0170-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2021-01-27T07:25:26Z", "date_only": false, "value": "2021-01-27T07:25:26Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:0170-1", "record": "OPENSUSE-SU-2021:0170-1", "field": "document.tracking.generator.date"}, {"timestamp": "2021-01-27T07:25:26Z", "date_only": false, "value": "2021-01-27T07:25:26Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:0170-1", "record": "OPENSUSE-SU-2021:0170-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2021-01-27T09:00:26Z", "date_only": false, "value": "2021-01-27T09:00:26.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/aAToEbDNA_gNIUhyoA2hljK3gxWeXOko5fP_6rpSBJwcFeM", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "7bbc954c-936c-4928-bbbe-40bcae973fde"}, {"timestamp": "2021-01-27T09:29:32Z", "date_only": false, "value": "2021-01-27T09:29:32Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2021:0232-1", "record": "SUSE-SU-2021:0232-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-01-27T09:29:32Z", "date_only": false, "value": "2021-01-27T09:29:32Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2021:0232-1", "record": "SUSE-SU-2021:0232-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2021-01-27T09:29:32Z", "date_only": false, "value": "2021-01-27T09:29:32Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2021:0232-1", "record": "SUSE-SU-2021:0232-1", "field": "document.tracking.generator.date"}, {"timestamp": "2021-01-27T09:29:32Z", "date_only": false, "value": "2021-01-27T09:29:32Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2021:0232-1", "record": "SUSE-SU-2021:0232-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2021-01-27T10:50:52Z", "date_only": false, "value": "2021-01-27T10:50:52.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/itsecalert/130", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "636a8372-b3ec-4f54-8ec6-50ddd80615fb", "content": "\u26a0\ufe0fBuffer overflow in sudo (linux utility) - \u2757\ufe0f affects most distributions/versions - CVE-2021-3156\nWhile a local user is required to exploit this vulnerability, even the account 'nobody' can exploit this vulnerability. An unprivileged user can gain root privileges on affected hosts!\n\nCheck if you are affected!\nTo check if you are affected, run sudoedit -s / as non-root user. If the response is sudoedit: your system is vulnerable.\n\nThe following \"sudo\" versions are vulnerable\n* All legacy versions from 1.8.2 to 1.8.31p2\n* All stable versions from 1.9.0 to 1.9.5p1\n\nSeverity: \ud83d\udd38High\n\nAdditional information\nhttps://yt.gl/sudobufferoverflow\n\n#alert #severityHigh #vulnerability #linux #sudo \n\n\ud83c\udf1f Feel free to discuss this issue in @itsectalk \ud83d\udc4d Please vote if this information was helpful to you.", "url": "https://t.me/itsecalert/130"}, {"timestamp": "2021-01-27T13:50:05Z", "date_only": false, "value": "2021-01-27T13:50:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/true_secator/1372", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "b8f76c07-f1f5-40a7-bcbd-e7c85525ca02", "content": "\u0410\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Qualys, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u044f\u0432\u043d\u044b\u0435 \u043a\u043e\u0441\u044f\u043a\u0438 \u0441 SolarWinds Orion, \u0443\u043c\u0435\u0435\u0442 \u0438 \u0432 \u0445\u043e\u0440\u043e\u0448\u0438\u0439 \u0438\u043d\u0444\u043e\u0441\u0435\u043a.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 sudo, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u0443\u0447\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u043b\u044e\u0431\u044b\u043c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0430\u0436 \u0441 \u0438\u044e\u043b\u044f 2011 \u0433\u043e\u0434\u0430. \u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 CVE-2021-3156 \u0438 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0435 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 Baron Samedit.\n\nQualys \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u0442\u0440\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0440\u0443\u0442\u043e\u0432\u044b\u0435 \u043f\u0440\u0430\u0432\u0430 \u0432 Ubuntu 20.04, Debian 10 \u0438 Fedora 33. \u041a\u0430\u043a \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u0433\u043e\u0432\u043e\u0440\u044f\u0442, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e \u0435\u0439 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 nix-\u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0432\u0441\u0435\u043c \u0441\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c sudo \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 1.9.5p2, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u044b\u0448\u043b\u0430 \u0432\u0447\u0435\u0440\u0430.", "url": "https://t.me/true_secator/1372"}, {"timestamp": "2021-01-27T14:05:54Z", "date_only": false, "value": "2021-01-27T14:05:54", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202101-1926", "record": "VAR-202101-1926", "field": "sources_release_date.data.5.date"}, {"timestamp": "2021-01-27T14:06:12Z", "date_only": false, "value": "2021-01-27T14:06:12", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202101-1926", "record": "VAR-202101-1926", "field": "sources_release_date.data.4.date"}, {"timestamp": "2021-01-27T14:06:28Z", "date_only": false, "value": "2021-01-27T14:06:28", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202101-1926", "record": "VAR-202101-1926", "field": "sources_release_date.data.6.date"}, {"timestamp": "2021-01-27T14:06:37Z", "date_only": false, "value": "2021-01-27T14:06:37", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202101-1926", "record": "VAR-202101-1926", "field": "sources_release_date.data.8.date"}, {"timestamp": "2021-01-27T15:14:09Z", "date_only": false, "value": "2021-01-27T15:14:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/alexmakus/3856", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "2562f8a5-ed2a-49b1-8934-5255a214c6dc", "content": "\u041a\u0430\u043a\u0430\u044f \u043f\u0440\u0435\u043a\u0440\u0430\u0441\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 sudo \n\nhttps://blog.qualys.com/vulnerabilities-research/2021/01/26/cve-2021-3156-heap-based-buffer-overflow-in-sudo-baron-samedit", "url": "https://t.me/alexmakus/3856"}, {"timestamp": "2021-01-27T16:41:29Z", "date_only": false, "value": "2021-01-27T16:41:29.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/bY_MpS1ko59Bih8aJrT0olVpy6o50zhn89cufYuKiR0JOQ", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "03d94c43-565e-41f2-b8b1-5301649369d7"}, {"timestamp": "2021-01-27T23:00:00Z", "date_only": false, "value": "2021-01-27T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0066", "record": "WID-SEC-W-2023-0066", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2021-01-28T00:00:00Z", "date_only": true, "value": "2021-01-28", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2021-07130", "record": "CNVD-2021-07130", "field": "openTime"}, {"timestamp": "2021-01-28T02:13:09Z", "date_only": false, "value": "2021-01-28T02:13:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dc7342/39207", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "b4c5efb7-9c8e-4883-a4eb-7ff72f45c4c8", "content": "\u041a\u0430\u043a\u0430\u044f \u043f\u0440\u0435\u043a\u0440\u0430\u0441\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 sudo \n\nhttps://blog.qualys.com/vulnerabilities-research/2021/01/26/cve-2021-3156-heap-based-buffer-overflow-in-sudo-baron-samedit", "url": "https://t.me/dc7342/39207"}, {"timestamp": "2021-01-28T08:21:20Z", "date_only": false, "value": "2021-01-28T08:21:20.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/leaked_databases/480", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "974d7926-f476-43fb-a897-0c12bd6435f0", "content": "_NOT_ a leaked database but still worth mentioning, since this exploit will greatly increase the capabilities of every skid with a webshell: \n\nSudo has been vulnerable for about 10 years. Good thing I run everything as root already :)\n\nhttps://blog.qualys.com/vulnerabilities-research/2021/01/26/cve-2021-3156-heap-based-buffer-overflow-in-sudo-baron-samedit", "url": "https://t.me/leaked_databases/480"}, {"timestamp": "2021-01-28T11:04:13Z", "date_only": false, "value": "2021-01-28T11:04:13Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2021-1002", "record": "OESA-2021-1002", "field": "published"}, {"timestamp": "2021-01-28T13:11:39Z", "date_only": false, "value": "2021-01-28T13:11:39.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/LearnExploit/1950", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "aaf34067-07c1-4498-8ebf-ab615e893c72", "content": "CVE-2021-3156\n\n\u0628\u062f\u0648\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u062f\u0633\u062a\u0631\u0633\u06cc Root \u0628\u06af\u06cc\u0631\u06cc\u062f !\n\n\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0633\u0631\u0631\u06cc\u0632\u0650 \u0628\u0627\u0641\u0631 \u0647\u06cc\u067e \u062f\u0631 sudo \u0627\u0633\u062a \u06a9\u0647 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc \u062f\u0647\u062f \u0628\u062f\u0648\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u062f\u0633\u062a\u0631\u0633\u06cc \u0631\u0648\u062a \u0628\u06af\u06cc\u0631\u0646\u062f . \n\n\u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0642\u062f\u06cc\u0645\u06cc sudo ( \u0627\u0632 1.8.2 \u062a\u0627  1.8.31p2 ) \u0648 \u062a\u0645\u0627\u0645 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u067e\u0627\u06cc\u062f\u0627\u0631 \u0622\u0646 ( \u0627\u0632 1.9.0 \u062a\u0627 1.9.5p1 ) \u062a\u062d\u062a \u062a\u0627\u062b\u06cc\u0631 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0642\u0631\u0627\u0631 \u0645\u06cc \u06af\u06cc\u0631\u0646\u062f. \n\n\u067e\u06cc\u0634\u0646\u0647\u0627\u062f \u0645\u06cc\u0634\u0647 \u0647\u0631\u0686\u06cc \u0633\u0631\u06cc\u0639 \u062a\u0631 sudo  \u0631\u0648 \u0627\u0632 \u0644\u06cc\u0646\u06a9\u06cc \u06a9\u0647 \u067e\u0627\u06cc\u06cc\u0646 \u0647\u0633\u062a  \u0628\u0647 \u0646\u0633\u062e\u0647 1.9.5p2 \u0622\u067e\u062f\u06cc\u062a \u06a9\u0646\u06cc\u062f . \n\nCVE-2021-3156\n\nSudo \n\niliyahr\n\u2014\u2014\u2014\u2014\u2014\u2014\n0Day.Today\n@LearnExploit\n@Tech_Army", "url": "https://t.me/LearnExploit/1950"}, {"timestamp": "2021-01-28T13:59:34Z", "date_only": false, "value": "2021-01-28T13:59:34", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202101-1926", "record": "VAR-202101-1926", "field": "sources_release_date.data.7.date"}, {"timestamp": "2021-01-28T20:12:00Z", "date_only": false, "value": "2021-01-28T20:12:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202101-1926", "record": "VAR-202101-1926", "field": "sources_release_date.data.2.date"}, {"timestamp": "2021-01-28T23:00:00Z", "date_only": false, "value": "2021-01-28T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0066", "record": "WID-SEC-W-2023-0066", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2021-01-29T12:49:57Z", "date_only": false, "value": "2021-01-29T12:49:57.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/0QoxjK-jdGU1JtkYq5sY1O1gkFVU4_OXtiAt6iTQGQ--4vKy", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "5a64ffbd-826d-4e18-b2e0-6f9eb1ab9d51"}, {"timestamp": "2021-01-29T21:30:00Z", "date_only": false, "value": "2021-01-29T21:30:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-SUDO-PRIVESC-JAN2021-QNYQFCM", "record": "CISCO-SA-SUDO-PRIVESC-JAN2021-QNYQFCM", "field": "document.tracking.initial_release_date"}, {"timestamp": "2021-01-29T21:30:00Z", "date_only": false, "value": "2021-01-29T21:30:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_cisco \u00b7 CISCO-SA-SUDO-PRIVESC-JAN2021-QNYQFCM", "record": "CISCO-SA-SUDO-PRIVESC-JAN2021-QNYQFCM", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2021-01-29T21:36:53Z", "date_only": false, "value": "2021-01-29T21:36:53+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-SUDO-PRIVESC-JAN2021-QNYQFCM", "record": "CISCO-SA-SUDO-PRIVESC-JAN2021-QNYQFCM", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-01-30T05:33:24Z", "date_only": false, "value": "2021-01-30T05:33:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reconshell/381", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "0acb30df-7351-454a-97f3-7da15f42b881", "content": "CVE-2021-3156 sudo Vulnerability that affects most Linux Systems\n\n#cve-2021-3156 #BufferOverflow #Exploit #InfoSec #Ubuntu #CyberSecurity #Linux\n\nhttps://reconshell.com/cve-2021-3156-sudo-vulnerability-that-affects-most-linux-systems/", "url": "https://t.me/reconshell/381"}, {"timestamp": "2021-01-30T07:06:12Z", "date_only": false, "value": "2021-01-30T07:06:12.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/dc7342/39216", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "71ed0c26-a9d6-4bd5-8f3a-f011ee1e048c", "content": "PoC \u043d\u0430 sudo https://github.com/lockedbyte/CVE-Exploits/tree/master/CVE-2021-3156", "url": "https://t.me/dc7342/39216"}, {"timestamp": "2021-01-31T03:01:04Z", "date_only": false, "value": "2021-01-31T03:01:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/linuxtnt/2622", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "4ed3dac3-599c-49d4-81d9-ccec81477edc", "content": "\u0633\u0644\u0627\u0645.\n\u0631\u0641\u0639 \u0628\u0627\u06af \u0633\u0648\u062f:\n\n\u0627\u0633\u0645 \u0628\u0627\u06af\u06cc \u06a9\u0647 \u0647\u0633\u062a:\nThe bug (CVE-2021-3156), dubbed \u201cBaron Semedit,\n\u0646\u0627\u0645 \u062f\u0627\u0631\u0647. \u0628\u0627\u0639\u062b \u0645\u06cc\u0634\u0647 \u062f\u0633\u062a\u0631\u0633\u06cc   \u0631\u0648\u062a \u0628\u0647 \u06cc\u06a9 \u06a9\u0627\u0631\u0628\u0631 \u0628\u062f\u0647 \u0628\u062f\u0648\u0646 \u0627\u06cc\u0646\u06a9\u0647 \u062f\u0631 \u0644\u06cc\u0633\u062a sudoers file   \u0628\u0627\u0634\u0647\n\n\u06af\u0641\u062a\u0646 \u0627\u0632 \u0633\u0627\u0644 2011 \u0627\u06cc\u0646 \u0628\u0627\u06af \u0628\u0648\u062f\u0647.\n\u0648\u0627\u0633\u0647 \u0628\u0631\u0631\u0633\u06cc \u0627\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u062a\u0648\u06cc \u0633\u06cc\u0633\u062a\u0645 \u062e\u0648\u062f\u062a\u0648\u0646 \u062f\u0631 \u0645\u0648\u0631\u062f  \u0633\u0648\u062f\u0648\u060c \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u06cc\u06a9 \u06a9\u0627\u0631\u0628\u0631 \u063a\u06cc\u0631 \u0631\u0648\u062a \u0648\u0627\u0631\u062f \u0633\u06cc\u0633\u062a\u0645 \u0634\u0648\u06cc\u062f \u0648 \u06cc\u06a9 \u062f\u0633\u062a\u0648\u0631 \u0631\u0627 \u0627\u062c\u0631\u0627 \u06a9\u0646\u06cc\u062f:\nsudoedit -s /\n\n\u0627\u06af\u0631 \u0633\u06cc\u0633\u062a\u0645 \u0634\u0645\u0627 \u0627\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631 \u0628\u0627\u0634\u0647 \u062e\u0637\u0627\u06cc\u06cc \u0645\u06cc\u062f\u0647 \u06a9\u0647 \u0628\u0627\nsudoedit\n\u0627\u06af\u0631 \u0647\u0645 \u0646\u0628\u0627\u0634\u0647 \u062e\u0637\u0627\u06cc\u06cc \u0628\u0627 usage\n\u062f\u0627\u062f\u0647 \u0645\u06cc\u0634\u0647.\n\n\u0648\u0627\u0633\u0647 \u0631\u0641\u0639 \u0645\u0634\u06a9\u0644 \u0627\u06cc\u0646 \u0628\u0627\u06af \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u0632\u06cc\u0631 \u0631\u0648 \u0628\u0632\u0646\u06cc\u062f:\n\n# For Ubuntu or Debian-based\n$ sudo apt update && sudo apt upgrade \n\n# For Arch Linuux\n$ sudo pacman -Syu\n\n#For Fedora\n$ sudo dnf update\n\n\u0628\u0639\u062f \u0627\u067e\u062f\u06cc\u062a \u0628\u0647 Sudo v1.9.5p2 \u062a\u063a\u06cc\u06cc\u0631 \u067e\u06cc\u062f\u0627 \u0645\u06cc\u06a9\u0646\u0647.\n\n\u0627\u06af\u0631 \u062f\u0633\u062a\u06cc \u0628\u062e\u0648\u0627\u0647\u06cc\u062f \u0646\u0635\u0628 \u06a9\u0646\u06cc\u062f \u0627\u0632 \u0627\u06cc\u0646 \u0645\u0633\u06cc\u0631 \u0628\u0631\u06cc\u062f.\nhttps://www.sudo.ws/download.html\n\n********************************************\n\n\n\u06a9\u0627\u0646\u0627\u0644 \u0645\u06a9\u0645\u0644: \u0627\u0645\u0648\u0632\u0634\u06cc \u0644\u06cc\u0646\u0648\u06a9\u0633 \u0648 \u0627\u0648\u067e\u0646 \u0633\u0648\u0631\u0633 \u0647\u0627                                   @linuxtnt\n\nTelegram\n\u0622\u0645\u0648\u0632\u0634 \u0644\u06cc\u0646\u0648\u06a9\u0633 \u0648 \u0627\u0648\u067e\u0646 \u0633\u0648\u0631\u0633\nhttps://t.me/joinchat/QPMh3Khn9izpmzqf", "url": "https://t.me/linuxtnt/2622"}, {"timestamp": "2021-01-31T23:00:00Z", "date_only": false, "value": "2021-01-31T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0066", "record": "WID-SEC-W-2023-0066", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2021-02-01T06:18:24Z", "date_only": false, "value": "2021-02-01T06:18:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/fmCydS8g_rr1eZoXRtWSbnkmJ-MKQbhzsJWUs4lxQafZcasJ", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "7df8f913-da61-4415-8d70-b4220c868aaa"}, {"timestamp": "2021-02-01T21:03:13Z", "date_only": false, "value": "2021-02-01T21:03:13+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-SUDO-PRIVESC-JAN2021-QNYQFCM", "record": "CISCO-SA-SUDO-PRIVESC-JAN2021-QNYQFCM", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2021-02-01T23:00:00Z", "date_only": false, "value": "2021-02-01T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0066", "record": "WID-SEC-W-2023-0066", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2021-02-02T21:20:38Z", "date_only": false, "value": "2021-02-02T21:20:38+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-SUDO-PRIVESC-JAN2021-QNYQFCM", "record": "CISCO-SA-SUDO-PRIVESC-JAN2021-QNYQFCM", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2021-02-02T23:00:00Z", "date_only": false, "value": "2021-02-02T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0066", "record": "WID-SEC-W-2023-0066", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2021-02-03T09:49:03Z", "date_only": false, "value": "2021-02-03T09:49:03.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/1389", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "12c961bd-9a9d-433e-bb34-002d2c8ac558", "content": "\u200b\u200b\u041d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u043c\u044b \u043f\u0438\u0441\u0430\u043b\u0438 \u043f\u0440\u043e \u043e\u0442\u043a\u0440\u044b\u0442\u0443\u044e (\u043d\u043e \u043d\u0435 \u0441\u0432\u0435\u0436\u0443\u044e) \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2021-3156 aka Baron Samedit \u0432 sudo, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u0443\u0447\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u043b\u044e\u0431\u044b\u043c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0441 \u0438\u044e\u043b\u044f 2011 \u0433\u043e\u0434\u0430. \u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u043e\u043c \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u0445\u0430\u043a\u0435\u0440\u043e\u043c \u0440\u0443\u0442\u043e\u0432\u044b\u0445 \u043f\u0440\u0430\u0432 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u043d\u0444\u043e\u0441\u0435\u043a \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Qualys \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u0442\u0440\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043f\u0440\u0430\u0432\u0430 \u0432 Ubuntu 20.04, Debian 10 \u0438 Fedora 33.  \u041d\u043e \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u0441\u0440\u0430\u0437\u0443 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438, \u0447\u0442\u043e \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e CVE-2021-3156 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\nQualys \u043a\u0430\u043a \u0432 \u0432\u043e\u0434\u0443 \u0433\u043b\u044f\u0434\u0435\u043b\u0438. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c Hacker Fantastic, \u0432 \u043c\u0438\u0440\u0443 \u041c\u044d\u0442\u044c\u044e \u0425\u0438\u043a\u043a\u0438, \u0441\u043e\u043e\u0441\u043d\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0438 CTO Hacker House, \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e MacOS Big Sur \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441 \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0438\u043c\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f\u043c\u0438.\n\n\u041d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0432 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f\u0445 \u043a \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044e \u0425\u0438\u043a\u043a\u0438 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0438 \u0440\u0430\u0431\u043e\u0442\u043e\u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f macOS \u043e\u0442 Apple \u043e\u0448\u0438\u0431\u043a\u0443 \u043d\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442. \u0412\u0438\u0434\u0438\u043c\u043e \u0431\u0443\u0434\u0435\u0442 \u0432\u043d\u0435\u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u043f\u0430\u0442\u0447.", "url": "https://t.me/true_secator/1389"}, {"timestamp": "2021-02-03T10:39:04Z", "date_only": false, "value": "2021-02-03T10:39:04+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2021:0395", "record": "RHSA-2021:0395", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-02-03T10:39:04Z", "date_only": false, "value": "2021-02-03T10:39:04+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2021:0395", "record": "RHSA-2021:0395", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2021-02-03T10:39:04Z", "date_only": false, "value": "2021-02-03T10:39:04+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2021:0395", "record": "RHSA-2021:0395", "field": "document.tracking.initial_release_date"}, {"timestamp": "2021-02-03T11:31:25Z", "date_only": false, "value": "2021-02-03T11:31:25.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/BleepingComputer/9045", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "5386e87e-5e7c-44f7-bdf0-f712936cf156", "content": "Latest macOS Big Sur also has SUDO root privilege escalation flaw\n\nRecently discovered Linux SUDO privilege escalation vulnerability, CVE-2021-3156 (aka Baron Samedit) also impacts the latest Apple macOS Big Sur with no patch available yet. [...]\n\nhttps://www.bleepingcomputer.com/news/security/latest-macos-big-sur-also-has-sudo-root-privilege-escalation-flaw/", "url": "https://t.me/BleepingComputer/9045"}, {"timestamp": "2021-02-03T16:14:40Z", "date_only": false, "value": "2021-02-03T16:14:40+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2021:0401", "record": "RHSA-2021:0401", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-02-03T16:14:40Z", "date_only": false, "value": "2021-02-03T16:14:40+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2021:0401", "record": "RHSA-2021:0401", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2021-02-03T16:14:40Z", "date_only": false, "value": "2021-02-03T16:14:40+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2021:0401", "record": "RHSA-2021:0401", "field": "document.tracking.initial_release_date"}, {"timestamp": "2021-02-03T16:36:53Z", "date_only": false, "value": "2021-02-03T16:36:53", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202101-1926", "record": "VAR-202101-1926", "field": "sources_release_date.data.3.date"}, {"timestamp": "2021-02-03T18:02:25Z", "date_only": false, "value": "2021-02-03T18:02:25.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/28130", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "aec2381b-c697-4f26-aa58-a6cb5fa7d45a", "content": "Recently discovered CVE-2021-3156 SUDO bug also affects macOS Big Sur\n\nhttps://ift.tt/39KmRKZ", "url": "https://t.me/ctinow/28130"}, {"timestamp": "2021-02-03T20:08:23Z", "date_only": false, "value": "2021-02-03T20:08:23+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-SUDO-PRIVESC-JAN2021-QNYQFCM", "record": "CISCO-SA-SUDO-PRIVESC-JAN2021-QNYQFCM", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2021-02-03T23:00:00Z", "date_only": false, "value": "2021-02-03T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0066", "record": "WID-SEC-W-2023-0066", "field": "document.tracking.revision_history.6.date"}, {"timestamp": "2021-02-04T00:00:00Z", "date_only": false, "value": "2021-02-04T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202101-1926", "record": "VAR-202101-1926", "field": "sources_release_date.data.0.date"}, {"timestamp": "2021-02-04T17:13:25Z", "date_only": false, "value": "2021-02-04T17:13:25.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/sudo_baron_samedit.rb", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "90622edb-463f-4b6d-ab44-4229afabf38d", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/sudo_baron_samedit.rb"}, {"timestamp": "2021-02-04T21:03:43Z", "date_only": false, "value": "2021-02-04T21:03:43+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-SUDO-PRIVESC-JAN2021-QNYQFCM", "record": "CISCO-SA-SUDO-PRIVESC-JAN2021-QNYQFCM", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2021-02-04T23:00:00Z", "date_only": false, "value": "2021-02-04T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0066", "record": "WID-SEC-W-2023-0066", "field": "document.tracking.revision_history.7.date"}, {"timestamp": "2021-02-05T19:44:53Z", "date_only": false, "value": "2021-02-05T19:44:53+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-SUDO-PRIVESC-JAN2021-QNYQFCM", "record": "CISCO-SA-SUDO-PRIVESC-JAN2021-QNYQFCM", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2021-02-07T23:00:00Z", "date_only": false, "value": "2021-02-07T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0066", "record": "WID-SEC-W-2023-0066", "field": "document.tracking.revision_history.8.date"}, {"timestamp": "2021-02-08T20:04:13Z", "date_only": false, "value": "2021-02-08T20:04:13+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-SUDO-PRIVESC-JAN2021-QNYQFCM", "record": "CISCO-SA-SUDO-PRIVESC-JAN2021-QNYQFCM", "field": "document.tracking.revision_history.6.date"}, {"timestamp": "2021-02-08T23:00:00Z", "date_only": false, "value": "2021-02-08T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0066", "record": "WID-SEC-W-2023-0066", "field": "document.tracking.revision_history.9.date"}, {"timestamp": "2021-02-09T19:47:42Z", "date_only": false, "value": "2021-02-09T19:47:42.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/alexmakus/3884", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "7e9efbb2-9ff6-424a-afc1-b1b0f3184f06", "content": "\u0432 macOS \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0430\u043f\u0434\u0435\u0439\u0442 \u0441 \u0444\u0438\u043a\u0441\u043e\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 sudo \n\nImpact: A local attacker may be able to elevate their privileges\nDescription: This issue was addressed by updating to sudo version 1.9.5p2.\nCVE-2021-3156: Qualys\n\nhttps://support.apple.com/en-us/HT212177", "url": "https://t.me/alexmakus/3884"}, {"timestamp": "2021-02-09T23:00:00Z", "date_only": false, "value": "2021-02-09T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0066", "record": "WID-SEC-W-2023-0066", "field": "document.tracking.revision_history.10.date"}, {"timestamp": "2021-02-10T00:00:00Z", "date_only": false, "value": "2021-02-10T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-098", "record": "CERTFR-2021-AVI-098", "field": "last_revision_date"}, {"timestamp": "2021-02-10T00:00:00Z", "date_only": false, "value": "2021-02-10T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-098", "record": "CERTFR-2021-AVI-098", "field": "initial_release_date"}, {"timestamp": "2021-02-10T00:00:00Z", "date_only": false, "value": "2021-02-10T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-098", "record": "CERTFR-2021-AVI-098", "field": "revisions.0.revision_date"}, {"timestamp": "2021-02-10T08:03:55Z", "date_only": false, "value": "2021-02-10T08:03:55.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/1418", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "d6cfaca9-af6d-4c9a-8429-4053c5ef5ddf", "content": "\u200b\u200b\u0420\u043e\u0432\u043d\u043e \u043d\u0435\u0434\u0435\u043b\u044e \u043d\u0430\u0437\u0430\u0434 \u043c\u044b \u043f\u0438\u0441\u0430\u043b\u0438 \u043f\u0440\u043e \u0442\u043e, \u0447\u0442\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 macOS \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2021-3156 aka Baron Samedit \u0432 sudo, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u0443\u0447\u0438. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043b\u044e\u0431\u043e\u0439 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0440\u0443\u0442\u043e\u0432\u044b\u0435 \u043f\u0440\u0430\u0432\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u042d\u0442\u043e \u043a\u043e\u043d\u0435\u0447\u043d\u043e \u043d\u0435 RCE, \u043d\u043e \u043f\u0440\u0438\u044f\u0442\u043d\u043e\u0433\u043e \u0442\u043e\u0436\u0435 \u043c\u0430\u043b\u043e. \n\n\u0425\u043e\u0440\u043e\u0448\u0430\u044f \u043d\u043e\u0432\u043e\u0441\u0442\u044c - Apple \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f macOS Big Sur, Catalina \u0438 Mojave, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442 \u043e\u0448\u0438\u0431\u043a\u0443. \n\n\u0422\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e \u043f\u0440\u0438\u0437\u044b\u0432\u0430\u0435\u043c \u0432\u0441\u0435\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 macOS \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f.", "url": "https://t.me/true_secator/1418"}, {"timestamp": "2021-02-10T11:35:33Z", "date_only": false, "value": "2021-02-10T11:35:33.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehackernews/1030", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "ad2ad608-a40e-41a4-960f-e224317c88e4", "content": "Apple releases a security patch for 10-year-old macOS SUDO root privilege escalation vulnerability, tracked as CVE-2021-3156, and also called \"Baron Samedit.\"\n\nRead details \u2014 https://thehackernews.com/2021/02/apple-patches-10-year-old-macos-sudo.html", "url": "https://t.me/thehackernews/1030"}, {"timestamp": "2021-02-10T19:49:23Z", "date_only": false, "value": "2021-02-10T19:49:23+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-SUDO-PRIVESC-JAN2021-QNYQFCM", "record": "CISCO-SA-SUDO-PRIVESC-JAN2021-QNYQFCM", "field": "document.tracking.revision_history.7.date"}, {"timestamp": "2021-02-11T00:00:00Z", "date_only": false, "value": "2021-02-11T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-108", "record": "CERTFR-2021-AVI-108", "field": "last_revision_date"}, {"timestamp": "2021-02-11T00:00:00Z", "date_only": false, "value": "2021-02-11T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-108", "record": "CERTFR-2021-AVI-108", "field": "initial_release_date"}, {"timestamp": "2021-02-11T00:00:00Z", "date_only": false, "value": "2021-02-11T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-108", "record": "CERTFR-2021-AVI-108", "field": "revisions.0.revision_date"}, {"timestamp": "2021-02-11T20:22:13Z", "date_only": false, "value": "2021-02-11T20:22:13+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-SUDO-PRIVESC-JAN2021-QNYQFCM", "record": "CISCO-SA-SUDO-PRIVESC-JAN2021-QNYQFCM", "field": "document.tracking.revision_history.8.date"}, {"timestamp": "2021-02-15T11:00:19Z", "date_only": false, "value": "2021-02-15T11:00:19.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/2708", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "2a6dc345-51d8-4e5d-9a64-1b023128d058", "content": "#Analytics\n10 most exploited vulnerabilities of the week (feb 8-14)\nCVE-2020-1472 - Microsoft Zerologon\nhttps://t.me/cybersecuritytechnologies/1742\nCVE-2021-3156 - Heap-Based Buffer Overflow in Sudo\nhttps://t.me/cybersecuritytechnologies/2577\nCVE-2021-1732 - Windows kernel 0-day exploit is used by BITTER APT in targeted attack\nhttps://t.me/cybersecuritytechnologies/2679\nCVE-2020-2037 - Palo Alto PAN-OS vulnerability\nhttps://t.me/cybersecuritytechnologies/2687\nCVE-2021-24074, CVE-2021-24086, CVE-2021-24094 - Windows IPv4/IPv6 Stack RCE/DoS Vulnerabilities\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\nCVE-2021-1782 - iOS\\iPadOS 14.3 kernel LPE vulnerability\nhttps://t.me/cybersecuritytechnologies/2694\nCVE-2021-21017 - Acrobat Reader DC\u00a0a heap-based buffer overflow vulnerability\nhttps://threatpost.com/critical-adobe-windows-flaw/163789\nCVE-2020-24581 - D-Link DSL-2888A AU_2.31_V1x - RCE\nhttps://t.me/cybersecuritytechnologies/2670", "url": "https://t.me/CyberSecurityTechnologies/2708"}, {"timestamp": "2021-02-15T12:00:33Z", "date_only": false, "value": "2021-02-15T12:00:33.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/2712", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "b3475a40-433e-4139-9e1e-1cd35a794f5a", "content": "#Blue_Team_Techniques\n1. Auditd CVE 2021-3156\nhttps://www.archcloudlabs.com/projects/auditd-cve-2021-3156\n2. Linux IPC inspection tool\nhttps://github.com/guardicore/ipcdump", "url": "https://t.me/CyberSecurityTechnologies/2712"}, {"timestamp": "2021-02-16T18:34:25Z", "date_only": false, "value": "2021-02-16T18:34:25+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-SUDO-PRIVESC-JAN2021-QNYQFCM", "record": "CISCO-SA-SUDO-PRIVESC-JAN2021-QNYQFCM", "field": "document.tracking.revision_history.9.date"}, {"timestamp": "2021-02-17T00:00:00Z", "date_only": false, "value": "2021-02-17T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-127", "record": "CERTFR-2021-AVI-127", "field": "last_revision_date"}, {"timestamp": "2021-02-17T00:00:00Z", "date_only": false, "value": "2021-02-17T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-127", "record": "CERTFR-2021-AVI-127", "field": "initial_release_date"}, {"timestamp": "2021-02-17T00:00:00Z", "date_only": false, "value": "2021-02-17T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-127", "record": "CERTFR-2021-AVI-127", "field": "revisions.0.revision_date"}, {"timestamp": "2021-02-18T23:00:00Z", "date_only": false, "value": "2021-02-18T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0066", "record": "WID-SEC-W-2023-0066", "field": "document.tracking.revision_history.11.date"}, {"timestamp": "2021-02-19T20:40:52Z", "date_only": false, "value": "2021-02-19T20:40:52+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-SUDO-PRIVESC-JAN2021-QNYQFCM", "record": "CISCO-SA-SUDO-PRIVESC-JAN2021-QNYQFCM", "field": "document.tracking.revision_history.10.date"}, {"timestamp": "2021-02-21T23:00:00Z", "date_only": false, "value": "2021-02-21T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0066", "record": "WID-SEC-W-2023-0066", "field": "document.tracking.revision_history.12.date"}, {"timestamp": "2021-02-22T08:52:25Z", "date_only": false, "value": "2021-02-22T08:52:25.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/4044", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "e7f15874-d5aa-4ed9-94c5-18e4b00f4192", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 Exploit Writeup for CVE-2021\u20133156 (Sudo Baron Samedit)\n\nhttps://datafarm-cybersecurity.medium.com/exploit-writeup-for-cve-2021-3156-sudo-baron-samedit-7a9a4282cb31", "url": "https://t.me/cKure/4044"}, {"timestamp": "2021-02-22T14:45:11Z", "date_only": false, "value": "2021-02-22T14:45:11.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/2759", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "f9aaf8c1-5934-4aab-b3e3-cbfe8db80178", "content": "#Analytics\n10 most exploited vulnerabilities of the week (feb 15-21)\nCVE-2021-3156 - Heap-Based Buffer Overflow in Sudo\nhttps://t.me/cybersecuritytechnologies/2577\nCVE-2021-1732 - Windows kernel 0-day exploit is used by BITTER APT\nhttps://t.me/cybersecuritytechnologies/2679\nCVE-2021-1647 - MS Defender RCE Vulnerability\nhttps://www.anquanke.com/post/id/231625\nCVE-2020-10759 - Dazed Blesbok\nhttps://t.me/cybersecuritytechnologies/1243\nCVE-2021-21976 - VMware Post-Auth RCE in vSphere Replication\nCVE-2021-3177 - Python 3 Buffer Overflow\nhttps://t.me/cybersecuritytechnologies/2740\nCVE-2020-8625 - A vulnerability in BIND's GSSAPI\nhttps://kb.isc.org/docs/cve-2020-8625\nCVE-2021-20655\nhttps://jvn.jp/en/jp/JVN58774946/index.html\nCVE-2021-1366 - A vulnerability in the interprocess communication channel of Cisco AnyConnect Secure Client\nhttps://www.coresecurity.com/core-labs/articles/analysis-cisco-anyconnect-posture-hostscan-local-privilege-escalation-cve-2021", "url": "https://t.me/CyberSecurityTechnologies/2759"}, {"timestamp": "2021-02-22T21:38:52Z", "date_only": false, "value": "2021-02-22T21:38:52+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-SUDO-PRIVESC-JAN2021-QNYQFCM", "record": "CISCO-SA-SUDO-PRIVESC-JAN2021-QNYQFCM", "field": "document.tracking.revision_history.11.date"}, {"timestamp": "2021-02-25T21:48:04Z", "date_only": false, "value": "2021-02-25T21:48:04+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-SUDO-PRIVESC-JAN2021-QNYQFCM", "record": "CISCO-SA-SUDO-PRIVESC-JAN2021-QNYQFCM", "field": "document.tracking.revision_history.12.date"}, {"timestamp": "2021-02-27T14:23:48Z", "date_only": false, "value": "2021-02-27T14:23:48.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/4_8a_MkvOFnrbdUYNrDIriL7lct5WgzqHUY09JdVCm76MA", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "fcaeb227-5500-449a-886f-95f7401069a1"}, {"timestamp": "2021-03-01T11:00:27Z", "date_only": false, "value": "2021-03-01T11:00:27.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/2807", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "815fa54f-8b0a-4c06-b8f0-a444b66e305d", "content": "#Analytics\n10 most exploited vulnerabilities of the week (feb 22-28)\nCVE-2021-3156 - Heap-Based Buffer Overflow in Sudo\nhttps://t.me/cybersecuritytechnologies/2577\nCVE-2021-21972 - VMware vCenter RCE\nhttps://swarm.ptsecurity.com/unauth-rce-vmware/#more-2477\nhttps://github.com/QmF0c3UK/CVE-2021-21972-vCenter-6.5-7.0-RCE-POC\nhttps://github.com/NS-Sp4ce/CVE-2021-21972\nhttps://github.com/yaunsky/CVE-2021-21972\nCVE-2021-1782 - iOS\\iPadOS 14.3 kernel LPE\nhttps://t.me/cybersecuritytechnologies/2694\nCVE-2021-3177 - Python3 Buffer Overflow\nhttps://t.me/cybersecuritytechnologies/2740\nCVE-2021-21973 - VMware vCenter SSRF\nhttps://mobile.twitter.com/osama_hroot/status/1365586206982082560/photo/1\nCVE-2017-0005 - Windows GDI EoP\nhttps://t.me/cybersecuritytechnologies/443\nCVE-2021-24093 - Win Graph. Component RCE\nhttps://t.me/cybersecuritytechnologies/2806\nCVE-2021-25281/25282 - SaltStack Exploit\nhttps://github.com/Immersive-Labs-Sec/CVE-2021-25281\nCVE-2018-19518 - PHP IMAP Vuln.\nhttps://t.me/cybersecuritytechnologies/1649", "url": "https://t.me/CyberSecurityTechnologies/2807"}, {"timestamp": "2021-03-01T23:00:00Z", "date_only": false, "value": "2021-03-01T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0066", "record": "WID-SEC-W-2023-0066", "field": "document.tracking.revision_history.13.date"}, {"timestamp": "2021-03-02T21:17:24Z", "date_only": false, "value": "2021-03-02T21:17:24+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-SUDO-PRIVESC-JAN2021-QNYQFCM", "record": "CISCO-SA-SUDO-PRIVESC-JAN2021-QNYQFCM", "field": "document.tracking.revision_history.13.date"}, {"timestamp": "2021-03-03T05:37:03Z", "date_only": false, "value": "2021-03-03T05:37:03.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/2815", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "6d974098-b5d4-4f46-878d-0a5b84d71478", "content": "#Analytics\nTop 10 Most Used Vulnerabilities of the Month (feb 1-28)\nCVE-2021-3156 - Heap-Based Buffer Overflow in Sudo\nhttps://t.me/cybersecuritytechnologies/2577\nCVE-2021-21972 - VMware vCenter RCE\nhttps://swarm.ptsecurity.com/unauth-rce-vmware/#more-2477\nhttps://github.com/QmF0c3UK/CVE-2021-21972-vCenter-6.5-7.0-RCE-POC\nhttps://github.com/NS-Sp4ce/CVE-2021-21972\nhttps://github.com/yaunsky/CVE-2021-21972\nCVE-2021-1732 - Windows kernel 0-day exploit is used by BITTER APT\nhttps://t.me/cybersecuritytechnologies/2679\nCVE-2021-1782 - iOS\\iPadOS 14.3 kernel LPE\nhttps://t.me/cybersecuritytechnologies/2694\nCVE-2021-25646 - Apache Druid <=0.20.1 RCE\nhttps://t.me/cybersecuritytechnologies/2639\nCVE-2020-27932 - A type confusion in MacOS 10.15.7\nhttps://t.me/cybersecuritytechnologies/2383\nCVE-2021-24074, CVE-2021-24094, CVE-2021-24086 - Windows IPv4/IPv6 Stack RCE/DoS Vulnerabilities\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday", "url": "https://t.me/CyberSecurityTechnologies/2815"}, {"timestamp": "2021-03-11T20:49:19Z", "date_only": false, "value": "2021-03-11T20:49:19+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-SUDO-PRIVESC-JAN2021-QNYQFCM", "record": "CISCO-SA-SUDO-PRIVESC-JAN2021-QNYQFCM", "field": "document.tracking.revision_history.14.date"}, {"timestamp": "2021-03-16T20:43:10Z", "date_only": false, "value": "2021-03-16T20:43:10+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-SUDO-PRIVESC-JAN2021-QNYQFCM", "record": "CISCO-SA-SUDO-PRIVESC-JAN2021-QNYQFCM", "field": "document.tracking.revision_history.15.date"}, {"timestamp": "2021-03-16T20:43:10Z", "date_only": false, "value": "2021-03-16T20:43:10+00:00", "kind": "other", "label": "Updated", "source": "csaf_cisco \u00b7 CISCO-SA-SUDO-PRIVESC-JAN2021-QNYQFCM", "record": "CISCO-SA-SUDO-PRIVESC-JAN2021-QNYQFCM", "field": "document.tracking.current_release_date"}, {"timestamp": "2021-03-20T03:03:09Z", "date_only": false, "value": "2021-03-20T03:03:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Fp_2ZLBngiOhyv14CIKtit6DO5l30RGjm7oxvF-OGmjIyA", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "71bdf008-7f84-44d2-9e1e-75e9bba214b2"}, {"timestamp": "2021-03-20T03:08:49Z", "date_only": false, "value": "2021-03-20T03:08:49.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/S7Ipgu0vMt50c0baWnLK9ZDMGJrzeFNEpMbERuEw4Udr-Q", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "ae609f88-19c1-4b93-adab-06e372f6dd16"}, {"timestamp": "2021-03-22T08:59:00Z", "date_only": false, "value": "2021-03-22T08:59:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_trumpfsecokg \u00b7 VDE-2021-011", "record": "VDE-2021-011", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-03-22T08:59:00Z", "date_only": false, "value": "2021-03-22T08:59:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_trumpfsecokg \u00b7 VDE-2021-011", "record": "VDE-2021-011", "field": "document.tracking.initial_release_date"}, {"timestamp": "2021-03-22T10:14:45Z", "date_only": false, "value": "2021-03-22T10:14:45.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/infobes/301", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "f847ef0e-4655-4582-9b07-e118284f3212", "content": "CVE-2021-26855/27065 - ProxyLogon MS Exchange Server RCE Vulnerability\nhttps://t.me/cybersecuritytechnologies/2835\nCVE-2021-3156 - Heap-Based Buffer Overflow in Sudo\nhttps://t.me/cybersecuritytechnologies/2577\nCVE-2021-22986 - F5 BIG-IP TMM uri_normalize_host infoleak and out-of-bounds write\nhttps://t.me/cybersecuritytechnologies/2881\nCVE-2021-27076 - A Replay-style Deserialization Attack Against SharePoint\nhttps://t.me/cybersecuritytechnologies/2930\nCVE-2021-21193 - Google Chrome Blink code execution\nhttps://vulmon.com/vulnerabilitydetails?qid=CVE-2021-21193\nCVE-2021-22987 - F5 BIG-IP TMM uri_normalize_host infoleak and out-of-bounds write\nhttps://t.me/cybersecuritytechnologies/2881\nCVE-2021-21193:\nGoogle Chrome Blink code execution\nhttps://vulmon.com/vulnerabilitydetails?qid=CVE-2021-21193\nCVE-2021-27076:\nReplay Deserialization Attack Against SharePoint\nhttps://t.me/cybersecuritytechnologies/2930\nCVE-2021-27889, CVE-2021-27890:\nMyBB RCE Chain\nhttps://blog.sonarsource.com/mybb-remote-code-execution-chain", "url": "https://t.me/infobes/301"}, {"timestamp": "2021-03-24T11:06:27Z", "date_only": false, "value": "2021-03-24T11:06:27Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2021:0928-1", "record": "SUSE-SU-2021:0928-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-03-24T11:06:27Z", "date_only": false, "value": "2021-03-24T11:06:27Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2021:0928-1", "record": "SUSE-SU-2021:0928-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2021-03-24T11:06:27Z", "date_only": false, "value": "2021-03-24T11:06:27Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2021:0928-1", "record": "SUSE-SU-2021:0928-1", "field": "document.tracking.generator.date"}, {"timestamp": "2021-03-24T11:06:27Z", "date_only": false, "value": "2021-03-24T11:06:27Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2021:0928-1", "record": "SUSE-SU-2021:0928-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2021-03-24T23:00:00Z", "date_only": false, "value": "2021-03-24T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0066", "record": "WID-SEC-W-2023-0066", "field": "document.tracking.revision_history.14.date"}, {"timestamp": "2021-03-29T05:54:18Z", "date_only": false, "value": "2021-03-29T05:54:18.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/2955", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "2ed80b67-8c8b-4a16-813c-d7d90a19f1d7", "content": "#Analytics\n10 most exploited vulnerabilities of the week (march 15 - 21)\nCVE-2021-26855/27065 - ProxyLogon MS Exchange Server RCE\nhttps://t.me/cybersecuritytechnologies/2835\nCVE-2021-3156 - Heap-Based Buffer Overflow in Sudo\nhttps://t.me/cybersecuritytechnologies/2577\nCVE-2021-22986/22987 - F5 BIG-IP TMM uri_normalize_host infoleak and out-of-bounds write\nhttps://t.me/cybersecuritytechnologies/2881\nCVE-2021-27076 - A Replay-style Deserialization Attack Against SharePoint\nhttps://t.me/cybersecuritytechnologies/2930\nCVE-2021-21193 - Google Chrome Blink code execution\nhttps://vulmon.com/vulnerabilitydetails?qid=CVE-2021-21193\nCVE-2021-21193:\nGoogle Chrome Blink code execution\nhttps://vulmon.com/vulnerabilitydetails?qid=CVE-2021-21193\nCVE-2021-27076:\nReplay Deserialization Attack Against SharePoint\nhttps://t.me/cybersecuritytechnologies/2930\nCVE-2021-27889, CVE-2021-27890:\nMyBB RCE Chain\nhttps://blog.sonarsource.com/mybb-remote-code-execution-chain", "url": "https://t.me/CyberSecurityTechnologies/2955"}, {"timestamp": "2021-04-15T22:00:00Z", "date_only": false, "value": "2021-04-15T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0066", "record": "WID-SEC-W-2023-0066", "field": "document.tracking.revision_history.15.date"}, {"timestamp": "2021-04-19T22:00:00Z", "date_only": false, "value": "2021-04-19T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0066", "record": "WID-SEC-W-2023-0066", "field": "document.tracking.revision_history.16.date"}, {"timestamp": "2021-04-20T08:54:52Z", "date_only": false, "value": "2021-04-20T08:54:52Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2021:1267-1", "record": "SUSE-SU-2021:1267-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-04-20T08:54:52Z", "date_only": false, "value": "2021-04-20T08:54:52Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2021:1267-1", "record": "SUSE-SU-2021:1267-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2021-04-20T08:54:52Z", "date_only": false, "value": "2021-04-20T08:54:52Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2021:1267-1", "record": "SUSE-SU-2021:1267-1", "field": "document.tracking.generator.date"}, {"timestamp": "2021-04-20T08:54:52Z", "date_only": false, "value": "2021-04-20T08:54:52Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2021:1267-1", "record": "SUSE-SU-2021:1267-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2021-04-20T12:29:42Z", "date_only": false, "value": "2021-04-20T12:29:42Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2021:1273-1", "record": "SUSE-SU-2021:1273-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-04-20T12:29:42Z", "date_only": false, "value": "2021-04-20T12:29:42Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2021:1273-1", "record": "SUSE-SU-2021:1273-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2021-04-20T12:29:42Z", "date_only": false, "value": "2021-04-20T12:29:42Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2021:1273-1", "record": "SUSE-SU-2021:1273-1", "field": "document.tracking.generator.date"}, {"timestamp": "2021-04-20T12:29:42Z", "date_only": false, "value": "2021-04-20T12:29:42Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2021:1273-1", "record": "SUSE-SU-2021:1273-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2021-04-20T12:29:59Z", "date_only": false, "value": "2021-04-20T12:29:59Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2021:1274-1", "record": "SUSE-SU-2021:1274-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-04-20T12:29:59Z", "date_only": false, "value": "2021-04-20T12:29:59Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2021:1274-1", "record": "SUSE-SU-2021:1274-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2021-04-20T12:29:59Z", "date_only": false, "value": "2021-04-20T12:29:59Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2021:1274-1", "record": "SUSE-SU-2021:1274-1", "field": "document.tracking.generator.date"}, {"timestamp": "2021-04-20T12:29:59Z", "date_only": false, "value": "2021-04-20T12:29:59Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2021:1274-1", "record": "SUSE-SU-2021:1274-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2021-04-20T12:32:02Z", "date_only": false, "value": "2021-04-20T12:32:02Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2021:1275-1", "record": "SUSE-SU-2021:1275-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-04-20T12:32:02Z", "date_only": false, "value": "2021-04-20T12:32:02Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2021:1275-1", "record": "SUSE-SU-2021:1275-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2021-04-20T12:32:02Z", "date_only": false, "value": "2021-04-20T12:32:02Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2021:1275-1", "record": "SUSE-SU-2021:1275-1", "field": "document.tracking.generator.date"}, {"timestamp": "2021-04-20T12:32:02Z", "date_only": false, "value": "2021-04-20T12:32:02Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2021:1275-1", "record": "SUSE-SU-2021:1275-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2021-04-20T22:00:00Z", "date_only": false, "value": "2021-04-20T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0066", "record": "WID-SEC-W-2023-0066", "field": "document.tracking.revision_history.17.date"}, {"timestamp": "2021-04-22T22:05:46Z", "date_only": false, "value": "2021-04-22T22:05:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/antichat/9556", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "4f4462f8-373f-40b6-ad63-af1ce9813cf8", "content": "Watch \"Critical Sudo Vulnerability Walkthrough // CVE-2021-3156\" on YouTube\nhttps://youtu.be/TLa2VqcGGEQ", "url": "https://t.me/antichat/9556"}, {"timestamp": "2021-04-23T10:46:47Z", "date_only": false, "value": "2021-04-23T10:46:47Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:0602-1", "record": "OPENSUSE-SU-2021:0602-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-04-23T10:46:47Z", "date_only": false, "value": "2021-04-23T10:46:47Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:0602-1", "record": "OPENSUSE-SU-2021:0602-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2021-04-23T10:46:47Z", "date_only": false, "value": "2021-04-23T10:46:47Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:0602-1", "record": "OPENSUSE-SU-2021:0602-1", "field": "document.tracking.generator.date"}, {"timestamp": "2021-04-23T10:46:47Z", "date_only": false, "value": "2021-04-23T10:46:47Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:0602-1", "record": "OPENSUSE-SU-2021:0602-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2021-04-26T00:00:00Z", "date_only": false, "value": "2021-04-26T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202101-1926", "record": "VAR-202101-1926", "field": "sources_update_date.data.0.date"}, {"timestamp": "2021-04-26T11:02:21Z", "date_only": false, "value": "2021-04-26T11:02:21.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/3219", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "d49c57aa-f21a-453f-85a9-52ac65b999b3", "content": "#Analytics\n10 most exploited vulnerabilities of the week (April 19-25)\nCVE-2021-3156 Heap-Based Buffer Overflow in Sudo\nhttps://t.me/cybersecuritytechnologies/2577\nCVE-2021-1732 Win kernel 0-day\nhttps://t.me/cybersecuritytechnologies/2679\nCVE-2021-22893 Pulse SecureVPN RCE\nhttps://t.me/cybersecuritytechnologies/3185\nCVE-2021-22204 Improper neutralization of user data in DjVu\nhttps://github.com/exiftool/exiftool/commit/cf0f4e7dcd024ca99615bfd1102a841a25dde031#diff-fa0d652d10dbcd246e6b1df16c1e992931d3bb717a7e36157596b76bdadb3800\nCVE-2021-26415 Win Installer EoP\nhttps://t.me/cybersecuritytechnologies/3186\nCVE-2021-3493 OverlayFS PE\nhttps://t.me/cybersecuritytechnologies/3164\nCVE-2021-26413 Win Installer Spoofing\nhttps://t.me/cybersecuritytechnologies/3176\nCVE-2016-7836 SKYSEA Client View Arbitrary Code Exec\nhttps://www.virusbulletin.com/virusbulletin/2020/05/vb2019-paper-apt-cases-exploiting-vulnerabilities-regionspecific-software\nCVE-2021-27905 Apache Solr SSRF\nhttps://t.me/cybersecuritytechnologies/3213", "url": "https://t.me/CyberSecurityTechnologies/3219"}, {"timestamp": "2021-04-29T00:00:00Z", "date_only": false, "value": "2021-04-29T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-21-119-03", "record": "ICSA-21-119-03", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-04-29T00:00:00Z", "date_only": false, "value": "2021-04-29T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-21-119-03", "record": "ICSA-21-119-03", "field": "document.tracking.initial_release_date"}, {"timestamp": "2021-04-29T00:00:00Z", "date_only": false, "value": "2021-04-29T00:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-21-119-03", "record": "ICSA-21-119-03", "field": "document.tracking.current_release_date"}, {"timestamp": "2021-05-13T00:00:00Z", "date_only": false, "value": "2021-05-13T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-21-133-02", "record": "ICSA-21-133-02", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-05-13T00:00:00Z", "date_only": false, "value": "2021-05-13T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-21-133-02", "record": "ICSA-21-133-02", "field": "document.tracking.initial_release_date"}, {"timestamp": "2021-05-13T00:00:00Z", "date_only": false, "value": "2021-05-13T00:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-21-133-02", "record": "ICSA-21-133-02", "field": "document.tracking.current_release_date"}, {"timestamp": "2021-05-27T00:00:00Z", "date_only": false, "value": "2021-05-27T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-21-147-02", "record": "ICSA-21-147-02", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-05-27T00:00:00Z", "date_only": false, "value": "2021-05-27T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-21-147-02", "record": "ICSA-21-147-02", "field": "document.tracking.initial_release_date"}, {"timestamp": "2021-05-27T00:00:00Z", "date_only": false, "value": "2021-05-27T00:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-21-147-02", "record": "ICSA-21-147-02", "field": "document.tracking.current_release_date"}, {"timestamp": "2021-06-01T22:00:00Z", "date_only": false, "value": "2021-06-01T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0066", "record": "WID-SEC-W-2023-0066", "field": "document.tracking.revision_history.18.date"}, {"timestamp": "2021-06-03T22:00:00Z", "date_only": false, "value": "2021-06-03T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0066", "record": "WID-SEC-W-2023-0066", "field": "document.tracking.revision_history.19.date"}, {"timestamp": "2021-06-30T00:00:00Z", "date_only": false, "value": "2021-06-30T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-496", "record": "CERTFR-2021-AVI-496", "field": "last_revision_date"}, {"timestamp": "2021-06-30T00:00:00Z", "date_only": false, "value": "2021-06-30T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-496", "record": "CERTFR-2021-AVI-496", "field": "initial_release_date"}, {"timestamp": "2021-06-30T00:00:00Z", "date_only": false, "value": "2021-06-30T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-496", "record": "CERTFR-2021-AVI-496", "field": "revisions.0.revision_date"}, {"timestamp": "2021-08-03T00:00:00Z", "date_only": false, "value": "2021-08-03T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-589", "record": "CERTFR-2021-AVI-589", "field": "last_revision_date"}, {"timestamp": "2021-08-03T00:00:00Z", "date_only": false, "value": "2021-08-03T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-589", "record": "CERTFR-2021-AVI-589", "field": "initial_release_date"}, {"timestamp": "2021-08-03T00:00:00Z", "date_only": false, "value": "2021-08-03T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-589", "record": "CERTFR-2021-AVI-589", "field": "revisions.0.revision_date"}, {"timestamp": "2021-08-04T00:00:00Z", "date_only": false, "value": "2021-08-04T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-597", "record": "CERTFR-2021-AVI-597", "field": "last_revision_date"}, {"timestamp": "2021-08-04T00:00:00Z", "date_only": false, "value": "2021-08-04T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-597", "record": "CERTFR-2021-AVI-597", "field": "initial_release_date"}, {"timestamp": "2021-08-04T00:00:00Z", "date_only": false, "value": "2021-08-04T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-597", "record": "CERTFR-2021-AVI-597", "field": "revisions.0.revision_date"}, {"timestamp": "2021-08-18T00:00:00Z", "date_only": false, "value": "2021-08-18T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-637", "record": "CERTFR-2021-AVI-637", "field": "last_revision_date"}, {"timestamp": "2021-08-18T00:00:00Z", "date_only": false, "value": "2021-08-18T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-637", "record": "CERTFR-2021-AVI-637", "field": "initial_release_date"}, {"timestamp": "2021-08-18T00:00:00Z", "date_only": false, "value": "2021-08-18T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-637", "record": "CERTFR-2021-AVI-637", "field": "revisions.0.revision_date"}, {"timestamp": "2021-09-02T00:00:00Z", "date_only": false, "value": "2021-09-02T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-21-245-01", "record": "ICSA-21-245-01", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-09-02T00:00:00Z", "date_only": false, "value": "2021-09-02T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-21-245-01", "record": "ICSA-21-245-01", "field": "document.tracking.initial_release_date"}, {"timestamp": "2021-09-02T00:00:00Z", "date_only": false, "value": "2021-09-02T00:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-21-245-01", "record": "ICSA-21-245-01", "field": "document.tracking.current_release_date"}, {"timestamp": "2021-09-14T00:00:00Z", "date_only": false, "value": "2021-09-14T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-700", "record": "CERTFR-2021-AVI-700", "field": "last_revision_date"}, {"timestamp": "2021-09-14T00:00:00Z", "date_only": false, "value": "2021-09-14T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-700", "record": "CERTFR-2021-AVI-700", "field": "initial_release_date"}, {"timestamp": "2021-09-14T00:00:00Z", "date_only": false, "value": "2021-09-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-700", "record": "CERTFR-2021-AVI-700", "field": "revisions.0.revision_date"}, {"timestamp": "2021-09-14T19:27:37Z", "date_only": false, "value": "2021-09-14T19:27:37.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/527", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "0dd853b2-3c41-4fc5-a7ba-a467726a2e12", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aCVE-2021-3156: Sudo heap overflow exploit for Debian 10\nURL\uff1ahttps://github.com/0xdevil/CVE-2021-3156", "url": "https://t.me/GithubRedTeam/527"}, {"timestamp": "2021-10-20T07:39:22Z", "date_only": false, "value": "2021-10-20T07:39:22.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/718", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "20fa1ac0-4d40-4395-bca2-08dfd4cdef20", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aCVE-2021-3156 exploit\nURL\uff1ahttps://github.com/Bubleh21/CVE-2021-3156", "url": "https://t.me/GithubRedTeam/718"}, {"timestamp": "2021-11-30T00:00:00Z", "date_only": false, "value": "2021-11-30T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-21-334-04", "record": "ICSA-21-334-04", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-11-30T00:00:00Z", "date_only": false, "value": "2021-11-30T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-21-334-04", "record": "ICSA-21-334-04", "field": "document.tracking.initial_release_date"}, {"timestamp": "2021-11-30T00:00:00Z", "date_only": false, "value": "2021-11-30T00:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-21-334-04", "record": "ICSA-21-334-04", "field": "document.tracking.current_release_date"}, {"timestamp": "2022-01-03T15:13:21Z", "date_only": false, "value": "2022-01-03T15:13:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1260", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "69f67e65-f4bb-4de2-b6ca-e9ac76d79c2a", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aCVE-2021-3156 - Sudo Baron Samedit\nURL\uff1ahttps://github.com/LiveOverflow/pwnedit", "url": "https://t.me/GithubRedTeam/1260"}, {"timestamp": "2022-01-20T23:48:13Z", "date_only": false, "value": "2022-01-20T23:48:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1371", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "3c62b21b-c736-4e38-a54a-8e938a1464b4", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aRoot shell PoC for CVE-2021-3156\nURL\uff1ahttps://github.com/CptGibbon/CVE-2021-3156", "url": "https://t.me/GithubRedTeam/1371"}, {"timestamp": "2022-01-23T16:39:13Z", "date_only": false, "value": "2022-01-23T16:39:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1376", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "27e1ef53-6fad-4811-b537-243ef38f607e", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aExploit and Demo system for CVE-2021-3156\nURL\uff1ahttps://github.com/sharkmoos/Baron-Samedit", "url": "https://t.me/GithubRedTeam/1376"}, {"timestamp": "2022-01-27T02:34:14Z", "date_only": false, "value": "2022-01-27T02:34:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1415", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "8321f574-e86d-4a8a-9d47-5f851d45db3d", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aCVE-2021-3156 POC and Docker and Analysis write up\nURL\uff1ahttps://github.com/chenaotian/CVE-2021-3156", "url": "https://t.me/GithubRedTeam/1415"}, {"timestamp": "2022-01-30T07:01:57Z", "date_only": false, "value": "2022-01-30T07:01:57.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1451", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "fc8c3218-8be6-4765-adac-99e66a1a3696", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aExploit for CVE-2021-3156\nURL\uff1ahttps://github.com/litt1eb0yy/CVE-2021-3156", "url": "https://t.me/GithubRedTeam/1451"}, {"timestamp": "2022-01-31T00:00:00Z", "date_only": false, "value": "2022-01-31T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-092", "record": "CERTFR-2022-AVI-092", "field": "last_revision_date"}, {"timestamp": "2022-01-31T00:00:00Z", "date_only": false, "value": "2022-01-31T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-092", "record": "CERTFR-2022-AVI-092", "field": "initial_release_date"}, {"timestamp": "2022-01-31T00:00:00Z", "date_only": false, "value": "2022-01-31T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-092", "record": "CERTFR-2022-AVI-092", "field": "revisions.0.revision_date"}, {"timestamp": "2022-03-14T00:00:00Z", "date_only": false, "value": "2022-03-14T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-239", "record": "CERTFR-2022-AVI-239", "field": "last_revision_date"}, {"timestamp": "2022-03-14T00:00:00Z", "date_only": false, "value": "2022-03-14T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-239", "record": "CERTFR-2022-AVI-239", "field": "initial_release_date"}, {"timestamp": "2022-03-14T00:00:00Z", "date_only": false, "value": "2022-03-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-239", "record": "CERTFR-2022-AVI-239", "field": "revisions.0.revision_date"}, {"timestamp": "2022-03-23T00:00:00Z", "date_only": false, "value": "2022-03-23T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-267", "record": "CERTFR-2022-AVI-267", "field": "last_revision_date"}, {"timestamp": "2022-03-23T00:00:00Z", "date_only": false, "value": "2022-03-23T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-267", "record": "CERTFR-2022-AVI-267", "field": "initial_release_date"}, {"timestamp": "2022-03-23T00:00:00Z", "date_only": false, "value": "2022-03-23T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-267", "record": "CERTFR-2022-AVI-267", "field": "revisions.0.revision_date"}, {"timestamp": "2022-04-06T00:00:00Z", "date_only": false, "value": "2022-04-06T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2021-3156", "field": "timestamps.asserted_at", "uuid": "bc797d5e-59c4-43df-b0b7-f59ff820eb2e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-04-06T00:00:00Z", "date_only": false, "value": "2022-04-06T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2021-3156", "field": "timestamps.asserted_at", "uuid": "5c5afafb-dd30-4fc9-9501-b210ede34ad7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-04-06T00:00:00Z", "date_only": true, "value": "2022-04-06", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "cve-2021-3156", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2022-04-06T00:00:00Z", "date_only": true, "value": "2022-04-06", "kind": "other", "label": "Catalog added", "source": "gsd \u00b7 GSD-2021-3156", "record": "GSD-2021-3156", "field": "namespaces.cisa.gov.dateAdded"}, {"timestamp": "2022-04-06T00:00:00Z", "date_only": false, "value": "2022-04-06T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2021-3156", "field": "evidence.0.details.added_date", "uuid": "5c5afafb-dd30-4fc9-9501-b210ede34ad7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-04-06T00:00:00Z", "date_only": false, "value": "2022-04-06T00:00:00+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2021:0219", "record": "RHSA-2021:0219", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2022-04-06T00:00:00Z", "date_only": false, "value": "2022-04-06T00:00:00+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2021:0220", "record": "RHSA-2021:0220", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2022-04-06T00:00:00Z", "date_only": false, "value": "2022-04-06T00:00:00+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2021:0222", "record": "RHSA-2021:0222", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2022-04-06T00:00:00Z", "date_only": false, "value": "2022-04-06T00:00:00+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2021:0223", "record": "RHSA-2021:0223", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2022-04-06T00:00:00Z", "date_only": false, "value": "2022-04-06T00:00:00+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2021:0224", "record": "RHSA-2021:0224", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2022-04-06T00:00:00Z", "date_only": false, "value": "2022-04-06T00:00:00+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2021:0225", "record": "RHSA-2021:0225", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2022-04-06T00:00:00Z", "date_only": false, "value": "2022-04-06T00:00:00+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2021:0226", "record": "RHSA-2021:0226", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2022-04-06T00:00:00Z", "date_only": false, "value": "2022-04-06T00:00:00+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2021:0227", "record": "RHSA-2021:0227", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2022-04-06T00:00:00Z", "date_only": false, "value": "2022-04-06T00:00:00+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2021:0395", "record": "RHSA-2021:0395", "field": "vulnerabilities.3.threats.0.date"}, {"timestamp": "2022-04-06T00:00:00Z", "date_only": false, "value": "2022-04-06T00:00:00+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2021:0401", "record": "RHSA-2021:0401", "field": "vulnerabilities.3.threats.0.date"}, {"timestamp": "2022-04-06T00:00:00Z", "date_only": true, "value": "2022-04-06", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2021-3156", "field": "evidence.0.details.date_added", "uuid": "bc797d5e-59c4-43df-b0b7-f59ff820eb2e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-04-06T00:00:00Z", "date_only": false, "value": "2022-04-06T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2021-3156", "field": "timestamps.first_seen_at", "uuid": "bc797d5e-59c4-43df-b0b7-f59ff820eb2e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-04-06T00:00:00Z", "date_only": false, "value": "2022-04-06T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2021-3156", "field": "timestamps.first_seen_at", "uuid": "5c5afafb-dd30-4fc9-9501-b210ede34ad7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-04-06T00:00:00Z", "date_only": false, "value": "2022-04-06T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2021-3156", "field": "status.status_updated_at", "uuid": "bc797d5e-59c4-43df-b0b7-f59ff820eb2e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-04-06T00:00:00Z", "date_only": false, "value": "2022-04-06T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2021-3156", "field": "status.status_updated_at", "uuid": "5c5afafb-dd30-4fc9-9501-b210ede34ad7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-04-06T00:00:00Z", "date_only": false, "value": "2022-04-06T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "cve-2021-3156", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2022-04-15T00:00:00Z", "date_only": false, "value": "2022-04-15T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-351", "record": "CERTFR-2022-AVI-351", "field": "last_revision_date"}, {"timestamp": "2022-04-15T00:00:00Z", "date_only": false, "value": "2022-04-15T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-351", "record": "CERTFR-2022-AVI-351", "field": "initial_release_date"}, {"timestamp": "2022-04-15T00:00:00Z", "date_only": false, "value": "2022-04-15T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-351", "record": "CERTFR-2022-AVI-351", "field": "revisions.0.revision_date"}, {"timestamp": "2022-04-27T00:00:00Z", "date_only": true, "value": "2022-04-27", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2021-3156", "field": "evidence.0.details.due_date", "uuid": "bc797d5e-59c4-43df-b0b7-f59ff820eb2e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-04-27T00:00:00Z", "date_only": true, "value": "2022-04-27", "kind": "other", "label": "Remediation due", "source": "gsd \u00b7 GSD-2021-3156", "record": "GSD-2021-3156", "field": "namespaces.cisa.gov.dueDate"}, {"timestamp": "2022-05-09T00:00:00Z", "date_only": false, "value": "2022-05-09T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-425", "record": "CERTFR-2022-AVI-425", "field": "last_revision_date"}, {"timestamp": "2022-05-09T00:00:00Z", "date_only": false, "value": "2022-05-09T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-425", "record": "CERTFR-2022-AVI-425", "field": "initial_release_date"}, {"timestamp": "2022-05-09T00:00:00Z", "date_only": false, "value": "2022-05-09T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-425", "record": "CERTFR-2022-AVI-425", "field": "revisions.0.revision_date"}, {"timestamp": "2022-05-24T17:40:22Z", "date_only": false, "value": "2022-05-24T17:40:22Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-W5VH-2923-GP5C", "record": "GHSA-W5VH-2923-GP5C", "field": "published"}, {"timestamp": "2022-09-03T00:00:00Z", "date_only": false, "value": "2022-09-03T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202101-1926", "record": "VAR-202101-1926", "field": "sources_update_date.data.1.date"}, {"timestamp": "2022-09-13T00:00:00Z", "date_only": false, "value": "2022-09-13T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-22-256-01", "record": "ICSA-22-256-01", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-09-13T00:00:00Z", "date_only": false, "value": "2022-09-13T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-22-256-01", "record": "ICSA-22-256-01", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-09-13T00:00:00Z", "date_only": false, "value": "2022-09-13T00:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-22-256-01", "record": "ICSA-22-256-01", "field": "document.tracking.current_release_date"}, {"timestamp": "2022-10-22T03:10:14Z", "date_only": false, "value": "2022-10-22T03:10:14+00:00", "kind": "other", "label": "Document generated", "source": "csaf_cisco \u00b7 CISCO-SA-SUDO-PRIVESC-JAN2021-QNYQFCM", "record": "CISCO-SA-SUDO-PRIVESC-JAN2021-QNYQFCM", "field": "document.tracking.generator.date"}, {"timestamp": "2023-01-11T23:00:00Z", "date_only": false, "value": "2023-01-11T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0066", "record": "WID-SEC-W-2023-0066", "field": "document.tracking.revision_history.20.date"}, {"timestamp": "2023-01-23T00:00:00Z", "date_only": false, "value": "2023-01-23T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0051", "record": "CERTFR-2023-AVI-0051", "field": "last_revision_date"}, {"timestamp": "2023-01-23T00:00:00Z", "date_only": false, "value": "2023-01-23T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0051", "record": "CERTFR-2023-AVI-0051", "field": "initial_release_date"}, {"timestamp": "2023-01-23T00:00:00Z", "date_only": false, "value": "2023-01-23T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0051", "record": "CERTFR-2023-AVI-0051", "field": "revisions.0.revision_date"}, {"timestamp": "2023-03-23T06:30:43Z", "date_only": false, "value": "2023-03-23T06:30:43.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/proxy_bar/1427", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "73838298-e907-4b98-ba5d-6c8d99b2012f", "content": "kernel-linux-factory\n*\n\u0423\u0434\u043e\u0431\u043d\u043e \u0442\u0435\u043c, \u0447\u0442\u043e \u043d\u0435 \u043d\u0443\u0436\u043d\u043e \u043a\u043e\u043c\u043f\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438\u043b\u0438 \u043d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0442\u044c \u0441\u0440\u0435\u0434\u0443, \u0433\u043b\u044f\u043d\u0443\u043b \u043a\u0430\u043a\u043e\u0435 \u044f\u0434\u0440\u043e, \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u043b \u0441\u043f\u043b\u043e\u0435\u0442, \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u043f\u043e \u043c\u043e\u0440\u0434\u0435 #root\n*\n\u0432 \u0441\u043e\u0441\u0442\u0430\u0432\u0435 exploits \u0434\u043b\u044f:\nCVE-2016-9793\n4-20-BPF-integer\nCVE-2017-5123\nCVE-2017-6074\nCVE-2017-7308\nCVE-2017-8890\nCVE-2017-11176\nCVE-2017-16995\nCVE-2017-1000112\nCVE-2018-5333\nCVE-2019-9213 & CVE-2019-8956\nCVE-2019-15666\nCVE-2020-8835\nCVE-2020-27194\nCVE-2021-3156\nCVE-2021-31440\nCVE-2021-3490\nCVE-2021-22555\nCVE-2021-41073\nCVE-2021-4154\nCVE-2021-42008\nCVE-2021-43267\nCVE-2022-0185\nCVE-2022-0847\nCVE-2022-0995\nCVE-2022-1015\nCVE-2022-2588\nCVE-2022-2639\nCVE-2022-25636\nCVE-2022-27666\nCVE-2022-32250\nCVE-2022-34918\n\ndownload\n\n#linux #exploits #kernel", "url": "https://t.me/proxy_bar/1427"}, {"timestamp": "2023-03-23T09:18:19Z", "date_only": false, "value": "2023-03-23T09:18:19.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/TXmZ8EBGvdc4uufvEqu6hfgyjEc7K_gjD1Jpp8Uzvu6-KK0", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "aba9d0d7-c2f8-489e-a86c-bb3da225c7a9"}, {"timestamp": "2023-06-14T21:10:04Z", "date_only": false, "value": "2023-06-14T21:10:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "eaec1b95-a58b-49c7-86c1-55286d8999a0"}, {"timestamp": "2023-06-29T22:00:00Z", "date_only": false, "value": "2023-06-29T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0066", "record": "WID-SEC-W-2023-0066", "field": "document.tracking.revision_history.21.date"}, {"timestamp": "2023-06-30T00:00:00Z", "date_only": false, "value": "2023-06-30T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0504", "record": "CERTFR-2023-AVI-0504", "field": "last_revision_date"}, {"timestamp": "2023-06-30T00:00:00Z", "date_only": false, "value": "2023-06-30T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0504", "record": "CERTFR-2023-AVI-0504", "field": "initial_release_date"}, {"timestamp": "2023-06-30T00:00:00Z", "date_only": false, "value": "2023-06-30T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0504", "record": "CERTFR-2023-AVI-0504", "field": "revisions.0.revision_date"}, {"timestamp": "2023-12-02T01:12:34Z", "date_only": false, "value": "2023-12-02T01:12:34.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/872", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "cd12d3e9-f4c8-498c-a36e-d2bd65894c60", "content": "#ExploitObserverAlert\n\nCVE-2021-3156\n\nDESCRIPTION: Exploit Observer has 324 entries related to CVE-2021-3156. Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via \"sudoedit -s\" and a command-line argument that ends with a single backslash character.\n\nFIRST-EPSS: 0.965750000\nNVD-IS: 5.9\nNVD-ES: 1.8", "url": "https://t.me/arpsyndicate/872"}, {"timestamp": "2023-12-13T01:23:34.023Z", "date_only": false, "value": "2023-12-13T01:23:34.023402Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-3156", "record": "GSD-2021-3156", "field": "gsd.osvSchema.modified"}, {"timestamp": "2023-12-18T12:32:10Z", "date_only": false, "value": "2023-12-18T12:32:10.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1983", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "6451916a-bb0d-4506-a2fb-7e289742e1df", "content": "#ExploitObserverAlert\n\nCVE-2021-3156\n\nDESCRIPTION: Exploit Observer has 373 entries related to CVE-2021-3156. Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via \"sudoedit -s\" and a command-line argument that ends with a single backslash character.\n\nFIRST-EPSS: 0.965750000\nNVD-IS: 5.9\nNVD-ES: 1.8", "url": "https://t.me/arpsyndicate/1983"}, {"timestamp": "2024-02-04T09:15:08.010Z", "date_only": false, "value": "2024-02-04T09:15:08.010", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-3156", "record": "GSD-2021-3156", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-05-22T06:15:17Z", "date_only": false, "value": "2024-05-22T06:15:17.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/2661", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "2c31665c-0efb-48d8-a9c2-c4eff16ea61e", "content": "#Analytics\n10 most exploited vulnerabilities of the week (feb 1-7)\nCVE-2020-1350 - Exploit SIGRed/Windows DNS Server RCE\nhttps://t.me/cybersecuritytechnologies/1422\nCVE-2021-3156 - Heap-Based Buffer Overflow in Sudo\nhttps://t.me/cybersecuritytechnologies/2577\nCVE-2020-7961 - Arbitrary code execution via JSONWS\nhttps://t.me/cybersecuritytechnologies/869\nCVE-2021-25646 - Apache Druid <=0.20.1 RCE\nhttps://t.me/cybersecuritytechnologies/2639\nCVE-2020-27932 - A type confusion in MacOS 10.15.7\nhttps://t.me/cybersecuritytechnologies/2383\nCVE-2019-9041 - ZzzCMS RCE\nhttps://mobile.twitter.com/i/web/status/1357931580098899970\nCVE-2021-22122 - XSS vulnerability in FortiWeb\nhttps://vulmon.com/vulnerabilitydetails?qid=CVE-2021-22122\nCVE-2019-5127 - A cmd injection in YouPHPTube Encoder\nhttps://mobile.twitter.com/i/web/status/1357546718821142528\nCVE-2020-17523 - Apache Shiro pathMatches Auth. Bypass\nhttps://t.me/cybersecuritytechnologies/2650", "url": "https://t.me/CyberSecurityTechnologies/2661"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11413-1", "record": "OPENSUSE-SU-2024:11413-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11413-1", "record": "OPENSUSE-SU-2024:11413-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11413-1", "record": "OPENSUSE-SU-2024:11413-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11413-1", "record": "OPENSUSE-SU-2024:11413-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-06-19T00:00:00Z", "date_only": true, "value": "2024-06-19", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0508", "record": "CERTFR-2024-AVI-0508", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2024-06-20T00:00:00Z", "date_only": false, "value": "2024-06-20T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0508", "record": "CERTFR-2024-AVI-0508", "field": "last_revision_date"}, {"timestamp": "2024-06-20T00:00:00Z", "date_only": true, "value": "2024-06-20", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0508", "record": "CERTFR-2024-AVI-0508", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2024-06-20T00:00:00Z", "date_only": false, "value": "2024-06-20T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0508", "record": "CERTFR-2024-AVI-0508", "field": "revisions.0.revision_date"}, {"timestamp": "2024-06-24T14:33:41Z", "date_only": false, "value": "2024-06-24T14:33:41.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/5890", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "761eed57-cd00-4e5e-9d0e-be32af0cbcd1", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Positive Technologies \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u0438\u0437\u0430\u0446\u0438\u0438 ExCobalt \u043d\u0430 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u043e\u043c \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043d\u043e\u0432\u043e\u0433\u043e \u0431\u044d\u043a\u0434\u043e\u0440\u0430 GoRed \u043d\u0430 \u0431\u0430\u0437\u0435 Golang.\n\n\u0413\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 ExCobalt \u0441\u043e\u0441\u0440\u0435\u0434\u043e\u0442\u043e\u0447\u0435\u043d\u0430 \u043d\u0430 \u043a\u0438\u0431\u0435\u0440\u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0435 \u0438 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0432 \u0441\u0435\u0431\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u043e\u0432, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0441 2016 \u0433\u043e\u0434\u0430, \u0438\u0437 \u0447\u0438\u0441\u043b\u0430, \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u0431\u044b\u0432\u0448\u0438\u0445 \u0447\u043b\u0435\u043d\u043e\u0432 \u0431\u0430\u043d\u0434\u044b Cobalt.\n\nCobalt\u00a0\u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043b \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u0435 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f\u00a0\u0441 \u0446\u0435\u043b\u044c\u044e \u043a\u0440\u0430\u0436\u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432, \u043e\u0442\u043b\u0438\u0447\u0430\u044f\u0441\u044c \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 CobInt, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0430\u0447\u0430\u043b\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c \u0432 2022 \u0433\u043e\u0434\u0443.\n\n\u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0439 \u0433\u043e\u0434 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u044f\u0442\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u0420\u0424 \u0430\u0442\u0430\u043a\u0438 \u0431\u044b\u043b\u0438 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u044b \u043d\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0441\u0435\u043a\u0442\u043e\u0440\u0430, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0433\u043e\u0441\u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435, \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438, \u043c\u0435\u0442\u0430\u043b\u043b\u0443\u0440\u0433\u0438\u044e, \u0433\u043e\u0440\u043d\u043e\u0434\u043e\u0431\u044b\u0432\u0430\u044e\u0449\u0443\u044e \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u0438 \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u041f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0440\u0435\u0434\u0430\u043c \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043f\u043e\u0434\u0440\u044f\u0434\u0447\u0438\u043a\u0430\u00a0\u0438 \u0430\u0442\u0430\u043a \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a, \u0447\u0442\u043e \u043e\u0442\u0440\u0430\u0436\u0430\u0435\u0442 \u0432\u044b\u0441\u043e\u043a\u0443\u044e \u0441\u0442\u0435\u043f\u0435\u043d\u044c \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0439.\n\n\u041c\u0435\u0442\u043e\u0434\u043e\u043b\u043e\u0433\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b ExCobalt \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a Metasploit, Mimikatz, ProcDump, SMBExec, Spark RAT\u00a0\u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u043d\u044b\u0445 \u0445\u043e\u0441\u0442\u0430\u0445, \u0430 \u0442\u0430\u043a\u0436\u0435 EoP-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0434\u043b\u044f Linux (CVE-2019-13272, CVE-2021-3156, CVE-2021- 4034 \u0438 CVE-2022-2586).\n\n\u041f\u0440\u0435\u0442\u0435\u0440\u043f\u0435\u0432\u0448\u0438\u0439 \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u0441\u0432\u043e\u0435\u0433\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f GoRed \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0441\u043d\u044b\u0439 \u0431\u044d\u043a\u0434\u043e\u0440, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0441\u043e\u0431\u0438\u0440\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430\u0445, \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430\u0445 \u0438 \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445.\n\n\u041e\u043d \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u0437\u043e\u0432\u0430 \u043f\u0440\u043e\u0446\u0435\u0434\u0443\u0440 RPC \u0434\u043b\u044f \u0441\u0432\u044f\u0437\u0438 \u0441 C2.\n\n\u0411\u043e\u043b\u0435\u0435 \u0442\u043e\u0433\u043e, \u043e\u043d \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u0440\u044f\u0434 \u0444\u043e\u043d\u043e\u0432\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u0434\u043b\u044f \u043f\u043e\u0438\u0441\u043a\u0430 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u0443\u044e\u0449\u0438\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043e\u0431\u0440\u0430\u0442\u043d\u043e\u0439 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438. \u0421\u043e\u0431\u0440\u0430\u043d\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0437\u0430\u0442\u0435\u043c \u044d\u043a\u0441\u043f\u043e\u0440\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443, \u043f\u043e\u0434\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u0443\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443.\n\nExCobalt \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u044f \u0432 \u0441\u0432\u043e\u0439 \u0430\u0440\u0441\u0435\u043d\u0430\u043b \u043d\u043e\u0432\u044b\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0438 \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0441\u0442\u0432\u0443\u044f \u043c\u0435\u0442\u043e\u0434\u044b.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c GoRed\u00a0\u043f\u0440\u0438\u043e\u0431\u0440\u0435\u0442\u0430\u0435\u0442 \u0432\u0441\u0435 \u043d\u043e\u0432\u044b\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u043f\u043e \u0441\u0431\u043e\u0440\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u0436\u0435\u0440\u0442\u0432\u044b, \u043f\u043e\u0432\u044b\u0448\u0430\u044f \u0441\u043a\u0440\u044b\u0442\u043d\u043e\u0441\u0442\u044c \u043a\u0430\u043a \u0432\u043d\u0443\u0442\u0440\u0438 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0442\u0430\u043a \u0438 \u043f\u0440\u0438 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0438 \u0441 C2.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, ExCobalt \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442 \u0433\u0438\u0431\u043a\u043e\u0441\u0442\u044c \u0438 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0434\u043e\u043f\u043e\u043b\u043d\u044f\u044f \u0441\u0432\u043e\u0439 \u043d\u0430\u0431\u043e\u0440 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u043c\u0438 \u0443\u0442\u0438\u043b\u0438\u0442\u0430\u043c\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u043c\u043e\u0433\u0430\u044e\u0442 \u0433\u0440\u0443\u043f\u043f\u0435 \u043b\u0435\u0433\u043a\u043e \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u0438 \u0430\u0434\u0430\u043f\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u043a \u0435\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f\u043c, \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044f \u0433\u043b\u0443\u0431\u043e\u043a\u043e\u0435 \u043f\u043e\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u0441\u043b\u0430\u0431\u044b\u0445 \u0441\u0442\u043e\u0440\u043e\u043d \u0436\u0435\u0440\u0442\u0432\u044b.", "url": "https://t.me/true_secator/5890"}, {"timestamp": "2024-08-03T16:45:51.408Z", "date_only": false, "value": "2024-08-03T16:45:51.408Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2021-3156", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-28T07:50:25Z", "date_only": false, "value": "2024-08-28T07:50:25.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/7XG3Qhyveq0sd-sorvBusAou1bYnK4tFO-cr4qbsp7Vd2w0", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "ca154f73-0a4f-4349-b474-4acf6d774000"}, {"timestamp": "2024-09-18T16:41:27.031Z", "date_only": false, "value": "2024-09-18T16:41:27.031Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "cve-2021-3156", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-09T19:50:12Z", "date_only": false, "value": "2024-10-09T19:50:12.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/2577", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "e8145227-f0f4-4c44-9763-061a53b107a6", "content": "#exploit\nCVE-2021-3156 (\"Baron Samedit\"):\nHeap-Based Buffer Overflow in Sudo\nhttps://blog.qualys.com/vulnerabilities-research/2021/01/26/cve-2021-3156-heap-based-buffer-overflow-in-sudo-baron-samedit\n// affects all legacy versions from 1.8.2 to 1.8.31p2, all stable versions from 1.9.0 to 1.9.5p1 in their default configuration", "url": "https://t.me/CyberSecurityTechnologies/2577"}, {"timestamp": "2024-11-25T13:11:10.222Z", "date_only": false, "value": "2024-11-25T13:11:10.222Z", "kind": "other", "label": "Document generated", "source": "csaf_trumpfsecokg \u00b7 VDE-2021-011", "record": "VDE-2021-011", "field": "document.tracking.generator.date"}, {"timestamp": "2024-12-20T09:06:16Z", "date_only": false, "value": "2024-12-20T09:06:16Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2024:4389-1", "record": "SUSE-SU-2024:4389-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-12-20T09:06:16Z", "date_only": false, "value": "2024-12-20T09:06:16Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2024:4389-1", "record": "SUSE-SU-2024:4389-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-12-20T09:06:16Z", "date_only": false, "value": "2024-12-20T09:06:16Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2024:4389-1", "record": "SUSE-SU-2024:4389-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-12-20T09:06:16Z", "date_only": false, "value": "2024-12-20T09:06:16Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2024:4389-1", "record": "SUSE-SU-2024:4389-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-12-22T23:00:00Z", "date_only": false, "value": "2024-12-22T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0066", "record": "WID-SEC-W-2023-0066", "field": "document.tracking.revision_history.22.date"}, {"timestamp": "2024-12-24T20:30:14.707Z", "date_only": false, "value": "2024-12-24T20:30:14.707979Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971500", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "9da10140-22f5-44ea-832a-399469450344", "url": "https://feedsin.space/feed/CISAKevBot/items/2971500"}, {"timestamp": "2025-01-04T20:01:45Z", "date_only": false, "value": "2025-01-04T20:01:45.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/2605", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "708be98a-a3db-4960-9a24-f07e197cd2e7", "content": "#Analytics\nTop 10 Most Used Vulnerabilities of the Month (january 1-31)\nCVE-2021-3156:\nhttps://t.me/cybersecuritytechnologies/2577\nCVE-2020-16875:\nhttps://t.me/cybersecuritytechnologies/1751\nCVE-2020-29583:\nhttps://t.me/cybersecuritytechnologies/2386\nCVE-2021-2109:\nhttps://t.me/cybersecuritytechnologies/2540\nCVE-2020-17519:\nhttps://t.me/cybersecuritytechnologies/2473\nCVE-2020-25684/25685/25686:\nhttps://t.me/cybersecuritytechnologies/2534\nCVE-2021-3011:\nhttps://t.me/cybersecuritytechnologies/2447", "url": "https://t.me/CyberSecurityTechnologies/2605"}, {"timestamp": "2025-02-03T15:43:52.658Z", "date_only": false, "value": "2025-02-03T15:43:52.658146Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2021-3156", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-02-03T15:43:52.658Z", "date_only": false, "value": "2025-02-03T15:43:52.658146Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-3156", "record": "FKIE_CVE-2021-3156", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-06T02:39:19Z", "date_only": false, "value": "2025-02-06T02:39:19.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/9ZPtMGQ2NTqDlQjOJ_KORtJHj6LrGXIkN7PF8Qy11_r0aZ9d", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "9b00e88b-76ae-47ba-b1dd-9aa3c19de01d"}, {"timestamp": "2025-02-06T03:13:45Z", "date_only": false, "value": "2025-02-06T03:13:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "efd8e329-a1f6-468e-a347-1f8da0ce96d8"}, {"timestamp": "2025-02-11T10:00:05Z", "date_only": false, "value": "2025-02-11T10:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/5ubDiOPhpE3YXrILNQXATGJJi9BbUr-zrtzW-n3816ppGAI", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "5280bd48-5ba6-40bf-8f1b-c3e113ff5cbe"}, {"timestamp": "2025-02-23T02:10:30Z", "date_only": false, "value": "2025-02-23T02:10:30.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "036775d6-1b12-4961-aeb8-79be68c006a8"}, {"timestamp": "2025-02-23T04:10:37Z", "date_only": false, "value": "2025-02-23T04:10:37.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "f7a5df55-29cc-4c42-a2e8-7de95314d8f7"}, {"timestamp": "2025-04-10T13:00:00Z", "date_only": false, "value": "2025-04-10T13:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_trumpfsecokg \u00b7 VDE-2021-011", "record": "VDE-2021-011", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2025-05-07T21:41:33Z", "date_only": false, "value": "2025-05-07T21:41:33.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/tech_b0lt_Genona/5319", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "55cc4cb1-20c8-4e7b-aa2c-130f9f65e2cd", "content": "\u0422\u0443\u0442 \u0432 Ubuntu \u0440\u0435\u0448\u0438\u043b\u0438 \u0437\u0430\u0442\u0430\u0449\u0438\u0442\u044c \u0430\u043d\u0430\u043b\u043e\u0433 sudo, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043d\u0430 Rust \u043d\u0430\u043f\u0438\u0441\u0430\u043d\n\n\u0412\u043e\u043e\u0431\u0449\u0435 \u044d\u0442\u043e \u0437\u043d\u0430\u043a\u043e\u0432\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442, \u043f\u043e\u0442\u043e\u043c\u0443 \u0447\u0442\u043e\n\n1. \u0410\u043d\u0430\u043b\u043e\u0433 \u0431\u0443\u0434\u0435\u0442 \u0432\u043a\u043b\u044e\u0447\u0435\u043d \u0432 \u043f\u043e\u0441\u0442\u0430\u0432\u043a\u0443 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0433\u043e \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\n2. \u042d\u0442\u043e \u043f\u0435\u0440\u0432\u044b\u0439 \u0448\u0430\u0433 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u043d\u043e\u0432\u043e\u0439 \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u0443\u0442\u0438\u043b\u0438\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u043c\u0435\u043d\u0438\u0442\u044c \u0441\u0442\u0430\u0440\u044b\u0435 \u0441 \"\u0438\u0441\u0442\u043e\u0440\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c\u0438\"\n\n\u042f \u043b\u0438\u0447\u043d\u043e \u043d\u0435 \u043f\u0435\u0440\u0435\u0445\u043e\u0436\u0443 \u043d\u0438 \u043d\u0430 \u043a\u0430\u043a\u0438\u0435 \u043c\u043e\u0434\u043d\u044b\u0435 \"\ud83d\udca5blazing\ud83d\udcaafast\ud83d\ude80\" \u0443\u0442\u0438\u043b\u0438\u0442\u044b \u043f\u043e\u043a\u0430 \u043e\u043d\u0438 \u043d\u0435 \u043f\u043e\u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e. \u0422\u0430\u043a \u0447\u0442\u043e \u0431\u0443\u0434\u0435\u043c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Canonical \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u0430 \u0432 \u043e\u0441\u0435\u043d\u043d\u0435\u043c \u0432\u044b\u043f\u0443\u0441\u043a\u0435 Ubuntu 25.10 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0430\u043d\u0430\u043b\u043e\u0433 \u0443\u0442\u0438\u043b\u0438\u0442\u044b sudo, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u044b\u0439 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c sudo-rs \u0438 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Rust. \u0412 \u043c\u0430\u0440\u0442\u0435 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u043e\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0431\u044b\u043b\u043e \u043f\u0440\u0438\u043d\u044f\u0442\u043e \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u0437\u0430\u043c\u0435\u043d\u044b \u0443\u0442\u0438\u043b\u0438\u0442 GNU Coreutils \u043d\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 uutils. \u041d\u0430 \u0441\u0442\u0430\u0434\u0438\u0438 \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u043d\u0438\u044f \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u044b \u043f\u043e \u0437\u0430\u043c\u0435\u043d\u0435 zlib \u0438 ntpd \u043d\u0430 zlib-rs \u0438 ntpd-rs, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u044e Sequoia \u0432\u043c\u0435\u0441\u0442\u043e GnuPG \u0432 \u043f\u0430\u043a\u0435\u0442\u043d\u043e\u043c \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0435 APT.\n\n\u0412 sudo-rs \u043f\u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0430 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438 \u0443\u0442\u0438\u043b\u0438\u0442\u0430\u043c\u0438 sudo \u0438 su, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c sudo-rs \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u0440\u043e\u0437\u0440\u0430\u0447\u043d\u043e\u0439 \u0437\u0430\u043c\u0435\u043d\u044b sudo \u0432 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f. \u0414\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043d\u0435 \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u0445 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u0442\u044c \u043d\u0430 uutils \u0438 sudo-rs, \u0432 Ubuntu 25.10 \u0431\u0443\u0434\u0435\u0442 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0430 \u043e\u043f\u0446\u0438\u044f \u0434\u043b\u044f \u043e\u0442\u043a\u0430\u0442\u0430 \u043d\u0430 \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0443\u0442\u0438\u043b\u0438\u0442 coreutils \u0438 sudo.\n. . .\n\u0417\u0430\u043c\u0435\u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0441\u044f \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u044b \u043f\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0441\u0442\u0430\u0432\u043a\u0443 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c, \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u043c\u044b\u0445 \u0441 \u043e\u0433\u043b\u044f\u0434\u043a\u043e\u0439 \u043d\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c, \u043d\u0430\u0434\u0451\u0436\u043d\u043e\u0441\u0442\u044c \u0438 \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0441\u0442\u044c. \u041f\u043e\u0441\u0442\u0430\u0432\u043a\u0430 \u0443\u0442\u0438\u043b\u0438\u0442, \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Rust, \u0434\u0430\u0441\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0441\u043d\u0438\u0437\u0438\u0442\u044c \u0440\u0438\u0441\u043a \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0448\u0438\u0431\u043e\u043a \u043f\u0440\u0438 \u0440\u0430\u0431\u043e\u0442\u0435 \u0441 \u043f\u0430\u043c\u044f\u0442\u044c\u044e, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u043a \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u043e\u0441\u043b\u0435 \u0435\u0451 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0438 \u0432\u044b\u0445\u043e\u0434 \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u0431\u0443\u0444\u0435\u0440\u0430. \u0415\u0441\u043b\u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442 \u0431\u0443\u0434\u0435\u0442 \u043f\u0440\u0438\u0437\u043d\u0430\u043d \u0443\u0434\u0430\u0447\u043d\u044b\u043c, \u0442\u043e \u0443\u0442\u0438\u043b\u0438\u0442\u044b \u043d\u0430 Rust \u0431\u0443\u0434\u0443\u0442 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u044b \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0432 LTS-\u0432\u0435\u0442\u043a\u0435 Ubuntu 26.04.\n\u0412 Ubuntu 25.10 \u0440\u0435\u0448\u0435\u043d\u043e \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0430\u043d\u0430\u043b\u043e\u0433 sudo, \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 Rust\nhttps://www.opennet.ru/opennews/art.shtml?num=63197\n\n\u041f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 Rust \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u0437\u0430\u043a\u0440\u044b\u0442\u044c \u0447\u0430\u0441\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c. \u0412\u043e\u0442 \u043f\u0440\u0438\u043c\u0435\u0440\u044b CVE \u043e\u0442\u043d\u043e\u0441\u044f\u0449\u0438\u0435\u0441\u044f \u043a sudo\n\n- CVE-2019-18634 - \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 root \u0447\u0435\u0440\u0435\u0437 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 (https://github.com/saleemrashid/sudo-cve-2019-18634/)\n\n- CVE-2021-3156 - \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 root \u0447\u0435\u0440\u0435\u0437 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 (https://github.com/worawit/CVE-2021-3156)\n\n\u041d\u043e sudo-rs \u0442\u043e\u0447\u043d\u043e \u043f\u0440\u0435\u0434\u0441\u0442\u043e\u0438\u0442 \u0435\u0449\u0451 \u043c\u043d\u043e\u0433\u043e \u0440\u0430\u0431\u043e\u0442\u044b, \u0447\u0442\u043e \u0431\u044b \"\u043e\u0431\u043a\u0430\u0442\u0430\u0442\u044c\u0441\u044f\" \u0441 \u043b\u043e\u0433\u0438\u043a\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b. \u0412\u043e\u0442, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, CVE-2023-42456\n\nFor example we could add a user to the system containing the username `../../../../bin/cp`. When logged in as a user with that name, that user could run `sudo -K` to clear their session record file. The session code then constructs the path to the session file by concatenating the username to the session file storage directory, resulting in a resolved path of `/bin/cp`. The code then clears that file, resulting in the `cp` binary effectively being removed from the system. An attacker needs to be able to login as a user with a constructed username. Given that such a username is unlikely to exist on an existing system, they will also need to be able to create the users with the constructed usernames...The `sudo -K` and `sudo -k` commands can run, even if a user has no sudo access.\nhttp://cve.org/CVERecord?id=CVE-2023-42456\n\nGitHub \u043f\u0440\u043e\u0435\u043a\u0442\u0430\nhttps://github.com/trifectatechfoundation/sudo-rs", "url": "https://t.me/tech_b0lt_Genona/5319"}, {"timestamp": "2025-05-14T13:00:14Z", "date_only": false, "value": "2025-05-14T13:00:14.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_trumpfsecokg \u00b7 VDE-2021-011", "record": "VDE-2021-011", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2025-05-30T12:09:26.248Z", "date_only": false, "value": "2025-05-30T12:09:26.248967Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-50f1a5f6-768cfe71f5758dad", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "03713efc-7497-4267-ac59-1be98dd7e280", "url": "https://poliverso.org/objects/0477a01e-50f1a5f6-768cfe71f5758dad"}, {"timestamp": "2025-06-04T18:00:07Z", "date_only": false, "value": "2025-06-04T18:00:07.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/7103", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "eff8aa56-d55b-4941-ad8c-449251a366f8", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0431\u043e\u043c\u0431\u0438\u0442\u044c \u043e\u0442\u0447\u0435\u0442\u0430\u043c\u0438, \u043d\u0430 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u043f\u043e\u0434\u043e\u0433\u043d\u0430\u043b\u0438 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0443 \u043f\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430\u043c \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0437\u0430 \u043f\u0435\u0440\u0432\u044b\u0439 \u043a\u0432\u0430\u0440\u0442\u0430\u043b 2025 \u0433\u043e\u0434\u0430.\n\n\u0412 \u043f\u0435\u0440\u0432\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2025 \u0433\u043e\u0434\u0430 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u043b\u0430\u0441\u044c \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432 2024 \u0433\u043e\u0434\u0443, \u0442\u0430\u043a \u043a\u0430\u043a \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435 \u043c\u043e\u0433\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u043e\u0434\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438.\n\n\u0412 \u0446\u0435\u043b\u043e\u043c \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u0438 \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0430 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u044e\u0442 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0431\u043e\u043b\u044c\u0448\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0434\u0438\u043d\u0430\u043c\u0438\u043a\u0430 \u0438\u0445 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u0432\u043e \u043c\u043d\u043e\u0433\u043e\u043c \u043f\u043e\u0432\u0442\u043e\u0440\u044f\u0435\u0442 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0435 \u0433\u043e\u0434\u044b.\n\n\u0412 \u0446\u0435\u043b\u043e\u043c \u043c\u043d\u043e\u0433\u0438\u0435 CWE \u0438\u0437 TOP 10 \u0434\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u0439 Microsoft \u0438 \u044f\u0434\u0440\u0430 Linux \u0441\u043e\u0432\u043f\u0430\u0434\u0430\u044e\u0442 \u0438\u043b\u0438 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u043c\u0438, \u0430 \u0437\u043d\u0430\u0447\u0438\u0442, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u044b \u043d\u0430 \u0441\u0445\u043e\u0436\u0438\u0445 \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u0430\u0445, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u0447\u0430\u0441\u0442\u043e \u043a \u00ab\u043f\u043e\u0440\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e\u00bb \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432 \u0430\u0442\u0430\u043a \u0434\u043b\u044f Linux \u043d\u0430 Windows \u0438 \u043d\u0430\u043e\u0431\u043e\u0440\u043e\u0442.\n\n\u0412 \u043f\u0435\u0440\u0432\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2025 \u0433\u043e\u0434\u0430 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0430\u0442\u0430\u043a \u0441 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430\u043c\u0438 \u0434\u043b\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Windows \u0432\u044b\u0440\u043e\u0441\u043b\u043e \u043f\u043e \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u044e \u0441 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u043c \u043f\u0435\u0440\u0438\u043e\u0434\u043e\u043c \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430.\n\n\u041a\u0430\u043a \u0438 \u043f\u0440\u0435\u0436\u0434\u0435, \u043b\u044c\u0432\u0438\u043d\u0430\u044f \u0434\u043e\u043b\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0431\u044b\u043b\u0430 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b Microsoft Office.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e \u0447\u0430\u0449\u0435 \u0438\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Windows \u043a \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u0441\u0442\u0430\u0440\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c: CVE-2018-0802, CVE-2017-11882 (\u043e\u0431\u0435 RCE \u0432 Equation Editor), CVE-2017-0199 (Microsoft Office \u0438 WordPad).\n\n\u0412\u0441\u0435 \u0442\u0440\u0438 \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0438\u0441\u044c \u0441\u0430\u043c\u044b\u043c\u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u043c\u0438 \u043d\u0430 \u043f\u0440\u043e\u0442\u044f\u0436\u0435\u043d\u0438\u0438 2024 \u0433\u043e\u0434\u0430, \u0438 \u043c\u044b \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c, \u0447\u0442\u043e \u0442\u0430\u043a\u0430\u044f \u0442\u0435\u043d\u0434\u0435\u043d\u0446\u0438\u044f \u0441\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u0441\u044f \u0438 \u0432 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u043c.\n\n\u0417\u0430 \u043d\u0438\u043c\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0442 \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 WinRAR \u0438 \u0432 \u0441\u0430\u043c\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Windows: CVE-2023-38831 (WinRAR), CVE-2024-35250 (\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430\u00a0ks.sys) \u0438 CVE-2022-3699 (\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 Lenovo Diagnostics).\n\n\u0414\u043b\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Linux \u0431\u043e\u043b\u044c\u0448\u0435 \u0432\u0441\u0435\u0433\u043e \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043a \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c: CVE-2022-0847 (Dirty Pipe), CVE-2019-13272 (\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043d\u0430\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439) \u0438 CVE-2021-3156 (\u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438 \u0432 \u0443\u0442\u0438\u043b\u0438\u0442\u0435\u00a0sudo).\n\n\u0412 \u043f\u0435\u0440\u0432\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2025 \u0433\u043e\u0434\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043a\u0430\u043a \u0441\u0430\u043c\u043e\u0435 \u0441\u043b\u043e\u0436\u043d\u043e\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435, \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u043b\u0438\u0434\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0443 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u0440\u043e\u0441\u0442 \u0447\u0438\u0441\u043b\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043a \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430\u043c - \u044d\u0442\u0430 \u0442\u0435\u043d\u0434\u0435\u043d\u0446\u0438\u044f \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u043b\u0430\u0441\u044c \u0438 \u043d\u0430 \u043f\u0440\u043e\u0442\u044f\u0436\u0435\u043d\u0438\u0438 \u0432\u0441\u0435\u0433\u043e \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430.\n\n\u0422\u0430\u043a\u0436\u0435 \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u043b\u0430\u0441\u044c \u0434\u043e\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Microsoft Office.\n\n\u0418\u0437\u0443\u0447\u0438\u0432 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 APT, \u0432 \u041b\u041a \u0432\u044b\u0434\u0435\u043b\u0438\u043b\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0447\u0430\u0441\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432\u0448\u0438\u0435\u0441\u044f \u0432 \u043f\u0435\u0440\u0432\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2025 \u0433\u043e\u0434\u0430: CVE-2025-0282, CVE-2024-21887 \u0438 CVE-2025-0283 (Ivanti Connect Secure), CVE-2020-1472 (Netlogon Windows), CVE-2023-46805 (Ivanti ICS), CVE-2023-48788 (Fortinet) \u0438 \u0434\u0440.\n\n\u041e\u0442\u043c\u0435\u0442\u0438\u043c, \u0447\u0442\u043e \u0432 TOP 10 \u0432\u0435\u0440\u043d\u0443\u043b\u0430\u0441\u044c \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Zerologon, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0443 \u0434\u043e\u043c\u0435\u043d\u0430.\n\n\u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u0432 \u043f\u0435\u0440\u0432\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2025 \u0433\u043e\u0434\u0430 \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u044b \u041b\u041a \u0432\u044b\u0434\u0435\u043b\u0438\u043b\u0438: \n\n- ZDI-CAN-25373: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 lnk-\u0444\u0430\u0439\u043b\u043e\u0432 \u0432 \u041e\u0421 Windows;\n\n- CVE-2025-21333: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043a\u0443\u0447\u0435 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 vkrnlintvsp.sys;\n\n- CVE-2025-24071: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0442\u0435\u0447\u043a\u0438 NetNTLM-\u0445\u044d\u0448\u0430 \u0432 \u0438\u043d\u0434\u0435\u043a\u0441\u0430\u0442\u043e\u0440\u0435 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u0430\u044f \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0430 \u0438 \u0438\u043d\u0444\u043e\u0433\u0440\u0430\u0444\u0438\u043a\u0430 - \u0432 \u043e\u0442\u0447\u0435\u0442\u0435.", "url": "https://t.me/true_secator/7103"}, {"timestamp": "2025-06-09T15:00:10Z", "date_only": false, "value": "2025-06-09T15:00:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/g7PPXzsQx3EvDhE5SPzBeDUjd4Cr-dmtNyjjylDsMmWuZRM", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "c1c0503e-d11f-4c8b-8629-363b936f1e4e"}, {"timestamp": "2025-07-18T15:00:06Z", "date_only": false, "value": "2025-07-18T15:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Rg02G1EeA15TwWZ1pSDugSv9c8R7BSyf-8mnTk8tekiQrLs", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "8aac3476-888b-4440-b298-1c42a1c7d6f4"}, {"timestamp": "2025-07-19T10:02:46Z", "date_only": false, "value": "2025-07-19T10:02:46.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/44570", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "8f445f35-6c9f-4e43-a159-cd3869969300", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aExploit para explotar la vulnerabilidad CVE-2025-32463\nURL\uff1ahttps://github.com/Maalfer/Sudo-CVE-2021-3156\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/44570"}, {"timestamp": "2025-08-03T09:51:16.046Z", "date_only": false, "value": "2025-08-03T09:51:16.046451Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3lvifr6mpjk2c", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "2cfd9fa0-d41a-4811-b906-d54a8bb1bc41", "url": "https://bsky.app/profile/ytroncal.bsky.social/post/3lvifr6mpjk2c"}, {"timestamp": "2025-08-03T10:00:38Z", "date_only": false, "value": "2025-08-03T10:00:38.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/SpiderCodeCommunity1/369", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "c76a0064-cef9-4cdc-a81e-8854fac015d5", "content": "Title:\nCovert Espionage in Asia\u2019s Communication Networks\n\nHello and welcome, dear reader, to a new article \ud83d\ude01\n\nIn one of the most serious cyber espionage campaigns recently discovered, Palo Alto Networks \u2013 Unit 42 reported intense activity from an advanced threat group known as CL-STA-0969, which is believed to have targeted the critical telecommunications infrastructure of Southeast Asia over a span of ten months.\n\nIt is suspected that this operation was state-sponsored \ud83d\udd75\ud83c\udffb\n\n\n---\n\n\ud83e\udde0 So, what was their goal?\n\nTheir primary goal was to silently infiltrate and control telecom networks without detection \u2014 complete stealth.\n\nInvestigations revealed that the attacks occurred between February and November 2024, with the primary objective being Remote Code Execution (RCE) for data theft, without requiring user interaction.\n\n\n---\n\n\u26a0\ufe0f Wait \u2014 what is RCE?\n\nRCE (Remote Code Execution) is a cyberattack that allows an attacker to gain access to a system and execute commands remotely via a shell \u2014 one of the most dangerous forms of attack.\n\n\n---\n\n\ud83d\udd0d Example of the attack:\n\nThe attackers used a tool called Cordscan to gather intelligence about network devices.\nTo this day, no direct evidence has been found regarding their initial access point.\n\nThen, they performed brute-force attacks on SSH protocols, eventually gaining access and planting multiple malware payloads:\n\nAuthDoor: A malicious authentication module that steals credentials and allows persistent access using a \"magic password.\"\n\nCordscan: A network scanning and packet capturing tool.\n\nGTPDOOR: Specifically built for telecom networks near GPRS roaming exchanges.\n\nEchoBackdoor: A passive backdoor using ICMP packets for command execution and result delivery.\n\nSGSN Emulator (sgsnemu): Bypasses firewalls through network manipulation.\n\nChronosRAT: Malware capable of executing shellcode, capturing screenshots, keylogging, and more.\n\nNoDepDNS (MyDns): A Go-based backdoor that receives commands over DNS using UDP on port 53.\n\n\n\n---\n\n\ud83c\udfaf Targeted Threat Groups:\n\nThey also interacted with or mimicked operations of other known APTs:\n\nLightBasin (UNC1945): Targeting telecom since 2016.\n\nUNC2891: Financially motivated, known for ATM attacks.\n\nUNC3886: Exploited vulnerabilities in VMware systems.\n\n\n\n---\n\n\ud83e\uddf0 Tools Used:\n\nMicrosocks Proxy\n\nFRP (Fast Reverse Proxy)\n\nFScan\n\nResponder\n\nProxyChains\n\n\n\n---\n\n\ud83d\udd13 CVEs Exploited:\n\nCVE-2016-5195\n\nCVE-2021-4034\n\nCVE-2021-3156\n\n\n\n---\n\n\ud83d\udd75\ufe0f\u200d\u2642\ufe0f Stealth Techniques:\n\nDNS tunneling for traffic obfuscation\n\nUsing compromised telecom infrastructure as intermediate relays\n\nLog tampering and credential wiping\n\nDisabling SELinux\n\nRenaming malicious processes to appear legitimate\n\n\n\n---\n\n\ud83c\udf0d International Response \u2013 China & USA\n\nWhen asked on Fox News about alleged Chinese cyberattacks on U.S. telecom infrastructure and intellectual property theft, former U.S. President Donald Trump responded:\n\n> \u201cYou really think we don\u2019t do that too?\nWe do a lot of things like that... the world isn\u2019t simple.\u201d\n\n\n\nThis controversy coincided with statements from a Chinese tech team claiming China was the victim, after discovering a Zero-Day vulnerability in Microsoft Exchange.\n\nThey further alleged that over 50 devices belonging to a major Chinese military entity were compromised between July 2022 and July 2023.\n\nThe Chinese claimed the targets included universities, research institutes, and satellite internet companies.\n\nAccording to their reports, U.S. hackers exploited electronic file system vulnerabilities to compromise the targets between July and November 2024.\n\n\n---\n\nSource:\nThe Hacker News \u2013 CL-STA-0969 Campaign", "url": "https://t.me/SpiderCodeCommunity1/369"}, {"timestamp": "2025-08-03T10:22:58Z", "date_only": false, "value": "2025-08-03T10:22:58.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/SpiderCodeCommunity1/368", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "08745a42-ddcb-436e-8e29-34d736b91ae6", "content": "\u0633\u0645\u0639\u062a \u0639\u0646 \u062a\u062c\u0633\u0633 \u0627\u0644\u062e\u0641\u064a \u0641\u064a \u0627\u062a\u0635\u0627\u0644\u0627\u062a \u0642\u0627\u0631\u0647 \u0627\u0633\u064a\u0627 \u061f\u061f\n\n\n\u0627\u0647\u0644\u0627 \u0648\u0633\u0647\u0644\u0627 \u0628\u064a\u0643 \u064a\u0639\u0632\u064a\u0632\u064a \u0641\u064a \u0645\u0642\u0627\u0644 \u062c\u062f\u064a\u062f \ud83d\ude01 \n\n\u0639\u0646\u0648\u0627\u0646 \u0627\u0644\u0645\u0642\u0627\u0644 :\n\n( \u0627\u062e\u062a\u0631\u0627\u0642 \u0634\u0628\u0643\u0627\u062a \u0627\u062a\u0635\u0627\u0644 \u0644\u064a \u0642\u0627\u0631\u0647 \u0627\u0633\u064a\u0627 )\n\n\n\u0641\u064a \u0648\u0627\u062d\u062f\u0629 \u0645\u0646 \u0623\u062e\u0637\u0631 \u0627\u0644\u062d\u0645\u0644\u0627\u062a \u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a\u0629 \u0627\u0644\u062a\u064a \u062a\u0645 \u0627\u0644\u0643\u0634\u0641 \u0639\u0646\u0647\u0627 \u0645\u0624\u062e\u0631\u064b\u0627 \u0628\u0644\u063a\u062a \u0634\u0631\u0643\u0647 \n\n(  Palo Alto Networks - Unit 42  )\n\n\n\u0639\u0646 \u0646\u0634\u0627\u0637 \u0645\u0643\u062b\u0641 \u0644\u0645\u062c\u0645\u0648\u0639\u0629 \u062a\u0647\u062f\u064a\u062f \u0645\u062a\u0642\u062f\u0645\u0629 \u062a\u0639\u0631\u0641 \u0628\u0627\u0633\u0645 CL-STA-0969 \u0642\u062f\u0631\u062a \u0627\u0646\u0647 \u062a\u0633\u062a\u0647\u062f\u0641 \u062e\u0644\u0627\u0644 \u0639\u0634\u0631 \u0627\u0634\u0647\u0631 \u0643\u0627\u0645\u0644\u0647 \u0627\u0644\u0628\u0646\u064a\u0647 \u0627\u0644\u062a\u062d\u062a\u064a\u0647 \u0627\u0644\u062d\u064a\u0648\u064a\u0647 \u0644\u064a \u062c\u0646\u0648\u0628 \u0634\u0631\u0642 \u0627\u0633\u064a\u0627 \n\n\u0648 \u064a\u0639\u062a\u0642\u062f \u0627\u0646 \u0627\u0644\u062a\u062c\u0633\u0633 \u062f\u0627 \u0645\u0646 \u0639\u0646 \u0637\u0631\u064a\u0642 \u062f\u0648\u0644 \ud83d\udd75\ud83c\udffb\n\n\n\u0637\u064a\u0628 \u064a\u0627 \u0633\u0628\u0627\u064a\u062f\u0631 \u062f\u0648\u0644 \u0647\u062f\u0641\u0647\u0645 \u0627\u064a \u061f\n\n\n\u0647\u062f\u0641\u0647\u0645 \u0627\u062e\u062a\u0631\u0627\u0642 \u0634\u0628\u0643\u0627\u062a \u0627\u0644\u0627\u062a\u0635\u0627\u0644\u0627\u062a \u062f\u0648\u0646 \u0627\u064a \u0639\u0644\u0645 \u0644\u064a \u0627\u064a \u0634\u062e\u0635 ( \u0633\u0631\u064a\u0647 \u062a\u0627\u0645\u0647 )\n\n\n\n\u0627\u0644\u062a\u062d\u0642\u064a\u0642\u0627\u062a \u0627\u0638\u0647\u0631\u062a \u0627\u0646 \u0627\u0644\u0647\u062c\u0648\u0645 \u0643\u0627\u0646 \u0645\u0646 \u0641\u0628\u0631\u0627\u064a\u0631 \u0644\u062d\u062f \u0646\u0648\u0641\u0645\u0628\u0631 2024 \u0648 \u0643\u0627\u0646 \u0627\u0644\u0647\u062f\u0641 \u0644\u0627\u0633\u0627\u0633\u064a \u0645\u0646 \u062f\u0627 \u0639\u0645\u0644 rce \u0645\u0646 \u063a\u064a\u0631 \u0644\u0627\u062d\u062a\u064a\u0627\u062c\u0627\u062a  \u0644\u064a \u062a\u0641\u0627\u0639\u0644 \u0639\u0634\u0627\u0646 \u0633\u0631\u0642\u0647 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \n\n\n\u0644\u062d\u0638\u0647 \u0628\u0633 \u0627\u064a \u0647\u0648\u0627 rce \u061f\n\n\u0628\u062e\u062a\u0635\u0627\u0631 rce \u0647\u064a\u0627 \u0647\u062c\u0645\u0647 \u0633\u064a\u0628\u0631\u0627\u0646\u064a\u0647 \u0647\u062f\u0641\u0647 \u0627\u0646\u0647 \u062a\u0639\u0645\u0644 \u0627\u062e\u062a\u0631\u0627\u0642 \u0648 \u062a\u062d\u0643\u0645 \u0641\u064a shell \u0644\u064a \u0627\u0644\u0636\u062d\u064a\u0647 \u0648 \u062f\u064a \u0645\u0646 \u0627\u062e\u0637\u0631 \u0647\u062c\u0645\u0627\u062a \u0633\u064a\u0628\u0631\u0627\u0646\u064a\u0647\n\n\n\u0637\u064a\u0628 \u0627\u0634\u0631\u062d \u0644\u064a\u0646\u0627 \u0645\u062b\u0627\u0644 \u0639\u0646 \u0647\u062c\u0648\u0645 \u061f\n\n\n\u0647\u0645\u0627 \u0627\u0633\u062a\u062e\u062f\u0645\u0648 \u0627\u062f\u0647 \u0627\u0633\u0645\u0647 \n\n( Cordscan )\n\n\u0628\u062d\u064a\u062b \u0627\u0646\u0647\u0645 \u064a\u062c\u0645\u0648\u0639 \u0645\u0639\u0644\u0648\u0645\u0627\u062a \u0639\u0646 \u0644\u0627\u062c\u0647\u0627\u0632\u0647 \u0648 \u0644\u062d\u062f \u0648\u0642\u062a\u0646\u0627 \u0647\u0630\u0627 \u0645\u062d\u062f\u0634 \u0644\u0642\u064a \u062f\u0644\u064a\u0644\n\n\u0648 \u0628\u0639\u062f\u0647\u0627 \u0639\u0645\u0644\u0648 brute-force \u0639\u0644\u0649 \u0628\u0631\u0648\u062a\u0648\u0643\u0648\u0644 SSH\n\n\u0648 \u0628\u0639\u062f\u0647\u0627 \u062f\u062e\u0644\u0648 \u0641\u064a ssh \u0648 \u0632\u0631\u0639\u0648\u0627 malware \n\n\nAuthDoor : \u0648\u062d\u062f\u0629 \u0645\u0635\u0627\u062f\u0642\u0629 \u062e\u0628\u064a\u062b\u0629 \u062a\u0642\u0648\u0645 \u0628\u0633\u0631\u0642\u0629 \u0643\u0644\u0645\u0627\u062a \u0627\u0644\u0645\u0631\u0648\u0631 \u0648\u062a\u0648\u0641\u0631 \u0648\u0635\u0648\u0644 \u062f\u0627\u0626\u0645 \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \"\u0643\u0644\u0645\u0629 \u0645\u0631\u0648\u0631 \u0633\u062d\u0631\u064a\u0629\".\n\nCordscan : \u0623\u062f\u0627\u0629 \u0644\u0641\u062d\u0635 \u0627\u0644\u0634\u0628\u0643\u0629 \u0648\u0627\u0644\u062a\u0642\u0627\u0637 \u0627\u0644\u062d\u0632\u0645.\n\nGTPDOOR: \u0645\u0635\u0645\u0645\u0629 \u062e\u0635\u064a\u0635\u064b\u0627 \u0644\u0634\u0628\u0643\u0627\u062a \u0627\u0644\u0627\u062a\u0635\u0627\u0644\u0627\u062a \u0627\u0644\u0642\u0631\u064a\u0628\u0629 \u0645\u0646 \u062a\u0628\u0627\u062f\u0644 \u062a\u062c\u0648\u0627\u0644 GPRS.\n\nEchoBackdoor: \u0628\u0627\u0628 \u062e\u0644\u0641\u064a \u0633\u0644\u0628\u064a \u064a\u0633\u062a\u062e\u062f\u0645 \u062d\u0632\u0645 ICMP \u0644\u062a\u0644\u0642\u064a \u0648\u062a\u0646\u0641\u064a\u0630 \u0627\u0644\u0623\u0648\u0627\u0645\u0631 \u0648\u0625\u0631\u0633\u0627\u0644 \u0627\u0644\u0646\u062a\u0627\u0626\u062c.\n\nSGSN Emulator (sgsnemu) : \u0644\u062a\u062c\u0627\u0648\u0632 \u0627\u0644\u062c\u062f\u0631\u0627\u0646 \u0627\u0644\u0646\u0627\u0631\u064a\u0629 \u0639\u0628\u0631 \u0627\u0644\u062a\u0644\u0627\u0639\u0628 \u0628\u0627\u0644\u0634\u0628\u0643\u0629.\n\nChronosRAT : \u0628\u0631\u0645\u062c\u064a\u0629 \u062e\u0628\u064a\u062b\u0629 \u0642\u0627\u062f\u0631\u0629 \u0639\u0644\u0649 \u062a\u0646\u0641\u064a\u0630 \u0634\u0644 \u0643\u0648\u062f\u060c \u0623\u062e\u0630 \u0644\u0642\u0637\u0627\u062a \u0634\u0627\u0634\u0629\u060c \u062a\u0633\u062c\u064a\u0644 \u0636\u063a\u0637\u0627\u062a \u0627\u0644\u0645\u0641\u0627\u062a\u064a\u062d\u060c \u0625\u0644\u062e.\n\nNoDepDNS (MyDns) : \u0628\u0627\u0628 \u062e\u0644\u0641\u064a \u0628\u0644\u063a\u0629 Go \u064a\u062a\u0644\u0642\u0649 \u0627\u0644\u0623\u0648\u0627\u0645\u0631 \u0639\u0628\u0631 DNS \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0628\u0631\u0648\u062a UDP \u0639\u0644\u0649 \u0627\u0644\u0645\u0646\u0641\u0630 53.\n\n\n\u0648 \u0627\u062e\u062a\u0631\u0642\u0648 \u0643\u0630\u0627 \u0645\u062c\u0645\u0648\u0639\u0647 \u0632\u064a :\n\nLightBasin (UNC1945): \u062a\u0633\u062a\u0647\u062f\u0641 \u0642\u0637\u0627\u0639 \u0627\u0644\u0627\u062a\u0635\u0627\u0644\u0627\u062a \u0645\u0646\u0630 2016.\n\nUNC2891: \u0645\u062c\u0645\u0648\u0639\u0629 \u0645\u0627\u0644\u064a\u0629 \u0647\u0627\u062c\u0645\u062a \u0623\u062c\u0647\u0632\u0629 \u0627\u0644\u0635\u0631\u0627\u0641 \u0627\u0644\u0622\u0644\u064a.\n\nUNC3886: \u0645\u062c\u0645\u0648\u0639\u0629 \u0627\u0633\u062a\u063a\u0644\u062a \u062b\u063a\u0631\u0627\u062a \u0641\u064a VMware.\n\n\nMicrosocks Proxy\n\nFRP (Fast Reverse Proxy)\n\nFScan\n\nResponder\n\nProxyChains\n\n\u0648 \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0644\u064a cves \u0632\u064a :\n\nCVE-2016-5195\n\nCVE-2021-4034\n\nCVE-2021-3156\n\n\u0648 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u062a\u0643\u0646\u064a\u0643\u0627\u062a \u0644\u064a \u062a\u062e\u0641\u064a \u0632\u064a :\n\n\u0627\u0644\u062a\u0644\u0627\u0639\u0628 \u0628\u062d\u0631\u0643\u0629 \u0627\u0644\u0645\u0631\u0648\u0631 \u0639\u0628\u0631 DNS tunneling\n\n\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0645\u0634\u063a\u0644\u064a \u0627\u0644\u0627\u062a\u0635\u0627\u0644\u0627\u062a \u0627\u0644\u0645\u062e\u062a\u0631\u0642\u064a\u0646 \u0643\u0646\u0642\u0627\u0637 \u0648\u0633\u064a\u0637\u0629\n\n\u0645\u0633\u062d \u0633\u062c\u0644\u0627\u062a \u0627\u0644\u0645\u0635\u0627\u062f\u0642\u0629\n\n\u062a\u0639\u0637\u064a\u0644 SELinux\n\n\u062a\u063a\u064a\u064a\u0631 \u0623\u0633\u0645\u0627\u0621 \u0627\u0644\u0639\u0645\u0644\u064a\u0627\u062a \u0644\u062a\u0628\u062f\u0648 \u0634\u0631\u0639\u064a\u0629 \u062f\u0627\u062e\u0644 \u0627\u0644\u0646\u0638\u0627\u0645\n\n\n\u0648 \u0643\u0627\u0646 \u0641\u064a \u0631\u062f \u0641\u0639\u0644 \u0627\u0644\u062f\u0648\u0644 \u0632\u064a \u0627\u0644\u0635\u064a\u0646 \u0648 \u0627\u0645\u0631\u064a\u0643\u0627 \n\n\n\u062d\u064a\u0646 \u0633\u0627\u0626\u0644 \u0627\u0644\u0631\u0626\u064a\u0633 \u0627\u0644\u0623\u0645\u0631\u064a\u0643\u064a \u062f\u0648\u0646\u0627\u0644\u062f \u062a\u0631\u0627\u0645\u0628 \u0639\u0644\u0649 \u0642\u0646\u0627\u0629 \u0641\u0648\u0643\u0633 \u0646\u064a\u0648\u0632 \u0639\u0646 \u0647\u062c\u0645\u0627\u062a \u0635\u064a\u0646\u064a\u0629 \u0639\u0644\u0649 \u0646\u0638\u0645 \u0627\u0644\u0627\u062a\u0635\u0627\u0644\u0627\u062a \u0627\u0644\u0623\u0645\u0631\u064a\u0643\u064a\u0629 \u0648\u0633\u0631\u0642\u0629 \u0627\u0644\u0645\u0644\u0643\u064a\u0629 \u0627\u0644\u0641\u0643\u0631\u064a\u0629 \u0642\u0627\u0644 :\n\n\u0647\u0648 \u0623\u0646\u062a \u0645\u062a\u062e\u064a\u0644 \u0627\u0646\u0646\u0627 \u0645\u0634 \u0628\u0646\u0639\u0645\u0644 \u0643\u062f\u0647 \u061f\u061f\u061f\n\n \u0627\u062d\u0646\u0627 \u0628\u0646\u0639\u0645\u0644 \u062d\u0627\u062c\u0627\u062a \u0643\u062a\u064a\u0631 \u0643\u062f\u0647 \u0627\u0644\u062f\u0646\u064a\u0627 \u0645\u0627\u0634\u064a\u0629 . \u0627\u0644\u0639\u0627\u0644\u0645 \u062f\u0647 \" \u0645\u0634 \u0633\u0647\u0644 \"\n\n\u0648\u0643\u0627\u0646 \u0627\u0644\u062d\u062f\u062b \u062f\u0627 \u062c\u0647 \u0645\u0639 \u0648\u0642\u062a \u0627\u0644\u064a \u0627\u0644\u0641\u0631\u064a\u0642 \u0627\u0644\u062a\u0642\u0646\u064a \u0627\u0644\u0635\u064a\u0646\u064a \u062d\u064a\u062b \u0642\u0627\u0644\u0648 \u0627\u0646 \u0627\u0644\u0635\u064a\u0646 \u0647\u064a\u0627 \u0627\u0644\u0633\u0628\u0628 \u0644\u0646\u0647\u0645 \u0642\u062f\u0631\u0648 \u064a\u0644\u0642\u0648 zero day  \u0641\u064a \n\n( Microsoft Exchange )\n\n\n\u0648 \u0631\u0643\u0632 \u0641\u064a \u062f\u064a\n\n\u0644\u0627\u062e\u062a\u0631\u0627\u0642 \u0623\u0643\u062b\u0631 \u0645\u0646 50 \u062c\u0647\u0627\u0632 \u0639\u0627\u0626\u062f\u064a\u0646 \u0644\u0643\u064a\u0627\u0646 \u0639\u0633\u0643\u0631\u064a \u0635\u064a\u0646\u064a \u0643\u0628\u064a\u0631 \u0628\u064a\u0646 \u064a\u0648\u0644\u064a\u0648 2022 \u0648\u064a\u0648\u0644\u064a\u0648 2023 \n\n\u0648\u0632\u0639\u0645\u062a \u0627\u0644\u0635\u064a\u0646 \u0623\u0646 \u0627\u0644\u0623\u0647\u062f\u0627\u0641 \u0634\u0645\u0644\u062a \u062c\u0627\u0645\u0639\u0627\u062a \u0648\u0645\u0624\u0633\u0633\u0627\u062a \u0628\u062d\u062b\u064a\u0629 \u0648\u0634\u0631\u0643\u0627\u062a \u062a\u0639\u0645\u0644 \u0641\u064a \u0645\u062c\u0627\u0644\u0627\u062a \u0627\u0644\u0627\u062a\u0635\u0627\u0644\u0627\u062a \u0648\u0627\u0644\u0625\u0646\u062a\u0631\u0646\u062a \u0627\u0644\u0641\u0636\u0627\u0626\u064a \n\n\u0648\u0642\u062f \u0627\u0633\u062a\u062e\u062f\u0645 \u0627\u0644\u0645\u062e\u062a\u0631\u0642\u0648\u0646 \u0627\u0644\u0623\u0645\u064a\u0631\u0643\u064a\u0648\u0646  \u062d\u0633\u0628 \u0632\u0639\u0645 \u0627\u0644\u0635\u064a\u0646  \u062b\u063a\u0631\u0627\u062a \u0641\u064a \u0623\u0646\u0638\u0645\u0629 \u0627\u0644\u0645\u0644\u0641\u0627\u062a \u0627\u0644\u0625\u0644\u0643\u062a\u0631\u0648\u0646\u064a\u0629 \u0644\u0627\u062e\u062a\u0631\u0627\u0642 \u0627\u0644\u0623\u0646\u0638\u0645\u0629 \u0628\u064a\u0646 \u064a\u0648\u0644\u064a\u0648 \u0648\u0646\u0648\u0641\u0645\u0628\u0631 2024\n\n\n\n\u0627\u0643\u062a\u0628\u0648 \u0644\u064a\u0627 \u0631\u0627\u064a\u0643\u0645 \u0641\u064a \u0627\u0644\u0645\u0642\u0627\u0644 \u062d\u0627\u0648\u0644\u062a \u0627\u062e\u0644\u064a \u0644\u063a\u0647 \u0627\u0644\u0639\u0631\u0628\u064a\u0647 \u0627\u0644\u0641\u0635\u062d\u0647 \u0641\u064a \u0648 \u0634\u0643\u0631\u0627 \u0639\u0644\u064a \u0642\u0631\u0627\u0626\u0647 \u0627\u0644\u0645\u0642\u0627\u0644 \ud83e\udd0d\u2728\n\n\n\u0645\u0635\u062f\u0631 : \n\n\nhttps://thehackernews.com/2025/08/cl-sta-0969-installs-covert-malware-in.html", "url": "https://t.me/SpiderCodeCommunity1/368"}, {"timestamp": "2025-08-25T21:00:04Z", "date_only": false, "value": "2025-08-25T21:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/RC-neZPZuuAvt0t2tEgin3P3978nN6aW7gbankyPkc-L53I", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "aaa1dda6-4f04-43b6-9cd4-588157835a62"}, {"timestamp": "2025-08-31T03:01:02Z", "date_only": false, "value": "2025-08-31T03:01:02.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "3e30e861-1a7a-41e4-878f-05a471a51079"}, {"timestamp": "2025-09-03T17:06:15.292Z", "date_only": false, "value": "2025-09-03T17:06:15.292034Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/michaelxg.bsky.social/post/3lxx4jnn6dc2a", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "ca8d472a-5344-45fa-ac31-1c5439a4914c", "url": "https://bsky.app/profile/michaelxg.bsky.social/post/3lxx4jnn6dc2a"}, {"timestamp": "2025-09-03T17:07:38.562Z", "date_only": false, "value": "2025-09-03T17:07:38.562734Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/michaelxg.bsky.social/post/3lxx4m62g3c2a", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "d03e5ee9-0aef-426b-afe1-98f6d369eb4e", "url": "https://bsky.app/profile/michaelxg.bsky.social/post/3lxx4m62g3c2a"}, {"timestamp": "2025-09-08T16:46:42Z", "date_only": false, "value": "2025-09-08T16:46:42Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2021-3156", "record": "UBUNTU-CVE-2021-3156", "field": "modified"}, {"timestamp": "2025-10-01T22:00:00Z", "date_only": false, "value": "2025-10-01T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0066", "record": "WID-SEC-W-2023-0066", "field": "document.tracking.revision_history.23.date"}, {"timestamp": "2025-10-01T22:00:00Z", "date_only": false, "value": "2025-10-01T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0066", "record": "WID-SEC-W-2023-0066", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-10-02T08:18:18.920Z", "date_only": false, "value": "2025-10-02T08:18:18.920+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0066", "record": "WID-SEC-W-2023-0066", "field": "document.tracking.generator.date"}, {"timestamp": "2025-10-02T13:56:22Z", "date_only": false, "value": "2025-10-02T13:56:22.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/Darkcrai86/2f210857459fb0d37570b02c1ed6553a", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "fdc34721-62c2-41e3-98d4-8f32f3345b6e", "url": "https://gist.github.com/Darkcrai86/2f210857459fb0d37570b02c1ed6553a"}, {"timestamp": "2025-10-17T21:26:19.003Z", "date_only": false, "value": "2025-10-17T21:26:19.003974Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/BugBountyShorts/statuses/115391619199780913", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "94e60052-7dd3-4bf5-91a4-ebb34a2221d8", "url": "https://infosec.exchange/users/BugBountyShorts/statuses/115391619199780913"}, {"timestamp": "2025-10-21T23:35:29.600Z", "date_only": false, "value": "2025-10-21T23:35:29.600Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2021-3156", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:35:29.600Z", "date_only": false, "value": "2025-10-21T23:35:29.600Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2021-3156", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:32:02Z", "date_only": false, "value": "2025-10-22T00:32:02Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-W5VH-2923-GP5C", "record": "GHSA-W5VH-2923-GP5C", "field": "modified"}, {"timestamp": "2025-11-10T14:41:45.053Z", "date_only": false, "value": "2025-11-10T14:41:45.053000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202101-1926", "record": "VAR-202101-1926", "field": "sources_update_date.data.2.date"}, {"timestamp": "2025-11-15T16:47:57Z", "date_only": false, "value": "2025-11-15T16:47:57.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/jeancristiancustodio/172110471375258e0cc858beb00f07c6", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "12a5bd25-34ec-4667-8dc2-2722df9067be", "url": "https://gist.github.com/jeancristiancustodio/172110471375258e0cc858beb00f07c6"}, {"timestamp": "2026-01-02T09:00:05Z", "date_only": false, "value": "2026-01-02T09:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/E2uaRG3ibx0u7X-3lCLRMt1JB-4VLbsHUeFUOFQXBK1KcJ8", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "7ecb07ff-4101-461f-86f1-76a4a1291f3e"}, {"timestamp": "2026-01-29T08:37:53.261Z", "date_only": false, "value": "2026-01-29T08:37:53.261095Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/armgxxx.bsky.social/post/3mdkf4vlkee2r", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "28f60a35-659d-4ea5-ad6c-cbbcfe2b93c9", "url": "https://bsky.app/profile/armgxxx.bsky.social/post/3mdkf4vlkee2r"}, {"timestamp": "2026-02-02T12:27:53.330Z", "date_only": false, "value": "2026-02-02T12:27:53.330731Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b6557656-10d6-4e76-9711-368565a4bd59", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "e07aa707-2e14-43d0-8d04-edaed54a84b1", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b6557656-10d6-4e76-9711-368565a4bd59"}, {"timestamp": "2026-02-02T12:27:53.330Z", "date_only": false, "value": "2026-02-02T12:27:53.330731Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b6557656-10d6-4e76-9711-368565a4bd59", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "bd0b81e8-49a1-49ae-bad6-1f5efba101e3", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b6557656-10d6-4e76-9711-368565a4bd59"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2021-3156", "field": "timestamps.recorded_at", "uuid": "bc797d5e-59c4-43df-b0b7-f59ff820eb2e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-02T14:25:00Z", "date_only": false, "value": "2026-02-02T14:25:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_trumpfsecokg \u00b7 VDE-2021-011", "record": "VDE-2021-011", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-02-02T14:25:00Z", "date_only": false, "value": "2026-02-02T14:25:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_trumpfsecokg \u00b7 VDE-2021-011", "record": "VDE-2021-011", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-02-17T13:27:41Z", "date_only": false, "value": "2026-02-17T13:27:41.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/garagon/a8d92972c465aaeac354cd11668e409a", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "f3f4d4a1-4e68-4071-9f2d-727278044fae", "url": "https://gist.github.com/garagon/a8d92972c465aaeac354cd11668e409a"}, {"timestamp": "2026-02-22T06:06:54.371Z", "date_only": false, "value": "2026-02-22T06:06:54.371578Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mfghuwc3tqm2", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "96c09990-e309-413c-982b-f6ecbdc10092", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mfghuwc3tqm2"}, {"timestamp": "2026-03-09T22:27:02.630Z", "date_only": false, "value": "2026-03-09T22:27:02.630000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202101-1926", "record": "VAR-202101-1926", "field": "last_update_date"}, {"timestamp": "2026-03-29T16:59:32.732Z", "date_only": false, "value": "2026-03-29T16:59:32.732599Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/flarestart.bsky.social/post/3mi7moakz242f", "record": "cve-2021-3156", "field": "creation_timestamp", "uuid": "2f1f4f05-cdbc-46b1-909e-c21cd1a8d223", "url": "https://bsky.app/profile/flarestart.bsky.social/post/3mi7moakz242f"}, {"timestamp": "2026-04-30T15:27:08Z", "date_only": false, "value": "2026-04-30T15:27:08.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/alexpolyarny/91b373b7118a0abcbd4bfeac4a2d9236", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "314980f8-bc4e-45b0-aa30-d2bcb7a977e2", "url": "https://gist.github.com/alexpolyarny/91b373b7118a0abcbd4bfeac4a2d9236"}, {"timestamp": "2026-04-30T15:29:18Z", "date_only": false, "value": "2026-04-30T15:29:18.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/alexpolyarny/57f43c066e9cb8be3a2418763cab2f75", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "108d309f-b0a1-4f87-90b2-f98273b05837", "url": "https://gist.github.com/alexpolyarny/57f43c066e9cb8be3a2418763cab2f75"}, {"timestamp": "2026-05-28T03:00:06Z", "date_only": false, "value": "2026-05-28T03:00:06.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/bHi0C_1X3UQY4vSzaBxEvNEoHfcfml9twdWPYQW312YrRTo", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "eff964ba-7bf4-4f61-b570-7cf0ae2e4f9a"}, {"timestamp": "2026-06-01T06:23:40Z", "date_only": false, "value": "2026-06-01T06:23:40.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/mimti-94/4aa8b83c3a590b685b9e61aefb2762ed", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "9b197a2b-413e-4b8f-b8c8-4100efca9764", "url": "https://gist.github.com/mimti-94/4aa8b83c3a590b685b9e61aefb2762ed"}, {"timestamp": "2026-06-17T04:04:45.830Z", "date_only": false, "value": "2026-06-17T04:04:45.830", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-3156", "record": "FKIE_CVE-2021-3156", "field": "lastModified"}, {"timestamp": "2026-06-19T12:47:19.749Z", "date_only": false, "value": "2026-06-19T12:47:19.749381Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e62997f4-c2af-4974-8b85-09e34e40fbfa", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "2ea56d4c-697c-4500-9a79-226c255d9d23", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e62997f4-c2af-4974-8b85-09e34e40fbfa"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2021-3156", "field": "timestamps.recorded_at", "uuid": "5c5afafb-dd30-4fc9-9501-b210ede34ad7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:13:47.438Z", "date_only": false, "value": "2026-06-23T11:13:47.438907Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/5c5afafb-dd30-4fc9-9501-b210ede34ad7", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "5f32935c-55f6-4c50-9cbf-ad95d86c86e0", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/5c5afafb-dd30-4fc9-9501-b210ede34ad7"}, {"timestamp": "2026-06-23T14:05:17.555Z", "date_only": false, "value": "2026-06-23T14:05:17.555360Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e3c9f41a-28de-4ea7-9467-493d08073d83", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "6fe1178d-0218-43d4-9d51-36aeb4ba2827", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e3c9f41a-28de-4ea7-9467-493d08073d83"}, {"timestamp": "2026-06-28T12:18:16Z", "date_only": false, "value": "2026-06-28T12:18:16+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2021:0224", "record": "RHSA-2021:0224", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-06-28T12:18:16Z", "date_only": false, "value": "2026-06-28T12:18:16+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2021:0224", "record": "RHSA-2021:0224", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-28T12:18:16Z", "date_only": false, "value": "2026-06-28T12:18:16+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2021:0224", "record": "RHSA-2021:0224", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-06-28T12:18:17Z", "date_only": false, "value": "2026-06-28T12:18:17+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2021:0225", "record": "RHSA-2021:0225", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-06-28T12:18:17Z", "date_only": false, "value": "2026-06-28T12:18:17+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2021:0226", "record": "RHSA-2021:0226", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-06-28T12:18:17Z", "date_only": false, "value": "2026-06-28T12:18:17+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2021:0225", "record": "RHSA-2021:0225", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-28T12:18:17Z", "date_only": false, "value": "2026-06-28T12:18:17+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2021:0226", "record": "RHSA-2021:0226", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-28T12:18:17Z", "date_only": false, "value": "2026-06-28T12:18:17+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2021:0225", "record": "RHSA-2021:0225", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-06-28T12:18:17Z", "date_only": false, "value": "2026-06-28T12:18:17+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2021:0226", "record": "RHSA-2021:0226", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-06-28T12:18:19Z", "date_only": false, "value": "2026-06-28T12:18:19+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2021:0227", "record": "RHSA-2021:0227", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-06-28T12:18:19Z", "date_only": false, "value": "2026-06-28T12:18:19+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2021:0227", "record": "RHSA-2021:0227", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-28T12:18:19Z", "date_only": false, "value": "2026-06-28T12:18:19+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2021:0227", "record": "RHSA-2021:0227", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-06-28T12:21:49Z", "date_only": false, "value": "2026-06-28T12:21:49+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2021:0219", "record": "RHSA-2021:0219", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-06-28T12:21:49Z", "date_only": false, "value": "2026-06-28T12:21:49+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2021:0219", "record": "RHSA-2021:0219", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-28T12:21:49Z", "date_only": false, "value": "2026-06-28T12:21:49+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2021:0219", "record": "RHSA-2021:0219", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-06-28T12:22:10Z", "date_only": false, "value": "2026-06-28T12:22:10+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2021:0220", "record": "RHSA-2021:0220", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-06-28T12:22:10Z", "date_only": false, "value": "2026-06-28T12:22:10+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2021:0220", "record": "RHSA-2021:0220", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-28T12:22:10Z", "date_only": false, "value": "2026-06-28T12:22:10+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2021:0220", "record": "RHSA-2021:0220", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-06-28T12:26:00Z", "date_only": false, "value": "2026-06-28T12:26:00+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2021:0222", "record": "RHSA-2021:0222", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-06-28T12:26:00Z", "date_only": false, "value": "2026-06-28T12:26:00+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2021:0222", "record": "RHSA-2021:0222", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-28T12:26:00Z", "date_only": false, "value": "2026-06-28T12:26:00+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2021:0222", "record": "RHSA-2021:0222", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-06-28T12:26:08Z", "date_only": false, "value": "2026-06-28T12:26:08+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2021:0223", "record": "RHSA-2021:0223", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-06-28T12:26:08Z", "date_only": false, "value": "2026-06-28T12:26:08+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2021:0223", "record": "RHSA-2021:0223", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-28T12:26:08Z", "date_only": false, "value": "2026-06-28T12:26:08+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2021:0223", "record": "RHSA-2021:0223", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-06-28T12:34:04Z", "date_only": false, "value": "2026-06-28T12:34:04+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2021:0395", "record": "RHSA-2021:0395", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-06-28T12:34:04Z", "date_only": false, "value": "2026-06-28T12:34:04+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2021:0401", "record": "RHSA-2021:0401", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-06-28T12:34:04Z", "date_only": false, "value": "2026-06-28T12:34:04+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2021:0395", "record": "RHSA-2021:0395", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-28T12:34:04Z", "date_only": false, "value": "2026-06-28T12:34:04+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2021:0401", "record": "RHSA-2021:0401", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-28T12:34:04Z", "date_only": false, "value": "2026-06-28T12:34:04+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2021:0395", "record": "RHSA-2021:0395", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-06-28T12:34:04Z", "date_only": false, "value": "2026-06-28T12:34:04+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2021:0401", "record": "RHSA-2021:0401", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-07-01T20:11:33.756Z", "date_only": false, "value": "2026-07-01T20:11:33.756582Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/stillbigjosh/5a58fa426ea1b76221a6ce2ac9a909f6", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "99717bd8-e072-41b8-9ce9-afdd09196077", "url": "https://gist.github.com/stillbigjosh/5a58fa426ea1b76221a6ce2ac9a909f6"}, {"timestamp": "2026-07-17T11:00:08.971Z", "date_only": false, "value": "2026-07-17T11:00:08.971011Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberwarehouse/115", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "ce83f4ff-2eba-4251-bf00-6fdc3a633102", "url": "https://t.me/cyberwarehouse/115"}, {"timestamp": "2026-07-18T00:00:27.493Z", "date_only": false, "value": "2026-07-18T00:00:27.493833Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cyberwarehouse/115", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "5a06a4b1-8dbd-4d1c-9d04-f73ba47b3d5e", "url": "https://t.me/cyberwarehouse/115"}, {"timestamp": "2026-07-24T18:15:04.118Z", "date_only": false, "value": "2026-07-24T18:15:04.118514Z", "kind": "sighting", "label": "Seen", "source": "MISP/efee3167-4868-4f50-b35b-565a4abec419", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "9298d022-e81b-4028-bf91-bc8f900e2b9b"}, {"timestamp": "2026-07-25T00:15:05.607Z", "date_only": false, "value": "2026-07-25T00:15:05.607579Z", "kind": "sighting", "label": "Seen", "source": "MISP/efee3167-4868-4f50-b35b-565a4abec419", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "2a3269d8-3d76-4b0c-83ef-fd8298c52fdb"}, {"timestamp": "2026-07-29T12:00:31.503Z", "date_only": false, "value": "2026-07-29T12:00:31.503531Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/12791", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "1f4b5c21-efb4-4188-9120-52883e219f6b", "url": "https://t.me/CVEhub/12791"}, {"timestamp": "2026-07-29T12:01:51.001Z", "date_only": false, "value": "2026-07-29T12:01:51.001571Z", "kind": "sighting", "label": "Seen", "source": "Telegram/mO9xKynVlZN7KDSmb86n96iCrkfo0nm3LMr05prwju8cgA", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "fe100b42-b0e8-490c-bd11-cf8bedde1066"}, {"timestamp": "2026-07-29T12:02:55.606Z", "date_only": false, "value": "2026-07-29T12:02:55.606543Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/1358", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "aa04a845-09ee-40a3-8a84-a0d0f0e1b254", "url": "https://t.me/reverseame/1358"}, {"timestamp": "2026-07-29T12:02:59.406Z", "date_only": false, "value": "2026-07-29T12:02:59.406643Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/1010", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "6e718bb4-ca6b-4845-a293-863933cfcbce", "url": "https://t.me/reverseame/1010"}, {"timestamp": "2026-07-29T12:02:59.895Z", "date_only": false, "value": "2026-07-29T12:02:59.895801Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/913", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "0f727e19-e8ae-4724-a743-6d583f9d5048", "url": "https://t.me/reverseame/913"}, {"timestamp": "2026-07-29T12:03:00.133Z", "date_only": false, "value": "2026-07-29T12:03:00.133690Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/875", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "4b00789c-b6a9-46d6-ad86-ca95d38330ea", "url": "https://t.me/reverseame/875"}, {"timestamp": "2026-07-29T12:03:00.225Z", "date_only": false, "value": "2026-07-29T12:03:00.225196Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/891", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "f808bf57-3ee8-49cd-ab50-14fc4b364131", "url": "https://t.me/reverseame/891"}, {"timestamp": "2026-07-29T12:03:00.458Z", "date_only": false, "value": "2026-07-29T12:03:00.458659Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/850", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "9e1d3abb-f61c-4b42-a017-b50edd3bd2c2", "url": "https://t.me/reverseame/850"}, {"timestamp": "2026-07-29T12:03:23.221Z", "date_only": false, "value": "2026-07-29T12:03:23.221980Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/linux_news/679", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "db4751d8-4111-4c20-9cc8-0aefe08da3ce", "url": "https://t.me/linux_news/679"}, {"timestamp": "2026-07-30T00:00:57.077Z", "date_only": false, "value": "2026-07-30T00:00:57.077949Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/12791", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "b96caba4-9e85-429b-89b8-c41b8b854f5c", "url": "https://t.me/CVEhub/12791"}, {"timestamp": "2026-07-30T00:02:02.878Z", "date_only": false, "value": "2026-07-30T00:02:02.878305Z", "kind": "sighting", "label": "Seen", "source": "Telegram/mO9xKynVlZN7KDSmb86n96iCrkfo0nm3LMr05prwju8cgA", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "1f321517-e287-43a1-9f27-78eeda835c43"}, {"timestamp": "2026-07-30T00:02:45.784Z", "date_only": false, "value": "2026-07-30T00:02:45.784269Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/1358", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "bd13ea30-8951-403e-baf0-6928bc030721", "url": "https://t.me/reverseame/1358"}, {"timestamp": "2026-07-30T00:02:48.935Z", "date_only": false, "value": "2026-07-30T00:02:48.935599Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/1010", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "8803f19b-934d-44bd-b5dc-131c0b0a27ee", "url": "https://t.me/reverseame/1010"}, {"timestamp": "2026-07-30T00:02:49.382Z", "date_only": false, "value": "2026-07-30T00:02:49.382121Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/913", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "1728076f-6a3f-45c3-ac37-376f3f721943", "url": "https://t.me/reverseame/913"}, {"timestamp": "2026-07-30T00:02:49.628Z", "date_only": false, "value": "2026-07-30T00:02:49.628417Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/875", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "eb8180a0-2ba6-4d5c-a0f1-7a9fbffab526", "url": "https://t.me/reverseame/875"}, {"timestamp": "2026-07-30T00:02:49.721Z", "date_only": false, "value": "2026-07-30T00:02:49.721368Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/891", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "58ebdfbd-421a-4ff7-b6c9-0e73092dd64a", "url": "https://t.me/reverseame/891"}, {"timestamp": "2026-07-30T00:02:49.940Z", "date_only": false, "value": "2026-07-30T00:02:49.940579Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/850", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "4cd8abed-1978-46ac-9548-e0b547218a84", "url": "https://t.me/reverseame/850"}, {"timestamp": "2026-07-30T00:03:08.795Z", "date_only": false, "value": "2026-07-30T00:03:08.795474Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/linux_news/679", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "577755b6-135c-46d0-ab67-bafbbd06b370", "url": "https://t.me/linux_news/679"}, {"timestamp": "2026-07-31T00:00:08.636Z", "date_only": false, "value": "2026-07-31T00:00:08.636369Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/12791", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "d42a6057-62ae-4605-9227-0d69d681e7c8", "url": "https://t.me/CVEhub/12791"}, {"timestamp": "2026-08-01T15:00:04.345Z", "date_only": false, "value": "2026-08-01T15:00:04.345419Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/mO9xKynVlZN7KDSmb86n96iCrkfo0nm3LMr05prwju8cgA", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "479ca1c0-de6f-48a6-8b98-5e32727e52ef"}, {"timestamp": "2026-08-02T00:00:42.982Z", "date_only": false, "value": "2026-08-02T00:00:42.982444Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/mO9xKynVlZN7KDSmb86n96iCrkfo0nm3LMr05prwju8cgA", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "d900c318-9d76-4ca8-bc61-1b12bc86b30c"}, {"timestamp": "2026-08-02T14:38:42.012Z", "date_only": false, "value": "2026-08-02T14:38:42.012561Z", "kind": "sighting", "label": "Seen", "source": "Telegram/uLtVpZ7s39TpyGp9FGkaxk1tGNueWTilkbj0oFy8Svw0Gw", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "f77b53f1-21b1-4f82-8254-21c8a41d08b0"}, {"timestamp": "2026-08-03T02:05:52.652Z", "date_only": false, "value": "2026-08-03T02:05:52.652327Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/uLtVpZ7s39TpyGp9FGkaxk1tGNueWTilkbj0oFy8Svw0Gw", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "1a6e7b7c-5054-45a4-b66f-90d1270e053b"}, {"timestamp": "2026-08-03T08:00:04.019Z", "date_only": false, "value": "2026-08-03T08:00:04.019124Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/1358", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "d24b1541-56f2-4068-a777-c77af4a48c42", "url": "https://t.me/reverseame/1358"}, {"timestamp": "2026-08-03T12:12:26.982Z", "date_only": false, "value": "2026-08-03T12:12:26.982851Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/1010", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "6b8968d6-43cd-4a04-9813-ec971498972a", "url": "https://t.me/reverseame/1010"}, {"timestamp": "2026-08-03T13:21:45.172Z", "date_only": false, "value": "2026-08-03T13:21:45.172343Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/850", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "1398f002-e21d-4d26-b2bf-ca9a51459b45", "url": "https://t.me/reverseame/850"}, {"timestamp": "2026-08-03T13:21:45.552Z", "date_only": false, "value": "2026-08-03T13:21:45.552016Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/891", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "ef0f84f0-993c-4868-9152-32d858d79387", "url": "https://t.me/reverseame/891"}, {"timestamp": "2026-08-03T13:23:47.778Z", "date_only": false, "value": "2026-08-03T13:23:47.778986Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/875", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "6dbc2827-3eeb-4967-a199-477870bb2f16", "url": "https://t.me/reverseame/875"}, {"timestamp": "2026-08-03T13:23:48.316Z", "date_only": false, "value": "2026-08-03T13:23:48.316416Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/913", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "15e1bc87-2367-4e04-9084-835ff6439ce0", "url": "https://t.me/reverseame/913"}, {"timestamp": "2026-08-04T00:00:39.216Z", "date_only": false, "value": "2026-08-04T00:00:39.216416Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/850", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "3dbeaee0-032c-4a3c-9f58-22ecd1dc82ff", "url": "https://t.me/reverseame/850"}, {"timestamp": "2026-08-04T00:00:39.474Z", "date_only": false, "value": "2026-08-04T00:00:39.474250Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/891", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "ab55e716-81b9-4caa-9fde-4d42a093b6f7", "url": "https://t.me/reverseame/891"}, {"timestamp": "2026-08-04T00:00:39.587Z", "date_only": false, "value": "2026-08-04T00:00:39.587287Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/875", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "941fa570-29d8-41d8-a48b-0de717577793", "url": "https://t.me/reverseame/875"}, {"timestamp": "2026-08-04T00:00:39.912Z", "date_only": false, "value": "2026-08-04T00:00:39.912672Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/913", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "1ead7826-3291-4df5-9a70-cdeabacbcc96", "url": "https://t.me/reverseame/913"}, {"timestamp": "2026-08-04T00:00:40.425Z", "date_only": false, "value": "2026-08-04T00:00:40.425011Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/1010", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "39104bfe-2b57-4abb-9ed0-7a7ebaf2c559", "url": "https://t.me/reverseame/1010"}, {"timestamp": "2026-08-04T00:00:45.735Z", "date_only": false, "value": "2026-08-04T00:00:45.735604Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/1358", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "ab443e23-2131-488c-8ccb-925491100588", "url": "https://t.me/reverseame/1358"}, {"timestamp": "2026-08-04T06:00:05.026Z", "date_only": false, "value": "2026-08-04T06:00:05.026233Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/linux_news/679", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "e50c16b2-5354-402b-b3e6-15cab07441c8", "url": "https://t.me/linux_news/679"}, {"timestamp": "2026-08-04T21:54:37.446Z", "date_only": false, "value": "2026-08-04T21:54:37.446359Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/salexunic/57897e60ba5e71bbc99dd59e7e70e04f", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "be733a84-e278-4099-83f7-c26c8920fe9b", "url": "https://gist.github.com/salexunic/57897e60ba5e71bbc99dd59e7e70e04f"}, {"timestamp": "2026-08-04T22:27:44.068Z", "date_only": false, "value": "2026-08-04T22:27:44.068530Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/Adocentyn/3f90e3dce4420f247f226ef0e82b55ee", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "24c858a5-b1b4-49f3-85d4-dff95afc34a9", "url": "https://gist.github.com/Adocentyn/3f90e3dce4420f247f226ef0e82b55ee"}, {"timestamp": "2026-08-05T00:00:39.881Z", "date_only": false, "value": "2026-08-05T00:00:39.881964Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/Adocentyn/3f90e3dce4420f247f226ef0e82b55ee", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "03ec6831-49cf-4ca5-841f-a3d510b8d706", "url": "https://gist.github.com/Adocentyn/3f90e3dce4420f247f226ef0e82b55ee"}, {"timestamp": "2026-08-05T00:00:53.529Z", "date_only": false, "value": "2026-08-05T00:00:53.529340Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/linux_news/679", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "5ad79710-886d-4727-8c82-6d01f7013598", "url": "https://t.me/linux_news/679"}, {"timestamp": "2026-08-06T11:04:13Z", "date_only": false, "value": "2026-08-06T11:04:13Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2021-1002", "record": "OESA-2021-1002", "field": "modified"}, {"timestamp": "2026-08-15T08:00:11.929Z", "date_only": false, "value": "2026-08-15T08:00:11.929850Z", "kind": "sighting", "label": "Seen", "source": "Telegram/LiBWiPPIN77ZW68qDoClHM-lliu-rH33pKEk8rizWSF5MQ", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "5021d576-ee8c-4d24-b28c-f795033dc8ac"}, {"timestamp": "2026-08-16T00:00:11.218Z", "date_only": false, "value": "2026-08-16T00:00:11.218703Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/LiBWiPPIN77ZW68qDoClHM-lliu-rH33pKEk8rizWSF5MQ", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "719b2eac-348f-4c26-a725-e6c4d9e5d0f0"}, {"timestamp": "2026-08-16T19:00:06.745Z", "date_only": false, "value": "2026-08-16T19:00:06.745391Z", "kind": "sighting", "label": "Seen", "source": "Telegram/By_NKvMZrYaH2yUylpqKrjtRu4BcOLWfE1rXZoU7VSn9Lds", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "a3a6706a-bf37-4fe5-a13c-465c2359a2ce"}, {"timestamp": "2026-08-22T01:00:02.767Z", "date_only": false, "value": "2026-08-22T01:00:02.767675Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/8534", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "61c0db62-80fa-41d0-b2db-78bcdd5898d0", "url": "https://t.me/true_secator/8534"}, {"timestamp": "2026-08-23T00:00:46.251Z", "date_only": false, "value": "2026-08-23T00:00:46.251469Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/8534", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "88cb1e51-4ed2-48c4-bf36-2e7948467f21", "url": "https://t.me/true_secator/8534"}, {"timestamp": "2026-08-27T20:00:11.720Z", "date_only": false, "value": "2026-08-27T20:00:11.720284Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/tYXjtXGvZOcVL05bpL_3O2jX-Uki9x_dAhf7v1swcwhwyfI", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "a496e504-5cbb-4d2f-9748-6b01a8fbee08"}, {"timestamp": "2026-08-29T23:00:16.439Z", "date_only": false, "value": "2026-08-29T23:00:16.439425Z", "kind": "sighting", "label": "Seen", "source": "Telegram/7nTr5Boy9ceRZIwzvInsdCdZXiKVxwAmx2LZ99vpiVTDaKQ", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "c160d8ec-7427-4f0f-9b84-d03419474250"}, {"timestamp": "2026-08-30T05:00:04.448Z", "date_only": false, "value": "2026-08-30T05:00:04.448184Z", "kind": "sighting", "label": "Seen", "source": "Telegram/wyxK3ktnUsAQf5UGj-tWpbMYz_DGWS-blZOqkqUSZ8m0KA0", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "01561519-651a-4d95-ae26-618e9b107c2d"}, {"timestamp": "2026-08-31T00:00:41.237Z", "date_only": false, "value": "2026-08-31T00:00:41.237664Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/wyxK3ktnUsAQf5UGj-tWpbMYz_DGWS-blZOqkqUSZ8m0KA0", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "d944c84b-ca50-42ad-9f41-107163b260f7"}, {"timestamp": "2026-08-31T00:00:44.358Z", "date_only": false, "value": "2026-08-31T00:00:44.358679Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/7nTr5Boy9ceRZIwzvInsdCdZXiKVxwAmx2LZ99vpiVTDaKQ", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "adbb9cb6-2e84-47e5-9df1-d32e49d1663f"}, {"timestamp": "2026-09-01T20:01:05.541Z", "date_only": false, "value": "2026-09-01T20:01:05.541843Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/87517", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "f21cd4d1-299a-4bfc-905d-7faa3e816d63", "url": "https://t.me/hacking_Attack/87517"}, {"timestamp": "2026-09-01T20:02:45.590Z", "date_only": false, "value": "2026-09-01T20:02:45.590459Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/6253", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "b08b5dcb-12cd-454b-af1b-0f7993522651", "url": "https://t.me/hacking_Attack/6253"}, {"timestamp": "2026-09-01T20:02:47.063Z", "date_only": false, "value": "2026-09-01T20:02:47.063482Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/4755", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "0f004149-174d-4dd8-b509-7c352bad5ebd", "url": "https://t.me/hacking_Attack/4755"}, {"timestamp": "2026-09-02T01:00:11.292Z", "date_only": false, "value": "2026-09-02T01:00:11.292423Z", "kind": "sighting", "label": "Seen", "source": "Telegram/795CHWfqDB8d387Ptvi9l1rsbPfOiWfhqBLWL_BanVVXFSs", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "80286cf1-191a-4c17-a958-a5b2987578c7"}, {"timestamp": "2026-09-02T16:00:04.155Z", "date_only": false, "value": "2026-09-02T16:00:04.155024Z", "kind": "sighting", "label": "Seen", "source": "Telegram/GvfR5TiIz5AGTLxNK0NHF1rEL-rqaKshudCOKUMqTVI5bvk", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "31a1ecbb-5ac4-49b4-8aca-e664b7fcc559"}, {"timestamp": "2026-09-03T00:00:42.625Z", "date_only": false, "value": "2026-09-03T00:00:42.625122Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/GvfR5TiIz5AGTLxNK0NHF1rEL-rqaKshudCOKUMqTVI5bvk", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "68bd9065-1b49-4fa7-8f1f-6bed7df05872"}, {"timestamp": "2026-09-03T00:00:54.894Z", "date_only": false, "value": "2026-09-03T00:00:54.894793Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/795CHWfqDB8d387Ptvi9l1rsbPfOiWfhqBLWL_BanVVXFSs", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "b3e676c3-52e1-4d74-978c-9d1512f8ec1c"}, {"timestamp": "2026-09-07T08:00:05.711Z", "date_only": false, "value": "2026-09-07T08:00:05.711659Z", "kind": "sighting", "label": "Seen", "source": "Telegram/hZmD1B52vHq6fSvKEDWDKrOWX_CbgCpeltfI-CsbFj8gh80", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "6bc7f4dc-b881-40ce-b5c0-e9e275bebbb1"}, {"timestamp": "2026-09-08T00:00:51.543Z", "date_only": false, "value": "2026-09-08T00:00:51.543704Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/hZmD1B52vHq6fSvKEDWDKrOWX_CbgCpeltfI-CsbFj8gh80", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "f0a1e53f-ec6b-4ca4-8c8f-41fa6ba8091c"}, {"timestamp": "2026-09-15T00:00:09.150Z", "date_only": false, "value": "2026-09-15T00:00:09.150670Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/hzUX5Z4uo0-P4BmQ24cBFoT_KuLR6K2llMGI-QCqbLel1qA", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "55d59839-af2e-422f-851c-beeb697699d5"}, {"timestamp": "2026-09-20T11:13:12Z", "date_only": false, "value": "2026-09-20T11:13:12Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2021:0218", "record": "RHSA-2021:0218", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T11:13:12Z", "date_only": false, "value": "2026-09-20T11:13:12Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 RHSA-2021:0218", "record": "RHSA-2021:0218", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T11:13:13Z", "date_only": false, "value": "2026-09-20T11:13:13Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2021:0221", "record": "RHSA-2021:0221", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T11:13:13Z", "date_only": false, "value": "2026-09-20T11:13:13Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 RHSA-2021:0221", "record": "RHSA-2021:0221", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T13:47:48Z", "date_only": false, "value": "2026-09-20T13:47:48Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2021:0225-1", "record": "SUSE-SU-2021:0225-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T13:47:48Z", "date_only": false, "value": "2026-09-20T13:47:48Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2021:0225-1", "record": "SUSE-SU-2021:0225-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T13:47:49Z", "date_only": false, "value": "2026-09-20T13:47:49Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2021:0226-1", "record": "SUSE-SU-2021:0226-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T13:47:49Z", "date_only": false, "value": "2026-09-20T13:47:49Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2021:0226-1", "record": "SUSE-SU-2021:0226-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T13:47:50Z", "date_only": false, "value": "2026-09-20T13:47:50Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2021:0227-1", "record": "SUSE-SU-2021:0227-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T13:47:50Z", "date_only": false, "value": "2026-09-20T13:47:50Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2021:0227-1", "record": "SUSE-SU-2021:0227-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T13:47:52Z", "date_only": false, "value": "2026-09-20T13:47:52Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2021:0232-1", "record": "SUSE-SU-2021:0232-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T13:47:52Z", "date_only": false, "value": "2026-09-20T13:47:52Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2021:0232-1", "record": "SUSE-SU-2021:0232-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T13:51:30Z", "date_only": false, "value": "2026-09-20T13:51:30Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2021:0928-1", "record": "SUSE-SU-2021:0928-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T13:51:30Z", "date_only": false, "value": "2026-09-20T13:51:30Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2021:0928-1", "record": "SUSE-SU-2021:0928-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T13:53:18Z", "date_only": false, "value": "2026-09-20T13:53:18Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2021:1267-1", "record": "SUSE-SU-2021:1267-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T13:53:18Z", "date_only": false, "value": "2026-09-20T13:53:18Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2021:1267-1", "record": "SUSE-SU-2021:1267-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T13:53:21Z", "date_only": false, "value": "2026-09-20T13:53:21Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2021:1273-1", "record": "SUSE-SU-2021:1273-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T13:53:21Z", "date_only": false, "value": "2026-09-20T13:53:21Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2021:1273-1", "record": "SUSE-SU-2021:1273-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T13:53:22Z", "date_only": false, "value": "2026-09-20T13:53:22Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2021:1274-1", "record": "SUSE-SU-2021:1274-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T13:53:22Z", "date_only": false, "value": "2026-09-20T13:53:22Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2021:1274-1", "record": "SUSE-SU-2021:1274-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T13:53:23Z", "date_only": false, "value": "2026-09-20T13:53:23Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2021:1275-1", "record": "SUSE-SU-2021:1275-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T13:53:23Z", "date_only": false, "value": "2026-09-20T13:53:23Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2021:1275-1", "record": "SUSE-SU-2021:1275-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T17:15:54Z", "date_only": false, "value": "2026-09-20T17:15:54Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2024:4389-1", "record": "SUSE-SU-2024:4389-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T17:15:54Z", "date_only": false, "value": "2026-09-20T17:15:54Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2024:4389-1", "record": "SUSE-SU-2024:4389-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T19:20:48Z", "date_only": false, "value": "2026-09-20T19:20:48Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:0169-1", "record": "OPENSUSE-SU-2021:0169-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T19:20:48Z", "date_only": false, "value": "2026-09-20T19:20:48Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:0169-1", "record": "OPENSUSE-SU-2021:0169-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T19:20:49Z", "date_only": false, "value": "2026-09-20T19:20:49Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:0170-1", "record": "OPENSUSE-SU-2021:0170-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T19:20:49Z", "date_only": false, "value": "2026-09-20T19:20:49Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:0170-1", "record": "OPENSUSE-SU-2021:0170-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T19:24:04Z", "date_only": false, "value": "2026-09-20T19:24:04Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:0602-1", "record": "OPENSUSE-SU-2021:0602-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T19:24:04Z", "date_only": false, "value": "2026-09-20T19:24:04Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:0602-1", "record": "OPENSUSE-SU-2021:0602-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T20:17:54Z", "date_only": false, "value": "2026-09-20T20:17:54Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11413-1", "record": "OPENSUSE-SU-2024:11413-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T20:17:54Z", "date_only": false, "value": "2026-09-20T20:17:54Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11413-1", "record": "OPENSUSE-SU-2024:11413-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-05T03:00:15Z", "date_only": false, "value": "2026-10-05T03:00:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/0N27mO_xV_cSySY2oEF59mxZzYGYZ4QgSKXSSYaCWfjQKng", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "529f99a8-9ca9-42a8-89d4-726d6d400a60"}, {"timestamp": "2026-10-05T03:00:15Z", "date_only": false, "value": "2026-10-05T03:00:15.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/0N27mO_xV_cSySY2oEF59mxZzYGYZ4QgSKXSSYaCWfjQKng", "record": "CVE-2021-3156", "field": "creation_timestamp", "uuid": "2626126b-5eed-448d-871e-110998433a4a"}]}