{"metadata": {"vulnerability": "cve-2023-46604", "count": 465, "kinds": {"milestone": 44, "sighting": 222, "kev": 15, "other": 184}}, "data": [{"timestamp": "2023-05-24T00:00:00Z", "date_only": false, "value": "2023-05-24T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:7247", "record": "RHSA-2023:7247", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2023-07-12T00:00:00Z", "date_only": false, "value": "2023-07-12T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:7247", "record": "RHSA-2023:7247", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2023-07-12T00:00:00Z", "date_only": false, "value": "2023-07-12T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:7247", "record": "RHSA-2023:7247", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2023-07-19T00:00:00Z", "date_only": false, "value": "2023-07-19T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:7247", "record": "RHSA-2023:7247", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2023-08-07T00:00:00Z", "date_only": false, "value": "2023-08-07T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:7247", "record": "RHSA-2023:7247", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-09-14T00:00:00Z", "date_only": false, "value": "2023-09-14T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:7247", "record": "RHSA-2023:7247", "field": "vulnerabilities.7.release_date"}, {"timestamp": "2023-09-19T00:00:00Z", "date_only": false, "value": "2023-09-19T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:7247", "record": "RHSA-2023:7247", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2023-09-19T00:00:00Z", "date_only": false, "value": "2023-09-19T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:7247", "record": "RHSA-2023:7247", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2023-09-28T00:00:00Z", "date_only": false, "value": "2023-09-28T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:7247", "record": "RHSA-2023:7247", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2023-09-29T00:00:00Z", "date_only": false, "value": "2023-09-29T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:7247", "record": "RHSA-2023:7247", "field": "vulnerabilities.5.release_date"}, {"timestamp": "2023-10-06T00:00:00Z", "date_only": false, "value": "2023-10-06T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:7247", "record": "RHSA-2023:7247", "field": "vulnerabilities.5.discovery_date"}, {"timestamp": "2023-10-09T00:00:00Z", "date_only": false, "value": "2023-10-09T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:7247", "record": "RHSA-2023:7247", "field": "vulnerabilities.10.discovery_date"}, {"timestamp": "2023-10-10T00:00:00Z", "date_only": false, "value": "2023-10-10T00:00:00+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2023:7247", "record": "RHSA-2023:7247", "field": "vulnerabilities.10.threats.0.date"}, {"timestamp": "2023-10-10T00:00:00Z", "date_only": false, "value": "2023-10-10T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:7247", "record": "RHSA-2023:7247", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2023-10-10T00:00:00Z", "date_only": false, "value": "2023-10-10T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:7247", "record": "RHSA-2023:7247", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2023-10-12T00:00:00Z", "date_only": false, "value": "2023-10-12T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:7247", "record": "RHSA-2023:7247", "field": "vulnerabilities.8.discovery_date"}, {"timestamp": "2023-10-24T08:55:31.050Z", "date_only": false, "value": "2023-10-24T08:55:31.050Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2023-46604", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-10-27T00:00:00Z", "date_only": false, "value": "2023-10-27T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:6849", "record": "RHSA-2023:6849", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2023-10-27T00:00:00Z", "date_only": false, "value": "2023-10-27T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:6866", "record": "RHSA-2023:6866", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2023-10-27T00:00:00Z", "date_only": false, "value": "2023-10-27T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:6877", "record": "RHSA-2023:6877", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2023-10-27T00:00:00Z", "date_only": false, "value": "2023-10-27T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:6878", "record": "RHSA-2023:6878", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2023-10-27T00:00:00Z", "date_only": false, "value": "2023-10-27T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:6879", "record": "RHSA-2023:6879", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2023-10-27T00:00:00Z", "date_only": false, "value": "2023-10-27T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:7247", "record": "RHSA-2023:7247", "field": "vulnerabilities.12.discovery_date"}, {"timestamp": "2023-10-27T00:00:00Z", "date_only": false, "value": "2023-10-27T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:6849", "record": "RHSA-2023:6849", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-10-27T00:00:00Z", "date_only": false, "value": "2023-10-27T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:6866", "record": "RHSA-2023:6866", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-10-27T00:00:00Z", "date_only": false, "value": "2023-10-27T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:6877", "record": "RHSA-2023:6877", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-10-27T00:00:00Z", "date_only": false, "value": "2023-10-27T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:6878", "record": "RHSA-2023:6878", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-10-27T00:00:00Z", "date_only": false, "value": "2023-10-27T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:6879", "record": "RHSA-2023:6879", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-10-27T00:00:00Z", "date_only": false, "value": "2023-10-27T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:7247", "record": "RHSA-2023:7247", "field": "vulnerabilities.12.release_date"}, {"timestamp": "2023-10-27T14:59:31.046Z", "date_only": false, "value": "2023-10-27T14:59:31.046Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2023-46604", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-10-27T15:15:00Z", "date_only": false, "value": "2023-10-27T15:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2023-46604", "record": "UBUNTU-CVE-2023-46604", "field": "published"}, {"timestamp": "2023-10-27T15:15:14Z", "date_only": false, "value": "2023-10-27T15:15:14Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-CRG9-44H2-XW35", "record": "GHSA-CRG9-44H2-XW35", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-10-27T15:15:14.017Z", "date_only": false, "value": "2023-10-27T15:15:14.017", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-46604", "record": "FKIE_CVE-2023-46604", "field": "published"}, {"timestamp": "2023-10-27T15:15:14.017Z", "date_only": false, "value": "2023-10-27T15:15:14.017", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2023-46604", "record": "GSD-2023-46604", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2023-10-27T15:30:20Z", "date_only": false, "value": "2023-10-27T15:30:20Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-CRG9-44H2-XW35", "record": "GHSA-CRG9-44H2-XW35", "field": "published"}, {"timestamp": "2023-10-27T18:17:07Z", "date_only": false, "value": "2023-10-27T18:17:07.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/73057", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "c27a9813-29a1-41b3-84cd-8234a36cc20f", "content": "\u203c CVE-2023-46604 \u203c\n\nApache ActiveMQ is vulnerable to Remote Code Execution.The vulnerability may allow a remote attacker with network access to a broker to run arbitrary shell commands by manipulating serialized class types in the OpenWire protocol to cause the broker to instantiate\u00c2\u00a0any class on the classpath.\u00c2\u00a0Users are recommended to upgrade to version 5.15.16, 5.16.7, 5.17.6, or 5.18.3, which fixes this issue.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/73057"}, {"timestamp": "2023-10-29T23:00:00Z", "date_only": false, "value": "2023-10-29T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2773", "record": "WID-SEC-W-2023-2773", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-10-29T23:00:00Z", "date_only": false, "value": "2023-10-29T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2773", "record": "WID-SEC-W-2023-2773", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-10-29T23:00:00Z", "date_only": false, "value": "2023-10-29T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2773", "record": "WID-SEC-W-2023-2773", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-10-31T00:00:00Z", "date_only": true, "value": "2023-10-31", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2023-94073", "record": "CNVD-2023-94073", "field": "submitTime"}, {"timestamp": "2023-11-01T20:42:27Z", "date_only": false, "value": "2023-11-01T20:42:27.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/f9c19fe0-d99a-4345-8423-5635b5d8bf1f", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "5d520b7b-5ec1-45c8-9cba-65069dd8126f"}, {"timestamp": "2023-11-02T00:00:00Z", "date_only": false, "value": "2023-11-02T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2023-46604", "field": "timestamps.asserted_at", "uuid": "6dd073cf-6746-4e8e-b441-f61675bbe086", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-02T00:00:00Z", "date_only": false, "value": "2023-11-02T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2023-46604", "field": "timestamps.asserted_at", "uuid": "77892e63-7df0-4c8a-9040-bcbcc1411475", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-02T00:00:00Z", "date_only": true, "value": "2023-11-02", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-46604", "field": "containers.adp.1.metrics.1.other.content.dateAdded"}, {"timestamp": "2023-11-02T00:00:00Z", "date_only": false, "value": "2023-11-02T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2023-46604", "field": "evidence.0.details.added_date", "uuid": "77892e63-7df0-4c8a-9040-bcbcc1411475", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-02T00:00:00Z", "date_only": false, "value": "2023-11-02T00:00:00+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2023:6849", "record": "RHSA-2023:6849", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2023-11-02T00:00:00Z", "date_only": false, "value": "2023-11-02T00:00:00+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2023:6866", "record": "RHSA-2023:6866", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2023-11-02T00:00:00Z", "date_only": false, "value": "2023-11-02T00:00:00+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2023:6877", "record": "RHSA-2023:6877", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2023-11-02T00:00:00Z", "date_only": false, "value": "2023-11-02T00:00:00+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2023:6878", "record": "RHSA-2023:6878", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2023-11-02T00:00:00Z", "date_only": false, "value": "2023-11-02T00:00:00+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2023:6879", "record": "RHSA-2023:6879", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2023-11-02T00:00:00Z", "date_only": false, "value": "2023-11-02T00:00:00+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2023:7247", "record": "RHSA-2023:7247", "field": "vulnerabilities.12.threats.0.date"}, {"timestamp": "2023-11-02T00:00:00Z", "date_only": true, "value": "2023-11-02", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2023-46604", "field": "evidence.0.details.date_added", "uuid": "6dd073cf-6746-4e8e-b441-f61675bbe086", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-02T00:00:00Z", "date_only": false, "value": "2023-11-02T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2023-46604", "field": "timestamps.first_seen_at", "uuid": "6dd073cf-6746-4e8e-b441-f61675bbe086", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-02T00:00:00Z", "date_only": false, "value": "2023-11-02T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2023-46604", "field": "timestamps.first_seen_at", "uuid": "77892e63-7df0-4c8a-9040-bcbcc1411475", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-02T00:00:00Z", "date_only": false, "value": "2023-11-02T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2023-46604", "field": "status.status_updated_at", "uuid": "6dd073cf-6746-4e8e-b441-f61675bbe086", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-02T00:00:00Z", "date_only": false, "value": "2023-11-02T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2023-46604", "field": "status.status_updated_at", "uuid": "77892e63-7df0-4c8a-9040-bcbcc1411475", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-02T00:00:00Z", "date_only": false, "value": "2023-11-02T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-46604", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2023-11-02T05:37:58Z", "date_only": false, "value": "2023-11-02T05:37:58.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/4088", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "ad062c47-902d-41be-a6ad-466c0ed3bd82", "content": "\ud83d\udea8 Urgent: Thousands of internet-accessible ActiveMQ instances are at risk. \n \nHelloKitty ransomware group is actively exploiting a critical Remote Code Execution (RCE) flaw, CVE-2023-46604, in Apache ActiveMQ. \n \nFind details here \u27a1\ufe0f https://thehackernews.com/2023/11/hellokitty-ransomware-group-exploiting.html", "url": "https://t.me/thehackernews/4088"}, {"timestamp": "2023-11-02T06:01:02Z", "date_only": false, "value": "2023-11-02T06:01:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Cyber_Watch_insider/177", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "2e398a14-08fb-4c72-82d8-5a4dc5520c3f", "content": "https://www.rapid7.com/blog/post/2023/11/01/etr-suspected-exploitation-of-apache-activemq-cve-2023-46604/", "url": "https://t.me/Cyber_Watch_insider/177"}, {"timestamp": "2023-11-02T07:33:20Z", "date_only": false, "value": "2023-11-02T07:33:20.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/itsec_news/3587", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "3a02d1e6-66f2-460f-81b4-47c241450691", "content": "\u200b\u26a1\ufe0fHelloKitty \u0432\u0435\u0440\u043d\u0443\u043b\u0430\u0441\u044c: \u0441\u0435\u0440\u0432\u0435\u0440\u0430 Apache ActiveMQ \u043f\u043e\u0434 \u0430\u0442\u0430\u043a\u043e\u0439 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u043e\u0432\n\n\ud83d\udcac \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0435\u0440\u0432\u0438\u0441\u0435 \u043e\u0431\u043c\u0435\u043d\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438 Apache ActiveMQ. \u041e\u0448\u0438\u0431\u043a\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430.\n\n\u041a\u0430\u043a \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u0418\u0411-\u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Rapid7, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u044b\u0442\u0430\u043b\u0438\u0441\u044c \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0442\u0435\u043c \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u0442\u044c \u0432\u044b\u043a\u0443\u043f \u0437\u0430 \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u043a\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439-\u0436\u0435\u0440\u0442\u0432. \u0418\u0437\u0443\u0447\u0438\u0432 \u0437\u0430\u043c\u0435\u0442\u043a\u0443 \u043e \u0432\u044b\u043a\u0443\u043f\u0435 \u0438 \u0438\u043c\u0435\u044e\u0449\u0438\u0435\u0441\u044f \u0434\u0430\u043d\u043d\u044b\u0435, \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u0440\u0438\u043f\u0438\u0441\u0430\u043b\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432\u0443 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u041f\u041e HelloKitty, \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0439 \u043a\u043e\u0434 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0443\u0442\u0435\u043a \u0432 \u0441\u0435\u0442\u044c \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u043e\u043a\u0442\u044f\u0431\u0440\u044f.\n\n\u041e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0432\u0437\u043b\u043e\u043c\u044b \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u043b\u0438\u0441\u044c \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2023-46604 (CVSS 10.0), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 Apache ActiveMQ. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u0440\u0435\u0448\u0435\u043d\u0430 \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0445 ActiveMQ \u0432\u0435\u0440\u0441\u0438\u0439 5.15.16, 5.16.7, 5.17.6, \u0438\u043b\u0438 5.18.3, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u0432 \u043a\u043e\u043d\u0446\u0435 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438:\n\nApache ActiveMQ 5.18.0 \u0434\u043e 5.18.3;\nApache ActiveMQ 5.17.0 \u0434\u043e 5.17.6;\nApache ActiveMQ 5.16.0 \u0434\u043e 5.16.7;\nApache ActiveMQ \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 5.15.16;\nApache ActiveMQ Legacy OpenWire Module \u0441 5.18.0 \u0434\u043e 5.18.3;\nApache ActiveMQ Legacy OpenWire Module \u0441 5.17.0 \u0434\u043e 5.17.6;\nApache ActiveMQ Legacy OpenWire Module \u0441 5.16.0 \u0434\u043e 5.16.7;\nApache ActiveMQ Legacy OpenWire Module \u0441 5.8.0 \u0434\u043e 5.15.16.\n\u041f\u043e\u0441\u043b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, PoC-\u043a\u043e\u0434 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0438 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0434\u0435\u0442\u0430\u043b\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u043e\u0434\u043e\u0432\u0430\u043d\u044b \u0432 \u0441\u0435\u0442\u0438. \u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Rapid7, \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0432 \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u0432\u0448\u0438\u0445 \u0441\u0435\u0442\u044f\u0445 \u00ab\u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0442\u043e\u043c\u0443, \u0447\u0442\u043e \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u0431\u044b \u043e\u0436\u0438\u0434\u0430\u0442\u044c \u043e\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CVE-2023-46604\u00bb.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u043a\u0430\u043d\u0447\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u043e\u043f\u044b\u0442\u043a\u043e\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u0443\u044e \u043c\u0430\u0448\u0438\u043d\u0443 \u0444\u0430\u0439\u043b\u044b \u0441 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u044f\u043c\u0438 M2.png \u0438 M4.png \u0447\u0435\u0440\u0435\u0437 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a Windows (msiexec). \u041e\u0431\u0430 MSI \u0444\u0430\u0439\u043b\u0430 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442 32-\u0431\u0438\u0442\u043d\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 .NET-\u0444\u0430\u0439\u043b \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c dllloader, \u043a\u043e\u0442\u043e\u0440\u044b\u0439, \u0432 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c EncDLL, \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0432 Base64 \u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u0443\u044e\u0449\u0443\u044e \u043a\u0430\u043a \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0435 \u041f\u041e. \u041f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430 \u0438\u0449\u0435\u0442 \u0438 \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0430\u0435\u0442 \u0440\u0430\u0431\u043e\u0442\u0443 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430\u0431\u043e\u0440\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u044f \u043a \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 \u00ab.locked\u00bb.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Shadowserver Foundation, \u043f\u043e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044e \u043d\u0430 1 \u043d\u043e\u044f\u0431\u0440\u044f 2023 \u0433\u043e\u0434\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e 3326 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 ActiveMQ, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043d\u0438\u0445 \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u044b \u0432 \u041a\u0438\u0442\u0430\u0435, \u0421\u0428\u0410, \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438, \u042e\u0436\u043d\u043e\u0439 \u041a\u043e\u0440\u0435\u0435 \u0438 \u0418\u043d\u0434\u0438\u0438. \u0412 \u0441\u0432\u044f\u0437\u0438 \u0441 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 ActiveMQ \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0441\u0435\u0442\u0438 \u043d\u0430 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438\n\n\ud83d\udd14 ITsec NEWS", "url": "https://t.me/itsec_news/3587"}, {"timestamp": "2023-11-02T14:24:42Z", "date_only": false, "value": "2023-11-02T14:24:42.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/5041", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "d17c4593-4cfc-4507-a60a-09c6243ca82a", "content": "\u0411\u043e\u043b\u0435\u0435 3000 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Apache ActiveMQ \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u043a \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\nApache ActiveMQ \u2014 \u044d\u0442\u043e \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0431\u0440\u043e\u043a\u0435\u0440 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 Java \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043c\u0435\u0436\u044a\u044f\u0437\u044b\u043a\u043e\u0432\u044b\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u044b, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f AMQP, MQTT, OpenWire \u0438 STOMP.\n\n\u0411\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0435 \u0440\u0430\u0437\u043d\u043e\u043e\u0431\u0440\u0430\u0437\u043d\u043e\u0433\u043e \u043d\u0430\u0431\u043e\u0440\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438, \u043e\u043d \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0430\u0445, \u0433\u0434\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u043c\u0435\u043d\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0431\u0435\u0437 \u043f\u0440\u044f\u043c\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f CVE-2023-46604 \u0438\u043c\u0435\u0435\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS v3: 10,0 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0442\u0438\u043f\u044b \u043a\u043b\u0430\u0441\u0441\u043e\u0432 \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 OpenWire.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044e Apache\u00a0\u043e\u0442 27 \u043e\u043a\u0442\u044f\u0431\u0440\u044f, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Apache Active MQ \u0438 Legacy OpenWire Module \u0432\u0435\u0440\u0441\u0438\u0438 5.18.x \u0434\u043e 5.18.3, 5.17.x \u0434\u043e 5.17.6, 5.16.x \u0434\u043e 5.16.7 \u0438 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0434\u043e 5.15.16.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u044b\u043b\u0438 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u0432 \u0442\u043e\u0442 \u0436\u0435 \u0434\u0435\u043d\u044c \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u043c \u0432\u0435\u0440\u0441\u0438\u0439 5.15.16, 5.16.7, 5.17.6 \u0438 5.18.3.\n\n\u041d\u043e \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u044d\u0442\u043e, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 ShadowServer\u00a0\u0437\u0430\u0434\u0435\u0442\u0435\u043a\u0442\u0438\u043b\u0438 7249 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0441 ActiveMQ, \u0438\u0437 \u043d\u0438\u0445 3329 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0432\u0435\u0440\u0441\u0438\u044e ActiveMQ, \u0443\u044f\u0437\u0432\u0438\u043c\u0443\u044e \u0434\u043b\u044f CVE-2023-4660, \u043f\u0440\u0438\u0447\u0435\u043c \u0432\u0441\u0435 \u044d\u0442\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f RCE.\n\n\u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 (1400) \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u044b \u0432 \u041a\u0438\u0442\u0430\u0435, \u0437\u0430\u0442\u0435\u043c \u0441\u043b\u0435\u0434\u0443\u044e\u0442 \u0421\u0428\u0410 \u0441 530, \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u044f \u0437\u0430\u043d\u0438\u043c\u0430\u0435\u0442 \u0442\u0440\u0435\u0442\u044c\u0435 \u0441 153, \u0430 \u0418\u043d\u0434\u0438\u044f, \u041d\u0438\u0434\u0435\u0440\u043b\u0430\u043d\u0434\u044b, \u0420\u043e\u0441\u0441\u0438\u044f, \u0424\u0440\u0430\u043d\u0446\u0438\u044f \u0438 \u042e\u0436\u043d\u0430\u044f \u041a\u043e\u0440\u0435\u044f \u0438\u043c\u0435\u044e\u0442 \u043f\u043e 100 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043a\u0430\u0436\u0434\u0430\u044f.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u0440\u043e\u043b\u044c Apache ActiveMQ \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0431\u0440\u043e\u043a\u0435\u0440\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0430\u0445, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f CVE-2023-46604 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u043c \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f\u043c, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0438 \u0433\u043e\u0440\u0438\u0437\u043e\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u0435 \u0432 \u0441\u0435\u0442\u0438.\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f CVE-2023-46604 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b, \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u043a\u0430\u043a \u0431\u0435\u0437\u043e\u0442\u043b\u0430\u0433\u0430\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0438 \u043a\u0440\u0430\u043d\u0435 \u0441\u0440\u043e\u0447\u043d\u0443\u044e \u043c\u0435\u0440\u0443.", "url": "https://t.me/true_secator/5041"}, {"timestamp": "2023-11-02T15:19:46Z", "date_only": false, "value": "2023-11-02T15:19:46.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ctinow/146981", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "9c7a3f43-85bb-407b-a92f-2886999e03fc", "content": "https://ift.tt/MKBP7mi\nSuspected exploitation of Apache ActiveMQ flaw CVE-2023-46604 to install HelloKitty ransomware", "url": "https://t.me/ctinow/146981"}, {"timestamp": "2023-11-02T18:10:02Z", "date_only": false, "value": "2023-11-02T18:10:02.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "caa3345f-4163-4fcd-8e51-be24e017e2ef"}, {"timestamp": "2023-11-02T20:48:31Z", "date_only": false, "value": "2023-11-02T20:48:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/WkCj478u4G58ojIUL87WPLotrcOV3WzYpuImpssFRSo1Uw", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "f63890e3-23ee-49b5-8a8b-afde3a8ab73e"}, {"timestamp": "2023-11-02T23:00:00Z", "date_only": false, "value": "2023-11-02T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2773", "record": "WID-SEC-W-2023-2773", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-11-03T04:00:00Z", "date_only": false, "value": "2023-11-03T04:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1153", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "45b436a4-e18c-4cc2-a2bd-4192925943b4", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1153"}, {"timestamp": "2023-11-03T11:06:13Z", "date_only": false, "value": "2023-11-03T11:06:13Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2023-1778", "record": "OESA-2023-1778", "field": "published"}, {"timestamp": "2023-11-03T11:51:24Z", "date_only": false, "value": "2023-11-03T11:51:24.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/kasperskyb2b/978", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "66f7eb26-2f74-47eb-8a4b-ea15ce434d9b", "content": "\u2699\ufe0f \u0420\u0430\u043d\u0441\u043e\u043c\u0432\u0430\u0440\u0449\u0438\u043a\u0438 \u0432\u0437\u044f\u043b\u0438\u0441\u044c \u0437\u0430 Apache ActiveMQ\n\n\u041d\u0435\u0434\u0430\u0432\u043d\u043e \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0451\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0431\u0440\u043e\u043a\u0435\u0440\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 Apache ActiveMQ (CVE-2023-46604, CVSS 10), \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u0431\u044b\u043b\u0430 \u0432\u0437\u044f\u0442\u0430 \u043d\u0430 \u0432\u043e\u043e\u0440\u0443\u0436\u0435\u043d\u0438\u0435 ransomware-\u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u043e\u0439 HelloKitty. \u041f\u043e\u0441\u043b\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Java.exe, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0449\u0430\u044f ActiveMQ, \u043f\u044b\u0442\u0430\u0435\u0442\u0441\u044f \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438, \u0437\u0430\u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u0434 PNG-\u0444\u0430\u0439\u043b\u044b. \n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u043f\u0440\u043e\u0441\u0442\u043e\u0442\u0443 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u0430 HelloKitty \u044f\u0432\u043d\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0442 \u0434\u0440\u0443\u0433\u0438\u0435 \u0433\u0440\u0443\u043f\u043f\u044b \u2014 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u0443\u044e \u0441\u0435\u0442\u044c \u0437\u0430\u0447\u0435\u043c-\u0442\u043e \u0441\u043c\u043e\u0442\u0440\u044f\u0442 \u0442\u044b\u0441\u044f\u0447\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 ActiveMQ. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 ActiveMQ \u043d\u0443\u0436\u043d\u043e \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u0441\u0440\u043e\u0447\u043d\u043e, \u0430 \u0432 \u0431\u043e\u043b\u0435\u0435 \u0441\u043f\u043e\u043a\u043e\u0439\u043d\u043e\u0439 \u043e\u0431\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u2014 \u0438\u0437\u0443\u0447\u0438\u0442\u044c \u0438 \u0432\u043e\u043f\u043b\u043e\u0442\u0438\u0442\u044c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 Apache \u043f\u043e \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u044e \u0437\u0430\u0449\u0438\u0442\u044b ActiveMQ, \u0432 \u043f\u0435\u0440\u0432\u0443\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c \u0432 \u0447\u0430\u0441\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 @\u041f2\u0422", "url": "https://t.me/kasperskyb2b/978"}, {"timestamp": "2023-11-03T14:30:55Z", "date_only": false, "value": "2023-11-03T14:30:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/5663", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "60ac37e8-2f34-49a8-b0d9-8d2d04aa1772", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-46604\nURL\uff1ahttps://github.com/JaneMandy/ActiveMQ_RCE_Pro_Max\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/5663"}, {"timestamp": "2023-11-03T18:35:37Z", "date_only": false, "value": "2023-11-03T18:35:37.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/xakep_ru/14940", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "b2bde30e-c053-4ab1-bc8c-ba6048cd4b3d", "content": "\u0412\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Apache ActiveMQ\n\n\u041d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438, \u0447\u0442\u043e \u0431\u043e\u043b\u0435\u0435 3000 \u0442\u044b\u0441\u044f\u0447 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Apache ActiveMQ, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442, \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u043f\u0435\u0440\u0435\u0434 \u0441\u0432\u0435\u0436\u0435\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e (CVE-2023-46604). \u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0431\u0430\u0433 \u0443\u0436\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u0435\u0442\u0441\u044f \u0430\u0442\u0430\u043a\u0430\u043c. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043f\u044b\u0442\u0430\u044e\u0442\u0441\u044f \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u0430 HelloKitty.\n\nhttps://xakep.ru/2023/11/03/apache-activemq-rce/", "url": "https://t.me/xakep_ru/14940"}, {"timestamp": "2023-11-05T03:42:35Z", "date_only": false, "value": "2023-11-05T03:42:35.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/crackcodes/4585", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "dc2212c4-9c03-40bf-a78a-593becf7b1ea", "content": "https://system32.ink/apache-activemq-rce-cve-2023-46604-exploit/", "url": "https://t.me/crackcodes/4585"}, {"timestamp": "2023-11-05T03:43:59Z", "date_only": false, "value": "2023-11-05T03:43:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/uT9sUuLzJ7mljLMv83o-xR7L3rBffmKTpZTwj9jnFA3DQA", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "812fd797-6317-4515-b3f2-8653216deb31"}, {"timestamp": "2023-11-05T23:00:00Z", "date_only": false, "value": "2023-11-05T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2773", "record": "WID-SEC-W-2023-2773", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2023-11-06T15:51:49Z", "date_only": false, "value": "2023-11-06T15:51:49.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/apache_activemq_rce_cve_2023_46604.rb", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "c29fa324-740d-47e8-91b3-fe856a9f1a7a", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/apache_activemq_rce_cve_2023_46604.rb"}, {"timestamp": "2023-11-06T18:48:47Z", "date_only": false, "value": "2023-11-06T18:48:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/CkqWcB2-9bV8ckxbIWhMB5p9N1JH4cVPNSmWsfsHUZk6uQ", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "be7db5f7-c8cf-4bca-8a56-248469332753"}, {"timestamp": "2023-11-06T23:00:00Z", "date_only": false, "value": "2023-11-06T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2773", "record": "WID-SEC-W-2023-2773", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2023-11-07T14:50:21Z", "date_only": false, "value": "2023-11-07T14:50:21.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/5054", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "4ea3849f-069a-438b-8b61-3699d856d73f", "content": "\u041f\u043e\u043c\u0438\u043c\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0431\u0430\u0433\u0438 Atlassian Confluence \u0432 \u0430\u043a\u0442\u0438\u0432\u0435 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Apache ActiveMQ RCE, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430 \u0434\u0432\u0435 \u043d\u0435\u0434\u0435\u043b\u0438 \u0434\u043e \u0432\u044b\u0445\u043e\u0434\u0430 \u043f\u0430\u0442\u0447\u0430 \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 0-day.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 ArcticWolf \u0438 Huntress Labs \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 CVE-2023-46604 \u0430\u0442\u0430\u043a\u0438 \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e SparkRAT \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 ActiveMQ \u0435\u0449\u0435 10 \u043e\u043a\u0442\u044f\u0431\u0440\u044f, \u0437\u0430\u0434\u043e\u043b\u0433\u043e \u0434\u043e \u0442\u043e\u0433\u043e, \u043a\u0430\u043a Apache \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c 25 \u043e\u043a\u0442\u044f\u0431\u0440\u044f. \n\n\u0410 \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u0432 \u0441\u0435\u0442\u0438 \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u043e\u0441\u044c \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u00a0\u0431\u043e\u043b\u0435\u0435 9200\u00a0\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Apache ActiveMQ, \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445\u00a0\u0431\u043e\u043b\u0435\u0435 4770\u00a0\u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 CVE-2023-46604 \u0434\u0430\u0436\u0435 \u043f\u043e\u0441\u043b\u0435 \u0432\u044b\u0445\u043e\u0434\u0430 \u043f\u0430\u0442\u0447\u0430, \u043a \u0430\u0442\u0430\u043a\u0430\u043c \u043f\u0440\u0438\u0441\u043e\u0435\u0434\u0438\u043d\u0438\u043b\u0438\u0441\u044c \u0438 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0438.\n\n\u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u043a\u0430\u043a \u0437\u0430\u043c\u0435\u0442\u0438\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Huntress Labs \u0438 Rapid7, \u0431\u044b\u043b\u0438 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u044b \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e HelloKitty, \u0430 \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0438 \u043a \u043d\u0438\u043c \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0438\u0441\u044c TellYouThePass.\n\n\u0427\u0442\u043e \u043d\u0435 \u0443\u0434\u0438\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u0432\u0435\u0434\u044c Apache ActiveMQ \u043f\u0440\u0435\u0438\u043c\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0431\u0440\u043e\u043a\u0435\u0440\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0430\u0445. \n\n\u041f\u043e\u044d\u0442\u043e\u043c\u0443 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0432\u0441\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043e\u0431\u043d\u043e\u0432\u0438\u0432 ActiveMQ \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0439 5.15.16, 5.16.7, 5.17.6 \u0438 5.18.3.", "url": "https://t.me/true_secator/5054"}, {"timestamp": "2023-11-08T00:00:00Z", "date_only": false, "value": "2023-11-08T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0919", "record": "CERTFR-2023-AVI-0919", "field": "last_revision_date"}, {"timestamp": "2023-11-08T00:00:00Z", "date_only": false, "value": "2023-11-08T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0919", "record": "CERTFR-2023-AVI-0919", "field": "initial_release_date"}, {"timestamp": "2023-11-08T00:00:00Z", "date_only": false, "value": "2023-11-08T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0919", "record": "CERTFR-2023-AVI-0919", "field": "revisions.0.revision_date"}, {"timestamp": "2023-11-08T03:49:03Z", "date_only": false, "value": "2023-11-08T03:49:03.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/AactUrH-EIy6JdXWM4VPE9pcjyt1yqOYuT7uQixSUbYBJC0", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "c7c133fd-11dc-4393-b6c8-1987fc389d3d"}, {"timestamp": "2023-11-08T07:52:51Z", "date_only": false, "value": "2023-11-08T07:52:51.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/5720", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "e01c99e8-09dd-48f6-a4b1-3a2d4b5d51f6", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-46604 Apache ActiveMQ RCE exp\nURL\uff1ahttps://github.com/justdoit-cai/CVE-2023-46604-Apache-ActiveMQ-RCE-exp\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/5720"}, {"timestamp": "2023-11-08T10:50:29Z", "date_only": false, "value": "2023-11-08T10:50:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/proxy_bar/1818", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "04798a89-cc81-46b2-9b1c-62eca34f4adf", "content": "CVE-2023-46604 ActiveMQ RCE\nexploit + xml\n\n#activemq", "url": "https://t.me/proxy_bar/1818"}, {"timestamp": "2023-11-08T10:59:01Z", "date_only": false, "value": "2023-11-08T10:59:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/9351", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "cb2b30d8-02cd-437b-9feb-6bef20e8c4c4", "content": "#tools\n#Blue_Team_Techniques\n1. ActiveMQ RCE vulnerability (CVE-2023-46604) verification/exploitation tool\nhttps://github.com/sule01u/CVE-2023-46604\n2. A comprehensive tool that provides an insightful analysis of MS monthly security updates\nhttps://github.com/xaitax/PatchaPalooza", "url": "https://t.me/CyberSecurityTechnologies/9351"}, {"timestamp": "2023-11-08T14:05:09Z", "date_only": false, "value": "2023-11-08T14:05:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/1462", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "f8130e7f-ba1c-466b-91e4-d48248ca3b61", "content": "https://github.com/sule01u/CVE-2023-46604\n#github #exploit", "url": "https://t.me/CNArsenal/1462"}, {"timestamp": "2023-11-09T12:33:27Z", "date_only": false, "value": "2023-11-09T12:33:27+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:6849", "record": "RHSA-2023:6849", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-11-09T12:33:27Z", "date_only": false, "value": "2023-11-09T12:33:27+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2023:6849", "record": "RHSA-2023:6849", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2023-11-09T12:33:27Z", "date_only": false, "value": "2023-11-09T12:33:27+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2023:6849", "record": "RHSA-2023:6849", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-11-09T12:33:28Z", "date_only": false, "value": "2023-11-09T12:33:28+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:6849", "record": "RHSA-2023:6849", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-11-09T13:29:46Z", "date_only": false, "value": "2023-11-09T13:29:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ap_security/199", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "45fb7c12-8c76-4b0a-a5f9-1cb90f72f9a7", "content": "\u2604\ufe0fCVE-2023-46604: Apache ActiveMQ RCE\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0448\u0435\u043b\u043b-\u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0442\u0438\u043f\u044b \u043a\u043b\u0430\u0441\u0441\u043e\u0432 \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 OpenWire\ud83d\udc7a\n\n\ud83d\udce3\u0421\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 PoC:\nhttps://github.com/sule01u/CVE-2023-46604\n\n#cve #rce #exploit", "url": "https://t.me/ap_security/199"}, {"timestamp": "2023-11-09T13:29:46Z", "date_only": false, "value": "2023-11-09T13:29:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ap_security/250", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "059f503d-ae7a-4497-bfb8-d656b04d4a69", "content": "\u2604\ufe0fCVE-2023-46604: Apache ActiveMQ RCE\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0448\u0435\u043b\u043b-\u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0442\u0438\u043f\u044b \u043a\u043b\u0430\u0441\u0441\u043e\u0432 \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 OpenWire\ud83d\udc7a\n\n\ud83d\udce3\u0421\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 PoC:\nhttps://github.com/sule01u/CVE-2023-46604\n\n#cve #rce #exploit", "url": "https://t.me/ap_security/250"}, {"timestamp": "2023-11-09T19:11:07Z", "date_only": false, "value": "2023-11-09T19:11:07+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:6866", "record": "RHSA-2023:6866", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-11-09T19:11:07Z", "date_only": false, "value": "2023-11-09T19:11:07+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2023:6866", "record": "RHSA-2023:6866", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2023-11-09T19:11:07Z", "date_only": false, "value": "2023-11-09T19:11:07+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2023:6866", "record": "RHSA-2023:6866", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-11-09T21:28:13Z", "date_only": false, "value": "2023-11-09T21:28:13+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:6877", "record": "RHSA-2023:6877", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-11-09T21:28:13Z", "date_only": false, "value": "2023-11-09T21:28:13+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2023:6877", "record": "RHSA-2023:6877", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2023-11-09T21:28:13Z", "date_only": false, "value": "2023-11-09T21:28:13+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2023:6877", "record": "RHSA-2023:6877", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-11-09T23:00:00Z", "date_only": false, "value": "2023-11-09T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2773", "record": "WID-SEC-W-2023-2773", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2023-11-09T23:26:04Z", "date_only": false, "value": "2023-11-09T23:26:04+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:6878", "record": "RHSA-2023:6878", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-11-09T23:26:04Z", "date_only": false, "value": "2023-11-09T23:26:04+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2023:6878", "record": "RHSA-2023:6878", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2023-11-09T23:26:04Z", "date_only": false, "value": "2023-11-09T23:26:04+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2023:6878", "record": "RHSA-2023:6878", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-11-09T23:26:41Z", "date_only": false, "value": "2023-11-09T23:26:41+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:6879", "record": "RHSA-2023:6879", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-11-09T23:26:41Z", "date_only": false, "value": "2023-11-09T23:26:41+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2023:6879", "record": "RHSA-2023:6879", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2023-11-09T23:26:41Z", "date_only": false, "value": "2023-11-09T23:26:41+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2023:6879", "record": "RHSA-2023:6879", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-11-10T10:57:44Z", "date_only": false, "value": "2023-11-10T10:57:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/bh_cat/188", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "3672687c-0bfb-4770-8b22-eb7035f28b2b", "content": "\ud83d\udcd5 \u041f\u043e\u0434\u0431\u043e\u0440\u043e\u0447\u043a\u0430 \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e\n\n\u042d\u0442\u043e \u043f\u0440\u043e\u0431\u043d\u0438\u043a.\n\n\ud83d\udca1 F5 BIG-IP Unauth RCE via AJP Smuggling\n\n\u041e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435:\nCVE-2023-46747\n\u0421\u043a\u043e\u0440\u0438\u043d\u0433 CVSS3.x:\n\u270d\ufe0f\u270d\ufe0f\u270d\ufe0f\n\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435:\n- \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c, \u0438\u043c\u0435\u044e\u0449\u0438\u043c \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 BIG-IP \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0440\u0442 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438/\u0438\u043b\u0438 \u0441\u0430\u043c\u043e\u043f\u0438\u0441\u043d\u044b\u0435 \u0430\u0434\u0440\u0435\u0441\u0430, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b.\nPOC\n\ud83c\udf10 \u0421\u0441\u044b\u043b\u043a\u0430\n\ud83c\udf10 \u0421\u0441\u044b\u043b\u043a\u0430\n\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\n\n\n\ud83d\udca1 ActiveMQ Remote Code Execution\n\n\u041e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435:\nCVE-2023-46604\n\u0421\u043a\u043e\u0440\u0438\u043d\u0433 CVSS3.x:\n\u270d\ufe0f\u270d\ufe0f\u270d\ufe0f\u270d\ufe0f\n\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435: \n- \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u0438\u043c\u0435\u044e\u0449\u0435\u043c\u0443 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0431\u0440\u043e\u043a\u0435\u0440\u0443, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438, \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u0443\u044f \u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u0442\u0438\u043f\u0430\u043c\u0438 \u043a\u043b\u0430\u0441\u0441\u043e\u0432 \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 OpenWire, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0431\u0440\u043e\u043a\u0435\u0440 \u0438\u043d\u0441\u0442\u0430\u043d\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u043e\u0439 \u043a\u043b\u0430\u0441\u0441 \u0432 \u043f\u0443\u0442\u0438 \u043a\u043b\u0430\u0441\u0441\u0430.\nPOC\n\ud83c\udf10 \u0421\u0441\u044b\u043b\u043a\u0430\n\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\n\n\ud83d\udca1 \u041f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 UI Cisco IOS XE\n\n\u041e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435:\n- CVE-2023-20198\n\u0421\u043a\u043e\u0440\u0438\u043d\u0433 CVSS3.x: \n\u270d\ufe0f\u270d\ufe0f\u270d\ufe0f\u270d\ufe0f\n\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435:\n- \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0441 \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 15.\nPOC\n\ud83c\udf10 \u0421\u0441\u044b\u043b\u043a\u0430\n\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\n\n\ud83d\udca1 Microsoft Exchange Server Remote Code Execution\n\n\u041e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435:\nCVE-2023-36745\n\u0421\u043a\u043e\u0440\u0438\u043d\u0433 CVSS3.x:\n\u270d\ufe0f\u270d\ufe0f\u270d\ufe0f\n\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435:\n- \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0436\u0435\u0440\u0442\u0432\u044b, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u0440\u043e\u0441\u0442\u043e\u044e \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\nPOC\n\ud83c\udf10 \u0421\u0441\u044b\u043b\u043a\u0430\n\ud83c\udf10 \u0421\u0441\u044b\u043b\u043a\u0430\n\n#poc", "url": "https://t.me/bh_cat/188"}, {"timestamp": "2023-11-12T10:42:46Z", "date_only": false, "value": "2023-11-12T10:42:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/5770", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "fab783f3-eff7-45bf-b339-0832c7643d09", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1a CVE-2023-46604 ActiveMQ RCE vulnerability verification/exploitation tool\nURL\uff1ahttps://github.com/sule01u/CVE-2023-46604\n\n\u6807\u7b7e\uff1a#RCE", "url": "https://t.me/GithubRedTeam/5770"}, {"timestamp": "2023-11-12T12:18:06Z", "date_only": false, "value": "2023-11-12T12:18:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/5771", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "c68f2d9a-d2d0-4ef4-bb28-734b134cabd8", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aThis script leverages CVE-2023046604 (Apache ActiveMQ) to generate a pseudo shell. The vulnerability allows for remote code execution due to unsafe deserialization within the OpenWire protocol.\nURL\uff1ahttps://github.com/duck-sec/CVE-2023-46604-ActiveMQ-RCE-pseudoshell\n\n\u6807\u7b7e\uff1a#RCE", "url": "https://t.me/GithubRedTeam/5771"}, {"timestamp": "2023-11-13T02:40:58Z", "date_only": false, "value": "2023-11-13T02:40:58.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/5778", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "9278b566-e740-4ccc-98cd-4756839096c0", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-46604\u73af\u5883\u590d\u73b0\u5305\nURL\uff1ahttps://github.com/LiritoShawshark/CVE-2023-46604_ActiveMQ_RCE_Recurrence\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/5778"}, {"timestamp": "2023-11-15T14:51:30Z", "date_only": false, "value": "2023-11-15T14:51:30.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thehackernews/4152", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "acabf689-21f6-417b-bb7e-82870f0c5309", "content": "\u26a0\ufe0f New PoC exploit for CVE-2023-46604 flaw in Apache ActiveMQ could let attackers stealthily execute malicious code. \n \nCVSS score: 10.0! Are your servers secure? \n \nLearn more about this critical vulnerability: https://thehackernews.com/2023/11/new-poc-exploit-for-apache-activemq.html", "url": "https://t.me/thehackernews/4152"}, {"timestamp": "2023-11-15T15:58:54Z", "date_only": false, "value": "2023-11-15T15:58:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/KomunitiSiber/1077", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "45306d84-42f0-4469-b20f-548f2b3880fc", "content": "New PoC Exploit for Apache ActiveMQ Flaw Could Let Attackers Fly Under the Radar\nhttps://thehackernews.com/2023/11/new-poc-exploit-for-apache-activemq.html\n\nCybersecurity researchers have demonstrated a new technique that exploits a critical security flaw in Apache ActiveMQ to achieve arbitrary code execution in memory.\nTracked as\u00a0CVE-2023-46604\u00a0(CVSS score: 10.0), the vulnerability is a remote code execution bug that could permit a threat actor to run arbitrary shell commands.\nIt was patched by Apache in ActiveMQ versions 5.15.16, 5.16.7, 5.17.6,", "url": "https://t.me/KomunitiSiber/1077"}, {"timestamp": "2023-11-15T17:07:49Z", "date_only": false, "value": "2023-11-15T17:07:49+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:7247", "record": "RHSA-2023:7247", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-11-15T17:07:49Z", "date_only": false, "value": "2023-11-15T17:07:49+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2023:7247", "record": "RHSA-2023:7247", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2023-11-15T17:07:49Z", "date_only": false, "value": "2023-11-15T17:07:49+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2023:7247", "record": "RHSA-2023:7247", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-11-15T18:25:32Z", "date_only": false, "value": "2023-11-15T18:25:32.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/9_hSQ5H_XCdMIWoxBCsN5onf45I8pzWT1rnfQOk1J6gzkg", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "802cad46-2cb5-468b-abc6-c7c5c25f6141"}, {"timestamp": "2023-11-15T19:23:04Z", "date_only": false, "value": "2023-11-15T19:23:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/5815", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "b662fdd2-d221-47ff-abe9-e91fe2604751", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aPOC repo for CVE-2023-46604\nURL\uff1ahttps://github.com/vjayant93/CVE-2023-46604-POC\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/5815"}, {"timestamp": "2023-11-15T23:00:00Z", "date_only": false, "value": "2023-11-15T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2773", "record": "WID-SEC-W-2023-2773", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2023-11-16T08:00:06Z", "date_only": false, "value": "2023-11-16T08:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/TopCyberTechNews/403", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "5ee05965-8dab-4062-a682-1e322be61f05", "content": "Top Security News for 16/11/2023\n\nNovel espionage tool leveraged by pro-Palestinian hacking operation\nhttps://malware.news/t/novel-espionage-tool-leveraged-by-pro-palestinian-hacking-operation/75720#post_1 \n\nExecuting from Memory Using ActiveMQ CVE-2023-46604\nhttps://www.reddit.com/r/netsec/comments/17vv5rq/executing_from_memory_using_activemq_cve202346604/ \n\nRansomware review: November 2023\nhttps://www.malwarebytes.com/blog/threat-intelligence/2023/11/ransomware-review-november-2023 \n\nISC Stormcast For Thursday, November 16th, 2023 https://isc.sans.edu/podcastdetail/8748, (Thu, Nov 16th)\nhttps://isc.sans.edu/diary/rss/30406 \n\nUpload Additional Files into Active Tasks in ANY.RUN\nhttps://malware.news/t/upload-additional-files-into-active-tasks-in-any-run/75725#post_1 \n\nBolstering economic security.\nhttps://thecyberwire.com/podcasts/caveat/195/notes \n\nNew hospital cyber rules mulled in New York\nhttps://malware.news/t/new-hospital-cyber-rules-mulled-in-new-york/75723#post_1 \n\nMicrosoft unveils expansion of AI for security and security for AI at Microsoft Ignite\nhttps://www.microsoft.com/en-us/security/blog/2023/11/15/microsoft-unveils-expansion-of-ai-for-security-and-security-for-ai-at-microsoft-ignite/ \n\nA Simple Python Redirection Container for Red Team Operations\nhttps://www.reddit.com/r/netsec/comments/17vwpes/a_simple_python_redirection_container_for_red/ \n\nSentinelOne acquires Krebs Stamos Group. Radiant Security raises $15 million. RADICL secures an additional $9 million.\nhttps://thecyberwire.com/newsletters/business-briefing/5/46 \n\n    \nFollow Top Cyber News at https://t.me/TopCyberTechNews\nFeel free to DM me at https://twitter.com/ShayaFeedman", "url": "https://t.me/TopCyberTechNews/403"}, {"timestamp": "2023-11-16T11:53:57Z", "date_only": false, "value": "2023-11-16T11:53:57.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/5091", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "85fdfca0-6c85-49bc-be60-9e5fd83a0b2b", "content": "\u041f\u043e\u044f\u0432\u0438\u0432\u0448\u0438\u0439\u0441\u044f \u043d\u043e\u0432\u044b\u0439 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Apache ActiveMQ \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0441\u0442\u0430\u0432\u0430\u0442\u044c\u0441\u044f \u043d\u0435\u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u043c\u0438.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 VulnCheck \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043d\u043e\u0432\u0443\u044e \u0442\u0435\u0445\u043d\u0438\u043a\u0443, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e CVE-2023-46604\u00a0(\u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS: 10,0) \u0432 Apache ActiveMQ \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043e\u0448\u0438\u0431\u043a\u0430 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 Apache \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 5.15.16, 5.16.7, 5.17.6 \u0438\u043b\u0438 5.18.3, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0445 \u0435\u0449\u0435 \u0432 \u043a\u043e\u043d\u0446\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u043c\u0435\u0441\u044f\u0446\u0430, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442\u00a0\u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430\u043c\u0438 \u0442\u0430\u043a\u0438\u0445 ransomware \u043a\u0430\u043a HelloKitty \u0438 TellYouThePass, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f SparkRAT.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e\u00a0\u043d\u043e\u0432\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c\u00a0VulnCheck, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442\u0441\u044f\u00a0\u043d\u0430 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0439 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u044b\u043b \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442 25 \u043e\u043a\u0442\u044f\u0431\u0440\u044f 2023 \u0433\u043e\u0434\u0430.\n\n\u0412 \u0445\u043e\u0434\u0435 \u0430\u0442\u0430\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f ClassPathXmlApplicationContext, \u0441\u0440\u0435\u0434\u044b Spring \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 \u0432 ActiveMQ, \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 XML-\u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u00a0\u0447\u0435\u0440\u0435\u0437 HTTP \u0438 \u0434\u043e\u0441\u0442\u0438\u0436\u0435\u043d\u0438\u044f RCE \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, VulnCheck \u0441\u043c\u043e\u0433\u043b\u0438 \u043f\u0440\u0438\u0434\u0443\u043c\u0430\u0442\u044c \u0431\u043e\u043b\u0435\u0435 \u0441\u043a\u0440\u044b\u0442\u043d\u044b\u0439 \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0438 \u0434\u0430\u0436\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u043f\u0438\u0440\u0430\u0435\u0442\u0441\u044f \u043d\u0430\u00a0FileSystemXmlApplicationContext\u00a0\u0438 \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u0442 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0435 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0435 SpEL\u00a0\u0432\u043c\u0435\u0441\u0442\u043e \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u0430 init-method, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u0441\u0431\u0440\u043e\u0441\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u043d\u0430 \u0434\u0438\u0441\u043a.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0441\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0432 \u0444\u0430\u0439\u043b\u0435 activemq.log \u043f\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u043e\u0431 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438, \u0447\u0442\u043e \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u043e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0442\u0430\u043a\u0436\u0435 \u043e\u0447\u0438\u0441\u0442\u043a\u0438 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0441\u043b\u0435\u0434\u0430.\n\n\u0422\u0430\u043a \u0447\u0442\u043e \u0442\u0435\u043f\u0435\u0440\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0442\u044c \u0431\u043e\u043b\u0435\u0435 \u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c CVE-2023-46604, \u0432 \u0441\u0432\u044f\u0437\u0438 \u0441 \u0447\u0435\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 ActiveMQ \u0438\u043c\u0435\u0435\u0442 \u043e\u0441\u043e\u0431\u044b\u0439 \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442.", "url": "https://t.me/true_secator/5091"}, {"timestamp": "2023-11-17T02:42:33Z", "date_only": false, "value": "2023-11-17T02:42:33.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/sysodmins/20037", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "0337446f-ea8a-4c68-8969-2e15f8839fda", "content": "\u0421\u043e\u0437\u0434\u0430\u043d \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 Apache ActiveMQ \u2328\ufe0f\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f VulnCheck \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043d\u043e\u0432\u0443\u044e \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2023-46604 (CVSS: 10.0) \u0432 Apache ActiveMQ, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438. Apache \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u043e\u0448\u0438\u0431\u043a\u0443 \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 ActiveMQ 5.15.16, 5.16.7, 5.17.6 \u0438 5.18.3 \u2013 \u0441 \u0442\u0435\u0445 \u043f\u043e\u0440 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0433\u0440\u0443\u043f\u043f\u0430\u043c\u0438 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u042d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 VulnCheck \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u0442 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u0435 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0435 SpEL \u0432\u043c\u0435\u0441\u0442\u043e \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u0430 \u00abinit-method\u00bb \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0438\u0436\u0435\u043d\u0438\u044f \u0442\u0435\u0445 \u0436\u0435 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u043e\u0432 \u0438 \u0434\u0430\u0436\u0435 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043e\u0431\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0448\u0435\u043b\u043b\u0430 (Reverse Shell). \u0422\u0435\u043f\u0435\u0440\u044c, \u043a\u043e\u0433\u0434\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u0430\u0442\u0430\u043a\u0438, \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u0435\u0449\u0435 \u0431\u043e\u043b\u0435\u0435 \u0432\u0430\u0436\u043d\u044b\u043c \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u044b ActiveMQ \ud83d\udda5\n\n\u0422\u0438\u043f\u0438\u0447\u043d\u044b\u0439 \ud83e\udd78 \u0421\u0438\u0441\u0430\u0434\u043c\u0438\u043d", "url": "https://t.me/sysodmins/20037"}, {"timestamp": "2023-11-19T16:28:56Z", "date_only": false, "value": "2023-11-19T16:28:56.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/284", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "af8fffb6-ea8c-49b9-9b94-82a16ca227a3", "content": "#ExploitObserverAlert\n\nCVE-2023-46604\n\nDESCRIPTION: Exploit Observer has 22 entries related to CVE-2023-46604. The Java OpenWire protocol marshaller is vulnerable to Remote Code \nExecution. This vulnerability may allow a remote attacker with network \naccess to either a Java-based OpenWire broker or client to run arbitrary\n shell commands by manipulating serialized class types in the OpenWire \nprotocol to cause either the client or the broker (respectively) to \ninstantiate any class on the classpath.\n\nUsers are recommended to upgrade\n both brokers and clients to version 5.15.16, 5.16.7, 5.17.6, or 5.18.3 \nwhich fixes this issue.\n\nFIRST-EPSS: 0.965740000\nNVD-IS: 5.9\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/284"}, {"timestamp": "2023-11-20T09:42:16Z", "date_only": false, "value": "2023-11-20T09:42:16.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ctinow/150438", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "88159f18-f7dd-442b-be6b-c7613eb10392", "content": "https://ift.tt/Gmbod9z\nCVE-2023-46604 (Apache ActiveMQ) Exploited to Infect Systems With Cryptominers and Rootkits", "url": "https://t.me/ctinow/150438"}, {"timestamp": "2023-11-20T10:18:22Z", "date_only": false, "value": "2023-11-20T10:18:22.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ctinow/150442", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "e11baa6b-875d-4b0c-9a7a-659ae068a484", "content": "https://ift.tt/Gmbod9z\nCVE-2023-46604 (Apache ActiveMQ) Exploited to Infect Systems With Cryptominers and Rootkits", "url": "https://t.me/ctinow/150442"}, {"timestamp": "2023-11-20T15:55:09Z", "date_only": false, "value": "2023-11-20T15:55:09.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/296", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "2b5229ab-61fa-44fd-ba99-6e52cea1a6dd", "content": "#ExploitObserverAlert\n\nCVE-2023-46604\n\nDESCRIPTION: Exploit Observer has 23 entries related to CVE-2023-46604. The Java OpenWire protocol marshaller is vulnerable to Remote Code  Execution. This vulnerability may allow a remote attacker with network  access to either a Java-based OpenWire broker or client to run arbitrary  shell commands by manipulating serialized class types in the OpenWire  protocol to cause either the client or the broker (respectively) to  instantiate any class on the classpath.  Users are recommended to upgrade  both brokers and clients to version 5.15.16, 5.16.7, 5.17.6, or 5.18.3  which fixes this issue.\n\nFIRST-EPSS: 0.965740000\nNVD-IS: 5.9\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/296"}, {"timestamp": "2023-11-20T20:30:48Z", "date_only": false, "value": "2023-11-20T20:30:48.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/BleepingComputer/18917", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "e3162a7d-f2f2-4389-bc3e-cc09b96d00d2", "content": "\u200aKinsing malware exploits Apache ActiveMQ RCE to plant rootkits\n\nThe Kinsing malware operator is actively exploiting the CVE-2023-46604 critical vulnerability in the Apache ActiveMQ open-source message broker to compromise Linux systems. [...]\n\nhttps://www.bleepingcomputer.com/news/security/kinsing-malware-exploits-apache-activemq-rce-to-plant-rootkits/", "url": "https://t.me/BleepingComputer/18917"}, {"timestamp": "2023-11-20T23:00:00Z", "date_only": false, "value": "2023-11-20T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2773", "record": "WID-SEC-W-2023-2773", "field": "document.tracking.revision_history.6.date"}, {"timestamp": "2023-11-22T15:35:26Z", "date_only": false, "value": "2023-11-22T15:35:26.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/df7b7020-9f17-4a3c-9824-1baa4ff67cb1", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "ac266326-2d62-49b7-88f1-e59d7b6d90c5"}, {"timestamp": "2023-11-22T17:05:26Z", "date_only": false, "value": "2023-11-22T17:05:26.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/xakep_ru/15019", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "18acb2aa-4a91-4b7c-9785-d4837854428a", "content": "\u041c\u0430\u043b\u0432\u0430\u0440\u044c Kinsing \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Apache ActiveMQ \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0440\u0443\u0442\u043a\u0438\u0442\u0430\n\n\u041e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u043c\u0430\u043b\u0432\u0430\u0440\u0438 Kinsing \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-46604 \u0432 Apache ActiveMQ \u0434\u043b\u044f \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 Linux-\u0441\u0438\u0441\u0442\u0435\u043c. \u041a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0446\u0435\u043b\u044c\u044e \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u0438\u0435 \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u043d\u044b\u0445 \u043c\u0430\u0439\u043d\u0435\u0440\u043e\u0432 \u043d\u0430 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445.\n\nhttps://xakep.ru/2023/11/22/kinsing-apache-activemq/", "url": "https://t.me/xakep_ru/15019"}, {"timestamp": "2023-11-22T17:59:33Z", "date_only": false, "value": "2023-11-22T17:59:33.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/5118", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "150a322d-5fe9-463a-93bc-324f861748e1", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Trend Micro \u0437\u0430\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u043c\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Apache ActiveMQ \u043f\u043e\u043c\u0438\u043c\u043e \u0431\u0430\u043d\u0434 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 HelloKitty\u00a0\u0438\u00a0TellYouThePass \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u0431\u043e\u0442\u043d\u0435\u0442\u0430 Kinsing.\n\n\u041e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 CVE-2023-46604 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 ActiveMQ \u0434\u043b\u044f \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c Linux \u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u043c\u0430\u0439\u043d\u0435\u0440\u043e\u0432 \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u044b.\n\n\u041e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b\u00a0Kinsing\u00a0\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b \u0442\u0435\u043c, \u0447\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0447\u0430\u0441\u0442\u043e \u0443\u043f\u0443\u0441\u043a\u0430\u044e\u0442 \u0438\u0437 \u0432\u0438\u0434\u0443 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u044b, \u043a\u0430\u043a \u0441\u043b\u0443\u0447\u0430\u0435 \u0441 Log4Shell\u00a0\u0438\u043b\u0438\u00a0Atlassian Confluence RCE.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044e\u0442 \u043c\u0435\u0442\u043e\u0434 ProcessBuilder \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f bash-\u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432 \u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u043d\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0438\u0437 \u0432\u043d\u043e\u0432\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f.\n\n\u041f\u0440\u0435\u0438\u043c\u0443\u0449\u0435\u0441\u0442\u0432\u043e \u043c\u0435\u0442\u043e\u0434\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u043e\u043d \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u041f\u041e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0441\u043b\u043e\u0436\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0438 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0438 \u0441 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u044c\u044e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0438 \u0433\u0438\u0431\u043a\u043e\u0441\u0442\u0438, \u0438\u0437\u0431\u0435\u0433\u0430\u044f \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f.\n\n\u041f\u0440\u0435\u0436\u0434\u0435 \u0447\u0435\u043c \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0441\u0432\u043e\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0434\u043b\u044f \u043c\u0430\u0439\u043d\u0438\u043d\u0433\u0430 \u043a\u0440\u0438\u043f\u0442\u044b, Kinsing \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442 \u043c\u0430\u0448\u0438\u043d\u0443 \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043c\u0430\u0439\u043d\u0435\u0440\u043e\u0432 Monero, \u0443\u043d\u0438\u0447\u0442\u043e\u0436\u0430\u044f \u0432\u0441\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b, crontab \u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0435 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f.\n\n\u041f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e  \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u0441\u0442\u0432\u043e \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e cronjob, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0435\u0442 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044e\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u044f \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u0442 \u0440\u0443\u0442\u043a\u0438\u0442 \u0432 /etc/ld.so.preload.\n\n\u0414\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0440\u0443\u0442\u043a\u0438\u0442\u0430 \u0433\u0430\u0440\u0430\u043d\u0442\u0438\u0440\u0443\u0435\u0442, \u0447\u0442\u043e \u0435\u0433\u043e \u043a\u043e\u0434 \u0431\u0443\u0434\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c\u0441\u044f \u043f\u0440\u0438 \u043a\u0430\u0436\u0434\u043e\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e\u043d \u043e\u0441\u0442\u0430\u043d\u0435\u0442\u0441\u044f \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0441\u043a\u0440\u044b\u0442\u044b\u043c \u0438 \u0442\u0440\u0443\u0434\u043d\u043e\u0443\u0434\u0430\u043b\u044f\u0435\u043c\u044b\u043c.\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0447\u0438\u0441\u043b\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 CVE-2023-46604, \u043f\u0440\u043e\u0433\u0440\u0435\u0441\u0441\u0438\u0432\u043d\u043e \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u0432\u0430\u0435\u0442\u0441\u044f, \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u043e \u043c\u043d\u043e\u0433\u0438\u0445 \u0441\u0435\u043a\u0442\u043e\u0440\u0430\u0445 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u043e\u0439 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0438\u0445 \u0443\u0447\u0430\u0441\u0442\u0438\u044f \u0432 \u0430\u0442\u0430\u043a\u0435 \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043c\u0443\u0434\u0430\u043a\u043e\u0432 \u0438\u0433\u043d\u043e\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u043b\u0438  \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438.", "url": "https://t.me/true_secator/5118"}, {"timestamp": "2023-11-22T22:32:00Z", "date_only": false, "value": "2023-11-22T22:32:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/7koUXiQYjANVreQRymdkTng-drcHtTeg6KyrU5xTB_ps-oE", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "ef3e280e-82d5-41fd-a819-349da1914410"}, {"timestamp": "2023-11-23T00:00:00Z", "date_only": true, "value": "2023-11-23", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2023-46604", "field": "evidence.0.details.due_date", "uuid": "6dd073cf-6746-4e8e-b441-f61675bbe086", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-23T05:01:48Z", "date_only": false, "value": "2023-11-23T05:01:48.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CNArsenal/1569", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "942273fc-45a2-44bb-b4a7-87791c34f244", "content": "https://www.trendmicro.com/en_us/research/23/k/cve-2023-46604-exploited-by-kinsing.html\n\nCVE-2023-46604(Apache ActiveMQ)\u88ab\u5229\u7528\u6765\u611f\u67d3\u5bc6\u7801\u5668\u548cRootkit\u7cfb\u7edf\n#\u65b0\u95fb", "url": "https://t.me/CNArsenal/1569"}, {"timestamp": "2023-11-23T10:58:01Z", "date_only": false, "value": "2023-11-23T10:58:01.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CyberSecurityTechnologies/9449", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "1a564445-e9b4-4b26-a39d-039fb5ca8640", "content": "#Malware_analysis\n1. Diamond Sleet supply chain compromise distributes a modified CyberLink installer\nhttps://www.microsoft.com/en-us/security/blog/2023/11/22/diamond-sleet-supply-chain-compromise-distributes-a-modified-cyberlink-installer\n2. HrServ - malware web shell DLL\nhttps://securelist.com/hrserv-apt-web-shell/111119\n3. CVE-2023-46604 (Apache ActiveMQ) Exploited to Infect Systems With Cryptominers and Rootkits\nhttps://www.trendmicro.com/en_us/research/23/k/cve-2023-46604-exploited-by-kinsing.html", "url": "https://t.me/CyberSecurityTechnologies/9449"}, {"timestamp": "2023-11-23T11:23:59Z", "date_only": false, "value": "2023-11-23T11:23:59.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/Blackhat_Officials/831", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "1e407f1f-6b50-4844-8111-08aeb89190ba", "content": "https://www.trendmicro.com/en_us/research/23/k/cve-2023-46604-exploited-by-kinsing.html\n\nCVE-2023-46604(Apache ActiveMQ)\u88ab\u5229\u7528\u6765\u611f\u67d3\u5bc6\u7801\u5668\u548cRootkit\u7cfb\u7edf\n#\u65b0\u95fb", "url": "https://t.me/Blackhat_Officials/831"}, {"timestamp": "2023-11-25T02:03:40Z", "date_only": false, "value": "2023-11-25T02:03:40.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/561", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "45072c1c-fea1-4011-bc02-97c1a94b019c", "content": "#ExploitObserverAlert\n\nCVE-2023-46604\n\nDESCRIPTION: Exploit Observer has 30 entries related to CVE-2023-46604. The Java OpenWire protocol marshaller is vulnerable to Remote Code  Execution. This vulnerability may allow a remote attacker with network  access to either a Java-based OpenWire broker or client to run arbitrary  shell commands by manipulating serialized class types in the OpenWire  protocol to cause either the client or the broker (respectively) to  instantiate any class on the classpath.  Users are recommended to upgrade  both brokers and clients to version 5.15.16, 5.16.7, 5.17.6, or 5.18.3  which fixes this issue.\n\nFIRST-EPSS: 0.966470000\nNVD-IS: 5.9\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/561"}, {"timestamp": "2023-11-28T13:32:56Z", "date_only": false, "value": "2023-11-28T13:32:56.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/645", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "bfabca09-a9dc-4de8-932b-c87789a8613e", "content": "#ExploitObserverAlert\n\nCVE-2023-46604\n\nDESCRIPTION: Exploit Observer has 97 entries related to CVE-2023-46604. The Java OpenWire protocol marshaller is vulnerable to Remote Code  Execution. This vulnerability may allow a remote attacker with network  access to either a Java-based OpenWire broker or client to run arbitrary  shell commands by manipulating serialized class types in the OpenWire  protocol to cause either the client or the broker (respectively) to  instantiate any class on the classpath.  Users are recommended to upgrade  both brokers and clients to version 5.15.16, 5.16.7, 5.17.6, or 5.18.3  which fixes this issue.\n\nFIRST-EPSS: 0.966470000\nNVD-IS: 5.9\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/645"}, {"timestamp": "2023-11-29T00:00:00Z", "date_only": true, "value": "2023-11-29", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2023-94073", "record": "CNVD-2023-94073", "field": "openTime"}, {"timestamp": "2023-11-29T06:11:47Z", "date_only": false, "value": "2023-11-29T06:11:47.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/4206", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "72552591-1f61-48ee-8d1b-017b661a2cef", "content": "\ud83d\udea8 Apache ActiveMQ's CVE-2023-46604 flaw is under active exploitation by  hackers to distribute two dangerous programs: GoTitan, a Go-based botnet, and PrCtrl Rat, a .NET threat. \n \nRead details: https://thehackernews.com/2023/11/gotitan-botnet-spotted-exploiting.html", "url": "https://t.me/thehackernews/4206"}, {"timestamp": "2023-11-29T06:24:16Z", "date_only": false, "value": "2023-11-29T06:24:16.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/KomunitiSiber/1136", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "229facb1-36f5-4634-921c-65b3134e7013", "content": "GoTitan Botnet Spotted Exploiting Recent Apache ActiveMQ Vulnerability\nhttps://thehackernews.com/2023/11/gotitan-botnet-spotted-exploiting.html\n\nThe recently disclosed critical security flaw impacting Apache ActiveMQ is being actively exploited by threat actors to distribute a new Go-based botnet called\u00a0GoTitan\u00a0as well as a .NET program known as\u00a0PrCtrl Rat\u00a0that's capable of remotely commandeering the infected hosts.\nThe attacks involve the exploitation of a remote code execution bug (CVE-2023-46604, CVSS score: 10.0) that has been\u00a0", "url": "https://t.me/KomunitiSiber/1136"}, {"timestamp": "2023-11-29T06:37:12Z", "date_only": false, "value": "2023-11-29T06:37:12.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/KWy9x43_m_4oS4p8sjBIZiJ2agceiLXJ74W7PzvhYs8QAQ", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "4c5343da-3f58-433e-a48a-82559ba138dc"}, {"timestamp": "2023-11-29T11:59:53Z", "date_only": false, "value": "2023-11-29T11:59:53.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/729", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "8696900f-f214-470e-b5f2-c7bc337587ca", "content": "#ExploitObserverAlert\n\nCVE-2023-46604\n\nDESCRIPTION: Exploit Observer has 98 entries related to CVE-2023-46604. The Java OpenWire protocol marshaller is vulnerable to Remote Code  Execution. This vulnerability may allow a remote attacker with network  access to either a Java-based OpenWire broker or client to run arbitrary  shell commands by manipulating serialized class types in the OpenWire  protocol to cause either the client or the broker (respectively) to  instantiate any class on the classpath.  Users are recommended to upgrade  both brokers and clients to version 5.15.16, 5.16.7, 5.17.6, or 5.18.3  which fixes this issue.\n\nFIRST-EPSS: 0.966470000\nNVD-IS: 5.9\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/729"}, {"timestamp": "2023-11-29T18:38:26Z", "date_only": false, "value": "2023-11-29T18:38:26.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/6009", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "c2b82f1e-f36b-4348-9341-7b33d033f186", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aRepository to exploit CVE-2023-46604 reported for ActiveMQ\nURL\uff1ahttps://github.com/tomasmussi-mulesoft/activemq-cve-2023-46604\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/6009"}, {"timestamp": "2023-11-29T19:53:49Z", "date_only": false, "value": "2023-11-29T19:53:49.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/lG6pt5UtBUCzn-IF2Ytstw8S3_g1FpOFh4eJ9RqNUd8P9lg", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "1fe36503-66f4-4c06-a5f8-ddc3b5dcbf11"}, {"timestamp": "2023-11-30T07:18:49Z", "date_only": false, "value": "2023-11-30T07:18:49.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/790", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "152e53f5-7d12-440b-a065-9f0b2a51edef", "content": "#ExploitObserverAlert\n\nCVE-2023-46604\n\nDESCRIPTION: Exploit Observer has 99 entries related to CVE-2023-46604. The Java OpenWire protocol marshaller is vulnerable to Remote Code  Execution. This vulnerability may allow a remote attacker with network  access to either a Java-based OpenWire broker or client to run arbitrary  shell commands by manipulating serialized class types in the OpenWire  protocol to cause either the client or the broker (respectively) to  instantiate any class on the classpath.  Users are recommended to upgrade  both brokers and clients to version 5.15.16, 5.16.7, 5.17.6, or 5.18.3  which fixes this issue.\n\nFIRST-EPSS: 0.966470000\nNVD-IS: 5.9\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/790"}, {"timestamp": "2023-11-30T09:31:26Z", "date_only": false, "value": "2023-11-30T09:31:26.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/5145", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "2d1f5020-76e4-402b-9d03-d42411b205a7", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 AhnLab \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442, \u0447\u0442\u043e\u00a0\u0441\u0435\u0432\u0435\u0440\u043e\u043a\u043e\u0440\u0435\u0439\u0441\u043a\u0430\u044f \u0410\u0420\u0422 Andariel \u043f\u0440\u0438\u0441\u043e\u0435\u0434\u0438\u043d\u0438\u043b\u0430\u0441\u044c \u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 Apache ActiveMQ \u0447\u0435\u0440\u0435\u0437 CVE-2023-46604 \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u0432 NukeSped \u0438 TigerRat.\n\n\u042f\u0432\u043b\u044f\u044f\u0441\u044c \u043f\u043e\u0434\u0433\u0440\u0443\u043f\u043f\u043e\u0439 Lazarus, \u0445\u0430\u043a\u0435\u0440\u044b \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u044b \u043d\u0430 \u042e\u0436\u043d\u0443\u044e \u041a\u043e\u0440\u0435\u044e \u0441 2008 \u0433\u043e\u0434\u0430, \u0430 \u0432 \u0447\u0438\u0441\u043b\u0435 \u0438\u0445 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0445 \u0446\u0435\u043b\u0435\u0439 - \u043e\u0431\u044a\u0435\u043a\u0442\u044b \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043e\u0431\u043e\u0440\u043e\u043d\u044b, \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438, \u0441\u0443\u0434\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u0438\u044f, \u044d\u043d\u0435\u0440\u0433\u0435\u0442\u0438\u043a\u0438, \u043b\u043e\u0433\u0438\u0441\u0442\u0438\u043a\u0438 \u0438 \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0439, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0430\u0443\u0447\u043d\u044b\u0435 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u0438 IT-\u0441\u0435\u043a\u0442\u043e\u0440.\n\nAndariel \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0444\u0438\u0448\u0438\u043d\u0433, \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0432\u043e\u0434\u043e\u043f\u043e\u0438 \u0438 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a, \u0430 \u0432 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u0445 \u0433\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 Log4Shell \u0438 TeamCity, \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u043b\u0430\u0441\u044c \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b MS-SQL \u0438\u043b\u0438 \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u044f\u043b\u0430 \u0437\u0430\u043a\u043e\u043d\u043d\u044b\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435\u043c.\n\n\u041e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044f \u0430\u0442\u0430\u043a\u0438 \u0433\u0440\u0443\u043f\u043f\u044b Andariel, AhnLab \u0437\u0430\u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0441\u043b\u0435\u0434\u043e\u0432 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 NukeSped \u0432 \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0441\u0438\u0441\u0442\u0435\u043c. \u0414\u043e \u043a\u043e\u043d\u0446\u0430 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u0442\u044c, \u0447\u0442\u043e \u0438\u043c\u0435\u043d\u043d\u043e CVE-2023-46604 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u0435\u043a\u0442\u043e\u0440\u0430, \u0442\u0430\u043a \u0438 \u043d\u0435 \u0443\u0434\u0430\u043b\u043e\u0441\u044c, \u0430 \u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u0435\u043c\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u043f\u043e\u043c\u0438\u043c\u043e \u043f\u0440\u043e\u0447\u0435\u0433\u043e \u0431\u044b\u043b\u0430 \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043d\u0430 HelloKitty.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u043e, \u0447\u0442\u043e \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0430\u0442\u0430\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u043a\u043b\u0430\u0441\u0441\u0430 Java, \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u043c\u044b\u0439 \u0432 \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u043c \u043e\u0442\u0447\u0435\u0442\u0435 Huntress, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043a \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u043c \u0438\u0442\u043e\u0433\u0435 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u043b \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u043f\u043e\u043b\u0435\u0437\u043d\u0443\u044e \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0432 \u0441\u0440\u0435\u0434\u0430\u0445 Windows \u0438\u043b\u0438 Linux. \u0422\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 Stager CobaltStrike \u0438 Metasploit Meterpreter.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0432 \u043e\u0442\u0447\u0435\u0442\u0435 Huntress \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u043b\u043e\u0441\u044c \u043a\u0430\u043a\u043e\u0435-\u043b\u0438\u0431\u043e \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e, \u0432 \u043e\u0434\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u043f\u043e\u043b\u0435\u0437\u043d\u0430\u044f \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0430 \u0441 hxxp://27.102.128[.]152:8098/bit[.]ico, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u043e\u0432\u0430\u043b URL-\u0430\u0434\u0440\u0435\u0441\u0443, \u0441 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0442\u0430\u043a\u0436\u0435 \u0431\u044b\u043b \u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043d TigerRat.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0439 NukeSped \u2014 \u044d\u0442\u043e \u0431\u044d\u043a\u0434\u043e\u0440, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u043c\u0430\u043d\u0434, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0445 \u043e\u0442 \u04212, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0441\u0435\u0432\u0435\u0440\u043e\u043a\u043e\u0440\u0435\u0439\u0441\u043a\u0438\u043c\u0438 \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Andariel, \u0434\u043b\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043e\u0431\u0440\u0430\u0437\u0435\u0446 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u043b \u0442\u043e\u043b\u044c\u043a\u043e \u0442\u0440\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b: \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0444\u0430\u0439\u043b\u043e\u0432, \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434 \u0438 \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432, \u0432 \u043e\u0442\u043b\u0438\u0447\u0438\u0435 \u043e\u0442 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445  \u0432\u0435\u0440\u0441\u0438\u0439, \u0438\u043c\u0435\u044e\u0449\u0438\u0445 \u0448\u0438\u0440\u043e\u043a\u0438\u0439 \u043d\u0430\u0431\u043e\u0440 \u043a\u043e\u043c\u0430\u043d\u0434.\n\n\u041a\u0430\u043a \u0438 \u0432 \u0434\u0440\u0443\u0433\u0438\u0445 \u0442\u0438\u043f\u0438\u0447\u043d\u044b\u0445 \u0442\u0438\u043f\u0430\u0445 NukeSped, \u0432\u0441\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0430\u0434\u0440\u0435\u0441\u0430 API \u0438 \u0441\u0442\u0440\u043e\u043a\u0438 \u0448\u0438\u0444\u0440\u0443\u044e\u0442\u0441\u044f, \u0437\u0430\u0442\u0435\u043c \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f.\u00a0\u041c\u0435\u0442\u043e\u0434 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 1-\u0431\u0430\u0439\u0442\u043e\u0432\u044b\u0439 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c XOR \u0441\u043e \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435\u043c \u043a\u043b\u044e\u0447\u0430 0xA1.\u00a0\u041f\u043e\u043c\u0438\u043c\u043e 0xA1, \u0432 \u043f\u0440\u043e\u0448\u043b\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u0430\u0442\u0430\u043a \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u043a\u043b\u044e\u0447\u0435\u0439 0x97 \u0438 0xAB.\n\n\u0412\u0441\u0435 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0438 \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438, \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u0435 \u0432 \u0445\u043e\u0434\u0435 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0410\u0420\u0422 - \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u044b \u0432 \u043e\u0442\u0447\u0435\u0442\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0430 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0438\u0445 \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442, \u0447\u0442\u043e \u0445\u043e\u0442\u044f \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e CVE-2023-46604 \u043f\u0440\u043e\u0448\u043b\u043e \u043d\u0435 \u0442\u0430\u043a \u043c\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438, \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0432 \u0441\u0442\u043e\u043b\u044c \u043a\u043e\u0440\u043e\u0442\u043a\u0439\u0438 \u0441\u0440\u043e\u043a \u0441\u0442\u0430\u043d\u043e\u0432\u044f\u0442\u0441\u044f \u043e\u0431\u044a\u0435\u043a\u0442\u0430\u043c\u0438 \u0430\u0442\u0430\u043a, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0438\u043d\u0441\u043f\u0438\u0440\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0410\u0420\u0422.", "url": "https://t.me/true_secator/5145"}, {"timestamp": "2023-11-30T19:35:02Z", "date_only": false, "value": "2023-11-30T19:35:02.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/826", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "fdda3710-1547-46a6-93c5-c0ef76f8bc7c", "content": "#ExploitObserverAlert\n\nCVE-2023-46604\n\nDESCRIPTION: Exploit Observer has 100 entries related to CVE-2023-46604. The Java OpenWire protocol marshaller is vulnerable to Remote Code  Execution. This vulnerability may allow a remote attacker with network  access to either a Java-based OpenWire broker or client to run arbitrary  shell commands by manipulating serialized class types in the OpenWire  protocol to cause either the client or the broker (respectively) to  instantiate any class on the classpath.  Users are recommended to upgrade  both brokers and clients to version 5.15.16, 5.16.7, 5.17.6, or 5.18.3  which fixes this issue.\n\nFIRST-EPSS: 0.966470000\nNVD-IS: 5.9\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/826"}, {"timestamp": "2023-12-01T07:46:40Z", "date_only": false, "value": "2023-12-01T07:46:40.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/839", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "ff34c93e-f59e-4db9-9ae1-b69654e3f975", "content": "#ExploitObserverAlert\n\nCVE-2023-46604\n\nDESCRIPTION: Exploit Observer has 101 entries related to CVE-2023-46604. The Java OpenWire protocol marshaller is vulnerable to Remote Code  Execution. This vulnerability may allow a remote attacker with network  access to either a Java-based OpenWire broker or client to run arbitrary  shell commands by manipulating serialized class types in the OpenWire  protocol to cause either the client or the broker (respectively) to  instantiate any class on the classpath.  Users are recommended to upgrade  both brokers and clients to version 5.15.16, 5.16.7, 5.17.6, or 5.18.3  which fixes this issue.\n\nFIRST-EPSS: 0.968050000\nNVD-IS: 5.9\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/839"}, {"timestamp": "2023-12-02T01:26:35Z", "date_only": false, "value": "2023-12-02T01:26:35.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/874", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "d928baf4-ab01-47e2-a9a1-c1d73e1c92eb", "content": "#ExploitObserverAlert\n\nCVE-2023-46604\n\nDESCRIPTION: Exploit Observer has 102 entries related to CVE-2023-46604. The Java OpenWire protocol marshaller is vulnerable to Remote Code  Execution. This vulnerability may allow a remote attacker with network  access to either a Java-based OpenWire broker or client to run arbitrary  shell commands by manipulating serialized class types in the OpenWire  protocol to cause either the client or the broker (respectively) to  instantiate any class on the classpath.  Users are recommended to upgrade  both brokers and clients to version 5.15.16, 5.16.7, 5.17.6, or 5.18.3  which fixes this issue.\n\nFIRST-EPSS: 0.968050000\nNVD-IS: 5.9\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/874"}, {"timestamp": "2023-12-03T11:35:49Z", "date_only": false, "value": "2023-12-03T11:35:49.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/922", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "bfa5b3f8-ae77-411b-8a59-d8bee84bd093", "content": "#ExploitObserverAlert\n\nCVE-2023-46604\n\nDESCRIPTION: Exploit Observer has 96 entries related to CVE-2023-46604. The Java OpenWire protocol marshaller is vulnerable to Remote Code  Execution. This vulnerability may allow a remote attacker with network  access to either a Java-based OpenWire broker or client to run arbitrary  shell commands by manipulating serialized class types in the OpenWire  protocol to cause either the client or the broker (respectively) to  instantiate any class on the classpath.  Users are recommended to upgrade  both brokers and clients to version 5.15.16, 5.16.7, 5.17.6, or 5.18.3  which fixes this issue.\n\nFIRST-EPSS: 0.968050000\nNVD-IS: 5.9\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/922"}, {"timestamp": "2023-12-04T12:23:11Z", "date_only": false, "value": "2023-12-04T12:23:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/pt_soft/171", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "f1c6bcfc-85dd-46a4-be96-a61d19e98c77", "content": "\ud83d\udca3 PoC in GitHub\n\n\ud83d\udcbb \u041e\u0433\u0440\u043e\u043c\u043d\u0430\u044f \u0430\u0432\u0442\u043e-\u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0435\u043c\u0430\u044f \u043a\u043e\u043b\u043b\u0435\u043a\u0446\u0438\u044f PoC. \u041f\u043e \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0443 \u043e\u0447\u0435\u043d\u044c \u0443\u0434\u043e\u0431\u043d\u044b\u0439 \u043f\u043e\u0438\u0441\u043a\u043e\u0432\u0438\u043a \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432.\n\n\u041f\u043e\u0438\u0441\u043a \u043f\u043e \u043d\u043e\u043c\u0435\u0440\u0443 CVE:\ncurl 'https://poc-in-github.motikan2010.net/api/v1/?cve_id=CVE-2023-46604' | jq\n\n\u0412 \u0434\u0430\u043d\u043d\u043e\u043c \u043f\u0440\u0438\u043c\u0435\u0440\u0435 \u0441\u0432\u0435\u0436\u0430\u044f RCE \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Apache ActiveMQ. \u041f\u043e\u043b\u0443\u0447\u0430\u0435\u043c \u0443\u0434\u043e\u0431\u043d\u044b\u0439 JSON \u0432\u044b\u0432\u043e\u0434 \u043d\u0430 \u0432\u0441\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430\n\n{\n      \"id\": \"725243332\",\n      \"cve_id\": \"CVE-2023-46604\",\n      \"name\": \"activemq-cve-2023-46604\",\n      \"owner\": \"tomasmussi-mulesoft\",\n      \"full_name\": \"tomasmussi-mulesoft/activemq-cve-2023-46604\",\n      \"html_url\": \"https://github.com/tomasmussi-mulesoft/activemq-cve-2023-46604\",\n      \"description\": \"Repository to exploit CVE-2023-46604 reported for ActiveMQ\",\n      \"stargazers_count\": \"0\",\n      \"vuln_description\": \"Apache ActiveMQ is vulnerable to Remote Code Execution.The vulnerability may allow a remote attacker with network access to a broker to run arbitrary shell commands by manipulating serialized class types in the OpenWire protocol to cause the broker to instantiate\u00a0any class on the classpath.\u00a0\\n\\nUsers are recommended to upgrade to version 5.15.16, 5.16.7, 5.17.6, or 5.18.3, which fixes this issue.\",\n      \"created_at\": \"2023-11-30 03:30:02\",\n      \"updated_at\": \"2023-11-30 03:30:02\",\n      \"pushed_at\": \"2023-11-30 03:30:02\",\n      \"inserted_at\": \"2023-11-30 09:37:18\"\n    }\n\n\u041a\u0430\u043a \u0432\u043e\u0434\u0438\u0442\u0441\u044f, \u043f\u0440\u0438\u043a\u0440\u0443\u0442\u0438\u043b \u043a \u0431\u043e\u0442\u0443:\n\n!poc CVE-2023-46604\n\n\ud83d\udcbb GitHub\n\ud83d\udcbb Home\n\n#poc #github #exploit #cve\n\n\u2708\ufe0f // Pentest HaT \ud83c\udfa9", "url": "https://t.me/pt_soft/171"}, {"timestamp": "2023-12-07T23:00:00Z", "date_only": false, "value": "2023-12-07T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2773", "record": "WID-SEC-W-2023-2773", "field": "document.tracking.revision_history.7.date"}, {"timestamp": "2023-12-09T19:28:42Z", "date_only": false, "value": "2023-12-09T19:28:42.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/6125", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "b32bdd4f-86cb-48ae-a001-5d7cb0cc853d", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aExploit for CVE-2023-46604\nURL\uff1ahttps://github.com/mrpentst/CVE-2023-46604\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/6125"}, {"timestamp": "2023-12-10T16:58:02Z", "date_only": false, "value": "2023-12-10T16:58:02.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1660", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "2706cd6a-cedf-4a73-a149-285b01039a7e", "content": "#ExploitObserverAlert\n\nCVE-2023-46604\n\nDESCRIPTION: Exploit Observer has 102 entries related to CVE-2023-46604. The Java OpenWire protocol marshaller is vulnerable to Remote Code  Execution. This vulnerability may allow a remote attacker with network  access to either a Java-based OpenWire broker or client to run arbitrary  shell commands by manipulating serialized class types in the OpenWire  protocol to cause either the client or the broker (respectively) to  instantiate any class on the classpath.  Users are recommended to upgrade  both brokers and clients to version 5.15.16, 5.16.7, 5.17.6, or 5.18.3  which fixes this issue.\n\nFIRST-EPSS: 0.968050000\nNVD-IS: 5.9\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/1660"}, {"timestamp": "2023-12-12T01:39:05Z", "date_only": false, "value": "2023-12-12T01:39:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1788", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "a9c29888-a606-4642-bd12-075be23c7ff9", "content": "#ExploitObserverAlert\n\nCVE-2023-46604\n\nDESCRIPTION: Exploit Observer has 102 entries related to CVE-2023-46604. The Java OpenWire protocol marshaller is vulnerable to Remote Code  Execution. This vulnerability may allow a remote attacker with network  access to either a Java-based OpenWire broker or client to run arbitrary  shell commands by manipulating serialized class types in the OpenWire  protocol to cause either the client or the broker (respectively) to  instantiate any class on the classpath.  Users are recommended to upgrade  both brokers and clients to version 5.15.16, 5.16.7, 5.17.6, or 5.18.3  which fixes this issue.\n\nFIRST-EPSS: 0.968050000\nNVD-IS: 5.9\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/1788"}, {"timestamp": "2023-12-13T01:20:53.034Z", "date_only": false, "value": "2023-12-13T01:20:53.034310Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-46604", "record": "GSD-2023-46604", "field": "gsd.osvSchema.modified"}, {"timestamp": "2023-12-13T15:09:54Z", "date_only": false, "value": "2023-12-13T16:09:54+01:00", "kind": "other", "label": "Discovery date", "source": "csaf_ox \u00b7 OXAS-ADV-2024-0001", "record": "OXAS-ADV-2024-0001", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2023-12-13T15:17:30Z", "date_only": false, "value": "2023-12-13T16:17:30+01:00", "kind": "other", "label": "Discovery date", "source": "csaf_ox \u00b7 OXAS-ADV-2024-0001", "record": "OXAS-ADV-2024-0001", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2023-12-14T14:59:58Z", "date_only": false, "value": "2023-12-14T14:59:58.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/eIAKKKujGGX1YtMrhCJdc0NGCUPUvr8Sx3WcOruhN7yC3w", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "69ca2e59-e3fc-4bf4-8b1b-fba3817a7bc4"}, {"timestamp": "2023-12-16T12:06:44Z", "date_only": false, "value": "2023-12-16T12:06:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/6204", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "e4fe2c77-e075-4cbc-a85c-e32bf62f3de0", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aResearch on CVE-2021-44228 and CVE-2023-46604\nURL\uff1ahttps://github.com/dcm2406/CVELab\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/6204"}, {"timestamp": "2023-12-16T15:14:15Z", "date_only": false, "value": "2023-12-16T15:14:15.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1834", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "c34cdaf9-7a83-448e-9bd5-345bdf08c24e", "content": "#ExploitObserverAlert\n\nCVE-2023-46604\n\nDESCRIPTION: Exploit Observer has 102 entries related to CVE-2023-46604. The Java OpenWire protocol marshaller is vulnerable to Remote Code  Execution. This vulnerability may allow a remote attacker with network  access to either a Java-based OpenWire broker or client to run arbitrary  shell commands by manipulating serialized class types in the OpenWire  protocol to cause either the client or the broker (respectively) to  instantiate any class on the classpath.  Users are recommended to upgrade  both brokers and clients to version 5.15.16, 5.16.7, 5.17.6, or 5.18.3  which fixes this issue.\n\nFIRST-EPSS: 0.968050000\nNVD-IS: 5.9\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/1834"}, {"timestamp": "2023-12-21T18:27:16Z", "date_only": false, "value": "2023-12-21T18:27:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/6266", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "d534131e-9388-48bd-90d8-4c797e5ff051", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aInstructions for exploiting vulnerabilities CVE-2021-44228 and CVE-2023-46604\nURL\uff1ahttps://github.com/dcm2406/CVE-Lab\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/6266"}, {"timestamp": "2023-12-22T00:00:00Z", "date_only": false, "value": "2023-12-22T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-1055", "record": "CERTFR-2023-AVI-1055", "field": "last_revision_date"}, {"timestamp": "2023-12-22T00:00:00Z", "date_only": false, "value": "2023-12-22T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-1055", "record": "CERTFR-2023-AVI-1055", "field": "initial_release_date"}, {"timestamp": "2023-12-22T00:00:00Z", "date_only": false, "value": "2023-12-22T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-1055", "record": "CERTFR-2023-AVI-1055", "field": "revisions.0.revision_date"}, {"timestamp": "2023-12-23T08:43:25Z", "date_only": false, "value": "2023-12-23T08:43:25.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/6275", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "b301ef9f-b01a-4f62-815d-6152bc6c4006", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-46604 - ApacheMQ Version 5.15.5 Vulnerability  Machine: Broker\nURL\uff1ahttps://github.com/Mudoleto/Broker_ApacheMQ\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/6275"}, {"timestamp": "2023-12-29T00:00:00Z", "date_only": false, "value": "2023-12-29T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-1062", "record": "CERTFR-2023-AVI-1062", "field": "last_revision_date"}, {"timestamp": "2023-12-29T00:00:00Z", "date_only": false, "value": "2023-12-29T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-1062", "record": "CERTFR-2023-AVI-1062", "field": "initial_release_date"}, {"timestamp": "2023-12-29T00:00:00Z", "date_only": false, "value": "2023-12-29T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-1062", "record": "CERTFR-2023-AVI-1062", "field": "revisions.0.revision_date"}, {"timestamp": "2024-01-09T07:50:29Z", "date_only": false, "value": "2024-01-09T08:50:29+01:00", "kind": "other", "label": "Discovery date", "source": "csaf_ox \u00b7 OXAS-ADV-2024-0001", "record": "OXAS-ADV-2024-0001", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2024-01-09T07:55:58Z", "date_only": false, "value": "2024-01-09T08:55:58+01:00", "kind": "other", "label": "Discovery date", "source": "csaf_ox \u00b7 OXAS-ADV-2024-0001", "record": "OXAS-ADV-2024-0001", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2024-01-10T23:00:00Z", "date_only": false, "value": "2024-01-10T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2773", "record": "WID-SEC-W-2023-2773", "field": "document.tracking.revision_history.8.date"}, {"timestamp": "2024-01-14T16:41:59Z", "date_only": false, "value": "2024-01-14T16:41:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/google/tsunami-security-scanner-plugins/tree/master/community/detectors/apache_activemq_cve_2023_46604", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "7bc7049e-85b0-4418-af99-dca21ac9f925", "url": "https://github.com/google/tsunami-security-scanner-plugins/tree/master/community/detectors/apache_activemq_cve_2023_46604"}, {"timestamp": "2024-01-16T23:00:00Z", "date_only": false, "value": "2024-01-16T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0106", "record": "WID-SEC-W-2024-0106", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-01-16T23:00:00Z", "date_only": false, "value": "2024-01-16T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0123", "record": "WID-SEC-W-2024-0123", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-01-16T23:00:00Z", "date_only": false, "value": "2024-01-16T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0124", "record": "WID-SEC-W-2024-0124", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-01-16T23:00:00Z", "date_only": false, "value": "2024-01-16T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0106", "record": "WID-SEC-W-2024-0106", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-01-16T23:00:00Z", "date_only": false, "value": "2024-01-16T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0123", "record": "WID-SEC-W-2024-0123", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-01-16T23:00:00Z", "date_only": false, "value": "2024-01-16T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0124", "record": "WID-SEC-W-2024-0124", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-01-16T23:00:00Z", "date_only": false, "value": "2024-01-16T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0106", "record": "WID-SEC-W-2024-0106", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-01-16T23:00:00Z", "date_only": false, "value": "2024-01-16T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0123", "record": "WID-SEC-W-2024-0123", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-01-16T23:00:00Z", "date_only": false, "value": "2024-01-16T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0124", "record": "WID-SEC-W-2024-0124", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-01-16T23:00:00Z", "date_only": false, "value": "2024-01-16T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0106", "record": "WID-SEC-W-2024-0106", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-01-16T23:00:00Z", "date_only": false, "value": "2024-01-16T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0124", "record": "WID-SEC-W-2024-0124", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-01-22T16:55:39Z", "date_only": false, "value": "2024-01-22T16:55:39.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/4434", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "2c235cef-762d-49b4-8533-ec8869fe33a3", "content": "Hackers Feast on Unpatched ActiveMQ!  CVE-2023-46604, a critical remote code execution flaw, is back in the spotlight. \n \nLearn more: https://thehackernews.com/2024/01/apache-activemq-flaw-exploited-in-new.html \n \nUpdate your Apache ASAP or risk ransomware, rootkits, and botnets.", "url": "https://t.me/thehackernews/4434"}, {"timestamp": "2024-01-22T16:59:24Z", "date_only": false, "value": "2024-01-22T16:59:24.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/tengkorakcybercrewz/314", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "ec3d9964-96dc-4c52-be95-ebdc09818457", "content": "Hackers Feast on Unpatched ActiveMQ!  CVE-2023-46604, a critical remote code execution flaw, is back in the spotlight. \n \nLearn more: https://thehackernews.com/2024/01/apache-activemq-flaw-exploited-in-new.html \n \nUpdate your Apache ASAP or risk ransomware, rootkits, and botnets.", "url": "https://t.me/tengkorakcybercrewz/314"}, {"timestamp": "2024-01-22T16:59:24Z", "date_only": false, "value": "2024-01-22T16:59:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/tengkorakcybercrewz/3257", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "51ac71a2-43fd-46ed-b740-0a9642eb05fe", "content": "Hackers Feast on Unpatched ActiveMQ!  CVE-2023-46604, a critical remote code execution flaw, is back in the spotlight. \n \nLearn more: https://thehackernews.com/2024/01/apache-activemq-flaw-exploited-in-new.html \n \nUpdate your Apache ASAP or risk ransomware, rootkits, and botnets.", "url": "https://t.me/tengkorakcybercrewz/3257"}, {"timestamp": "2024-01-24T09:38:36Z", "date_only": false, "value": "2024-01-24T10:38:36+01:00", "kind": "other", "label": "Discovery date", "source": "csaf_ox \u00b7 OXAS-ADV-2024-0001", "record": "OXAS-ADV-2024-0001", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2024-01-29T00:00:00Z", "date_only": false, "value": "2024-01-29T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_sick \u00b7 SCA-2024-0001", "record": "SCA-2024-0001", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-01-29T00:00:00Z", "date_only": false, "value": "2024-01-29T00:00:00.000Z", "kind": "other", "label": "Date", "source": "csaf_sick \u00b7 SCA-2024-0001", "record": "SCA-2024-0001", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2024-01-29T00:00:00Z", "date_only": false, "value": "2024-01-29T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_sick \u00b7 SCA-2024-0001", "record": "SCA-2024-0001", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-01-29T00:00:00Z", "date_only": false, "value": "2024-01-29T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_sick \u00b7 SCA-2024-0001", "record": "SCA-2024-0001", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-01-29T23:00:00Z", "date_only": false, "value": "2024-01-29T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2773", "record": "WID-SEC-W-2023-2773", "field": "document.tracking.revision_history.9.date"}, {"timestamp": "2024-02-01T12:36:07Z", "date_only": false, "value": "2024-02-01T13:36:07+01:00", "kind": "other", "label": "Date", "source": "csaf_ox \u00b7 OXAS-ADV-2024-0001", "record": "OXAS-ADV-2024-0001", "field": "vulnerabilities.3.remediations.0.date"}, {"timestamp": "2024-02-02T00:00:00Z", "date_only": false, "value": "2024-02-02T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0090", "record": "CERTFR-2024-AVI-0090", "field": "last_revision_date"}, {"timestamp": "2024-02-02T00:00:00Z", "date_only": false, "value": "2024-02-02T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0090", "record": "CERTFR-2024-AVI-0090", "field": "initial_release_date"}, {"timestamp": "2024-02-02T00:00:00Z", "date_only": false, "value": "2024-02-02T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0090", "record": "CERTFR-2024-AVI-0090", "field": "revisions.0.revision_date"}, {"timestamp": "2024-02-02T08:50:15Z", "date_only": false, "value": "2024-02-02T09:50:15+01:00", "kind": "other", "label": "Date", "source": "csaf_ox \u00b7 OXAS-ADV-2024-0001", "record": "OXAS-ADV-2024-0001", "field": "vulnerabilities.2.remediations.0.date"}, {"timestamp": "2024-02-02T08:56:42Z", "date_only": false, "value": "2024-02-02T09:56:42+01:00", "kind": "other", "label": "Date", "source": "csaf_ox \u00b7 OXAS-ADV-2024-0001", "record": "OXAS-ADV-2024-0001", "field": "vulnerabilities.1.remediations.0.date"}, {"timestamp": "2024-02-05T08:45:21Z", "date_only": false, "value": "2024-02-05T09:45:21+01:00", "kind": "other", "label": "Date", "source": "csaf_ox \u00b7 OXAS-ADV-2024-0001", "record": "OXAS-ADV-2024-0001", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2024-02-06T12:46:56Z", "date_only": false, "value": "2024-02-06T13:46:56+01:00", "kind": "other", "label": "Date", "source": "csaf_ox \u00b7 OXAS-ADV-2024-0001", "record": "OXAS-ADV-2024-0001", "field": "vulnerabilities.4.remediations.0.date"}, {"timestamp": "2024-02-07T14:46:53Z", "date_only": false, "value": "2024-02-07T14:46:53.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/180720", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "b657f4ba-5927-4497-86a3-9f908a03ce4d", "content": "https://ift.tt/yqInvtf\nCVE-2023-46604 | Oracle Communications Element Manager up to 9.0.2.0.1 Security deserialization", "url": "https://t.me/ctinow/180720"}, {"timestamp": "2024-02-07T14:46:55Z", "date_only": false, "value": "2024-02-07T14:46:55.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/180722", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "1f44a1dc-5609-489a-a95f-f5d4530d1876", "content": "https://ift.tt/B6V9hWQ\nCVE-2023-46604 | Oracle Communications Session Report Manager up to 9.0.2.0.1 Security deserialization", "url": "https://t.me/ctinow/180722"}, {"timestamp": "2024-02-07T23:00:00Z", "date_only": false, "value": "2024-02-08T00:00:00+01:00", "kind": "other", "label": "Advisory revision", "source": "csaf_ox \u00b7 OXAS-ADV-2024-0001", "record": "OXAS-ADV-2024-0001", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-02-07T23:00:00Z", "date_only": false, "value": "2024-02-08T00:00:00+01:00", "kind": "milestone", "label": "Published", "source": "csaf_ox \u00b7 OXAS-ADV-2024-0001", "record": "OXAS-ADV-2024-0001", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-02-08T10:11:38Z", "date_only": false, "value": "2024-02-08T10:11:38.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/181254", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "4549408c-b790-4249-bc86-86921d3cd96f", "content": "https://ift.tt/smBXJHQ\nCVE-2023-46604 | Oracle Banking APIs 22.1.0/22.2.0 IDM - Authentication deserialization", "url": "https://t.me/ctinow/181254"}, {"timestamp": "2024-02-08T10:11:44Z", "date_only": false, "value": "2024-02-08T10:11:44.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/181257", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "c3987506-6929-4411-9af4-9d53b17b58af", "content": "https://ift.tt/rkIvRzL\nCVE-2023-46604 | Oracle Banking Digital Experience 22.1.0/22.2.0 UI General deserialization", "url": "https://t.me/ctinow/181257"}, {"timestamp": "2024-02-08T11:07:10Z", "date_only": false, "value": "2024-02-08T11:07:10.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/181280", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "4abdd6ec-0842-4dfe-be81-4cf9914d59a8", "content": "https://ift.tt/8my7WFI\nCVE-2023-46604 | Oracle Financial Services Analytical Applications Infrastructure deserialization", "url": "https://t.me/ctinow/181280"}, {"timestamp": "2024-02-09T01:46:29Z", "date_only": false, "value": "2024-02-09T01:46:29.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/181755", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "ebd621f0-df15-4d9c-9b06-5ef869bd391f", "content": "https://ift.tt/AtR0dJ9\nCVE-2023-46604 | Oracle Enterprise Data Quality 12.2.1.4.0 General deserialization", "url": "https://t.me/ctinow/181755"}, {"timestamp": "2024-03-01T00:00:00Z", "date_only": false, "value": "2024-03-01T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0180", "record": "CERTFR-2024-AVI-0180", "field": "last_revision_date"}, {"timestamp": "2024-03-01T00:00:00Z", "date_only": false, "value": "2024-03-01T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0180", "record": "CERTFR-2024-AVI-0180", "field": "initial_release_date"}, {"timestamp": "2024-03-01T00:00:00Z", "date_only": false, "value": "2024-03-01T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0180", "record": "CERTFR-2024-AVI-0180", "field": "revisions.0.revision_date"}, {"timestamp": "2024-03-05T08:31:17Z", "date_only": false, "value": "2024-03-05T08:31:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/6723", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "618af9e3-77df-473c-b046-7ce2e6115d73", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aActiveMQ RCE (CVE-2023-46604) \u56de\u663e\u5229\u7528\u5de5\u5177\nURL\uff1ahttps://github.com/Arlenhiack/ActiveMQ-RCE-Exploit\n\n\u6807\u7b7e\uff1a#RCE", "url": "https://t.me/GithubRedTeam/6723"}, {"timestamp": "2024-03-15T00:00:00Z", "date_only": false, "value": "2024-03-15T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0228", "record": "CERTFR-2024-AVI-0228", "field": "last_revision_date"}, {"timestamp": "2024-03-15T00:00:00Z", "date_only": false, "value": "2024-03-15T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0228", "record": "CERTFR-2024-AVI-0228", "field": "initial_release_date"}, {"timestamp": "2024-03-15T00:00:00Z", "date_only": false, "value": "2024-03-15T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0228", "record": "CERTFR-2024-AVI-0228", "field": "revisions.0.revision_date"}, {"timestamp": "2024-03-17T20:51:21Z", "date_only": false, "value": "2024-03-17T20:51:21.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cybersecs/2770", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "e02cb43c-aff8-475e-8da2-1bcf8d588c43", "content": "Invicti Professional v24.3.0 - 12 Mar 2024\n\nDownload: https://ponies.cloud/scanner_web/invicti/Invicti-Professional-v24.3.0-Pwn3rzs-CyberArsenal.rar\nPassword: Pwn3rzs\n\nChangelog:\n\nNEW FEATURES\n\nAdded the ability to force authentication verifier agents to use incognito mode by default on Chromium browsers\n\nNEW SECURITY CHECKS\n\nAdded detection for ActiveMQ RCE to the OOB RCE Attack Pattern (CVE-2023-46604)\n\nFIXES\n\nAdded a Cookie Source field to the Knowledge Base Cookies screen", "url": "https://t.me/cybersecs/2770"}, {"timestamp": "2024-03-29T18:27:12Z", "date_only": false, "value": "2024-03-29T18:27:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Teamx1945x/1030", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "168ed7b9-2c27-40d0-b4c5-73702d3eba3d", "content": "\u200b\u200bActiveMQ RCE (CVE-2023-46604)\n\n Apache ActiveMQ \u0639\u0631\u0636\u0629 \u0644\u062a\u0646\u0641\u064a\u0630 \u0627\u0644\u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629 \u0639\u0646 \u0628\u0639\u062f. \u0642\u062f \u062a\u0633\u0645\u062d \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0644\u0645\u0647\u0627\u062c\u0645 \u0639\u0646 \u0628\u0639\u062f \u0644\u062f\u064a\u0647 \u0625\u0645\u0643\u0627\u0646\u064a\u0629 \u0627\u0644\u0648\u0635\u0648\u0644 \u0625\u0644\u0649 \u0627\u0644\u0634\u0628\u0643\u0629 \u0625\u0644\u0649 \u0648\u0633\u064a\u0637 \u0628\u062a\u0634\u063a\u064a\u0644 \u0623\u0648\u0627\u0645\u0631 shell \u0639\u0634\u0648\u0627\u0626\u064a\u0629 \u0645\u0646 \u062e\u0644\u0627\u0644 \u0645\u0639\u0627\u0644\u062c\u0629 \u0623\u0646\u0648\u0627\u0639 \u0627\u0644\u0641\u0626\u0627\u062a \u0627\u0644\u0645\u062a\u0633\u0644\u0633\u0644\u0629 \u0641\u064a \u0628\u0631\u0648\u062a\u0648\u0643\u0648\u0644 OpenWire \u0644\u062c\u0639\u0644 \u0627\u0644\u0648\u0633\u064a\u0637 \u064a\u0642\u0648\u0645 \u0628\u0625\u0646\u0634\u0627\u0621 \u0645\u062b\u064a\u0644 \u0644\u0623\u064a \u0641\u0626\u0629 \u0639\u0644\u0649 \u0645\u0633\u0627\u0631 \u0627\u0644\u0641\u0635\u0644.\n\n https://github.com/X1r0z/ActiveMQ-RCE", "url": "https://t.me/Teamx1945x/1030"}, {"timestamp": "2024-04-08T00:00:00Z", "date_only": false, "value": "2024-04-08T00:00:00+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_ox \u00b7 OXAS-ADV-2024-0001", "record": "OXAS-ADV-2024-0001", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2024-04-09T10:44:14Z", "date_only": false, "value": "2024-04-09T10:44:14.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/breachdetector/491262", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "2f9b78bb-ae7f-4803-8fed-9910fcb5cd8c", "content": "{\n  \"Source\": \"https://www.turkhackteam.org/\",\n  \"Content\": \"CVE-2023-46604 Apache ActiveMQ Nedir ?\", \n  \"author\": \" ('BARBAROS)\",\n  \"Detection Date\": \"09 Apr 2024\",\n  \"Type\": \"Data leak\"\n}\n\ud83d\udd39 t.me/breachdetector \ud83d\udd39", "url": "https://t.me/breachdetector/491262"}, {"timestamp": "2024-04-09T11:09:38Z", "date_only": false, "value": "2024-04-09T11:09:38.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/breachdetector/491278", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "f3af79c6-8e3f-49c0-9bcc-435864361c0f", "content": "{\n  \"Source\": \"https://www.turkhackteam.org/\",\n  \"Content\": \"What is CVE-2023-46604 Apache ActiveMQ ?\", \n  \"author\": \" ('BARBAROS)\",\n  \"Detection Date\": \"09 Apr 2024\",\n  \"Type\": \"Data leak\"\n}\n\ud83d\udd39 t.me/breachdetector \ud83d\udd39", "url": "https://t.me/breachdetector/491278"}, {"timestamp": "2024-04-09T13:56:57Z", "date_only": false, "value": "2024-04-09T13:56:57.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/214463", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "d3d0efef-69c8-46e6-b4fb-91598c910dc3", "content": "https://ift.tt/Wu5jSmd\nThe Threat That Can\u2019t Be Ignored: CVE-2023-46604 in Apache ActiveMQ", "url": "https://t.me/ctinow/214463"}, {"timestamp": "2024-04-11T00:00:00Z", "date_only": false, "value": "2024-04-11T00:00:00+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_ox \u00b7 OXAS-ADV-2024-0001", "record": "OXAS-ADV-2024-0001", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2024-04-11T08:05:50.028Z", "date_only": false, "value": "2024-04-11T08:05:50.028Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apache", "record": "cve-2023-46604", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-04-11T08:15:49.823Z", "date_only": false, "value": "2024-04-11T08:15:49.823", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-46604", "record": "GSD-2023-46604", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-04-13T02:42:19Z", "date_only": false, "value": "2024-04-13T02:42:19.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/4637", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "246bc288-df13-487f-85f3-15e9de13a4ec", "content": "#ExploitObserverAlert\n\nCVE-2023-46604\n\nDESCRIPTION: Exploit Observer has 154 entries in 17 file formats related to CVE-2023-46604. The Java OpenWire protocol marshaller is vulnerable to Remote Code  Execution. This vulnerability may allow a remote attacker with network  access to either a Java-based OpenWire broker or client to run arbitrary  shell commands by manipulating serialized class types in the OpenWire  protocol to cause either the client or the broker (respectively) to  instantiate any class on the classpath.  Users are recommended to upgrade  both brokers and clients to version 5.15.16, 5.16.7, 5.17.6, or 5.18.3  which fixes this issue.\n\nFIRST-EPSS: 0.972480000\nNVD-IS: 5.9\nNVD-ES: 3.9\nARPS-EXPLOITABILITY: 0.7831866", "url": "https://t.me/arpsyndicate/4637"}, {"timestamp": "2024-04-16T22:00:00Z", "date_only": false, "value": "2024-04-16T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0873", "record": "WID-SEC-W-2024-0873", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-04-16T22:00:00Z", "date_only": false, "value": "2024-04-16T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0873", "record": "WID-SEC-W-2024-0873", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-04-16T22:00:00Z", "date_only": false, "value": "2024-04-16T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0873", "record": "WID-SEC-W-2024-0873", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-04-16T22:00:00Z", "date_only": false, "value": "2024-04-16T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0873", "record": "WID-SEC-W-2024-0873", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-04-18T22:00:00Z", "date_only": false, "value": "2024-04-18T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2773", "record": "WID-SEC-W-2023-2773", "field": "document.tracking.revision_history.10.date"}, {"timestamp": "2024-04-25T00:00:00Z", "date_only": false, "value": "2024-04-25T00:00:00+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_ox \u00b7 OXAS-ADV-2024-0001", "record": "OXAS-ADV-2024-0001", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2024-04-25T00:00:00Z", "date_only": false, "value": "2024-04-25T00:00:00+00:00", "kind": "other", "label": "Updated", "source": "csaf_ox \u00b7 OXAS-ADV-2024-0001", "record": "OXAS-ADV-2024-0001", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-04-25T15:09:16Z", "date_only": false, "value": "2024-04-25T15:09:16+00:00", "kind": "other", "label": "Document generated", "source": "csaf_ox \u00b7 OXAS-ADV-2024-0001", "record": "OXAS-ADV-2024-0001", "field": "document.tracking.generator.date"}, {"timestamp": "2024-05-09T06:00:00Z", "date_only": false, "value": "2024-05-09T06:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-24-130-03", "record": "ICSA-24-130-03", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-05-09T06:00:00Z", "date_only": false, "value": "2024-05-09T06:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-24-130-03", "record": "ICSA-24-130-03", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-05-09T06:00:00Z", "date_only": false, "value": "2024-05-09T06:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-24-130-03", "record": "ICSA-24-130-03", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-05-29T15:20:18Z", "date_only": false, "value": "2024-05-29T15:20:18.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/7452", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "2aa88858-b588-4c8b-a60c-61bf42b45694", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1a CVE-2023-46604 (Apache ActiveMQ RCE Vulnerability) and focused on getting Indicators of Compromise.\nURL\uff1ahttps://github.com/mranv/honeypot.rs\n\n\u6807\u7b7e\uff1a#RCE", "url": "https://t.me/GithubRedTeam/7452"}, {"timestamp": "2024-07-12T00:00:00Z", "date_only": true, "value": "2024-07-12", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0646", "record": "CERTFR-2024-AVI-0646", "field": "vendor_advisories.4.published_at"}, {"timestamp": "2024-07-23T22:00:00Z", "date_only": false, "value": "2024-07-23T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2773", "record": "WID-SEC-W-2023-2773", "field": "document.tracking.revision_history.11.date"}, {"timestamp": "2024-07-26T00:00:00Z", "date_only": true, "value": "2024-07-26", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0646", "record": "CERTFR-2024-AVI-0646", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2024-07-29T00:00:00Z", "date_only": true, "value": "2024-07-29", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0646", "record": "CERTFR-2024-AVI-0646", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2024-07-30T00:00:00Z", "date_only": true, "value": "2024-07-30", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0646", "record": "CERTFR-2024-AVI-0646", "field": "vendor_advisories.2.published_at"}, {"timestamp": "2024-07-31T00:00:00Z", "date_only": true, "value": "2024-07-31", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0646", "record": "CERTFR-2024-AVI-0646", "field": "vendor_advisories.5.published_at"}, {"timestamp": "2024-08-02T00:00:00Z", "date_only": false, "value": "2024-08-02T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0646", "record": "CERTFR-2024-AVI-0646", "field": "last_revision_date"}, {"timestamp": "2024-08-02T00:00:00Z", "date_only": false, "value": "2024-08-02T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0646", "record": "CERTFR-2024-AVI-0646", "field": "initial_release_date"}, {"timestamp": "2024-08-02T00:00:00Z", "date_only": false, "value": "2024-08-02T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0646", "record": "CERTFR-2024-AVI-0646", "field": "revisions.0.revision_date"}, {"timestamp": "2024-08-15T18:03:43.880Z", "date_only": false, "value": "2024-08-15T18:03:43.880+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0106", "record": "WID-SEC-W-2024-0106", "field": "document.tracking.generator.date"}, {"timestamp": "2024-08-15T18:03:50.294Z", "date_only": false, "value": "2024-08-15T18:03:50.294+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0124", "record": "WID-SEC-W-2024-0124", "field": "document.tracking.generator.date"}, {"timestamp": "2024-08-15T18:07:41.626Z", "date_only": false, "value": "2024-08-15T18:07:41.626+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0873", "record": "WID-SEC-W-2024-0873", "field": "document.tracking.generator.date"}, {"timestamp": "2024-08-16T08:43:34Z", "date_only": false, "value": "2024-08-16T08:43:34.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Rootsec_2/1642", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "eb8addc4-2708-49f8-a13c-bf9e634a82bd", "content": "#exploit\n1. CVE-2023-22518:\nAn Exploitation tool to exploit the confluence server (Improper Authorization)\nhttps://github.com/sanjai-AK47/CVE-2023-22518\n\n2. CVE-2023-46604:\nAchieving a Reverse Shell Exploit for Apache ActiveMQ\nhttps://github.com/SaumyajeetDas/CVE-2023-46604-RCE-Reverse-Shell-Apache-ActiveMQ\n\n3. CVE-2023-37903:\nvm2 Sandbox Escape vulnerability\nhttps://github.com/7h3h4ckv157/CVE-2023-37903", "url": "https://t.me/Rootsec_2/1642"}, {"timestamp": "2024-08-16T08:43:35Z", "date_only": false, "value": "2024-08-16T08:43:35.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Rootsec_2/1662", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "47029d1b-07f7-4903-aa10-960d3e1e664f", "content": "#tools\n#Blue_Team_Techniques\n1. ActiveMQ RCE vulnerability (CVE-2023-46604) verification/exploitation tool\nhttps://github.com/sule01u/CVE-2023-46604\n2. A comprehensive tool that provides an insightful analysis of MS monthly security updates\nhttps://github.com/xaitax/PatchaPalooza", "url": "https://t.me/Rootsec_2/1662"}, {"timestamp": "2024-08-16T08:51:05Z", "date_only": false, "value": "2024-08-16T08:51:05.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/Rootsec_2/2000", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "ace32a34-1c8c-4edd-9897-71e73eba87de", "content": "#Malware_analysis\n1. Diamond Sleet supply chain compromise distributes a modified CyberLink installer\nhttps://www.microsoft.com/en-us/security/blog/2023/11/22/diamond-sleet-supply-chain-compromise-distributes-a-modified-cyberlink-installer\n2. HrServ - malware web shell DLL\nhttps://securelist.com/hrserv-apt-web-shell/111119\n3. CVE-2023-46604 (Apache ActiveMQ) Exploited to Infect Systems With Cryptominers and Rootkits\nhttps://www.trendmicro.com/en_us/research/23/k/cve-2023-46604-exploited-by-kinsing.html", "url": "https://t.me/Rootsec_2/2000"}, {"timestamp": "2024-08-16T08:51:06Z", "date_only": false, "value": "2024-08-16T08:51:06.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/Rootsec_2/2005", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "d4cb2bd1-3c98-44a8-b728-7098bf54e5b5", "content": "https://www.trendmicro.com/en_us/research/23/k/cve-2023-46604-exploited-by-kinsing.html\n\nCVE-2023-46604(Apache ActiveMQ)\u88ab\u5229\u7528\u6765\u611f\u67d3\u5bc6\u7801\u5668\u548cRootkit\u7cfb\u7edf\n#\u65b0\u95fb", "url": "https://t.me/Rootsec_2/2005"}, {"timestamp": "2024-08-16T08:51:14Z", "date_only": false, "value": "2024-08-16T08:51:14.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/Rootsec_2/2053", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "785265e4-d5a3-4afd-b33f-fb75a4db8dfb", "content": "#Malware_analysis\n1. Diamond Sleet supply chain compromise distributes a modified CyberLink installer\nhttps://www.microsoft.com/en-us/security/blog/2023/11/22/diamond-sleet-supply-chain-compromise-distributes-a-modified-cyberlink-installer\n2. HrServ - malware web shell DLL\nhttps://securelist.com/hrserv-apt-web-shell/111119\n3. CVE-2023-46604 (Apache ActiveMQ) Exploited to Infect Systems With Cryptominers and Rootkits\nhttps://www.trendmicro.com/en_us/research/23/k/cve-2023-46604-exploited-by-kinsing.html", "url": "https://t.me/Rootsec_2/2053"}, {"timestamp": "2024-09-16T19:13:31Z", "date_only": false, "value": "2024-09-16T19:13:31.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/aaf97b2c-ad16-4ce6-928a-a440112d0fd3", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "cdeee833-383a-490a-820b-968f9dfcdbeb"}, {"timestamp": "2024-10-15T11:38:27Z", "date_only": false, "value": "2024-10-15T11:38:27.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/8a5d9ef7-0fae-4fcc-a606-d3701ec5f0e0", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "d6fb12fa-298f-4062-9b30-18e9c2a4c0b4"}, {"timestamp": "2024-10-27T23:00:00Z", "date_only": false, "value": "2024-10-27T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2773", "record": "WID-SEC-W-2023-2773", "field": "document.tracking.revision_history.12.date"}, {"timestamp": "2024-11-11T18:25:20Z", "date_only": false, "value": "2024-11-11T18:25:20.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/kcBXGeNIBmGVCv-daF2D_otXD8QiKxFj_3wywFGQYSfa", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "57122be3-4547-45cb-9c48-a709fa6f0da7"}, {"timestamp": "2024-11-21T07:20:03.921Z", "date_only": false, "value": "2024-11-21T07:20:03.921Z", "kind": "other", "label": "Document generated", "source": "csaf_sick \u00b7 SCA-2024-0001", "record": "SCA-2024-0001", "field": "document.tracking.generator.date"}, {"timestamp": "2024-12-09T13:14:22Z", "date_only": false, "value": "2024-12-09T13:14:22.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberBulletin/1718", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "b8dfaed2-b293-4cfb-8fb8-70a0d576d98f", "content": "\u26a1\ufe0fMauri Ransomware Exploits Apache ActiveMQ Flaw (CVE-2023-46604).\n\n#CyberBulletin", "url": "https://t.me/CyberBulletin/1718"}, {"timestamp": "2024-12-09T13:14:22Z", "date_only": false, "value": "2024-12-09T13:14:22.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberBulletin/26743", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "2b237a2b-2259-41a9-b61d-c5a1bb879ff7", "content": "\u26a1\ufe0fMauri Ransomware Exploits Apache ActiveMQ Flaw (CVE-2023-46604).\n\n#CyberBulletin", "url": "https://t.me/CyberBulletin/26743"}, {"timestamp": "2024-12-09T23:42:02.020Z", "date_only": false, "value": "2024-12-09T23:42:02.020231Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/113625512128034806", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "5f7956fd-fdd1-49f2-be9d-64948ed8fe44", "url": "https://infosec.exchange/users/edwardk/statuses/113625512128034806"}, {"timestamp": "2024-12-24T20:35:32.844Z", "date_only": false, "value": "2024-12-24T20:35:32.844833Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971911", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "3a900e42-25b9-43bb-bb9b-e4c253d0bae0", "url": "https://feedsin.space/feed/CISAKevBot/items/2971911"}, {"timestamp": "2025-01-21T23:00:00Z", "date_only": false, "value": "2025-01-21T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0148", "record": "WID-SEC-W-2025-0148", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-01-21T23:00:00Z", "date_only": false, "value": "2025-01-21T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0148", "record": "WID-SEC-W-2025-0148", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-01-21T23:00:00Z", "date_only": false, "value": "2025-01-21T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0148", "record": "WID-SEC-W-2025-0148", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-01-21T23:00:00Z", "date_only": false, "value": "2025-01-21T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0148", "record": "WID-SEC-W-2025-0148", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-01-22T09:43:54.832Z", "date_only": false, "value": "2025-01-22T09:43:54.832+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0148", "record": "WID-SEC-W-2025-0148", "field": "document.tracking.generator.date"}, {"timestamp": "2025-01-22T13:30:50.189Z", "date_only": false, "value": "2025-01-22T13:30:50.189632Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2025-0021", "record": "NCSC-2025-0021", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-01-22T13:30:50.189Z", "date_only": false, "value": "2025-01-22T13:30:50.189632Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2025-0021", "record": "NCSC-2025-0021", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-01-22T13:30:50.189Z", "date_only": false, "value": "2025-01-22T13:30:50.189632Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2025-0021", "record": "NCSC-2025-0021", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-01-23T00:00:00Z", "date_only": false, "value": "2025-01-23T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "enisa-cnw-kev", "record": "CVE-2023-46604", "field": "timestamps.asserted_at", "uuid": "4c9dc532-4817-4485-87bc-ca2e4991b226", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-01-23T00:00:00Z", "date_only": false, "value": "2025-01-23T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "enisa-cnw-kev", "record": "CVE-2023-46604", "field": "timestamps.first_seen_at", "uuid": "4c9dc532-4817-4485-87bc-ca2e4991b226", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-01-23T00:00:00Z", "date_only": false, "value": "2025-01-23T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "enisa-cnw-kev", "record": "CVE-2023-46604", "field": "status.status_updated_at", "uuid": "4c9dc532-4817-4485-87bc-ca2e4991b226", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-02-04T15:16:07.619Z", "date_only": false, "value": "2025-02-04T15:16:07.619940Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-46604", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-02-04T15:16:07.619Z", "date_only": false, "value": "2025-02-04T15:16:07.619940Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-46604", "record": "FKIE_CVE-2023-46604", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-04T15:50:46Z", "date_only": false, "value": "2025-02-04T15:50:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/9336", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "53f70451-93af-44a9-b766-89cbf1c23921", "content": "#exploit\n1. CVE-2023-22518:\nAn Exploitation tool to exploit the confluence server (Improper Authorization)\nhttps://github.com/sanjai-AK47/CVE-2023-22518\n\n2. CVE-2023-46604:\nAchieving a Reverse Shell Exploit for Apache ActiveMQ\nhttps://github.com/SaumyajeetDas/CVE-2023-46604-RCE-Reverse-Shell-Apache-ActiveMQ\n\n3. CVE-2023-37903:\nvm2 Sandbox Escape vulnerability\nhttps://github.com/7h3h4ckv157/CVE-2023-37903", "url": "https://t.me/CyberSecurityTechnologies/9336"}, {"timestamp": "2025-02-06T03:13:46Z", "date_only": false, "value": "2025-02-06T03:13:46.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "d092f13b-e258-4618-87c9-7c7243c1fe43"}, {"timestamp": "2025-02-11T00:00:00Z", "date_only": false, "value": "2025-02-11T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-25-044-14", "record": "ICSA-25-044-14", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-02-11T00:00:00Z", "date_only": false, "value": "2025-02-11T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-25-044-14", "record": "ICSA-25-044-14", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-02-11T19:40:34.993Z", "date_only": false, "value": "2025-02-11T19:40:34.993264Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2025-0051", "record": "NCSC-2025-0051", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-02-11T19:40:34.993Z", "date_only": false, "value": "2025-02-11T19:40:34.993264Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2025-0051", "record": "NCSC-2025-0051", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-02-11T19:40:34.993Z", "date_only": false, "value": "2025-02-11T19:40:34.993264Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2025-0051", "record": "NCSC-2025-0051", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-02-13T11:00:00Z", "date_only": false, "value": "2025-02-13T11:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-14", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "be3f9683-efb8-440f-8f7a-946bbacc7e43", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-14"}, {"timestamp": "2025-02-13T23:00:00Z", "date_only": false, "value": "2025-02-13T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2773", "record": "WID-SEC-W-2023-2773", "field": "document.tracking.revision_history.13.date"}, {"timestamp": "2025-02-13T23:00:00Z", "date_only": false, "value": "2025-02-13T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2773", "record": "WID-SEC-W-2023-2773", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-02-14T08:46:28.240Z", "date_only": false, "value": "2025-02-14T08:46:28.240775Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2025-0061", "record": "NCSC-2025-0061", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-02-14T08:46:28.240Z", "date_only": false, "value": "2025-02-14T08:46:28.240775Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2025-0061", "record": "NCSC-2025-0061", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-02-14T08:46:28.240Z", "date_only": false, "value": "2025-02-14T08:46:28.240775Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2025-0061", "record": "NCSC-2025-0061", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-02-14T11:59:24.305Z", "date_only": false, "value": "2025-02-14T11:59:24.305+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2773", "record": "WID-SEC-W-2023-2773", "field": "document.tracking.generator.date"}, {"timestamp": "2025-02-23T02:10:48Z", "date_only": false, "value": "2025-02-23T02:10:48.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "c59e7962-9ae4-4a34-8258-abd007e84d2c"}, {"timestamp": "2025-02-23T04:10:57Z", "date_only": false, "value": "2025-02-23T04:10:57.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "36f67344-774f-40d1-8764-65a50ab87b3f"}, {"timestamp": "2025-05-06T06:00:00Z", "date_only": false, "value": "2025-05-06T06:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-25-044-14", "record": "ICSA-25-044-14", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2025-05-06T06:00:00Z", "date_only": false, "value": "2025-05-06T06:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-25-044-14", "record": "ICSA-25-044-14", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-07-30T07:30:15Z", "date_only": false, "value": "2025-07-30T07:30:15.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_sick \u00b7 SCA-2024-0001", "record": "SCA-2024-0001", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2025-08-20T09:25:27.869Z", "date_only": false, "value": "2025-08-20T09:25:27.869166Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-34f40802-640c8f06861ca21f", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "f0b1b462-cc99-47a5-b1ec-0eb0d6926df1", "url": "https://poliverso.org/objects/0477a01e-34f40802-640c8f06861ca21f"}, {"timestamp": "2025-08-20T09:52:32.957Z", "date_only": false, "value": "2025-08-20T09:52:32.957697Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3lwt5qswy2mg2", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "4c36b6c9-fdd5-4a34-9577-53f3c0455de1", "url": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3lwt5qswy2mg2"}, {"timestamp": "2025-08-20T10:13:16Z", "date_only": false, "value": "2025-08-20T10:13:16.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/hackyourmom/12429", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "713b0cd9-ec6e-4d25-8c7d-6bc6bf2b0ba0", "content": "\ud83d\udc7e \u0425\u0430\u043a\u0435\u0440\u0438 \u043c\u0430\u0441\u043e\u0432\u043e \u0432\u0438\u043a\u043e\u0440\u0438\u0441\u0442\u043e\u0432\u0443\u044e\u044c\u0442\u044c Apache ActiveMQ (CVE-2023-46604) \u0456 \u0437\u0430\u043b\u0438\u0432\u0430\u044e\u0442\u044c DripDropper. \u0412\u0456\u043d \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0439, \u0445\u043e\u0432\u0430\u0454\u0442\u044c\u0441\u044f \u0437\u0430 Dropbox, \u043b\u0456\u0437\u0435 \u0432 cron \u0456 \u043c\u0456\u043d\u044f\u0454 SSH. \u041d\u0430\u0439\u0446\u0456\u043a\u0430\u0432\u0456\u0448\u0435 \u2014 \u043f\u0456\u0441\u043b\u044f \u0437\u043b\u043e\u043c\u0443 \u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u043e\u0444\u0456\u0446\u0456\u0439\u043d\u0438\u0439 \u043f\u0430\u0442\u0447, \u0449\u043e\u0431 \u0437\u0430\u043a\u0440\u0438\u0442\u0438 \u0434\u0456\u0440\u0443 \u0432\u0456\u0434 \u0456\u043d\u0448\u0438\u0445. \u0421\u0435\u0440\u0432\u0435\u0440 \u0432\u0438\u0433\u043b\u044f\u0434\u0430\u0454 \u0447\u0438\u0441\u0442\u0438\u043c, \u0430\u043b\u0435 \u0432\u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0456 \u0432\u0436\u0435 \u0441\u0438\u0434\u0438\u0442\u044c \u0447\u0443\u0436\u0438\u0439 \u043a\u043e\u0434 \u2139\ufe0f #cybernews", "url": "https://t.me/hackyourmom/12429"}, {"timestamp": "2025-08-20T11:06:45.997Z", "date_only": false, "value": "2025-08-20T11:06:45.997719Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3lwtbvy64gh2m", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "1d172c7f-e738-4081-a05b-047bded7c1ce", "url": "https://bsky.app/profile/undercodenews.bsky.social/post/3lwtbvy64gh2m"}, {"timestamp": "2025-08-20T11:13:43.773Z", "date_only": false, "value": "2025-08-20T11:13:43.773609Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/dragonjar/statuses/115060796380277759", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "ece54dfc-9f67-4633-8a45-b0f2299d71e9", "url": "https://infosec.exchange/users/dragonjar/statuses/115060796380277759"}, {"timestamp": "2025-08-20T12:35:14.281Z", "date_only": false, "value": "2025-08-20T12:35:14.281196Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/theitnerd.ca/post/3lwtgu6hk3w2k", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "45e624d3-d2f0-46f9-9f68-f737eec0affc", "url": "https://bsky.app/profile/theitnerd.ca/post/3lwtgu6hk3w2k"}, {"timestamp": "2025-08-20T14:03:32.750Z", "date_only": false, "value": "2025-08-20T14:03:32.750593Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3lwtls2o6fs2y", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "174ea819-057c-48fe-aa85-070ce8a3a851", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3lwtls2o6fs2y"}, {"timestamp": "2025-08-20T16:49:06.759Z", "date_only": false, "value": "2025-08-20T16:49:06.759023Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3lwtuzyxlkk24", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "63272c1b-6a3f-4ac6-a75a-5e20cee0bb6d", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3lwtuzyxlkk24"}, {"timestamp": "2025-08-20T20:39:42.719Z", "date_only": false, "value": "2025-08-20T20:39:42.719908Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3lwubwihyzu26", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "d71c2e5b-f65f-48a5-815a-d7d4f172118d", "url": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3lwubwihyzu26"}, {"timestamp": "2025-08-20T21:29:16.348Z", "date_only": false, "value": "2025-08-20T21:29:16.348690Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kpwn.bsky.social/post/3lwuep3pnik2b", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "ee490ecd-b29c-4c5a-b4dd-08455358aca6", "url": "https://bsky.app/profile/kpwn.bsky.social/post/3lwuep3pnik2b"}, {"timestamp": "2025-08-20T21:39:20.782Z", "date_only": false, "value": "2025-08-20T21:39:20.782919Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kpwn.bsky.social/post/3lwufb4hxzs2b", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "07176288-9b45-4f89-a2d3-aa506d131fb5", "url": "https://bsky.app/profile/kpwn.bsky.social/post/3lwufb4hxzs2b"}, {"timestamp": "2025-08-21T17:03:03.658Z", "date_only": false, "value": "2025-08-21T17:03:03.658278Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3lwwgbbfhqhi2", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "4d8178cd-d04b-4fef-8ce9-74bd37956ca7", "url": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3lwwgbbfhqhi2"}, {"timestamp": "2025-08-25T07:54:44.125Z", "date_only": false, "value": "2025-08-25T07:54:44.125789Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3lx7jiyqjxk2e", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "fad902d7-3732-4314-b193-5656d2996567", "url": "https://bsky.app/profile/ytroncal.bsky.social/post/3lx7jiyqjxk2e"}, {"timestamp": "2025-08-31T03:12:57Z", "date_only": false, "value": "2025-08-31T03:12:57.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "ffadccef-4bd5-46db-bb0a-fcbfeb6d7d33"}, {"timestamp": "2025-09-01T20:00:48.839Z", "date_only": false, "value": "2025-09-01T20:00:48.839357Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/techwithellyson.bsky.social/post/3lxsfdx55ww2w", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "db3dd172-d6a3-4d1e-9d13-23848988616b", "url": "https://bsky.app/profile/techwithellyson.bsky.social/post/3lxsfdx55ww2w"}, {"timestamp": "2025-09-08T21:05:27Z", "date_only": false, "value": "2025-09-08T21:05:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/50777", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "652e8844-345e-4379-a4ef-4a69ca0fc671", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aVulnerability Detection and Mitigation Apache ActiveMQ | Security Architectures and Systems Administration - on - Apache ActiveMQ Deserialization Remote Code Execution (RCE) \u2013 CVE-2023-46604\nURL\uff1ahttps://github.com/vaishnavucv/Project-Vuln-Detection-N-Mitigation_101\n\n\u6807\u7b7e\uff1a#RCE", "url": "https://t.me/GithubRedTeam/50777"}, {"timestamp": "2025-09-08T21:11:41Z", "date_only": false, "value": "2025-09-08T21:11:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/50778", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "8a156191-df94-4787-acc0-0cf651df2023", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aVulnerability Detection and Mitigation Apache ActiveMQ | Security Architectures and Systems Administration - on - Apache ActiveMQ Deserialization Remote Code Execution (RCE) \u2013 CVE-2023-46604\nURL\uff1ahttps://github.com/vaishnavucv/Project-Vuln-Detection-N-Mitigation_101\n\n\u6807\u7b7e\uff1a#RCE", "url": "https://t.me/GithubRedTeam/50778"}, {"timestamp": "2025-09-09T03:00:06Z", "date_only": false, "value": "2025-09-09T03:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/8h8Hof7StAZ6aRznwRxa4merJrUBQ8lRPVMkNJUc9vM2lk4", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "784e06b4-aa3b-4100-8495-12b00c045aec"}, {"timestamp": "2025-09-09T11:33:07Z", "date_only": false, "value": "2025-09-09T11:33:07.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/4ad9ed67-5cc3-5de2-849d-1a1910431785", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "4202631e-ed8c-4157-a3a8-e88a8a510a04"}, {"timestamp": "2025-09-11T08:37:25Z", "date_only": false, "value": "2025-09-11T08:37:25.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/vivek-gopal/7c15a28070e3b6b75c8127f632686585", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "ce6458dd-7726-4120-aa44-6c8c980ad32b", "url": "https://gist.github.com/vivek-gopal/7c15a28070e3b6b75c8127f632686585"}, {"timestamp": "2025-09-11T09:20:51Z", "date_only": false, "value": "2025-09-11T09:20:51.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/vivek-gopal/3ea5712720c8371a1075b15a27628fc7", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "f609efb1-461f-4380-aa93-8dd5249261ae", "url": "https://gist.github.com/vivek-gopal/3ea5712720c8371a1075b15a27628fc7"}, {"timestamp": "2025-09-14T22:00:00Z", "date_only": false, "value": "2025-09-14T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0123", "record": "WID-SEC-W-2024-0123", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2025-10-10T15:12:40Z", "date_only": false, "value": "2025-10-10T15:12:40Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2023-46604", "record": "UBUNTU-CVE-2023-46604", "field": "modified"}, {"timestamp": "2025-10-21T23:05:33.138Z", "date_only": false, "value": "2025-10-21T23:05:33.138Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-46604", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-23T21:13:01Z", "date_only": false, "value": "2025-10-23T21:13:01.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "0dce2cf2-9d97-4aca-b426-3217d5c06dd5"}, {"timestamp": "2025-11-03T04:23:53.863Z", "date_only": false, "value": "2025-11-03T04:23:53.863456Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m4p6en3vwv2i", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "e42f3999-d55b-4635-98f6-62d4c6f10715", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m4p6en3vwv2i"}, {"timestamp": "2025-11-03T05:41:04.380Z", "date_only": false, "value": "2025-11-03T05:41:04.380520Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4pcnddwi4e2", "record": "cve-2023-46604", "field": "creation_timestamp", "uuid": "f8accf45-e523-4b0c-88c2-a42d184f4780", "url": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4pcnddwi4e2"}, {"timestamp": "2025-11-03T21:50:00.516Z", "date_only": false, "value": "2025-11-03T21:50:00.516Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2023-46604", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-11-03T21:50:00.516Z", "date_only": false, "value": "2025-11-03T21:50:00.516Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2023-46604", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-11-04T00:30:41Z", "date_only": false, "value": "2025-11-04T00:30:41Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-CRG9-44H2-XW35", "record": "GHSA-CRG9-44H2-XW35", "field": "modified"}, {"timestamp": "2025-11-16T03:00:06Z", "date_only": false, "value": "2025-11-16T03:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/sqAkt-abxgQKI93sbGf7iG59__fxfGGzH9B3O7fITix-uxg", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "5f048346-2d77-42ad-a8d3-dd73ac75459f"}, {"timestamp": "2025-12-03T14:35:38.733Z", "date_only": false, "value": "2025-12-03T14:35:38.733Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-ACTIVEMQ-2023-46604", "record": "BIT-ACTIVEMQ-2023-46604", "field": "published"}, {"timestamp": "2026-01-04T21:00:04Z", "date_only": false, "value": "2026-01-04T21:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/71sICJ2qduNa9p7sy7EcgNRQvBtb-VPS3HuJRrErM7o1_Kg", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "bd718241-efd4-4410-88d9-380cb9e21d9a"}, {"timestamp": "2026-01-09T20:17:30Z", "date_only": false, "value": "2026-01-09T20:17:30.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/8a5d9ef7-0fae-4fcc-a606-d3701ec5f0e0", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "90340260-f66a-4f70-9a42-ab7ad685faa8"}, {"timestamp": "2026-02-02T12:25:27.480Z", "date_only": false, "value": "2026-02-02T12:25:27.480574Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/83d4f3af-eb31-483b-8893-5114f7d170fe", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "df303bac-5190-4e00-9a90-9fa53a19faf7", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/83d4f3af-eb31-483b-8893-5114f7d170fe"}, {"timestamp": "2026-02-02T12:25:27.480Z", "date_only": false, "value": "2026-02-02T12:25:27.480574Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/83d4f3af-eb31-483b-8893-5114f7d170fe", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "673910b3-db96-48d7-a11f-946596ba4ed2", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/83d4f3af-eb31-483b-8893-5114f7d170fe"}, {"timestamp": "2026-02-02T12:26:47.651Z", "date_only": false, "value": "2026-02-02T12:26:47.651400Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/eafa255c-065f-41f9-a401-581d793dafd1", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "3369658a-1227-4db0-abcd-7f8eaed8cc58", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/eafa255c-065f-41f9-a401-581d793dafd1"}, {"timestamp": "2026-02-02T12:26:47.651Z", "date_only": false, "value": "2026-02-02T12:26:47.651400Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/eafa255c-065f-41f9-a401-581d793dafd1", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "25515669-1851-4348-9c06-33030f56899b", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/eafa255c-065f-41f9-a401-581d793dafd1"}, {"timestamp": "2026-02-02T13:23:54Z", "date_only": false, "value": "2026-02-02T13:23:54+00:00", "kind": "kev", "label": "Recorded", "source": "enisa-cnw-kev", "record": "CVE-2023-46604", "field": "timestamps.recorded_at", "uuid": "4c9dc532-4817-4485-87bc-ca2e4991b226", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2023-46604", "field": "timestamps.recorded_at", "uuid": "6dd073cf-6746-4e8e-b441-f61675bbe086", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-24T11:12:08.978Z", "date_only": false, "value": "2026-02-24T11:12:08.978492Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/VirusBulletin/statuses/116125304066872153", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "21ce3c94-7bd3-4159-aca3-a274f180bf1b", "url": "https://infosec.exchange/users/VirusBulletin/statuses/116125304066872153"}, {"timestamp": "2026-02-24T11:12:09.736Z", "date_only": false, "value": "2026-02-24T11:12:09.736439Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/virusbtn.bsky.social/post/3mflzukjcwc2b", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "37c59b3c-f1f8-466b-b029-b1b17a2ae9b8", "url": "https://bsky.app/profile/virusbtn.bsky.social/post/3mflzukjcwc2b"}, {"timestamp": "2026-02-25T12:14:03.205Z", "date_only": false, "value": "2026-02-25T12:14:03.205146Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mfonschmcw2f", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "11bff85c-ec16-40c3-8635-698414ca9d41", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mfonschmcw2f"}, {"timestamp": "2026-02-26T05:00:19Z", "date_only": false, "value": "2026-02-26T05:00:19.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/alon710/259ba4448555bfe0e3eb2f75dd2e8a14", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "0eda1023-2246-4ea1-ba28-3714f8043d93", "url": "https://gist.github.com/alon710/259ba4448555bfe0e3eb2f75dd2e8a14"}, {"timestamp": "2026-02-26T18:31:11.962Z", "date_only": false, "value": "2026-02-26T18:31:11.962774Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mfrtdlqksq2m", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "235f4024-dc7b-484d-a1bd-6ea907854989", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3mfrtdlqksq2m"}, {"timestamp": "2026-03-31T03:00:07Z", "date_only": false, "value": "2026-03-31T03:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/jW6gAEx0X-7rlKDcpeYmlHPMlF_kfSwPpGXtV0Ykb6N88uc", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "653ce06d-1c34-4206-831a-e95e158cfce8"}, {"timestamp": "2026-04-09T22:56:58.925Z", "date_only": false, "value": "2026-04-09T22:56:58.925106Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/concisecyber.bsky.social/post/3mj3vrjxzxe27", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "5035868e-9615-44c6-97b8-824b5632bbf7", "url": "https://bsky.app/profile/concisecyber.bsky.social/post/3mj3vrjxzxe27"}, {"timestamp": "2026-04-20T04:00:04Z", "date_only": false, "value": "2026-04-20T04:00:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/81019", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "b3fb2193-56d5-4171-b344-5a0436fe11b4", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a ActiveMQ-EXPtools\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Catherines77\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-20 03:28:09\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u652f\u6301\u68c0\u6d4b\u548c\u5229\u7528ActiveMQ\u6f0f\u6d1e\uff0cCVE-2015-5254\uff0cCVE-2016-3088\uff0cCVE-2022-41678\uff0cCVE-2023-46604\uff0cCVE-2024-32114\uff0cCVE-2026-34197\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/81019"}, {"timestamp": "2026-04-30T09:00:04Z", "date_only": false, "value": "2026-04-30T09:00:04.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/yjUnQ6hKYXBxzaCr4Cr42UE0MHqi1VzU3UchLcz_NxtZwAY", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "ae054f20-e365-4926-9a2d-9e45b66f697f"}, {"timestamp": "2026-05-02T21:00:04Z", "date_only": false, "value": "2026-05-02T21:00:04.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/FLV6t7Va3c__w7z9N_mSu7nucQbg4vUfz1QpezNhFqmT_OM", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "2506f6af-a44d-49b9-8ff2-110db2775629"}, {"timestamp": "2026-05-07T10:52:25.889Z", "date_only": false, "value": "2026-05-07T10:52:25.889083Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-e8c8129d-b09e02c4de9c4f4a", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "ea81e2b9-cf42-44c4-a509-1109ecf9e4fc", "url": "https://poliverso.org/objects/0477a01e-e8c8129d-b09e02c4de9c4f4a"}, {"timestamp": "2026-05-07T22:00:00Z", "date_only": false, "value": "2026-05-07T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0123", "record": "WID-SEC-W-2024-0123", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-05-07T22:00:00Z", "date_only": false, "value": "2026-05-07T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0123", "record": "WID-SEC-W-2024-0123", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-05-08T10:10:59.780Z", "date_only": false, "value": "2026-05-08T10:10:59.780+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0123", "record": "WID-SEC-W-2024-0123", "field": "document.tracking.generator.date"}, {"timestamp": "2026-05-19T22:00:00Z", "date_only": false, "value": "2026-05-19T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1608", "record": "WID-SEC-W-2026-1608", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-05-19T22:00:00Z", "date_only": false, "value": "2026-05-19T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1608", "record": "WID-SEC-W-2026-1608", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-05-19T22:00:00Z", "date_only": false, "value": "2026-05-19T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1608", "record": "WID-SEC-W-2026-1608", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-05-20T22:00:00Z", "date_only": false, "value": "2026-05-20T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1608", "record": "WID-SEC-W-2026-1608", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-05-20T22:00:00Z", "date_only": false, "value": "2026-05-20T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1608", "record": "WID-SEC-W-2026-1608", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-05-21T07:35:45.292Z", "date_only": false, "value": "2026-05-21T07:35:45.292+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1608", "record": "WID-SEC-W-2026-1608", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-06T06:00:35Z", "date_only": false, "value": "2026-06-06T06:00:35.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/87519", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "56e239d2-7ccc-4ae2-b5fa-8fab6a32acd3", "url": "https://t.me/GithubRedTeam/87519"}, {"timestamp": "2026-06-17T06:31:11.370Z", "date_only": false, "value": "2026-06-17T06:31:11.370", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-46604", "record": "FKIE_CVE-2023-46604", "field": "lastModified"}, {"timestamp": "2026-06-19T12:46:46.619Z", "date_only": false, "value": "2026-06-19T12:46:46.619590Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a56be3b9-64ba-455d-aa9d-985b56d4b042", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "f8345756-6eb0-4c93-bacd-f1ae38eec259", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a56be3b9-64ba-455d-aa9d-985b56d4b042"}, {"timestamp": "2026-06-23T09:25:09Z", "date_only": false, "value": "2026-06-23T09:25:09.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/ShaiOnionGod/bb378bb47a2626f2a0b85bb402724549", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "62244544-b891-4a57-8b04-7344ec078ba7", "url": "https://gist.github.com/ShaiOnionGod/bb378bb47a2626f2a0b85bb402724549"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2023-46604", "field": "timestamps.recorded_at", "uuid": "77892e63-7df0-4c8a-9040-bcbcc1411475", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:14:11.951Z", "date_only": false, "value": "2026-06-23T11:14:11.951793Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/77892e63-7df0-4c8a-9040-bcbcc1411475", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "2617e6b2-a5d7-4e62-a294-d0a054be5e76", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/77892e63-7df0-4c8a-9040-bcbcc1411475"}, {"timestamp": "2026-06-23T12:21:01Z", "date_only": false, "value": "2026-06-23T12:21:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/ShaiOnionGod/a2470d5624f426a312bf6d47e9b8a91c", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "80574d1d-e5c3-4eed-9bb9-085343a305b5", "url": "https://gist.github.com/ShaiOnionGod/a2470d5624f426a312bf6d47e9b8a91c"}, {"timestamp": "2026-06-23T14:05:47.317Z", "date_only": false, "value": "2026-06-23T14:05:47.317601Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b36567fe-2a58-43ea-b916-3960da8c7a1c", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "be53f183-e4f4-4748-8d1f-016d610bcdf6", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b36567fe-2a58-43ea-b916-3960da8c7a1c"}, {"timestamp": "2026-06-29T18:55:06.069Z", "date_only": false, "value": "2026-06-29T18:55:06.069538Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/ShaiOnionGod/698e64623dff9eabc7bcf40ecdbc049d", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "a1857fc8-8e1f-4280-ba15-39a53869153e", "url": "https://gist.github.com/ShaiOnionGod/698e64623dff9eabc7bcf40ecdbc049d"}, {"timestamp": "2026-07-06T11:00:15.024Z", "date_only": false, "value": "2026-07-06T11:00:15.024193Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/96", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "3a2f9196-b4d9-4a7f-87e1-e20142dea393", "url": "https://t.me/ZerodayAlert/96"}, {"timestamp": "2026-07-06T11:00:15.043Z", "date_only": false, "value": "2026-07-06T11:00:15.043457Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/91", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "78d17fbb-8ebc-4a0c-a227-9856a539e61e", "url": "https://t.me/ZerodayAlert/91"}, {"timestamp": "2026-07-07T00:00:23.319Z", "date_only": false, "value": "2026-07-07T00:00:23.319361Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/96", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "b29502aa-ab1c-4aee-83fe-27bae7cd2cca", "url": "https://t.me/ZerodayAlert/96"}, {"timestamp": "2026-07-07T00:00:23.346Z", "date_only": false, "value": "2026-07-07T00:00:23.346202Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/91", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "402d497b-9724-4f8e-a2d2-b191e921d085", "url": "https://t.me/ZerodayAlert/91"}, {"timestamp": "2026-07-12T04:00:04.376Z", "date_only": false, "value": "2026-07-12T04:00:04.376400Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ZerodayAlert/91", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "c320bc38-0ece-45a9-aa1f-803f85725108", "url": "https://t.me/ZerodayAlert/91"}, {"timestamp": "2026-07-12T04:00:04.416Z", "date_only": false, "value": "2026-07-12T04:00:04.416625Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ZerodayAlert/96", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "1d1b8db6-9700-4774-b723-e0c5a5638771", "url": "https://t.me/ZerodayAlert/96"}, {"timestamp": "2026-07-13T00:00:52.802Z", "date_only": false, "value": "2026-07-13T00:00:52.802488Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ZerodayAlert/91", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "556df23c-9bf4-403d-9b40-0f00e58ce0e6", "url": "https://t.me/ZerodayAlert/91"}, {"timestamp": "2026-07-13T00:00:52.829Z", "date_only": false, "value": "2026-07-13T00:00:52.829638Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ZerodayAlert/96", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "2f15653f-18b1-4f3b-894e-df1cf82cdc15", "url": "https://t.me/ZerodayAlert/96"}, {"timestamp": "2026-07-14T13:34:50.464Z", "date_only": false, "value": "2026-07-14T13:34:50.464627Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/tu-trinh-scale/3053ccc08fc80fb58f05fd189f0cd010", "record": "cve-2023-46604", "field": "creation_timestamp", "uuid": "ff60ede4-9445-4dfb-ae01-32fef989e70c", "url": "https://gist.github.com/tu-trinh-scale/3053ccc08fc80fb58f05fd189f0cd010"}, {"timestamp": "2026-07-17T11:00:07.724Z", "date_only": false, "value": "2026-07-17T11:00:07.724521Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberwarehouse/141", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "3beeece8-667d-44c6-8e27-7ce6b871c913", "url": "https://t.me/cyberwarehouse/141"}, {"timestamp": "2026-07-18T00:00:27.963Z", "date_only": false, "value": "2026-07-18T00:00:27.963412Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cyberwarehouse/141", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "221a8a1e-6c6e-4b48-9716-5ba93ee5a2cb", "url": "https://t.me/cyberwarehouse/141"}, {"timestamp": "2026-07-22T05:00:05.199Z", "date_only": false, "value": "2026-07-22T05:00:05.199770Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pphm_HackerNews/839", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "1a032117-19a3-40db-bbf4-62dca78f317b", "url": "https://t.me/pphm_HackerNews/839"}, {"timestamp": "2026-07-23T00:00:24.875Z", "date_only": false, "value": "2026-07-23T00:00:24.875336Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/pphm_HackerNews/839", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "96cb7fd8-d7bd-4b37-b468-7df8f865dedd", "url": "https://t.me/pphm_HackerNews/839"}, {"timestamp": "2026-07-26T02:02:19.446Z", "date_only": false, "value": "2026-07-26T02:02:19.446985Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/2117", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "acabaa66-78cc-4361-97e6-5cdb086cbcdd", "url": "https://t.me/EchelonEyes/2117"}, {"timestamp": "2026-07-27T00:00:56.090Z", "date_only": false, "value": "2026-07-27T00:00:56.090690Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/2117", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "5cc75312-acdd-4ffe-8b4a-a0627a381e89", "url": "https://t.me/EchelonEyes/2117"}, {"timestamp": "2026-07-28T00:00:30.310Z", "date_only": false, "value": "2026-07-28T00:00:30.310492Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/2117", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "1da111f9-544f-446d-a701-a1920b26891f", "url": "https://t.me/EchelonEyes/2117"}, {"timestamp": "2026-07-29T12:02:22.733Z", "date_only": false, "value": "2026-07-29T12:02:22.733758Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/4012", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "86aab043-0477-448b-a131-5f36b1f78338", "url": "https://t.me/reverseame/4012"}, {"timestamp": "2026-07-29T12:02:23.050Z", "date_only": false, "value": "2026-07-29T12:02:23.050570Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/3992", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "bef6bd04-b1f9-4222-87f6-ef4b9f58382b", "url": "https://t.me/reverseame/3992"}, {"timestamp": "2026-07-29T12:03:04.444Z", "date_only": false, "value": "2026-07-29T12:03:04.444683Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cisoclub/4458", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "028531b9-ca70-434c-88c3-8595793ad61f", "url": "https://t.me/cisoclub/4458"}, {"timestamp": "2026-07-29T12:03:06.432Z", "date_only": false, "value": "2026-07-29T12:03:06.432589Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cisoclub/2999", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "c98630b5-f29c-40b4-8e11-9e997643d7fc", "url": "https://t.me/cisoclub/2999"}, {"timestamp": "2026-07-29T12:03:07.492Z", "date_only": false, "value": "2026-07-29T12:03:07.492535Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cisoclub/2945", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "ee1cf116-0d38-4480-9732-d083037ce77b", "url": "https://t.me/cisoclub/2945"}, {"timestamp": "2026-07-29T20:11:56.586Z", "date_only": false, "value": "2026-07-29T20:11:56.586479Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/Cristhianepcc/c7e27a9709162b053b2f3fd0fc0a981e", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "1d1698ce-0902-4353-8905-593a15cfb28f", "url": "https://gist.github.com/Cristhianepcc/c7e27a9709162b053b2f3fd0fc0a981e"}, {"timestamp": "2026-07-30T00:02:25.010Z", "date_only": false, "value": "2026-07-30T00:02:25.010989Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/4012", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "078d926c-5e10-4282-8023-706fabaa0561", "url": "https://t.me/reverseame/4012"}, {"timestamp": "2026-07-30T00:02:25.324Z", "date_only": false, "value": "2026-07-30T00:02:25.324861Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/3992", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "3fa18290-1b24-4554-87cb-38d8a48901f9", "url": "https://t.me/reverseame/3992"}, {"timestamp": "2026-07-30T00:02:53.517Z", "date_only": false, "value": "2026-07-30T00:02:53.517800Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cisoclub/4458", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "f8e8609d-8931-4309-9565-89f2403a46f9", "url": "https://t.me/cisoclub/4458"}, {"timestamp": "2026-07-30T00:02:55.247Z", "date_only": false, "value": "2026-07-30T00:02:55.247371Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cisoclub/2999", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "524d897f-b489-4961-b78d-18b50cb8773c", "url": "https://t.me/cisoclub/2999"}, {"timestamp": "2026-07-30T00:02:55.595Z", "date_only": false, "value": "2026-07-30T00:02:55.595541Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cisoclub/2945", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "5bbc1ad7-12c8-4d07-b506-f5ce2f7742e1", "url": "https://t.me/cisoclub/2945"}, {"timestamp": "2026-08-02T11:21:49.715Z", "date_only": false, "value": "2026-08-02T11:21:49.715534Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/3992", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "9ee8e4d9-0121-4b0b-aac8-caf829ce5a65", "url": "https://t.me/reverseame/3992"}, {"timestamp": "2026-08-02T11:21:50.136Z", "date_only": false, "value": "2026-08-02T11:21:50.136600Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/4012", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "474440eb-6b37-45c7-9f29-adc2a86808b6", "url": "https://t.me/reverseame/4012"}, {"timestamp": "2026-08-03T02:07:12.641Z", "date_only": false, "value": "2026-08-03T02:07:12.641608Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/3992", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "eb90181f-b391-45ac-a098-e1dbb4c812d8", "url": "https://t.me/reverseame/3992"}, {"timestamp": "2026-08-03T02:07:12.931Z", "date_only": false, "value": "2026-08-03T02:07:12.931993Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/4012", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "e4a5c215-938c-42da-ac95-00816fa0bba8", "url": "https://t.me/reverseame/4012"}, {"timestamp": "2026-08-03T16:00:04.883Z", "date_only": false, "value": "2026-08-03T16:00:04.883121Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cisoclub/4458", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "178e75ea-8761-4ee9-bf42-63d9e41f918e", "url": "https://t.me/cisoclub/4458"}, {"timestamp": "2026-08-03T18:00:04.574Z", "date_only": false, "value": "2026-08-03T18:00:04.574858Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cisoclub/2999", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "11254f56-0313-496a-91c0-1a7715013747", "url": "https://t.me/cisoclub/2999"}, {"timestamp": "2026-08-03T19:00:04.843Z", "date_only": false, "value": "2026-08-03T19:00:04.843794Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cisoclub/2945", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "1a13c435-aa1f-4f38-bad0-374279c1924d", "url": "https://t.me/cisoclub/2945"}, {"timestamp": "2026-08-04T00:00:29.087Z", "date_only": false, "value": "2026-08-04T00:00:29.087205Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cisoclub/2945", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "2d1cc531-80dd-436c-94d1-010d05d512d3", "url": "https://t.me/cisoclub/2945"}, {"timestamp": "2026-08-04T00:00:29.575Z", "date_only": false, "value": "2026-08-04T00:00:29.575721Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cisoclub/2999", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "5eb8af8f-f727-4687-8b22-605b92dd39d5", "url": "https://t.me/cisoclub/2999"}, {"timestamp": "2026-08-04T00:00:33.145Z", "date_only": false, "value": "2026-08-04T00:00:33.145719Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cisoclub/4458", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "24e91bfa-01a4-445b-887e-c3a8f885f4eb", "url": "https://t.me/cisoclub/4458"}, {"timestamp": "2026-08-04T13:00:06.033Z", "date_only": false, "value": "2026-08-04T13:00:06.033439Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/kiberdruzhinnik/59", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "e7feadd8-c826-4424-902e-497d840444d7", "url": "https://t.me/kiberdruzhinnik/59"}, {"timestamp": "2026-08-04T13:00:23.473Z", "date_only": false, "value": "2026-08-04T13:00:23.473381Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/wh_lab/107", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "486352d1-0b7e-4ca7-bed0-e8d0fbdc1a0b", "url": "https://t.me/wh_lab/107"}, {"timestamp": "2026-08-05T00:00:27.417Z", "date_only": false, "value": "2026-08-05T00:00:27.417013Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/kiberdruzhinnik/59", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "b1c553bc-f92a-42aa-b10e-518cb0eb64b2", "url": "https://t.me/kiberdruzhinnik/59"}, {"timestamp": "2026-08-05T00:00:39.525Z", "date_only": false, "value": "2026-08-05T00:00:39.525947Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/wh_lab/107", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "c1d1898e-9d3d-463e-8972-cc302244828b", "url": "https://t.me/wh_lab/107"}, {"timestamp": "2026-08-06T00:00:44.227Z", "date_only": false, "value": "2026-08-06T00:00:44.227841Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/wh_lab/107", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "6ce79b9c-d0e8-4c94-b78f-91c29abcaf43", "url": "https://t.me/wh_lab/107"}, {"timestamp": "2026-08-06T11:06:13Z", "date_only": false, "value": "2026-08-06T11:06:13Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2023-1778", "record": "OESA-2023-1778", "field": "modified"}, {"timestamp": "2026-08-18T22:00:00Z", "date_only": false, "value": "2026-08-18T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-2923", "record": "WID-SEC-W-2026-2923", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-08-18T22:00:00Z", "date_only": false, "value": "2026-08-18T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-2923", "record": "WID-SEC-W-2026-2923", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-08-18T22:00:00Z", "date_only": false, "value": "2026-08-18T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-2923", "record": "WID-SEC-W-2026-2923", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-08-26T10:30:36.466Z", "date_only": false, "value": "2026-08-26T10:30:36.466602Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-66d81917-442e1a3db5444e7f", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "82fd0755-066e-4f02-ad8f-ba6ac965fd81", "url": "https://poliverso.org/objects/0477a01e-66d81917-442e1a3db5444e7f"}, {"timestamp": "2026-08-29T23:00:04.254Z", "date_only": false, "value": "2026-08-29T23:00:04.254403Z", "kind": "sighting", "label": "Seen", "source": "Telegram/ZCILXLquzGbXFQcaZlOXv9dkF48Tloh98M2Ojf7eGNskguU", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "8b45bcfd-f9ff-4a30-b8b7-66e78375417c"}, {"timestamp": "2026-08-30T00:00:09.556Z", "date_only": false, "value": "2026-08-30T00:00:09.556132Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/ZCILXLquzGbXFQcaZlOXv9dkF48Tloh98M2Ojf7eGNskguU", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "e5f08ed3-6331-489a-8e73-beeb6098fe57"}, {"timestamp": "2026-08-30T05:00:04.281Z", "date_only": false, "value": "2026-08-30T05:00:04.281305Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Y77gHVTBkEwe_B8H7TYEkJj_P2j4BEeA0LI6LQ2vGbWCnCU", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "3490564d-624a-4154-bd79-c101b216fd04"}, {"timestamp": "2026-08-31T00:00:41.531Z", "date_only": false, "value": "2026-08-31T00:00:41.531157Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Y77gHVTBkEwe_B8H7TYEkJj_P2j4BEeA0LI6LQ2vGbWCnCU", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "a90d796b-053a-460e-b677-48c5e9ee923b"}, {"timestamp": "2026-08-31T22:00:00Z", "date_only": false, "value": "2026-08-31T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-2923", "record": "WID-SEC-W-2026-2923", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-08-31T22:00:00Z", "date_only": false, "value": "2026-08-31T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-2923", "record": "WID-SEC-W-2026-2923", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-01T08:07:35.283Z", "date_only": false, "value": "2026-09-01T08:07:35.283+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-2923", "record": "WID-SEC-W-2026-2923", "field": "document.tracking.generator.date"}, {"timestamp": "2026-09-01T17:00:15.987Z", "date_only": false, "value": "2026-09-01T17:00:15.987059Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/7331", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "e3920a80-1d94-4bdf-bb27-6dbe68987fff", "url": "https://t.me/cissp/7331"}, {"timestamp": "2026-09-01T20:00:42.831Z", "date_only": false, "value": "2026-09-01T20:00:42.831257Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/126592", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "3ce7ba33-3fa5-4ef7-b0f2-350e7263d865", "url": "https://t.me/hacking_Attack/126592"}, {"timestamp": "2026-09-01T20:00:43.087Z", "date_only": false, "value": "2026-09-01T20:00:43.087339Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/126590", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "cde46343-f21e-492d-b873-9bb6eff0928e", "url": "https://t.me/hacking_Attack/126590"}, {"timestamp": "2026-09-02T01:00:05.051Z", "date_only": false, "value": "2026-09-02T01:00:05.051433Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/y_ppx2WWa40cV5hBHui4bTL2VMdA_tcaI4VaugdhOfmt8Lg", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "cff7ee11-cf29-46c0-ac33-bcbb0fbfa4f5"}, {"timestamp": "2026-09-04T01:00:05.018Z", "date_only": false, "value": "2026-09-04T01:00:05.018427Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/126590", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "76e6f97c-d140-4bdd-8fa6-29552b1178be", "url": "https://t.me/hacking_Attack/126590"}, {"timestamp": "2026-09-04T01:00:05.309Z", "date_only": false, "value": "2026-09-04T01:00:05.309043Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/126592", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "26df673e-4f56-4cb5-b358-34ee265e8a51", "url": "https://t.me/hacking_Attack/126592"}, {"timestamp": "2026-09-06T08:00:06.176Z", "date_only": false, "value": "2026-09-06T08:00:06.176086Z", "kind": "sighting", "label": "Seen", "source": "Telegram/szyQ0EKV_UVNdmkffaO0C1PUabx9T7Nbdd_Nvq3q85HonyM", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "13555777-1fb2-4999-8db2-de5d5a592801"}, {"timestamp": "2026-09-07T01:00:25.056Z", "date_only": false, "value": "2026-09-07T01:00:25.056255Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/szyQ0EKV_UVNdmkffaO0C1PUabx9T7Nbdd_Nvq3q85HonyM", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "414d7634-ddf8-47ef-9e38-5bc7b8fc8828"}, {"timestamp": "2026-09-08T08:34:36.952Z", "date_only": false, "value": "2026-09-08T08:34:36.952Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-ACTIVEMQ-2023-46604", "record": "BIT-ACTIVEMQ-2023-46604", "field": "modified"}, {"timestamp": "2026-09-09T05:00:16.521Z", "date_only": false, "value": "2026-09-09T05:00:16.521726Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Intel_Encyclopedia/1627", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "9b392bd9-045f-4403-970b-a17c131197e9", "url": "https://t.me/Intel_Encyclopedia/1627"}, {"timestamp": "2026-09-09T20:00:07.886Z", "date_only": false, "value": "2026-09-09T20:00:07.886523Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/7331", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "5bce4809-ce84-4adf-908e-e239a26b4743", "url": "https://t.me/cissp/7331"}, {"timestamp": "2026-09-10T00:00:34.875Z", "date_only": false, "value": "2026-09-10T00:00:34.875966Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/Intel_Encyclopedia/1627", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "0cc7bef5-d0c9-4ddb-b5fc-432e2d603595", "url": "https://t.me/Intel_Encyclopedia/1627"}, {"timestamp": "2026-09-22T07:00:07.592Z", "date_only": false, "value": "2026-09-22T07:00:07.592049Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Rxt0VDM7MK4Z8RuITgocYGCBknifxvEh15-6W7DHJfJzjfw", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "c7528f46-40d9-4eeb-bcad-cac6d693049c"}, {"timestamp": "2026-09-23T00:00:23.043Z", "date_only": false, "value": "2026-09-23T00:00:23.043741Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Rxt0VDM7MK4Z8RuITgocYGCBknifxvEh15-6W7DHJfJzjfw", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "aa9052c6-c5c2-46da-9839-dd1c368ce6f8"}, {"timestamp": "2026-09-30T16:48:35.737Z", "date_only": false, "value": "2026-09-30T16:48:35.737541Z", "kind": "other", "label": "Document generated", "source": "csaf_cisa \u00b7 ICSA-26-274-01", "record": "ICSA-26-274-01", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-01T06:00:00Z", "date_only": false, "value": "2026-10-01T06:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-26-274-01", "record": "ICSA-26-274-01", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-01T06:00:00Z", "date_only": false, "value": "2026-10-01T06:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-26-274-01", "record": "ICSA-26-274-01", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-01T06:00:00Z", "date_only": false, "value": "2026-10-01T06:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-26-274-01", "record": "ICSA-26-274-01", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-01T20:03:22.498Z", "date_only": false, "value": "2026-10-01T20:03:22.498429Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mwtno7poq624", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "efd2654a-7df4-48bf-9ab8-8f4382271bf7", "url": "https://bsky.app/profile/cyfar.ca/post/3mwtno7poq624"}, {"timestamp": "2026-10-01T21:51:59.502Z", "date_only": false, "value": "2026-10-01T21:51:59.502883Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/AdvisoryICS/statuses/117367866593418732", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "b629aa3f-0245-4521-96bd-93e3d17ce0d4", "url": "https://infosec.exchange/users/AdvisoryICS/statuses/117367866593418732"}, {"timestamp": "2026-10-01T21:53:20.164Z", "date_only": false, "value": "2026-10-01T21:53:20.164038Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/advisoryics.bsky.social/post/3mwttssyu2k25", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "109c8428-535f-4641-b8c6-7beb2c69bf85", "url": "https://bsky.app/profile/advisoryics.bsky.social/post/3mwttssyu2k25"}, {"timestamp": "2026-10-02T03:02:16Z", "date_only": false, "value": "2026-10-02T03:02:16+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:6849", "record": "RHSA-2023:6849", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-02T03:02:16Z", "date_only": false, "value": "2026-10-02T03:02:16+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2023:6849", "record": "RHSA-2023:6849", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-02T03:02:16Z", "date_only": false, "value": "2026-10-02T03:02:16+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2023:6849", "record": "RHSA-2023:6849", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-02T03:02:18Z", "date_only": false, "value": "2026-10-02T03:02:18+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:6866", "record": "RHSA-2023:6866", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-02T03:02:18Z", "date_only": false, "value": "2026-10-02T03:02:18+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2023:6866", "record": "RHSA-2023:6866", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-02T03:02:18Z", "date_only": false, "value": "2026-10-02T03:02:18+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2023:6866", "record": "RHSA-2023:6866", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-02T03:02:20Z", "date_only": false, "value": "2026-10-02T03:02:20+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:6877", "record": "RHSA-2023:6877", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-02T03:02:20Z", "date_only": false, "value": "2026-10-02T03:02:20+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:6878", "record": "RHSA-2023:6878", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-02T03:02:20Z", "date_only": false, "value": "2026-10-02T03:02:20+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2023:6877", "record": "RHSA-2023:6877", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-02T03:02:20Z", "date_only": false, "value": "2026-10-02T03:02:20+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2023:6878", "record": "RHSA-2023:6878", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-02T03:02:20Z", "date_only": false, "value": "2026-10-02T03:02:20+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2023:6877", "record": "RHSA-2023:6877", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-02T03:02:20Z", "date_only": false, "value": "2026-10-02T03:02:20+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2023:6878", "record": "RHSA-2023:6878", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-02T03:02:22Z", "date_only": false, "value": "2026-10-02T03:02:22+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:6879", "record": "RHSA-2023:6879", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-02T03:02:22Z", "date_only": false, "value": "2026-10-02T03:02:22+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2023:6879", "record": "RHSA-2023:6879", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-02T03:02:22Z", "date_only": false, "value": "2026-10-02T03:02:22+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2023:6879", "record": "RHSA-2023:6879", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-02T07:09:49.014Z", "date_only": false, "value": "2026-10-02T07:09:49.014018Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mwusvvukp52s", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "b6d6012e-d7ae-46b0-870a-a716dedcccb6", "url": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mwusvvukp52s"}, {"timestamp": "2026-10-05T00:00:00Z", "date_only": true, "value": "2026-10-05", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1264", "record": "CERTFR-2026-AVI-1264", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-10-05T19:00:21Z", "date_only": false, "value": "2026-10-05T19:00:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Vr7K5wUWuvqdS1L8sKYBanK8StLUl8DaROwdGOQAfROVtys", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "3bc9af45-26dc-45ee-bf03-96fddd5f9548"}, {"timestamp": "2026-10-06T00:00:00Z", "date_only": false, "value": "2026-10-06T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1264", "record": "CERTFR-2026-AVI-1264", "field": "initial_release_date"}, {"timestamp": "2026-10-06T00:00:00Z", "date_only": false, "value": "2026-10-06T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1264", "record": "CERTFR-2026-AVI-1264", "field": "revisions.0.revision_date"}, {"timestamp": "2026-10-06T13:10:17.814Z", "date_only": false, "value": "2026-10-06T13:10:17.814408Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mx7iw6l5fd24", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "7a755aa7-93e9-45f5-9284-3034ee66047d", "url": "https://bsky.app/profile/o2cloud.bsky.social/post/3mx7iw6l5fd24"}, {"timestamp": "2026-10-07T00:00:00Z", "date_only": false, "value": "2026-10-07T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1264", "record": "CERTFR-2026-AVI-1264", "field": "last_revision_date"}, {"timestamp": "2026-10-07T00:00:00Z", "date_only": false, "value": "2026-10-07T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1264", "record": "CERTFR-2026-AVI-1264", "field": "revisions.1.revision_date"}, {"timestamp": "2026-10-14T12:41:32Z", "date_only": false, "value": "2026-10-14T12:41:32+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:7247", "record": "RHSA-2023:7247", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-14T12:41:32Z", "date_only": false, "value": "2026-10-14T12:41:32+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2023:7247", "record": "RHSA-2023:7247", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-14T12:41:32Z", "date_only": false, "value": "2026-10-14T12:41:32+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2023:7247", "record": "RHSA-2023:7247", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-14T16:01:12.336Z", "date_only": false, "value": "2026-10-14T16:01:12.336000Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mxtw75abs22y", "record": "CVE-2023-46604", "field": "creation_timestamp", "uuid": "7e37eedf-b714-4ec4-9e31-1e09a34b9598", "url": "https://bsky.app/profile/cyfar.ca/post/3mxtw75abs22y"}]}