{"metadata": {"vulnerability": "cve-2024-41713", "count": 141, "kinds": {"milestone": 8, "sighting": 94, "kev": 17, "other": 22}}, "data": [{"timestamp": "2024-07-22T00:00:00Z", "date_only": false, "value": "2024-07-22T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-41713", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-10-09T00:00:00Z", "date_only": true, "value": "2024-10-09", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0858", "record": "CERTFR-2024-AVI-0858", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2024-10-09T22:00:00Z", "date_only": false, "value": "2024-10-09T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3141", "record": "WID-SEC-W-2024-3141", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-10-09T22:00:00Z", "date_only": false, "value": "2024-10-09T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3141", "record": "WID-SEC-W-2024-3141", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-10-09T22:00:00Z", "date_only": false, "value": "2024-10-09T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3141", "record": "WID-SEC-W-2024-3141", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-10-10T00:00:00Z", "date_only": false, "value": "2024-10-10T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0858", "record": "CERTFR-2024-AVI-0858", "field": "initial_release_date"}, {"timestamp": "2024-10-10T00:00:00Z", "date_only": false, "value": "2024-10-10T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0858", "record": "CERTFR-2024-AVI-0858", "field": "revisions.0.revision_date"}, {"timestamp": "2024-10-11T06:14:27Z", "date_only": false, "value": "2024-10-11T06:14:27.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberBulletin/26067", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "b1353b70-576f-4ccf-b9eb-df4bea97d052", "content": "\u26a1\ufe0fCVE-2024-41713 (CVSS 9.8): Unpatched MiCollab Vulnerability Allows Unauthorized Access.\n\n#CyberBulletin", "url": "https://t.me/CyberBulletin/26067"}, {"timestamp": "2024-10-11T06:14:28Z", "date_only": false, "value": "2024-10-11T06:14:28.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberBulletin/1153", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "7331251e-7c1b-44f8-9500-3ef34bc4cc16", "content": "\u26a1\ufe0fCVE-2024-41713 (CVSS 9.8): Unpatched MiCollab Vulnerability Allows Unauthorized Access.\n\n#CyberBulletin", "url": "https://t.me/CyberBulletin/1153"}, {"timestamp": "2024-10-21T00:00:00Z", "date_only": false, "value": "2024-10-21T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-41713", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-10-21T20:52:04.542Z", "date_only": false, "value": "2024-10-21T20:52:04.542Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "cve-2024-41713", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-21T21:15:06Z", "date_only": false, "value": "2024-10-21T21:15:06Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-8V9W-9WJ4-52P3", "record": "GHSA-8V9W-9WJ4-52P3", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-10-21T21:15:06.470Z", "date_only": false, "value": "2024-10-21T21:15:06.470", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-41713", "record": "FKIE_CVE-2024-41713", "field": "published"}, {"timestamp": "2024-10-21T21:30:54Z", "date_only": false, "value": "2024-10-21T21:30:54Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-8V9W-9WJ4-52P3", "record": "GHSA-8V9W-9WJ4-52P3", "field": "published"}, {"timestamp": "2024-10-22T00:24:14Z", "date_only": false, "value": "2024-10-22T00:24:14.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/8572", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "4307b3d9-ee31-439f-9e0d-a1cb5a1bbfc1", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-41713 - Mitel MiCollab NuPoint Unified Messaging Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-41713 \nPublished : Oct. 21, 2024, 9:15 p.m. | 39\u00a0minutes ago \nDescription : A vulnerability in the NuPoint Unified Messaging (NPM) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to conduct a path traversal attack, due to insufficient input validation. A successful exploit could allow unauthorized access, enabling the attacker to view, corrupt, or delete users' data and system configurations. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/8572"}, {"timestamp": "2024-12-05T11:43:11Z", "date_only": false, "value": "2024-12-05T11:43:11.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-41713.yaml", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "511e5f86-5d88-4209-9e64-2eef73fbd7c4", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-41713.yaml"}, {"timestamp": "2024-12-05T13:56:00Z", "date_only": false, "value": "2024-12-05T13:56:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2024/12/critical-mitel-micollab-flaw-exposes.html", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "840ad3d8-185d-4c65-80b9-cb7e9926ff4d", "url": "https://thehackernews.com/2024/12/critical-mitel-micollab-flaw-exposes.html"}, {"timestamp": "2024-12-05T14:44:20Z", "date_only": false, "value": "2024-12-05T14:44:20.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thebugbountyhunter/9404", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "2cf4823c-4545-41e9-a351-9e52706debd4", "content": "Where There\u2019s Smoke, There\u2019s Fire - Mitel MiCollab CVE-2024-35286, CVE-2024-41713 And An 0day\n\nhttps://labs.watchtowr.com/where-theres-smoke-theres-fire-mitel-micollab-cve-2024-35286-cve-2024-41713-and-an-0day/", "url": "https://t.me/thebugbountyhunter/9404"}, {"timestamp": "2024-12-05T16:01:07Z", "date_only": false, "value": "2024-12-05T16:01:07.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehackernews/5994", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "dc9a0849-6d54-4c86-8b24-dd4fae7e4e14", "content": "\ud83d\udea8 A critical vulnerability (CVE-2024-41713) in Mitel MiCollab could let attackers access sensitive system files and potentially perform unauthorized administrative actions without authentication. \n \nFull details here: https://thehackernews.com/2024/12/critical-mitel-micollab-flaw-exposes.html", "url": "https://t.me/thehackernews/5994"}, {"timestamp": "2024-12-05T16:34:03.014Z", "date_only": false, "value": "2024-12-05T16:34:03.014902Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113601179950935485", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "298176c4-4c37-4350-995c-f5159355f950", "url": "https://infosec.exchange/users/screaminggoat/statuses/113601179950935485"}, {"timestamp": "2024-12-05T16:34:17.590Z", "date_only": false, "value": "2024-12-05T16:34:17.590638Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113601180906534562", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "e4652fa1-6888-4492-a206-6642c1100597", "url": "https://infosec.exchange/users/screaminggoat/statuses/113601180906534562"}, {"timestamp": "2024-12-05T17:07:42Z", "date_only": false, "value": "2024-12-05T17:07:42.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberBulletin/1692", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "b9c01808-b3f8-4c11-b19e-4067accd9f56", "content": "\u26a1\ufe0fWhere There\u2019s Smoke, There\u2019s Fire - Mitel MiCollab CVE-2024-35286, CVE-2024-41713 And An 0day.\n\n#CyberBulletin", "url": "https://t.me/CyberBulletin/1692"}, {"timestamp": "2024-12-05T17:07:42Z", "date_only": false, "value": "2024-12-05T17:07:42.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberBulletin/26710", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "0ae79d7a-6fe5-4083-8498-5454c16c6082", "content": "\u26a1\ufe0fWhere There\u2019s Smoke, There\u2019s Fire - Mitel MiCollab CVE-2024-35286, CVE-2024-41713 And An 0day.\n\n#CyberBulletin", "url": "https://t.me/CyberBulletin/26710"}, {"timestamp": "2024-12-05T23:17:44Z", "date_only": false, "value": "2024-12-05T23:17:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/un7ROmPmmdAsSIhgKnwddb4sJBe7gYSTwdDLnBs6cT39Dw", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "ffb112b8-d8f4-43fe-bbba-041afddc842a"}, {"timestamp": "2024-12-06T00:00:00Z", "date_only": false, "value": "2024-12-06T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-41713", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2024-12-06T00:00:00Z", "date_only": false, "value": "2024-12-06T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-41713", "record": "FKIE_CVE-2024-41713", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-12-06T10:12:49Z", "date_only": false, "value": "2024-12-06T10:12:49.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Rootsec_2/5389", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "b49d89da-e86d-4a8c-9cba-9ef53b30a700", "content": "#exploit\n1. CVE-2024-46538:\nPfSense Stored XSS\nhttps://github.com/LauLeysen/CVE-2024-46538\n\n2. CVE-2024-35286/41713:\nMitel MiCollab SQLI / Path Traversal\nhttps://labs.watchtowr.com/where-theres-smoke-theres-fire-mitel-micollab-cve-2024-35286-cve-2024-41713-and-an-0day\n\n3. CVE-2023-6200:\nLinux Kernel ICMPv6 Race Condtion\nhttps://u1f383.github.io/linux/2024/12/04/linux-kernel-icmpv6-and-cve-2023-6200.html", "url": "https://t.me/Rootsec_2/5389"}, {"timestamp": "2024-12-06T11:00:37Z", "date_only": false, "value": "2024-12-06T11:00:37.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/11522", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "444b13b1-4671-41be-89dd-f7727605cb87", "content": "#exploit\n1. CVE-2024-46538:\nPfSense Stored XSS\nhttps://github.com/LauLeysen/CVE-2024-46538\n\n2. CVE-2024-35286/41713:\nMitel MiCollab SQLI / Path Traversal\nhttps://labs.watchtowr.com/where-theres-smoke-theres-fire-mitel-micollab-cve-2024-35286-cve-2024-41713-and-an-0day\n\n3. CVE-2023-6200:\nLinux Kernel ICMPv6 Race Condtion\nhttps://u1f383.github.io/linux/2024/12/04/linux-kernel-icmpv6-and-cve-2023-6200.html", "url": "https://t.me/CyberSecurityTechnologies/11522"}, {"timestamp": "2024-12-06T18:30:05Z", "date_only": false, "value": "2024-12-06T18:30:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/6517", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "5a747aa6-a168-4655-973c-a5f01a18a216", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u043c\u0438 \u043d\u043e\u0432\u043e\u0441\u0442\u044f\u043c\u0438 \u0438\u0437 \u043c\u0438\u0440\u0430 CVE. \u041f\u043e\u0434 \u043a\u043e\u043d\u0435\u0446 \u043d\u0435\u0434\u0435\u043b\u0438 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0430\u044f:\n\n1. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 watchTowr \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442\u00a0\u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 0-day, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u043c \u0447\u0442\u0435\u043d\u0438\u0435\u043c \u0444\u0430\u0439\u043b\u043e\u0432 \u043d\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 VoIP Mitel MiCollab, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430 \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0438 \u0435\u0449\u0435 \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435.\n\n\u041d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 CVE \u043d\u0435 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u0430 \u0438 \u043d\u0435 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u043d\u043e\u043b\u044c \u0443\u0434\u0430\u043b\u043e\u0441\u044c, \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0438\u0440\u0443\u044f \u0441 \u043c\u0435\u0442\u043e\u0434\u0430\u043c\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0438 \u0432\u0432\u043e\u0434\u043e\u043c.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f CVE-2024-35286, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0435\u0439 \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 23 \u043c\u0430\u044f, \u0430 \u0442\u0430\u043a\u0436\u0435 CVE-2024-41713, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u043e\u0439 9 \u043e\u043a\u0442\u044f\u0431\u0440\u044f.\n\n\u0412\u044b\u0436\u0434\u0430\u0432 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u0447\u0435\u0440\u0435\u0437 100 \u0434\u043d\u0435\u0439 \u043f\u043e\u0441\u043b\u0435 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f Mitel, watchTowr \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0438 PoC \u0434\u043b\u044f \u043d\u043e\u0432\u043e\u0439 0-day, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u0432\u044f\u0437\u044b\u0432\u0430\u0435\u0442 \u043e\u0448\u0438\u0431\u043a\u0443 \u0441 CVE-2024-41713.\n\n\u0422\u0430\u043a \u0447\u0442\u043e \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430\u043c \u0431\u043e\u043b\u0435\u0435 16\u00a0000 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 MiCollab, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0432 \u0441\u0435\u0442\u0438, \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 MiCollab 9.8 SP2 (9.8.2.12), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 CVE-2024-41713, \u0441\u043c\u044f\u0433\u0447\u0430\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0435 \u0447\u0442\u0435\u043d\u0438\u0435 \u0444\u0430\u0439\u043b\u043e\u0432.\u00a0\n\n2. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Rapid7 \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0438 \u043e\u043a\u0430\u0437\u0430\u043b\u0438 \u043f\u043e\u0441\u0438\u043b\u044c\u043d\u0443\u044e \u043f\u043e\u043c\u043e\u0449\u044c \u0432 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u043f\u044f\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043a\u0430\u043c\u0435\u0440\u0430\u0445 \u0432\u0438\u0434\u0435\u043e\u043d\u0430\u0431\u043b\u044e\u0434\u0435\u043d\u0438\u044f Lorex\u00a02K Wi-Fi.\n\n\u0423\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0431\u044b\u043b\u043e \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u043e \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0446\u0435\u043b\u0435\u0439 \u043d\u0430 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u043e\u043c \u043a\u043e\u043d\u043a\u0443\u0440\u0441\u0435 Pwn2Own IoT 2024 \u0433\u043e\u0434\u0430, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e Rapid7 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u0438 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u043f\u044f\u0442\u044c \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u0432 \u0434\u0432\u0430 \u044d\u0442\u0430\u043f\u0430, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044f RCE \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n3. Cisco \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f NX-OS, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0435 \u043e\u0431\u0445\u043e\u0434 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043e\u0431\u0440\u0430\u0437\u0430 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 Google Cloud.\n\n\u041e\u043f\u0430\u0441\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u0430\u044f \u043a\u0430\u043a CVE-2024-20397, \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u043c\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043d\u0435\u043f\u0440\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u043e\u0433\u043e \u041f\u041e.\n\n\u0414\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f, \u043d\u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 100 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u044b \u0441\u0435\u0440\u0438\u0438 MDS 9000, Nexus 3000 \u0438 7000, Nexus 9000 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 ACI, Nexus 9000 \u0432 \u0430\u0432\u0442\u043e\u043d\u043e\u043c\u043d\u043e\u043c \u0440\u0435\u0436\u0438\u043c\u0435 NX-OS, UCS 6400 \u0438 6500.\n\n4. \u0417\u0430\u0445\u0430\u0440 \u0424\u0435\u0434\u043e\u0442\u043a\u0438\u043d \u0438\u0437 PortSwigger \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u043e \u0442\u043e\u043c, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c WAF \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u0430 $Version \u0432 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u0447\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u0430\u0445 cookie.\n\n5. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 JFrog \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0432\u043b\u0438\u044f\u044e\u0449\u0438\u0435 \u043d\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0438 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0438 \u043c\u0430\u0448\u0438\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u0443\u0447\u0435\u043d\u0438\u044f (\u041c\u041e) \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a MLflow, H2O, PyTorch \u0438 MLeap, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043e\u0442\u043a\u0440\u044b\u0442\u044c \u043f\u0443\u0442\u044c \u0434\u043b\u044f RCE.\n\n\u0412 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a \u043d\u0430\u0431\u043e\u0440\u0443 \u0440\u0430\u043d\u0435\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, JFrog \u043f\u0440\u0438\u0441\u043e\u0432\u043e\u043a\u0443\u043f\u0438\u043b\u0430: CVE-2024-27132\u00a0(7,2), CVE-2024-6960\u00a0(7,5), CVE-2023-5245\u00a0(7,5), \u043e\u0434\u043d\u0430 \u0431\u0435\u0437 CVE (\u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 TorchScript \u0432 PyTorch).", "url": "https://t.me/true_secator/6517"}, {"timestamp": "2024-12-06T19:07:19Z", "date_only": false, "value": "2024-12-06T19:07:19.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/itsec_news/4912", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "9e7bdeb1-2033-45e7-b9a6-a9ca1875e713", "content": "\u200b\u26a1\ufe0f0Day \u0432 MiCollab: \u0442\u044b\u0441\u044f\u0447\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0440\u0438\u0441\u043a\u0443\u044e\u0442 \u0438\u0437-\u0437\u0430 \u0431\u0435\u0437\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f Mitel\n\n\ud83d\udcac \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u043e\u0434 \u0443\u0434\u0430\u0440 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u043f\u0440\u0435\u0432\u0440\u0430\u0442\u0438\u0432\u0448\u0438\u0441\u044c \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0445\u0430\u043a\u0435\u0440\u043e\u0432.\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b watchTowr \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u043d\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Mitel MiCollab, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0447\u0438\u0442\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b. \u0421\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e \u0441 \u0440\u0430\u043d\u0435\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043e\u0448\u0438\u0431\u043a\u0430 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445. \u0414\u043b\u044f \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u0443\u0433\u0440\u043e\u0437\u044b \u0431\u044b\u043b \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043f\u043e\u0441\u043b\u0435 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 100 \u0434\u043d\u0435\u0439 \u043e\u0436\u0438\u0434\u0430\u043d\u0438\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432.\n\nMitel MiCollab \u2014 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0434\u043b\u044f \u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u043e\u0432 \u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 \u0433\u043e\u043b\u043e\u0441\u043e\u0432\u0443\u044e \u0441\u0432\u044f\u0437\u044c, \u0432\u0438\u0434\u0435\u043e\u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438, \u0447\u0430\u0442\u044b, \u043e\u0431\u043c\u0435\u043d \u0444\u0430\u0439\u043b\u0430\u043c\u0438 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438. \u0421\u0432\u044b\u0448\u0435 16 000 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 MiCollab \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0446\u0435\u043b\u044c\u044e \u0434\u043b\u044f \u0445\u0430\u043a\u0435\u0440\u043e\u0432 \u0438 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u0412 \u043c\u0430\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 watchTowr \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-35286 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9.8) \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 NuPoint Unified Messaging (NPM) \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b MiCollab, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0441 \u0431\u0430\u0437\u043e\u0439 \u0434\u0430\u043d\u043d\u044b\u0445. \u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0431\u044b\u043b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d \u0432 \u043c\u0430\u0435.\n\n\u041f\u043e\u0437\u0434\u043d\u0435\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u0435\u0449\u0435 \u043e\u0434\u043d\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 NPM ( CVE-2024-41713 , \u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7.5), \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u0443\u044e \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u043b\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c, \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u044b\u043b\u043e \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043e \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435.\n\n\u0412 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u043e\u0448\u0438\u0431\u043e\u043a \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0442\u0440\u0435\u0442\u044c\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u043a\u0430 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 CVE-\u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 \u0438 \u043e\u0441\u0442\u0430\u0451\u0442\u0441\u044f \u043d\u0435\u0443\u0441\u0442\u0440\u0430\u043d\u0451\u043d\u043d\u043e\u0439. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0447\u0438\u0442\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 \u00ab/etc/passwd\u00bb. \u0414\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u043b\u0438 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 CVE-2024-41713 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0441\u0432\u043e\u0435\u0433\u043e PoC.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 26 \u0430\u0432\u0433\u0443\u0441\u0442\u0430. \u0412 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 Mitel \u043e\u0431\u0435\u0449\u0430\u043b\u0430 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0432 \u043f\u0435\u0440\u0432\u0443\u044e \u043d\u0435\u0434\u0435\u043b\u044e \u0434\u0435\u043a\u0430\u0431\u0440\u044f, \u043e\u0434\u043d\u0430\u043a\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043e. \u0412 watchTowr \u0437\u0430\u044f\u0432\u0438\u043b\u0438, \u0447\u0442\u043e, \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0441\u043f\u0443\u0441\u0442\u044f \u0431\u043e\u043b\u0435\u0435 100 \u0434\u043d\u0435\u0439 \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f, \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0431\u044b\u043b\u0430 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 \u043e\u0442\u0447\u0435\u0442.\n\n\ud83d\udd14 ITsec NEWS", "url": "https://t.me/itsec_news/4912"}, {"timestamp": "2024-12-07T06:33:08Z", "date_only": false, "value": "2024-12-07T06:33:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/proxy_bar/2412", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "c9452ae8-2ef0-42e8-b0c5-ff75126451c0", "content": "CVE-2024-41713\n*\nMitel MiCollab Authentication Bypass to Arbitrary File Read\n*\nExploit", "url": "https://t.me/proxy_bar/2412"}, {"timestamp": "2024-12-09T13:37:33.039Z", "date_only": false, "value": "2024-12-09T13:37:33.039167Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2024-0468", "record": "NCSC-2024-0468", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-12-09T13:37:33.039Z", "date_only": false, "value": "2024-12-09T13:37:33.039167Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2024-0468", "record": "NCSC-2024-0468", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-12-09T13:37:33.039Z", "date_only": false, "value": "2024-12-09T13:37:33.039167Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2024-0468", "record": "NCSC-2024-0468", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-12-09T14:20:21Z", "date_only": false, "value": "2024-12-09T14:20:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/four_rays/23", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "62902343-c9e5-4129-a6d2-c62125b3518d", "content": "\u041f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0435 PoC \u043d\u0430 CVE-2024-41713 \u0432 Mitel MiCollab\n\n\u0421\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u0438 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u043f\u043e\u0434 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-41713 \u0432 NuPoint Unified Messaging (NPM) Mitel MiCollab. \u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u0430\u0442\u0430\u043a\u0443 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 (Path Traversal) \u0438\u0437-\u0437\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0432\u0432\u043e\u0434\u0430. \n\n\u0423\u044f\u0437\u0432\u0438\u043c\u044b:\nNuPoint Unified Messaging (NPM) Mitel MiCollab \u0432\u0435\u0440\u0441\u0438\u0438 \u0434\u043e 9.8 SP1 FP2 (9.8.1.201)\nCWE-22\nSeverity: High 7.5\n\n\u041d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f! \u0411\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0432\u0435\u043d\u0434\u043e\u0440\u0430.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0432 \u0437\u0430\u043f\u0440\u043e\u0441\u0435 \u043a\u043e\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u044e \u0432\u0438\u0434\u0430  ..;/, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u0443\u044e \u043d\u0435\u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0443\u044e \u0442\u043e\u043b\u044c\u043a\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0443.\n\n\u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0437\u0430\u043f\u0440\u043e\u0441:\nhttps://xxxxxx/npm-pwg/..;/axis2-AWC/services/listServices \n\n\u0432\u044b\u0434\u0430\u0441\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e npm-pwg: \n\u2014 AWC_Commands;\n\u2014 Version.\n\n\u0422\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e, \u0447\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 ../ \u0432\u043c\u0435\u0441\u0442\u043e ..;/ \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0442\u043e\u0447\u043d\u043e \u0442\u0430\u043a\u0443\u044e \u0436\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e. \n\n\u0412 \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u0440\u043e\u0445\u043e\u0434\u0438\u0442 \u0447\u0435\u0440\u0435\u0437 npm-pwg, \u043d\u043e \u0435\u0433\u043e \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043d\u0435 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e, \u0442\u0430\u043a \u043a\u0430\u043a \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u044d\u043c\u0443\u043b\u044f\u0446\u0438\u0438 \u0431\u044b\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e, \u0447\u0442\u043e \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u044e \u043c\u043e\u0436\u043d\u043e \u0432\u043e\u043e\u0431\u0449\u0435 \u0438\u0437 \u043b\u044e\u0431\u043e\u0433\u043e \u043c\u0435\u0441\u0442\u0430. \n\n\u041a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c\u0441\u044f:\n\n1. \u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u043e\u0435 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0435, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0438\u0449\u0435\u0442 \u0432 URI \u043f\u0430\u0442\u0442\u0435\u0440\u043d ../ \u0438\u043b\u0438 ..;/, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 \n(\\.{2,};\\/|\\.{2,}\\/)\n\n2. \u0415\u0441\u043b\u0438 \u0436\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u0443\u0435\u0442 \u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0445 PoC \u0438\u0437 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u0441\u0442\u0432\u0430, \u043c\u043e\u0436\u043d\u043e \u0440\u0430\u0441\u0448\u0438\u0440\u0438\u0442\u044c \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u043e\u0435 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u0434\u043e \nnpm-pwg\\/(\\.{2,};\\/|\\.{2,}\\/)", "url": "https://t.me/four_rays/23"}, {"timestamp": "2024-12-10T23:00:00Z", "date_only": false, "value": "2024-12-10T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3141", "record": "WID-SEC-W-2024-3141", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2024-12-10T23:00:00Z", "date_only": false, "value": "2024-12-10T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3141", "record": "WID-SEC-W-2024-3141", "field": "vulnerabilities.5.release_date"}, {"timestamp": "2024-12-11T23:12:34Z", "date_only": false, "value": "2024-12-11T23:12:34+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2024-41713", "field": "timestamps.asserted_at", "uuid": "a6e27b75-98de-41ef-af99-45c045048f84", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-12-11T23:12:34Z", "date_only": false, "value": "2024-12-11T23:12:34+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2024-41713", "field": "timestamps.first_seen_at", "uuid": "a6e27b75-98de-41ef-af99-45c045048f84", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-12-15T15:04:48.572Z", "date_only": false, "value": "2024-12-15T15:04:48.572831Z", "kind": "sighting", "label": "Seen", "source": "https://vulnerability.circl.lu/bundle/0968961a-91c2-4449-84eb-0c177216e719", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "58b4d06c-d49e-4f97-ae4f-2ba3ed1d7ba5", "url": "https://vulnerability.circl.lu/bundle/0968961a-91c2-4449-84eb-0c177216e719"}, {"timestamp": "2024-12-21T09:40:06Z", "date_only": false, "value": "2024-12-21T09:40:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/9545", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "791b0b7c-54b8-4fe4-9649-ede6b98223b2", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1acve-2024-CVE-2024-41713\nURL\uff1ahttps://github.com/Sanandd/cve-2024-CVE-2024-41713\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/9545"}, {"timestamp": "2024-12-21T17:13:11Z", "date_only": false, "value": "2024-12-21T17:13:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/9550", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "b3e4f58b-0789-46bc-b4b4-c7c2aca5d74a", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1a\u6f0f\u6d1e\u5229\u7528\n\u63cf\u8ff0\uff1a\u8fd9\u4e2a\u4ed3\u5e93\u6536\u96c6\u4e86\u6240\u6709\u5728 GitHub \u4e0a\u80fd\u627e\u5230\u7684 CVE \u6f0f\u6d1e\u5229\u7528\u5de5\u5177\u3002 This repository collects all CVE exploits found on GitHub. \nURL\uff1ahttps://github.com/zxj-hub/CVE-2024-41713POC\n\n\u6807\u7b7e\uff1a#\u6f0f\u6d1e\u5229\u7528", "url": "https://t.me/GithubRedTeam/9550"}, {"timestamp": "2025-01-03T00:00:00Z", "date_only": false, "value": "2025-01-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-03)", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "3e9c1b77-bad1-455e-98b7-b3185f3a4929"}, {"timestamp": "2025-01-07T00:00:00Z", "date_only": false, "value": "2025-01-07T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2024-41713", "field": "timestamps.asserted_at", "uuid": "7be90dfd-4735-4ff8-b01f-ff0c9bc4a07c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-01-07T00:00:00Z", "date_only": false, "value": "2025-01-07T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2024-41713", "field": "timestamps.asserted_at", "uuid": "0ab1188e-8c6c-4404-bc2b-2a096a23384e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-01-07T00:00:00Z", "date_only": true, "value": "2025-01-07", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-41713", "field": "containers.adp.0.metrics.2.other.content.dateAdded"}, {"timestamp": "2025-01-07T00:00:00Z", "date_only": false, "value": "2025-01-07T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2024-41713", "field": "evidence.0.details.added_date", "uuid": "0ab1188e-8c6c-4404-bc2b-2a096a23384e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-01-07T00:00:00Z", "date_only": true, "value": "2025-01-07", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2024-41713", "field": "evidence.0.details.date_added", "uuid": "7be90dfd-4735-4ff8-b01f-ff0c9bc4a07c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-01-07T00:00:00Z", "date_only": false, "value": "2025-01-07T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2024-41713", "field": "timestamps.first_seen_at", "uuid": "7be90dfd-4735-4ff8-b01f-ff0c9bc4a07c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-01-07T00:00:00Z", "date_only": false, "value": "2025-01-07T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2024-41713", "field": "timestamps.first_seen_at", "uuid": "0ab1188e-8c6c-4404-bc2b-2a096a23384e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-01-07T00:00:00Z", "date_only": false, "value": "2025-01-07T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2024-41713", "field": "status.status_updated_at", "uuid": "7be90dfd-4735-4ff8-b01f-ff0c9bc4a07c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-01-07T00:00:00Z", "date_only": false, "value": "2025-01-07T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2024-41713", "field": "status.status_updated_at", "uuid": "0ab1188e-8c6c-4404-bc2b-2a096a23384e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-01-07T00:00:00Z", "date_only": false, "value": "2025-01-07T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-41713", "field": "containers.adp.0.timeline.0.time"}, {"timestamp": "2025-01-07T15:54:44.514Z", "date_only": false, "value": "2025-01-07T15:54:44.514979Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113787881639134332", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "3d49a524-9e22-4a80-9e67-38f8c26ad4b5", "url": "https://infosec.exchange/users/screaminggoat/statuses/113787881639134332"}, {"timestamp": "2025-01-07T16:19:29.653Z", "date_only": false, "value": "2025-01-07T16:19:29.653924Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3lf62hz3zbk2f", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "c93b04f9-1b4a-428d-9ba2-f72f2c9d5054", "url": "https://bsky.app/profile/aakl.bsky.social/post/3lf62hz3zbk2f"}, {"timestamp": "2025-01-07T16:19:30.603Z", "date_only": false, "value": "2025-01-07T16:19:30.603932Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3lf62hz3zbl2f", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "827c5763-303c-47fd-af00-7c4538ffcd9e", "url": "https://bsky.app/profile/aakl.bsky.social/post/3lf62hz3zbl2f"}, {"timestamp": "2025-01-07T17:39:18Z", "date_only": false, "value": "2025-01-07T17:39:18.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/482", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "d432c804-0471-404b-8bef-5f662367839f", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-41713\n\ud83d\udd39 Description: A vulnerability in the NuPoint Unified Messaging (NPM) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to conduct a path traversal attack, due to insufficient input validation. A successful exploit could allow unauthorized access, enabling the attacker to view, corrupt, or delete users' data and system configurations.\n\ud83d\udccf Published: 2024-10-21T00:00:00\n\ud83d\udccf Modified: 2025-01-07T17:20:23.572Z\n\ud83d\udd17 References:\n1. https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-misa-2024-0029", "url": "https://t.me/DarkWebInformer_CVEAlerts/482"}, {"timestamp": "2025-01-07T17:56:49.522Z", "date_only": false, "value": "2025-01-07T17:56:49.522683Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3lf67w3bkyh23", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "0406b706-d8c8-4ba6-a4d0-1e0a91a174c7", "url": "https://bsky.app/profile/tmjintel.bsky.social/post/3lf67w3bkyh23"}, {"timestamp": "2025-01-07T18:10:04Z", "date_only": false, "value": "2025-01-07T18:10:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "375bcf85-92a0-4af6-9514-bf1edb48dce8"}, {"timestamp": "2025-01-07T18:52:09.396Z", "date_only": false, "value": "2025-01-07T18:52:09.396368Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/3049069", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "019725c7-230b-42ac-863c-b7acb3b113d7", "url": "https://feedsin.space/feed/CISAKevBot/items/3049069"}, {"timestamp": "2025-01-07T18:52:10.985Z", "date_only": false, "value": "2025-01-07T18:52:10.985982Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/3049070", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "0b07d79d-5060-4aa1-9ac0-d04e903fd0c5", "url": "https://feedsin.space/feed/CISAKevBot/items/3049070"}, {"timestamp": "2025-01-07T19:04:17.989Z", "date_only": false, "value": "2025-01-07T19:04:17.989269Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lf6dopw32w2w", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "ad5070ad-4d2b-4182-96d4-894984d01482", "url": "https://bsky.app/profile/hackingne.ws/post/3lf6dopw32w2w"}, {"timestamp": "2025-01-07T20:02:04.526Z", "date_only": false, "value": "2025-01-07T20:02:04.526914Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/gothburz.bsky.social/post/3lf6gw25mxl2y", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "b9dab0a5-0984-46bb-901c-1eff77216421", "url": "https://bsky.app/profile/gothburz.bsky.social/post/3lf6gw25mxl2y"}, {"timestamp": "2025-01-07T23:00:00Z", "date_only": false, "value": "2025-01-07T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3141", "record": "WID-SEC-W-2024-3141", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2025-01-07T23:00:00Z", "date_only": false, "value": "2025-01-07T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3141", "record": "WID-SEC-W-2024-3141", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-01-08T00:28:16.047Z", "date_only": false, "value": "2025-01-08T00:28:16.047672Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3lf6vrzve4l2f", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "41d9280b-7138-4ad3-9f48-5736cb7a5d72", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3lf6vrzve4l2f"}, {"timestamp": "2025-01-08T03:21:00Z", "date_only": false, "value": "2025-01-08T03:21:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2025/01/cisa-flags-critical-flaws-in-mitel-and.html", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "b1ddd6c2-3f04-4e3f-803b-03390be7e88b", "url": "https://thehackernews.com/2025/01/cisa-flags-critical-flaws-in-mitel-and.html"}, {"timestamp": "2025-01-08T05:57:06Z", "date_only": false, "value": "2025-01-08T05:57:06.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/FhWlCHq4175BsrgCdjqiWe9kicFq8UQYPhjo2isc1t_W8w", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "1e18e307-bd53-4822-b48b-79191a2dd9a5"}, {"timestamp": "2025-01-08T05:58:16Z", "date_only": false, "value": "2025-01-08T05:58:16.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/6126", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "c1be5c32-82eb-4aa2-91f9-5753049bf0d7", "content": "CISA has flagged 3 actively exploited vulnerabilities\u2014two in Mitel MiCollab and one in Oracle WebLogic Server. \n \n\u2937 CVE-2024-41713: Remote access via path traversal. \n\u2937 CVE-2024-55550: Exploited by attackers with admin privileges. \n\u2937 CVE-2020-2883: A high-severity vulnerability in Oracle WebLogic with known exploits. \n \n\ud83d\udc49 Don\u2019t wait\u2014secure your systems now: https://thehackernews.com/2025/01/cisa-flags-critical-flaws-in-mitel-and.html", "url": "https://t.me/thehackernews/6126"}, {"timestamp": "2025-01-08T09:02:19.303Z", "date_only": false, "value": "2025-01-08T09:02:19.303+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3141", "record": "WID-SEC-W-2024-3141", "field": "document.tracking.generator.date"}, {"timestamp": "2025-01-08T11:50:52.920Z", "date_only": false, "value": "2025-01-08T11:50:52.920594Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/tomcat/statuses/113792585077913343", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "31554e37-ce65-4825-941a-14888b2b76f0", "url": "https://infosec.exchange/users/tomcat/statuses/113792585077913343"}, {"timestamp": "2025-01-08T12:25:03.446Z", "date_only": false, "value": "2025-01-08T12:25:03.446323Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lfa5tloze22a", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "5ae80cea-c174-4d2f-9a87-f085bd346149", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lfa5tloze22a"}, {"timestamp": "2025-01-08T15:19:09.584Z", "date_only": false, "value": "2025-01-08T15:19:09.584313Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bluecyber.bsky.social/post/3lfahkzbvys2z", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "501ec083-3805-4219-8887-e1165a6a4a95", "url": "https://bsky.app/profile/bluecyber.bsky.social/post/3lfahkzbvys2z"}, {"timestamp": "2025-01-08T15:44:05Z", "date_only": false, "value": "2025-01-08T15:44:05.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CyberBulletin/2008", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "2305ed1e-51af-4fe7-95d0-b7d469d47456", "content": "\u26a1\ufe0fCISA has flagged 3 actively exploited vulnerabilities\u2014two in Mitel MiCollab and one in Oracle WebLogic Server.\n\n\u2937 CVE-2024-41713: Remote access via path traversal.\n\u2937 CVE-2024-55550: Exploited by attackers with admin privileges.\n\u2937 CVE-2020-2883: A high-severity vulnerability in Oracle WebLogic with known exploits.\n\n#CyberBulletin", "url": "https://t.me/CyberBulletin/2008"}, {"timestamp": "2025-01-09T10:41:33Z", "date_only": false, "value": "2025-01-09T10:41:33.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/kasperskyb2b/1580", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "409f0b77-c391-4751-aeb9-0d2d28d5cc80", "content": "\ud83e\ude79 Welcome back and Patch now!\n\n\u0425\u043e\u0442\u044f \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u0442\u043e\u0436\u0435 \u0431\u0435\u0440\u0443\u0442 \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0435 \u043d\u0430 \u043f\u0435\u0440\u0438\u043e\u0434 \u041d\u043e\u0432\u043e\u0433\u043e \u0433\u043e\u0434\u0430 \u0438 \u0420\u043e\u0436\u0434\u0435\u0441\u0442\u0432\u0430, \u0434\u0440\u0443\u0433\u0438\u0435 \u0432 \u044d\u0442\u043e\u0442 \u043f\u0435\u0440\u0438\u043e\u0434 \u0430\u043a\u0442\u0438\u0432\u0438\u0437\u0438\u0440\u0443\u044e\u0442\u0441\u044f. \u0417\u0430 \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043d\u0438\u043a\u0443\u043b \u043d\u0430\u0431\u0440\u0430\u043b\u043e\u0441\u044c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0445 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445.\n\nSonicWall \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0444\u0438\u043a\u0441 SonicOS, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0439 CVE-2024-53704 (CVSS 8.2), \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u0445 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f SSL VPN \u0438 SSH. \u041f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u043d\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u0434\u0435\u0444\u0435\u043a\u0442 \u00ab\u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u044b\u043c \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438\u00bb (susceptible to actual exploitation), \u0447\u0442\u043e \u043c\u043e\u0436\u043d\u043e \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u043a\u0430\u043a \u043f\u0440\u043e\u0441\u0442\u043e \u043e\u0446\u0435\u043d\u043a\u0443 exploitability, \u0438 \u043a\u0430\u043a \u0437\u0430\u0432\u0443\u0430\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u043f\u0440\u0438\u0437\u043d\u0430\u043d\u0438\u0435, \u0447\u0442\u043e \u044d\u0442\u043e \u0437\u0438\u0440\u043e\u0434\u0435\u0439. \n\u041a\u0440\u043e\u043c\u0435 \u043f\u0430\u0442\u0447\u0430, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043d\u044b \u0442\u0438\u043f\u0438\u0447\u043d\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043f\u043e \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044e \u0443\u0433\u0440\u043e\u0437\u044b, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044e \u043f\u043e SSH.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0432 \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435 \u0434\u0435\u043a\u0430\u0431\u0440\u044f CVE-2024-52875, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a RCE \u0432 \u0444\u0430\u0439\u0440\u0432\u043e\u043b\u0435 GFI KerioControl, \u043d\u0430\u0447\u0430\u043b\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438. \u0412 \u0421\u0435\u0442\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0431\u043e\u043b\u0435\u0435 23 \u0442\u044b\u0441\u044f\u0447 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 KerioControl.\n\n\u0410 \u043c\u043d\u043e\u0433\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u043b\u044c\u043d\u0430\u044f Ivanti \u0443\u0441\u043f\u0435\u043b\u0430 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c\u0441\u044f \u0432 2025 \u0433\u043e\u0434\u0443 \u0437\u0438\u0440\u043e\u0434\u0435\u0435\u043c. CVE-2025-0282 (CVSS 9.0) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0438\u0447\u044c RCE \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Connect Secure. \u0422\u043e\u0442 \u0436\u0435 \u0434\u0435\u0444\u0435\u043a\u0442 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 Policy Secure \u0438 Neurons, \u043d\u043e \u0440\u0435\u0430\u043b\u044c\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043d\u0430 \u043d\u0438\u0445 \u043d\u0435 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u0430.\n\n\u0422\u0430\u043a\u0436\u0435 7 \u044f\u043d\u0432\u0430\u0440\u044f CISA \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430 \u0432 \u0441\u043f\u0438\u0441\u043e\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0441\u0442\u0430\u0440\u044b\u0439 \u0434\u0435\u0444\u0435\u043a\u0442 Oracle WebLogic (CVE-2020-2883) \u0438 \u043f\u0430\u0440\u0443 \u0431\u0430\u0433\u043e\u0432 \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u043e\u0431\u0449\u0435\u043d\u0438\u044f MiCollab (CVE-2024-41713, -55550). \u041d\u0430\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0432\u0435\u0436\u0435\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043f\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e.\n\n\u041f\u043b\u043e\u0445\u0438\u0435 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0442\u0435\u0445, \u043a\u0442\u043e \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u043c\u0430\u0433\u0430\u0437\u0438\u043d\u044b \u043d\u0430 WordPress \u0438 WooCommerce. \u041f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0439 \u043f\u043b\u0430\u0433\u0438\u043d Fancy Product Designer, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043b\u0435\u0433\u043a\u043e \u043f\u0435\u0440\u0435\u043a\u0440\u0430\u0448\u0438\u0432\u0430\u0442\u044c \u0444\u0443\u0442\u0431\u043e\u043b\u043a\u0438 \u0438\u043b\u0438 \u043c\u0435\u043d\u044f\u0442\u044c \u0442\u0435\u043a\u0441\u0442 \u043d\u0430 \u043a\u0440\u0443\u0436\u043a\u0430\u0445, \u0443\u0436\u0435 \u0431\u043e\u043b\u0435\u0435 9 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0434\u0432\u0435 \u043d\u0435\u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0441\u0432\u043e\u0439 \u043a\u043e\u0434 \u0438 \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0442\u044c \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043a\u0443\u043f\u0430\u0442\u0435\u043b\u0435\u0439. \u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0438\u0433\u043d\u043e\u0440\u0438\u0440\u0443\u044e\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0437\u0430 20 \u043d\u043e\u0432\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0442\u0430\u043a \u0438 \u043d\u0435 \u0432\u043d\u0435\u0441\u043b\u0438 \u043d\u0443\u0436\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430\u043c 20 \u0442\u044b\u0441\u044f\u0447 \u0441\u0430\u0439\u0442\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u043f\u043b\u0430\u0433\u0438\u043d, \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0434\u0443\u043c\u0430\u0442\u044c \u0437\u0430\u043c\u0435\u043d\u0443 \u044d\u0442\u043e\u0433\u043e \u0438\u0437\u0434\u0435\u043b\u0438\u044f \u043d\u0430 \u043a\u0430\u043a\u043e\u0439-\u0442\u043e \u0434\u0440\u0443\u0433\u043e\u0439 \u00ab\u043a\u0430\u0441\u0442\u043e\u043c\u0438\u0437\u0430\u0442\u043e\u0440\u00bb.\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 @\u041f2\u0422", "url": "https://t.me/kasperskyb2b/1580"}, {"timestamp": "2025-01-09T17:29:51.810Z", "date_only": false, "value": "2025-01-09T17:29:51.810644Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ehcgroup.bsky.social/post/3lfd7dnn2uc2s", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "3416fbda-808e-4a55-9810-5f337d4a5879", "url": "https://bsky.app/profile/ehcgroup.bsky.social/post/3lfd7dnn2uc2s"}, {"timestamp": "2025-01-11T10:00:06Z", "date_only": false, "value": "2025-01-11T10:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/KnEOt5rjYNWhgYsUI6D839rfk_ONOfmk--AadO6K2G_oG1w", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "3e1d77f5-bff7-449a-8600-abfccc048ca1"}, {"timestamp": "2025-01-12T10:34:01.990Z", "date_only": false, "value": "2025-01-12T10:34:01.990700Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lfjzivl2yk2n", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "5629da83-db98-41d4-a8df-99c312e1cfe6", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3lfjzivl2yk2n"}, {"timestamp": "2025-01-16T03:51:52.484Z", "date_only": false, "value": "2025-01-16T03:51:52.484993Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.bsky.social/post/3lftevhrgdu24", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "e5147b70-7038-4bdc-97e9-1f3ae010445c", "url": "https://bsky.app/profile/opsmatters.bsky.social/post/3lftevhrgdu24"}, {"timestamp": "2025-01-26T00:00:00Z", "date_only": false, "value": "2025-01-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-26)", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "f1e33e41-adba-472c-b82d-f7b7cb7ed023"}, {"timestamp": "2025-01-27T00:00:00Z", "date_only": false, "value": "2025-01-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-27)", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "26093669-3b00-46f9-b96f-f519b6458c61"}, {"timestamp": "2025-01-28T00:00:00Z", "date_only": true, "value": "2025-01-28", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2024-41713", "field": "evidence.0.details.due_date", "uuid": "7be90dfd-4735-4ff8-b01f-ff0c9bc4a07c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-01-28T00:00:00Z", "date_only": false, "value": "2025-01-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-28)", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "3ee80dc6-1f89-4533-96bc-49f6d5cffd6b"}, {"timestamp": "2025-01-29T00:00:00Z", "date_only": false, "value": "2025-01-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-29)", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "3b2e2d58-0772-4e78-945e-765ffa9ecab6"}, {"timestamp": "2025-01-30T00:41:37.058Z", "date_only": false, "value": "2025-01-30T00:41:37.058999Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.bsky.social/post/3lgwas5pwtq2r", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "4eda86e7-7535-42df-a814-6f538b99b8c4", "url": "https://bsky.app/profile/opsmatters.bsky.social/post/3lgwas5pwtq2r"}, {"timestamp": "2025-02-01T00:00:00Z", "date_only": false, "value": "2025-02-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-01)", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "7678d8be-9e47-4615-bd0a-e4262399cc47"}, {"timestamp": "2025-02-04T00:00:00Z", "date_only": false, "value": "2025-02-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-04)", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "7c0c0bed-9a63-4609-9f1c-a0aedcc858d2"}, {"timestamp": "2025-02-15T00:00:00Z", "date_only": false, "value": "2025-02-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-15)", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "574efe9e-9376-448a-8b4c-7edc30a7fb50"}, {"timestamp": "2025-02-23T02:11:03Z", "date_only": false, "value": "2025-02-23T02:11:03.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "4acc0e8f-014c-4d3e-9e55-f2364f476958"}, {"timestamp": "2025-03-31T00:00:00Z", "date_only": false, "value": "2025-03-31T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-31)", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "9cbe55a3-c790-4acc-88ca-ac7cc561663e"}, {"timestamp": "2025-05-03T00:00:00Z", "date_only": false, "value": "2025-05-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-03)", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "3d6e35a0-8e35-4b43-ae9b-657f92be8da5"}, {"timestamp": "2025-05-15T00:00:00Z", "date_only": false, "value": "2025-05-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-15)", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "58ccfb07-660b-44b0-a601-1ed6a603f9c0"}, {"timestamp": "2025-05-24T00:00:00Z", "date_only": false, "value": "2025-05-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-24)", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "48325388-493c-4883-b2e6-9586c8357454"}, {"timestamp": "2025-06-26T00:00:00Z", "date_only": false, "value": "2025-06-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-26)", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "6a94c0cf-fcda-44f1-9f40-48a21984f713"}, {"timestamp": "2025-07-16T00:00:00Z", "date_only": false, "value": "2025-07-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-16)", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "24956939-76c2-40da-b59f-c9d34be674e2"}, {"timestamp": "2025-07-21T00:00:00Z", "date_only": false, "value": "2025-07-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-21)", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "c6990010-f947-4812-b0b3-5ef9a1225083"}, {"timestamp": "2025-07-24T17:29:30Z", "date_only": false, "value": "2025-07-24T17:29:30.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/7265", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "a231f116-038c-40a1-988c-bd5be03f580b", "content": "Mitel Networks \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e \u0435\u0435 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u0443\u044e \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u0443\u044e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 MiVoice MX-ONE.\n\nMX-ONE - \u044d\u0442\u043e \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043d\u0430 \u0431\u0430\u0437\u0435 SIP, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0441\u043e\u0442\u0435\u043d \u0442\u044b\u0441\u044f\u0447 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0438\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 MiVoice MX-ONE Provisioning Manager, \u0438 \u0435\u0439 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0451 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438, \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0445 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c, \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u0447\u0451\u0442\u043d\u044b\u043c \u0437\u0430\u043f\u0438\u0441\u044f\u043c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0431\u0435\u0437 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Mitel, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 MiVoice MX-ONE, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0432\u0435\u0440\u0441\u0438\u0439 7.3 (7.3.0.0.50) - 7.8 SP1 (7.8.1.0.14). \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 7.8 (MXO-15711_78SP0) \u0438 7.8 SP1 (MXO-15711_78SP1).\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c MX-ONE \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442, \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443 MX-ONE \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0432 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u043e\u0439 \u0441\u0435\u0442\u0438.\n\n\u0420\u0438\u0441\u043a\u0438 \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0436\u043d\u043e \u0441\u043d\u0438\u0437\u0438\u0442\u044c, \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0440\u0432\u0438\u0441\u0443 Provisioning Manager.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c MiVoice MX-ONE \u0432\u0435\u0440\u0441\u0438\u0438 7.3 \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043d\u0430\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044e \u0447\u0435\u0440\u0435\u0437 \u0441\u0432\u043e\u0435\u0433\u043e \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0438\u0441\u043d\u043e\u0433\u043e \u043f\u0430\u0440\u0442\u043d\u0435\u0440\u0430.\n\nMitel \u0442\u0430\u043a\u0436\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e SQL-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2025-52914) \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u0434\u043b\u044f \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b MiCollab, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 SQL \u043d\u0430 \u043d\u0435\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n\u041a\u0430\u043a \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a, \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u0439 \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043e\u0431\u0435\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043d\u0435 \u043f\u043e\u0441\u0442\u0443\u043f\u0430\u043b\u043e.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 MiCollab (CVE-2024-55550 \u0438 CVE-2024-41713) \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u0427\u0442\u043e \u043d\u0435 \u0443\u0434\u0438\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u0432\u0435\u0434\u044c \u043f\u0440\u043e\u0434\u0443\u043a\u0446\u0438\u044e Mitel \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0431\u043e\u043b\u0435\u0435 60 000 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0438 \u0431\u043e\u043b\u0435\u0435 75 \u043c\u043b\u043d. \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0441\u0435\u043a\u0442\u043e\u0440\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u0435, \u0437\u0434\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u0435, \u0444\u0438\u043d\u0430\u043d\u0441\u044b, \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u0438 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u0441\u0435\u043a\u0442\u043e\u0440.", "url": "https://t.me/true_secator/7265"}, {"timestamp": "2025-07-30T00:00:00Z", "date_only": false, "value": "2025-07-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-30)", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "4318e08a-8b07-4cbe-8644-cac0a890dce8"}, {"timestamp": "2025-08-01T00:00:00Z", "date_only": false, "value": "2025-08-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-01)", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "ec65b738-b0ba-4213-a379-67ebb3cc8e5d"}, {"timestamp": "2025-09-02T18:30:14Z", "date_only": false, "value": "2025-09-02T18:30:14.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3445a876-cced-4346-bf37-e276ba39cff4", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "0301899b-01a8-4330-9faf-79873236a0bb"}, {"timestamp": "2025-09-12T00:00:00Z", "date_only": false, "value": "2025-09-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-12)", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "64ffb937-5290-4cce-9a71-a09235a6427e"}, {"timestamp": "2025-09-15T00:00:00Z", "date_only": false, "value": "2025-09-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-15)", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "6e84c966-2177-4736-b085-39493ddb2e85"}, {"timestamp": "2025-10-05T00:00:00Z", "date_only": false, "value": "2025-10-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-05)", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "edf258db-4ed7-4e79-a9f6-94e7aa3f68ad"}, {"timestamp": "2025-10-22T00:33:10Z", "date_only": false, "value": "2025-10-22T00:33:10Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-8V9W-9WJ4-52P3", "record": "GHSA-8V9W-9WJ4-52P3", "field": "modified"}, {"timestamp": "2025-11-10T00:00:00Z", "date_only": false, "value": "2025-11-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-10)", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "5c6ce4d0-8415-4f26-be34-1c50c7ca0ac7"}, {"timestamp": "2025-11-11T00:00:00Z", "date_only": false, "value": "2025-11-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-11)", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "883a9ee5-7e22-46d0-ab56-cb9abf1ec5bb"}, {"timestamp": "2026-02-02T12:26:17.290Z", "date_only": false, "value": "2026-02-02T12:26:17.290723Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/90419a5d-b36a-40e7-8209-dd6f753e1150", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "57403249-e243-4079-b927-44b35da1ecf8", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/90419a5d-b36a-40e7-8209-dd6f753e1150"}, {"timestamp": "2026-02-02T12:26:17.290Z", "date_only": false, "value": "2026-02-02T12:26:17.290723Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/90419a5d-b36a-40e7-8209-dd6f753e1150", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "ec219281-43c7-42b1-95bc-ea0fb32caa9e", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/90419a5d-b36a-40e7-8209-dd6f753e1150"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2024-41713", "field": "timestamps.recorded_at", "uuid": "7be90dfd-4735-4ff8-b01f-ff0c9bc4a07c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-14T00:00:00Z", "date_only": false, "value": "2026-02-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-14)", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "5cdfbceb-063f-4886-9e03-393de59c5d78"}, {"timestamp": "2026-02-17T00:00:00Z", "date_only": false, "value": "2026-02-17T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0858", "record": "CERTFR-2024-AVI-0858", "field": "last_revision_date"}, {"timestamp": "2026-02-17T00:00:00Z", "date_only": false, "value": "2026-02-17T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0858", "record": "CERTFR-2024-AVI-0858", "field": "revisions.1.revision_date"}, {"timestamp": "2026-06-03T00:00:00Z", "date_only": false, "value": "2026-06-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-03)", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "d794250a-8ed7-4a2c-9db9-67f28769bcdd"}, {"timestamp": "2026-06-05T00:00:00Z", "date_only": false, "value": "2026-06-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-05)", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "fbf53201-99fc-4a8d-85b5-2dc75ca0bb9b"}, {"timestamp": "2026-06-07T00:00:00Z", "date_only": false, "value": "2026-06-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-07)", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "dd848042-6ce3-431c-a4c6-8c15b6768cc2"}, {"timestamp": "2026-06-08T00:00:00Z", "date_only": false, "value": "2026-06-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-08)", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "ace9705e-e105-4291-8811-e5f39e131212"}, {"timestamp": "2026-06-14T00:00:00Z", "date_only": false, "value": "2026-06-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-14)", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "bbae4b72-edfc-4f20-923b-c3ab51edc1c7"}, {"timestamp": "2026-06-19T12:46:29.673Z", "date_only": false, "value": "2026-06-19T12:46:29.673988Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/11a6be6e-b1d5-4408-b9d9-f9987a4be1f5", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "21591ae7-e28b-45aa-9a72-4598edd6d1f1", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/11a6be6e-b1d5-4408-b9d9-f9987a4be1f5"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2024-41713", "field": "timestamps.recorded_at", "uuid": "0ab1188e-8c6c-4404-bc2b-2a096a23384e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:14:31.539Z", "date_only": false, "value": "2026-06-23T11:14:31.539206Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/0ab1188e-8c6c-4404-bc2b-2a096a23384e", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "98fde645-797d-442c-8ff1-280192c37a1e", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/0ab1188e-8c6c-4404-bc2b-2a096a23384e"}, {"timestamp": "2026-06-23T14:06:02.928Z", "date_only": false, "value": "2026-06-23T14:06:02.928987Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3e9ca669-ef48-4df1-8d37-980196c87b76", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "e8fd90ad-8de6-4782-ae95-96e310e6ff51", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3e9ca669-ef48-4df1-8d37-980196c87b76"}, {"timestamp": "2026-06-27T10:15:09.337Z", "date_only": false, "value": "2026-06-27T10:15:09.337817Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-26)", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "f7a078b3-6551-4f9f-b445-fea16774fe39"}, {"timestamp": "2026-06-30T09:22:47.433Z", "date_only": false, "value": "2026-06-30T09:22:47.433186Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0ab46cb6-d5dd-4a30-b226-fa790552237c", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "d1e2972c-5cef-46df-80ec-af76db00c487", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0ab46cb6-d5dd-4a30-b226-fa790552237c"}, {"timestamp": "2026-07-01T05:54:15.048Z", "date_only": false, "value": "2026-07-01T05:54:15.048162Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/a6e27b75-98de-41ef-af99-45c045048f84", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "aefe5eb2-d262-4cd0-aec3-d2d7cd46f6f1", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/a6e27b75-98de-41ef-af99-45c045048f84"}, {"timestamp": "2026-07-09T03:00:11.107Z", "date_only": false, "value": "2026-07-09T03:00:11.107811Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/brutsecurity/1176", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "c5a18004-c3b4-4998-bf54-f86df60401cf", "url": "https://t.me/brutsecurity/1176"}, {"timestamp": "2026-07-10T00:00:34.880Z", "date_only": false, "value": "2026-07-10T00:00:34.880844Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/brutsecurity/1176", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "16ff1c8f-f802-4e79-830a-0bf270be21cb", "url": "https://t.me/brutsecurity/1176"}, {"timestamp": "2026-07-11T16:00:03.286Z", "date_only": false, "value": "2026-07-11T16:00:03.286649Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/brutsecurity/1176", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "b9d61978-7ffc-43cb-8f46-41451d87cbeb", "url": "https://t.me/brutsecurity/1176"}, {"timestamp": "2026-07-12T00:00:45.975Z", "date_only": false, "value": "2026-07-12T00:00:45.975588Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/brutsecurity/1176", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "618f496e-e49a-4161-8450-88a627026165", "url": "https://t.me/brutsecurity/1176"}, {"timestamp": "2026-07-13T10:15:30.782Z", "date_only": false, "value": "2026-07-13T10:15:30.782772Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-12)", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "00ba9570-5324-4dbe-a530-d650fbee33c4"}, {"timestamp": "2026-07-20T22:00:05.150Z", "date_only": false, "value": "2026-07-20T22:00:05.150456Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pphm_HackerNews/26", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "e2661b1e-8a3a-4e94-91a1-5f12347f6cd9", "url": "https://t.me/pphm_HackerNews/26"}, {"timestamp": "2026-07-21T00:00:09.212Z", "date_only": false, "value": "2026-07-21T00:00:09.212033Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pphm_HackerNews/26", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "ac343fa6-1198-4035-b05b-4b8bf6b685c0", "url": "https://t.me/pphm_HackerNews/26"}, {"timestamp": "2026-08-04T03:55:35.454Z", "date_only": false, "value": "2026-08-04T03:55:35.454Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-41713", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-04T03:55:35.454Z", "date_only": false, "value": "2026-08-04T03:55:35.454Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-41713", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-04T05:16:30.767Z", "date_only": false, "value": "2026-08-04T05:16:30.767", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-41713", "record": "FKIE_CVE-2024-41713", "field": "lastModified"}, {"timestamp": "2026-08-04T09:01:54.803Z", "date_only": false, "value": "2026-08-04T09:01:54.803985Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnsea.com/post/3msannv3sz72t", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "e6c41532-4ec3-4562-af83-6ca66208cc58", "url": "https://bsky.app/profile/vulnsea.com/post/3msannv3sz72t"}, {"timestamp": "2026-08-04T10:15:11.227Z", "date_only": false, "value": "2026-08-04T10:15:11.227758Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-03)", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "3d320f66-a1a0-485e-9ea6-0af16f534ae4"}, {"timestamp": "2026-08-07T10:56:02.208Z", "date_only": false, "value": "2026-08-07T10:56:02.208875Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-06)", "record": "CVE-2024-41713", "field": "creation_timestamp", "uuid": "e93d4158-0c53-4154-80cd-85a3f8a491c8"}, {"timestamp": "2026-10-24T00:00:00Z", "date_only": false, "value": "2026-10-24T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2024-41713", "field": "timestamps.last_seen_at", "uuid": "a6e27b75-98de-41ef-af99-45c045048f84", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-24T00:00:00Z", "date_only": true, "value": "2026-10-24", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2024-41713", "field": "evidence.0.details.observation_date", "uuid": "a6e27b75-98de-41ef-af99-45c045048f84", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-24T00:00:00Z", "date_only": false, "value": "2026-10-24T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2024-41713", "field": "status.status_updated_at", "uuid": "a6e27b75-98de-41ef-af99-45c045048f84", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-26T01:00:02Z", "date_only": false, "value": "2026-10-26T01:00:02+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2024-41713", "field": "timestamps.recorded_at", "uuid": "a6e27b75-98de-41ef-af99-45c045048f84", "status": {"status_reason": "confirmed", "exploited": true}}]}