{"metadata": {"vulnerability": "CVE-2013-3918", "count": 47, "kinds": {"milestone": 4, "sighting": 16, "kev": 11, "other": 16}}, "data": [{"timestamp": "2013-06-03T00:00:00Z", "date_only": false, "value": "2013-06-03T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2013-3918", "field": "cveMetadata.dateReserved"}, {"timestamp": "2013-11-08T00:00:00Z", "date_only": false, "value": "2013-11-08T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "CVE-2013-3918", "field": "containers.cna.datePublic"}, {"timestamp": "2013-11-11T07:00:00Z", "date_only": false, "value": "2013-11-11T07:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://msrc.microsoft.com/blog/2013/11/activex-control-issue-being-addressed-in-update-tuesday/", "record": "CVE-2013-3918", "field": "creation_timestamp", "uuid": "1063414b-be8a-4b4e-a413-7c1d1f9d9b1c", "url": "https://msrc.microsoft.com/blog/2013/11/activex-control-issue-being-addressed-in-update-tuesday/"}, {"timestamp": "2013-11-12T01:00:00Z", "date_only": false, "value": "2013-11-12T01:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2013-3918", "field": "timestamps.asserted_at", "uuid": "80a0d4ea-4faa-48d2-9bc6-9cb130564935", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2013-11-12T01:00:00Z", "date_only": false, "value": "2013-11-12T01:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2013-3918", "field": "evidence.0.details.added_date", "uuid": "80a0d4ea-4faa-48d2-9bc6-9cb130564935", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2013-11-12T01:00:00Z", "date_only": false, "value": "2013-11-12T01:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2013-3918", "field": "timestamps.first_seen_at", "uuid": "80a0d4ea-4faa-48d2-9bc6-9cb130564935", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2013-11-12T01:00:00Z", "date_only": false, "value": "2013-11-12T01:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2013-3918", "field": "cveMetadata.datePublished"}, {"timestamp": "2013-11-12T01:00:00Z", "date_only": false, "value": "2013-11-12T01:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2013-3918", "field": "status.status_updated_at", "uuid": "80a0d4ea-4faa-48d2-9bc6-9cb130564935", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2013-11-12T07:00:00Z", "date_only": false, "value": "2013-11-12T07:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://msrc.microsoft.com/blog/2013/11/technical-details-of-the-targeted-attack-using-ie-vulnerability-cve-2013-3918/", "record": "CVE-2013-3918", "field": "creation_timestamp", "uuid": "df12b19a-59b1-4c59-877a-53c8450f3dc9", "url": "https://msrc.microsoft.com/blog/2013/11/technical-details-of-the-targeted-attack-using-ie-vulnerability-cve-2013-3918/"}, {"timestamp": "2013-11-12T14:35:00Z", "date_only": false, "value": "2013-11-12T14:35:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-7627-VGQ8-RCJV", "record": "GHSA-7627-VGQ8-RCJV", "field": "database_specific.nvd_published_at"}, {"timestamp": "2013-11-12T14:35:00Z", "date_only": false, "value": "2013-11-12T14:35Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2013-3918", "record": "GSD-2013-3918", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2013-11-12T14:35:11.713Z", "date_only": false, "value": "2013-11-12T14:35:11.713", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2013-3918", "record": "FKIE_CVE-2013-3918", "field": "published"}, {"timestamp": "2013-11-13T00:00:00Z", "date_only": false, "value": "2013-11-13T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTA-2013-AVI-629", "record": "CERTA-2013-AVI-629", "field": "revisions.0.revision_date"}, {"timestamp": "2013-11-27T00:00:00Z", "date_only": false, "value": "2013-11-27T00:00:00.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://www.exploit-db.com/exploits/29857", "record": "CVE-2013-3918", "field": "creation_timestamp", "uuid": "d3e0424e-76d8-45eb-a9be-9f20d6918e0e", "url": "https://www.exploit-db.com/exploits/29857"}, {"timestamp": "2018-05-29T15:50:33Z", "date_only": false, "value": "2018-05-29T15:50:33.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ms13_090_cardspacesigninhelper.rb", "record": "CVE-2013-3918", "field": "creation_timestamp", "uuid": "10d84946-c608-4e8a-9bba-b8907416684b", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ms13_090_cardspacesigninhelper.rb"}, {"timestamp": "2018-10-12T19:57:01Z", "date_only": false, "value": "2018-10-12T19:57:01.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "CVE-2013-3918", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2019-05-14T14:24:00Z", "date_only": false, "value": "2019-05-14T14:24Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2013-3918", "record": "GSD-2013-3918", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-05-14T01:03:34Z", "date_only": false, "value": "2022-05-14T01:03:34Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-7627-VGQ8-RCJV", "record": "GHSA-7627-VGQ8-RCJV", "field": "published"}, {"timestamp": "2023-12-13T01:22:22.905Z", "date_only": false, "value": "2023-12-13T01:22:22.905762Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2013-3918", "record": "GSD-2013-3918", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-06T16:22:01.629Z", "date_only": false, "value": "2024-08-06T16:22:01.629Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2013-3918", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-06T03:13:41Z", "date_only": false, "value": "2025-02-06T03:13:41.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2013-3918", "field": "creation_timestamp", "uuid": "5d7d139c-69cc-4dc6-8a45-ef1047d1a205"}, {"timestamp": "2025-02-23T04:09:19Z", "date_only": false, "value": "2025-02-23T04:09:19.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2013-3918", "field": "creation_timestamp", "uuid": "b091fa4c-3cd8-4a2c-beb9-acc390e4a977"}, {"timestamp": "2025-08-31T03:12:56Z", "date_only": false, "value": "2025-08-31T03:12:56.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "record": "CVE-2013-3918", "field": "creation_timestamp", "uuid": "3029ebb5-26fe-4654-aca3-cf88827baee2"}, {"timestamp": "2025-10-04T03:55:30.388Z", "date_only": false, "value": "2025-10-04T03:55:30.388596Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2013-3918", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-10-04T03:55:30.388Z", "date_only": false, "value": "2025-10-04T03:55:30.388596Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2013-3918", "record": "FKIE_CVE-2013-3918", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-10-06T00:00:00Z", "date_only": false, "value": "2025-10-06T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2013-3918", "field": "timestamps.asserted_at", "uuid": "26edd392-dae0-49bc-ac05-fdbcc1689c83", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-10-06T00:00:00Z", "date_only": true, "value": "2025-10-06", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2013-3918", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2025-10-06T00:00:00Z", "date_only": true, "value": "2025-10-06", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2013-3918", "field": "evidence.0.details.date_added", "uuid": "26edd392-dae0-49bc-ac05-fdbcc1689c83", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-10-06T00:00:00Z", "date_only": false, "value": "2025-10-06T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2013-3918", "field": "timestamps.first_seen_at", "uuid": "26edd392-dae0-49bc-ac05-fdbcc1689c83", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-10-06T00:00:00Z", "date_only": false, "value": "2025-10-06T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2013-3918", "field": "status.status_updated_at", "uuid": "26edd392-dae0-49bc-ac05-fdbcc1689c83", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-10-06T00:00:00Z", "date_only": false, "value": "2025-10-06T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2013-3918", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2025-10-06T18:10:02Z", "date_only": false, "value": "2025-10-06T18:10:02.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2013-3918", "field": "creation_timestamp", "uuid": "7ae1a58a-17e4-4990-a489-a35b1fd02deb"}, {"timestamp": "2025-10-06T19:30:15.155Z", "date_only": false, "value": "2025-10-06T19:30:15.155552Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/4868671", "record": "CVE-2013-3918", "field": "creation_timestamp", "uuid": "2c867642-6249-48ab-92e7-46e6fac29edb", "url": "https://feedsin.space/feed/CISAKevBot/items/4868671"}, {"timestamp": "2025-10-07T03:22:07Z", "date_only": false, "value": "2025-10-07T03:22:07.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2013-3918", "field": "creation_timestamp", "uuid": "f42fd1c0-2b21-43c8-bee6-d5bdffbe11c4"}, {"timestamp": "2025-10-07T06:56:20.127Z", "date_only": false, "value": "2025-10-07T06:56:20.127617Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3m2lkc6nlac2h", "record": "CVE-2013-3918", "field": "creation_timestamp", "uuid": "d222ffcf-c1cd-435a-b5e9-602478829cb8", "url": "https://bsky.app/profile/ytroncal.bsky.social/post/3m2lkc6nlac2h"}, {"timestamp": "2025-10-07T21:02:35.317Z", "date_only": false, "value": "2025-10-07T21:02:35.317757Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m2mzldh5yv2v", "record": "CVE-2013-3918", "field": "creation_timestamp", "uuid": "58fdaa6e-6439-4bb1-96f5-ba193ab8767d", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m2mzldh5yv2v"}, {"timestamp": "2025-10-22T00:05:40.129Z", "date_only": false, "value": "2025-10-22T00:05:40.129Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2013-3918", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:05:40.129Z", "date_only": false, "value": "2025-10-22T00:05:40.129Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2013-3918", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T03:30:35Z", "date_only": false, "value": "2025-10-22T03:30:35Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-7627-VGQ8-RCJV", "record": "GHSA-7627-VGQ8-RCJV", "field": "modified"}, {"timestamp": "2025-10-27T00:00:00Z", "date_only": true, "value": "2025-10-27", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2013-3918", "field": "evidence.0.details.due_date", "uuid": "26edd392-dae0-49bc-ac05-fdbcc1689c83", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-02T12:25:39Z", "date_only": false, "value": "2026-02-02T12:25:39+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2013-3918", "field": "timestamps.recorded_at", "uuid": "26edd392-dae0-49bc-ac05-fdbcc1689c83", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-02T12:25:51.132Z", "date_only": false, "value": "2026-02-02T12:25:51.132599Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/26edd392-dae0-49bc-ac05-fdbcc1689c83", "record": "CVE-2013-3918", "field": "creation_timestamp", "uuid": "74ed227e-9545-4dfa-bc64-b1274d9f26c9", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/26edd392-dae0-49bc-ac05-fdbcc1689c83"}, {"timestamp": "2026-06-16T23:56:01.110Z", "date_only": false, "value": "2026-06-16T23:56:01.110", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2013-3918", "record": "FKIE_CVE-2013-3918", "field": "lastModified"}, {"timestamp": "2026-06-19T16:45:36.252Z", "date_only": false, "value": "2026-06-19T16:45:36.252681Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9d3d0de5-02f5-4d01-ba5d-0b8d62b0f79a", "record": "CVE-2013-3918", "field": "creation_timestamp", "uuid": "e9e83c39-c896-4293-b251-4059b36a6c3c", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9d3d0de5-02f5-4d01-ba5d-0b8d62b0f79a"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2013-3918", "field": "timestamps.recorded_at", "uuid": "80a0d4ea-4faa-48d2-9bc6-9cb130564935", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:04:08.384Z", "date_only": false, "value": "2026-06-23T14:04:08.384035Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/80a0d4ea-4faa-48d2-9bc6-9cb130564935", "record": "CVE-2013-3918", "field": "creation_timestamp", "uuid": "fea45b43-da63-41cd-ab35-d78db9f4370d", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/80a0d4ea-4faa-48d2-9bc6-9cb130564935"}, {"timestamp": "2026-08-14T16:00:06.021Z", "date_only": false, "value": "2026-08-14T16:00:06.021116Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/1184", "record": "CVE-2013-3918", "field": "creation_timestamp", "uuid": "dc534965-e224-4ab1-b123-1c14bc67419c", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-61882 \u2014 \u0431\u0430\u0433 \u0432 Oracle E-Business Suite. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 servlet \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 XML, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442 \u0441\u0435\u0440\u0432\u0435\u0440 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c\u0441\u044f \u043f\u043e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u043c\u0443 URL (SSRF). \u0417\u0430\u0442\u0435\u043c \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 return_url (CRLF-\u0432\u0441\u0442\u0430\u0432\u043a\u0430) \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u044c \u0432\u043d\u0435\u0448\u043d\u0438\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 \u0432 POST \u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0435 TCP-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435, \u0434\u043e\u0436\u0430\u0442\u044c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0438\u0441\u0443 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442 \u043d\u0435\u0436\u0435\u043b\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0438\u043b\u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0441\u0442 \u043f\u043e\u043b\u0435\u0437\u043d\u0443\u044e \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0443.\n\n\ud83d\udd35 CVE-2025-20362 \u2014 \u043e\u0431\u0445\u043e\u0434 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 VPN \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Cisco Secure Firewall ASA/FTD. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 HTTP(S)-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a URL-\u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0430\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e\u043b\u0436\u043d\u044b \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c \u043e\u0431\u0445\u043e\u0434\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u0412 \u0441\u0432\u044f\u0437\u043a\u0435 \u0441 CVE-2025-20333 \u0438 CVE-2025-20363 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a RCE \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445, \u0443\u0436\u0435 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u044b \u0441\u043b\u0443\u0447\u0430\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 in wild.\n\n\ud83d\udd35 CVE-2025-27915 \u2014 XSS-\u0431\u0430\u0433 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 iCalendar (.ICS, \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 Zimbra), \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 .ics-\u0432\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0441 \u043e\u0431\u0444\u0443\u0441\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c JavaScript-\u043a\u043e\u0434\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u043b\u0441\u044f \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0441\u0435\u0441\u0441\u0438\u0438 \u0436\u0435\u0440\u0442\u0432\u044b \u043f\u0440\u0438 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0435 \u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043a\u0430\u043b\u0435\u043d\u0434\u0430\u0440\u044f. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u043e \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u043a\u0440\u0430\u0441\u0442\u044c \u0441\u0435\u0441\u0441\u0438\u043e\u043d\u043d\u044b\u0435 \u0442\u043e\u043a\u0435\u043d\u044b \u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043f\u0435\u0440\u0435\u0441\u044b\u043b\u043a\u0438 \u0432 \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u043c \u044f\u0449\u0438\u043a\u0435 \u0438 \u043c\u0430\u0441\u0441\u043e\u0432\u043e \u043a\u0440\u0430\u0441\u0442\u044c \u043f\u0438\u0441\u044c\u043c\u0430 \u0431\u0435\u0437 \u043f\u0440\u044f\u043c\u043e\u0433\u043e \u0432\u0437\u043b\u043e\u043c\u0430 \u043f\u0430\u0440\u043e\u043b\u044f.\n\n\ud83d\udd35 CISA \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u0441\u0435\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 in wild \u2014 CVE-2010-3765 (RCE, Mozilla), CVE-2010-3962 (\u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u0430\u043c\u044f\u0442\u0438, Internet Explorer), CVE-2011-3402 (RCE \u0432 Windows), CVE-2013-3918 (\u0432\u044b\u0445\u043e\u0434 \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u043f\u0430\u043c\u044f\u0442\u0438, Windows), CVE-2021-22555 (\u0432\u044b\u0445\u043e\u0434 \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u043a\u0443\u0447\u0438, Linux), CVE-2021-43226 (\u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, Windows), \u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u0436\u0435 \u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u0430\u044f \u0440\u0430\u043d\u0435\u0435 CVE-2025-61882.\n\n#blue_team #CVE_\u0434\u043d\u044f", "url": "https://t.me/purp_sec/1184"}]}