{"metadata": {"vulnerability": "cve-2023-40044", "count": 82, "kinds": {"milestone": 6, "sighting": 37, "kev": 17, "other": 22}}, "data": [{"timestamp": "2023-08-08T19:44:41.112Z", "date_only": false, "value": "2023-08-08T19:44:41.112Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2023-40044", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-09-27T14:47:00Z", "date_only": false, "value": "2023-09-27T14:47:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / ProgressSoftware", "record": "cve-2023-40044", "field": "containers.cna.datePublic"}, {"timestamp": "2023-09-27T14:48:08.190Z", "date_only": false, "value": "2023-09-27T14:48:08.190Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2023-40044", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-09-27T15:18:00Z", "date_only": false, "value": "2023-09-27T15:18Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-40044", "record": "GSD-2023-40044", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2023-09-27T15:18:57Z", "date_only": false, "value": "2023-09-27T15:18:57Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-29VF-J74G-GMFC", "record": "GHSA-29VF-J74G-GMFC", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-09-27T15:18:57.307Z", "date_only": false, "value": "2023-09-27T15:18:57.307", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-40044", "record": "FKIE_CVE-2023-40044", "field": "published"}, {"timestamp": "2023-09-27T15:30:35Z", "date_only": false, "value": "2023-09-27T15:30:35Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-29VF-J74G-GMFC", "record": "GHSA-29VF-J74G-GMFC", "field": "published"}, {"timestamp": "2023-09-27T22:00:00Z", "date_only": false, "value": "2023-09-27T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2506", "record": "WID-SEC-W-2023-2506", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-09-27T22:00:00Z", "date_only": false, "value": "2023-09-27T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2506", "record": "WID-SEC-W-2023-2506", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-09-27T22:00:00Z", "date_only": false, "value": "2023-09-27T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2506", "record": "WID-SEC-W-2023-2506", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-09-29T00:00:00Z", "date_only": false, "value": "2023-09-29T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0793", "record": "CERTFR-2023-AVI-0793", "field": "last_revision_date"}, {"timestamp": "2023-09-29T00:00:00Z", "date_only": false, "value": "2023-09-29T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0793", "record": "CERTFR-2023-AVI-0793", "field": "initial_release_date"}, {"timestamp": "2023-09-29T00:00:00Z", "date_only": false, "value": "2023-09-29T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0793", "record": "CERTFR-2023-AVI-0793", "field": "revisions.0.revision_date"}, {"timestamp": "2023-09-29T08:31:16Z", "date_only": false, "value": "2023-09-29T08:31:16.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehackernews/3938", "record": "CVE-2023-40044", "field": "creation_timestamp", "uuid": "52224ff8-1bb3-4f29-ae28-a304aebede4c", "content": "\u26a0\ufe0f Critical Security Update: Progress Software releases hotfixes for critical CVE-2023-40044 and 7 other vulnerabilities in WS_FTP Server. \n \nFind details here: https://thehackernews.com/2023/09/progress-software-releases-urgent.html \n \nDon't wait! Apply the patch to secure your data and systems immediately.", "url": "https://t.me/thehackernews/3938"}, {"timestamp": "2023-09-29T09:43:11Z", "date_only": false, "value": "2023-09-29T09:43:11.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/KomunitiSiber/861", "record": "CVE-2023-40044", "field": "creation_timestamp", "uuid": "7baf325a-f538-4576-9af6-8862a9f9ebe7", "content": "Progress Software Releases Urgent Hotfixes for  Multiple Security Flaws in WS_FTP Server\nhttps://thehackernews.com/2023/09/progress-software-releases-urgent.html\n\nProgress Software has released hotfixes for a critical security vulnerability, alongside seven other flaws, in the WS_FTP Server Ad hoc Transfer Module and in the WS_FTP Server manager interface.\nTracked as\u00a0CVE-2023-40044, the flaw has a CVSS score of 10.0, indicating maximum severity. All versions of the software are impacted by the flaw.\n\"In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a", "url": "https://t.me/KomunitiSiber/861"}, {"timestamp": "2023-09-29T09:57:03Z", "date_only": false, "value": "2023-09-29T09:57:03.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/coCViSpTdBJIO6f5nGTY2jkmcohpMEICdIU3s8ly80oqRQ", "record": "CVE-2023-40044", "field": "creation_timestamp", "uuid": "21731dbe-90b8-426b-ae1a-2e47e9354293"}, {"timestamp": "2023-09-29T11:44:51Z", "date_only": false, "value": "2023-09-29T11:44:51.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/kasperskyb2b/906", "record": "CVE-2023-40044", "field": "creation_timestamp", "uuid": "387a1fa4-b98d-423b-b71f-08a445040037", "content": "\u26a0\ufe0f \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 WS_FTP\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Progress, \u0430\u0432\u0442\u043e\u0440 \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u043a\u0440\u0443\u043f\u043d\u0435\u0439\u0448\u0438\u0445 \u0418\u0411-\u043a\u0430\u0442\u0430\u043a\u043b\u0438\u0437\u043c\u043e\u0432 2023 \u0433\u043e\u0434\u0430 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 MOVEit Transfer \u0438 WS_FTP, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u043c. FTP-\u0441\u0435\u0440\u0432\u0435\u0440 \u00ab\u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u043a\u043b\u0430\u0441\u0441\u0430\u00bb \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 CVE-2023-40044 (CVSS 10) \u0438 CVE-2023-42657 (CVSS 9.9), \u0438 \u0435\u0449\u0451 \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u043c\u0435\u043b\u044c\u0447\u0435, \u0441 CVSS \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u0430\u043c\u0438 \u043e\u0442 5.3 \u0434\u043e 8.3.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 .Net \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 WS_FTP Ad Hoc, \u0447\u0442\u043e\u0431\u044b \u0434\u043e\u0441\u0442\u0438\u0447\u044c RCE \u043d\u0430 \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u0445\u043e\u0441\u0442\u0435. \u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0441\u043c\u044f\u0433\u0447\u0430\u044e\u0449\u0435\u0439 \u043c\u0435\u0440\u044b \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043d\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u043c\u043e\u0434\u0443\u043b\u044c Ad Hoc.\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f  \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u2014 \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438 (directory traversal), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0432\u043d\u0435 \u0434\u043e\u0437\u0432\u043e\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0430\u043f\u043e\u043a.\n\n\u0427\u0442\u043e\u0431\u044b \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f, \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043f\u043e\u043b\u043d\u0430\u044f \u043f\u0435\u0440\u0435\u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 WS_FTP, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u0431\u0443\u0434\u0443\u0442 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c.\n\n\u0412 \u043e\u0442\u043b\u0438\u0447\u0438\u0435 \u043e\u0442 \u044d\u043a\u0437\u043e\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0432 \u043d\u0430\u0448\u0438\u0445 \u0448\u0438\u0440\u043e\u0442\u0430\u0445 MOVEit, WS_FTP \u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u043e\u0439 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c\u044e \u0443 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u041f\u043e\u044d\u0442\u043e\u043c\u0443 \u0431\u0430\u0445\u043d\u0443\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u043d\u0435 \u0445\u0443\u0436\u0435 \u0447\u0435\u043c \u0432 \u0428\u0442\u0430\u0442\u0430\u0445. \u041d\u0435 \u0434\u0435\u043b\u0430\u0439\u0442\u0435 \u0440\u0430\u043d\u0441\u043e\u043c\u0432\u0430\u0440\u0449\u0438\u043a\u0430\u043c \u043f\u043e\u0434\u0430\u0440\u043a\u043e\u0432, \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0439\u0442\u0435\u0441\u044c. \u041d\u0443 \u0430 \u0434\u043e\u043b\u0433\u043e\u0441\u0440\u043e\u0447\u043d\u043e, \u043f\u043e\u0445\u043e\u0436\u0435, \u0438\u0437\u0434\u0435\u043b\u0438\u044f Progress/Ipswitch \u043d\u0430\u0434\u043e \u0432\u044b\u043f\u0438\u043b\u0438\u0432\u0430\u0442\u044c. \u0421\u0443\u0434\u044f \u043f\u043e \u0431\u0430\u0433\u0430\u043c, \u043a\u0443\u043b\u044c\u0442\u0443\u0440\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043d\u0435 \u043f\u0440\u0438\u0436\u0438\u043b\u0430\u0441\u044c.\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 @\u041f2\u0422", "url": "https://t.me/kasperskyb2b/906"}, {"timestamp": "2023-09-29T18:00:07Z", "date_only": false, "value": "2023-09-29T18:00:07.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/4912", "record": "CVE-2023-40044", "field": "creation_timestamp", "uuid": "4f3d9f91-4267-46f5-881e-007572766e5f", "content": "Progress Software, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u0433\u043e\u0440\u0435-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b MOVEit Transfer, \u0441\u0442\u0430\u0432\u0448\u0435\u0439  \u043d\u0430\u0440\u0438\u0446\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u043c \u0438\u043c\u0435\u043d\u0435\u043c \u0434\u043b\u044f \u043e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0438\u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u043d\u0435\u0439 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0432 \u041f\u041e WS_FTP Server.\n\n\u0421\u043e\u0444\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0434\u043b\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0444\u0430\u0439\u043b\u043e\u0432.\n\n\u0418\u0437 \u0432\u0441\u0435\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 WS_FTP, \u0432\u043b\u0438\u044f\u044e\u0449\u0438\u0445 \u043d\u0430 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0430 \u0438 \u043c\u043e\u0434\u0443\u043b\u044c \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 Ad Hoc Transfer, \u0434\u0432\u0435 \u0431\u044b\u043b\u0438 \u043e\u0446\u0435\u043d\u0435\u043d\u044b \u043a\u0430\u043a \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435, \u0430 \u043e\u0434\u043d\u0430, CVE-2023-40044, \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 10/10, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b.\n\n\u0414\u0440\u0443\u0433\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430 (CVE-2023-42657) - \u044d\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438 \u0432 WS_FTP, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u041e\u0421.\n\n\u041e\u0431\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438, \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0445 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u0412 \u0441\u0432\u044f\u0437\u0438 \u0441 \u0447\u0435\u043c \u043a\u043e\u043c\u0430\u043d\u0434\u0430 Progress WS_FTP \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e \u0441\u0430\u043c\u043e\u0439 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 - 8.8.2.\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a\u0430 - \u0435\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0441\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0435\u0439\u00a0\u043e \u0442\u043e\u043c, \u043a\u0430\u043a \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u043c\u043e\u0434\u0443\u043b\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 WS_FTP, \u0435\u0441\u043b\u0438 \u043e\u043d \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0438\u0439 Progress Software \u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u0438 \u0432\u043d\u043e\u0432\u044c \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043f\u043e\u043b\u043d\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0436\u0438\u0434\u0430\u0442\u044c, \u0447\u0442\u043e \u043a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u044e \u0437\u0430\u0445\u043e\u0447\u0435\u0442\u0441\u044f \u043f\u043e\u0432\u0442\u043e\u0440\u0438\u0442\u044c \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e Clop, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u0443\u044e \u043d\u0430 MOVEit Transfer, \u0436\u0435\u0440\u0442\u0432\u0430\u043c\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439, \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Emsisoft, \u0441\u0442\u0430\u043b\u043e \u0431\u043e\u043b\u0435\u0435 2100 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0438 62 \u043c\u043b\u043d. \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.", "url": "https://t.me/true_secator/4912"}, {"timestamp": "2023-10-02T08:45:27Z", "date_only": false, "value": "2023-10-02T08:45:27.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3d440a17-f361-4a13-a9f7-80551ccaeed0", "record": "CVE-2023-40044", "field": "creation_timestamp", "uuid": "05b3b077-10a5-4869-8eab-880bdbdca1e8"}, {"timestamp": "2023-10-02T14:42:58Z", "date_only": false, "value": "2023-10-02T14:42:58.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/140548", "record": "CVE-2023-40044", "field": "creation_timestamp", "uuid": "e35e91f8-1f61-41be-a3a1-97aa80bb8b9d", "content": "https://ift.tt/M3PaXEZ\nCritical vulnerability in WS_FTP Server exploited by attackers (CVE-2023-40044)", "url": "https://t.me/ctinow/140548"}, {"timestamp": "2023-10-02T21:47:00Z", "date_only": false, "value": "2023-10-02T21:47:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ctinow/140684", "record": "CVE-2023-40044", "field": "creation_timestamp", "uuid": "15aef94d-5361-41ae-aa8a-cc85eef4b422", "content": "https://ift.tt/QRtzi12\nWS_FTP flaw CVE-2023-40044 actively exploited in the wild", "url": "https://t.me/ctinow/140684"}, {"timestamp": "2023-10-03T08:27:27Z", "date_only": false, "value": "2023-10-03T08:27:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thebugbountyhunter/7828", "record": "CVE-2023-40044", "field": "creation_timestamp", "uuid": "c51226f6-2261-47fb-84a8-3c16bd216592", "content": "RCE in Progress WS_FTP Ad Hoc via IIS HTTP Modules (CVE-2023-40044)\n\nhttps://www.assetnote.io/resources/research/rce-in-progress-ws-ftp-ad-hoc-via-iis-http-modules-cve-2023-40044", "url": "https://t.me/thebugbountyhunter/7828"}, {"timestamp": "2023-10-03T15:58:10Z", "date_only": false, "value": "2023-10-03T15:58:10.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/4921", "record": "CVE-2023-40044", "field": "creation_timestamp", "uuid": "ac797488-d973-47b9-bb96-ab8f93bdc700", "content": "Progress Software \u0433\u043b\u0443\u0431\u043e\u043a\u043e \u0440\u0430\u0437\u0434\u043e\u0441\u0430\u0434\u043e\u0432\u0430\u043d\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 Assetnote \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u0438 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u043c PoC \u0434\u043b\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u0438\u043c\u0438 CVE-2023-40044\u00a0\u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u043e\u0431\u043c\u0435\u043d\u0430 \u0444\u0430\u0439\u043b\u0430\u043c\u0438 WS_FTP.\n\nCVE-2023-40044 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 .NET \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 Ad Hoc Transfer, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u041e\u0421 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0440\u043e\u0441\u0442\u043e\u0433\u043e HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u0430.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u043b\u0430\u0441\u044c \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0434\u043e\u043b\u0433\u043e\u0435 \u0432\u0440\u0435\u043c\u044f, \u0432 \u0441\u0432\u044f\u0437\u0438 \u0441 \u0447\u0435\u043c \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0432\u0435\u0440\u0441\u0438\u0439 WS_FTP \u0443\u044f\u0437\u0432\u0438\u043c\u044b.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u00a0\u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0440\u0435\u0434\u0443, 27 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e \u0441\u0430\u043c\u043e\u0439 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u2014 8.8.2 \u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u043c\u043e\u0434\u0443\u043b\u044c Ad Hoc Transfer Module WS_FTP Server.\n\n\u041a \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u043c\u0443 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u043e\u043a\u043e\u043b\u043e 2000 \u0445\u043e\u0441\u0442\u043e\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 WS_FTP (\u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u043c\u0435\u044e\u0442 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440, \u0447\u0442\u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438).\n\n\u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043d\u0438\u0445 \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0442 \u043a\u0440\u0443\u043f\u043d\u044b\u043c \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f\u043c, \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u0438 \u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u043c \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f\u043c.\n\n\u041a\u0430\u043a \u043c\u044b \u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u043b\u0438 \u0440\u0430\u043d\u0435\u0435, \u0441\u0440\u0430\u0437\u0443 \u0436\u0435 \u0432 \u0434\u0435\u043d\u044c \u0432\u044b\u0445\u043e\u0434\u0430 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Rapid7 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0438 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u043c\u0430\u0441\u0441\u043e\u0432\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 WS_FTP, \u0432 \u0441\u0443\u0431\u0431\u043e\u0442\u0443 \u0432\u0435\u0447\u0435\u0440\u043e\u043c, 30 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u0432\u043e \u0432\u0441\u0435\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u0445 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u043e\u0434\u0438\u043d \u0438 \u0442\u043e\u0442 \u0436\u0435 \u0434\u043e\u043c\u0435\u043d Burpsuite, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0442\u044c \u043d\u0430 \u0435\u0434\u0438\u043d\u043e\u0433\u043e \u0430\u043a\u0442\u043e\u0440\u0430, \u0441\u0442\u043e\u044f\u0449\u0435\u0433\u043e \u0437\u0430 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c\u044e.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u0432\u0441\u044e \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0438, \u043d\u0430\u043a\u0430\u043b\u044f\u0435\u043c\u043e\u0439 \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f\u043c\u0438 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u0433\u043e \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430 \u0441 \u0434\u0440\u0443\u0433\u0438\u043c \u0434\u044b\u0440\u044f\u0432\u044b\u043c \u0440\u0435\u0448\u0435\u043d\u0438\u0435\u043c MOVEit Transfer, \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e Progress Software \u0432\u044b\u0441\u0442\u0443\u043f\u0438\u043b\u043e \u0441 \u0440\u0435\u0437\u043a\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u043a\u043e\u0439 \u0432 \u0430\u0434\u0440\u0435\u0441 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0432\u043e\u0438\u043c\u0438 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f\u043c\u0438 \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0430\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0432\u044b\u0440\u0430\u0437\u0438\u043b\u0438 \u043d\u0430\u0434\u0435\u0436\u0434\u0443 \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u043f\u0440\u0435\u043a\u0440\u0430\u0442\u0438\u0442 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0443 \u0431\u0435\u0437\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 POC \u0441\u0440\u0430\u0437\u0443 \u043f\u043e\u0441\u043b\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u041c\u043e\u0436\u0435\u0442 \u043a \u043d\u0438\u043c \u0438 \u043f\u0440\u0438\u0441\u043b\u0443\u0448\u0430\u044e\u0442\u0441\u044f, \u043d\u043e \u0432\u0440\u044f\u0434 \u043b\u0438 \u044d\u0442\u043e \u0443\u0436\u0435 \u043f\u043e\u043c\u043e\u0436\u0435\u0442 Progress Software \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439 \u043d\u043e\u0432\u043e\u0433\u043e \u043d\u0430\u0437\u0440\u0435\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430, \u0441\u0440\u043e\u0434\u043d\u0438 MOVEit Transfer.", "url": "https://t.me/true_secator/4921"}, {"timestamp": "2023-10-03T22:00:00Z", "date_only": false, "value": "2023-10-03T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2506", "record": "WID-SEC-W-2023-2506", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-10-03T22:00:00Z", "date_only": false, "value": "2023-10-03T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2506", "record": "WID-SEC-W-2023-2506", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-10-03T23:59:08Z", "date_only": false, "value": "2023-10-03T23:59:08.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/71523", "record": "CVE-2023-40044", "field": "creation_timestamp", "uuid": "71e5d8c8-a95e-4407-aa1f-6fa7fe7fcadc", "content": "\ud83d\udd74 Attacks on Maximum Severity WS_FTP Bug Have Been Limited \u2014 So Far \ud83d\udd74\n\nWhile CVE-2023-40044 is critical, threat watchers hope it won't be another MOVEit for customers of Progress Software's file transfer technology.\n\n\ud83d\udcd6 Read\n\nvia \"Dark Reading\".", "url": "https://t.me/cibsecurity/71523"}, {"timestamp": "2023-10-04T14:37:46Z", "date_only": false, "value": "2023-10-04T14:37:46.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/ws_ftp_rce_cve_2023_40044.rb", "record": "CVE-2023-40044", "field": "creation_timestamp", "uuid": "258eb287-8525-4a65-b04d-6af32c9a0261", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/ws_ftp_rce_cve_2023_40044.rb"}, {"timestamp": "2023-10-04T16:06:10.768Z", "date_only": false, "value": "2023-10-04T16:06:10.768Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / ProgressSoftware", "record": "cve-2023-40044", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-10-05T00:00:00Z", "date_only": false, "value": "2023-10-05T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2023-40044", "field": "timestamps.asserted_at", "uuid": "ca1b44fb-f92d-4076-a953-b7a72369ace7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-05T00:00:00Z", "date_only": false, "value": "2023-10-05T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2023-40044", "field": "timestamps.asserted_at", "uuid": "15879b92-ea88-4a4d-9c7d-fb0a8ed047c8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-05T00:00:00Z", "date_only": true, "value": "2023-10-05", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-40044", "field": "containers.adp.1.metrics.1.other.content.dateAdded"}, {"timestamp": "2023-10-05T00:00:00Z", "date_only": false, "value": "2023-10-05T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2023-40044", "field": "evidence.0.details.added_date", "uuid": "15879b92-ea88-4a4d-9c7d-fb0a8ed047c8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-05T00:00:00Z", "date_only": true, "value": "2023-10-05", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2023-40044", "field": "evidence.0.details.date_added", "uuid": "ca1b44fb-f92d-4076-a953-b7a72369ace7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-05T00:00:00Z", "date_only": false, "value": "2023-10-05T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2023-40044", "field": "timestamps.first_seen_at", "uuid": "ca1b44fb-f92d-4076-a953-b7a72369ace7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-05T00:00:00Z", "date_only": false, "value": "2023-10-05T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2023-40044", "field": "timestamps.first_seen_at", "uuid": "15879b92-ea88-4a4d-9c7d-fb0a8ed047c8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-05T00:00:00Z", "date_only": false, "value": "2023-10-05T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2023-40044", "field": "status.status_updated_at", "uuid": "ca1b44fb-f92d-4076-a953-b7a72369ace7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-05T00:00:00Z", "date_only": false, "value": "2023-10-05T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2023-40044", "field": "status.status_updated_at", "uuid": "15879b92-ea88-4a4d-9c7d-fb0a8ed047c8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-05T00:00:00Z", "date_only": false, "value": "2023-10-05T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-40044", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2023-10-05T05:23:51Z", "date_only": false, "value": "2023-10-05T05:23:51.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/1230", "record": "CVE-2023-40044", "field": "creation_timestamp", "uuid": "da2a6ddd-8f99-407e-98e9-772b988ff4f7", "content": "https://www.assetnote.io/resources/research/rce-in-progress-ws-ftp-ad-hoc-via-iis-http-modules-cve-2023-40044", "url": "https://t.me/CNArsenal/1230"}, {"timestamp": "2023-10-05T10:58:01Z", "date_only": false, "value": "2023-10-05T10:58:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/9143", "record": "CVE-2023-40044", "field": "creation_timestamp", "uuid": "b5e3fbd6-d23f-4fa8-a336-80ee39f71b88", "content": "#exploit\n1. CVE-2023-40044:\nRCE in Progress WS_FTP Ad Hoc via IIS HTTP Modules\nhttps://www.assetnote.io/resources/research/rce-in-progress-ws-ftp-ad-hoc-via-iis-http-modules-cve-2023-40044\n\n2. CVE-2023-43284:\nD-Link DIR-846 Authenticated RCE\nhttps://github.com/MateusTesser/CVE-2023-43284", "url": "https://t.me/CyberSecurityTechnologies/9143"}, {"timestamp": "2023-10-05T18:10:02Z", "date_only": false, "value": "2023-10-05T18:10:02.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2023-40044", "field": "creation_timestamp", "uuid": "38f87904-7d67-4589-a1d8-5f55383c0f8b"}, {"timestamp": "2023-10-07T06:04:26Z", "date_only": false, "value": "2023-10-07T06:04:26.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arvinclub1/908", "record": "CVE-2023-40044", "field": "creation_timestamp", "uuid": "3cbeddae-1625-44d3-bc73-ff0838eb4956", "content": "\ud83d\udea8\u0644\u0627\u06a9 \u0628\u06cc\u062a \u0648 \u0634\u0631\u06a9\u0627 \u062a\u0648\u0646\u0633\u062a\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc CVE-2023-40044 \u062f\u0631 WS_FTP \u0631\u0648 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u0628\u06a9\u0646\u0646.", "url": "https://t.me/arvinclub1/908"}, {"timestamp": "2023-10-09T08:37:20Z", "date_only": false, "value": "2023-10-09T08:37:20.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/kasperskyb2b/924", "record": "CVE-2023-40044", "field": "creation_timestamp", "uuid": "f45423f3-b3e5-4e3d-ab2b-29232e0c6305", "content": "\u23e9 \u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f APT \u0438 \u0418\u0411-\u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e\n\n\u2699\ufe0f \u041e\u0431\u0437\u043e\u0440 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0439 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442 Kaspersky ICS CERT. \u041e\u0442\u0447\u0451\u0442 \u043f\u043e\u0441\u0432\u044f\u0449\u0451\u043d \u043a\u0440\u0438\u043c\u0438\u043d\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0430\u0442\u0430\u043a\u0430\u043c \u0438 \u0445\u0430\u043a\u0442\u0438\u0432\u0438\u0437\u043c\u0443 \u2014 \u0447\u0438\u0441\u043b\u043e \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0451\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043f\u043e\u043b\u0433\u043e\u0434\u0430 \u0432\u044b\u0440\u043e\u0441\u043b\u043e \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u0432 \u043f\u043e\u043b\u0442\u043e\u0440\u0430 \u0440\u0430\u0437\u0430. \u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0430\u0442\u0430\u043a\u0443\u0435\u043c\u044b\u0435 \u0441\u0435\u043a\u0442\u043e\u0440\u0430 \u2014 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u043e, \u0430\u0432\u0442\u043e\u043f\u0440\u043e\u043c \u0438 \u044d\u043d\u0435\u0440\u0433\u0435\u0442\u0438\u043a\u0430. \u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432 \u043d\u0430 \u0441\u043e\u0432\u0435\u0441\u0442\u0438 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\ud83d\udd20\ud83d\udd20\ud83d\udd20 \u0420\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043d\u0430 ransomware \u043d\u0430\u0434\u043e \u0432\u0441\u0451 \u0431\u044b\u0441\u0442\u0440\u0435\u0435. \u0412\u0440\u0435\u043c\u044f, \u043f\u0440\u043e\u0432\u0435\u0434\u0451\u043d\u043d\u043e\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c\u0438 \u0432 \u0441\u0435\u0442\u0438, \u0441\u043d\u0438\u0437\u0438\u043b\u043e\u0441\u044c \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 12 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0441 4,5 \u0434\u043d\u0435\u0439 \u0434\u043e \u0441\u0447\u0438\u0442\u0430\u043d\u043d\u044b\u0445 \u0447\u0430\u0441\u043e\u0432. \u0412 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u0435 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0440\u0430\u0441\u043a\u0430\u0442\u043a\u0430 ransomware \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u0441\u0443\u0442\u043e\u043a, \u0432 10% \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u2014 \u0437\u0430 \u043f\u044f\u0442\u044c \u0447\u0430\u0441\u043e\u0432. \n\n\ud83d\udccc CISA \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438  \u043e\u0442\u0447\u0451\u0442 \u043e \u0441\u0430\u043c\u044b\u0445 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0451\u043d\u043d\u044b\u0445 \u043e\u0448\u0438\u0431\u043a\u0430\u0445 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0432 \u043a\u0440\u0443\u043f\u043d\u044b\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u0445, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0438\u0445 \u043a \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u044b\u043c \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c.  \u0412 \u0442\u043e\u043f-3 \u0443\u0432\u0435\u0440\u0435\u043d\u043d\u043e \u0432\u043e\u0448\u043b\u0438 \u0434\u0435\u0444\u043e\u043b\u0442\u043d\u044b\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u043d\u0435\u0432\u0435\u0440\u043d\u043e\u0435 \u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0430\u0434\u043c\u0438\u043d\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u044b\u0439 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438.  \u0411\u043e\u043b\u0435\u0435 \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u044b\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u043e\u0442\u0447\u0451\u0442\u0430 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u0443\u0435\u043c \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e.\n\n\u041d\u0435\u0434\u0430\u0432\u043d\u043e \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0451\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 TeamCity \u0438 WS_FTP server \u0443\u0436\u0435 \u0432\u0441\u0442\u0430\u043b\u0438 \u043d\u0430 \u0441\u043b\u0443\u0436\u0431\u0443 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439. Teamcity \u2014 CVE-2023-42793, WS_FTP \u2014  CVE-2023-40044. \n\u0422\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0435\u043c \u0440\u044f\u0434 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0440\u0435\u043a\u043e\u043d\u0441\u0442\u0440\u0443\u0438\u0440\u043e\u0432\u0430\u043b\u0438 PoC \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438  CVE-2023-4911 \u0432 ld.so (\u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a GNU C), \u043e\u0431\u0440\u0430\u0442\u043d\u044b\u0439 \u043e\u0442\u0441\u0447\u0451\u0442 \u0434\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043f\u043e\u0448\u0451\u043b.\n\n\ud83c\udfaf \u041e\u0442\u0447\u0451\u0442 \u043e \u043d\u043e\u0432\u044b\u0445 \u0440\u0430\u0437\u043d\u043e\u0432\u0438\u0434\u043d\u043e\u0441\u0442\u044f\u0445 Mirai, \u0446\u0438\u0440\u043a\u0443\u043b\u0438\u0440\u0443\u044e\u0449\u0438\u0445 \u0441 \u043b\u0435\u0442\u0430: catDDoS, hailBot,kiraiBot. \n\n\u0418 \u0441\u043d\u043e\u0432\u0430 \u0441 \u0432\u0430\u043c\u0438 \u043d\u0430\u0448\u0430 \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u0430\u044f \u0440\u0443\u0431\u0440\u0438\u043a\u0430 \u0432 open source \u043f\u0440\u0435\u043a\u0440\u0430\u0441\u043d\u0430\u044f \u043f\u043e\u0433\u043e\u0434\u0430 \ud83c\udf1e\n\n1\ufe0f\u20e3 \u0418\u043d\u0444\u043e\u0441\u0442\u0438\u043b\u0435\u0440\u043e\u043c \u0437\u0430\u0442\u0440\u043e\u044f\u043d\u0435\u043d\u044b \u0431\u043e\u043b\u0435\u0435 100 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 Python, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043d\u044b \u0441\u0443\u043c\u043c\u0430\u0440\u043d\u043e 75 \u0442\u044b\u0441\u044f\u0447 \u0440\u0430\u0437. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u043a\u0440\u0438\u043f\u0442\u043e\u043a\u043e\u0448\u0435\u043b\u044c\u043a\u0430\u043c\u0438 \u0438 \u0441\u043c\u043e\u0433\u043b\u0438 \u0441\u043e\u0432\u0435\u0440\u0448\u0438\u0442\u044c \u043a\u0440\u0430\u0436\u0438 \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u043d\u0430 $100 000. \n\n2\ufe0f\u20e3 \u0412 npm \u043e\u043a\u043e\u043b\u043e \u043d\u0435\u0434\u0435\u043b\u0438 \u0436\u0438\u043b \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043f\u0430\u043a\u0435\u0442 node-hide-console-windows (\u043e\u0442\u043b\u0438\u0447\u0430\u0435\u0442\u0441\u044f \u043e\u0442 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u043e\u0433\u043e \u0431\u0443\u043a\u0432\u043e\u0439  s \u0432 \u043a\u043e\u043d\u0446\u0435), \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u0436\u0435\u0440\u0442\u0432\u0430\u043c \u043e\u043f\u0435\u043d\u0441\u043e\u0440\u0441\u043d\u044b\u0439  \u0442\u0440\u043e\u044f\u043d DiscordRAT 2.0, \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0437\u0430\u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043e\u043f\u0435\u043d\u0441\u043e\u0440\u0441\u043d\u044b\u043c \u0436\u0435 \u0440\u0443\u0442\u043a\u0438\u0442\u043e\u043c r77.\n\n3\ufe0f\u20e3 \u0422\u0430\u043c \u0436\u0435 \u0432 npm \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043e \u0435\u0449\u0451 \u0431\u043e\u043b\u0435\u0435 30 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u0432\u043e\u0440\u0443\u044e\u0449\u0438\u0445 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0441 \u043c\u0430\u0448\u0438\u043d\u044b.\n\n4\ufe0f\u20e3 \u0412\u043e\u043e\u0431\u0449\u0435 \u0436\u0435 \u0437\u0430 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u0439 \u0433\u043e\u0434 Sonatype \u043d\u0430\u0441\u0447\u0438\u0442\u0430\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 245000 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445, \u044d\u0442\u043e \u0432\u0434\u0432\u043e\u0435 \u0431\u043e\u043b\u044c\u0448\u0435 \u0447\u0435\u043c \u0437\u0430 \u0434\u0432\u0430 \u043f\u0440\u043e\u0448\u043b\u044b\u0445 \u0433\u043e\u0434\u0430 \u0432\u043c\u0435\u0441\u0442\u0435 \u0432\u0437\u044f\u0442\u044b\u0445.\n\n\ud83d\udc30 \u0410\u043d\u0430\u043b\u0438\u0437 \u043d\u043e\u0432\u043e\u0433\u043e MaaS BunnyLoader, \u0431\u0435\u0441\u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0433\u043e \u0412\u041f\u041e \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u044f\u044e\u0449\u0435\u0433\u043e \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430 \u0438 \u0438\u043d\u0444\u043e\u0441\u0442\u0438\u043b\u0435\u0440\u0430. \u041d\u0430 \u0447\u0451\u0440\u043d\u043e\u043c \u0440\u044b\u043d\u043a\u0435 \u043e\u043d \u0437\u0430\u043c\u0435\u0447\u0435\u043d \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u0435, \u043d\u043e \u0431\u044b\u0441\u0442\u0440\u043e \u043d\u0430\u0431\u0438\u0440\u0430\u0435\u0442 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0434\u0435\u0448\u0435\u0432\u0438\u0437\u043d\u0435, \u043c\u043d\u043e\u0433\u043e\u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0438 \u0431\u044b\u0441\u0442\u0440\u043e\u043c\u0443 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044e.\n\n\u041a\u0430\u043a \u043c\u044b \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u043b\u0438 \u0431\u0443\u043a\u0432\u0430\u043b\u044c\u043d\u043e \u0432 \u043f\u044f\u0442\u043d\u0438\u0446\u0443, \u0430\u0442\u0430\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430 \u0441\u0442\u0430\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b, \u0438 \u0432\u043e\u0442 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u044b\u0435 \u0438\u043b\u043b\u044e\u0441\u0442\u0440\u0430\u0446\u0438\u0438:  \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cytrox \u0438 \u0435\u0451 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u0430\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 Predator \u0431\u044b\u043b\u0438 \u0440\u0430\u0437\u043e\u0431\u0440\u0430\u043d\u044b \u0432 \u0434\u0435\u0442\u0430\u043b\u044f\u0445 \u2014 \u0430\u043d\u0430\u043b\u0438\u0437 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0432 \u0440\u0430\u0437\u043d\u044b\u0445 \u0441\u0442\u0440\u0430\u043d\u0430\u0445 (\u043e\u0442 \u041f\u043e\u0440\u0442\u0443\u0433\u0430\u043b\u0438\u0438 \u0434\u043e \u0418\u043d\u0434\u043e\u043d\u0435\u0437\u0438\u0438) \u0438 \u0440\u0430\u0437\u0431\u043e\u0440 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u043f\u043e\u043b\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0434\u0435\u044f\u0442\u0435\u043b\u044f.\n\n#\u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 #APT @\u041f2\u0422", "url": "https://t.me/kasperskyb2b/924"}, {"timestamp": "2023-10-10T12:40:03Z", "date_only": false, "value": "2023-10-10T12:40:03.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/bizone_channel/926", "record": "CVE-2023-40044", "field": "creation_timestamp", "uuid": "13502ba6-84fb-4dd7-8cf4-3cdc79a11b9e", "content": "\ud83d\udee1 \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u00a0\u041f\u041e Progress WS_FTP\n\n\u041f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0441 Progress WS_FTP \u0435\u0441\u0442\u044c \u0438 \u043d\u0430 \u0442\u0435\u0440\u0440\u0438\u0442\u043e\u0440\u0438\u0438 \u0420\u043e\u0441\u0441\u0438\u0438.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2023-40044 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 10 \u0438 CVE-2023-42657 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 9,9.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0438\u043b\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u043f\u043e\u0441\u0442\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n\u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c PowerShell \u0438 certutil \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430 Metasploit \u0438\u043b\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0441 \u043f\u043e\u0434\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e curl.\n\n\u041a\u0430\u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u0443\u0441\u043f\u0435\u0448\u043d\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e?\n\n\u041e\u0431\u0440\u0430\u0449\u0430\u0439\u0442\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u0437\u0430\u043f\u0443\u0441\u043a \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 w3wp.exe \u0441 WSFTPSVR_WTM \u0432 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0435 \u0438 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0434\u043e\u0447\u0435\u0440\u043d\u0438\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b: cmd, powershell, certutil, mshta, curl, wmic \u0438 \u0434\u0440.", "url": "https://t.me/bizone_channel/926"}, {"timestamp": "2023-10-13T01:22:00Z", "date_only": false, "value": "2023-10-13T01:22Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-40044", "record": "GSD-2023-40044", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-10-25T09:02:19Z", "date_only": false, "value": "2023-10-25T09:02:19.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thebugbountyhunter/7926", "record": "CVE-2023-40044", "field": "creation_timestamp", "uuid": "55e018f8-a8d2-484a-9f89-4d665d66c2bb", "content": "RCE in Progress WS_FTP Ad Hoc via IIS HTTP Modules (CVE-2023-40044)\n\nhttps://blog.assetnote.io/2023/10/04/rce-progress-ws-ftp/", "url": "https://t.me/thebugbountyhunter/7926"}, {"timestamp": "2023-10-26T00:00:00Z", "date_only": true, "value": "2023-10-26", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2023-40044", "field": "evidence.0.details.due_date", "uuid": "ca1b44fb-f92d-4076-a953-b7a72369ace7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-12-13T01:20:44.136Z", "date_only": false, "value": "2023-12-13T01:20:44.136851Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-40044", "record": "GSD-2023-40044", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-02T18:24:54.913Z", "date_only": false, "value": "2024-08-02T18:24:54.913Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2023-40044", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T17:59:11.446Z", "date_only": false, "value": "2024-08-15T17:59:11.446+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2506", "record": "WID-SEC-W-2023-2506", "field": "document.tracking.generator.date"}, {"timestamp": "2024-08-16T08:32:28Z", "date_only": false, "value": "2024-08-16T08:32:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Rootsec_2/1262", "record": "CVE-2023-40044", "field": "creation_timestamp", "uuid": "ae19dcf4-aab5-4a77-a5af-318e3bd1495e", "content": "#exploit\n1. CVE-2023-40044:\nRCE in Progress WS_FTP Ad Hoc via IIS HTTP Modules\nhttps://www.assetnote.io/resources/research/rce-in-progress-ws-ftp-ad-hoc-via-iis-http-modules-cve-2023-40044\n\n2. CVE-2023-43284:\nD-Link DIR-846 Authenticated RCE\nhttps://github.com/MateusTesser/CVE-2023-43284", "url": "https://t.me/Rootsec_2/1262"}, {"timestamp": "2024-09-27T15:32:21Z", "date_only": false, "value": "2024-09-27T15:32:21+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2023-40044", "field": "timestamps.asserted_at", "uuid": "2d151bb0-cb82-4bc1-b0a1-78f9c800e6b8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-09-27T15:32:21Z", "date_only": false, "value": "2024-09-27T15:32:21+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2023-40044", "field": "timestamps.first_seen_at", "uuid": "2d151bb0-cb82-4bc1-b0a1-78f9c800e6b8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-11-14T00:00:00Z", "date_only": false, "value": "2024-11-14T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2023-40044", "field": "timestamps.last_seen_at", "uuid": "2d151bb0-cb82-4bc1-b0a1-78f9c800e6b8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-11-14T00:00:00Z", "date_only": true, "value": "2024-11-14", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2023-40044", "field": "evidence.0.details.observation_date", "uuid": "2d151bb0-cb82-4bc1-b0a1-78f9c800e6b8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-11-14T00:00:00Z", "date_only": false, "value": "2024-11-14T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2023-40044", "field": "status.status_updated_at", "uuid": "2d151bb0-cb82-4bc1-b0a1-78f9c800e6b8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-12-24T20:35:23.895Z", "date_only": false, "value": "2024-12-24T20:35:23.895752Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971898", "record": "CVE-2023-40044", "field": "creation_timestamp", "uuid": "a503cb0c-788b-43c2-b20e-8f3f305f2d31", "url": "https://feedsin.space/feed/CISAKevBot/items/2971898"}, {"timestamp": "2025-02-03T16:29:04.428Z", "date_only": false, "value": "2025-02-03T16:29:04.428335Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-40044", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-02-03T16:29:04.428Z", "date_only": false, "value": "2025-02-03T16:29:04.428335Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-40044", "record": "FKIE_CVE-2023-40044", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-06T03:13:46Z", "date_only": false, "value": "2025-02-06T03:13:46.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2023-40044", "field": "creation_timestamp", "uuid": "09dff964-213d-4ed0-86e7-27546f80ecb1"}, {"timestamp": "2025-02-23T02:10:47Z", "date_only": false, "value": "2025-02-23T02:10:47.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2023-40044", "field": "creation_timestamp", "uuid": "c1323e08-d172-4d26-bec4-632729faa1fb"}, {"timestamp": "2025-02-23T04:10:56Z", "date_only": false, "value": "2025-02-23T04:10:56.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2023-40044", "field": "creation_timestamp", "uuid": "18487307-73d2-4ec3-bfbb-3365e2464e8b"}, {"timestamp": "2025-03-20T15:34:44.273Z", "date_only": false, "value": "2025-03-20T15:34:44.273648Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3lkszkc62542l", "record": "CVE-2023-40044", "field": "creation_timestamp", "uuid": "616e893a-a8e8-417d-9f8a-c834c9cc69db", "url": "https://bsky.app/profile/qiancx.bsky.social/post/3lkszkc62542l"}, {"timestamp": "2025-03-20T15:34:56.243Z", "date_only": false, "value": "2025-03-20T15:34:56.243862Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3lkszknpevp2t", "record": "CVE-2023-40044", "field": "creation_timestamp", "uuid": "97c853f5-d006-4149-b1c6-d50614fa6b54", "url": "https://bsky.app/profile/kriptabiz.bsky.social/post/3lkszknpevp2t"}, {"timestamp": "2025-10-21T23:05:36.645Z", "date_only": false, "value": "2025-10-21T23:05:36.645Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2023-40044", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:05:36.645Z", "date_only": false, "value": "2025-10-21T23:05:36.645Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-40044", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:32:51Z", "date_only": false, "value": "2025-10-22T00:32:51Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-29VF-J74G-GMFC", "record": "GHSA-29VF-J74G-GMFC", "field": "modified"}, {"timestamp": "2025-10-23T05:45:54Z", "date_only": false, "value": "2025-10-23T05:45:54.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2023/CVE-2023-40044.yaml", "record": "CVE-2023-40044", "field": "creation_timestamp", "uuid": "c1221a74-f755-42ff-838e-bf1a4c9bb2d3", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2023/CVE-2023-40044.yaml"}, {"timestamp": "2025-10-23T21:02:33.112Z", "date_only": false, "value": "2025-10-23T21:02:33.112923Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m3vb25flhp2q", "record": "CVE-2023-40044", "field": "creation_timestamp", "uuid": "1b76255a-94cc-481d-9a10-41ebcbf600a0", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m3vb25flhp2q"}, {"timestamp": "2025-10-23T21:13:01Z", "date_only": false, "value": "2025-10-23T21:13:01.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "record": "CVE-2023-40044", "field": "creation_timestamp", "uuid": "ec67704e-304f-457e-b591-2aedcf8e3640"}, {"timestamp": "2026-02-02T12:26:49.027Z", "date_only": false, "value": "2026-02-02T12:26:49.027688Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3ea914ee-a850-4f6b-913b-b848fe79b325", "record": "CVE-2023-40044", "field": "creation_timestamp", "uuid": "2a631dfb-1f35-4c06-9c55-2c1696bd2b6f", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3ea914ee-a850-4f6b-913b-b848fe79b325"}, {"timestamp": "2026-02-02T12:26:49.027Z", "date_only": false, "value": "2026-02-02T12:26:49.027688Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3ea914ee-a850-4f6b-913b-b848fe79b325", "record": "CVE-2023-40044", "field": "creation_timestamp", "uuid": "93e68bb7-0e42-4322-979c-7569cc166552", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3ea914ee-a850-4f6b-913b-b848fe79b325"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2023-40044", "field": "timestamps.recorded_at", "uuid": "ca1b44fb-f92d-4076-a953-b7a72369ace7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-17T06:15:55.110Z", "date_only": false, "value": "2026-06-17T06:15:55.110", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-40044", "record": "FKIE_CVE-2023-40044", "field": "lastModified"}, {"timestamp": "2026-06-19T12:46:47.612Z", "date_only": false, "value": "2026-06-19T12:46:47.612505Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/42023ff5-c9d7-4fad-bfc2-a6484476fa01", "record": "CVE-2023-40044", "field": "creation_timestamp", "uuid": "85cdfde5-c159-472d-8222-970c991897fe", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/42023ff5-c9d7-4fad-bfc2-a6484476fa01"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2023-40044", "field": "timestamps.recorded_at", "uuid": "15879b92-ea88-4a4d-9c7d-fb0a8ed047c8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:14:11.209Z", "date_only": false, "value": "2026-06-23T11:14:11.209403Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/15879b92-ea88-4a4d-9c7d-fb0a8ed047c8", "record": "CVE-2023-40044", "field": "creation_timestamp", "uuid": "94757ef2-11eb-443f-a884-1376e7b4adc3", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/15879b92-ea88-4a4d-9c7d-fb0a8ed047c8"}, {"timestamp": "2026-06-23T14:05:46.461Z", "date_only": false, "value": "2026-06-23T14:05:46.461194Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8a0c5329-9a98-48a2-86fa-0a69edf6d728", "record": "CVE-2023-40044", "field": "creation_timestamp", "uuid": "6dc71624-2177-47e5-bac6-3f0083bb72b0", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8a0c5329-9a98-48a2-86fa-0a69edf6d728"}, {"timestamp": "2026-06-30T10:22:38.819Z", "date_only": false, "value": "2026-06-30T10:22:38.819689Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1e76b4e7-da20-478b-8e79-4b9ae1a42440", "record": "CVE-2023-40044", "field": "creation_timestamp", "uuid": "c637c34e-39cf-4cac-acb7-8ce01586496a", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1e76b4e7-da20-478b-8e79-4b9ae1a42440"}, {"timestamp": "2026-07-01T07:18:26.770Z", "date_only": false, "value": "2026-07-01T07:18:26.770105Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/2d151bb0-cb82-4bc1-b0a1-78f9c800e6b8", "record": "CVE-2023-40044", "field": "creation_timestamp", "uuid": "aebb5860-c23d-4fd2-b050-23a010167607", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/2d151bb0-cb82-4bc1-b0a1-78f9c800e6b8"}, {"timestamp": "2026-07-01T12:47:07Z", "date_only": false, "value": "2026-07-01T12:47:07+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2023-40044", "field": "timestamps.recorded_at", "uuid": "2d151bb0-cb82-4bc1-b0a1-78f9c800e6b8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-01T20:00:46.790Z", "date_only": false, "value": "2026-09-01T20:00:46.790936Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/121296", "record": "CVE-2023-40044", "field": "creation_timestamp", "uuid": "49d8352d-196e-4dda-a2df-08f2e1be6332", "url": "https://t.me/hacking_Attack/121296"}]}