{"metadata": {"vulnerability": "cve-2024-9474", "count": 483, "kinds": {"milestone": 11, "sighting": 414, "kev": 17, "other": 41}}, "data": [{"timestamp": "2024-10-03T11:35:20.568Z", "date_only": false, "value": "2024-10-03T11:35:20.568Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-9474", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-11-10T23:00:00Z", "date_only": false, "value": "2024-11-10T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3398", "record": "WID-SEC-W-2024-3398", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-11-10T23:00:00Z", "date_only": false, "value": "2024-11-10T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3398", "record": "WID-SEC-W-2024-3398", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-11-10T23:00:00Z", "date_only": false, "value": "2024-11-10T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3398", "record": "WID-SEC-W-2024-3398", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-11-14T00:00:00Z", "date_only": true, "value": "2024-11-14", "kind": "milestone", "label": "Published", "source": "certfr_alerte \u00b7 CERTFR-2024-ALE-015", "record": "CERTFR-2024-ALE-015", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2024-11-14T23:00:00Z", "date_only": false, "value": "2024-11-14T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3398", "record": "WID-SEC-W-2024-3398", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2024-11-15T00:00:00Z", "date_only": false, "value": "2024-11-15T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_alerte \u00b7 CERTFR-2024-ALE-015", "record": "CERTFR-2024-ALE-015", "field": "initial_release_date"}, {"timestamp": "2024-11-15T00:00:00Z", "date_only": false, "value": "2024-11-15T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2024-ALE-015", "record": "CERTFR-2024-ALE-015", "field": "revisions.0.revision_date"}, {"timestamp": "2024-11-18T00:00:00Z", "date_only": false, "value": "2024-11-18T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2024-9474", "field": "timestamps.asserted_at", "uuid": "43dbbf0c-455d-412a-8bd5-e462a4b43bba", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-11-18T00:00:00Z", "date_only": false, "value": "2024-11-18T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2024-9474", "field": "timestamps.asserted_at", "uuid": "837dd166-e127-48f7-bc99-45171763b708", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-11-18T00:00:00Z", "date_only": true, "value": "2024-11-18", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-9474", "field": "containers.adp.0.metrics.1.other.content.dateAdded"}, {"timestamp": "2024-11-18T00:00:00Z", "date_only": false, "value": "2024-11-18T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2024-9474", "field": "evidence.0.details.added_date", "uuid": "837dd166-e127-48f7-bc99-45171763b708", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-11-18T00:00:00Z", "date_only": true, "value": "2024-11-18", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2024-9474", "field": "evidence.0.details.date_added", "uuid": "43dbbf0c-455d-412a-8bd5-e462a4b43bba", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-11-18T00:00:00Z", "date_only": false, "value": "2024-11-18T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2024-9474", "field": "timestamps.first_seen_at", "uuid": "43dbbf0c-455d-412a-8bd5-e462a4b43bba", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-11-18T00:00:00Z", "date_only": false, "value": "2024-11-18T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2024-9474", "field": "timestamps.first_seen_at", "uuid": "837dd166-e127-48f7-bc99-45171763b708", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-11-18T00:00:00Z", "date_only": true, "value": "2024-11-18", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-1001", "record": "CERTFR-2024-AVI-1001", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2024-11-18T00:00:00Z", "date_only": false, "value": "2024-11-18T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-9474", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-11-18T00:00:00Z", "date_only": false, "value": "2024-11-18T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-9474", "record": "FKIE_CVE-2024-9474", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-11-18T00:00:00Z", "date_only": false, "value": "2024-11-18T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2024-ALE-015", "record": "CERTFR-2024-ALE-015", "field": "revisions.4.revision_date"}, {"timestamp": "2024-11-18T00:00:00Z", "date_only": false, "value": "2024-11-18T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2024-9474", "field": "status.status_updated_at", "uuid": "43dbbf0c-455d-412a-8bd5-e462a4b43bba", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-11-18T00:00:00Z", "date_only": false, "value": "2024-11-18T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2024-9474", "field": "status.status_updated_at", "uuid": "837dd166-e127-48f7-bc99-45171763b708", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-11-18T00:00:00Z", "date_only": false, "value": "2024-11-18T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-9474", "field": "containers.adp.0.timeline.0.time"}, {"timestamp": "2024-11-18T14:00:00Z", "date_only": false, "value": "2024-11-18T14:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://security.paloaltonetworks.com/CVE-2024-9474", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "0e8f5888-5b31-49de-b48e-8956d1359005", "url": "https://security.paloaltonetworks.com/CVE-2024-9474"}, {"timestamp": "2024-11-18T14:00:00Z", "date_only": false, "value": "2024-11-18T14:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / palo_alto", "record": "cve-2024-9474", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2024-11-18T14:20:00Z", "date_only": false, "value": "2024-11-18T14:20:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / palo_alto", "record": "cve-2024-9474", "field": "containers.cna.datePublic"}, {"timestamp": "2024-11-18T14:29:11.781Z", "date_only": false, "value": "2024-11-18T14:29:11.781208Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113504429682120533", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "bb2c7825-12a1-4120-88ce-49d867d1f29e", "url": "https://infosec.exchange/users/screaminggoat/statuses/113504429682120533"}, {"timestamp": "2024-11-18T15:31:43.019Z", "date_only": false, "value": "2024-11-18T15:31:43.019052Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113504675562858729", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "cdae9d31-3eb0-43e0-ab48-9c823a26b3c7", "url": "https://infosec.exchange/users/screaminggoat/statuses/113504675562858729"}, {"timestamp": "2024-11-18T15:48:23.405Z", "date_only": false, "value": "2024-11-18T15:48:23.405Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-9474", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-11-18T15:48:23.405Z", "date_only": false, "value": "2024-11-18T15:48:23.405Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / palo_alto", "record": "cve-2024-9474", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-11-18T15:52:40.574Z", "date_only": false, "value": "2024-11-18T15:52:40.574771Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/113504757898137884", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "37c0918d-cc85-4075-a4ee-6a2e066a0678", "url": "https://infosec.exchange/users/cve/statuses/113504757898137884"}, {"timestamp": "2024-11-18T15:52:40.789Z", "date_only": false, "value": "2024-11-18T15:52:40.789026Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/113504757881555042", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "627155ca-744e-40d6-9de0-a0347d108055", "url": "https://infosec.exchange/users/cve/statuses/113504757881555042"}, {"timestamp": "2024-11-18T16:00:29Z", "date_only": false, "value": "2024-11-18T16:00:29.000000Z", "kind": "sighting", "label": "Seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2024-0451", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "ea5e3b3f-17de-4f83-92e9-78634626e65d", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2024-0451"}, {"timestamp": "2024-11-18T16:00:29.206Z", "date_only": false, "value": "2024-11-18T16:00:29.206286Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2024-0451", "record": "NCSC-2024-0451", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-11-18T16:00:29.206Z", "date_only": false, "value": "2024-11-18T16:00:29.206286Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2024-0451", "record": "NCSC-2024-0451", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-11-18T16:06:40.049Z", "date_only": false, "value": "2024-11-18T16:06:40.049080Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/zeljkazorz/statuses/113504812987241106", "record": "cve-2024-9474", "field": "creation_timestamp", "uuid": "2ddba3c9-f02f-4028-9405-68932fc52158", "url": "https://infosec.exchange/users/zeljkazorz/statuses/113504812987241106"}, {"timestamp": "2024-11-18T16:15:29Z", "date_only": false, "value": "2024-11-18T16:15:29Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-CGVW-JH5J-MGQ3", "record": "GHSA-CGVW-JH5J-MGQ3", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-11-18T16:15:29.780Z", "date_only": false, "value": "2024-11-18T16:15:29.780", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-9474", "record": "FKIE_CVE-2024-9474", "field": "published"}, {"timestamp": "2024-11-18T17:46:11.260Z", "date_only": false, "value": "2024-11-18T17:46:11.260755Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/113505204363880564", "record": "cve-2024-9474", "field": "creation_timestamp", "uuid": "823b46c2-d03c-41d5-85b0-6184e15a28c7", "url": "https://infosec.exchange/users/edwardk/statuses/113505204363880564"}, {"timestamp": "2024-11-18T18:30:58Z", "date_only": false, "value": "2024-11-18T18:30:58Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-CGVW-JH5J-MGQ3", "record": "GHSA-CGVW-JH5J-MGQ3", "field": "published"}, {"timestamp": "2024-11-18T19:03:34Z", "date_only": false, "value": "2024-11-18T19:03:34.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/11354", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "8c6f8c0d-06f2-41a1-816a-eba127efc2f0", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-9474 - Palo Alto Networks PAN-OS Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-9474 \nPublished : Nov. 18, 2024, 4:15 p.m. | 42\u00a0minutes ago \nDescription : A privilege escalation vulnerability in Palo Alto Networks PAN-OS software allows a PAN-OS administrator with access to the management web interface to perform actions on the firewall with root privileges.  \n  \nCloud NGFW and Prisma Access are not impacted by this vulnerability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/11354"}, {"timestamp": "2024-11-18T19:18:34.524Z", "date_only": false, "value": "2024-11-18T19:18:34.524537Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113505567615963450", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "6b949642-021c-44cf-b549-f4dd7daece80", "url": "https://infosec.exchange/users/screaminggoat/statuses/113505567615963450"}, {"timestamp": "2024-11-18T21:01:58.581Z", "date_only": false, "value": "2024-11-18T21:01:58.581892Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/shadowserver/statuses/113505974165623822", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "006df8be-765c-48f9-b572-546f308d843d", "url": "https://infosec.exchange/users/shadowserver/statuses/113505974165623822"}, {"timestamp": "2024-11-18T21:03:08.576Z", "date_only": false, "value": "2024-11-18T21:03:08.576168Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113505978768840797", "record": "cve-2024-9474", "field": "creation_timestamp", "uuid": "7e3c67d5-2f26-4e54-b524-fd193beb2b5d", "url": "https://infosec.exchange/users/screaminggoat/statuses/113505978768840797"}, {"timestamp": "2024-11-18T21:10:03Z", "date_only": false, "value": "2024-11-18T21:10:03.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "ceed3482-dc4c-42c3-b028-902b71a15e11"}, {"timestamp": "2024-11-18T22:03:02.242Z", "date_only": false, "value": "2024-11-18T22:03:02.242127Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113506214323538500", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "792a122d-27ad-4c9b-97a9-ee6affea19fe", "url": "https://infosec.exchange/users/screaminggoat/statuses/113506214323538500"}, {"timestamp": "2024-11-18T22:12:01.478Z", "date_only": false, "value": "2024-11-18T22:12:01.478344Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/patrickcmiller/statuses/113506249660230752", "record": "cve-2024-9474", "field": "creation_timestamp", "uuid": "6c6c4eba-ca12-40e0-85eb-2eceb392da33", "url": "https://infosec.exchange/users/patrickcmiller/statuses/113506249660230752"}, {"timestamp": "2024-11-18T22:19:16.087Z", "date_only": false, "value": "2024-11-18T22:19:16.087185Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2704494", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "b804f360-9d9f-4326-a1ae-e32fb82e268b", "url": "https://feedsin.space/feed/CISAKevBot/items/2704494"}, {"timestamp": "2024-11-18T23:00:00Z", "date_only": false, "value": "2024-11-18T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3398", "record": "WID-SEC-W-2024-3398", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2024-11-19T00:00:00Z", "date_only": false, "value": "2024-11-19T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-1001", "record": "CERTFR-2024-AVI-1001", "field": "last_revision_date"}, {"timestamp": "2024-11-19T00:00:00Z", "date_only": false, "value": "2024-11-19T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-1001", "record": "CERTFR-2024-AVI-1001", "field": "initial_release_date"}, {"timestamp": "2024-11-19T00:00:00Z", "date_only": false, "value": "2024-11-19T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2024-ALE-015", "record": "CERTFR-2024-ALE-015", "field": "revisions.2.revision_date"}, {"timestamp": "2024-11-19T00:00:00Z", "date_only": false, "value": "2024-11-19T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-1001", "record": "CERTFR-2024-AVI-1001", "field": "revisions.0.revision_date"}, {"timestamp": "2024-11-19T04:00:00Z", "date_only": false, "value": "2024-11-19T04:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1425", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "e3d70e8e-acce-4935-b962-cfe67c9eae8c", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1425"}, {"timestamp": "2024-11-19T11:07:37.415Z", "date_only": false, "value": "2024-11-19T11:07:37.415286Z", "kind": "sighting", "label": "Seen", "source": "https://cyberplace.social/users/GossiTheDog/statuses/113509298535296588", "record": "cve-2024-9474", "field": "creation_timestamp", "uuid": "9b3f6b95-5a21-4212-9584-5ba05ba8ddae", "url": "https://cyberplace.social/users/GossiTheDog/statuses/113509298535296588"}, {"timestamp": "2024-11-19T13:20:15.108Z", "date_only": false, "value": "2024-11-19T13:20:15.108737Z", "kind": "sighting", "label": "Seen", "source": "https://vulnerability.circl.lu/bundle/d6006baf-209a-4a38-8a58-394ea67eab2a", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "8b32b334-2f1f-4e8c-bec7-5241370844ee", "url": "https://vulnerability.circl.lu/bundle/d6006baf-209a-4a38-8a58-394ea67eab2a"}, {"timestamp": "2024-11-19T13:50:05Z", "date_only": false, "value": "2024-11-19T13:50:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/6446", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "9f95b327-e001-47a6-94ce-2bbdb9406f90", "content": "\u041d\u0430\u043a\u043e\u043d\u0435\u0446-\u0442\u043e \u043e\u0442\u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0438 \u0432 Palo Alto, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0432 \u0434\u043e\u043b\u0433\u043e\u0436\u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f 0-day \u0432 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0432 \u0445\u043e\u0434\u0435 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0435\u0439 \u043d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 Operation Lunar Peek.\n\n\u0412 \u0430\u0442\u0430\u043a\u0430\u0445 \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 PAN-OS, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u043e\u0432 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u044e\u0442\u0441\u044f \u0432\u043e\u0437\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044e \u0438\u0437\u0432\u043d\u0435 \u0441 \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0445 VPN-\u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432.\n\n\u041e\u0434\u0438\u043d \u0438\u0437 \u043d\u0443\u043b\u0435\u0439 \u0442\u0435\u043f\u0435\u0440\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2024-0012, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044f \u0441\u043e\u0431\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u0438\u043c\u0435\u044e\u0449\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f PAN-OS, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f, \u0432\u043c\u0435\u0448\u0438\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u0438\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a CVE-2024-9474.\n\nCVE-2024-9474\u00a0- \u0432\u0442\u043e\u0440\u0430\u044f 0-day, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u0438\u043c\u0435\u044e\u0449\u0435\u043c\u0443 \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 root \u043d\u0430 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0435.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f PAN-OS 11.2, 11.1, 11.0, 10.2 \u0438 10.1.\n\n\u041f\u043e \u0447\u0430\u0441\u0442\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 Palo Alto \u043d\u0435 \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u043d\u0438\u043a\u0430\u043a\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0435\u0439 \u043e \u0441\u0443\u0431\u044a\u0435\u043a\u0442\u0435 \u0443\u0433\u0440\u043e\u0437\u044b.\n\n\u041d\u043e \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 IoCs, \u0432\u043a\u043b\u044e\u0447\u0430\u044f IP-\u0430\u0434\u0440\u0435\u0441\u0430 \u0438 \u0445\u044d\u0448, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u043e\u0439 PHP-\u0432\u0435\u0431-\u0448\u0435\u043b\u043b\u0430, \u0441\u0431\u0440\u043e\u0448\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0435 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u044b.", "url": "https://t.me/true_secator/6446"}, {"timestamp": "2024-11-19T14:25:52.798Z", "date_only": false, "value": "2024-11-19T14:25:52.798946Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/shadowserver/statuses/113510079008881673", "record": "cve-2024-9474", "field": "creation_timestamp", "uuid": "405c5223-2829-4428-9f6f-6b556619783f", "url": "https://infosec.exchange/users/shadowserver/statuses/113510079008881673"}, {"timestamp": "2024-11-19T15:20:03.223Z", "date_only": false, "value": "2024-11-19T15:20:03.223667Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/113510292051070783", "record": "cve-2024-9474", "field": "creation_timestamp", "uuid": "c9481524-74e2-4fed-bcf4-c733f258aedf", "url": "https://infosec.exchange/users/edwardk/statuses/113510292051070783"}, {"timestamp": "2024-11-19T15:48:04.814Z", "date_only": false, "value": "2024-11-19T15:48:04.814386Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113510402234715872", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "2def2c8f-824b-4edf-b47b-dd022b460856", "url": "https://infosec.exchange/users/screaminggoat/statuses/113510402234715872"}, {"timestamp": "2024-11-19T16:13:31.883Z", "date_only": false, "value": "2024-11-19T16:13:31.883782Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/mttaggart/statuses/113510502265843551", "record": "cve-2024-9474", "field": "creation_timestamp", "uuid": "3cb5b9fe-952f-418b-b7ea-ea27c2b4d4ab", "url": "https://infosec.exchange/users/mttaggart/statuses/113510502265843551"}, {"timestamp": "2024-11-19T17:39:39Z", "date_only": false, "value": "2024-11-19T17:39:39.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/9089", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "4ac2eb29-a2e5-4607-a7c8-f86e3525da01", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aPAN-OS auth bypass + RCE\nURL\uff1ahttps://github.com/Chocapikk/CVE-2024-9474\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/9089"}, {"timestamp": "2024-11-19T18:22:12.260Z", "date_only": false, "value": "2024-11-19T18:22:12.260957Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/iagox86/statuses/113511008295616663", "record": "cve-2024-9474", "field": "creation_timestamp", "uuid": "8bd85e48-474f-4765-874d-c04b1d7e4552", "url": "https://infosec.exchange/users/iagox86/statuses/113511008295616663"}, {"timestamp": "2024-11-19T18:39:37Z", "date_only": false, "value": "2024-11-19T18:39:37+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2024-9474", "field": "timestamps.asserted_at", "uuid": "d0e87f4a-7a67-4b54-b14f-84e5f884234b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-11-19T18:39:37Z", "date_only": false, "value": "2024-11-19T18:39:37+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2024-9474", "field": "timestamps.first_seen_at", "uuid": "d0e87f4a-7a67-4b54-b14f-84e5f884234b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-11-19T23:42:12Z", "date_only": false, "value": "2024-11-19T23:42:12.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-9474.yaml", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "bc24aee2-ffff-4561-a6fa-5f7c8022611d", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-9474.yaml"}, {"timestamp": "2024-11-20T00:00:00Z", "date_only": false, "value": "2024-11-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-20)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "0ce69eeb-edd2-4e72-af88-1c75195cc016"}, {"timestamp": "2024-11-20T08:41:37.309Z", "date_only": false, "value": "2024-11-20T08:41:37.309906Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2024-0451", "record": "NCSC-2024-0451", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2024-11-20T08:41:37.309Z", "date_only": false, "value": "2024-11-20T08:41:37.309906Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2024-0451", "record": "NCSC-2024-0451", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-11-20T09:16:02Z", "date_only": false, "value": "2024-11-20T09:16:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Leak_DBMS/1516", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "238a9145-3963-42d8-b29a-cc2e32f585cf", "content": "\ud83d\udee1Palo Alto PAN-OS Pre-Auth RCE (CVE-2024-0012 &amp; CVE-2024-9474)\n\ud83d\udca5https://github.com/Chocapikk/CVE-2024-9474\n\u2b50\ufe0f@Leak_DBMS", "url": "https://t.me/Leak_DBMS/1516"}, {"timestamp": "2024-11-21T00:00:00Z", "date_only": false, "value": "2024-11-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-21)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "9cc953f4-0371-4187-a33d-605aec7d42b5"}, {"timestamp": "2024-11-21T02:01:37.478Z", "date_only": false, "value": "2024-11-21T02:01:37.478899Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113518477060852689", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "3b7a321d-57b9-4071-8f54-091be238e53e", "url": "https://infosec.exchange/users/screaminggoat/statuses/113518477060852689"}, {"timestamp": "2024-11-21T09:12:28.112Z", "date_only": false, "value": "2024-11-21T09:12:28.112980Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/shadowserver/statuses/113520171240634698", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "4f3673f1-7399-4fa9-9443-d8c11c6c158d", "url": "https://infosec.exchange/users/shadowserver/statuses/113520171240634698"}, {"timestamp": "2024-11-21T09:12:58.477Z", "date_only": false, "value": "2024-11-21T09:12:58.477541Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/shadowserver/statuses/113520173186568205", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "c520c6a4-ae2e-4624-aea1-81e399643f7c", "url": "https://infosec.exchange/users/shadowserver/statuses/113520173186568205"}, {"timestamp": "2024-11-21T09:50:49.835Z", "date_only": false, "value": "2024-11-21T09:50:49.835570Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/shadowserver/statuses/113520322017264871", "record": "cve-2024-9474", "field": "creation_timestamp", "uuid": "709c0ff9-e529-420f-9544-655bcc282be8", "url": "https://infosec.exchange/users/shadowserver/statuses/113520322017264871"}, {"timestamp": "2024-11-21T13:56:32.308Z", "date_only": false, "value": "2024-11-21T13:56:32.308337Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/113521288276947031", "record": "cve-2024-9474", "field": "creation_timestamp", "uuid": "a41a1c58-9052-4e00-9a0c-c49e4798311d", "url": "https://infosec.exchange/users/edwardk/statuses/113521288276947031"}, {"timestamp": "2024-11-21T17:27:12Z", "date_only": false, "value": "2024-11-21T17:27:12.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/5936", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "1c6cf373-662d-4ca2-acc3-aed878e71014", "content": "\ud83d\udea8 THREAT ALERT! Over 2,000 Palo Alto Networks devices have been compromised in an ongoing, widespread attack. \n \nThe vulnerabilities, CVE-2024-0012 and CVE-2024-9474, could allow attackers to execute arbitrary code and deploy malware on affected devices. \n \n\ud83d\udd12 Don\u2019t wait for a breach\u2014learn more about this campaign and how to protect your devices: https://thehackernews.com/2024/11/warning-over-2000-palo-alto-networks.html", "url": "https://t.me/thehackernews/5936"}, {"timestamp": "2024-11-21T21:31:27.267Z", "date_only": false, "value": "2024-11-21T21:31:27.267982Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/verbrecher/statuses/113523077048842529", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "98f75304-83b1-4231-aeba-6518424093d2", "url": "https://mastodon.social/users/verbrecher/statuses/113523077048842529"}, {"timestamp": "2024-11-21T23:00:00Z", "date_only": false, "value": "2024-11-21T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3398", "record": "WID-SEC-W-2024-3398", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2024-11-21T23:00:00Z", "date_only": false, "value": "2024-11-21T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3398", "record": "WID-SEC-W-2024-3398", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-11-22T00:00:00Z", "date_only": false, "value": "2024-11-22T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-24-338-02", "record": "ICSA-24-338-02", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-11-22T00:00:00Z", "date_only": false, "value": "2024-11-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-22)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "38ba7f4b-0a8c-4ea6-b514-7885a68309b2"}, {"timestamp": "2024-11-22T00:00:00Z", "date_only": false, "value": "2024-11-22T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-24-338-02", "record": "ICSA-24-338-02", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-11-22T00:00:00Z", "date_only": false, "value": "2024-11-22T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2024-11-22)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "4766a88a-54a9-493c-a021-10640c1dddaa"}, {"timestamp": "2024-11-22T10:38:12.360Z", "date_only": false, "value": "2024-11-22T10:38:12.360+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3398", "record": "WID-SEC-W-2024-3398", "field": "document.tracking.generator.date"}, {"timestamp": "2024-11-22T11:30:05Z", "date_only": false, "value": "2024-11-22T11:30:05.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/6462", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "26c3ef51-c4b3-4eb2-9912-360d678bb86c", "content": "2000 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u043e\u0432 Palo Alto Networks \u0431\u044b\u043b\u0438 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u044b \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0430\u0442\u0430\u043a, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u0434\u0432\u0435 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 0-day, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u044b \u0432\u043d\u0438\u043c\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043b\u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0434\u0432\u0435 \u043d\u0435\u0434\u0435\u043b\u0438.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u0438\u0437 \u043d\u0438\u0445 - CVE-2024-0012, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f PAN-OS, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430, \u0430 \u0432\u0442\u043e\u0440\u0430\u044f CVE-2024-9474 - \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0435 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 root.\n\n\u041f\u0440\u0438\u0447\u0435\u043c CVE-2024-9474 \u0431\u044b\u043b\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0432 \u044d\u0442\u043e\u0442 \u043f\u043e\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u0438\u043a \u0441\u0440\u0430\u0437\u0443 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a Palo Alto\u00a0\u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430\u00a0\u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0432\u043e\u0438\u043c \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u043c \u044d\u043a\u0440\u0430\u043d\u0430\u043c \u0438\u0437-\u0437\u0430 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 RCE (\u0432 \u043f\u0440\u043e\u0448\u043b\u0443\u044e \u043f\u044f\u0442\u043d\u0438\u0446\u0443 \u0431\u044b\u043b\u0430 \u043f\u043e\u043c\u0435\u0447\u0435\u043d\u0430\u00a0\u043a\u0430\u043a CVE-2024-0012).\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0432\u0441\u0435 \u0435\u0449\u0435 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0449\u0438\u0435\u0441\u044f \u0430\u0442\u0430\u043a\u0438, \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u044f\u044e\u0449\u0438\u0435 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435, \u043a\u0430\u043a \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0430 Palo Alto, \u043d\u0430 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u043e\u0432 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u044e\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0442 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0445 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u0430\u0445, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u0438 \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u0431\u044b\u0441\u0442\u0440\u043e\u0435 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043e\u0432 \u0443\u0433\u0440\u043e\u0437.\n\n\u0412\u043e\u043f\u0440\u0435\u043a\u0438 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c Palo Alto, Shadowserver \u0443\u0441\u043f\u0435\u043b\u0430 \u043e\u0442\u0441\u043b\u0435\u0434\u0438\u0442\u044c\u00a0\u0431\u043e\u043b\u0435\u0435 2700 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 PAN-OS, \u0430 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0445 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u043e\u0432 \u0441 \u043d\u0430\u0447\u0430\u043b\u0430 \u044d\u0442\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u0434\u043e\u0441\u0442\u0438\u0433\u043b\u043e \u0434\u043e 2000 \u0442\u0430\u043a\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u0412 \u043e\u0442\u0432\u0435\u0442 \u043d\u0430 \u0430\u043a\u0442\u0438\u0432\u0438\u0437\u0430\u0446\u0438\u044e \u0430\u0442\u0430\u043a Palo Alto \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0438\u0445 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u043e\u0432, \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u043c\u0438 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c\u0438 IP-\u0430\u0434\u0440\u0435\u0441\u0430\u043c\u0438.", "url": "https://t.me/true_secator/6462"}, {"timestamp": "2024-11-22T14:43:53Z", "date_only": false, "value": "2024-11-22T14:43:53.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/9135", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "f507276f-7541-40d4-872d-b243ac2bd196", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-0012\u662fPalo Alto Networks PAN-OS\u8f6f\u4ef6\u4e2d\u7684\u4e00\u4e2a\u8eab\u4efd\u9a8c\u8bc1\u7ed5\u8fc7\u6f0f\u6d1e\u3002\u8be5\u6f0f\u6d1e\u5141\u8bb8\u672a\u7ecf\u8eab\u4efd\u9a8c\u8bc1\u7684\u653b\u51fb\u8005\u901a\u8fc7\u7f51\u7edc\u8bbf\u95ee\u7ba1\u7406Web\u754c\u9762\uff0c\u83b7\u53d6PAN-OS\u7ba1\u7406\u5458\u6743\u9650\uff0c\u4ece\u800c\u6267\u884c\u7ba1\u7406\u64cd\u4f5c\u3001\u7be1\u6539\u914d\u7f6e\uff0c\u6216\u5229\u7528\u5176\u4ed6\u9700\u8981\u8eab\u4efd\u9a8c\u8bc1\u7684\u7279\u6743\u63d0\u5347\u6f0f\u6d1e\uff08\u5982CVE-2024-9474\uff09 \nURL\uff1ahttps://github.com/XiaomingX/cve-2024-0012-poc\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/9135"}, {"timestamp": "2024-11-22T15:02:52Z", "date_only": false, "value": "2024-11-22T15:02:52.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/S_E_Reborn/5258", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "ad503221-08ad-4b5a-935e-b8cc24928933", "content": "2000 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u043e\u0432 Palo Alto Networks \u0431\u044b\u043b\u0438 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u044b \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0430\u0442\u0430\u043a, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u0434\u0432\u0435 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 0-day, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u044b \u0432\u043d\u0438\u043c\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043b\u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0434\u0432\u0435 \u043d\u0435\u0434\u0435\u043b\u0438.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u0438\u0437 \u043d\u0438\u0445 - CVE-2024-0012, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f PAN-OS, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430, \u0430 \u0432\u0442\u043e\u0440\u0430\u044f CVE-2024-9474 - \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0435 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 root.\n\n\u041f\u0440\u0438\u0447\u0435\u043c CVE-2024-9474 \u0431\u044b\u043b\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0432 \u044d\u0442\u043e\u0442 \u043f\u043e\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u0438\u043a \u0441\u0440\u0430\u0437\u0443 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a Palo Alto\u00a0\u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430\u00a0\u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0432\u043e\u0438\u043c \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u043c \u044d\u043a\u0440\u0430\u043d\u0430\u043c \u0438\u0437-\u0437\u0430 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 RCE (\u0432 \u043f\u0440\u043e\u0448\u043b\u0443\u044e \u043f\u044f\u0442\u043d\u0438\u0446\u0443 \u0431\u044b\u043b\u0430 \u043f\u043e\u043c\u0435\u0447\u0435\u043d\u0430\u00a0\u043a\u0430\u043a CVE-2024-0012).\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0432\u0441\u0435 \u0435\u0449\u0435 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0449\u0438\u0435\u0441\u044f \u0430\u0442\u0430\u043a\u0438, \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u044f\u044e\u0449\u0438\u0435 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435, \u043a\u0430\u043a \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0430 Palo Alto, \u043d\u0430 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u043e\u0432 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u044e\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0442 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0445 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u0430\u0445, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u0438 \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u0431\u044b\u0441\u0442\u0440\u043e\u0435 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043e\u0432 \u0443\u0433\u0440\u043e\u0437.\n\n\u0412\u043e\u043f\u0440\u0435\u043a\u0438 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c Palo Alto, Shadowserver \u0443\u0441\u043f\u0435\u043b\u0430 \u043e\u0442\u0441\u043b\u0435\u0434\u0438\u0442\u044c\u00a0\u0431\u043e\u043b\u0435\u0435 2700 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 PAN-OS, \u0430 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0445 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u043e\u0432 \u0441 \u043d\u0430\u0447\u0430\u043b\u0430 \u044d\u0442\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u0434\u043e\u0441\u0442\u0438\u0433\u043b\u043e \u0434\u043e 2000 \u0442\u0430\u043a\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u0412 \u043e\u0442\u0432\u0435\u0442 \u043d\u0430 \u0430\u043a\u0442\u0438\u0432\u0438\u0437\u0430\u0446\u0438\u044e \u0430\u0442\u0430\u043a Palo Alto \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0438\u0445 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u043e\u0432, \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u043c\u0438 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c\u0438 IP-\u0430\u0434\u0440\u0435\u0441\u0430\u043c\u0438.", "url": "https://t.me/S_E_Reborn/5258"}, {"timestamp": "2024-11-22T16:41:15Z", "date_only": false, "value": "2024-11-22T16:41:15.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thebugbountyhunter/9359", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "141208b9-f59b-493e-b8d7-9996a98a4bd4", "content": "Wiz observes CVE-2024-0012 and CVE-2024-9474 exploitation | Wiz Blog\n\nhttps://www.wiz.io/blog/cve-2024-0012-pan-os-vulnerability-exploited-in-the-wild", "url": "https://t.me/thebugbountyhunter/9359"}, {"timestamp": "2024-11-22T17:11:16.336Z", "date_only": false, "value": "2024-11-22T17:11:16.336862Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/113527716307740334", "record": "cve-2024-9474", "field": "creation_timestamp", "uuid": "a876b176-9cee-48a7-acda-c96b0ee216b2", "url": "https://infosec.exchange/users/DarkWebInformer/statuses/113527716307740334"}, {"timestamp": "2024-11-22T18:11:23Z", "date_only": false, "value": "2024-11-22T18:11:23.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/TheDarkWebInformer/7880", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "fcb85884-868e-4e62-bd0d-83af671f3418", "content": "\ud83d\udea8PAN-OS CVE-2024-0012 and CVE-2024-9474 PoC Exploit\n\nhttps://darkwebinformer.com/pan-os-cve-2024-0012-and-cve-2024-9474-poc-exploit/", "url": "https://t.me/TheDarkWebInformer/7880"}, {"timestamp": "2024-11-23T00:00:00Z", "date_only": false, "value": "2024-11-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-23)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "98d3857c-d2ef-455b-8e17-339aa0afdc56"}, {"timestamp": "2024-11-23T02:01:32.191Z", "date_only": false, "value": "2024-11-23T02:01:32.191013Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113529801368101090", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "c1cee065-f2dc-466f-a3f0-0ec75a940f2e", "url": "https://infosec.exchange/users/screaminggoat/statuses/113529801368101090"}, {"timestamp": "2024-11-23T05:06:11Z", "date_only": false, "value": "2024-11-23T05:06:11.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/sysodmins/23852", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "328a493e-3b0f-432a-bb93-9035c26a0f6c", "content": "\u0411\u043e\u043b\u0435\u0435 2000 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u043e\u0432 Palo Alto Networks \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u044b \u0447\u0435\u0440\u0435\u0437 \u0441\u0432\u0435\u0436\u0438\u0435 0-day \u0431\u0430\u0433\u0438 \u2328\ufe0f\n\n\u0421\u0432\u0435\u0436\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (CVE-2024-0012; 9,3 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS) \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 PAN-OS, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0430\u0432 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 PAN-OS (CVE-2024-9474; 6,9 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0443\u0440\u043e\u0432\u043d\u044f root.\n\n\u0418 \u0445\u043e\u0442\u044f \u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0443\u0432\u0435\u0440\u044f\u044e\u0442, \u0447\u0442\u043e \u0430\u0442\u0430\u043a\u0438 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0438 \u00ab\u043e\u0447\u0435\u043d\u044c \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u043e\u0432 \u0441 PAN-OS\u00bb, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Shadowserver \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442, \u0447\u0442\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u0431\u043e\u043b\u0435\u0435 2700 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0441 PAN-OS.\n\n\u0422\u0438\u043f\u0438\u0447\u043d\u044b\u0439 \ud83e\udd78 \u0421\u0438\u0441\u0430\u0434\u043c\u0438\u043d", "url": "https://t.me/sysodmins/23852"}, {"timestamp": "2024-11-23T06:17:09Z", "date_only": false, "value": "2024-11-23T06:17:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/club31337/3009", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "b18277aa-ec01-40a3-849e-3cb24433bde7", "content": "https://labs.watchtowr.com/pots-and-pans-aka-an-sslvpn-palo-alto-pan-os-cve-2024-0012-and-cve-2024-9474/\n\n@club31337", "url": "https://t.me/club31337/3009"}, {"timestamp": "2024-11-23T09:01:40Z", "date_only": false, "value": "2024-11-23T09:01:40.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/kasperskyb2b/1513", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "755925e6-b3f5-4dfc-b866-ecea7a17cad2", "content": "\ud83c\udfaf \u041d\u0435\u0434\u0435\u043b\u044f \u0437\u0438\u0440\u043e\u0434\u0435\u0435\u0432 \u043d\u0430 \u0440\u0430\u0434\u0438\u043e Infosec\n\n\u041c\u0438\u043d\u0443\u0432\u0448\u0430\u044f \u043d\u0435\u0434\u0435\u043b\u044f \u043f\u0440\u0438\u043d\u0435\u0441\u043b\u0430 \u0442\u0430\u043a \u043c\u043d\u043e\u0433\u043e \u043d\u043e\u0432\u043e\u0441\u0442\u0435\u0439 \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438  patch soon, \u0447\u0442\u043e \u043f\u0440\u0438\u0448\u043b\u043e\u0441\u044c \u0437\u0430\u0432\u0435\u0441\u0442\u0438 \u0434\u043b\u044f \u043d\u0438\u0445 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442.\n\nPanOS: \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u044d\u043a\u0440\u0430\u043d\u044b Palo Alto \u043e\u0431\u0437\u0430\u0432\u0435\u043b\u0438\u0441\u044c \u0444\u0438\u043a\u0441\u0430\u043c\u0438 \u0434\u043b\u044f CVE-2024-0012 \u0438 CVE-2024-9474, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u0434\u043e \u0430\u0434\u043c\u0438\u043d\u0441\u043a\u0438\u0445. \u041a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0441 18 \u043d\u043e\u044f\u0431\u0440\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u0438 \u043f\u043e \u043e\u0446\u0435\u043d\u043a\u0430\u043c Shadowserver \u043f\u043e\u0440\u0430\u0436\u0435\u043d\u043e \u043e\u043a\u043e\u043b\u043e 2000 \u041c\u0421\u042d.\n\nmacOS: \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e \u0434\u0432\u0430 \u0437\u0438\u0440\u043e\u0434\u0435\u044f \u0432 JavascriptCore \u0438 WebKit, CVE-2024-44308, CVE-2024-44309, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a XSS \u0438 RCE \u043d\u0430 \u041c\u0430\u043a\u0430\u0445 \u0441 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u043c\u0438 Intel. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432\u0436\u0438\u0432\u0443\u044e \u2014 \u043a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u043e \u043d\u0435 \u0433\u043e\u0432\u043e\u0440\u044f\u0442 \u043a\u0435\u043c, \u043d\u043e \u0441\u0443\u0434\u044f \u043f\u043e \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u043d\u043e\u0441\u0442\u044f\u043c Google TAG \u0437\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432, \u044d\u0442\u043e \u0447\u0442\u043e-\u0442\u043e \u0438\u0437 \u0430\u0440\u0441\u0435\u043d\u0430\u043b\u0430 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u044b\u0445 APT.\n\nUbuntu: \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e \u043f\u044f\u0442\u044c \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u0432 \u0441\u0435\u0440\u0432\u0438\u0441\u0435 needrestart, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043d\u0430 Ubuntu-\u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0434\u043e root \u0431\u0435\u0437 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u0437\u0430\u043b\u043e\u0433\u0438\u043d\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \n\u0418\u043d\u043e\u0433\u0434\u0430 needrestart \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u0435\u0442\u0441\u044f \u0438 \u0432 \u0434\u0440\u0443\u0433\u0438\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 Linux, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0435\u0433\u043e \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.8.\n\n7-zip: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-11477 \u0432 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u0435  Zstandard decompression \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430. \u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u0430\u0440\u0445\u0438\u0432\u0430\u0442\u043e\u0440 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432\u043e \u043c\u043d\u043e\u0433\u0438\u0445 \u0441\u0431\u043e\u0440\u043a\u0430\u0445 Linux, \u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0434\u0435\u0444\u0435\u043a\u0442\u0430 \u0432 WinRAR \u0441\u0442\u0430\u043b\u0430 \u0442\u043e\u043f\u043e\u0432\u044b\u043c \u0432\u0435\u043a\u0442\u043e\u0440\u043e\u043c \u0430\u0442\u0430\u043a \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443, \u043c\u044b \u0431\u044b \u043d\u0435 \u0437\u0430\u0442\u044f\u0433\u0438\u0432\u0430\u043b\u0438 \u0441 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c.\n\nCitrix: \u0414\u0432\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0445 \u0447\u0443\u0442\u044c \u0431\u043e\u043b\u044c\u0448\u0435 \u043d\u0435\u0434\u0435\u043b\u0438 \u043d\u0430\u0437\u0430\u0434  \u0434\u0435\u0444\u0435\u043a\u0442\u0430, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0438\u0445 \u043a RCE, CVE-2024-8068  \u0438 -8069, \u043d\u0430\u0447\u0430\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445. \u041f\u043e\u0441\u043b\u0435 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0430\u0443\u0437\u044b Citrix \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0445\u043e\u0442\u0444\u0438\u043a\u0441.\n\n\u0427\u0442\u043e\u0431\u044b \u0437\u0430\u043a\u043e\u043d\u0447\u0438\u0442\u044c \u043d\u0430 \u043c\u0435\u043d\u0435\u0435 \u043d\u0435\u0440\u0432\u043d\u043e\u0439 \u0438 \u0434\u0430\u0436\u0435 \u0433\u0434\u0435-\u0442\u043e \u043f\u043e\u0437\u0438\u0442\u0438\u0432\u043d\u043e\u0439 \u043d\u043e\u0442\u0435, Google \u043e\u0442\u0447\u0438\u0442\u0430\u043b\u0438\u0441\u044c, \u0447\u0442\u043e \u043f\u0440\u0438\u043a\u0440\u0443\u0442\u0438\u043b\u0438 \u0418\u0418 \u043a \u0444\u0430\u0437\u0437\u0438\u043d\u0433\u0443 \u0438 \u043d\u0430\u0448\u043b\u0438 26 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u0432 \u0441\u043e\u0444\u0442\u0435 open source, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043e\u0434\u0438\u043d (\u044d\u043a\u0437\u043e\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439) \u0431\u0430\u0433 \u0432 \u043f\u0440\u0435\u043a\u0440\u0430\u0441\u043d\u043e \u043e\u0442\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 OpenSSL. LLM  \u0441\u043e \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u044c\u044e \u0430\u0432\u0442\u043e\u043d\u043e\u043c\u043d\u043e\u0441\u0442\u0438 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u043d\u0430 \u0432\u0441\u0435\u0445 \u044d\u0442\u0430\u043f\u0430\u0445 \u2014 \u043e\u0442 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0443\u0447\u0430\u0441\u0442\u043a\u0430 \u043a\u043e\u0434\u0430 \u0434\u043b\u044f \u0444\u0430\u0437\u0437\u0438\u043d\u0433\u0430 \u0434\u043e \u043f\u0435\u0440\u0432\u0438\u0447\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0441\u043f\u0440\u043e\u0432\u043e\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0444\u0430\u0437\u0437\u0438\u043d\u0433\u043e\u043c \u0441\u0431\u043e\u0435\u0432.\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 @\u041f2\u0422", "url": "https://t.me/kasperskyb2b/1513"}, {"timestamp": "2024-11-24T00:00:00Z", "date_only": false, "value": "2024-11-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-24)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "3f6428af-3891-4458-9d2c-66ef837cd6a1"}, {"timestamp": "2024-11-24T00:00:00Z", "date_only": false, "value": "2024-11-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2024-11-24)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "e4fac097-c708-4e1a-a725-9692acdef8ae"}, {"timestamp": "2024-11-24T14:45:36.690Z", "date_only": false, "value": "2024-11-24T14:45:36.690Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2024-9474", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-11-25T00:00:00Z", "date_only": false, "value": "2024-11-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-25)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "283cf971-e844-4a24-bd00-274f1068170f"}, {"timestamp": "2024-11-25T00:00:00Z", "date_only": false, "value": "2024-11-25T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2024-ALE-015", "record": "CERTFR-2024-ALE-015", "field": "revisions.3.revision_date"}, {"timestamp": "2024-11-25T14:21:46.124Z", "date_only": false, "value": "2024-11-25T14:21:46.124721Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/113544036727262620", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "030d32ca-85ee-4265-84a9-599ef809d863", "url": "https://infosec.exchange/users/edwardk/statuses/113544036727262620"}, {"timestamp": "2024-11-25T21:18:52Z", "date_only": false, "value": "2024-11-25T21:18:52.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/scorpionisready/939", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "a8fe8aa7-7751-4cc6-be07-7227cc071f22", "content": "Wiz observes CVE-2024-0012 and CVE-2024-9474 exploitation | Wiz Blog\n\nhttps://www.wiz.io/blog/cve-2024-0012-pan-os-vulnerability-exploited-in-the-wild", "url": "https://t.me/scorpionisready/939"}, {"timestamp": "2024-11-26T00:00:00Z", "date_only": false, "value": "2024-11-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-26)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "eee5c5d7-19b3-42eb-b212-9308698dddea"}, {"timestamp": "2024-11-26T00:00:00Z", "date_only": true, "value": "2024-11-26", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2024-46250", "record": "CNVD-2024-46250", "field": "submitTime"}, {"timestamp": "2024-11-27T00:00:00Z", "date_only": false, "value": "2024-11-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-27)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "16f88e2d-334c-428c-9b04-4ddae99ce6cb"}, {"timestamp": "2024-11-27T00:00:00Z", "date_only": true, "value": "2024-11-27", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2024-46250", "record": "CNVD-2024-46250", "field": "openTime"}, {"timestamp": "2024-11-27T11:00:46.103Z", "date_only": false, "value": "2024-11-27T11:00:46.103032Z", "kind": "sighting", "label": "Seen", "source": "https://hachyderm.io/users/ChrisShort/statuses/113554570958630897", "record": "cve-2024-9474", "field": "creation_timestamp", "uuid": "179ae312-bd1b-4cfe-9efe-c4c0af24b157", "url": "https://hachyderm.io/users/ChrisShort/statuses/113554570958630897"}, {"timestamp": "2024-11-28T00:00:00Z", "date_only": false, "value": "2024-11-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-28)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "ffc034bb-e0ec-4a27-b867-27b30d0802ac"}, {"timestamp": "2024-11-29T13:06:54Z", "date_only": false, "value": "2024-11-29T13:06:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Leak_DBMS/1524", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "d580c6ad-b43d-4d4d-b38d-d6aafeb3bfd5", "content": "WatchTowr POCs:\nCVE-2024-8068 &amp; CVE-2024-8069 : Citrix Virtual Apps and Desktops (XEN) $versions - Unauthenticated Remote Code execution (Chain) \nPOC/AN : https://github.com/watchtowrlabs/Citrix-Virtual-Apps-XEN-Exploit\nCVE-2024-47575 : Fortinet FortiManager 'Fgfmsd' $versions Unauthenticated Remote Code Execution (AKA FortiJump)\nPOC/AN : https://github.com/watchtowrlabs/Fortijump-Exploit-CVE-2024-47575\nCVE-2024-0012 &amp; CVE-2024-9474 : PAN-OS $versions - Authentication Bypass LPE Root Command Injection (AKA Sslvpn _ Chain)\nPOC/AN : https://github.com/watchtowrlabs/palo-alto-panos-cve-2024-0012/\n@APTIRAN", "url": "https://t.me/Leak_DBMS/1524"}, {"timestamp": "2024-11-30T00:00:00Z", "date_only": false, "value": "2024-11-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-30)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "91229c71-6ed5-4d0a-a331-28c0d2a6e93b"}, {"timestamp": "2024-12-01T00:00:00Z", "date_only": false, "value": "2024-12-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-01)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "16d568d0-74a7-4a22-9690-49a63a16216f"}, {"timestamp": "2024-12-03T00:18:01Z", "date_only": false, "value": "2024-12-03T00:18:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ZeroEthical_Course/2110", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "7aec4107-13aa-4fac-b326-c2cd544d8c34", "content": "WatchTowr POCs:\nCVE-2024-8068 &amp; CVE-2024-8069 : Citrix Virtual Apps and Desktops (XEN) $versions - Unauthenticated Remote Code execution (Chain) \nPOC/AN : https://github.com/watchtowrlabs/Citrix-Virtual-Apps-XEN-Exploit\nCVE-2024-47575 : Fortinet FortiManager 'Fgfmsd' $versions Unauthenticated Remote Code Execution (AKA FortiJump)\nPOC/AN : https://github.com/watchtowrlabs/Fortijump-Exploit-CVE-2024-47575\nCVE-2024-0012 &amp; CVE-2024-9474 : PAN-OS $versions - Authentication Bypass LPE Root Command Injection (AKA Sslvpn _ Chain)\nPOC/AN : https://github.com/watchtowrlabs/palo-alto-panos-cve-2024-0012/\n\n\ud83d\udd34 Share &amp; Support Us \ud83d\udd34\n\u26a1\ufe0f Channel : @ZeroEthical_Course", "url": "https://t.me/ZeroEthical_Course/2110"}, {"timestamp": "2024-12-03T11:00:00Z", "date_only": false, "value": "2024-12-03T11:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-338-02", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "90d30e08-0b40-495f-8080-8eaaad06c8eb", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-338-02"}, {"timestamp": "2024-12-05T00:00:00Z", "date_only": false, "value": "2024-12-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-05)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "d793b502-6580-4387-bff0-e696c93ae503"}, {"timestamp": "2024-12-06T00:00:00Z", "date_only": false, "value": "2024-12-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-06)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "963b80fa-ff1c-4c4f-a02c-37fafa03d7a6"}, {"timestamp": "2024-12-07T00:00:00Z", "date_only": false, "value": "2024-12-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-07)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "9d05bd08-342f-4cf6-b560-33fcff079d39"}, {"timestamp": "2024-12-09T00:00:00Z", "date_only": true, "value": "2024-12-09", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2024-9474", "field": "evidence.0.details.due_date", "uuid": "43dbbf0c-455d-412a-8bd5-e462a4b43bba", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-12-11T05:04:21Z", "date_only": false, "value": "2024-12-11T05:04:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/9377", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "e98c3d1e-932a-4c95-88e8-39bda4b2609c", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aPalo Alto Networks PAN-OS(CVE-2024-9474) POC\nURL\uff1ahttps://github.com/coskper-papa/PAN-OS_CVE-2024-9474\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/9377"}, {"timestamp": "2024-12-11T18:14:58Z", "date_only": false, "value": "2024-12-11T18:14:58.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/9387", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "57c05da5-dd62-4f45-bd2d-eacd7c713616", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aVulnerabilidad CVE-2024-24926 afecta al tema Brooklyn de WordPress\nURL\uff1ahttps://github.com/TalatumLabs/CVE-2024-0012_CVE-2024-9474_PoC\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/9387"}, {"timestamp": "2024-12-13T00:00:00Z", "date_only": false, "value": "2024-12-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-13)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "03ea5f59-7d47-4f8c-8412-d72df28ee833"}, {"timestamp": "2024-12-14T00:00:00Z", "date_only": false, "value": "2024-12-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-14)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "69cb92ec-93a9-46bd-8cfb-538064184f34"}, {"timestamp": "2024-12-14T15:35:40Z", "date_only": false, "value": "2024-12-14T15:35:40.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackerArsenal/738", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "f774e608-ed05-4703-8df1-cf2c8e54ee3f", "content": "https://github.com/coskper-papa/PAN-OS_CVE-2024-9474\n\nPalo Alto Networks PAN-OS(CVE-2024-9474) POC\n#github #poc", "url": "https://t.me/HackerArsenal/738"}, {"timestamp": "2024-12-15T00:00:00Z", "date_only": false, "value": "2024-12-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-15)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "7f3d413e-35ad-479b-8559-0b679cfc49bb"}, {"timestamp": "2024-12-18T18:20:08Z", "date_only": false, "value": "2024-12-18T18:20:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/9106", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "a1e16b71-e236-4882-80a0-4440fb5a892b", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aPalo Alto CVE-2024-9474\nURL\uff1ahttps://github.com/VegetableLasagne/CVE-2024-9474\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/9106"}, {"timestamp": "2024-12-25T09:16:09.683Z", "date_only": false, "value": "2024-12-25T09:16:09.683907Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bolhasec.com/post/3le4mr2vica27", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "9b1d2dd7-5c77-44e5-aa0c-9efde81243f3", "url": "https://bsky.app/profile/bolhasec.com/post/3le4mr2vica27"}, {"timestamp": "2024-12-25T17:59:17.414Z", "date_only": false, "value": "2024-12-25T17:59:17.414448Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3le5jyf2kec25", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "d697a3ac-11fc-45e0-85a6-8d72c50a90cb", "url": "https://bsky.app/profile/dinosn.bsky.social/post/3le5jyf2kec25"}, {"timestamp": "2024-12-26T00:00:00Z", "date_only": false, "value": "2024-12-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-26)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "6cec4d93-9bc1-4855-bf6e-ef866ac7d477"}, {"timestamp": "2024-12-26T04:50:12Z", "date_only": false, "value": "2024-12-26T04:50:12.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CyberBulletin/26918", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "e2e4ba86-69b0-41bd-b464-3aed5c8cab96", "content": "\u26a1\ufe0fCVE-2024-9474 Exploited: LITTLELAMB.WOOLTEA Backdoor Discovered in Palo Alto Devices.\n\n#CyberBulletin", "url": "https://t.me/CyberBulletin/26918"}, {"timestamp": "2024-12-26T04:50:12Z", "date_only": false, "value": "2024-12-26T04:50:12.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberBulletin/1829", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "54bd228d-8994-49bc-be88-3f1341fbfe22", "content": "\u26a1\ufe0fCVE-2024-9474 Exploited: LITTLELAMB.WOOLTEA Backdoor Discovered in Palo Alto Devices.\n\n#CyberBulletin", "url": "https://t.me/CyberBulletin/1829"}, {"timestamp": "2024-12-26T06:46:52.422Z", "date_only": false, "value": "2024-12-26T06:46:52.422617Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3le6uv2jvrc25", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "ee40a3f8-626a-4eef-ade5-da2ab6c1e805", "url": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3le6uv2jvrc25"}, {"timestamp": "2024-12-26T11:01:35.353Z", "date_only": false, "value": "2024-12-26T11:01:35.353873Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/dragonjar/statuses/113718781104713263", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "9d752cdf-85ed-4e5a-9672-ae8e31afa9c1", "url": "https://infosec.exchange/users/dragonjar/statuses/113718781104713263"}, {"timestamp": "2024-12-28T08:57:19Z", "date_only": false, "value": "2024-12-28T08:57:19.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/kasperskyb2b/1574", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "0f2b93e3-b823-4f22-b295-326ec88b9e41", "content": "\u2b50\ufe0f \u041f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f APT \u0438 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u0418\u0411\n\n\ud83d\ude11 \u0423\u0433\u0440\u043e\u0437\u044b \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0410\u0421\u0423 \u0432 3 \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2024 \u0433\u043e\u0434\u0430: \u043e\u0431\u0437\u043e\u0440 \u0438 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0430. \u0422\u043e\u043f \u0441\u0438\u0441\u0442\u0435\u043c, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u044b\u043b\u0438 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043e\u0431\u044a\u0435\u043a\u0442\u044b, \u0432\u043e\u0437\u0433\u043b\u0430\u0432\u0438\u043b\u0438 \u0431\u0438\u043e\u043c\u0435\u0442\u0440\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \n\n\ud83d\uddff \u0420\u0430\u0437\u0431\u043e\u0440 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u044b Masque, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u0432 2024 \u0433\u043e\u0434\u0443 \u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0439 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u043e\u0439 \u0432\u044b\u0433\u043e\u0434\u044b.  \u0417\u0430\u0445\u043e\u0434\u044f\u0442 \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u0442\u0451\u043a\u0448\u0438\u0435 \u0431\u0438\u043b\u0434\u0435\u0440\u044b Lockbit \u0438 Babuk.\n\n\ud83d\ude80 \u0412 \u0444\u0430\u0439\u0440\u0432\u043e\u043b\u0430\u0445 Palo Alto, \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 CVE-2024-9474, \u0432\u044b\u043b\u043e\u0432\u0438\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u0431\u044d\u043a\u0434\u043e\u0440 Littlelamb.Wooltea. \u041e\u0447\u0435\u043d\u044c \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u043e\u0442\u0447\u0451\u0442 \u043e \u043d\u0451\u043c \u0445\u043e\u0440\u043e\u0448\u043e \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u0435\u0442, \u043a\u0430\u043a \u043e\u043f\u044b\u0442\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u0435\u0438\u043c\u0443\u0449\u0435\u0441\u0442\u0432\u0430 \u043f\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\ud83d\udfe3\u0421\u043f\u0438\u0441\u043e\u043a \u0438\u0437 2,5 \u0442\u044b\u0441\u044f\u0447 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 Astrill VPN, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043e\u0447\u0435\u043d\u044c \u043b\u044e\u0431\u044f\u0442 \u0441\u0435\u0432\u0435\u0440\u043e\u043a\u043e\u0440\u0435\u0439\u0441\u043a\u0438\u0435 APT.\n\n\u2764\ufe0f\u041e\u0431\u0437\u043e\u0440 \u0444\u0438\u0448\u0438\u043d\u0433-\u043a\u0438\u0442\u0430 WikiKit, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0435\u0433\u043e \u0441\u0432\u043e\u0451 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u0437\u0430 \u0442\u043e, \u0447\u0442\u043e \u043e\u043d \u043f\u0435\u0440\u0435\u0430\u0434\u0440\u0435\u0441\u0443\u0435\u0442 \u043d\u0435\u043f\u043e\u0434\u0445\u043e\u0434\u044f\u0449\u0438\u0445 \u0436\u0435\u0440\u0442\u0432 \u043d\u0430 \u0412\u0438\u043a\u0438\u043f\u0435\u0434\u0438\u044e.\n\n\ud83d\ude35\u200d\ud83d\udcab \u041f\u044f\u0442\u044c \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0439 Chrome, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 \u043e\u0442 \u0418\u0411-\u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Cyberhaven, \u0431\u044b\u043b\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0438 \u043f\u043e\u043f\u0430\u043b\u0438 \u0432 \u043c\u0430\u0433\u0430\u0437\u0438\u043d Chrome. \u0415\u0449\u0451 \u043e\u0434\u0438\u043d \u043f\u043e\u0432\u043e\u0434 \u043f\u043e\u0434\u0447\u0438\u043d\u0438\u0442\u044c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0439 \u0432 \u0425\u0440\u043e\u043c \u0441\u0442\u0440\u043e\u0433\u0438\u043c \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430\u043c.\n\n\ud83d\udfe2\u041d\u043e\u0432\u044b\u0439 \u0434\u0435\u043d\u044c \u2014 \u043d\u043e\u0432\u043e\u0435 \u0412\u041f\u041e \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445 open source. \u0422\u0435\u043f\u0435\u0440\u044c \u0447\u0435\u0440\u0435\u0437 PyPi \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u0441\u0442\u0438\u043b\u0435\u0440\u044b Cometlogger \u0438 Zebo.\n\n\ud83d\udfe3\u0410 Lockbit \u0441\u043e\u0431\u0440\u0430\u043b\u0438\u0441\u044c \u043e\u0442\u043f\u0440\u0430\u0437\u0434\u043d\u043e\u0432\u0430\u0442\u044c \u0433\u043e\u0434\u043e\u0432\u0449\u0438\u043d\u0443 \u0440\u0430\u0437\u0433\u043e\u043d\u0430 \u0433\u0440\u0443\u043f\u043f\u044b \u043f\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u0435\u043b\u044f\u043c\u0438 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u043c Lockbit 4.0.\n\n\ud83d\ude35 \u0426\u0435\u043b\u0430\u044f \u043f\u0430\u0447\u043a\u0430 \u0441\u0440\u043e\u0447\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0418\u0422-\u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 \u043e\u043c\u0440\u0430\u0447\u0438\u043b\u0438 \u0430\u0434\u043c\u0438\u043d\u0430\u043c \u043f\u0440\u0430\u0437\u0434\u043d\u0438\u0447\u043d\u044b\u0439 \u0441\u0435\u0437\u043e\u043d. \u041e\u0442\u043c\u0435\u0442\u0438\u043c CVE-2024-52046 \u0432 Apache MINA (CVSS 10), CVE-2024-45387 \u0432 Apache Traffic Ops (CVSS 9.9) \u0438 \u043c\u0435\u043d\u0435\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u0443\u044e CVE-2024-43441 \u0432 OpenGraph. \u0410 \u0434\u043b\u044f \u0442\u0435\u0445, \u043a\u0442\u043e \u0435\u0434\u0432\u0430 \u0432\u044b\u0434\u043e\u0445\u043d\u0443\u043b, \u0437\u0430\u043b\u0430\u0442\u0430\u0432 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e CVE-2024-50379 \u0432 Apache Tomcat, \u0442\u043e\u0436\u0435 \u0435\u0441\u0442\u044c \u043d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u044b\u0435 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u2014 \u0444\u0438\u043a\u0441 \u0431\u044b\u043b \u043d\u0435\u043f\u043e\u043b\u043d\u044b\u043c, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u0439\u0442\u0435 CVE-2024-56337 \u0438 \u043d\u0430\u0447\u0438\u043d\u0430\u0439\u0442\u0435 \u0441\u043d\u0430\u0447\u0430\u043b\u0430. \u0414\u0430, \u0438 CVE-2024-53677 \u0432 Struts \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u043d\u0435 \u0437\u0430\u0431\u0443\u0434\u044c\u0442\u0435.\n\u0421\u043d\u043e\u0432\u0430 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438\u0441\u044c \u0438 Palo Alto \u0441 DoS \u0432 PAN-OS (CVE-2024-3393, CVSS 8.7).\n\n\ud83d\udc4b \u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0435 \u0447\u0442\u0438\u0432\u043e \u043d\u0430 \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0435: \u043a\u0430\u043a \u043b\u044e\u0431\u0438\u043c\u0430\u044f \u0441\u0442\u0430\u0440\u0442\u0430\u043f\u0430\u043c\u0438 \u0438 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0438\u043c\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043e\u0444\u0438\u0441\u043e\u0432 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043b\u0435\u0433\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0444\u0430\u0441\u0430\u0434\u0430 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439.\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 #APT #\u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 @\u041f2\u0422", "url": "https://t.me/kasperskyb2b/1574"}, {"timestamp": "2024-12-30T18:35:19Z", "date_only": false, "value": "2024-12-30T18:35:19.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/panos_management_unauth_rce.rb", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "fb21e907-882c-45f2-9217-47830fe8f4b2", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/panos_management_unauth_rce.rb"}, {"timestamp": "2024-12-31T15:10:13.018Z", "date_only": false, "value": "2024-12-31T15:10:13.018632Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybermaterial.bsky.social/post/3lemddch2xp2v", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "e17cecc2-da57-4e70-afe1-b15f07f5ea4e", "url": "https://bsky.app/profile/cybermaterial.bsky.social/post/3lemddch2xp2v"}, {"timestamp": "2025-01-01T19:28:15.894Z", "date_only": false, "value": "2025-01-01T19:28:15.894805Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/shadowserver/statuses/113754747381855223", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "bbe49e9e-4fe9-4c6f-9a4e-b2078bfca531", "url": "https://infosec.exchange/users/shadowserver/statuses/113754747381855223"}, {"timestamp": "2025-01-04T00:00:00Z", "date_only": false, "value": "2025-01-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-04)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "bbdcb225-401d-4481-a6ca-cdb789162b19"}, {"timestamp": "2025-01-04T15:46:03Z", "date_only": false, "value": "2025-01-04T15:46:03.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberDilara/1411", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "341c5ce8-3779-4834-90ea-e6adbc5de5e2", "content": "Exploit module for PAN-OS management interface unauth RCE (CVE-2024-0012 + CVE-2024-9474)\n\nhttps://github.com/rapid7/metasploit-framework/pull/19663\n\n#CyberDilara", "url": "https://t.me/CyberDilara/1411"}, {"timestamp": "2025-01-14T00:00:00Z", "date_only": false, "value": "2025-01-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-14)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "9387f06e-fcc6-428c-bf90-58c35579e056"}, {"timestamp": "2025-01-15T16:59:15.967Z", "date_only": false, "value": "2025-01-15T16:59:15.967030Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.bsky.social/post/3lfsagipykn26", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "bc72fc0f-9c34-4138-9e81-ae82b4489b86", "url": "https://bsky.app/profile/opsmatters.bsky.social/post/3lfsagipykn26"}, {"timestamp": "2025-01-16T00:00:00Z", "date_only": false, "value": "2025-01-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-16)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "4e71590f-2266-45bd-88cd-4c4b25bfd8a9"}, {"timestamp": "2025-01-17T00:00:00Z", "date_only": false, "value": "2025-01-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-17)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "e82c1461-dcac-4ba4-bc50-acb61d816ea7"}, {"timestamp": "2025-01-20T00:00:00Z", "date_only": false, "value": "2025-01-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-20)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "a06437a0-7638-452c-a242-e1894b760ede"}, {"timestamp": "2025-01-21T00:00:00Z", "date_only": false, "value": "2025-01-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-21)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "1cac38f2-7cea-43c2-ac37-0a023fc20446"}, {"timestamp": "2025-01-21T00:00:00Z", "date_only": false, "value": "2025-01-21T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-21)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "8dcde788-b62d-4a4c-9c42-b1b806cc80a1"}, {"timestamp": "2025-01-22T00:00:00Z", "date_only": false, "value": "2025-01-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-22)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "7b84a6a4-e911-464a-b75e-a59f3205f563"}, {"timestamp": "2025-01-23T00:00:00Z", "date_only": false, "value": "2025-01-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-23)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "ed6497a8-d34e-4e0f-8935-6333077975ea"}, {"timestamp": "2025-01-24T00:00:00Z", "date_only": false, "value": "2025-01-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-24)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "185fc319-4015-4d55-849d-10888afa05c9"}, {"timestamp": "2025-01-24T00:00:00Z", "date_only": false, "value": "2025-01-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-24)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "94920512-7282-4408-a44e-c66a6a97bc57"}, {"timestamp": "2025-01-25T00:00:00Z", "date_only": false, "value": "2025-01-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-25)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "623d2523-781e-415d-9c4e-06d4767d6e24"}, {"timestamp": "2025-01-26T00:00:00Z", "date_only": false, "value": "2025-01-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-26)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "184bdc26-ec2b-4e27-8c4a-564e744756cc"}, {"timestamp": "2025-01-26T00:00:00Z", "date_only": false, "value": "2025-01-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-26)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "9bd06558-2550-48be-b34c-f52d79a7d71c"}, {"timestamp": "2025-01-27T00:00:00Z", "date_only": false, "value": "2025-01-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-27)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "24e75a79-0360-4692-8842-e2b4fcb695d5"}, {"timestamp": "2025-01-27T00:00:00Z", "date_only": false, "value": "2025-01-27T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_alerte \u00b7 CERTFR-2024-ALE-015", "record": "CERTFR-2024-ALE-015", "field": "last_revision_date"}, {"timestamp": "2025-01-27T00:00:00Z", "date_only": false, "value": "2025-01-27T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2024-ALE-015", "record": "CERTFR-2024-ALE-015", "field": "revisions.1.revision_date"}, {"timestamp": "2025-01-28T00:00:00Z", "date_only": false, "value": "2025-01-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-28)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "f692fdc9-f87f-41ca-9d6f-b843c979d99b"}, {"timestamp": "2025-01-28T00:00:00Z", "date_only": false, "value": "2025-01-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-28)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "b8f2e3a2-391b-45a8-a1bd-2a67533d11dd"}, {"timestamp": "2025-01-29T00:00:00Z", "date_only": false, "value": "2025-01-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-29)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "27f28633-2b2e-48b7-a0e9-0d99e3e874ca"}, {"timestamp": "2025-01-30T00:00:00Z", "date_only": false, "value": "2025-01-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-30)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "20baaa93-6e68-45cc-bfd5-f2b329273722"}, {"timestamp": "2025-01-31T00:00:00Z", "date_only": false, "value": "2025-01-31T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-31)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "15c6b655-11a4-403a-b428-98e979429bac"}, {"timestamp": "2025-01-31T00:00:00Z", "date_only": false, "value": "2025-01-31T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-31)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "58b71e06-66b8-4fed-ac8c-098b01cbb733"}, {"timestamp": "2025-02-01T00:00:00Z", "date_only": false, "value": "2025-02-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-01)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "9ac3980f-e262-49c7-80a1-23b9883e33d0"}, {"timestamp": "2025-02-01T00:00:00Z", "date_only": false, "value": "2025-02-01T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-01)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "8b7884bf-6c16-4880-ab89-af29748387f5"}, {"timestamp": "2025-02-02T00:00:00Z", "date_only": false, "value": "2025-02-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-02)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "8424fedf-af79-4074-81ad-cb66e576c217"}, {"timestamp": "2025-02-02T00:00:00Z", "date_only": false, "value": "2025-02-02T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-02)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "104560cb-2190-483d-a8b2-4caf1a195b4c"}, {"timestamp": "2025-02-03T00:00:00Z", "date_only": false, "value": "2025-02-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-03)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "58ddbca4-27db-4cea-b007-3f92d68e13f9"}, {"timestamp": "2025-02-03T00:00:00Z", "date_only": false, "value": "2025-02-03T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-03)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "08153fe0-7eca-4d8c-9921-af9aa6312186"}, {"timestamp": "2025-02-04T00:00:00Z", "date_only": false, "value": "2025-02-04T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-04)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "b6e1cdca-f4f2-4906-9d7d-f73f530a032d"}, {"timestamp": "2025-02-04T16:49:09.704Z", "date_only": false, "value": "2025-02-04T16:49:09.704075Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113946640298933988", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "c9b3a98a-80ad-4324-a24a-fdf05c77339c", "url": "https://infosec.exchange/users/screaminggoat/statuses/113946640298933988"}, {"timestamp": "2025-02-05T00:00:00Z", "date_only": false, "value": "2025-02-05T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-05)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "3eb5fdd3-be9d-43f4-9df4-eec52bdfcbc4"}, {"timestamp": "2025-02-06T00:00:00Z", "date_only": false, "value": "2025-02-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-06)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "0a031b01-31ce-47e9-90ef-dc658bc6bc12"}, {"timestamp": "2025-02-06T00:00:00Z", "date_only": false, "value": "2025-02-06T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-06)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "e972214f-2269-4f75-ac3c-c627aab0dad5"}, {"timestamp": "2025-02-06T03:13:46Z", "date_only": false, "value": "2025-02-06T03:13:46.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "5213db4e-c3a5-4dd5-a569-43565cb3733c"}, {"timestamp": "2025-02-07T00:00:00Z", "date_only": false, "value": "2025-02-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-07)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "3261716e-4aff-4469-850d-00886cb911b0"}, {"timestamp": "2025-02-07T04:00:07Z", "date_only": false, "value": "2025-02-07T04:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/brrlg3QcXmdsNE17eiURjdd90_CawA3viz_nAG44k16yUp0", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "b944d323-05fe-4155-9b9f-ef0a6e3d89ab"}, {"timestamp": "2025-02-08T00:00:00Z", "date_only": false, "value": "2025-02-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-08)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "c6aa4645-1c81-41a7-9f56-35f1a92cd24f"}, {"timestamp": "2025-02-08T00:00:00Z", "date_only": false, "value": "2025-02-08T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-08)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "fcaa2513-e631-4d70-9e13-e718746f4a1b"}, {"timestamp": "2025-02-09T00:00:00Z", "date_only": false, "value": "2025-02-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-09)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "f3c18bb0-5b6e-426b-86e2-7c50abd902c3"}, {"timestamp": "2025-02-09T00:00:00Z", "date_only": false, "value": "2025-02-09T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-09)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "5a67c4ac-8593-4b3d-970d-c1cf74d5943f"}, {"timestamp": "2025-02-09T22:44:51Z", "date_only": false, "value": "2025-02-09T22:44:51.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/11791", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "567877c2-6c4b-4832-993c-45824fda06a8", "content": "#exploit\n1. CVE-2024-0012/CVE-2024-9474:\nAuth Bypass in PAN-OS Web Interface\nhttps://github.com/dcollaoa/cve-2024-0012-gui-poc\n\n2. CVE-2025-23369:\nGitHub Entreprise Server SAML auth bypass\nhttps://github.com/hakivvi/cve-2025-23369\n\n3. CVE-2022-45460:\nROPing our way to RCE\nhttps://modzero.com/en/blog/roping-our-way-to-rce", "url": "https://t.me/CyberSecurityTechnologies/11791"}, {"timestamp": "2025-02-10T00:00:00Z", "date_only": false, "value": "2025-02-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-10)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "04c8e9e9-63b3-4da1-b419-28b02348b3e2"}, {"timestamp": "2025-02-10T00:00:00Z", "date_only": false, "value": "2025-02-10T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-10)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "bbc13d31-a36d-49e8-989b-40241d20bff7"}, {"timestamp": "2025-02-11T00:00:00Z", "date_only": false, "value": "2025-02-11T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-24-338-02", "record": "ICSA-24-338-02", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2025-02-11T00:00:00Z", "date_only": false, "value": "2025-02-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-11)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "780382db-5b54-416f-85ff-7cfbd8e8c75d"}, {"timestamp": "2025-02-11T00:00:00Z", "date_only": false, "value": "2025-02-11T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-11)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "c1f257f1-2962-4e0e-ab00-6f5d923de058"}, {"timestamp": "2025-02-12T00:00:00Z", "date_only": false, "value": "2025-02-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-12)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "4330734d-762f-430a-a6be-0091233b0e67"}, {"timestamp": "2025-02-12T00:00:00Z", "date_only": false, "value": "2025-02-12T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-12)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "8ad5ec75-4dc3-4db2-8911-ff521e6ed17c"}, {"timestamp": "2025-02-12T08:07:18Z", "date_only": false, "value": "2025-02-12T08:07:18.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/suboxone_chatroom/2611", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "645497f1-abca-4527-a19c-eb10a49a3c67", "content": "\ud83d\udee1\ufe0f Palo Alto PAN-OS Pre-Auth RCE Chain (CVE-2024-0012 &amp; CVE-2024-9474)\n\nA critical vulnerability chain in Palo Alto PAN-OS, combining an authentication bypass (CVE-2024-0012) and a command injection flaw (CVE-2024-9474) in the management web interface, allows unauthenticated attackers to execute arbitrary code with root privileges.\n\n\ud83d\udee0 Affected Versions:\n  \u2014 PAN-OS 11.2 (up to and including 11.2.4-h1)\n  \u2014 PAN-OS 11.1 (up to and including 11.1.5-h1)\n  \u2014 PAN-OS 11.0 (up to and including 11.0.6-h1)\n  \u2014 PAN-OS 10.2 (up to and including 10.2.12-h2)\n\n\ud83d\udd17 Research:\nhttps://labs.watchtowr.com/pots-and-pans-aka-an-sslvpn-palo-alto-pan-os-cve-2024-0012-and-cve-2024-9474/\n\n\ud83d\udd17 PoC:\nhttps://github.com/watchtowrlabs/palo-alto-panos-cve-2024-0012\n\n\ud83d\udd17 Exploit: \nhttps://github.com/Chocapikk/CVE-2024-9474\n\n#paloalto #panos #sslvpn #unauth #rce", "url": "https://t.me/suboxone_chatroom/2611"}, {"timestamp": "2025-02-14T00:00:00Z", "date_only": false, "value": "2025-02-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-14)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "6256d3fd-6be0-45c6-b062-f317034c2c73"}, {"timestamp": "2025-02-14T00:00:00Z", "date_only": false, "value": "2025-02-14T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-14)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "e4ccaf48-d5d1-4853-99d4-ab0de8cfe9f6"}, {"timestamp": "2025-02-15T00:00:00Z", "date_only": false, "value": "2025-02-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-15)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "20d0251e-0a4f-49be-8f33-2ad58950038e"}, {"timestamp": "2025-02-15T00:00:00Z", "date_only": false, "value": "2025-02-15T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-15)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "7eb858f8-504e-40b2-8104-fe60285f4d09"}, {"timestamp": "2025-02-15T00:07:44.716Z", "date_only": false, "value": "2025-02-15T00:07:44.716490Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3li6ge3q7522g", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "5378caa2-71ad-45dc-ad02-448cf1a9affc", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3li6ge3q7522g"}, {"timestamp": "2025-02-15T00:07:45.757Z", "date_only": false, "value": "2025-02-15T00:07:45.757278Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3li6ge5bjb22g", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "d369588c-9287-414d-823a-357ff97983ae", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3li6ge5bjb22g"}, {"timestamp": "2025-02-15T00:07:46.803Z", "date_only": false, "value": "2025-02-15T00:07:46.803254Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3li6ge6wy722g", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "44d211f4-4af1-484a-aa66-df38e4634160", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3li6ge6wy722g"}, {"timestamp": "2025-02-15T00:07:47.825Z", "date_only": false, "value": "2025-02-15T00:07:47.825276Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3li6geaq5cc2g", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "c95181b8-a210-499e-bb04-7fee792efe2f", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3li6geaq5cc2g"}, {"timestamp": "2025-02-15T00:07:48.899Z", "date_only": false, "value": "2025-02-15T00:07:48.899065Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3li6geaq5cd2g", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "7a72e95c-7294-414a-bc48-15ff4e54dcbb", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3li6geaq5cd2g"}, {"timestamp": "2025-02-15T00:10:44.637Z", "date_only": false, "value": "2025-02-15T00:10:44.637409Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3li6gjkmqy32g", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "8696cea0-30f2-4fa1-9e31-358c4ab9e794", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3li6gjkmqy32g"}, {"timestamp": "2025-02-15T00:10:45.164Z", "date_only": false, "value": "2025-02-15T00:10:45.164357Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3li6gjnc4gd2g", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "2e826a1e-6038-4616-a8cf-2da0296c4da6", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3li6gjnc4gd2g"}, {"timestamp": "2025-02-16T00:00:00Z", "date_only": false, "value": "2025-02-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-16)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "20ca41f8-b543-4867-8184-dd39409bab62"}, {"timestamp": "2025-02-16T00:00:00Z", "date_only": false, "value": "2025-02-16T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-16)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "b892c3ab-0b82-4987-85a1-bb6e72d97e58"}, {"timestamp": "2025-02-16T03:52:33.811Z", "date_only": false, "value": "2025-02-16T03:52:33.811832Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3libdf4p2es2j", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "d486fac4-edf3-4494-89ea-046bb90b30fa", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3libdf4p2es2j"}, {"timestamp": "2025-02-17T00:00:00Z", "date_only": false, "value": "2025-02-17T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-17)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "2104da4c-8c44-4c53-89ed-096125096aac"}, {"timestamp": "2025-02-18T00:00:00Z", "date_only": false, "value": "2025-02-18T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-18)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "f72917d7-cc44-4352-b112-480aeb3f385b"}, {"timestamp": "2025-02-18T13:55:35Z", "date_only": false, "value": "2025-02-18T13:55:35.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2025/02/18/palo-alto-networks-confirms-exploitation.html", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "6503f137-2fad-4f75-b8b1-ee454eda9360", "url": "https://threatintel.cc/2025/02/18/palo-alto-networks-confirms-exploitation.html"}, {"timestamp": "2025-02-19T00:00:00Z", "date_only": false, "value": "2025-02-19T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-24-338-02", "record": "ICSA-24-338-02", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2025-02-19T11:45:36Z", "date_only": false, "value": "2025-02-19T11:45:36.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2025/02/19/attackers-are-chaining-flaws-to.html", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "fb65d65f-69b4-498a-af70-720e47b1eefc", "url": "https://threatintel.cc/2025/02/19/attackers-are-chaining-flaws-to.html"}, {"timestamp": "2025-02-19T14:21:51.026Z", "date_only": false, "value": "2025-02-19T14:21:51.026018Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lijxxayben25", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "7c93ad35-e3d2-40ef-9c51-edd827e66622", "url": "https://bsky.app/profile/hackingne.ws/post/3lijxxayben25"}, {"timestamp": "2025-02-19T16:07:24.752Z", "date_only": false, "value": "2025-02-19T16:07:24.752397Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3lik5tyttn52e", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "8ab39cad-f202-46fa-87c4-bdcde91dea6b", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3lik5tyttn52e"}, {"timestamp": "2025-02-19T22:45:22.871Z", "date_only": false, "value": "2025-02-19T22:45:22.871332Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/slouchingtiger.bsky.social/post/3liku3larp22m", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "e1c66a20-2605-4490-b0b0-a121084af606", "url": "https://bsky.app/profile/slouchingtiger.bsky.social/post/3liku3larp22m"}, {"timestamp": "2025-02-20T01:18:22.712Z", "date_only": false, "value": "2025-02-20T01:18:22.712205Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/campuscodi.risky.biz/post/3lil4n7p2bs2c", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "aa8b86b4-74e1-4a6e-9790-0a5603a1445f", "url": "https://bsky.app/profile/campuscodi.risky.biz/post/3lil4n7p2bs2c"}, {"timestamp": "2025-02-20T11:11:04.755Z", "date_only": false, "value": "2025-02-20T11:11:04.755306Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3lim5qy4crs2j", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "4f8fbe2e-08aa-4b54-a98e-7d902cf2aa7b", "url": "https://bsky.app/profile/jbhall56.bsky.social/post/3lim5qy4crs2j"}, {"timestamp": "2025-02-20T18:30:05Z", "date_only": false, "value": "2025-02-20T18:30:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/true_secator/6764", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "d6f2bbee-2623-4ce2-a7c6-f93e3720ec65", "content": "\u0418 \u0432\u043d\u043e\u0432\u044c \u0447\u0435\u0440\u043d\u0430\u044f (\u043a\u043e\u0440\u0438\u0447\u043d\u0435\u0432\u0430\u044f) \u043f\u043e\u043b\u043e\u0441\u0430 \u0432 \u0436\u0438\u0437\u043d\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 Palo Alto Networks \u0438 Ivanti.\n\n\u0423 \u043f\u0435\u0440\u0432\u044b\u0445 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442\u0441\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 PAN-OS\u2019\u043e\u043c, \u0442\u0435\u043f\u0435\u0440\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0447\u0442\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432 (CVE-2025-0111) \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u0430 \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438 \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0435 \u0430\u0442\u0430\u043a \u0441 \u0434\u0432\u0443\u043c\u044f \u0434\u0440\u0443\u0433\u0438\u043c\u0438 CVE-2025-0108 \u0438 CVE-2024-9474 \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u043e\u0432 \u0432 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 CVE-2025-0108 12 \u0444\u0435\u0432\u0440\u0430\u043b\u044f, \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0432 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0412 \u0442\u043e\u0442 \u0436\u0435 \u0434\u0435\u043d\u044c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Assetnote\u00a0\u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 PoC,\u00a0\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u044e\u0449\u0438\u0439, \u043a\u0430\u043a CVE-2025-0108 \u0438 CVE-2024-9474 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 root \u043d\u0430 \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430\u0445 PAN-OS.\n\nCVE-2024-9474 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 PAN-OS, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043d\u043e\u044f\u0431\u0440\u0435 2024 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0443 PAN-OS \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430\u0445 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 root. \u0423\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 0-day \u043d\u0430 \u043c\u043e\u043c\u0435\u043d\u0442 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f.\n\n\u0414\u043d\u0435\u043c \u043f\u043e\u0437\u0436\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f GreyNoise \u043d\u0430\u0447\u0430\u043b\u0430 \u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u0442\u044c, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438\u00a0\u043f\u0440\u0438\u0441\u0442\u0443\u043f\u0438\u043b\u0438 \u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u0440\u0438\u0447\u0435\u043c \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u043b\u0438\u0441\u044c \u0441 \u0434\u0432\u0443\u0445 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432.\n\n\u0417\u0430\u0442\u0435\u043c \u043c\u0430\u0441\u0448\u0442\u0430\u0431 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0440\u0430\u0441\u0448\u0438\u0440\u0438\u043b\u0441\u044f, \u043d\u043e \u0438, \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c GreyNoise, \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0442\u0430\u043a\u0436\u0435 \u0432\u043e\u0437\u0440\u043e\u0441\u043b\u0430.\n\nGreyNoise \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442, \u0447\u0442\u043e \u0442\u0435\u043f\u0435\u0440\u044c\u00a0\u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e 25 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 CVE-2025-0108, \u0442\u043e\u0433\u0434\u0430 \u043a\u0430\u043a \u0432 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u043c \u043e\u0442\u0447\u0435\u0442\u0435 \u043e\u0442 13 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u0431\u044b\u043b\u043e \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u0432\u0430. \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u043c\u0438 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0430\u043c\u0438 \u0430\u0442\u0430\u043a \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0421\u0428\u0410, \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u044f \u0438 \u041d\u0438\u0434\u0435\u0440\u043b\u0430\u043d\u0434\u044b.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c Macnica \u042e\u0442\u0430\u043a\u0430 \u0421\u044d\u0434\u0437\u0438\u044f\u043c\u0430 \u0432\u044b\u044f\u0432\u0438\u043b \u0442\u044b\u0441\u044f\u0447\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 PAN-OS, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u0441\u0432\u043e\u0439 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0447\u0435\u0440\u0435\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVE-2025-0108 \u0438 CVE-2025-0111, \u0442\u043e \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u0441\u0432\u043e\u0439 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u043d\u0435 \u0438\u043c\u0435\u044e\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439. \u0418\u0437 3490 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u0435\u0441\u044f\u0442\u043a\u043e\u0432 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0438\u0441\u044c.\n\n\u0418\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 1168 \u043d\u0435 \u0438\u043c\u0435\u044e\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 CVE-2025-0108 \u0438 CVE-2025-0111, \u043d\u043e \u0438\u043c\u0435\u044e\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f CVE-2024-9474.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u043f\u0440\u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0435 \u0432 \u043f\u0440\u0438\u0437\u043c\u0435 \u0432\u0441\u0435\u0445 \u0442\u0440\u0435\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0430\u0442\u0430\u043a\u0430\u043c\u0438, 65% (2262 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430) \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u0438\u0437 \u043d\u0438\u0445.\n\n\u041f\u043e Ivanti \u0432\u0441\u0435 \u043a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u043e: \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 CVE-2024-10811, CVE-2024-13161, CVE-2024-13160 \u0438 CVE-2024-13159 (CVSS 9,8) \u0432 Ivanti Endpoint Manager (EPM) \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c Horizon3.ai \u043e\u0431\u0437\u0430\u0432\u0435\u043b\u0438\u0441\u044c PoC.\n\n\u042d\u0442\u043e \u043f\u0440\u0438 \u0442\u043e\u043c, \u0447\u0442\u043e \u0447\u0435\u0442\u044b\u0440\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0434\u043b\u044f \u043f\u0440\u0438\u043d\u0443\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u043c\u0430\u0448\u0438\u043d\u044b Ivanti EPM \u0432 \u0440\u0435\u0442\u0440\u0430\u043d\u0441\u043b\u044f\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438 \u0437\u0430\u0442\u0435\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 EPM.", "url": "https://t.me/true_secator/6764"}, {"timestamp": "2025-02-21T00:41:14.630Z", "date_only": false, "value": "2025-02-21T00:41:14.630804Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3linkzn4iys2v", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "84450318-1d88-4793-ad34-ce4aa85cfb2a", "url": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3linkzn4iys2v"}, {"timestamp": "2025-02-22T23:52:20Z", "date_only": false, "value": "2025-02-22T23:52:20.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/nVn0eMvBPoFT3_Muvwrpt1i-qcCKOzA8y8QJEYa81DePFUU", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "e519ed7d-1eaf-4abc-a384-3223b66c6785"}, {"timestamp": "2025-02-23T01:42:08.098Z", "date_only": false, "value": "2025-02-23T01:42:08.098731Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/calebpr.bsky.social/post/3lispeguaeq2k", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "2a043d5b-b4e9-44fa-8306-10bf90ff6f72", "url": "https://bsky.app/profile/calebpr.bsky.social/post/3lispeguaeq2k"}, {"timestamp": "2025-02-23T02:11:02Z", "date_only": false, "value": "2025-02-23T02:11:02.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "4e014053-3b7e-4ca1-924c-029a4ea5664f"}, {"timestamp": "2025-02-23T04:11:06Z", "date_only": false, "value": "2025-02-23T04:11:06.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "75e4f67a-2887-40d9-80bb-71cd9c7c6e7b"}, {"timestamp": "2025-02-24T00:00:00Z", "date_only": false, "value": "2025-02-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-24)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "8b18f755-136b-440b-835d-064aab00bea9"}, {"timestamp": "2025-02-25T00:00:00Z", "date_only": false, "value": "2025-02-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-25)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "5cce9d69-65ca-4204-b7be-cd132fea7e5e"}, {"timestamp": "2025-02-26T00:00:00Z", "date_only": false, "value": "2025-02-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-26)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "54152b0d-3f0c-43a8-bfec-395275f4583b"}, {"timestamp": "2025-02-26T12:27:44Z", "date_only": false, "value": "2025-02-26T12:27:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/15631", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "a06d1cea-bd95-426a-9b67-4fab4e853ed0", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aPAN-OS auth bypass + RCE\nURL\uff1ahttps://github.com/uniformince/CVE-2024-9474\n\n\u6807\u7b7e\uff1a#RCE", "url": "https://t.me/GithubRedTeam/15631"}, {"timestamp": "2025-02-28T00:00:00Z", "date_only": false, "value": "2025-02-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-28)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "397d7e7a-7543-414a-9846-19d03ee03356"}, {"timestamp": "2025-02-28T00:00:00Z", "date_only": false, "value": "2025-02-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-28)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "9b2862b6-9070-4462-84ed-b918e3d19482"}, {"timestamp": "2025-03-01T01:45:13.159Z", "date_only": false, "value": "2025-03-01T01:45:13.159147Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-174112eb-f97b33dde7c3e5be", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "5d66f396-6e48-4a76-9fe6-06ea2c218553", "url": "https://poliverso.org/objects/0477a01e-174112eb-f97b33dde7c3e5be"}, {"timestamp": "2025-03-02T00:00:00Z", "date_only": false, "value": "2025-03-02T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-02)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "bb0c8d17-b00f-43c7-9b69-ffa7424f3496"}, {"timestamp": "2025-03-03T22:00:06Z", "date_only": false, "value": "2025-03-03T22:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/zSzoebszbbIXMk27Rqts2RR5nycMptSURZnSEC0hbBVOUIQ", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "82331bcb-2d4e-4e95-bfdd-9c0e372cffca"}, {"timestamp": "2025-03-04T00:00:00Z", "date_only": false, "value": "2025-03-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-04)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "3e49e114-3013-4fed-95f9-6778c46e938e"}, {"timestamp": "2025-03-04T00:00:00Z", "date_only": false, "value": "2025-03-04T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-04)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "d66894eb-8eb6-4d5f-bdf9-539b7ab57002"}, {"timestamp": "2025-03-04T13:44:51.555Z", "date_only": false, "value": "2025-03-04T13:44:51.555770Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ljklwxfoyc2e", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "dcbe03a4-139a-4d69-b64c-03dcc7c95c2e", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ljklwxfoyc2e"}, {"timestamp": "2025-03-05T00:19:57Z", "date_only": false, "value": "2025-03-05T00:19:57.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/16647", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "e55fab1e-13c1-4eba-998d-58bab819eb98", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aPAN-OS auth bypass + RCE\nURL\uff1ahttps://github.com/concretesign/CVE-2024-9474\n\n\u6807\u7b7e\uff1a#RCE", "url": "https://t.me/GithubRedTeam/16647"}, {"timestamp": "2025-03-06T00:00:00Z", "date_only": false, "value": "2025-03-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-06)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "ccbc4925-9474-4901-ae67-36df0afece9f"}, {"timestamp": "2025-03-06T00:00:00Z", "date_only": false, "value": "2025-03-06T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-06)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "b4284dce-42ac-41dd-99e1-abed03cb4272"}, {"timestamp": "2025-03-07T00:00:00Z", "date_only": false, "value": "2025-03-07T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-07)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "f3ad70ee-b393-4684-8c0c-a809e2edb523"}, {"timestamp": "2025-03-10T11:02:10Z", "date_only": false, "value": "2025-03-10T11:02:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/18013", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "91f5f5c2-54e1-4714-a511-b2898f3ad3fe", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aPAN-OS auth bypass + RCE\nURL\uff1ahttps://github.com/optimistickn/CVE-2024-9474\n\n\u6807\u7b7e\uff1a#RCE", "url": "https://t.me/GithubRedTeam/18013"}, {"timestamp": "2025-03-10T16:00:08Z", "date_only": false, "value": "2025-03-10T16:00:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/UZW5Iq7voIgbo56KjihtvmjAXno9RQv8hp60VGpTG6068iM", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "d4fc5010-7a09-41b2-aa7d-99ac4ed443fd"}, {"timestamp": "2025-03-13T00:00:00Z", "date_only": false, "value": "2025-03-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-13)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "503f715e-6528-436e-93ba-4c4ed2d595ae"}, {"timestamp": "2025-03-13T00:00:00Z", "date_only": false, "value": "2025-03-13T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-13)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "490f8f8b-364d-4a62-912b-da6b97148aa5"}, {"timestamp": "2025-03-14T00:00:00Z", "date_only": false, "value": "2025-03-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-14)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "1612578e-b785-428d-8ad5-0d6c549594a2"}, {"timestamp": "2025-03-14T00:00:00Z", "date_only": false, "value": "2025-03-14T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-14)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "afca772b-610e-420c-842f-ea811b9ba5b9"}, {"timestamp": "2025-03-15T00:00:00Z", "date_only": false, "value": "2025-03-15T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-15)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "dc0cc659-8f34-49aa-b31d-fc4e8557baed"}, {"timestamp": "2025-03-15T13:03:22Z", "date_only": false, "value": "2025-03-15T13:03:22.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/19061", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "10db38ed-90a1-4ecc-bc81-b8207f77f889", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aPAN-OS auth bypass + RCE\nURL\uff1ahttps://github.com/dazzlingteap/CVE-2024-9474\n\n\u6807\u7b7e\uff1a#RCE", "url": "https://t.me/GithubRedTeam/19061"}, {"timestamp": "2025-03-15T22:00:06Z", "date_only": false, "value": "2025-03-15T22:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Oxq5SO8-21GQipP6NIDCbdDkAA225btYdW6eEU8zypkEJg0", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "5aa896fe-e639-4f2f-a02b-a0ae0a519699"}, {"timestamp": "2025-03-19T00:00:00Z", "date_only": false, "value": "2025-03-19T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-19)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "fe26e19c-ca94-4aca-905a-d8aa3e6709b4"}, {"timestamp": "2025-03-21T12:59:04Z", "date_only": false, "value": "2025-03-21T12:59:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/22052", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "ef69203e-f232-4554-858e-9a6461194cfb", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aPAN-OS auth bypass + RCE\nURL\uff1ahttps://github.com/experiencedt/CVE-2024-9474\n\n\u6807\u7b7e\uff1a#RCE", "url": "https://t.me/GithubRedTeam/22052"}, {"timestamp": "2025-03-23T12:01:03Z", "date_only": false, "value": "2025-03-23T12:01:03.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/23202", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "9e4f9262-7433-4790-980d-30d1d4eccd42", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aPAN-OS auth bypass + RCE\nURL\uff1ahttps://github.com/stupidgossi/CVE-2024-9474\n\n\u6807\u7b7e\uff1a#RCE", "url": "https://t.me/GithubRedTeam/23202"}, {"timestamp": "2025-03-23T16:00:09Z", "date_only": false, "value": "2025-03-23T16:00:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/UWcQRTLyNnbLIimUgspqi9VApbez8X0RE6Ho1-v9XBNUVo8", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "051a609f-d798-4af6-aca2-59528878dcb6"}, {"timestamp": "2025-03-25T00:00:00Z", "date_only": false, "value": "2025-03-25T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-25)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "af1b7788-7895-4f29-82b7-1bfd981428e9"}, {"timestamp": "2025-03-26T00:00:00Z", "date_only": false, "value": "2025-03-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-26)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "5758beb2-b8e5-43f5-ba8e-2cc79d43a749"}, {"timestamp": "2025-03-27T16:00:07Z", "date_only": false, "value": "2025-03-27T16:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/0LxSJuadzx1gFt5LjOzQKudcVVss8Xi_oBXbI34BaDEWNfs", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "1a5163f1-90f8-4b43-b06f-a51205405093"}, {"timestamp": "2025-03-28T00:00:00Z", "date_only": false, "value": "2025-03-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-28)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "71335e7b-21e8-4eaf-a2d6-671f6dcd442e"}, {"timestamp": "2025-03-29T00:00:00Z", "date_only": false, "value": "2025-03-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-29)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "b2cbc779-481b-43b4-be91-b05294184531"}, {"timestamp": "2025-03-30T00:00:00Z", "date_only": false, "value": "2025-03-30T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-30)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "d775567e-7ae1-4728-9c10-1c6ec43f8d08"}, {"timestamp": "2025-04-02T00:00:00Z", "date_only": false, "value": "2025-04-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-02)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "3696b41f-bdde-43ec-be66-2fd6bc1c953d"}, {"timestamp": "2025-04-07T00:00:00Z", "date_only": false, "value": "2025-04-07T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-07)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "bca6c41b-ea1e-47d0-99fa-cb8fa2d044f5"}, {"timestamp": "2025-04-08T00:00:00Z", "date_only": false, "value": "2025-04-08T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-24-338-02", "record": "ICSA-24-338-02", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2025-04-09T00:00:00Z", "date_only": false, "value": "2025-04-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-09)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "0012d024-7beb-4a9c-9f1d-c1cf4e18e405"}, {"timestamp": "2025-04-09T00:00:00Z", "date_only": false, "value": "2025-04-09T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-09)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "6db298c0-96b8-4178-9d17-e828daa72441"}, {"timestamp": "2025-04-11T00:00:00Z", "date_only": false, "value": "2025-04-11T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-11)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "547c5b91-5241-4055-83f2-42b6ba0bd9bd"}, {"timestamp": "2025-04-12T00:00:00Z", "date_only": false, "value": "2025-04-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-12)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "f5e9c7dc-9d22-4399-8b4e-a9719e6323be"}, {"timestamp": "2025-04-12T00:00:00Z", "date_only": false, "value": "2025-04-12T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-12)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "6a53c83b-4488-4ffc-81ec-482c66fb9c45"}, {"timestamp": "2025-04-16T00:00:00Z", "date_only": false, "value": "2025-04-16T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-16)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "5de47b7a-fdee-479d-85aa-d5bf8b8ca35e"}, {"timestamp": "2025-04-20T00:00:00Z", "date_only": false, "value": "2025-04-20T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-20)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "032766d1-0573-490a-9da1-7ed790a320f0"}, {"timestamp": "2025-04-22T00:00:00Z", "date_only": false, "value": "2025-04-22T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-22)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "e3db91c5-28ee-4842-a8bb-76760c96f658"}, {"timestamp": "2025-04-23T00:00:00Z", "date_only": false, "value": "2025-04-23T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-23)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "576ada60-8ad8-4a65-a01f-8f32e37369dd"}, {"timestamp": "2025-04-24T00:00:00Z", "date_only": false, "value": "2025-04-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-24)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "b7f3d466-f378-4359-8096-0b0e0d67b31d"}, {"timestamp": "2025-04-24T00:00:00Z", "date_only": false, "value": "2025-04-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-24)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "e963012a-96ca-4f59-9ad1-67f45b7b6dad"}, {"timestamp": "2025-04-28T00:00:00Z", "date_only": false, "value": "2025-04-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-28)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "898d57fd-f167-444c-a0e7-dea1aee82cc0"}, {"timestamp": "2025-05-01T00:00:00Z", "date_only": false, "value": "2025-05-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-01)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "8e4939ed-ae7e-45e2-9e47-8913768049ad"}, {"timestamp": "2025-05-01T00:00:00Z", "date_only": false, "value": "2025-05-01T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-01)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "e4eb0e0d-533f-454a-9285-9667aac8c112"}, {"timestamp": "2025-05-02T00:00:00Z", "date_only": false, "value": "2025-05-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-02)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "48aafebe-8559-481c-b5d8-efd7ddb13adf"}, {"timestamp": "2025-05-04T00:00:00Z", "date_only": false, "value": "2025-05-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-04)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "3639892e-63c0-4d5e-8f90-7277129bce94"}, {"timestamp": "2025-05-04T00:00:00Z", "date_only": false, "value": "2025-05-04T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-04)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "05ba3d6f-5a3a-429a-a7a2-047ccf060e79"}, {"timestamp": "2025-05-07T00:00:00Z", "date_only": false, "value": "2025-05-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-07)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "ecac5feb-d170-4194-8f2c-58c90be9e4ec"}, {"timestamp": "2025-05-07T00:00:00Z", "date_only": false, "value": "2025-05-07T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-07)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "8649d421-497b-4337-b3d8-afaa343eba17"}, {"timestamp": "2025-05-08T00:00:00Z", "date_only": false, "value": "2025-05-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-08)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "ad08fd33-047d-4d7b-9d1f-8d8e099257f9"}, {"timestamp": "2025-05-08T00:00:00Z", "date_only": false, "value": "2025-05-08T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-08)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "63039014-33a9-4895-9b4e-8d7da590c63c"}, {"timestamp": "2025-05-10T00:00:00Z", "date_only": false, "value": "2025-05-10T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-10)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "73ed7b09-f700-4209-8460-90fed5974dd0"}, {"timestamp": "2025-05-11T00:00:00Z", "date_only": false, "value": "2025-05-11T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-11)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "3030cf85-6194-40e7-bfe9-06d57bbf66a6"}, {"timestamp": "2025-05-13T00:00:00Z", "date_only": false, "value": "2025-05-13T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-24-338-02", "record": "ICSA-24-338-02", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2025-05-14T00:00:00Z", "date_only": false, "value": "2025-05-14T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-14)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "35b99577-7f72-4b2a-9e77-7b2934f3e1bb"}, {"timestamp": "2025-05-15T00:00:00Z", "date_only": false, "value": "2025-05-15T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-15)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "85ec41bf-148f-45ed-949a-194db755f318"}, {"timestamp": "2025-05-18T00:00:00Z", "date_only": false, "value": "2025-05-18T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-18)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "8fc24be9-19e2-4eb4-9295-c947da7c9d05"}, {"timestamp": "2025-05-20T00:00:00Z", "date_only": false, "value": "2025-05-20T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-20)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "c80db27c-5422-46ea-afee-16f4ac1dbf77"}, {"timestamp": "2025-05-24T00:00:00Z", "date_only": false, "value": "2025-05-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-24)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "e3d9b339-5922-4855-b90f-141ae437bb96"}, {"timestamp": "2025-06-02T00:00:00Z", "date_only": false, "value": "2025-06-02T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-02)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "6af72a36-b68a-4bae-be39-0b1974d5f764"}, {"timestamp": "2025-06-06T00:00:00Z", "date_only": false, "value": "2025-06-06T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-06)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "019bdc50-b938-4b72-87f5-634039eba0d8"}, {"timestamp": "2025-06-10T00:00:00Z", "date_only": false, "value": "2025-06-10T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-24-338-02", "record": "ICSA-24-338-02", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2025-06-10T00:00:00Z", "date_only": false, "value": "2025-06-10T00:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-24-338-02", "record": "ICSA-24-338-02", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-06-11T09:59:28Z", "date_only": false, "value": "2025-06-11T09:59:28.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/683773bc-f099-4bb1-a561-bae17769e155", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "9db87a1b-e5cc-4269-a496-9994a8d56f20"}, {"timestamp": "2025-06-12T16:06:30.295Z", "date_only": false, "value": "2025-06-12T16:06:30.295265Z", "kind": "other", "label": "Document generated", "source": "csaf_cisa \u00b7 ICSA-24-338-02", "record": "ICSA-24-338-02", "field": "document.tracking.generator.date"}, {"timestamp": "2025-07-06T00:00:00Z", "date_only": false, "value": "2025-07-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-06)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "2e81bc8a-b157-43f5-b5a3-797cc454b25b"}, {"timestamp": "2025-07-09T00:00:00Z", "date_only": false, "value": "2025-07-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-09)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "5cf09967-bf1b-4523-9af9-e34fade08f20"}, {"timestamp": "2025-07-14T00:00:00Z", "date_only": false, "value": "2025-07-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-14)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "10eae732-19a9-4998-b387-32f7906ee904"}, {"timestamp": "2025-07-22T00:00:00Z", "date_only": false, "value": "2025-07-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-22)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "8129450e-23f6-4695-957b-948cb929dd89"}, {"timestamp": "2025-07-25T00:00:00Z", "date_only": false, "value": "2025-07-25T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-25)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "a72c24f1-5974-4c52-a0de-0709588577ed"}, {"timestamp": "2025-07-29T00:00:00Z", "date_only": false, "value": "2025-07-29T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-29)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "b6e8294d-fd87-4887-854c-00fbfdbb27e8"}, {"timestamp": "2025-07-30T00:00:00Z", "date_only": false, "value": "2025-07-30T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-30)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "f1bf7d2c-9a07-414b-9136-30b5c514459f"}, {"timestamp": "2025-08-05T00:00:00Z", "date_only": false, "value": "2025-08-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-05)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "71088b13-d901-4a93-93fd-d90ea4d71090"}, {"timestamp": "2025-08-05T00:00:00Z", "date_only": false, "value": "2025-08-05T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-05)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "331d7083-6ae2-4762-b538-35bb14f78e04"}, {"timestamp": "2025-08-22T14:52:23Z", "date_only": false, "value": "2025-08-22T14:52:23.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/24306fae-b16b-4478-9297-d2973cdb583c", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "f86e0106-0b98-435f-83b1-8cfd8a450d06"}, {"timestamp": "2025-08-23T00:00:00Z", "date_only": false, "value": "2025-08-23T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-23)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "d0adc22d-e57e-449d-82f2-05282dfa3416"}, {"timestamp": "2025-08-25T00:00:00Z", "date_only": false, "value": "2025-08-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-25)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "8c4e2af8-814d-40f5-813c-b415455a0123"}, {"timestamp": "2025-08-25T00:00:00Z", "date_only": false, "value": "2025-08-25T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-25)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "cf45493a-d440-4aab-ac34-4998e506b308"}, {"timestamp": "2025-09-01T00:00:00Z", "date_only": false, "value": "2025-09-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-01)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "31500328-f9d3-4757-84d5-b928be70d9b3"}, {"timestamp": "2025-09-24T00:00:00Z", "date_only": false, "value": "2025-09-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-24)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "9bb4dc56-3e06-4070-9bb3-8f563679f7fb"}, {"timestamp": "2025-09-24T00:00:00Z", "date_only": false, "value": "2025-09-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-24)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "69f77888-eb01-4f19-81ae-72e82175f24d"}, {"timestamp": "2025-10-04T00:00:00Z", "date_only": false, "value": "2025-10-04T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-04)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "eb3e80a7-cdca-46aa-8e56-250cc8a6507b"}, {"timestamp": "2025-10-06T00:00:00Z", "date_only": false, "value": "2025-10-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-06)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "7de3e766-e7b7-46f7-a653-c8002e1097fd"}, {"timestamp": "2025-10-06T00:00:00Z", "date_only": false, "value": "2025-10-06T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-06)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "dbb01c61-151e-4c7d-a5e9-8488d2569785"}, {"timestamp": "2025-10-07T00:00:00Z", "date_only": false, "value": "2025-10-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-07)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "621f3e89-5fee-4515-ab3b-2a4e119a41b2"}, {"timestamp": "2025-10-14T00:00:00Z", "date_only": false, "value": "2025-10-14T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-14)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "a6d47b0f-07c4-44fd-94a9-0e7594841a5e"}, {"timestamp": "2025-10-15T00:00:00Z", "date_only": false, "value": "2025-10-15T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-15)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "c7e18d60-5a8f-48f5-93ff-38e93556b464"}, {"timestamp": "2025-10-19T20:26:09.816Z", "date_only": false, "value": "2025-10-19T20:26:09.816565Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/project-overwatch.bsky.social/post/3m3l55efus22y", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "40d63101-8de3-4520-aa5d-09085d4a1dc0", "url": "https://bsky.app/profile/project-overwatch.bsky.social/post/3m3l55efus22y"}, {"timestamp": "2025-10-19T20:26:10.381Z", "date_only": false, "value": "2025-10-19T20:26:10.381163Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/project-overwatch.bsky.social/post/3m3l55fip2c2y", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "cabd3d63-0ccc-4d39-93d2-10ba6143324a", "url": "https://bsky.app/profile/project-overwatch.bsky.social/post/3m3l55fip2c2y"}, {"timestamp": "2025-10-19T20:26:10.954Z", "date_only": false, "value": "2025-10-19T20:26:10.954030Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/project-overwatch.bsky.social/post/3m3l55fiqys2y", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "52d96b3e-df63-4d13-b114-20bcaa34fd0a", "url": "https://bsky.app/profile/project-overwatch.bsky.social/post/3m3l55fiqys2y"}, {"timestamp": "2025-10-19T20:26:11.546Z", "date_only": false, "value": "2025-10-19T20:26:11.546487Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/project-overwatch.bsky.social/post/3m3l55fsqdk2y", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "1c76f519-fec6-4a77-b222-e67f262633ff", "url": "https://bsky.app/profile/project-overwatch.bsky.social/post/3m3l55fsqdk2y"}, {"timestamp": "2025-10-19T20:26:12.078Z", "date_only": false, "value": "2025-10-19T20:26:12.078706Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/project-overwatch.bsky.social/post/3m3l55fsrcs2y", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "7718ce6e-c58e-4d65-b339-58a6e2c175a7", "url": "https://bsky.app/profile/project-overwatch.bsky.social/post/3m3l55fsrcs2y"}, {"timestamp": "2025-10-19T20:26:12.705Z", "date_only": false, "value": "2025-10-19T20:26:12.705465Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/project-overwatch.bsky.social/post/3m3l55fssc22y", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "1f44bb71-8b2b-4f22-81e6-14b5015a9e02", "url": "https://bsky.app/profile/project-overwatch.bsky.social/post/3m3l55fssc22y"}, {"timestamp": "2025-10-19T20:26:13.302Z", "date_only": false, "value": "2025-10-19T20:26:13.302976Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/project-overwatch.bsky.social/post/3m3l55fssc32y", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "4200bc38-573d-43c3-991e-0bbb953dd23d", "url": "https://bsky.app/profile/project-overwatch.bsky.social/post/3m3l55fssc32y"}, {"timestamp": "2025-10-19T20:26:13.883Z", "date_only": false, "value": "2025-10-19T20:26:13.883421Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/project-overwatch.bsky.social/post/3m3l55fsual2y", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "bfeef5c2-bfb4-4fc6-8fe9-90c97154192a", "url": "https://bsky.app/profile/project-overwatch.bsky.social/post/3m3l55fsual2y"}, {"timestamp": "2025-10-19T20:26:14.471Z", "date_only": false, "value": "2025-10-19T20:26:14.471346Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/project-overwatch.bsky.social/post/3m3l55fsv7t2y", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "9db2c4c3-088c-4b4a-b70d-16204314972a", "url": "https://bsky.app/profile/project-overwatch.bsky.social/post/3m3l55fsv7t2y"}, {"timestamp": "2025-10-19T20:26:15.052Z", "date_only": false, "value": "2025-10-19T20:26:15.052076Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/project-overwatch.bsky.social/post/3m3l55fsv7u2y", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "9fa48cea-1df0-492e-a99e-7be0f1386a04", "url": "https://bsky.app/profile/project-overwatch.bsky.social/post/3m3l55fsv7u2y"}, {"timestamp": "2025-10-19T20:26:15.662Z", "date_only": false, "value": "2025-10-19T20:26:15.662890Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/project-overwatch.bsky.social/post/3m3l55fsw742y", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "1840414a-3d7b-42b8-a367-f852d2d78cdc", "url": "https://bsky.app/profile/project-overwatch.bsky.social/post/3m3l55fsw742y"}, {"timestamp": "2025-10-21T00:00:00Z", "date_only": false, "value": "2025-10-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-21)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "942c0b11-bcd6-4ea3-8d13-837e165dbcd1"}, {"timestamp": "2025-10-22T00:00:00Z", "date_only": false, "value": "2025-10-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-22)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "fcce1ee6-6b09-473b-9c48-4108e843a69a"}, {"timestamp": "2025-10-22T00:33:11Z", "date_only": false, "value": "2025-10-22T00:33:11Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-CGVW-JH5J-MGQ3", "record": "GHSA-CGVW-JH5J-MGQ3", "field": "modified"}, {"timestamp": "2025-10-23T21:13:04Z", "date_only": false, "value": "2025-10-23T21:13:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "73823b11-408a-4229-aa25-4880e7543688"}, {"timestamp": "2025-10-25T00:00:00Z", "date_only": false, "value": "2025-10-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-25)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "4d6782c3-4861-446e-8e35-00aa11ef6b2a"}, {"timestamp": "2025-10-26T00:00:00Z", "date_only": false, "value": "2025-10-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-26)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "3c1cc4c1-2ed7-462d-a648-91fac132f46d"}, {"timestamp": "2025-10-28T00:00:00Z", "date_only": false, "value": "2025-10-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-28)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "cc456f3e-56c0-4594-9b99-3fe42e3d0806"}, {"timestamp": "2025-10-28T00:00:00Z", "date_only": false, "value": "2025-10-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-28)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "1807db19-ef22-4397-bbfc-7e0bf82964f4"}, {"timestamp": "2025-10-29T00:00:00Z", "date_only": false, "value": "2025-10-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-29)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "baddffa2-5521-4c22-99c5-9e6a2c6e0a90"}, {"timestamp": "2025-10-29T00:00:00Z", "date_only": false, "value": "2025-10-29T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-29)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "071dcf2f-9fa6-4ba9-97f2-85881472cdf9"}, {"timestamp": "2025-10-30T00:00:00Z", "date_only": false, "value": "2025-10-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-30)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "4dfaf316-363b-421f-9a2e-fcda3fd525b3"}, {"timestamp": "2025-10-30T00:00:00Z", "date_only": false, "value": "2025-10-30T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-30)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "095bed07-236f-4faa-9344-b94ff29706af"}, {"timestamp": "2025-11-01T00:00:00Z", "date_only": false, "value": "2025-11-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-01)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "991f0dd8-53a1-4ab0-9459-014f1416cd57"}, {"timestamp": "2025-11-01T00:00:00Z", "date_only": false, "value": "2025-11-01T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-01)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "d2623b8c-340a-413a-b854-d75c337b4e01"}, {"timestamp": "2025-11-02T00:00:00Z", "date_only": false, "value": "2025-11-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-02)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "f5b579ab-1afe-4a0a-be91-5a4753c0d119"}, {"timestamp": "2025-11-03T00:00:00Z", "date_only": false, "value": "2025-11-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-03)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "d9317919-c305-4f36-8339-f2dadb2a08bd"}, {"timestamp": "2025-11-03T00:00:00Z", "date_only": false, "value": "2025-11-03T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-03)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "d60e2c44-bf96-4e84-93a1-85611720bd4e"}, {"timestamp": "2025-11-04T00:00:00Z", "date_only": false, "value": "2025-11-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-04)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "e13f4add-9f30-4e3e-ace8-9618be042711"}, {"timestamp": "2025-11-05T00:00:00Z", "date_only": false, "value": "2025-11-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-05)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "4a6fa0bd-2b86-4667-8b31-27b16c8a8bff"}, {"timestamp": "2025-11-05T00:00:00Z", "date_only": false, "value": "2025-11-05T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-05)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "01650200-58ce-40bf-af8f-ece45d423147"}, {"timestamp": "2025-11-07T00:00:00Z", "date_only": false, "value": "2025-11-07T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-07)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "7ecbbe33-0f84-4c84-958c-1ddc3f896c39"}, {"timestamp": "2025-11-09T00:00:00Z", "date_only": false, "value": "2025-11-09T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-09)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "7a064081-014f-4fee-b9cc-675486410483"}, {"timestamp": "2025-11-14T00:00:00Z", "date_only": false, "value": "2025-11-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-14)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "a09e2414-8dbc-4df3-a911-eab87981111f"}, {"timestamp": "2025-11-16T00:00:00Z", "date_only": false, "value": "2025-11-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-16)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "d250294b-6585-48b2-865e-840503c82acd"}, {"timestamp": "2025-11-18T00:00:00Z", "date_only": false, "value": "2025-11-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-18)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "f09727f1-e700-4389-b80d-2be4d5514b86"}, {"timestamp": "2025-11-24T00:00:00Z", "date_only": false, "value": "2025-11-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-24)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "ee5b56ef-1699-4e7b-9fdb-a24a7566c983"}, {"timestamp": "2025-11-25T00:00:00Z", "date_only": false, "value": "2025-11-25T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-25)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "94c7d99d-546b-4073-9a83-cf8258003c2b"}, {"timestamp": "2025-11-30T00:00:00Z", "date_only": false, "value": "2025-11-30T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-30)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "462fb8c7-c3fc-4885-9eb3-605ff431805e"}, {"timestamp": "2025-12-03T00:00:00Z", "date_only": false, "value": "2025-12-03T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-03)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "ab0f1ba2-3638-40ac-a252-a174403a3e9e"}, {"timestamp": "2025-12-09T00:00:00Z", "date_only": false, "value": "2025-12-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-09)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "96bf56db-2897-42aa-88f0-e5c18a76101f"}, {"timestamp": "2025-12-10T00:00:00Z", "date_only": false, "value": "2025-12-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-10)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "83207365-1c7a-4c06-ab3a-63fcb29d5e72"}, {"timestamp": "2025-12-11T00:00:00Z", "date_only": false, "value": "2025-12-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-11)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "e7b31e2f-7423-4f90-a5d6-16901be43e50"}, {"timestamp": "2025-12-12T00:00:00Z", "date_only": false, "value": "2025-12-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-12)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "9b647271-d26c-406b-b672-c9607fc72b21"}, {"timestamp": "2025-12-12T00:00:00Z", "date_only": false, "value": "2025-12-12T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-12)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "0e3b1fc2-1bd5-4cf0-9c40-666fdf8e650c"}, {"timestamp": "2025-12-13T00:00:00Z", "date_only": false, "value": "2025-12-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-13)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "344704eb-4b22-49d2-979c-eb68278ef6cd"}, {"timestamp": "2025-12-13T00:00:00Z", "date_only": false, "value": "2025-12-13T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-13)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "a7f7c66e-9c44-4582-98e4-07e0107806b3"}, {"timestamp": "2025-12-14T00:00:00Z", "date_only": false, "value": "2025-12-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-14)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "a8f4b4d1-1b54-492e-afdf-eaf9490f564d"}, {"timestamp": "2025-12-15T00:00:00Z", "date_only": false, "value": "2025-12-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-15)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "a2b923c2-f435-48ce-9702-24668dea8306"}, {"timestamp": "2025-12-16T00:00:00Z", "date_only": false, "value": "2025-12-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-16)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "34dbf67f-5a7f-4fb3-bf52-06fc1afd0f46"}, {"timestamp": "2025-12-17T00:00:00Z", "date_only": false, "value": "2025-12-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-17)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "b8ea3a52-b546-4f5e-9abc-a59f7f9880de"}, {"timestamp": "2025-12-17T00:00:00Z", "date_only": false, "value": "2025-12-17T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-17)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "7749310a-69c4-421f-b910-7989efdd1b37"}, {"timestamp": "2025-12-18T00:00:00Z", "date_only": false, "value": "2025-12-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-18)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "eb589dcc-0a16-4e38-b6a3-1e62c9194a97"}, {"timestamp": "2025-12-19T00:00:00Z", "date_only": false, "value": "2025-12-19T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-19)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "a305f517-09b8-439c-a9a9-e16ce55e1bf0"}, {"timestamp": "2025-12-20T00:00:00Z", "date_only": false, "value": "2025-12-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-20)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "7c24516d-a525-447e-9f42-49c16c9c8db2"}, {"timestamp": "2025-12-20T00:00:00Z", "date_only": false, "value": "2025-12-20T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-20)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "e6c6cc26-47c5-4629-904c-a7bb5730e9d5"}, {"timestamp": "2025-12-21T00:00:00Z", "date_only": false, "value": "2025-12-21T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-21)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "1b3118d2-39cf-43af-a8e3-3a5666a3799a"}, {"timestamp": "2025-12-22T00:00:00Z", "date_only": false, "value": "2025-12-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-22)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "7c50f8ad-f2d0-49ef-ac09-1280031a7ce9"}, {"timestamp": "2025-12-23T00:00:00Z", "date_only": false, "value": "2025-12-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-23)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "57ab2c76-0852-4521-96d7-ff900cbb7cf8"}, {"timestamp": "2025-12-23T00:00:00Z", "date_only": false, "value": "2025-12-23T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-23)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "4f147ead-30f7-4fbf-96e6-404765d34d08"}, {"timestamp": "2025-12-24T00:00:00Z", "date_only": false, "value": "2025-12-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-24)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "20b4649f-205e-4ea2-b48a-6870c2400be8"}, {"timestamp": "2025-12-24T00:00:00Z", "date_only": false, "value": "2025-12-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-24)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "4dc7269b-fca4-4027-a17a-f92a428af611"}, {"timestamp": "2025-12-25T00:00:00Z", "date_only": false, "value": "2025-12-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-25)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "619fc015-1778-481a-9d2d-a177071fa04e"}, {"timestamp": "2025-12-25T00:00:00Z", "date_only": false, "value": "2025-12-25T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-25)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "f1d30635-5995-4f3f-abcd-bc386e61fcdb"}, {"timestamp": "2025-12-26T00:00:00Z", "date_only": false, "value": "2025-12-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-26)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "d01ab1b1-2bda-4c5b-a93d-6dda16a2d0da"}, {"timestamp": "2025-12-27T00:00:00Z", "date_only": false, "value": "2025-12-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-27)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "03ec3802-21ef-458f-ad28-471959495309"}, {"timestamp": "2025-12-29T00:00:00Z", "date_only": false, "value": "2025-12-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-29)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "bfc56d03-eff6-4e5b-99e0-d80cdf3dace2"}, {"timestamp": "2025-12-29T00:00:00Z", "date_only": false, "value": "2025-12-29T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-29)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "4a14906d-5000-4fcf-98db-f2d0e18dab16"}, {"timestamp": "2025-12-30T00:00:00Z", "date_only": false, "value": "2025-12-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-30)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "94b2f327-d558-4595-bb8f-3076174bf808"}, {"timestamp": "2025-12-30T00:00:00Z", "date_only": false, "value": "2025-12-30T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-30)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "bd68091c-0394-4ce1-a3c0-b3ed59b14767"}, {"timestamp": "2025-12-31T00:00:00Z", "date_only": false, "value": "2025-12-31T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-31)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "12b35e4b-48da-4803-a650-c3ac1580904f"}, {"timestamp": "2026-01-01T00:00:00Z", "date_only": false, "value": "2026-01-01T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-01)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "9a62b238-2a14-4d59-9c12-0666d08792d5"}, {"timestamp": "2026-01-02T00:00:00Z", "date_only": false, "value": "2026-01-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-02)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "a9368c83-13cf-4536-8117-03c2d63b9e20"}, {"timestamp": "2026-01-02T00:00:00Z", "date_only": false, "value": "2026-01-02T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-02)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "78b5331e-e515-45a0-ba4f-a5748a3d7cdf"}, {"timestamp": "2026-01-03T00:00:00Z", "date_only": false, "value": "2026-01-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-03)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "057dda6a-e3c1-4c6a-9d64-29a42ffa9594"}, {"timestamp": "2026-01-03T00:00:00Z", "date_only": false, "value": "2026-01-03T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-03)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "5dd0311d-703b-49d2-8a3b-8eece6876023"}, {"timestamp": "2026-01-04T00:00:00Z", "date_only": false, "value": "2026-01-04T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-04)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "f4e2dbef-c82a-44df-a90e-457828d2b5e6"}, {"timestamp": "2026-01-05T00:00:00Z", "date_only": false, "value": "2026-01-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-05)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "8cf54b3d-2401-4ad3-9b7e-d8668027a756"}, {"timestamp": "2026-01-05T00:00:00Z", "date_only": false, "value": "2026-01-05T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-05)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "ab274b2a-ec15-4589-88dd-bf03e6ac52c9"}, {"timestamp": "2026-01-14T00:00:00Z", "date_only": false, "value": "2026-01-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-14)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "493eb6de-b3fe-40b3-93e0-079c8eb667b7"}, {"timestamp": "2026-01-15T00:00:00Z", "date_only": false, "value": "2026-01-15T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-15)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "1179a901-8258-46d4-ba80-310b69ae2908"}, {"timestamp": "2026-01-19T00:00:00Z", "date_only": false, "value": "2026-01-19T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-19)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "29a22c67-c34f-425e-b082-9feafa03f6a0"}, {"timestamp": "2026-01-30T00:00:00Z", "date_only": false, "value": "2026-01-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-30)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "3f87f8e0-24b0-405d-9137-5e3c4072ed33"}, {"timestamp": "2026-01-31T00:00:00Z", "date_only": false, "value": "2026-01-31T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-31)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "eae3051b-df03-4fb9-ab0c-89275ad03734"}, {"timestamp": "2026-02-01T00:00:00Z", "date_only": false, "value": "2026-02-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-01)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "8a17db94-f2d2-4e4f-8298-aeb343aa0e67"}, {"timestamp": "2026-02-02T00:00:00Z", "date_only": false, "value": "2026-02-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-02)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "f7c79ab2-57e9-4b0d-b5c3-8bf73a7c4186"}, {"timestamp": "2026-02-02T12:26:21.615Z", "date_only": false, "value": "2026-02-02T12:26:21.615107Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/95d057e7-23d8-4782-8a3a-475f0d2e495b", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "022dace8-743a-45cd-a57b-fe94bb199ca3", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/95d057e7-23d8-4782-8a3a-475f0d2e495b"}, {"timestamp": "2026-02-02T12:26:21.615Z", "date_only": false, "value": "2026-02-02T12:26:21.615107Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/95d057e7-23d8-4782-8a3a-475f0d2e495b", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "05765670-9a37-401f-9f79-c8b197217c37", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/95d057e7-23d8-4782-8a3a-475f0d2e495b"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2024-9474", "field": "timestamps.recorded_at", "uuid": "43dbbf0c-455d-412a-8bd5-e462a4b43bba", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-03T00:00:00Z", "date_only": false, "value": "2026-02-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-03)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "f31979d9-3f17-439c-aa25-36dc267e3a51"}, {"timestamp": "2026-02-18T00:00:00Z", "date_only": false, "value": "2026-02-18T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-18)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "af3d609e-1ce0-4653-a15b-2345dd2bae18"}, {"timestamp": "2026-03-01T00:00:00Z", "date_only": false, "value": "2026-03-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-01)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "10bf65b9-0e05-4d8b-844d-386d11c96903"}, {"timestamp": "2026-03-02T00:00:00Z", "date_only": false, "value": "2026-03-02T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-02)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "e3735eeb-2063-4746-9f75-1fcda3095081"}, {"timestamp": "2026-03-10T00:00:00Z", "date_only": false, "value": "2026-03-10T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-10)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "f5174254-1b63-4f24-a6b6-11cfc1704328"}, {"timestamp": "2026-03-18T00:00:00Z", "date_only": false, "value": "2026-03-18T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-18)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "a97f1058-7be0-4e71-a9f2-2b439ed06532"}, {"timestamp": "2026-03-20T00:00:00Z", "date_only": false, "value": "2026-03-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-20)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "fa0e25d3-2a92-43f2-befe-6286edc1f8ac"}, {"timestamp": "2026-03-20T00:00:00Z", "date_only": false, "value": "2026-03-20T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-20)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "dd07c5c9-6d27-4670-aff8-062351959575"}, {"timestamp": "2026-03-27T00:00:00Z", "date_only": false, "value": "2026-03-27T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-27)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "ee64bdbd-cdac-4dff-ba1a-a56570c0db1d"}, {"timestamp": "2026-04-02T00:00:00Z", "date_only": false, "value": "2026-04-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-02)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "0f164b7c-7b89-4c07-a236-0614cfa866be"}, {"timestamp": "2026-04-02T00:00:00Z", "date_only": false, "value": "2026-04-02T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-02)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "13eed491-a98a-4973-95f3-6b3ada9f5020"}, {"timestamp": "2026-04-03T00:00:00Z", "date_only": false, "value": "2026-04-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-03)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "7974316a-f8f4-4e36-80de-bae5e6311b28"}, {"timestamp": "2026-04-04T00:00:00Z", "date_only": false, "value": "2026-04-04T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-04)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "09dc8b9b-800c-4639-ae94-c6f3c7b6dcd3"}, {"timestamp": "2026-04-19T00:00:00Z", "date_only": false, "value": "2026-04-19T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-19)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "a58147fc-e25b-491e-99f6-cdeca4dac7a5"}, {"timestamp": "2026-04-19T00:00:00Z", "date_only": false, "value": "2026-04-19T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-19)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "c584a681-586c-4c58-9f52-121248db621e"}, {"timestamp": "2026-05-13T00:00:00Z", "date_only": false, "value": "2026-05-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-13)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "2dbb843d-078e-4dbb-b129-11c72f809da8"}, {"timestamp": "2026-05-15T00:00:00Z", "date_only": false, "value": "2026-05-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-15)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "c28af9d3-cf61-454f-862d-702d910a2175"}, {"timestamp": "2026-05-15T00:00:00Z", "date_only": false, "value": "2026-05-15T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-15)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "e72961f6-71d7-4fd9-9d12-bbb3dfdc6060"}, {"timestamp": "2026-05-16T00:00:00Z", "date_only": false, "value": "2026-05-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-16)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "154d0279-a7df-4419-b973-faff3e97cadf"}, {"timestamp": "2026-05-17T00:00:00Z", "date_only": false, "value": "2026-05-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-17)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "1e98426f-715b-407c-b4e7-86622f85e2ce"}, {"timestamp": "2026-05-17T00:00:00Z", "date_only": false, "value": "2026-05-17T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-17)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "da89d029-13d5-49de-a399-7a94d7bb4690"}, {"timestamp": "2026-05-18T00:00:00Z", "date_only": false, "value": "2026-05-18T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-18)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "c17a5490-1f5d-4b2a-a85c-5e7e2ae313fa"}, {"timestamp": "2026-05-20T00:00:00Z", "date_only": false, "value": "2026-05-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-20)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "4af660c8-1fc9-4859-a3c4-8a24dbb7a079"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-21)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "358bd5e5-464e-476f-9d9c-4a141bd57266"}, {"timestamp": "2026-06-19T12:46:31.515Z", "date_only": false, "value": "2026-06-19T12:46:31.515408Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b0a69c5f-7b16-4f16-9732-76ab8e4e78db", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "63605954-6116-425a-9838-f44c47bb6af7", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b0a69c5f-7b16-4f16-9732-76ab8e4e78db"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2024-9474", "field": "timestamps.recorded_at", "uuid": "837dd166-e127-48f7-bc99-45171763b708", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:14:30.246Z", "date_only": false, "value": "2026-06-23T11:14:30.246642Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/837dd166-e127-48f7-bc99-45171763b708", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "69907ce2-2730-43ea-8e6a-b22edfc5ce7a", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/837dd166-e127-48f7-bc99-45171763b708"}, {"timestamp": "2026-06-23T14:06:01.271Z", "date_only": false, "value": "2026-06-23T14:06:01.271352Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/470044f7-78b5-4266-97e7-25ea73a8528a", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "bdcd42a7-2602-4700-a1f6-2d28752537f6", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/470044f7-78b5-4266-97e7-25ea73a8528a"}, {"timestamp": "2026-06-30T09:24:01.456Z", "date_only": false, "value": "2026-06-30T09:24:01.456879Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/96877856-daf6-4ad0-aaac-af33d80c02f7", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "093e9aa0-e47f-49ed-a2de-d7869c718029", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/96877856-daf6-4ad0-aaac-af33d80c02f7"}, {"timestamp": "2026-07-01T07:16:45.749Z", "date_only": false, "value": "2026-07-01T07:16:45.749831Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/d0e87f4a-7a67-4b54-b14f-84e5f884234b", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "fe112ccc-bdd8-481c-9450-a19f23e9091c", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/d0e87f4a-7a67-4b54-b14f-84e5f884234b"}, {"timestamp": "2026-07-08T10:15:07.735Z", "date_only": false, "value": "2026-07-08T10:15:07.735202Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-07)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "bc1927fd-2f90-41bb-9fad-469789e33c75"}, {"timestamp": "2026-07-12T22:00:09.531Z", "date_only": false, "value": "2026-07-12T22:00:09.531655Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/securixy_kz/1060", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "5f66d261-0263-4227-98d6-79f92b41ab47", "url": "https://t.me/securixy_kz/1060"}, {"timestamp": "2026-07-13T00:00:34.022Z", "date_only": false, "value": "2026-07-13T00:00:34.022893Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/securixy_kz/1060", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "ef1c29de-7d29-4c3a-a835-d66f80b8a905", "url": "https://t.me/securixy_kz/1060"}, {"timestamp": "2026-07-14T00:01:01.321Z", "date_only": false, "value": "2026-07-14T00:01:01.321680Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/securixy_kz/1060", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "8a13db67-491d-4cd4-860f-eb0b5dd06589", "url": "https://t.me/securixy_kz/1060"}, {"timestamp": "2026-07-25T15:00:17.556Z", "date_only": false, "value": "2026-07-25T15:00:17.556574Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/432", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "3cecf4ed-9e76-44f0-a152-69f17f528f2d", "url": "https://t.me/ZerodayAlert/432"}, {"timestamp": "2026-07-26T00:00:41.863Z", "date_only": false, "value": "2026-07-26T00:00:41.863574Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/432", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "3edc4695-a932-47d1-a88e-017445d92c44", "url": "https://t.me/ZerodayAlert/432"}, {"timestamp": "2026-07-26T02:00:16.407Z", "date_only": false, "value": "2026-07-26T02:00:16.407706Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberwarehouse/653", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "84657fba-c6e9-4be9-802a-a8900ab207bd", "url": "https://t.me/cyberwarehouse/653"}, {"timestamp": "2026-07-26T02:00:16.998Z", "date_only": false, "value": "2026-07-26T02:00:16.998632Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberwarehouse/627", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "3e066309-698a-4049-b925-853389d21b51", "url": "https://t.me/cyberwarehouse/627"}, {"timestamp": "2026-07-26T07:01:20.685Z", "date_only": false, "value": "2026-07-26T07:01:20.685870Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Positive_Technologies/3182", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "d76b4193-970f-42f0-bac6-8c277c442253", "url": "https://t.me/Positive_Technologies/3182"}, {"timestamp": "2026-07-27T00:00:26.120Z", "date_only": false, "value": "2026-07-27T00:00:26.120461Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cyberwarehouse/627", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "976ff3ce-c4bf-43e2-a09a-dedfca6f546a", "url": "https://t.me/cyberwarehouse/627"}, {"timestamp": "2026-07-27T00:00:26.964Z", "date_only": false, "value": "2026-07-27T00:00:26.964113Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberwarehouse/653", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "d21b79aa-4f19-460f-bb39-6e33dc11ca53", "url": "https://t.me/cyberwarehouse/653"}, {"timestamp": "2026-07-27T00:01:25.793Z", "date_only": false, "value": "2026-07-27T00:01:25.793034Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Positive_Technologies/3182", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "804f0e04-f6ba-4de9-ba3e-63ad5da139ef", "url": "https://t.me/Positive_Technologies/3182"}, {"timestamp": "2026-07-28T17:00:06.376Z", "date_only": false, "value": "2026-07-28T17:00:06.376676Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Positive_Technologies/3182", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "f5559283-7aac-4251-814e-81059bed5094", "url": "https://t.me/Positive_Technologies/3182"}, {"timestamp": "2026-07-29T00:00:31.937Z", "date_only": false, "value": "2026-07-29T00:00:31.937066Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Positive_Technologies/3182", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "fb02847b-c828-4ffc-8edb-0668c534337a", "url": "https://t.me/Positive_Technologies/3182"}, {"timestamp": "2026-07-29T10:00:12.536Z", "date_only": false, "value": "2026-07-29T10:00:12.536957Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-28)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "06bc1812-cafc-4e06-bc6d-26514df30fc0"}, {"timestamp": "2026-07-29T12:01:58.584Z", "date_only": false, "value": "2026-07-29T12:01:58.584968Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/safebdv/1001", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "b15208e1-1108-4bad-9afa-eead29a74966", "url": "https://t.me/safebdv/1001"}, {"timestamp": "2026-07-29T12:02:10.035Z", "date_only": false, "value": "2026-07-29T12:02:10.035889Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/4839", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "e3697029-617e-49de-bfd3-ecbd4c7a9a64", "url": "https://t.me/reverseame/4839"}, {"timestamp": "2026-07-29T12:02:10.218Z", "date_only": false, "value": "2026-07-29T12:02:10.218177Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/4836", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "e2d99f21-2a0f-44d2-970f-63bb5704f86e", "url": "https://t.me/reverseame/4836"}, {"timestamp": "2026-07-30T00:02:10.042Z", "date_only": false, "value": "2026-07-30T00:02:10.042391Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/safebdv/1001", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "97567e2e-05dd-4eb9-a1bc-9cd6b2162bc8", "url": "https://t.me/safebdv/1001"}, {"timestamp": "2026-07-30T00:02:17.406Z", "date_only": false, "value": "2026-07-30T00:02:17.406601Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/4839", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "5f4abb19-305a-4220-be96-0b6957e023c8", "url": "https://t.me/reverseame/4839"}, {"timestamp": "2026-07-30T00:02:17.587Z", "date_only": false, "value": "2026-07-30T00:02:17.587398Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/4836", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "396bb19d-c0dc-47a6-802d-ba927e8168f2", "url": "https://t.me/reverseame/4836"}, {"timestamp": "2026-08-01T20:00:05.256Z", "date_only": false, "value": "2026-08-01T20:00:05.256674Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/safebdv/1001", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "90e64f0f-5399-40ca-9112-840e549739ef", "url": "https://t.me/safebdv/1001"}, {"timestamp": "2026-08-02T00:00:21.363Z", "date_only": false, "value": "2026-08-02T00:00:21.363463Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/safebdv/1001", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "ceb99a2c-d150-4f99-b45e-91203e098386", "url": "https://t.me/safebdv/1001"}, {"timestamp": "2026-08-02T04:08:44.619Z", "date_only": false, "value": "2026-08-02T04:08:44.619766Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/4839", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "bac79262-2c22-40ea-ab0d-6043509b4319", "url": "https://t.me/reverseame/4839"}, {"timestamp": "2026-08-02T04:12:50.031Z", "date_only": false, "value": "2026-08-02T04:12:50.031847Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/4836", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "9b230a83-a00e-43de-a9ad-616e9309fa43", "url": "https://t.me/reverseame/4836"}, {"timestamp": "2026-08-03T02:13:59.212Z", "date_only": false, "value": "2026-08-03T02:13:59.212584Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/4839", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "1af862d3-1d48-4344-81c9-eb22bd624f48", "url": "https://t.me/reverseame/4839"}, {"timestamp": "2026-08-03T02:13:59.310Z", "date_only": false, "value": "2026-08-03T02:13:59.310232Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/4836", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "fa2e096b-377a-4329-bc79-5a375200e6a4", "url": "https://t.me/reverseame/4836"}, {"timestamp": "2026-08-04T03:55:32.780Z", "date_only": false, "value": "2026-08-04T03:55:32.780Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-9474", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-04T03:55:32.780Z", "date_only": false, "value": "2026-08-04T03:55:32.780Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-9474", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-04T05:16:32.247Z", "date_only": false, "value": "2026-08-04T05:16:32.247", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-9474", "record": "FKIE_CVE-2024-9474", "field": "lastModified"}, {"timestamp": "2026-08-04T10:01:57.428Z", "date_only": false, "value": "2026-08-04T10:01:57.428083Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnsea.com/post/3msaqzfrrnf2c", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "b72c6169-f8fb-4840-85d6-56a5bc356a2b", "url": "https://bsky.app/profile/vulnsea.com/post/3msaqzfrrnf2c"}, {"timestamp": "2026-08-06T04:00:04.391Z", "date_only": false, "value": "2026-08-06T04:00:04.391320Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ZerodayAlert/432", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "21737fcf-e182-496f-8146-c20d8b72e376", "url": "https://t.me/ZerodayAlert/432"}, {"timestamp": "2026-08-07T00:36:49.449Z", "date_only": false, "value": "2026-08-07T00:36:49.449184Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ZerodayAlert/432", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "0139c045-c383-4d06-a45c-d26185364ba7", "url": "https://t.me/ZerodayAlert/432"}, {"timestamp": "2026-08-07T10:47:36.666Z", "date_only": false, "value": "2026-08-07T10:47:36.666435Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-06)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "49c5eecd-4deb-41bb-9e50-1b2afb16f8cb"}, {"timestamp": "2026-08-19T21:00:05.900Z", "date_only": false, "value": "2026-08-19T21:00:05.900423Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberDispatch/249", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "ddcdb2fa-b792-4cae-b9cd-aedc9ed4fc81", "url": "https://t.me/CyberDispatch/249"}, {"timestamp": "2026-08-27T12:00:12.249Z", "date_only": false, "value": "2026-08-27T12:00:12.249908Z", "kind": "sighting", "label": "Seen", "source": "Telegram/SVZvTdeqqmSRakJEIQhn4CjyThzPklzbZgbnjRRXOSeUVHM", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "58ae98f2-a565-4e88-b08f-6bd163c8427d"}, {"timestamp": "2026-08-29T00:00:14.348Z", "date_only": false, "value": "2026-08-29T00:00:14.348754Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/SVZvTdeqqmSRakJEIQhn4CjyThzPklzbZgbnjRRXOSeUVHM", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "280f8f09-5c7a-4334-a97e-500ac5aae132"}, {"timestamp": "2026-09-02T01:00:12.618Z", "date_only": false, "value": "2026-09-02T01:00:12.618381Z", "kind": "sighting", "label": "Seen", "source": "Telegram/cT3ETXi8ueGY8kAtGyfu7wb0NUfCf_Oa836RYQyuDMgp6vQ", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "aab82cde-0081-4ae2-9899-7791e0288e25"}, {"timestamp": "2026-09-03T00:00:54.118Z", "date_only": false, "value": "2026-09-03T00:00:54.118727Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/cT3ETXi8ueGY8kAtGyfu7wb0NUfCf_Oa836RYQyuDMgp6vQ", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "d2066229-7c76-4789-b1a1-1f4e096b8dbb"}, {"timestamp": "2026-09-05T10:15:30.485Z", "date_only": false, "value": "2026-09-05T10:15:30.485267Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-04)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "8ab89684-bf1a-4922-ac26-ad5540bc2f9c"}, {"timestamp": "2026-09-11T10:15:39.204Z", "date_only": false, "value": "2026-09-11T10:15:39.204969Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-10)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "8895a863-cc0e-417e-96b2-a5255007f180"}, {"timestamp": "2026-09-20T10:00:04.727Z", "date_only": false, "value": "2026-09-20T10:00:04.727800Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-19)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "af2beef7-cd3b-4f50-9c75-7a29f851083d"}, {"timestamp": "2026-09-20T10:15:10.425Z", "date_only": false, "value": "2026-09-20T10:15:10.425066Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-19)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "aa0494c6-05f0-480d-a2a5-9e5fc75dd946"}, {"timestamp": "2026-09-23T00:00:00Z", "date_only": false, "value": "2026-09-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-23)", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "02349e5f-c348-441e-b542-5067de4ad825"}, {"timestamp": "2026-09-25T15:01:18Z", "date_only": false, "value": "2026-09-25T15:01:18.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/10wag-RztXSTjw4sFnC956zy8npKo-y_Yrozy7COHAxK1zY", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "5ca1f4b1-c90e-4946-9ad3-6d2181490c38"}, {"timestamp": "2026-09-25T15:01:18Z", "date_only": false, "value": "2026-09-25T15:01:18.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/10wag-RztXSTjw4sFnC956zy8npKo-y_Yrozy7COHAxK1zY", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "43549b96-317b-4592-a7e4-f10e76c3c75e"}, {"timestamp": "2026-10-05T07:00:14Z", "date_only": false, "value": "2026-10-05T07:00:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/yfkaxebEbjGCjzuIIrk3RntXzCC68IpQ_Pxn5xq2Y2qxYg0", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "9060ed5b-af2e-4969-b595-af25c2a04670"}, {"timestamp": "2026-10-05T07:00:14Z", "date_only": false, "value": "2026-10-05T07:00:14.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/yfkaxebEbjGCjzuIIrk3RntXzCC68IpQ_Pxn5xq2Y2qxYg0", "record": "CVE-2024-9474", "field": "creation_timestamp", "uuid": "fb043272-c4fd-4222-b8b0-332f30033307"}, {"timestamp": "2026-10-16T00:00:00Z", "date_only": false, "value": "2026-10-16T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2024-9474", "field": "timestamps.last_seen_at", "uuid": "d0e87f4a-7a67-4b54-b14f-84e5f884234b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-16T00:00:00Z", "date_only": true, "value": "2026-10-16", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2024-9474", "field": "evidence.0.details.observation_date", "uuid": "d0e87f4a-7a67-4b54-b14f-84e5f884234b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-16T00:00:00Z", "date_only": false, "value": "2026-10-16T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2024-9474", "field": "status.status_updated_at", "uuid": "d0e87f4a-7a67-4b54-b14f-84e5f884234b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-21T09:03:44Z", "date_only": false, "value": "2026-10-21T09:03:44+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2024-9474", "field": "timestamps.recorded_at", "uuid": "d0e87f4a-7a67-4b54-b14f-84e5f884234b", "status": {"status_reason": "confirmed", "exploited": true}}]}
