{"metadata": {"vulnerability": "ghsa-vjh7-7g9h-fjfh", "count": 11, "kinds": {"milestone": 1, "sighting": 9, "kev": 0, "other": 1}}, "data": [{"timestamp": "2025-02-12T19:47:52Z", "date_only": false, "value": "2025-02-12T19:47:52Z", "kind": "milestone", "label": "Published", "source": "github", "record": "ghsa-vjh7-7g9h-fjfh", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-02-12T19:47:53Z", "date_only": false, "value": "2025-02-12T19:47:53Z", "kind": "other", "label": "Updated", "source": "github", "record": "ghsa-vjh7-7g9h-fjfh", "field": "modified"}, {"timestamp": "2025-02-20T12:03:12.971Z", "date_only": false, "value": "2025-02-20T12:03:12.971000Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/oracularhades.com/post/3limaobomek22", "record": "GHSA-vjh7-7g9h-fjfh", "field": "creation_timestamp", "uuid": "3d931780-c182-4a55-a585-d4aa0bc430fb", "url": "https://bsky.app/profile/oracularhades.com/post/3limaobomek22"}, {"timestamp": "2025-03-06T12:59:52Z", "date_only": false, "value": "2025-03-06T12:59:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/11893", "record": "GHSA-VJH7-7G9H-FJFH", "field": "creation_timestamp", "uuid": "106d3636-9b98-4397-a4b7-4d01652ec117", "content": "#exploit\n1. SSHNuke Exploit\nhttps://blog.doyensec.com/2025/03/04/exploitable-sshd.html\n\n2. CVE-2024-43639:\nRCE in Microsoft Windows KDC Proxy\nhttps://www.zerodayinitiative.com/blog/2025/3/3/cve-2024-43639\n\n3. Private key extraction in ECDSA upon signing a malformed input\u00a0\nhttps://github.com/indutny/elliptic/security/advisories/GHSA-vjh7-7g9h-fjfh", "url": "https://t.me/CyberSecurityTechnologies/11893", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-03-07T05:49:30Z", "date_only": false, "value": "2025-03-07T05:49:30.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ton618cyber/7140", "record": "GHSA-VJH7-7G9H-FJFH", "field": "creation_timestamp", "uuid": "835d1952-c895-4960-9205-d6ca5a910d83", "content": "#exploit\n1. SSHNuke Exploit\nhttps://blog.doyensec.com/2025/03/04/exploitable-sshd.html\n\n2. CVE-2024-43639:\nRCE in Microsoft Windows KDC Proxy\nhttps://www.zerodayinitiative.com/blog/2025/3/3/cve-2024-43639\n\n3. Private key extraction in ECDSA upon signing a malformed input\u00a0\nhttps://github.com/indutny/elliptic/security/advisories/GHSA-vjh7-7g9h-fjfh", "url": "https://t.me/ton618cyber/7140", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-03-07T05:49:31Z", "date_only": false, "value": "2025-03-07T05:49:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ton618cyber/2690", "record": "GHSA-VJH7-7G9H-FJFH", "field": "creation_timestamp", "uuid": "fcf759a3-40d7-4160-85bd-1cff20391b84", "content": "#exploit\n1. SSHNuke Exploit\nhttps://blog.doyensec.com/2025/03/04/exploitable-sshd.html\n\n2. CVE-2024-43639:\nRCE in Microsoft Windows KDC Proxy\nhttps://www.zerodayinitiative.com/blog/2025/3/3/cve-2024-43639\n\n3. Private key extraction in ECDSA upon signing a malformed input\u00a0\nhttps://github.com/indutny/elliptic/security/advisories/GHSA-vjh7-7g9h-fjfh", "url": "https://t.me/ton618cyber/2690", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-20T22:00:04.735Z", "date_only": false, "value": "2026-07-20T22:00:04.735959Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pphm_HackerNews/158", "record": "GHSA-VJH7-7G9H-FJFH", "field": "creation_timestamp", "uuid": "57a57821-778f-4115-a6fb-5e0df178ca02", "url": "https://t.me/pphm_HackerNews/158"}, {"timestamp": "2026-07-21T00:00:09.608Z", "date_only": false, "value": "2026-07-21T00:00:09.608592Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pphm_HackerNews/158", "record": "GHSA-VJH7-7G9H-FJFH", "field": "creation_timestamp", "uuid": "2ea2059b-07a1-464d-8afe-425047ddd2df", "url": "https://t.me/pphm_HackerNews/158"}, {"timestamp": "2026-07-26T02:00:32.244Z", "date_only": false, "value": "2026-07-26T02:00:32.244098Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/3678", "record": "GHSA-VJH7-7G9H-FJFH", "field": "creation_timestamp", "uuid": "bf6175bb-63e1-4c7f-8332-05ee5079fec8", "url": "https://t.me/EchelonEyes/3678"}, {"timestamp": "2026-07-27T00:00:37.988Z", "date_only": false, "value": "2026-07-27T00:00:37.988472Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/3678", "record": "GHSA-VJH7-7G9H-FJFH", "field": "creation_timestamp", "uuid": "6b95049b-cfe1-45e0-ae5f-eb366bb865e1", "url": "https://t.me/EchelonEyes/3678"}, {"timestamp": "2026-07-28T00:00:51.643Z", "date_only": false, "value": "2026-07-28T00:00:51.643766Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/EchelonEyes/3678", "record": "GHSA-VJH7-7G9H-FJFH", "field": "creation_timestamp", "uuid": "c26a17f8-5772-40cd-a263-9223796f0ade", "url": "https://t.me/EchelonEyes/3678", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}], "metrics": {"as_of": "2026-11-14T06:18:12.330Z", "anchors": {"origin": {"timestamp": "2025-02-12T19:47:52Z", "date_only": false, "value": "2025-02-12T19:47:52Z", "kind": "milestone", "label": "Published", "source": "github", "record": "ghsa-vjh7-7g9h-fjfh", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2025-02-12T19:47:52Z", "date_only": false, "value": "2025-02-12T19:47:52Z", "kind": "milestone", "label": "Published", "source": "github", "record": "ghsa-vjh7-7g9h-fjfh", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2025-03-06T12:59:52Z", "date_only": false, "value": "2025-03-06T12:59:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/11893", "record": "GHSA-VJH7-7G9H-FJFH", "field": "creation_timestamp", "uuid": "106d3636-9b98-4397-a4b7-4d01652ec117", "content": "#exploit\n1. SSHNuke Exploit\nhttps://blog.doyensec.com/2025/03/04/exploitable-sshd.html\n\n2. CVE-2024-43639:\nRCE in Microsoft Windows KDC Proxy\nhttps://www.zerodayinitiative.com/blog/2025/3/3/cve-2024-43639\n\n3. Private key extraction in ECDSA upon signing a malformed input\u00a0\nhttps://github.com/indutny/elliptic/security/advisories/GHSA-vjh7-7g9h-fjfh", "url": "https://t.me/CyberSecurityTechnologies/11893", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 1876320.0, "hours": 521.2, "days": 21.716666666666665, "min_seconds": 1876320.0, "max_seconds": 1876320.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-02-12T19:47:52Z", "date_only": false, "value": "2025-02-12T19:47:52Z", "kind": "milestone", "label": "Published", "source": "github", "record": "ghsa-vjh7-7g9h-fjfh", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-03-06T12:59:52Z", "date_only": false, "value": "2025-03-06T12:59:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/11893", "record": "GHSA-VJH7-7G9H-FJFH", "field": "creation_timestamp", "uuid": "106d3636-9b98-4397-a4b7-4d01652ec117", "content": "#exploit\n1. SSHNuke Exploit\nhttps://blog.doyensec.com/2025/03/04/exploitable-sshd.html\n\n2. CVE-2024-43639:\nRCE in Microsoft Windows KDC Proxy\nhttps://www.zerodayinitiative.com/blog/2025/3/3/cve-2024-43639\n\n3. Private key extraction in ECDSA upon signing a malformed input\u00a0\nhttps://github.com/indutny/elliptic/security/advisories/GHSA-vjh7-7g9h-fjfh", "url": "https://t.me/CyberSecurityTechnologies/11893", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 55247420.330489, "hours": 15346.505647358055, "days": 639.4377353065856, "min_seconds": 55247420.330489, "max_seconds": 55247420.330489, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-02-12T19:47:52Z", "date_only": false, "value": "2025-02-12T19:47:52Z", "kind": "milestone", "label": "Published", "source": "github", "record": "ghsa-vjh7-7g9h-fjfh", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-14T06:18:12.330Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 53371100.330489, "hours": 14825.305647358056, "days": 617.721068639919, "min_seconds": 53371100.330489, "max_seconds": 53371100.330489, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-03-06T12:59:52Z", "date_only": false, "value": "2025-03-06T12:59:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/11893", "record": "GHSA-VJH7-7G9H-FJFH", "field": "creation_timestamp", "uuid": "106d3636-9b98-4397-a4b7-4d01652ec117", "content": "#exploit\n1. SSHNuke Exploit\nhttps://blog.doyensec.com/2025/03/04/exploitable-sshd.html\n\n2. CVE-2024-43639:\nRCE in Microsoft Windows KDC Proxy\nhttps://www.zerodayinitiative.com/blog/2025/3/3/cve-2024-43639\n\n3. Private key extraction in ECDSA upon signing a malformed input\u00a0\nhttps://github.com/indutny/elliptic/security/advisories/GHSA-vjh7-7g9h-fjfh", "url": "https://t.me/CyberSecurityTechnologies/11893", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-14T06:18:12.330Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}