{"metadata": {"vulnerability": "cve-2024-5274", "count": 123, "kinds": {"milestone": 12, "sighting": 57, "kev": 11, "other": 43}}, "data": [{"timestamp": "2024-05-23T00:00:00Z", "date_only": true, "value": "2024-05-23", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0437", "record": "CERTFR-2024-AVI-0437", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2024-05-23T16:20:01.486Z", "date_only": false, "value": "2024-05-23T16:20:01.486Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-5274", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-05-23T22:00:00Z", "date_only": false, "value": "2024-05-23T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1231", "record": "WID-SEC-W-2024-1231", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-05-23T22:00:00Z", "date_only": false, "value": "2024-05-23T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1231", "record": "WID-SEC-W-2024-1231", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-05-23T22:00:00Z", "date_only": false, "value": "2024-05-23T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1231", "record": "WID-SEC-W-2024-1231", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-05-24T00:00:00Z", "date_only": false, "value": "2024-05-24T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0437", "record": "CERTFR-2024-AVI-0437", "field": "last_revision_date"}, {"timestamp": "2024-05-24T00:00:00Z", "date_only": false, "value": "2024-05-24T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0437", "record": "CERTFR-2024-AVI-0437", "field": "initial_release_date"}, {"timestamp": "2024-05-24T00:00:00Z", "date_only": false, "value": "2024-05-24T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0437", "record": "CERTFR-2024-AVI-0437", "field": "revisions.0.revision_date"}, {"timestamp": "2024-05-24T04:00:00Z", "date_only": false, "value": "2024-05-24T04:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1302", "record": "CVE-2024-5274", "field": "creation_timestamp", "uuid": "83b7658b-5d83-46db-bc35-ba613a949222", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1302"}, {"timestamp": "2024-05-24T12:15:54Z", "date_only": false, "value": "2024-05-24T12:15:54.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/5009", "record": "CVE-2024-5274", "field": "creation_timestamp", "uuid": "ded51447-fee7-4e34-a33f-06b5f2e45b13", "content": "\ud83d\udd25 Urgent: Google released security updates for Chrome to fix a new ZERO-DAY (CVE-2024-5274) under active exploitation in the wild. \n \nDetails - https://thehackernews.com/2024/05/google-detects-4th-chrome-zero-day-in.html \n \nUsers of Chromium-based browsers like Microsoft Edge, Brave, Opera, and Vivaldi should watch for patches.", "url": "https://t.me/thehackernews/5009"}, {"timestamp": "2024-05-24T12:27:55Z", "date_only": false, "value": "2024-05-24T12:27:55.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/information_security_channel/52259", "record": "CVE-2024-5274", "field": "creation_timestamp", "uuid": "d1699352-e4ae-408b-acba-8cd4c1313b92", "content": "Google Patches Fourth Chrome Zero-Day in Two Weeks\nhttps://www.securityweek.com/google-patches-fourth-chrome-zero-day-in-two-weeks/\n\nExploited in the wild, Chrome vulnerability CVE-2024-5274 is a high-severity flaw described as a type confusion in the V8 JavaScript and WebAssembly engine.\nThe post Google Patches Fourth Chrome Zero-Day in Two Weeks (https://www.securityweek.com/google-patches-fourth-chrome-zero-day-in-two-weeks/) appeared first on SecurityWeek (https://www.securityweek.com/).", "url": "https://t.me/information_security_channel/52259"}, {"timestamp": "2024-05-24T13:02:28Z", "date_only": false, "value": "2024-05-24T13:02:28.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/5774", "record": "CVE-2024-5274", "field": "creation_timestamp", "uuid": "7af84bd0-9191-4036-900e-719062c13bbd", "content": "\u0422\u0430\u043a\u0438\u043c\u0438 \u0442\u0435\u043c\u043f\u0430\u043c\u0438 Google \u00ab\u043f\u044f\u0442\u0438\u043b\u0435\u0442\u043a\u0443 \u0437\u0430 \u0433\u043e\u0434\u00bb \u043e\u0441\u0438\u043b\u0438\u0442, \u0435\u0441\u043b\u0438 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0438\u0442 \u0432 \u043d\u0435\u0434\u0435\u043b\u044e \u043f\u043e 0-day \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u0442\u044c.\n\n\u0412\u043e\u0441\u044c\u043c\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u043d\u043e\u043b\u044c \u0437\u0430 \u0442\u0435\u043a\u0443\u0449\u0438\u0439 \u0433\u043e\u0434 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 Google \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Chrome, \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0432 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u043e\u043c Google \u041a\u043b\u0435\u043c\u0430\u043d\u043e\u043c \u041b\u0435\u0441\u0438\u043d\u0435\u043c \u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2024-5274. \u041e\u043d\u0430 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0443 \u0442\u0438\u043f\u043e\u0432 \u0432 V8, \u0434\u0432\u0438\u0436\u043a\u0435 JavaScript Chrome, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0441\u0431\u043e\u044f\u043c, \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u0434\u0430\u043d\u043d\u044b\u0445, \u0430 \u0442\u0430\u043a\u0436\u0435 RCE.\n\nGoogle \u043d\u0435 \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u044f\u043c\u0438 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u043e \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442 \u043e \u0441\u0432\u043e\u0435\u0439 \u043e\u0441\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0432 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0434\u043b\u044f CVE-2024-5274 \u0438 \u043f\u043e\u043f\u044b\u0442\u043a\u0430\u0445 \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f Chrome \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 125.0.6422.112/.113 \u0434\u043b\u044f Windows \u0438 Mac, \u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Linux \u043f\u043e\u043b\u0443\u0447\u0430\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u0435\u0440\u0441\u0438\u0438 125.0.6422.112 \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0438\u0435 \u043d\u0435\u0434\u0435\u043b\u0438.", "url": "https://t.me/true_secator/5774"}, {"timestamp": "2024-05-24T13:21:29Z", "date_only": false, "value": "2024-05-24T13:21:29.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/BST1U7XEuh3wTNoyELqe6IW7N6J4nG-W8jlrPq-K78T3fO4", "record": "CVE-2024-5274", "field": "creation_timestamp", "uuid": "f414691c-243f-4acd-8c42-bf8d931d85b2"}, {"timestamp": "2024-05-24T13:35:05Z", "date_only": false, "value": "2024-05-24T13:35:05.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/KomunitiSiber/1998", "record": "CVE-2024-5274", "field": "creation_timestamp", "uuid": "14056435-2104-4849-a664-1c2a8e3778cf", "content": "Google Detects 4th Chrome Zero-Day in May Actively Under Attack - Update ASAP\nhttps://thehackernews.com/2024/05/google-detects-4th-chrome-zero-day-in.html\n\nGoogle on Thursday rolled out fixes to address a high-severity security flaw in its Chrome browser that it said has been exploited in the wild.\nAssigned the CVE identifier\u00a0CVE-2024-5274, the vulnerability relates\u00a0to a type confusion bug in the V8 JavaScript\u00a0and WebAssembly engine. It\u00a0was reported\u00a0by Cl\u00e9ment Lecigne of Google's Threat Analysis Group and Brendon Tiszka of", "url": "https://t.me/KomunitiSiber/1998"}, {"timestamp": "2024-05-24T15:12:43Z", "date_only": false, "value": "2024-05-24T15:12:43.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/mEtv-WDTGjjebUkPfkob_kYlvdXZEjZDSVngUqvYuKb1pQ", "record": "CVE-2024-5274", "field": "creation_timestamp", "uuid": "c4cc4f69-e6f7-41dc-aed9-8693170eba40"}, {"timestamp": "2024-05-24T15:51:22Z", "date_only": false, "value": "2024-05-24T15:51:22.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/tengkorakcybercrewz/1592", "record": "CVE-2024-5274", "field": "creation_timestamp", "uuid": "dea3ac27-b491-4424-a1dd-62ab9330aa26", "content": "The Hacker News\nGoogle Detects 4th Chrome Zero-Day in May Actively Under Attack - Update ASAP\n\nGoogle on Thursday rolled out fixes to address a high-severity security flaw in its Chrome browser that it said has been exploited in the wild.\nAssigned the CVE identifier CVE-2024-5274, the vulnerability relates to a type confusion bug in the V8 JavaScript and WebAssembly engine. It was reported by Cl\u00e9ment Lecigne of Google's Threat Analysis Group and Brendon Tiszka of", "url": "https://t.me/tengkorakcybercrewz/1592"}, {"timestamp": "2024-05-24T15:51:22Z", "date_only": false, "value": "2024-05-24T15:51:22.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/tengkorakcybercrewz/8512", "record": "CVE-2024-5274", "field": "creation_timestamp", "uuid": "1467382d-2c5b-4b72-ba84-289d76ca29e9", "content": "The Hacker News\nGoogle Detects 4th Chrome Zero-Day in May Actively Under Attack - Update ASAP\n\nGoogle on Thursday rolled out fixes to address a high-severity security flaw in its Chrome browser that it said has been exploited in the wild.\nAssigned the CVE identifier CVE-2024-5274, the vulnerability relates to a type confusion bug in the V8 JavaScript and WebAssembly engine. It was reported by Cl\u00e9ment Lecigne of Google's Threat Analysis Group and Brendon Tiszka of", "url": "https://t.me/tengkorakcybercrewz/8512"}, {"timestamp": "2024-05-24T15:51:26Z", "date_only": false, "value": "2024-05-24T15:51:26.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/--KhdLHb4ZRPaz84dS-nlDBCfvj_oGA9jKlfJpUgTzE3Zg", "record": "CVE-2024-5274", "field": "creation_timestamp", "uuid": "e327e3ab-462f-43ec-a719-c53b55012894"}, {"timestamp": "2024-05-25T00:00:00Z", "date_only": true, "value": "2024-05-25", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0443", "record": "CERTFR-2024-AVI-0443", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2024-05-25T15:54:29Z", "date_only": false, "value": "2024-05-25T15:54:29.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/HackingInsights/900", "record": "CVE-2024-5274", "field": "creation_timestamp", "uuid": "be464fd2-52a7-4336-8a91-eb64952865ef", "content": "\u200aCVE-2024-5274: Google Patches Zero-Day Vulnerability Actively Exploited in the Wild\n\nhttps://securityonline.info/cve-2024-5274-google-patches-zero-day-vulnerability-actively-exploited-in-the-wild/", "url": "https://t.me/HackingInsights/900"}, {"timestamp": "2024-05-26T22:00:00Z", "date_only": false, "value": "2024-05-26T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1231", "record": "WID-SEC-W-2024-1231", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2024-05-27T00:00:00Z", "date_only": false, "value": "2024-05-27T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0443", "record": "CERTFR-2024-AVI-0443", "field": "last_revision_date"}, {"timestamp": "2024-05-27T00:00:00Z", "date_only": false, "value": "2024-05-27T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0443", "record": "CERTFR-2024-AVI-0443", "field": "initial_release_date"}, {"timestamp": "2024-05-27T00:00:00Z", "date_only": false, "value": "2024-05-27T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0443", "record": "CERTFR-2024-AVI-0443", "field": "revisions.0.revision_date"}, {"timestamp": "2024-05-27T00:00:00Z", "date_only": true, "value": "2024-05-27", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2024-26084", "record": "CNVD-2024-26084", "field": "submitTime"}, {"timestamp": "2024-05-27T04:00:00Z", "date_only": false, "value": "2024-05-27T04:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1303", "record": "CVE-2024-5274", "field": "creation_timestamp", "uuid": "67a0e328-c4c1-4321-983d-5704843845a4", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1303"}, {"timestamp": "2024-05-27T07:10:26.268Z", "date_only": false, "value": "2024-05-27T07:10:26.268379Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2024-0235", "record": "NCSC-2024-0235", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-05-27T07:10:26.268Z", "date_only": false, "value": "2024-05-27T07:10:26.268379Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2024-0235", "record": "NCSC-2024-0235", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-05-27T07:13:09.034Z", "date_only": false, "value": "2024-05-27T07:13:09.034985Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2024-0235", "record": "NCSC-2024-0235", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2024-05-27T07:32:01Z", "date_only": false, "value": "2024-05-27T07:32:01Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0142-1", "record": "OPENSUSE-SU-2024:0142-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-05-27T07:32:01Z", "date_only": false, "value": "2024-05-27T07:32:01Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0142-1", "record": "OPENSUSE-SU-2024:0142-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-05-27T07:32:01Z", "date_only": false, "value": "2024-05-27T07:32:01Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0142-1", "record": "OPENSUSE-SU-2024:0142-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-05-27T07:32:01Z", "date_only": false, "value": "2024-05-27T07:32:01Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0142-1", "record": "OPENSUSE-SU-2024:0142-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-05-27T07:50:35.517Z", "date_only": false, "value": "2024-05-27T07:50:35.517237Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2024-0235", "record": "NCSC-2024-0235", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2024-05-27T07:50:35.517Z", "date_only": false, "value": "2024-05-27T07:50:35.517237Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2024-0235", "record": "NCSC-2024-0235", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-05-27T14:47:53Z", "date_only": false, "value": "2024-05-27T14:47:53.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/M3yLh4q-M6887BjuXIPnPffJBuigNZuNRR-n-wPunr-r0Sc", "record": "CVE-2024-5274", "field": "creation_timestamp", "uuid": "8a448edb-1ce6-4f37-a8b1-fbbc5fb5b0d3"}, {"timestamp": "2024-05-28T00:00:00Z", "date_only": false, "value": "2024-05-28T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2024-5274", "field": "timestamps.asserted_at", "uuid": "9717d142-a25b-41a5-921c-38c2bf18e9a3", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-05-28T00:00:00Z", "date_only": false, "value": "2024-05-28T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2024-5274", "field": "timestamps.asserted_at", "uuid": "4a6b40ce-70a1-4d12-92df-2653017daaf1", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-05-28T00:00:00Z", "date_only": true, "value": "2024-05-28", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-5274", "field": "containers.adp.0.metrics.1.other.content.dateAdded"}, {"timestamp": "2024-05-28T00:00:00Z", "date_only": false, "value": "2024-05-28T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2024-5274", "field": "evidence.0.details.added_date", "uuid": "4a6b40ce-70a1-4d12-92df-2653017daaf1", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-05-28T00:00:00Z", "date_only": true, "value": "2024-05-28", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2024-5274", "field": "evidence.0.details.date_added", "uuid": "9717d142-a25b-41a5-921c-38c2bf18e9a3", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-05-28T00:00:00Z", "date_only": false, "value": "2024-05-28T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2024-5274", "field": "timestamps.first_seen_at", "uuid": "9717d142-a25b-41a5-921c-38c2bf18e9a3", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-05-28T00:00:00Z", "date_only": false, "value": "2024-05-28T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2024-5274", "field": "timestamps.first_seen_at", "uuid": "4a6b40ce-70a1-4d12-92df-2653017daaf1", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-05-28T00:00:00Z", "date_only": false, "value": "2024-05-28T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2024-5274", "field": "status.status_updated_at", "uuid": "9717d142-a25b-41a5-921c-38c2bf18e9a3", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-05-28T00:00:00Z", "date_only": false, "value": "2024-05-28T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2024-5274", "field": "status.status_updated_at", "uuid": "4a6b40ce-70a1-4d12-92df-2653017daaf1", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-05-28T00:00:00Z", "date_only": false, "value": "2024-05-28T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-5274", "field": "containers.adp.0.timeline.0.time"}, {"timestamp": "2024-05-28T14:44:31.558Z", "date_only": false, "value": "2024-05-28T14:44:31.558Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-5274", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-05-28T15:10:02Z", "date_only": false, "value": "2024-05-28T15:10:02.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2024-5274", "field": "creation_timestamp", "uuid": "b2d1e28c-8a27-4acf-91bc-3848e7914f96"}, {"timestamp": "2024-05-28T15:15:10.443Z", "date_only": false, "value": "2024-05-28T15:15:10.443", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-5274", "record": "FKIE_CVE-2024-5274", "field": "published"}, {"timestamp": "2024-05-28T22:00:00Z", "date_only": false, "value": "2024-05-28T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1231", "record": "WID-SEC-W-2024-1231", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2024-05-29T14:18:13.519Z", "date_only": false, "value": "2024-05-29T14:18:13.519087Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-5274", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-05-29T14:18:13.519Z", "date_only": false, "value": "2024-05-29T14:18:13.519087Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-5274", "record": "FKIE_CVE-2024-5274", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-06-02T22:00:00Z", "date_only": false, "value": "2024-06-02T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1231", "record": "WID-SEC-W-2024-1231", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2024-06-05T00:00:00Z", "date_only": true, "value": "2024-06-05", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2024-26084", "record": "CNVD-2024-26084", "field": "openTime"}, {"timestamp": "2024-06-10T07:54:32Z", "date_only": false, "value": "2024-06-10T07:54:32Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0156-1", "record": "OPENSUSE-SU-2024:0156-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-10T07:54:32Z", "date_only": false, "value": "2024-06-10T07:54:32Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0156-1", "record": "OPENSUSE-SU-2024:0156-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-06-10T07:54:32Z", "date_only": false, "value": "2024-06-10T07:54:32Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0156-1", "record": "OPENSUSE-SU-2024:0156-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-06-10T07:54:32Z", "date_only": false, "value": "2024-06-10T07:54:32Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0156-1", "record": "OPENSUSE-SU-2024:0156-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-06-10T16:09:46.020Z", "date_only": false, "value": "2024-06-10T16:09:46.020Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Chrome", "record": "cve-2024-5274", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-06-10T22:00:00Z", "date_only": false, "value": "2024-06-10T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1231", "record": "WID-SEC-W-2024-1231", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14004-1", "record": "OPENSUSE-SU-2024:14004-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14004-1", "record": "OPENSUSE-SU-2024:14004-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14004-1", "record": "OPENSUSE-SU-2024:14004-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14004-1", "record": "OPENSUSE-SU-2024:14004-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-06-17T22:00:00Z", "date_only": false, "value": "2024-06-17T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1231", "record": "WID-SEC-W-2024-1231", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2024-06-17T22:00:00Z", "date_only": false, "value": "2024-06-17T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1231", "record": "WID-SEC-W-2024-1231", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-06-18T00:00:00Z", "date_only": true, "value": "2024-06-18", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2024-5274", "field": "evidence.0.details.due_date", "uuid": "9717d142-a25b-41a5-921c-38c2bf18e9a3", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-07-10T02:19:28Z", "date_only": false, "value": "2024-07-10T02:19:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/7926", "record": "CVE-2024-5274", "field": "creation_timestamp", "uuid": "fb9bfd14-0c6c-4d50-8c22-3eb3936c0d47", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aGuardian Code: A Script to Uncover CVE-2024-5274 Vulnerabilities\nURL\uff1ahttps://github.com/Alchemist3dot14/-CVE-2024-5274-Detection\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/7926"}, {"timestamp": "2024-07-10T02:53:15Z", "date_only": false, "value": "2024-07-10T02:53:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/7928", "record": "CVE-2024-5274", "field": "creation_timestamp", "uuid": "7af9910a-b2bc-4035-9b71-7a1615c00f3d", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aGuardian Code: A Script to Uncover CVE-2024-5274 Vulnerabilities\nURL\uff1ahttps://github.com/Alchemist3dot14/CVE-2024-5274-Detection\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/7928"}, {"timestamp": "2024-07-10T15:31:50Z", "date_only": false, "value": "2024-07-10T15:31:50.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/2772", "record": "CVE-2024-5274", "field": "creation_timestamp", "uuid": "71391584-c9d4-4290-b3c5-5c6ddb675798", "content": "https://github.com/Alchemist3dot14/CVE-2024-5274-Detection\n\nGuardian Code: A Script to Uncover CVE-2024-5274 Vulnerabilities\n#github", "url": "https://t.me/CNArsenal/2772"}, {"timestamp": "2024-08-01T21:11:11.643Z", "date_only": false, "value": "2024-08-01T21:11:11.643Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2024-5274", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T18:09:32.076Z", "date_only": false, "value": "2024-08-15T18:09:32.076+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1231", "record": "WID-SEC-W-2024-1231", "field": "document.tracking.generator.date"}, {"timestamp": "2024-09-01T09:52:41Z", "date_only": false, "value": "2024-09-01T09:52:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Rootsec_2/4327", "record": "CVE-2024-5274", "field": "creation_timestamp", "uuid": "865051ff-a67d-47a9-8d91-410eee60985c", "content": "#exploit\n1. CVE-2024-36974:\nLinux Kernel taprio_parse_mqprio_opt injection\nhttps://ssd-disclosure.com/ssd-advisory-linux-kernel-taprio-oob\n\n2. CVE-2024-5274:\nType Confusion in V8 in Google Chrome\nhttps://github.com/mistymntncop/CVE-2024-5274", "url": "https://t.me/Rootsec_2/4327"}, {"timestamp": "2024-09-01T11:57:11Z", "date_only": false, "value": "2024-09-01T11:57:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/3095", "record": "CVE-2024-5274", "field": "creation_timestamp", "uuid": "c1c4fac3-b643-4c32-8496-946f3041a9b3", "content": "https://github.com/mistymntncop/CVE-2024-5274\n\ncve-2024-5274\n\n#github #tools", "url": "https://t.me/CNArsenal/3095"}, {"timestamp": "2024-09-02T02:57:44Z", "date_only": false, "value": "2024-09-02T02:57:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/11066", "record": "CVE-2024-5274", "field": "creation_timestamp", "uuid": "dc1a8ed6-829d-4b2e-8867-0b5ba3585ae9", "content": "#exploit\n1. CVE-2024-36974:\nLinux Kernel taprio_parse_mqprio_opt injection\nhttps://ssd-disclosure.com/ssd-advisory-linux-kernel-taprio-oob\n\n2. CVE-2024-5274:\nType Confusion in V8 in Google Chrome\nhttps://github.com/mistymntncop/CVE-2024-5274", "url": "https://t.me/CyberSecurityTechnologies/11066"}, {"timestamp": "2024-09-02T09:47:09Z", "date_only": false, "value": "2024-09-02T09:47:09.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/7a9d9173-4384-4175-9c02-52868c04fd34", "record": "CVE-2024-5274", "field": "creation_timestamp", "uuid": "3a72f9b0-c43f-4602-8178-5bb0df06c14f"}, {"timestamp": "2024-09-06T10:11:38Z", "date_only": false, "value": "2024-09-06T10:11:38.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/orderofsixangles/2431", "record": "CVE-2024-5274", "field": "creation_timestamp", "uuid": "b130e1bd-1ccb-4447-a282-314eadcb048d", "content": "CVE-2024-5274: A Minor Flaw in V8 Parser Leading to Catastrophes\n\nhttps://www.darknavy.org/blog/cve_2024_5274_a_minor_flaw_in_v8_parser_leading_to_catastrophes/", "url": "https://t.me/orderofsixangles/2431"}, {"timestamp": "2024-09-06T16:05:05Z", "date_only": false, "value": "2024-09-06T16:05:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/true_secator/6177", "record": "CVE-2024-5274", "field": "creation_timestamp", "uuid": "1c70da55-a629-4f6b-9df2-6723ed69c337", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0438 \u0434\u0435\u043b\u0438\u0442\u044c\u0441\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u043c\u0438 \u0442\u0440\u0435\u043d\u0434\u0430\u043c\u0438 \u043f\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c Mistymntncop \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b PoC \u0434\u043b\u044f CVE-2024-5274, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Chrome, \u043a\u043e\u0442\u043e\u0440\u0443\u044e Google \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0435\u0449\u0435 \u0432 \u043c\u0430\u0435.\n\nQiAnXin \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043e\u0442\u0447\u0435\u0442 \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0435\u0439 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u0438 \u0443\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 0-day \u0432 Windows DWM Core, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a\u00a0CVE-2024-30051 \u0438 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430\u043c\u0438 \u0431\u043e\u0442\u043d\u0435\u0442\u0430 Qakbot.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Jamf \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u043e\u0431\u0437\u043e\u0440 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u043e\u0431\u0445\u043e\u0434\u0430 Gatekeeper macOS \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e.\n\nPatchstack \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 CVE-2024-44000, \u0435\u0449\u0435 \u043e\u0434\u043d\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 \u043a\u044d\u0448\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f LiteSpeed WordPress, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u041f\u0435\u0440\u0432\u043e\u0439 \u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u0441\u0442\u0430\u043b\u0430 CVE-2024-28000, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0435\u0449\u0435 \u0434\u0432\u0435 \u043d\u0435\u0434\u0435\u043b\u0438 \u043d\u0430\u0437\u0430\u0434 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b cookie \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438\u0437 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u043e\u0442\u043b\u0430\u0434\u043a\u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u0430.\n\n\u041e\u043d\u0430 \u0431\u044b\u043b\u0430\u00a0\u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 22 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 2024 \u0433\u043e\u0434\u0430, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043e \u0432\u0447\u0435\u0440\u0430 \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u043c LiteSpeed Cache \u0432\u0435\u0440\u0441\u0438\u0438 6.5.0.1.\n\nVeeam \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f 18 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0432 Veeam Backup & Replication, Service Provider Console \u0438 One.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0438\u0437 \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f CVE-2024-40711 - \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f (CVSS v3.1: 9,8) \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 Veeam Backup & Replication, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\nApache \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f CVE-2024-45195 \u0432 \u0441\u0432\u043e\u0435\u043c \u041f\u041e \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c OFBiz (Open For Business), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 Linux \u0438 Windows.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 Rapid7 \u0438 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043f\u0440\u0438\u043d\u0443\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u0435 \u043f\u0443\u0442\u0438 \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u044f\u043c\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.\n\n\u041a\u043e\u043c\u0430\u043d\u0434\u0430 Apache \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 18.12.16, \u0434\u043e\u0431\u0430\u0432\u0438\u0432 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\u0412\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432\u044b\u0441\u043e\u043a\u0430, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u044d\u0442\u043e \u0441\u0432\u044f\u0437\u0430\u043d\u043e \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 RCE \u0432 OFBiz, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435.", "url": "https://t.me/true_secator/6177"}, {"timestamp": "2024-09-08T06:28:37Z", "date_only": false, "value": "2024-09-08T06:28:37.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberDilara/830", "record": "CVE-2024-5274", "field": "creation_timestamp", "uuid": "bfc99d57-e24c-4b6a-b653-fa5f7f3b58dc", "content": "Tools - Hackers Factory \n\nThe tool that bypasses the firewall's Application Based Rules and lets you connect to anywhere, ANY IP, ANY PORT and ANY APPLICATION.\n\nhttps://github.com/keywa7/keywa7\n\nA tool that allows you to search for vulnerable android devices across the world and exploit them.\n\nhttps://github.com/0x1CA3/AdbNet\n\nAndroid malware source code dataset collected from public resources.\n\nhttps://github.com/d-Raco/android-malware-source-code-samples\n\nNext-Level Reversing: Binary Ninja+TTD\n\nhttps://seeinglogic.com/posts/binary-ninja-ttd-intro/\n\n#Exploit\n\n1. CVE-2024-36974:\nLinux Kernel taprio_parse_mqprio_opt injection\n\nhttps://ssd-disclosure.com/ssd-advisory-linux-kernel-taprio-oob\n\n2. CVE-2024-5274:\nType Confusion in V8 in Google Chrome\n\nhttps://github.com/mistymntncop/CVE-2024-5274\n\n#Threat_Research\n\n1. Analyse MSI files for vulnerabilities\n\nhttps://github.com/CICADA8-Research/MyMSIAnalyzer\n\n2. Analysis of two arbitrary code execution vulnerabilities affecting WPS Office (CVE-2024-7262/CVE-2024-7263)\n\nhttps://welivesecurity.com/en/eset-research/analysis-of-two-arbitrary-code-execution-vulnerabilities-affecting-wps-office\n\nDiscover Ashok, an OSINT reconnaissance tool with features like Wayback Machine crawling, unlimited Google Dorking, GitHub info grabber, subdomain finder and CMS/tech detection!\n\nhttps://github.com/powerexploit/Ashok\n\nBest list of top xss Polyglots to Bypass WAF's\n\nhttps://github.com/coffinsp/lostools/blob/coffin/xsspollygots.txt\n\n#CyberDilara\nhttps://t.me/CyberDilara", "url": "https://t.me/CyberDilara/830"}, {"timestamp": "2024-09-08T06:28:46Z", "date_only": false, "value": "2024-09-08T06:28:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/3714", "record": "CVE-2024-5274", "field": "creation_timestamp", "uuid": "98ba4f37-85b1-4e6a-ad55-5843c7fd6573", "content": "Tools - Hackers Factory \n\nThe tool that bypasses the firewall's Application Based Rules and lets you connect to anywhere, ANY IP, ANY PORT and ANY APPLICATION.\n\nhttps://github.com/keywa7/keywa7\n\nA tool that allows you to search for vulnerable android devices across the world and exploit them.\n\nhttps://github.com/0x1CA3/AdbNet\n\nAndroid malware source code dataset collected from public resources.\n\nhttps://github.com/d-Raco/android-malware-source-code-samples\n\nNext-Level Reversing: Binary Ninja+TTD\n\nhttps://seeinglogic.com/posts/binary-ninja-ttd-intro/\n\n#Exploit\n\n1. CVE-2024-36974:\nLinux Kernel taprio_parse_mqprio_opt injection\n\nhttps://ssd-disclosure.com/ssd-advisory-linux-kernel-taprio-oob\n\n2. CVE-2024-5274:\nType Confusion in V8 in Google Chrome\n\nhttps://github.com/mistymntncop/CVE-2024-5274\n\n#Threat_Research\n\n1. Analyse MSI files for vulnerabilities\n\nhttps://github.com/CICADA8-Research/MyMSIAnalyzer\n\n2. Analysis of two arbitrary code execution vulnerabilities affecting WPS Office (CVE-2024-7262/CVE-2024-7263)\n\nhttps://welivesecurity.com/en/eset-research/analysis-of-two-arbitrary-code-execution-vulnerabilities-affecting-wps-office\n\nDiscover Ashok, an OSINT reconnaissance tool with features like Wayback Machine crawling, unlimited Google Dorking, GitHub info grabber, subdomain finder and CMS/tech detection!\n\nhttps://github.com/powerexploit/Ashok\n\nBest list of top xss Polyglots to Bypass WAF's\n\nhttps://github.com/coffinsp/lostools/blob/coffin/xsspollygots.txt\n\n#CyberDilara\nhttps://t.me/CyberDilara", "url": "https://t.me/dilagrafie/3714"}, {"timestamp": "2024-09-08T06:28:55Z", "date_only": false, "value": "2024-09-08T06:28:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GrayHatsHack/7389", "record": "CVE-2024-5274", "field": "creation_timestamp", "uuid": "8c544817-1c0a-4123-87a7-5869b9d507ad", "content": "Tools - Hackers Factory \n\nThe tool that bypasses the firewall's Application Based Rules and lets you connect to anywhere, ANY IP, ANY PORT and ANY APPLICATION.\n\nhttps://github.com/keywa7/keywa7\n\nA tool that allows you to search for vulnerable android devices across the world and exploit them.\n\nhttps://github.com/0x1CA3/AdbNet\n\nAndroid malware source code dataset collected from public resources.\n\nhttps://github.com/d-Raco/android-malware-source-code-samples\n\nNext-Level Reversing: Binary Ninja+TTD\n\nhttps://seeinglogic.com/posts/binary-ninja-ttd-intro/\n\n#Exploit\n\n1. CVE-2024-36974:\nLinux Kernel taprio_parse_mqprio_opt injection\n\nhttps://ssd-disclosure.com/ssd-advisory-linux-kernel-taprio-oob\n\n2. CVE-2024-5274:\nType Confusion in V8 in Google Chrome\n\nhttps://github.com/mistymntncop/CVE-2024-5274\n\n#Threat_Research\n\n1. Analyse MSI files for vulnerabilities\n\nhttps://github.com/CICADA8-Research/MyMSIAnalyzer\n\n2. Analysis of two arbitrary code execution vulnerabilities affecting WPS Office (CVE-2024-7262/CVE-2024-7263)\n\nhttps://welivesecurity.com/en/eset-research/analysis-of-two-arbitrary-code-execution-vulnerabilities-affecting-wps-office\n\nDiscover Ashok, an OSINT reconnaissance tool with features like Wayback Machine crawling, unlimited Google Dorking, GitHub info grabber, subdomain finder and CMS/tech detection!\n\nhttps://github.com/powerexploit/Ashok\n\nBest list of top xss Polyglots to Bypass WAF's\n\nhttps://github.com/coffinsp/lostools/blob/coffin/xsspollygots.txt\n\n#CyberDilara\nhttps://t.me/CyberDilara", "url": "https://t.me/GrayHatsHack/7389"}, {"timestamp": "2024-09-08T06:28:55Z", "date_only": false, "value": "2024-09-08T06:28:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GrayHatsHack/8721", "record": "CVE-2024-5274", "field": "creation_timestamp", "uuid": "279ace5a-2f9b-435b-942b-de7e058867e7", "content": "Tools - Hackers Factory \n\nThe tool that bypasses the firewall's Application Based Rules and lets you connect to anywhere, ANY IP, ANY PORT and ANY APPLICATION.\n\nhttps://github.com/keywa7/keywa7\n\nA tool that allows you to search for vulnerable android devices across the world and exploit them.\n\nhttps://github.com/0x1CA3/AdbNet\n\nAndroid malware source code dataset collected from public resources.\n\nhttps://github.com/d-Raco/android-malware-source-code-samples\n\nNext-Level Reversing: Binary Ninja+TTD\n\nhttps://seeinglogic.com/posts/binary-ninja-ttd-intro/\n\n#Exploit\n\n1. CVE-2024-36974:\nLinux Kernel taprio_parse_mqprio_opt injection\n\nhttps://ssd-disclosure.com/ssd-advisory-linux-kernel-taprio-oob\n\n2. CVE-2024-5274:\nType Confusion in V8 in Google Chrome\n\nhttps://github.com/mistymntncop/CVE-2024-5274\n\n#Threat_Research\n\n1. Analyse MSI files for vulnerabilities\n\nhttps://github.com/CICADA8-Research/MyMSIAnalyzer\n\n2. Analysis of two arbitrary code execution vulnerabilities affecting WPS Office (CVE-2024-7262/CVE-2024-7263)\n\nhttps://welivesecurity.com/en/eset-research/analysis-of-two-arbitrary-code-execution-vulnerabilities-affecting-wps-office\n\nDiscover Ashok, an OSINT reconnaissance tool with features like Wayback Machine crawling, unlimited Google Dorking, GitHub info grabber, subdomain finder and CMS/tech detection!\n\nhttps://github.com/powerexploit/Ashok\n\nBest list of top xss Polyglots to Bypass WAF's\n\nhttps://github.com/coffinsp/lostools/blob/coffin/xsspollygots.txt\n\n#CyberDilara\nhttps://t.me/CyberDilara", "url": "https://t.me/GrayHatsHack/8721"}, {"timestamp": "2024-09-08T06:29:06Z", "date_only": false, "value": "2024-09-08T06:29:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/InfoSecInsider/23702", "record": "CVE-2024-5274", "field": "creation_timestamp", "uuid": "22104a83-d530-42c0-ba39-98b1887ef531", "content": "Tools - Hackers Factory \n\nThe tool that bypasses the firewall's Application Based Rules and lets you connect to anywhere, ANY IP, ANY PORT and ANY APPLICATION.\n\nhttps://github.com/keywa7/keywa7\n\nA tool that allows you to search for vulnerable android devices across the world and exploit them.\n\nhttps://github.com/0x1CA3/AdbNet\n\nAndroid malware source code dataset collected from public resources.\n\nhttps://github.com/d-Raco/android-malware-source-code-samples\n\nNext-Level Reversing: Binary Ninja+TTD\n\nhttps://seeinglogic.com/posts/binary-ninja-ttd-intro/\n\n#Exploit\n\n1. CVE-2024-36974:\nLinux Kernel taprio_parse_mqprio_opt injection\n\nhttps://ssd-disclosure.com/ssd-advisory-linux-kernel-taprio-oob\n\n2. CVE-2024-5274:\nType Confusion in V8 in Google Chrome\n\nhttps://github.com/mistymntncop/CVE-2024-5274\n\n#Threat_Research\n\n1. Analyse MSI files for vulnerabilities\n\nhttps://github.com/CICADA8-Research/MyMSIAnalyzer\n\n2. Analysis of two arbitrary code execution vulnerabilities affecting WPS Office (CVE-2024-7262/CVE-2024-7263)\n\nhttps://welivesecurity.com/en/eset-research/analysis-of-two-arbitrary-code-execution-vulnerabilities-affecting-wps-office\n\nDiscover Ashok, an OSINT reconnaissance tool with features like Wayback Machine crawling, unlimited Google Dorking, GitHub info grabber, subdomain finder and CMS/tech detection!\n\nhttps://github.com/powerexploit/Ashok\n\nBest list of top xss Polyglots to Bypass WAF's\n\nhttps://github.com/coffinsp/lostools/blob/coffin/xsspollygots.txt\n\n#CyberDilara\nhttps://t.me/CyberDilara", "url": "https://t.me/InfoSecInsider/23702"}, {"timestamp": "2024-09-08T06:29:06Z", "date_only": false, "value": "2024-09-08T06:29:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/InfoSecInsider/223", "record": "CVE-2024-5274", "field": "creation_timestamp", "uuid": "327d6a90-1876-484e-958d-fae004828078", "content": "Tools - Hackers Factory \n\nThe tool that bypasses the firewall's Application Based Rules and lets you connect to anywhere, ANY IP, ANY PORT and ANY APPLICATION.\n\nhttps://github.com/keywa7/keywa7\n\nA tool that allows you to search for vulnerable android devices across the world and exploit them.\n\nhttps://github.com/0x1CA3/AdbNet\n\nAndroid malware source code dataset collected from public resources.\n\nhttps://github.com/d-Raco/android-malware-source-code-samples\n\nNext-Level Reversing: Binary Ninja+TTD\n\nhttps://seeinglogic.com/posts/binary-ninja-ttd-intro/\n\n#Exploit\n\n1. CVE-2024-36974:\nLinux Kernel taprio_parse_mqprio_opt injection\n\nhttps://ssd-disclosure.com/ssd-advisory-linux-kernel-taprio-oob\n\n2. CVE-2024-5274:\nType Confusion in V8 in Google Chrome\n\nhttps://github.com/mistymntncop/CVE-2024-5274\n\n#Threat_Research\n\n1. Analyse MSI files for vulnerabilities\n\nhttps://github.com/CICADA8-Research/MyMSIAnalyzer\n\n2. Analysis of two arbitrary code execution vulnerabilities affecting WPS Office (CVE-2024-7262/CVE-2024-7263)\n\nhttps://welivesecurity.com/en/eset-research/analysis-of-two-arbitrary-code-execution-vulnerabilities-affecting-wps-office\n\nDiscover Ashok, an OSINT reconnaissance tool with features like Wayback Machine crawling, unlimited Google Dorking, GitHub info grabber, subdomain finder and CMS/tech detection!\n\nhttps://github.com/powerexploit/Ashok\n\nBest list of top xss Polyglots to Bypass WAF's\n\nhttps://github.com/coffinsp/lostools/blob/coffin/xsspollygots.txt\n\n#CyberDilara\nhttps://t.me/CyberDilara", "url": "https://t.me/InfoSecInsider/223"}, {"timestamp": "2024-09-08T17:47:03Z", "date_only": false, "value": "2024-09-08T17:47:03.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/HackingInsights/12333", "record": "CVE-2024-5274", "field": "creation_timestamp", "uuid": "9e10a4c9-d18e-41cd-876d-287554292817", "content": "\u200aCVE-2024-5274: Chrome Zero-Day Exploited by APT29, PoC Exploit Published\n\nhttps://securityonline.info/cve-2024-5274-chrome-zero-day-exploited-by-apt29-poc-exploit-published/", "url": "https://t.me/HackingInsights/12333"}, {"timestamp": "2024-09-09T15:25:40Z", "date_only": false, "value": "2024-09-09T15:25:40.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/682055c7-fb73-4d29-be0f-ef00f55f3970", "record": "CVE-2024-5274", "field": "creation_timestamp", "uuid": "03f12769-fc0d-42ff-a63c-942fae7b28f0"}, {"timestamp": "2024-10-21T16:49:20Z", "date_only": false, "value": "2024-10-21T16:49:20.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/freeosint/2030", "record": "CVE-2024-5274", "field": "creation_timestamp", "uuid": "96f46d88-add9-44ff-aac7-4ecdeab171ee", "content": "Google: \u0420\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f iOS \u0438 Android \u043e\u0442 NSO. \n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Google Threat Analysis Group (TAG) \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043b\u0438 \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 APT29: \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u044f\u043a\u043e\u0431\u044b \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0420\u043e\u0441\u0441\u0438\u0435\u0439, \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 NSO Group \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 iOS \u0438 Android.\n\u0410\u0442\u0430\u043a\u0438, \u043f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u043e\u0432, \u043f\u0440\u043e\u0445\u043e\u0434\u0438\u043b\u0438 \u0441 \u043d\u043e\u044f\u0431\u0440\u044f 2023 \u0433\u043e\u0434\u0430 \u043f\u043e \u0438\u044e\u043b\u044c 2023-\u0433\u043e. \u041a \u0442\u043e\u043c\u0443 \u043c\u043e\u043c\u0435\u043d\u0442\u0443 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043f\u0430\u0442\u0447\u0438, \u043d\u043e \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043f\u043e \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u0438 \u043d\u0435 \u0443\u0441\u043f\u0435\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f.\nAPT29, \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u043f\u043e\u0434 \u0438\u043c\u0435\u043d\u0435\u043c Midnight Blizzard, \u0432 \u043f\u043e\u0448\u043b\u043e\u043c \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430\u0441\u044c \u0430\u0442\u0430\u043a\u043e\u0439 \u043d\u0430 Microsoft, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0430 \u0444\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u044b \u0421\u0428\u0410. \u0422\u0435\u043f\u0435\u0440\u044c \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 \u0432\u0437\u044f\u043b\u0430\u0441\u044c \u0437\u0430 \u0432\u043b\u0430\u0441\u0442\u0438 \u041c\u043e\u043d\u0433\u043e\u043b\u0438\u0438.\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438 \u0432 Google Threat Analysis Group, \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043f\u043e\u0434 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE-2023-41993, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e WebKit \u0438 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0443\u044e \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u043e\u0442\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0432\u0435\u0431-\u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430.\n\u041a\u0430\u043a \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, Apple \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0430\u0442\u0447 \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u0434\u044b\u0440\u044b \u0432 \u043a\u043e\u043d\u0446\u0435 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430. \u0412\u043c\u0435\u0441\u0442\u0435 \u0441 \u043d\u0435\u0439 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0446\u0438\u044f \u0437\u0430\u043a\u0440\u044b\u043b\u0430 CVE-2023-41991 \u0438 CVE-2023-41992.\n\u0412\u043e\u043e\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u0441\u044c \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u043c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u043c, APT29 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0441\u0430\u0439\u0442\u044b mfa.gov[.]mn \u0438 cabinet.gov[.]mn \u0438 \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430 \u0432 \u043a\u043e\u0434 \u0438\u0445 \u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 iframe. \u0421\u0445\u0435\u043c\u0430 \u0432\u0435\u043a\u0442\u043e\u0440\u0430 \u0432\u044b\u0433\u043b\u044f\u0434\u0435\u043b\u0430 \u0442\u0430\u043a:\n\u00a0\n\u0422\u0430\u043a\u043e\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u043b\u0438 \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c cookies \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0435\u0432 iPhone, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c iOS 16.6.1 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u041e\u0421.\n\u0423\u0436\u0435 \u0432 \u0438\u044e\u043b\u0435 2024-\u0433\u043e \u0433\u0440\u0443\u043f\u043f\u0430 \u0441\u0442\u0430\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f CVE-2024-5274 \u0438 CVE-2024-4671, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 Google Chrome, \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Android, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0441\u0435\u0449\u0430\u043b\u0438 \u0441\u0430\u0439\u0442 mga.gov[.]mn.", "url": "https://t.me/freeosint/2030"}, {"timestamp": "2024-11-11T02:28:59Z", "date_only": false, "value": "2024-11-11T02:28:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/club31337/2250", "record": "CVE-2024-5274", "field": "creation_timestamp", "uuid": "e0889e7e-701c-47aa-883d-4940127e4bde", "content": "#Chrome 0day #PoC\nCVE-2024-5274\n\n  (v1 = class C1 {\n    static {\n      this;\n    }\n  }) => {}", "url": "https://t.me/club31337/2250"}, {"timestamp": "2025-02-23T02:10:54Z", "date_only": false, "value": "2025-02-23T02:10:54.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2024-5274", "field": "creation_timestamp", "uuid": "8beba5d4-b8a0-40a3-9f77-a938dc4e44e7"}, {"timestamp": "2025-07-03T05:09:44Z", "date_only": false, "value": "2025-07-03T05:09:44.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/682055c7-fb73-4d29-be0f-ef00f55f3970", "record": "CVE-2024-5274", "field": "creation_timestamp", "uuid": "ec126c0b-d162-443b-ab15-5bfcede50274"}, {"timestamp": "2025-08-31T03:01:26Z", "date_only": false, "value": "2025-08-31T03:01:26.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "record": "CVE-2024-5274", "field": "creation_timestamp", "uuid": "3d97e4b9-38e0-4986-ab1c-0a713f4f2c00"}, {"timestamp": "2025-09-22T02:20:07.348Z", "date_only": false, "value": "2025-09-22T02:20:07.348544Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3lzfdunone72v", "record": "cve-2024-5274", "field": "creation_timestamp", "uuid": "c128202d-378e-4490-a476-a8c54a4a32d7", "url": "https://bsky.app/profile/cyberhub.blog/post/3lzfdunone72v"}, {"timestamp": "2025-10-21T23:05:17.587Z", "date_only": false, "value": "2025-10-21T23:05:17.587Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-5274", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:05:17.587Z", "date_only": false, "value": "2025-10-21T23:05:17.587Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-5274", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-26T06:26:35Z", "date_only": false, "value": "2025-10-26T06:26:35.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/ozymahdias/8987464fab5e9908ef1e73fbb5187861", "record": "CVE-2024-5274", "field": "creation_timestamp", "uuid": "cc44bf8f-5411-41f8-9d24-67e8296177b9", "url": "https://gist.github.com/ozymahdias/8987464fab5e9908ef1e73fbb5187861"}, {"timestamp": "2025-11-06T20:21:17Z", "date_only": false, "value": "2025-11-06T20:21:17.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/burakcanbalta/7e4fa670e296f994509e9ffef99b6aed", "record": "CVE-2024-5274", "field": "creation_timestamp", "uuid": "531676c2-a2a4-48d7-8112-b37dd4949dd8", "url": "https://gist.github.com/burakcanbalta/7e4fa670e296f994509e9ffef99b6aed"}, {"timestamp": "2025-11-18T09:16:38.074Z", "date_only": false, "value": "2025-11-18T09:16:38.074521Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/concisecyber.bsky.social/post/3m5vfplzoh22r", "record": "CVE-2024-5274", "field": "creation_timestamp", "uuid": "3a426fab-a227-4594-9b28-7c58d53b1e00", "url": "https://bsky.app/profile/concisecyber.bsky.social/post/3m5vfplzoh22r"}, {"timestamp": "2026-02-02T12:26:36.278Z", "date_only": false, "value": "2026-02-02T12:26:36.278155Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/25fff3cd-1069-4937-9f78-a1b22b2fcf3c", "record": "CVE-2024-5274", "field": "creation_timestamp", "uuid": "1ce14b40-0135-48cc-b6d8-333bbebb22d0", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/25fff3cd-1069-4937-9f78-a1b22b2fcf3c"}, {"timestamp": "2026-02-02T12:26:36.278Z", "date_only": false, "value": "2026-02-02T12:26:36.278155Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/25fff3cd-1069-4937-9f78-a1b22b2fcf3c", "record": "CVE-2024-5274", "field": "creation_timestamp", "uuid": "0bae4502-fd99-4e29-9953-7bf673dccb45", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/25fff3cd-1069-4937-9f78-a1b22b2fcf3c"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2024-5274", "field": "timestamps.recorded_at", "uuid": "9717d142-a25b-41a5-921c-38c2bf18e9a3", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-08T03:54:07Z", "date_only": false, "value": "2026-04-08T03:54:07.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/jrabenah/cac8452f2a62a8d34fcd45179775a11f", "record": "CVE-2024-5274", "field": "creation_timestamp", "uuid": "3f36b086-ffa5-457c-82b2-a8e9446488c9", "url": "https://gist.github.com/jrabenah/cac8452f2a62a8d34fcd45179775a11f"}, {"timestamp": "2026-06-17T08:15:35.493Z", "date_only": false, "value": "2026-06-17T08:15:35.493", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-5274", "record": "FKIE_CVE-2024-5274", "field": "lastModified"}, {"timestamp": "2026-06-19T12:46:39.611Z", "date_only": false, "value": "2026-06-19T12:46:39.611844Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c1a2602b-d318-45a9-90d4-879dce0bf0d9", "record": "CVE-2024-5274", "field": "creation_timestamp", "uuid": "ea1f994d-3ba1-4059-89be-b09cd6428bfa", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c1a2602b-d318-45a9-90d4-879dce0bf0d9"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2024-5274", "field": "timestamps.recorded_at", "uuid": "4a6b40ce-70a1-4d12-92df-2653017daaf1", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:14:21.716Z", "date_only": false, "value": "2026-06-23T11:14:21.716037Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/4a6b40ce-70a1-4d12-92df-2653017daaf1", "record": "CVE-2024-5274", "field": "creation_timestamp", "uuid": "e1fdc19b-50a5-498d-9fd0-6f8807d85f3d", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/4a6b40ce-70a1-4d12-92df-2653017daaf1"}, {"timestamp": "2026-06-23T14:05:53.902Z", "date_only": false, "value": "2026-06-23T14:05:53.902593Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1f7f325a-f1e8-490d-8218-0b5cf822099e", "record": "CVE-2024-5274", "field": "creation_timestamp", "uuid": "30d478ce-c019-4f4c-8de2-ed7f7cb3a235", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1f7f325a-f1e8-490d-8218-0b5cf822099e"}, {"timestamp": "2026-07-06T11:00:04.455Z", "date_only": false, "value": "2026-07-06T11:00:04.455302Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/327", "record": "CVE-2024-5274", "field": "creation_timestamp", "uuid": "349d2661-8933-4464-bd5c-208dbac6f60c", "url": "https://t.me/ZerodayAlert/327"}, {"timestamp": "2026-07-07T00:00:06.696Z", "date_only": false, "value": "2026-07-07T00:00:06.696870Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/327", "record": "CVE-2024-5274", "field": "creation_timestamp", "uuid": "52bd852c-d793-4174-8532-a8638fec96ba", "url": "https://t.me/ZerodayAlert/327"}, {"timestamp": "2026-07-11T20:00:06.024Z", "date_only": false, "value": "2026-07-11T20:00:06.024281Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ZerodayAlert/327", "record": "CVE-2024-5274", "field": "creation_timestamp", "uuid": "ffad3016-4bac-4ebf-9cc8-1ec3eda43c03", "url": "https://t.me/ZerodayAlert/327"}, {"timestamp": "2026-07-12T00:00:39.470Z", "date_only": false, "value": "2026-07-12T00:00:39.470641Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ZerodayAlert/327", "record": "CVE-2024-5274", "field": "creation_timestamp", "uuid": "6ce1d1b0-3cdd-4902-9d5e-971dd43c49b3", "url": "https://t.me/ZerodayAlert/327"}, {"timestamp": "2026-07-26T02:02:06.023Z", "date_only": false, "value": "2026-07-26T02:02:06.023929Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/3084", "record": "CVE-2024-5274", "field": "creation_timestamp", "uuid": "82cc6ae2-bb08-403e-a8cf-9c5ecd32b876", "url": "https://t.me/EchelonEyes/3084"}, {"timestamp": "2026-07-27T00:00:43.974Z", "date_only": false, "value": "2026-07-27T00:00:43.974083Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/3084", "record": "CVE-2024-5274", "field": "creation_timestamp", "uuid": "41d73a5f-f907-4e79-a118-4233917d48db", "url": "https://t.me/EchelonEyes/3084"}, {"timestamp": "2026-07-28T00:00:45.428Z", "date_only": false, "value": "2026-07-28T00:00:45.428517Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/3084", "record": "CVE-2024-5274", "field": "creation_timestamp", "uuid": "63c04d58-c276-483c-9501-fa4467256ded", "url": "https://t.me/EchelonEyes/3084"}, {"timestamp": "2026-08-27T09:00:03.686Z", "date_only": false, "value": "2026-08-27T09:00:03.686632Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehaking/2926", "record": "CVE-2024-5274", "field": "creation_timestamp", "uuid": "5915cd41-5418-4fe3-a1fb-dfa5603ce5d8", "url": "https://t.me/thehaking/2926"}, {"timestamp": "2026-08-28T00:00:59.911Z", "date_only": false, "value": "2026-08-28T00:00:59.911862Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehaking/2926", "record": "CVE-2024-5274", "field": "creation_timestamp", "uuid": "253aae6f-663b-4078-a752-3fd5edd61e53", "url": "https://t.me/thehaking/2926"}, {"timestamp": "2026-09-01T17:00:06.200Z", "date_only": false, "value": "2026-09-01T17:00:06.200225Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Hackme_news/963", "record": "CVE-2024-5274", "field": "creation_timestamp", "uuid": "e23a8553-b611-4f74-877e-91c91af21798", "url": "https://t.me/Hackme_news/963"}, {"timestamp": "2026-09-02T01:03:31.465Z", "date_only": false, "value": "2026-09-02T01:03:31.465369Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/Hackme_news/963", "record": "CVE-2024-5274", "field": "creation_timestamp", "uuid": "4ec15a5b-cae2-4ec2-9a95-6ca34449c02f", "url": "https://t.me/Hackme_news/963"}, {"timestamp": "2026-09-20T19:48:30Z", "date_only": false, "value": "2026-09-20T19:48:30Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0142-1", "record": "OPENSUSE-SU-2024:0142-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T19:48:30Z", "date_only": false, "value": "2026-09-20T19:48:30Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0142-1", "record": "OPENSUSE-SU-2024:0142-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T19:48:39Z", "date_only": false, "value": "2026-09-20T19:48:39Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0156-1", "record": "OPENSUSE-SU-2024:0156-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T19:48:39Z", "date_only": false, "value": "2026-09-20T19:48:39Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0156-1", "record": "OPENSUSE-SU-2024:0156-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T21:11:55Z", "date_only": false, "value": "2026-09-20T21:11:55Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14004-1", "record": "OPENSUSE-SU-2024:14004-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T21:11:55Z", "date_only": false, "value": "2026-09-20T21:11:55Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14004-1", "record": "OPENSUSE-SU-2024:14004-1", "field": "document.tracking.current_release_date"}]}