{"metadata": {"vulnerability": "cve-2024-11182", "count": 58, "kinds": {"milestone": 4, "sighting": 33, "kev": 11, "other": 10}}, "data": [{"timestamp": "2024-11-13T15:38:18.210Z", "date_only": false, "value": "2024-11-13T15:38:18.210Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-11182", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-11-15T10:43:10.960Z", "date_only": false, "value": "2024-11-15T10:43:10.960Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-11182", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-11-15T10:43:10.960Z", "date_only": false, "value": "2024-11-15T10:43:10.960Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / ESET", "record": "cve-2024-11182", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-11-15T10:46:29.767Z", "date_only": false, "value": "2024-11-15T10:46:29.767537Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/113486567128857878", "record": "CVE-2024-11182", "field": "creation_timestamp", "uuid": "972f247f-3f23-4a35-875e-7234cf15a1cb", "url": "https://infosec.exchange/users/cve/statuses/113486567128857878"}, {"timestamp": "2024-11-15T11:15:10Z", "date_only": false, "value": "2024-11-15T11:15:10Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-Q3FG-4X56-MX94", "record": "GHSA-Q3FG-4X56-MX94", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2024-11-15T11:15:10.410Z", "date_only": false, "value": "2024-11-15T11:15:10.410", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-11182", "record": "FKIE_CVE-2024-11182", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-11-15T12:31:45Z", "date_only": false, "value": "2024-11-15T12:31:45Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-Q3FG-4X56-MX94", "record": "GHSA-Q3FG-4X56-MX94", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-11-15T13:15:28Z", "date_only": false, "value": "2024-11-15T13:15:28.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/11056", "record": "CVE-2024-11182", "field": "creation_timestamp", "uuid": "5ceba78b-d389-4100-89ea-938c48ae03d8", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-11182 - \"MDaemon Email Server Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-11182 \nPublished : Nov. 15, 2024, 11:15 a.m. | 36\u00a0minutes ago \nDescription : An XSS issue was discovered in   \n  \nMDaemon Email Server before version\u00a024.5.1c. An attacker can send an HTML e-mail message   \nwith   \nJavaScript in an img tag. This could  \n allow a remote attacker  \n  \nto load arbitrary JavaScript code in the context of a webmail user's browser window. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/11056"}, {"timestamp": "2025-05-15T07:36:30.381Z", "date_only": false, "value": "2025-05-15T07:36:30.381214Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/esetresearch.bsky.social/post/3lp6ywkdgbc24", "record": "CVE-2024-11182", "field": "creation_timestamp", "uuid": "25120dea-6354-4ba7-b0c4-439b3defb033", "url": "https://bsky.app/profile/esetresearch.bsky.social/post/3lp6ywkdgbc24"}, {"timestamp": "2025-05-15T07:36:30.928Z", "date_only": false, "value": "2025-05-15T07:36:30.928167Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/esetresearch.bsky.social/post/3lp6ywmaxyk24", "record": "CVE-2024-11182", "field": "creation_timestamp", "uuid": "0bb3b567-9b3b-4a02-a72a-1fbbba5e573e", "url": "https://bsky.app/profile/esetresearch.bsky.social/post/3lp6ywmaxyk24"}, {"timestamp": "2025-05-15T07:36:31.467Z", "date_only": false, "value": "2025-05-15T07:36:31.467680Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/esetresearch.bsky.social/post/3lp6ywmb2wc24", "record": "CVE-2024-11182", "field": "creation_timestamp", "uuid": "002157f3-306e-4f5c-9079-f20d388e7659", "url": "https://bsky.app/profile/esetresearch.bsky.social/post/3lp6ywmb2wc24"}, {"timestamp": "2025-05-15T07:36:32.005Z", "date_only": false, "value": "2025-05-15T07:36:32.005840Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/esetresearch.bsky.social/post/3lp6ywnethc24", "record": "CVE-2024-11182", "field": "creation_timestamp", "uuid": "e84c6d5f-f336-43e2-810f-06f84f2a6873", "url": "https://bsky.app/profile/esetresearch.bsky.social/post/3lp6ywnethc24"}, {"timestamp": "2025-05-15T07:36:32.529Z", "date_only": false, "value": "2025-05-15T07:36:32.529407Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/esetresearch.bsky.social/post/3lp6ywod47c24", "record": "CVE-2024-11182", "field": "creation_timestamp", "uuid": "b825e835-649d-4bfb-b544-56ddddc9986b", "url": "https://bsky.app/profile/esetresearch.bsky.social/post/3lp6ywod47c24"}, {"timestamp": "2025-05-15T12:54:58Z", "date_only": false, "value": "2025-05-15T12:54:58.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/itsec_news/5886", "record": "CVE-2024-11182", "field": "creation_timestamp", "uuid": "8596b868-3805-45a6-92df-376e10793fe4", "content": "\ud83e\udd12 \u0420\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0430\u044f APT28 \u0432\u0437\u043b\u043e\u043c\u0430\u043b\u0430 \u043f\u043e\u0447\u0442\u0443 \u0447\u0435\u0440\u0435\u0437 0-day \u0432 MDaemon. \u041f\u0440\u043e\u0441\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0448\u044c \u043f\u0438\u0441\u044c\u043c\u043e \u2014 \u0438 \u0432\u0441\u0451, \u043f\u0440\u0438\u0432\u0435\u0442, \u041a\u0440\u0435\u043c\u043b\u044c.\n\nESET \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0441\u0432\u0435\u0436\u0443\u044e \u043a\u0438\u0431\u0435\u0440\u0448\u043f\u0438\u043e\u043d\u0441\u043a\u0443\u044e \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044e \u0433\u0440\u0443\u043f\u043f\u044b APT28 (aka Fancy Bear). \u041d\u0430\u0437\u0432\u0430\u043b\u0438 \u0435\u0451 Operation RoundPress, \u0438 \u044d\u0442\u043e \u043d\u0435 \u043f\u0440\u043e\u0441\u0442\u043e \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u0444\u0438\u0448\u0438\u043d\u0433, \u0430 \u0432\u044b\u0441\u043e\u043a\u043e\u0442\u043e\u0447\u043d\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u043d\u0430 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u2014 Roundcube, Horde, Zimbra \u0438 MDaemon.\n\n\u041a\u043b\u044e\u0447\u0435\u0432\u043e\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u2014 0-day-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-11182 \u0432 MDaemon. \u0414\u043e \u043d\u043e\u044f\u0431\u0440\u044f 2024 \u043e\u043d\u0430 \u0431\u044b\u043b\u0430 \u043d\u0438\u043a\u043e\u043c\u0443 \u043d\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430. \u0418 \u0442\u0443\u0442 \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u0432\u0435\u0441\u0435\u043b\u044c\u0435.\n\n\u0416\u0435\u0440\u0442\u0432\u0435 \u043f\u0440\u0438\u0445\u043e\u0434\u0438\u043b\u043e \u043f\u0438\u0441\u044c\u043c\u043e \u0441 \u043d\u0435\u0432\u0438\u043d\u043d\u044b\u043c \u0432\u0438\u0434\u043e\u043c. \u041d\u043e \u0432 \u0442\u0435\u043b\u0435 \u2014 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 JavaScript. \u041d\u0438\u043a\u0430\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a. \u041d\u0438\u043a\u0430\u043a\u0438\u0445 \u0432\u043b\u043e\u0436\u0435\u043d\u0438\u0439. \u041f\u0440\u043e\u0441\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0448\u044c \u043f\u0438\u0441\u044c\u043c\u043e \u2014 \u0438 \u0441\u043a\u0440\u0438\u043f\u0442 \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442 \u0432\u043e\u0440\u043e\u0432\u0430\u0442\u044c:\n\u25fc\ufe0f\u043f\u0438\u0441\u044c\u043c\u0430, \u043b\u043e\u0433\u0438\u043d\u044b, \u043a\u043e\u043d\u0442\u0430\u043a\u0442\u044b, \u043a\u043e\u0434\u044b 2FA, \u0438\u0441\u0442\u043e\u0440\u0438\u044e \u0432\u0445\u043e\u0434\u043e\u0432;\n\u25fc\ufe0f\u0430 \u043f\u043e\u0442\u043e\u043c \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0444\u0438\u043b\u044c\u0442\u0440, \u0447\u0442\u043e\u0431\u044b \u0432\u0441\u0451 \u043d\u043e\u0432\u043e\u0435 \u0443\u0445\u043e\u0434\u0438\u043b\u043e \u043f\u0440\u044f\u043c\u0438\u043a\u043e\u043c \u0432 \u0440\u0443\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u2014 \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u0441\u0430\u043c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441 \u0443\u0436\u0435 \u043d\u0435 \u0430\u043a\u0442\u0438\u0432\u0435\u043d.\n\n\u041a\u043e\u0433\u043e \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043b\u0438?\n\u25fc\ufe0f\u0443\u043a\u0440\u0430\u0438\u043d\u0441\u043a\u0438\u0435 \u0433\u043e\u0441\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b,\n\u25fc\ufe0f\u043e\u0431\u043e\u0440\u043e\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0432 \u0411\u043e\u043b\u0433\u0430\u0440\u0438\u0438 \u0438 \u0420\u0443\u043c\u044b\u043d\u0438\u0438 (\u0442\u0435, \u0447\u0442\u043e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u044f\u0442/\u0447\u0438\u043d\u044f\u0442 \u0441\u043e\u0432\u0435\u0442\u0441\u043a\u043e\u0435 \u043e\u0440\u0443\u0436\u0438\u0435),\n\u25fc\ufe0f\u0433\u043e\u0441\u043e\u0440\u0433\u0430\u043d\u044b \u0432 \u0421\u0435\u0440\u0431\u0438\u0438, \u0413\u0440\u0435\u0446\u0438\u0438, \u042d\u043a\u0432\u0430\u0434\u043e\u0440\u0435, \u041a\u0430\u043c\u0435\u0440\u0443\u043d\u0435, \u043d\u0430 \u041a\u0438\u043f\u0440\u0435.\n\n\u041f\u043e\u0447\u0435\u043c\u0443 \u044d\u0442\u043e \u0430\u0434\u0441\u043a\u0438 \u043e\u043f\u0430\u0441\u043d\u043e?\n\u25fc\ufe0f0-day, \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0439 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439: \u043f\u0440\u043e\u0441\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u043b \u043f\u0438\u0441\u044c\u043c\u043e.\n\u25fc\ufe0f\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0444\u0438\u043b\u044c\u0442\u0440\u043e\u0432 \u0438 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 \u0432\u0441\u0435\u0445 \u0431\u0443\u0434\u0443\u0449\u0438\u0445 \u043f\u0438\u0441\u0435\u043c.\n\u25fc\ufe0f\u0412\u043e\u0440\u043e\u0432\u0441\u0442\u0432\u043e \u043f\u0430\u0440\u043e\u043b\u0435\u0439, \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 app-\u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0434\u0430\u0436\u0435 \u043f\u043e\u0441\u043b\u0435 \u0441\u043c\u0435\u043d\u044b \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0433\u043e.\n\n\ud83e\udd12 \u0415\u0441\u043b\u0438 \u0432\u044b \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442\u0435 \u0441 MDaemon, Roundcube, Zimbra \u2014 \u0441\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0439\u0442\u0435\u0441\u044c.\n\ud83e\udd12 \u041f\u0440\u043e\u0432\u0435\u0440\u044f\u0439\u0442\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u043f\u0435\u0440\u0435\u0441\u044b\u043b\u043a\u0438 \u0438 \u0444\u0438\u043b\u044c\u0442\u0440\u044b.\n\ud83e\udd12 \u0412\u043a\u043b\u044e\u0447\u0430\u0439\u0442\u0435 2FA \u0438 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u044c\u0442\u0435 \u0430\u043d\u043e\u043c\u0430\u043b\u0438\u0438 \u0432\u0445\u043e\u0434\u0430.\n\ud83e\udd12 \u0418 \u043d\u0435 \u043d\u0430\u0434\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u043f\u0438\u0441\u044c\u043c\u0430, \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u043e\u043d\u0438 \u0432\u044b\u0433\u043b\u044f\u0434\u044f\u0442 \u043a\u0430\u043a \u043f\u0440\u0438\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u0435 \u043d\u0430 \u043a\u043e\u0444\u0435 \u0441 \u041c\u0438\u043d\u043e\u0431\u043e\u0440\u043e\u043d\u044b.\n\nAPT28 \u0441\u043d\u043e\u0432\u0430 \u043d\u0430\u043f\u043e\u043c\u043d\u0438\u043b\u0438, \u0447\u0442\u043e \u0438\u043d\u043e\u0433\u0434\u0430 \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u043d\u0435 \u043d\u0443\u0436\u043d\u043e \u043d\u0438\u0447\u0435\u0433\u043e\u2026 \u043a\u0440\u043e\u043c\u0435 \u0433\u043b\u0430\u0437, \u0440\u0435\u0448\u0438\u0432\u0448\u0438\u0445 \u043f\u0440\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u043f\u0438\u0441\u044c\u043c\u043e.\n\nITsec NEWS", "url": "https://t.me/itsec_news/5886", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-05-16T10:20:34.847Z", "date_only": false, "value": "2025-05-16T10:20:34.847128Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lpbskygcp72h", "record": "CVE-2024-11182", "field": "creation_timestamp", "uuid": "7e82c9cb-c5df-4833-b76a-2606ab9c5bcd", "url": "https://bsky.app/profile/hackingne.ws/post/3lpbskygcp72h"}, {"timestamp": "2025-05-16T21:02:19.255Z", "date_only": false, "value": "2025-05-16T21:02:19.255469Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lpcwgirgwl2m", "record": "CVE-2024-11182", "field": "creation_timestamp", "uuid": "36e7b87f-a6aa-4fea-aee1-6a6265618bc3", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lpcwgirgwl2m"}, {"timestamp": "2025-05-19T00:00:00Z", "date_only": false, "value": "2025-05-19T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2024-11182", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "a7f9501d-31aa-4dbf-b911-fce8dfda061a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-05-19T00:00:00Z", "date_only": true, "value": "2025-05-19", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-11182", "field": "containers.adp.0.metrics.1.other.content.dateAdded"}, {"timestamp": "2025-05-19T00:00:00Z", "date_only": true, "value": "2025-05-19", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2024-11182", "field": "evidence.0.details.date_added", "uuid": "a7f9501d-31aa-4dbf-b911-fce8dfda061a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-05-19T00:00:00Z", "date_only": false, "value": "2025-05-19T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2024-11182", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "a7f9501d-31aa-4dbf-b911-fce8dfda061a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-05-19T00:00:00Z", "date_only": false, "value": "2025-05-19T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2024-11182", "field": "status.status_updated_at", "uuid": "a7f9501d-31aa-4dbf-b911-fce8dfda061a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-05-19T00:00:00Z", "date_only": false, "value": "2025-05-19T00:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-11182", "field": "containers.adp.0.timeline.0.time", "text": "CVE-2024-11182 added to CISA KEV"}, {"timestamp": "2025-05-19T18:00:19.224Z", "date_only": false, "value": "2025-05-19T18:00:19.224563Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lpk5nte5dl2w", "record": "CVE-2024-11182", "field": "creation_timestamp", "uuid": "dbc0acbf-4af9-4a26-a1c9-f3bf43f4afbb", "url": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lpk5nte5dl2w"}, {"timestamp": "2025-05-19T18:10:17.860Z", "date_only": false, "value": "2025-05-19T18:10:17.860320Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lpk67oz5od2h", "record": "CVE-2024-11182", "field": "creation_timestamp", "uuid": "15499268-c65a-4750-a404-3e2b959c9b10", "url": "https://bsky.app/profile/buherator.bsky.social/post/3lpk67oz5od2h"}, {"timestamp": "2025-05-19T19:16:30.399Z", "date_only": false, "value": "2025-05-19T19:16:30.399237Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/114536099967876264", "record": "CVE-2024-11182", "field": "creation_timestamp", "uuid": "91c8daa4-1bd1-46ac-a506-bf4e647a8b28", "url": "https://infosec.exchange/users/cR0w/statuses/114536099967876264"}, {"timestamp": "2025-05-19T19:40:14.150Z", "date_only": false, "value": "2025-05-19T19:40:14.150566Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lpkdajaahb2r", "record": "CVE-2024-11182", "field": "creation_timestamp", "uuid": "a8c8aed0-4c12-4f6c-b5c4-cb93aafab0c8", "url": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lpkdajaahb2r"}, {"timestamp": "2025-05-19T19:56:21.114Z", "date_only": false, "value": "2025-05-19T19:56:21.114525Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/4040097", "record": "CVE-2024-11182", "field": "creation_timestamp", "uuid": "80a9b802-97c5-4840-abe7-c75ddf45fb42", "url": "https://feedsin.space/feed/CISAKevBot/items/4040097"}, {"timestamp": "2025-05-19T21:38:25.156Z", "date_only": false, "value": "2025-05-19T21:38:25.156834Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lpkjttci2c2j", "record": "CVE-2024-11182", "field": "creation_timestamp", "uuid": "cfbc506c-1e16-433d-b003-3dec3b59eeea", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lpkjttci2c2j"}, {"timestamp": "2025-05-19T22:39:44Z", "date_only": false, "value": "2025-05-19T22:39:44.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16945", "record": "CVE-2024-11182", "field": "creation_timestamp", "uuid": "474893f2-29ea-41b1-9a2f-679444c7f7c3", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-11182\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N)\n\ud83d\udd39 Description: An XSS issue was discovered in \n\nMDaemon Email Server before version\u00a024.5.1c. An attacker can send an HTML e-mail message \nwith \nJavaScript in an img tag. This could\n allow a remote attacker\n\nto load arbitrary JavaScript code in the context of a webmail user's browser window.\n\ud83d\udccf Published: 2024-11-15T10:43:10.960Z\n\ud83d\udccf Modified: 2025-05-19T22:20:23.676Z\n\ud83d\udd17 References:\n1. https://files.mdaemon.com/mdaemon/beta/RelNotes_en.html", "url": "https://t.me/DarkWebInformer_CVEAlerts/16945"}, {"timestamp": "2025-05-20T08:17:30.854Z", "date_only": false, "value": "2025-05-20T08:17:30.854518Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3lplnk5is3s2w", "record": "CVE-2024-11182", "field": "creation_timestamp", "uuid": "3b1729d6-d5a1-4ba2-9b7d-9abe691ee0ce", "url": "https://bsky.app/profile/basefortify.bsky.social/post/3lplnk5is3s2w"}, {"timestamp": "2025-05-20T08:17:32.402Z", "date_only": false, "value": "2025-05-20T08:17:32.402091Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3lplnkafeyc2w", "record": "CVE-2024-11182", "field": "creation_timestamp", "uuid": "5476a35a-0674-4225-88c8-686412dfcb5e", "url": "https://bsky.app/profile/basefortify.bsky.social/post/3lplnkafeyc2w"}, {"timestamp": "2025-05-20T08:17:33.859Z", "date_only": false, "value": "2025-05-20T08:17:33.859693Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3lplnkflv4c2w", "record": "CVE-2024-11182", "field": "creation_timestamp", "uuid": "337501e9-db30-4f53-a126-2f9655071daa", "url": "https://bsky.app/profile/basefortify.bsky.social/post/3lplnkflv4c2w"}, {"timestamp": "2025-05-20T21:02:20.771Z", "date_only": false, "value": "2025-05-20T21:02:20.771446Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lpmyc6ajun2r", "record": "CVE-2024-11182", "field": "creation_timestamp", "uuid": "7b7a61d4-a48b-401e-be77-6dd418685b52", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lpmyc6ajun2r"}, {"timestamp": "2025-05-21T03:55:39.100Z", "date_only": false, "value": "2025-05-21T03:55:39.100663Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-11182", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-05-21T03:55:39.100Z", "date_only": false, "value": "2025-05-21T03:55:39.100663Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-11182", "record": "FKIE_CVE-2024-11182", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-05-21T13:10:24Z", "date_only": false, "value": "2025-05-21T13:10:24+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2024-11182", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "0f73638d-c717-440c-b183-838470348052", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-05-21T13:10:24Z", "date_only": false, "value": "2025-05-21T13:10:24+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2024-11182", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "0f73638d-c717-440c-b183-838470348052", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-05-21T13:10:24Z", "date_only": false, "value": "2025-05-21T13:10:24+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2024-11182", "field": "status.status_updated_at", "uuid": "0f73638d-c717-440c-b183-838470348052", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-05-21T13:10:24.903Z", "date_only": false, "value": "2025-05-21T13:10:24.903Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2024-11182", "field": "evidence.0.details.added_date", "uuid": "0f73638d-c717-440c-b183-838470348052", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-06-01T02:57:47.121Z", "date_only": false, "value": "2025-06-01T02:57:47.121289Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-887b81fb-d3ea0e1ba8258ecc", "record": "CVE-2024-11182", "field": "creation_timestamp", "uuid": "2e074742-e2c3-4d08-bd8d-7078eb22d59e", "url": "https://poliverso.org/objects/0477a01e-887b81fb-d3ea0e1ba8258ecc"}, {"timestamp": "2025-06-09T00:00:00Z", "date_only": true, "value": "2025-06-09", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2024-11182", "field": "evidence.0.details.due_date", "uuid": "a7f9501d-31aa-4dbf-b911-fce8dfda061a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-09-28T08:23:31Z", "date_only": false, "value": "2025-09-28T08:23:31.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2024-11182", "field": "creation_timestamp", "uuid": "5ce067c8-7c16-4a78-a39a-6c193b7607ca"}, {"timestamp": "2025-09-29T03:12:14Z", "date_only": false, "value": "2025-09-29T03:12:14.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2024-11182", "field": "creation_timestamp", "uuid": "b6abd10f-4f03-40b1-a89d-2f712b8cbbb4"}, {"timestamp": "2025-10-21T22:55:36.394Z", "date_only": false, "value": "2025-10-21T22:55:36.394Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-11182", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T22:55:36.394Z", "date_only": false, "value": "2025-10-21T22:55:36.394Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-11182", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:33:11Z", "date_only": false, "value": "2025-10-22T00:33:11Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-Q3FG-4X56-MX94", "record": "GHSA-Q3FG-4X56-MX94", "field": "modified", "linked_record": true}, {"timestamp": "2026-02-02T12:26:00.760Z", "date_only": false, "value": "2026-02-02T12:26:00.760089Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4df6a5b1-fbb7-48b5-b261-d77a9c601017", "record": "CVE-2024-11182", "field": "creation_timestamp", "uuid": "2c435a11-0cfb-49cf-9b5d-854f5c79efd7", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4df6a5b1-fbb7-48b5-b261-d77a9c601017", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-02-02T12:26:00.760Z", "date_only": false, "value": "2026-02-02T12:26:00.760089Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4df6a5b1-fbb7-48b5-b261-d77a9c601017", "record": "CVE-2024-11182", "field": "creation_timestamp", "uuid": "21b00bdc-c775-46db-b1cd-d8255a320c1a", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4df6a5b1-fbb7-48b5-b261-d77a9c601017", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-17T06:57:13.713Z", "date_only": false, "value": "2026-06-17T06:57:13.713", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-11182", "record": "FKIE_CVE-2024-11182", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-06-19T12:46:15.744Z", "date_only": false, "value": "2026-06-19T12:46:15.744274Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ff3ffbea-059f-464f-845e-9ee6b9651f01", "record": "CVE-2024-11182", "field": "creation_timestamp", "uuid": "e9aabcb8-2ec7-4a61-8113-386a3a13dfc5", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ff3ffbea-059f-464f-845e-9ee6b9651f01", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2024-11182", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "0f73638d-c717-440c-b183-838470348052", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:12:51.995Z", "date_only": false, "value": "2026-06-23T11:12:51.995244Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/0f73638d-c717-440c-b183-838470348052", "record": "CVE-2024-11182", "field": "creation_timestamp", "uuid": "ba4254a3-3319-48ec-8135-26e1b4605646", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/0f73638d-c717-440c-b183-838470348052", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T14:04:01.303Z", "date_only": false, "value": "2026-06-23T14:04:01.303565Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a23c4f9f-b0dc-4243-b30e-0737b3f8ec57", "record": "CVE-2024-11182", "field": "creation_timestamp", "uuid": "a27cfefe-e8cf-44b1-b67e-e275a311f781", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a23c4f9f-b0dc-4243-b30e-0737b3f8ec57", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-26T02:03:02.521Z", "date_only": false, "value": "2026-07-26T02:03:02.521322Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Positive_Technologies/3595", "record": "CVE-2024-11182", "field": "creation_timestamp", "uuid": "8cc7f2c6-a62e-4fba-b9c8-431260b89d97", "url": "https://t.me/Positive_Technologies/3595"}, {"timestamp": "2026-07-27T00:01:24.718Z", "date_only": false, "value": "2026-07-27T00:01:24.718601Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Positive_Technologies/3595", "record": "CVE-2024-11182", "field": "creation_timestamp", "uuid": "1d5a06b5-99eb-4a7d-894d-6524777e7470", "url": "https://t.me/Positive_Technologies/3595"}, {"timestamp": "2026-07-28T16:00:09.733Z", "date_only": false, "value": "2026-07-28T16:00:09.733345Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Positive_Technologies/3595", "record": "CVE-2024-11182", "field": "creation_timestamp", "uuid": "1d1fbf06-d570-40ed-868d-411fa0e3a062", "url": "https://t.me/Positive_Technologies/3595"}, {"timestamp": "2026-07-29T00:00:32.912Z", "date_only": false, "value": "2026-07-29T00:00:32.912955Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Positive_Technologies/3595", "record": "CVE-2024-11182", "field": "creation_timestamp", "uuid": "068f6aa0-2382-44bc-9c9b-4a5a563cb17f", "url": "https://t.me/Positive_Technologies/3595"}, {"timestamp": "2026-11-04T13:00:01Z", "date_only": false, "value": "2026-11-04T13:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2024-11182", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "a7f9501d-31aa-4dbf-b911-fce8dfda061a", "status": {"status_reason": "confirmed", "exploited": true}}], "metrics": {"as_of": "2026-11-14T14:19:36.087Z", "anchors": {"origin": {"timestamp": "2024-11-15T10:43:10.960Z", "date_only": false, "value": "2024-11-15T10:43:10.960Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-11182", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2024-11-15T10:43:10.960Z", "date_only": false, "value": "2024-11-15T10:43:10.960Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-11182", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": {"timestamp": "2025-05-15T12:54:58Z", "date_only": false, "value": "2025-05-15T12:54:58.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/itsec_news/5886", "record": "CVE-2024-11182", "field": "creation_timestamp", "uuid": "8596b868-3805-45a6-92df-376e10793fe4", "content": "\ud83e\udd12 \u0420\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0430\u044f APT28 \u0432\u0437\u043b\u043e\u043c\u0430\u043b\u0430 \u043f\u043e\u0447\u0442\u0443 \u0447\u0435\u0440\u0435\u0437 0-day \u0432 MDaemon. \u041f\u0440\u043e\u0441\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0448\u044c \u043f\u0438\u0441\u044c\u043c\u043e \u2014 \u0438 \u0432\u0441\u0451, \u043f\u0440\u0438\u0432\u0435\u0442, \u041a\u0440\u0435\u043c\u043b\u044c.\n\nESET \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0441\u0432\u0435\u0436\u0443\u044e \u043a\u0438\u0431\u0435\u0440\u0448\u043f\u0438\u043e\u043d\u0441\u043a\u0443\u044e \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044e \u0433\u0440\u0443\u043f\u043f\u044b APT28 (aka Fancy Bear). \u041d\u0430\u0437\u0432\u0430\u043b\u0438 \u0435\u0451 Operation RoundPress, \u0438 \u044d\u0442\u043e \u043d\u0435 \u043f\u0440\u043e\u0441\u0442\u043e \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u0444\u0438\u0448\u0438\u043d\u0433, \u0430 \u0432\u044b\u0441\u043e\u043a\u043e\u0442\u043e\u0447\u043d\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u043d\u0430 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u2014 Roundcube, Horde, Zimbra \u0438 MDaemon.\n\n\u041a\u043b\u044e\u0447\u0435\u0432\u043e\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u2014 0-day-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-11182 \u0432 MDaemon. \u0414\u043e \u043d\u043e\u044f\u0431\u0440\u044f 2024 \u043e\u043d\u0430 \u0431\u044b\u043b\u0430 \u043d\u0438\u043a\u043e\u043c\u0443 \u043d\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430. \u0418 \u0442\u0443\u0442 \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u0432\u0435\u0441\u0435\u043b\u044c\u0435.\n\n\u0416\u0435\u0440\u0442\u0432\u0435 \u043f\u0440\u0438\u0445\u043e\u0434\u0438\u043b\u043e \u043f\u0438\u0441\u044c\u043c\u043e \u0441 \u043d\u0435\u0432\u0438\u043d\u043d\u044b\u043c \u0432\u0438\u0434\u043e\u043c. \u041d\u043e \u0432 \u0442\u0435\u043b\u0435 \u2014 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 JavaScript. \u041d\u0438\u043a\u0430\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a. \u041d\u0438\u043a\u0430\u043a\u0438\u0445 \u0432\u043b\u043e\u0436\u0435\u043d\u0438\u0439. \u041f\u0440\u043e\u0441\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0448\u044c \u043f\u0438\u0441\u044c\u043c\u043e \u2014 \u0438 \u0441\u043a\u0440\u0438\u043f\u0442 \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442 \u0432\u043e\u0440\u043e\u0432\u0430\u0442\u044c:\n\u25fc\ufe0f\u043f\u0438\u0441\u044c\u043c\u0430, \u043b\u043e\u0433\u0438\u043d\u044b, \u043a\u043e\u043d\u0442\u0430\u043a\u0442\u044b, \u043a\u043e\u0434\u044b 2FA, \u0438\u0441\u0442\u043e\u0440\u0438\u044e \u0432\u0445\u043e\u0434\u043e\u0432;\n\u25fc\ufe0f\u0430 \u043f\u043e\u0442\u043e\u043c \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0444\u0438\u043b\u044c\u0442\u0440, \u0447\u0442\u043e\u0431\u044b \u0432\u0441\u0451 \u043d\u043e\u0432\u043e\u0435 \u0443\u0445\u043e\u0434\u0438\u043b\u043e \u043f\u0440\u044f\u043c\u0438\u043a\u043e\u043c \u0432 \u0440\u0443\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u2014 \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u0441\u0430\u043c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441 \u0443\u0436\u0435 \u043d\u0435 \u0430\u043a\u0442\u0438\u0432\u0435\u043d.\n\n\u041a\u043e\u0433\u043e \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043b\u0438?\n\u25fc\ufe0f\u0443\u043a\u0440\u0430\u0438\u043d\u0441\u043a\u0438\u0435 \u0433\u043e\u0441\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b,\n\u25fc\ufe0f\u043e\u0431\u043e\u0440\u043e\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0432 \u0411\u043e\u043b\u0433\u0430\u0440\u0438\u0438 \u0438 \u0420\u0443\u043c\u044b\u043d\u0438\u0438 (\u0442\u0435, \u0447\u0442\u043e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u044f\u0442/\u0447\u0438\u043d\u044f\u0442 \u0441\u043e\u0432\u0435\u0442\u0441\u043a\u043e\u0435 \u043e\u0440\u0443\u0436\u0438\u0435),\n\u25fc\ufe0f\u0433\u043e\u0441\u043e\u0440\u0433\u0430\u043d\u044b \u0432 \u0421\u0435\u0440\u0431\u0438\u0438, \u0413\u0440\u0435\u0446\u0438\u0438, \u042d\u043a\u0432\u0430\u0434\u043e\u0440\u0435, \u041a\u0430\u043c\u0435\u0440\u0443\u043d\u0435, \u043d\u0430 \u041a\u0438\u043f\u0440\u0435.\n\n\u041f\u043e\u0447\u0435\u043c\u0443 \u044d\u0442\u043e \u0430\u0434\u0441\u043a\u0438 \u043e\u043f\u0430\u0441\u043d\u043e?\n\u25fc\ufe0f0-day, \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0439 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439: \u043f\u0440\u043e\u0441\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u043b \u043f\u0438\u0441\u044c\u043c\u043e.\n\u25fc\ufe0f\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0444\u0438\u043b\u044c\u0442\u0440\u043e\u0432 \u0438 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 \u0432\u0441\u0435\u0445 \u0431\u0443\u0434\u0443\u0449\u0438\u0445 \u043f\u0438\u0441\u0435\u043c.\n\u25fc\ufe0f\u0412\u043e\u0440\u043e\u0432\u0441\u0442\u0432\u043e \u043f\u0430\u0440\u043e\u043b\u0435\u0439, \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 app-\u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0434\u0430\u0436\u0435 \u043f\u043e\u0441\u043b\u0435 \u0441\u043c\u0435\u043d\u044b \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0433\u043e.\n\n\ud83e\udd12 \u0415\u0441\u043b\u0438 \u0432\u044b \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442\u0435 \u0441 MDaemon, Roundcube, Zimbra \u2014 \u0441\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0439\u0442\u0435\u0441\u044c.\n\ud83e\udd12 \u041f\u0440\u043e\u0432\u0435\u0440\u044f\u0439\u0442\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u043f\u0435\u0440\u0435\u0441\u044b\u043b\u043a\u0438 \u0438 \u0444\u0438\u043b\u044c\u0442\u0440\u044b.\n\ud83e\udd12 \u0412\u043a\u043b\u044e\u0447\u0430\u0439\u0442\u0435 2FA \u0438 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u044c\u0442\u0435 \u0430\u043d\u043e\u043c\u0430\u043b\u0438\u0438 \u0432\u0445\u043e\u0434\u0430.\n\ud83e\udd12 \u0418 \u043d\u0435 \u043d\u0430\u0434\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u043f\u0438\u0441\u044c\u043c\u0430, \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u043e\u043d\u0438 \u0432\u044b\u0433\u043b\u044f\u0434\u044f\u0442 \u043a\u0430\u043a \u043f\u0440\u0438\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u0435 \u043d\u0430 \u043a\u043e\u0444\u0435 \u0441 \u041c\u0438\u043d\u043e\u0431\u043e\u0440\u043e\u043d\u044b.\n\nAPT28 \u0441\u043d\u043e\u0432\u0430 \u043d\u0430\u043f\u043e\u043c\u043d\u0438\u043b\u0438, \u0447\u0442\u043e \u0438\u043d\u043e\u0433\u0434\u0430 \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u043d\u0435 \u043d\u0443\u0436\u043d\u043e \u043d\u0438\u0447\u0435\u0433\u043e\u2026 \u043a\u0440\u043e\u043c\u0435 \u0433\u043b\u0430\u0437, \u0440\u0435\u0448\u0438\u0432\u0448\u0438\u0445 \u043f\u0440\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u043f\u0438\u0441\u044c\u043c\u043e.\n\nITsec NEWS", "url": "https://t.me/itsec_news/5886", "metric_role": "exploitation", "metric_basis": "sighting_report"}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 15646307.04, "hours": 4346.1964, "days": 181.09151666666665, "min_seconds": 15646307.04, "max_seconds": 15646307.04, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-11-15T10:43:10.960Z", "date_only": false, "value": "2024-11-15T10:43:10.960Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-11182", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-05-15T12:54:58Z", "date_only": false, "value": "2025-05-15T12:54:58.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/itsec_news/5886", "record": "CVE-2024-11182", "field": "creation_timestamp", "uuid": "8596b868-3805-45a6-92df-376e10793fe4", "content": "\ud83e\udd12 \u0420\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0430\u044f APT28 \u0432\u0437\u043b\u043e\u043c\u0430\u043b\u0430 \u043f\u043e\u0447\u0442\u0443 \u0447\u0435\u0440\u0435\u0437 0-day \u0432 MDaemon. \u041f\u0440\u043e\u0441\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0448\u044c \u043f\u0438\u0441\u044c\u043c\u043e \u2014 \u0438 \u0432\u0441\u0451, \u043f\u0440\u0438\u0432\u0435\u0442, \u041a\u0440\u0435\u043c\u043b\u044c.\n\nESET \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0441\u0432\u0435\u0436\u0443\u044e \u043a\u0438\u0431\u0435\u0440\u0448\u043f\u0438\u043e\u043d\u0441\u043a\u0443\u044e \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044e \u0433\u0440\u0443\u043f\u043f\u044b APT28 (aka Fancy Bear). \u041d\u0430\u0437\u0432\u0430\u043b\u0438 \u0435\u0451 Operation RoundPress, \u0438 \u044d\u0442\u043e \u043d\u0435 \u043f\u0440\u043e\u0441\u0442\u043e \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u0444\u0438\u0448\u0438\u043d\u0433, \u0430 \u0432\u044b\u0441\u043e\u043a\u043e\u0442\u043e\u0447\u043d\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u043d\u0430 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u2014 Roundcube, Horde, Zimbra \u0438 MDaemon.\n\n\u041a\u043b\u044e\u0447\u0435\u0432\u043e\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u2014 0-day-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-11182 \u0432 MDaemon. \u0414\u043e \u043d\u043e\u044f\u0431\u0440\u044f 2024 \u043e\u043d\u0430 \u0431\u044b\u043b\u0430 \u043d\u0438\u043a\u043e\u043c\u0443 \u043d\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430. \u0418 \u0442\u0443\u0442 \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u0432\u0435\u0441\u0435\u043b\u044c\u0435.\n\n\u0416\u0435\u0440\u0442\u0432\u0435 \u043f\u0440\u0438\u0445\u043e\u0434\u0438\u043b\u043e \u043f\u0438\u0441\u044c\u043c\u043e \u0441 \u043d\u0435\u0432\u0438\u043d\u043d\u044b\u043c \u0432\u0438\u0434\u043e\u043c. \u041d\u043e \u0432 \u0442\u0435\u043b\u0435 \u2014 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 JavaScript. \u041d\u0438\u043a\u0430\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a. \u041d\u0438\u043a\u0430\u043a\u0438\u0445 \u0432\u043b\u043e\u0436\u0435\u043d\u0438\u0439. \u041f\u0440\u043e\u0441\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0448\u044c \u043f\u0438\u0441\u044c\u043c\u043e \u2014 \u0438 \u0441\u043a\u0440\u0438\u043f\u0442 \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442 \u0432\u043e\u0440\u043e\u0432\u0430\u0442\u044c:\n\u25fc\ufe0f\u043f\u0438\u0441\u044c\u043c\u0430, \u043b\u043e\u0433\u0438\u043d\u044b, \u043a\u043e\u043d\u0442\u0430\u043a\u0442\u044b, \u043a\u043e\u0434\u044b 2FA, \u0438\u0441\u0442\u043e\u0440\u0438\u044e \u0432\u0445\u043e\u0434\u043e\u0432;\n\u25fc\ufe0f\u0430 \u043f\u043e\u0442\u043e\u043c \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0444\u0438\u043b\u044c\u0442\u0440, \u0447\u0442\u043e\u0431\u044b \u0432\u0441\u0451 \u043d\u043e\u0432\u043e\u0435 \u0443\u0445\u043e\u0434\u0438\u043b\u043e \u043f\u0440\u044f\u043c\u0438\u043a\u043e\u043c \u0432 \u0440\u0443\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u2014 \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u0441\u0430\u043c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441 \u0443\u0436\u0435 \u043d\u0435 \u0430\u043a\u0442\u0438\u0432\u0435\u043d.\n\n\u041a\u043e\u0433\u043e \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043b\u0438?\n\u25fc\ufe0f\u0443\u043a\u0440\u0430\u0438\u043d\u0441\u043a\u0438\u0435 \u0433\u043e\u0441\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b,\n\u25fc\ufe0f\u043e\u0431\u043e\u0440\u043e\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0432 \u0411\u043e\u043b\u0433\u0430\u0440\u0438\u0438 \u0438 \u0420\u0443\u043c\u044b\u043d\u0438\u0438 (\u0442\u0435, \u0447\u0442\u043e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u044f\u0442/\u0447\u0438\u043d\u044f\u0442 \u0441\u043e\u0432\u0435\u0442\u0441\u043a\u043e\u0435 \u043e\u0440\u0443\u0436\u0438\u0435),\n\u25fc\ufe0f\u0433\u043e\u0441\u043e\u0440\u0433\u0430\u043d\u044b \u0432 \u0421\u0435\u0440\u0431\u0438\u0438, \u0413\u0440\u0435\u0446\u0438\u0438, \u042d\u043a\u0432\u0430\u0434\u043e\u0440\u0435, \u041a\u0430\u043c\u0435\u0440\u0443\u043d\u0435, \u043d\u0430 \u041a\u0438\u043f\u0440\u0435.\n\n\u041f\u043e\u0447\u0435\u043c\u0443 \u044d\u0442\u043e \u0430\u0434\u0441\u043a\u0438 \u043e\u043f\u0430\u0441\u043d\u043e?\n\u25fc\ufe0f0-day, \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0439 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439: \u043f\u0440\u043e\u0441\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u043b \u043f\u0438\u0441\u044c\u043c\u043e.\n\u25fc\ufe0f\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0444\u0438\u043b\u044c\u0442\u0440\u043e\u0432 \u0438 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 \u0432\u0441\u0435\u0445 \u0431\u0443\u0434\u0443\u0449\u0438\u0445 \u043f\u0438\u0441\u0435\u043c.\n\u25fc\ufe0f\u0412\u043e\u0440\u043e\u0432\u0441\u0442\u0432\u043e \u043f\u0430\u0440\u043e\u043b\u0435\u0439, \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 app-\u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0434\u0430\u0436\u0435 \u043f\u043e\u0441\u043b\u0435 \u0441\u043c\u0435\u043d\u044b \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0433\u043e.\n\n\ud83e\udd12 \u0415\u0441\u043b\u0438 \u0432\u044b \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442\u0435 \u0441 MDaemon, Roundcube, Zimbra \u2014 \u0441\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0439\u0442\u0435\u0441\u044c.\n\ud83e\udd12 \u041f\u0440\u043e\u0432\u0435\u0440\u044f\u0439\u0442\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u043f\u0435\u0440\u0435\u0441\u044b\u043b\u043a\u0438 \u0438 \u0444\u0438\u043b\u044c\u0442\u0440\u044b.\n\ud83e\udd12 \u0412\u043a\u043b\u044e\u0447\u0430\u0439\u0442\u0435 2FA \u0438 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u044c\u0442\u0435 \u0430\u043d\u043e\u043c\u0430\u043b\u0438\u0438 \u0432\u0445\u043e\u0434\u0430.\n\ud83e\udd12 \u0418 \u043d\u0435 \u043d\u0430\u0434\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u043f\u0438\u0441\u044c\u043c\u0430, \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u043e\u043d\u0438 \u0432\u044b\u0433\u043b\u044f\u0434\u044f\u0442 \u043a\u0430\u043a \u043f\u0440\u0438\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u0435 \u043d\u0430 \u043a\u043e\u0444\u0435 \u0441 \u041c\u0438\u043d\u043e\u0431\u043e\u0440\u043e\u043d\u044b.\n\nAPT28 \u0441\u043d\u043e\u0432\u0430 \u043d\u0430\u043f\u043e\u043c\u043d\u0438\u043b\u0438, \u0447\u0442\u043e \u0438\u043d\u043e\u0433\u0434\u0430 \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u043d\u0435 \u043d\u0443\u0436\u043d\u043e \u043d\u0438\u0447\u0435\u0433\u043e\u2026 \u043a\u0440\u043e\u043c\u0435 \u0433\u043b\u0430\u0437, \u0440\u0435\u0448\u0438\u0432\u0448\u0438\u0445 \u043f\u0440\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u043f\u0438\u0441\u044c\u043c\u043e.\n\nITsec NEWS", "url": "https://t.me/itsec_news/5886", "metric_role": "exploitation", "metric_basis": "sighting_report"}}, "disclosure_to_exploit": {"available": true, "seconds": 15646307.04, "hours": 4346.1964, "days": 181.09151666666665, "min_seconds": 15646307.04, "max_seconds": 15646307.04, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-11-15T10:43:10.960Z", "date_only": false, "value": "2024-11-15T10:43:10.960Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-11182", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-05-15T12:54:58Z", "date_only": false, "value": "2025-05-15T12:54:58.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/itsec_news/5886", "record": "CVE-2024-11182", "field": "creation_timestamp", "uuid": "8596b868-3805-45a6-92df-376e10793fe4", "content": "\ud83e\udd12 \u0420\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0430\u044f APT28 \u0432\u0437\u043b\u043e\u043c\u0430\u043b\u0430 \u043f\u043e\u0447\u0442\u0443 \u0447\u0435\u0440\u0435\u0437 0-day \u0432 MDaemon. \u041f\u0440\u043e\u0441\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0448\u044c \u043f\u0438\u0441\u044c\u043c\u043e \u2014 \u0438 \u0432\u0441\u0451, \u043f\u0440\u0438\u0432\u0435\u0442, \u041a\u0440\u0435\u043c\u043b\u044c.\n\nESET \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0441\u0432\u0435\u0436\u0443\u044e \u043a\u0438\u0431\u0435\u0440\u0448\u043f\u0438\u043e\u043d\u0441\u043a\u0443\u044e \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044e \u0433\u0440\u0443\u043f\u043f\u044b APT28 (aka Fancy Bear). \u041d\u0430\u0437\u0432\u0430\u043b\u0438 \u0435\u0451 Operation RoundPress, \u0438 \u044d\u0442\u043e \u043d\u0435 \u043f\u0440\u043e\u0441\u0442\u043e \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u0444\u0438\u0448\u0438\u043d\u0433, \u0430 \u0432\u044b\u0441\u043e\u043a\u043e\u0442\u043e\u0447\u043d\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u043d\u0430 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u2014 Roundcube, Horde, Zimbra \u0438 MDaemon.\n\n\u041a\u043b\u044e\u0447\u0435\u0432\u043e\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u2014 0-day-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-11182 \u0432 MDaemon. \u0414\u043e \u043d\u043e\u044f\u0431\u0440\u044f 2024 \u043e\u043d\u0430 \u0431\u044b\u043b\u0430 \u043d\u0438\u043a\u043e\u043c\u0443 \u043d\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430. \u0418 \u0442\u0443\u0442 \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u0432\u0435\u0441\u0435\u043b\u044c\u0435.\n\n\u0416\u0435\u0440\u0442\u0432\u0435 \u043f\u0440\u0438\u0445\u043e\u0434\u0438\u043b\u043e \u043f\u0438\u0441\u044c\u043c\u043e \u0441 \u043d\u0435\u0432\u0438\u043d\u043d\u044b\u043c \u0432\u0438\u0434\u043e\u043c. \u041d\u043e \u0432 \u0442\u0435\u043b\u0435 \u2014 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 JavaScript. \u041d\u0438\u043a\u0430\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a. \u041d\u0438\u043a\u0430\u043a\u0438\u0445 \u0432\u043b\u043e\u0436\u0435\u043d\u0438\u0439. \u041f\u0440\u043e\u0441\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0448\u044c \u043f\u0438\u0441\u044c\u043c\u043e \u2014 \u0438 \u0441\u043a\u0440\u0438\u043f\u0442 \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442 \u0432\u043e\u0440\u043e\u0432\u0430\u0442\u044c:\n\u25fc\ufe0f\u043f\u0438\u0441\u044c\u043c\u0430, \u043b\u043e\u0433\u0438\u043d\u044b, \u043a\u043e\u043d\u0442\u0430\u043a\u0442\u044b, \u043a\u043e\u0434\u044b 2FA, \u0438\u0441\u0442\u043e\u0440\u0438\u044e \u0432\u0445\u043e\u0434\u043e\u0432;\n\u25fc\ufe0f\u0430 \u043f\u043e\u0442\u043e\u043c \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0444\u0438\u043b\u044c\u0442\u0440, \u0447\u0442\u043e\u0431\u044b \u0432\u0441\u0451 \u043d\u043e\u0432\u043e\u0435 \u0443\u0445\u043e\u0434\u0438\u043b\u043e \u043f\u0440\u044f\u043c\u0438\u043a\u043e\u043c \u0432 \u0440\u0443\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u2014 \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u0441\u0430\u043c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441 \u0443\u0436\u0435 \u043d\u0435 \u0430\u043a\u0442\u0438\u0432\u0435\u043d.\n\n\u041a\u043e\u0433\u043e \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043b\u0438?\n\u25fc\ufe0f\u0443\u043a\u0440\u0430\u0438\u043d\u0441\u043a\u0438\u0435 \u0433\u043e\u0441\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b,\n\u25fc\ufe0f\u043e\u0431\u043e\u0440\u043e\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0432 \u0411\u043e\u043b\u0433\u0430\u0440\u0438\u0438 \u0438 \u0420\u0443\u043c\u044b\u043d\u0438\u0438 (\u0442\u0435, \u0447\u0442\u043e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u044f\u0442/\u0447\u0438\u043d\u044f\u0442 \u0441\u043e\u0432\u0435\u0442\u0441\u043a\u043e\u0435 \u043e\u0440\u0443\u0436\u0438\u0435),\n\u25fc\ufe0f\u0433\u043e\u0441\u043e\u0440\u0433\u0430\u043d\u044b \u0432 \u0421\u0435\u0440\u0431\u0438\u0438, \u0413\u0440\u0435\u0446\u0438\u0438, \u042d\u043a\u0432\u0430\u0434\u043e\u0440\u0435, \u041a\u0430\u043c\u0435\u0440\u0443\u043d\u0435, \u043d\u0430 \u041a\u0438\u043f\u0440\u0435.\n\n\u041f\u043e\u0447\u0435\u043c\u0443 \u044d\u0442\u043e \u0430\u0434\u0441\u043a\u0438 \u043e\u043f\u0430\u0441\u043d\u043e?\n\u25fc\ufe0f0-day, \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0439 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439: \u043f\u0440\u043e\u0441\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u043b \u043f\u0438\u0441\u044c\u043c\u043e.\n\u25fc\ufe0f\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0444\u0438\u043b\u044c\u0442\u0440\u043e\u0432 \u0438 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 \u0432\u0441\u0435\u0445 \u0431\u0443\u0434\u0443\u0449\u0438\u0445 \u043f\u0438\u0441\u0435\u043c.\n\u25fc\ufe0f\u0412\u043e\u0440\u043e\u0432\u0441\u0442\u0432\u043e \u043f\u0430\u0440\u043e\u043b\u0435\u0439, \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 app-\u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0434\u0430\u0436\u0435 \u043f\u043e\u0441\u043b\u0435 \u0441\u043c\u0435\u043d\u044b \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0433\u043e.\n\n\ud83e\udd12 \u0415\u0441\u043b\u0438 \u0432\u044b \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442\u0435 \u0441 MDaemon, Roundcube, Zimbra \u2014 \u0441\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0439\u0442\u0435\u0441\u044c.\n\ud83e\udd12 \u041f\u0440\u043e\u0432\u0435\u0440\u044f\u0439\u0442\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u043f\u0435\u0440\u0435\u0441\u044b\u043b\u043a\u0438 \u0438 \u0444\u0438\u043b\u044c\u0442\u0440\u044b.\n\ud83e\udd12 \u0412\u043a\u043b\u044e\u0447\u0430\u0439\u0442\u0435 2FA \u0438 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u044c\u0442\u0435 \u0430\u043d\u043e\u043c\u0430\u043b\u0438\u0438 \u0432\u0445\u043e\u0434\u0430.\n\ud83e\udd12 \u0418 \u043d\u0435 \u043d\u0430\u0434\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u043f\u0438\u0441\u044c\u043c\u0430, \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u043e\u043d\u0438 \u0432\u044b\u0433\u043b\u044f\u0434\u044f\u0442 \u043a\u0430\u043a \u043f\u0440\u0438\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u0435 \u043d\u0430 \u043a\u043e\u0444\u0435 \u0441 \u041c\u0438\u043d\u043e\u0431\u043e\u0440\u043e\u043d\u044b.\n\nAPT28 \u0441\u043d\u043e\u0432\u0430 \u043d\u0430\u043f\u043e\u043c\u043d\u0438\u043b\u0438, \u0447\u0442\u043e \u0438\u043d\u043e\u0433\u0434\u0430 \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u043d\u0435 \u043d\u0443\u0436\u043d\u043e \u043d\u0438\u0447\u0435\u0433\u043e\u2026 \u043a\u0440\u043e\u043c\u0435 \u0433\u043b\u0430\u0437, \u0440\u0435\u0448\u0438\u0432\u0448\u0438\u0445 \u043f\u0440\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u043f\u0438\u0441\u044c\u043c\u043e.\n\nITsec NEWS", "url": "https://t.me/itsec_news/5886", "metric_role": "exploitation", "metric_basis": "sighting_report"}}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 62998585.127173, "hours": 17499.606979770277, "days": 729.1502908237616, "min_seconds": 62998585.127173, "max_seconds": 62998585.127173, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-11-15T10:43:10.960Z", "date_only": false, "value": "2024-11-15T10:43:10.960Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-11182", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-14T14:19:36.087Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 47352278.087173, "hours": 13153.410579770278, "days": 548.058774157095, "min_seconds": 47352278.087173, "max_seconds": 47352278.087173, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-05-15T12:54:58Z", "date_only": false, "value": "2025-05-15T12:54:58.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/itsec_news/5886", "record": "CVE-2024-11182", "field": "creation_timestamp", "uuid": "8596b868-3805-45a6-92df-376e10793fe4", "content": "\ud83e\udd12 \u0420\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0430\u044f APT28 \u0432\u0437\u043b\u043e\u043c\u0430\u043b\u0430 \u043f\u043e\u0447\u0442\u0443 \u0447\u0435\u0440\u0435\u0437 0-day \u0432 MDaemon. \u041f\u0440\u043e\u0441\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0448\u044c \u043f\u0438\u0441\u044c\u043c\u043e \u2014 \u0438 \u0432\u0441\u0451, \u043f\u0440\u0438\u0432\u0435\u0442, \u041a\u0440\u0435\u043c\u043b\u044c.\n\nESET \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0441\u0432\u0435\u0436\u0443\u044e \u043a\u0438\u0431\u0435\u0440\u0448\u043f\u0438\u043e\u043d\u0441\u043a\u0443\u044e \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044e \u0433\u0440\u0443\u043f\u043f\u044b APT28 (aka Fancy Bear). \u041d\u0430\u0437\u0432\u0430\u043b\u0438 \u0435\u0451 Operation RoundPress, \u0438 \u044d\u0442\u043e \u043d\u0435 \u043f\u0440\u043e\u0441\u0442\u043e \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u0444\u0438\u0448\u0438\u043d\u0433, \u0430 \u0432\u044b\u0441\u043e\u043a\u043e\u0442\u043e\u0447\u043d\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u043d\u0430 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u2014 Roundcube, Horde, Zimbra \u0438 MDaemon.\n\n\u041a\u043b\u044e\u0447\u0435\u0432\u043e\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u2014 0-day-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-11182 \u0432 MDaemon. \u0414\u043e \u043d\u043e\u044f\u0431\u0440\u044f 2024 \u043e\u043d\u0430 \u0431\u044b\u043b\u0430 \u043d\u0438\u043a\u043e\u043c\u0443 \u043d\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430. \u0418 \u0442\u0443\u0442 \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u0432\u0435\u0441\u0435\u043b\u044c\u0435.\n\n\u0416\u0435\u0440\u0442\u0432\u0435 \u043f\u0440\u0438\u0445\u043e\u0434\u0438\u043b\u043e \u043f\u0438\u0441\u044c\u043c\u043e \u0441 \u043d\u0435\u0432\u0438\u043d\u043d\u044b\u043c \u0432\u0438\u0434\u043e\u043c. \u041d\u043e \u0432 \u0442\u0435\u043b\u0435 \u2014 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 JavaScript. \u041d\u0438\u043a\u0430\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a. \u041d\u0438\u043a\u0430\u043a\u0438\u0445 \u0432\u043b\u043e\u0436\u0435\u043d\u0438\u0439. \u041f\u0440\u043e\u0441\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0448\u044c \u043f\u0438\u0441\u044c\u043c\u043e \u2014 \u0438 \u0441\u043a\u0440\u0438\u043f\u0442 \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442 \u0432\u043e\u0440\u043e\u0432\u0430\u0442\u044c:\n\u25fc\ufe0f\u043f\u0438\u0441\u044c\u043c\u0430, \u043b\u043e\u0433\u0438\u043d\u044b, \u043a\u043e\u043d\u0442\u0430\u043a\u0442\u044b, \u043a\u043e\u0434\u044b 2FA, \u0438\u0441\u0442\u043e\u0440\u0438\u044e \u0432\u0445\u043e\u0434\u043e\u0432;\n\u25fc\ufe0f\u0430 \u043f\u043e\u0442\u043e\u043c \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0444\u0438\u043b\u044c\u0442\u0440, \u0447\u0442\u043e\u0431\u044b \u0432\u0441\u0451 \u043d\u043e\u0432\u043e\u0435 \u0443\u0445\u043e\u0434\u0438\u043b\u043e \u043f\u0440\u044f\u043c\u0438\u043a\u043e\u043c \u0432 \u0440\u0443\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u2014 \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u0441\u0430\u043c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441 \u0443\u0436\u0435 \u043d\u0435 \u0430\u043a\u0442\u0438\u0432\u0435\u043d.\n\n\u041a\u043e\u0433\u043e \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043b\u0438?\n\u25fc\ufe0f\u0443\u043a\u0440\u0430\u0438\u043d\u0441\u043a\u0438\u0435 \u0433\u043e\u0441\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b,\n\u25fc\ufe0f\u043e\u0431\u043e\u0440\u043e\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0432 \u0411\u043e\u043b\u0433\u0430\u0440\u0438\u0438 \u0438 \u0420\u0443\u043c\u044b\u043d\u0438\u0438 (\u0442\u0435, \u0447\u0442\u043e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u044f\u0442/\u0447\u0438\u043d\u044f\u0442 \u0441\u043e\u0432\u0435\u0442\u0441\u043a\u043e\u0435 \u043e\u0440\u0443\u0436\u0438\u0435),\n\u25fc\ufe0f\u0433\u043e\u0441\u043e\u0440\u0433\u0430\u043d\u044b \u0432 \u0421\u0435\u0440\u0431\u0438\u0438, \u0413\u0440\u0435\u0446\u0438\u0438, \u042d\u043a\u0432\u0430\u0434\u043e\u0440\u0435, \u041a\u0430\u043c\u0435\u0440\u0443\u043d\u0435, \u043d\u0430 \u041a\u0438\u043f\u0440\u0435.\n\n\u041f\u043e\u0447\u0435\u043c\u0443 \u044d\u0442\u043e \u0430\u0434\u0441\u043a\u0438 \u043e\u043f\u0430\u0441\u043d\u043e?\n\u25fc\ufe0f0-day, \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0439 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439: \u043f\u0440\u043e\u0441\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u043b \u043f\u0438\u0441\u044c\u043c\u043e.\n\u25fc\ufe0f\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0444\u0438\u043b\u044c\u0442\u0440\u043e\u0432 \u0438 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 \u0432\u0441\u0435\u0445 \u0431\u0443\u0434\u0443\u0449\u0438\u0445 \u043f\u0438\u0441\u0435\u043c.\n\u25fc\ufe0f\u0412\u043e\u0440\u043e\u0432\u0441\u0442\u0432\u043e \u043f\u0430\u0440\u043e\u043b\u0435\u0439, \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 app-\u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0434\u0430\u0436\u0435 \u043f\u043e\u0441\u043b\u0435 \u0441\u043c\u0435\u043d\u044b \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0433\u043e.\n\n\ud83e\udd12 \u0415\u0441\u043b\u0438 \u0432\u044b \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442\u0435 \u0441 MDaemon, Roundcube, Zimbra \u2014 \u0441\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0439\u0442\u0435\u0441\u044c.\n\ud83e\udd12 \u041f\u0440\u043e\u0432\u0435\u0440\u044f\u0439\u0442\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u043f\u0435\u0440\u0435\u0441\u044b\u043b\u043a\u0438 \u0438 \u0444\u0438\u043b\u044c\u0442\u0440\u044b.\n\ud83e\udd12 \u0412\u043a\u043b\u044e\u0447\u0430\u0439\u0442\u0435 2FA \u0438 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u044c\u0442\u0435 \u0430\u043d\u043e\u043c\u0430\u043b\u0438\u0438 \u0432\u0445\u043e\u0434\u0430.\n\ud83e\udd12 \u0418 \u043d\u0435 \u043d\u0430\u0434\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u043f\u0438\u0441\u044c\u043c\u0430, \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u043e\u043d\u0438 \u0432\u044b\u0433\u043b\u044f\u0434\u044f\u0442 \u043a\u0430\u043a \u043f\u0440\u0438\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u0435 \u043d\u0430 \u043a\u043e\u0444\u0435 \u0441 \u041c\u0438\u043d\u043e\u0431\u043e\u0440\u043e\u043d\u044b.\n\nAPT28 \u0441\u043d\u043e\u0432\u0430 \u043d\u0430\u043f\u043e\u043c\u043d\u0438\u043b\u0438, \u0447\u0442\u043e \u0438\u043d\u043e\u0433\u0434\u0430 \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u043d\u0435 \u043d\u0443\u0436\u043d\u043e \u043d\u0438\u0447\u0435\u0433\u043e\u2026 \u043a\u0440\u043e\u043c\u0435 \u0433\u043b\u0430\u0437, \u0440\u0435\u0448\u0438\u0432\u0448\u0438\u0445 \u043f\u0440\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u043f\u0438\u0441\u044c\u043c\u043e.\n\nITsec NEWS", "url": "https://t.me/itsec_news/5886", "metric_role": "exploitation", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-14T14:19:36.087Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}