{"metadata": {"vulnerability": "cve-2023-27363", "count": 36, "kinds": {"milestone": 5, "sighting": 14, "kev": 0, "other": 17}}, "data": [{"timestamp": "2023-02-28T17:58:45.484Z", "date_only": false, "value": "2023-02-28T17:58:45.484Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2023-27363", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-02-28T18:05:54.109Z", "date_only": false, "value": "2023-02-28T18:05:54.109Z", "kind": "other", "label": "Date Assigned", "source": "cvelistv5 / zdi", "record": "cve-2023-27363", "field": "containers.cna.dateAssigned"}, {"timestamp": "2023-04-24T22:00:00Z", "date_only": false, "value": "2023-04-24T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1067", "record": "WID-SEC-W-2023-1067", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-04-24T22:00:00Z", "date_only": false, "value": "2023-04-24T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1067", "record": "WID-SEC-W-2023-1067", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-04-24T22:00:00Z", "date_only": false, "value": "2023-04-24T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1067", "record": "WID-SEC-W-2023-1067", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-05-01T21:29:14.501Z", "date_only": false, "value": "2023-05-01T21:29:14.501Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / zdi", "record": "cve-2023-27363", "field": "containers.cna.datePublic"}, {"timestamp": "2023-05-13T11:34:03Z", "date_only": false, "value": "2023-05-13T11:34:03.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/2983", "record": "CVE-2023-27363", "field": "creation_timestamp", "uuid": "ac942c68-3199-4599-b4cc-e7fbeb777a1b", "content": "Tools - Hackers Factory \n\nSubDomainizer\n\nA tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github.\n\nhttps://github.com/nsonaniya2010/SubDomainizer\n\n#cybersecurity #infosec #pentesting\n\nDSC_SVC_REMOTE\n\nThis code example allows you to create a malware.exe sample that can be run in the context of a system service, and could be used for local privilege escalation in the context of an unquoted service path, etc. The payload itself can be remotely hosted, downloaded via the wininet library and then executed via direct system calls.\n\nhttps://github.com/VirtualAlllocEx/DSC_SVC_REMOTE\n\n#malware #cybersecurity #infosec\n\nKovid Rootkit\n\nA full-feature LKM intended for use against Linux kernel v5+.\n\nhttps://github.com/carloslack/KoviD\n\n#infosec #pentesting #redteam\n\nNimbo-C2\n\nNimbo-C2 agent supports x64 Windows & Linux. It's written in Nim, with some usage of .NET on Windows (by dynamically loading the CLR to the process). Nim is powerful, but interacting with Windows is much easier and robust using Powershell, hence this combination is made. The Linux agent is slimer and capable only of basic commands, including ELF loading using the memfd technique.\n\nhttps://github.com/itaymigdal/Nimbo-C2\n\n#infosec #pentesting #redteam\n\nCVE-2023-27363\n\nFoxit pdf reader exportxfadata exposed dangerous method remote code execution vulnerability (cve-2023-27363).\n\nhttps://github.com/j00sean/SecBugs/tree/main/CVEs/CVE-2023-27363\n\n#cve #cybersecurity #exploit\n\nwpfinger\n\nWordPress scanning tool.\n\n\u2022 Core version detection\n\u2022 Plugin scanning through fingerprinting\n\u2022 Vulnerability output, using database from Wordfence\n\nhttps://github.com/LeakIX/wpfinger\n\n#pentesting #redteam #bugbounty\n\nhttps://t.me/dilagrafie", "url": "https://t.me/dilagrafie/2983"}, {"timestamp": "2023-05-14T22:00:00Z", "date_only": false, "value": "2023-05-14T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1067", "record": "WID-SEC-W-2023-1067", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-05-14T22:00:00Z", "date_only": false, "value": "2023-05-14T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1067", "record": "WID-SEC-W-2023-1067", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-05-16T03:30:50Z", "date_only": false, "value": "2023-05-16T03:30:50.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GhostPrincess/11698", "record": "CVE-2023-27363", "field": "creation_timestamp", "uuid": "7292f42d-2fa7-4c50-ab4b-37ae814c67fc", "content": "Top 3 trending CVEs on Twitter\n\nPast 24 hrs:\nCVE-2023-27363: 247K (audience size)\nCVE-2023-32243: 188.3K\nCVE-2023-24932: 164K\n\nPast 7 days:\nCVE-2023-24932: 4.5M\nCVE-2023-29336: 3.2M\nCVE-2023-27350: 3M\n\nhttps://cvetrends.com", "url": "https://t.me/GhostPrincess/11698"}, {"timestamp": "2023-05-16T03:43:57Z", "date_only": false, "value": "2023-05-16T03:43:57.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/566", "record": "CVE-2023-27363", "field": "creation_timestamp", "uuid": "13fdabdc-329b-4bf8-910b-8886d3d34133", "content": "https://github.com/j00sean/SecBugs/tree/main/CVEs/CVE-2023-27363", "url": "https://t.me/CNArsenal/566"}, {"timestamp": "2023-05-16T08:21:03Z", "date_only": false, "value": "2023-05-16T08:21:03.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/2996", "record": "CVE-2023-27363", "field": "creation_timestamp", "uuid": "e4e29159-03c8-45ca-8e63-b71a06227ea0", "content": "Foxit pdf reader exportxfadata exposed dangerous method remote code execution vulnerability (cve-2023-27363).\n\nhttps://github.com/j00sean/SecBugs/tree/main/CVEs%2FCVE-2023-27363\n\n#cve #cybersecurity #exploit", "url": "https://t.me/dilagrafie/2996"}, {"timestamp": "2023-05-16T13:31:40Z", "date_only": false, "value": "2023-05-16T13:31:40.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/8307", "record": "CVE-2023-27363", "field": "creation_timestamp", "uuid": "90a6e872-d968-409d-a1c8-c9919a9e9e77", "content": "#exploit\n1. CVE-2023-27363:\nFoxit PDF Reader exportXFAData Exposed Dangerous Method RCE Vulnerability\nhttps://github.com/j00sean/SecBugs/tree/main/CVEs/CVE-2023-27363\n\n2. CVE-2023-29087:\nShannon Baseband SIP Retry-After Header Heap Buffer Overflow\nhttps://packetstormsecurity.com/files/172295\n\n3. CVE-2023-2156:\nLinux IPv6 \"Route of Death\" 0day\nhttps://www.interruptlabs.co.uk/articles/linux-ipv6-route-of-death", "url": "https://t.me/CyberSecurityTechnologies/8307"}, {"timestamp": "2023-06-14T01:24:13Z", "date_only": false, "value": "2023-06-14T01:24:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/4558", "record": "CVE-2023-27363", "field": "creation_timestamp", "uuid": "a6cdabf4-169b-44fd-8640-35f0a15d50fc", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1a\u798f\u6615Foxit PDF\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1eCVE-2023-27363\u5206\u6790\u4e0e\u590d\u73b0\nURL\uff1ahttps://github.com/webraybtl/fuxinFoxit\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/4558"}, {"timestamp": "2023-06-14T01:32:16Z", "date_only": false, "value": "2023-06-14T01:32:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/4559", "record": "CVE-2023-27363", "field": "creation_timestamp", "uuid": "510c7b1f-9618-4e74-bf36-a7243b40e411", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1a\u6f0f\u6d1e\u590d\u73b0\n\u63cf\u8ff0\uff1a\u798f\u6615Foxit PDF\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1eCVE-2023-27363\u5206\u6790\u4e0e\u590d\u73b0\nURL\uff1ahttps://github.com/webraybtl/CVE-2023-27363\n\n\u6807\u7b7e\uff1a#\u6f0f\u6d1e\u590d\u73b0", "url": "https://t.me/GithubRedTeam/4559"}, {"timestamp": "2023-08-04T14:30:58Z", "date_only": false, "value": "2023-08-04T14:30:58.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/MrVGunz/788", "record": "CVE-2023-27363", "field": "creation_timestamp", "uuid": "54011f28-0fed-4ebb-9c8a-1dfdbf55553a", "content": "CVE-2023-27363 : Foxit PDF Reader / Editor <= 12.1.1.15289 - 'exportXFAData Exposed Dangerous Method' - Remote Code Execution \nPOC : https://github.com/j00sean/SecBugs/tree/main/CVEs/CVE-2023-27363\nXFA / PW : https://github.com/siberas/arpwn\nDetails : https://www.zerodayinitiative.com/advisories/ZDI-23-491/", "url": "https://t.me/MrVGunz/788"}, {"timestamp": "2023-10-10T08:59:27Z", "date_only": false, "value": "2023-10-10T08:59:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/5343", "record": "CVE-2023-27363", "field": "creation_timestamp", "uuid": "d1758d21-6f32-4708-bc23-cf6cd5983138", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1a\u798f\u6615Foxit PDF\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e(CVE-2023-27363)\nURL\uff1ahttps://github.com/CN016/-Foxit-PDF-CVE-2023-27363-\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/5343"}, {"timestamp": "2023-12-13T01:20:55.843Z", "date_only": false, "value": "2023-12-13T01:20:55.843029Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-27363", "record": "GSD-2023-27363", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-04-24T02:47:37Z", "date_only": false, "value": "2024-04-24T02:47:37.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/-b-qMPUhNEk8olHqBHs_gQiuQJEaHOrfj_GBdvva9qKtPF4", "record": "CVE-2023-27363", "field": "creation_timestamp", "uuid": "216c13e0-1966-4011-9e86-ef48f52980da"}, {"timestamp": "2024-05-03T01:56:14.432Z", "date_only": false, "value": "2024-05-03T01:56:14.432Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2023-27363", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-05-03T01:56:14.432Z", "date_only": false, "value": "2024-05-03T01:56:14.432Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / zdi", "record": "cve-2023-27363", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-05-03T02:15:14Z", "date_only": false, "value": "2024-05-03T02:15:14Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-PHWF-PMC2-5CX4", "record": "GHSA-PHWF-PMC2-5CX4", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-05-03T02:15:14.530Z", "date_only": false, "value": "2024-05-03T02:15:14.530", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-27363", "record": "FKIE_CVE-2023-27363", "field": "published"}, {"timestamp": "2024-05-03T03:30:49Z", "date_only": false, "value": "2024-05-03T03:30:49Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-PHWF-PMC2-5CX4", "record": "GHSA-PHWF-PMC2-5CX4", "field": "published"}, {"timestamp": "2024-05-03T03:30:49Z", "date_only": false, "value": "2024-05-03T03:30:49Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-PHWF-PMC2-5CX4", "record": "GHSA-PHWF-PMC2-5CX4", "field": "modified"}, {"timestamp": "2024-07-01T20:58:42.481Z", "date_only": false, "value": "2024-07-01T20:58:42.481767Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-27363", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-07-01T20:58:42.481Z", "date_only": false, "value": "2024-07-01T20:58:42.481767Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-27363", "record": "FKIE_CVE-2023-27363", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-07-01T21:41:13.162Z", "date_only": false, "value": "2024-07-01T21:41:13.162Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-27363", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-02T12:09:43.350Z", "date_only": false, "value": "2024-08-02T12:09:43.350Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2023-27363", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-02T12:09:43.350Z", "date_only": false, "value": "2024-08-02T12:09:43.350Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2023-27363", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T17:49:56.863Z", "date_only": false, "value": "2024-08-15T17:49:56.863+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1067", "record": "WID-SEC-W-2023-1067", "field": "document.tracking.generator.date"}, {"timestamp": "2025-08-31T03:00:47Z", "date_only": false, "value": "2025-08-31T03:00:47.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "record": "CVE-2023-27363", "field": "creation_timestamp", "uuid": "6050e5c7-a351-4616-b6d7-48be87baa5ed"}, {"timestamp": "2026-06-17T05:44:52.670Z", "date_only": false, "value": "2026-06-17T05:44:52.670", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-27363", "record": "FKIE_CVE-2023-27363", "field": "lastModified"}, {"timestamp": "2026-07-29T12:00:23.134Z", "date_only": false, "value": "2026-07-29T12:00:23.134428Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/14966", "record": "CVE-2023-27363", "field": "creation_timestamp", "uuid": "f4ee539b-ebd6-4a55-b669-790756877923", "url": "https://t.me/CVEhub/14966"}, {"timestamp": "2026-07-30T00:00:44.901Z", "date_only": false, "value": "2026-07-30T00:00:44.901845Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/14966", "record": "CVE-2023-27363", "field": "creation_timestamp", "uuid": "8d4ad636-039a-4e23-b3f2-2fedbf60a9cc", "url": "https://t.me/CVEhub/14966"}, {"timestamp": "2026-07-31T00:00:30.630Z", "date_only": false, "value": "2026-07-31T00:00:30.630060Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/14966", "record": "CVE-2023-27363", "field": "creation_timestamp", "uuid": "6a65cd58-8cab-48cc-83d4-a9f579d6a556", "url": "https://t.me/CVEhub/14966"}]}