{"metadata": {"vulnerability": "CVE-2018-20062", "count": 72, "kinds": {"milestone": 4, "sighting": 34, "kev": 17, "other": 17}}, "data": [{"timestamp": "2018-12-11T00:00:00Z", "date_only": false, "value": "2018-12-11T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / mitre", "record": "CVE-2018-20062", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2018-12-11T00:00:00Z", "date_only": false, "value": "2018-12-11T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2018-20062", "field": "cveMetadata.dateReserved"}, {"timestamp": "2018-12-11T18:00:00Z", "date_only": false, "value": "2018-12-11T18:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2018-20062", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2018-12-11T18:29:00Z", "date_only": false, "value": "2018-12-11T18:29:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-GF7C-4W4P-7CM5", "record": "GHSA-GF7C-4W4P-7CM5", "field": "database_specific.nvd_published_at"}, {"timestamp": "2018-12-11T18:29:00Z", "date_only": false, "value": "2018-12-11T18:29Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2018-20062", "record": "GSD-2018-20062", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2018-12-11T18:29:00.197Z", "date_only": false, "value": "2018-12-11T18:29:00.197", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2018-20062", "record": "FKIE_CVE-2018-20062", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2019-01-18T14:45:48Z", "date_only": false, "value": "2019-01-18T14:45:48.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/SecLabNews/4058", "record": "CVE-2018-20062", "field": "creation_timestamp", "uuid": "e5622383-9b32-43f0-b3ec-9f388e46d495", "content": "\u0412 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 \u043c\u0438\u043d\u0443\u0432\u0448\u0435\u0433\u043e \u0433\u043e\u0434\u0430 SecurityLab \u0441\u043e\u043e\u0431\u0449\u0430\u043b \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u043c PHP-\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 ThinkPHP, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0432\u0448\u0435\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434. \u0425\u043e\u0442\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2018-20062) \u0443\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u200b\u200b\u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u043c, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443.    \n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 ThinkPHP", "url": "https://t.me/SecLabNews/4058", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2019-01-18T19:49:50Z", "date_only": false, "value": "2019-01-18T19:49:50.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/5c422d7a-ef88-4ce7-ae90-75e20a021402", "record": "CVE-2018-20062", "field": "creation_timestamp", "uuid": "66ffea0d-ee5b-42de-bfb9-0ab1e3858788"}, {"timestamp": "2019-02-06T01:53:29Z", "date_only": false, "value": "2019-02-06T01:53:29.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/5c5a3d7b-ba70-474a-bd8a-1b5a0a021402", "record": "CVE-2018-20062", "field": "creation_timestamp", "uuid": "8876a4e9-4122-4aa8-a378-5fcc7b122b1f"}, {"timestamp": "2020-04-13T14:35:55Z", "date_only": false, "value": "2020-04-13T14:35:55.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/thinkphp_rce.rb", "record": "CVE-2018-20062", "field": "creation_timestamp", "uuid": "1354bcfc-3ff1-4710-a228-de0e9eb7045d", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/thinkphp_rce.rb"}, {"timestamp": "2020-04-14T17:06:03Z", "date_only": false, "value": "2020-04-14T17:06:03.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2018-20062", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2020-04-14T18:15:00Z", "date_only": false, "value": "2020-04-14T18:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2018-20062", "record": "GSD-2018-20062", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2020-04-16T00:00:00Z", "date_only": false, "value": "2020-04-16T00:00:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://www.exploit-db.com/exploits/48333", "record": "CVE-2018-20062", "field": "creation_timestamp", "uuid": "8016f088-4322-4a8b-ae4c-5bdf87f01518", "url": "https://www.exploit-db.com/exploits/48333", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2020-06-25T12:24:13Z", "date_only": false, "value": "2020-06-25T12:24:13.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/e1d58ad8-7800-491b-a63b-a03d081914d4", "record": "CVE-2018-20062", "field": "creation_timestamp", "uuid": "f63427c3-be4a-4242-a74f-a56ed378d6a2"}, {"timestamp": "2020-06-26T06:10:05Z", "date_only": false, "value": "2020-06-26T06:10:05.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/5ef48179-b724-4792-abb9-4491ac13a7a7", "record": "CVE-2018-20062", "field": "creation_timestamp", "uuid": "b60dac2d-cc30-437f-be33-08b0503134f3"}, {"timestamp": "2020-10-09T13:23:55Z", "date_only": false, "value": "2020-10-09T13:23:55.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/e6fe42d5-2d65-4430-a1f1-dc057b94d89e", "record": "CVE-2018-20062", "field": "creation_timestamp", "uuid": "245f66fd-cca2-4853-beb4-fe849a657a8b"}, {"timestamp": "2020-10-09T13:26:55Z", "date_only": false, "value": "2020-10-09T13:26:55.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/b60ecd6e-648d-4bc4-a6ad-3527a2216be1", "record": "CVE-2018-20062", "field": "creation_timestamp", "uuid": "dd02e7a7-d7a1-466b-b8e1-5753a33af635"}, {"timestamp": "2020-10-16T03:00:22Z", "date_only": false, "value": "2020-10-16T03:00:22.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/b909d469-014d-4c2b-a989-4618f5a3a92b", "record": "CVE-2018-20062", "field": "creation_timestamp", "uuid": "7a0c42d6-9f5e-41bb-9903-5c2e9cf2095d"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2018-20062", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "f3731dfd-5683-40f8-8aed-10e677f72a37", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2018-20062", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "336e841d-69cb-4811-ae24-2b1d8d9cb9c1", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2018-20062", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "other", "label": "Catalog added", "source": "gsd \u00b7 GSD-2018-20062", "record": "GSD-2018-20062", "field": "namespaces.cisa.gov.dateAdded"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2018-20062", "field": "evidence.0.details.added_date", "uuid": "336e841d-69cb-4811-ae24-2b1d8d9cb9c1", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2018-20062", "field": "evidence.0.details.date_added", "uuid": "f3731dfd-5683-40f8-8aed-10e677f72a37", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2018-20062", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "f3731dfd-5683-40f8-8aed-10e677f72a37", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2018-20062", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "336e841d-69cb-4811-ae24-2b1d8d9cb9c1", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2018-20062", "field": "status.status_updated_at", "uuid": "f3731dfd-5683-40f8-8aed-10e677f72a37", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2018-20062", "field": "status.status_updated_at", "uuid": "336e841d-69cb-4811-ae24-2b1d8d9cb9c1", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2018-20062", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2021-11-08T08:58:20Z", "date_only": false, "value": "2021-11-08T08:58:20.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "record": "CVE-2018-20062", "field": "creation_timestamp", "uuid": "2f2eec5c-771b-43a5-8ed9-48654d6f3405"}, {"timestamp": "2021-11-20T09:53:52Z", "date_only": false, "value": "2021-11-20T09:53:52.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2018-20062", "field": "creation_timestamp", "uuid": "d1899987-f348-4e83-bd44-7b1bae48748d"}, {"timestamp": "2022-04-14T15:17:01Z", "date_only": false, "value": "2022-04-14T15:17:01.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/NeKaspersky/2117", "record": "CVE-2018-20062", "field": "creation_timestamp", "uuid": "eb3d9a6b-1c58-49aa-a3be-49883d2d4079", "content": "\u041d\u043e\u0432\u044b\u0439 \u0431\u043e\u0442\u043d\u0435\u0442 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0432\u0435\u0440\u0431\u0443\u0435\u0442 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u044b \u0438 IoT-\u0434\u0435\u0432\u0430\u0439\u0441\u044b \u0432 \u0441\u0432\u043e\u0438 \u0440\u044f\u0434\u044b\n\n\u0410\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0438 \u0443\u0433\u0440\u043e\u0437 \u0438\u0437 Fortinet \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043c\u0430\u043b\u0432\u0430\u0440\u044c \u00ab\u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435\u00bb, \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0435\u0435 \u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043e\u0442\u0447\u0435\u0442 \u043e \u0435\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u0435.  \u041f\u043e \u0438\u0445 \u0441\u043b\u043e\u0432\u0430\u043c, Enemybot \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d \u043d\u0430 \u0431\u0430\u0437\u0435 Mirai \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u0437\u0430 \u0441\u0447\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u043e\u0443\u0442\u0435\u0440\u0430\u0445 \u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u0412\u0435\u0449\u0435\u0439.  \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u0441\u0442\u043e\u044f\u0449\u0438\u0435 \u0437\u0430 \u0431\u043e\u0442\u043d\u0435\u0442\u043e\u043c, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043d\u0430 \u043a\u0440\u0438\u043f\u0442\u043e-\u043c\u0430\u0439\u043d\u0438\u043d\u0433\u0435 \u0438 DDoS-\u0430\u0442\u0430\u043a\u0430\u0445 \u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0431\u043e\u0442\u043e\u0432 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0438\u0436\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0438\u0445 \u0446\u0435\u043b\u0435\u0439.\n\nEnemybot \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043e\u0431\u0444\u0443\u0441\u043a\u0430\u0446\u0438\u044e \u0441\u0442\u0440\u043e\u043a, \u0432 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a \u0435\u0433\u043e C2 \u043f\u0440\u044f\u0447\u0435\u0442\u0441\u044f \u0432 \u0441\u0435\u0442\u0438 Tor, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043e\u0431\u0435\u0437\u0433\u043b\u0430\u0432\u0438\u0442\u044c \u0431\u043e\u0442\u043d\u0435\u0442 \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u0442\u0438\u0447\u043d\u043e.  \u0421\u0440\u0430\u0437\u0443 \u043f\u043e\u0441\u043b\u0435 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0433\u043e \u0434\u0435\u0432\u0430\u0439\u0441\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u0441 C2 \u0438 \u043e\u0436\u0438\u0434\u0430\u0435\u0442 \u043f\u043e\u0441\u0442\u0443\u043f\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434. \u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043d\u0438\u0445 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 DDoS-\u0430\u0442\u0430\u043a\u0430\u043c\u0438, \u043d\u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0431\u043e\u0442\u043d\u0435\u0442\u0430 \u044d\u0442\u0438\u043c \u043d\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u044e\u0442\u0441\u044f. \u0411\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u043a\u043e\u0441\u044f\u0447\u043d\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u0441 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043a\u0430\u0447\u0430\u043b\u0438\u0441\u044c \u0431\u0438\u043d\u0430\u0440\u043d\u0438\u043a\u0438 Enemybot, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0432\u044b\u044f\u0432\u0438\u0442\u044c \u0441\u043f\u0438\u0441\u043e\u043a \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440: \u043d\u0430 \u0442\u0435\u043a\u0443\u0449\u0438\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 Enemybot \u0441\u043e\u0431\u0440\u0430\u043d \u043f\u043e\u0434 x86, x64, i686, darwin, bsd, arm \u0438 arm64, ppc, m68k \u0438 spc.\n\n\u0427\u0442\u043e \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, Fortinet \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043b\u0438, \u0447\u0442\u043e 3 CVE \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432\u0441\u0435\u043c\u0438 \u0441\u0431\u043e\u0440\u043a\u0430\u043c\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u0430:\n\u2022 CVE-2020-17456: RCE \u0432 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 Seowon Intech SLC-130 \u0438 SLR-120S (CVSS 9.8).\n\u2022 CVE-2018-10823: RCE \u0432 D-Link DWR (CVSS 8.8).\n\u2022 CVE-2022-27226: \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 cronjob (\u043e\u0434\u0438\u043d \u0438\u0437 \u043d\u0438\u043a\u0441\u043e\u0432\u044b\u0445 \u0434\u0435\u043c\u043e\u043d\u043e\u0432 \u0430\u0432\u0442\u043e\u0441\u0442\u0430\u0440\u0442\u0430) \u0432 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 iRZ (CVSS 8.8).\n\n\u0414\u0440\u0443\u0433\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u043b\u0438\u0448\u044c \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438 \u0432\u0435\u0440\u0441\u0438\u044f\u043c\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u0430: CVE-2022-25075-25084 \u0432 TOTOLINK, CVE-2021-44228/2021-45046 (Log4Shell), CVE-2021-41773/CVE-2021-42013 \u0432 HTTP-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 Apache, CVE-2018-20062 \u0432 ThinkPHP CMS, CVE-2017-18368 \u0432 Zyxel P660HN, CVE-2016-6277 \u0432 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 NETGEAR, CVE-2015-2051 \u0432 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 D-Link \u0438\nCVE-2014-9118 \u0432 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 Zhone.\n@NeKaspersky", "url": "https://t.me/NeKaspersky/2117", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2022-05-03T00:00:00Z", "date_only": true, "value": "2022-05-03", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2018-20062", "field": "evidence.0.details.due_date", "uuid": "f3731dfd-5683-40f8-8aed-10e677f72a37", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-05-03T00:00:00Z", "date_only": true, "value": "2022-05-03", "kind": "other", "label": "Remediation due", "source": "gsd \u00b7 GSD-2018-20062", "record": "GSD-2018-20062", "field": "namespaces.cisa.gov.dueDate"}, {"timestamp": "2022-05-13T01:27:19Z", "date_only": false, "value": "2022-05-13T01:27:19Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-GF7C-4W4P-7CM5", "record": "GHSA-GF7C-4W4P-7CM5", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-07-14T13:36:27Z", "date_only": false, "value": "2022-07-14T13:36:27.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/8bf50bb8-94dd-4004-a646-5f78db6f0b6a", "record": "CVE-2018-20062", "field": "creation_timestamp", "uuid": "d151feef-382e-4663-9cae-731bae547470"}, {"timestamp": "2022-08-28T00:00:00Z", "date_only": true, "value": "2022-08-28", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2018-20062", "field": "evidence.0.details.observation_date", "uuid": "616e9bbd-1046-4edc-a8c6-c5984b2754ae", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-15T04:27:47Z", "date_only": false, "value": "2023-10-15T04:27:47+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2018-20062", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "616e9bbd-1046-4edc-a8c6-c5984b2754ae", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-15T04:27:47Z", "date_only": false, "value": "2023-10-15T04:27:47+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2018-20062", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "616e9bbd-1046-4edc-a8c6-c5984b2754ae", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-15T04:27:47Z", "date_only": false, "value": "2023-10-15T04:27:47+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2018-20062", "field": "timestamps.last_seen_at", "uuid": "616e9bbd-1046-4edc-a8c6-c5984b2754ae", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-15T04:27:47Z", "date_only": false, "value": "2023-10-15T04:27:47+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2018-20062", "field": "status.status_updated_at", "uuid": "616e9bbd-1046-4edc-a8c6-c5984b2754ae", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-12-13T01:22:29.078Z", "date_only": false, "value": "2023-12-13T01:22:29.078364Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2018-20062", "record": "GSD-2018-20062", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-06-07T02:03:50Z", "date_only": false, "value": "2024-06-07T02:03:50.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/BleepingComputer/20110", "record": "CVE-2018-20062", "field": "creation_timestamp", "uuid": "db68cb5e-5397-4ef3-9162-581a67f59a03", "content": "\u200aHackers exploit 2018 ThinkPHP flaws to install \u2018Dama\u2019 web shells\n\nChinese threat actors are targeting ThinkPHP applications vulnerable to CVE-2018-20062 and CVE-2019-9082\u00a0to install a persistent web shell named Dama. [...]\n\nhttps://www.bleepingcomputer.com/news/security/hackers-exploit-2018-thinkphp-flaws-to-install-dama-web-shells/", "url": "https://t.me/BleepingComputer/20110", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2024-08-05T11:51:18.951Z", "date_only": false, "value": "2024-08-05T11:51:18.951Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2018-20062", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-12-24T20:21:40.051Z", "date_only": false, "value": "2024-12-24T20:21:40.051843Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2970914", "record": "CVE-2018-20062", "field": "creation_timestamp", "uuid": "b3d42b34-9fdc-4106-a1e1-39065ba6c0e6", "url": "https://feedsin.space/feed/CISAKevBot/items/2970914"}, {"timestamp": "2025-02-04T20:37:53.883Z", "date_only": false, "value": "2025-02-04T20:37:53.883297Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2018-20062", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-02-04T20:37:53.883Z", "date_only": false, "value": "2025-02-04T20:37:53.883297Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2018-20062", "record": "FKIE_CVE-2018-20062", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-06T03:13:43Z", "date_only": false, "value": "2025-02-06T03:13:43.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2018-20062", "field": "creation_timestamp", "uuid": "72244bf4-9d67-4c05-8acc-0184d50d012b"}, {"timestamp": "2025-02-23T02:09:40Z", "date_only": false, "value": "2025-02-23T02:09:40.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2018-20062", "field": "creation_timestamp", "uuid": "79cebd02-7e11-4e13-b6eb-ed8e0475bc20"}, {"timestamp": "2025-02-23T04:10:07Z", "date_only": false, "value": "2025-02-23T04:10:07.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2018-20062", "field": "creation_timestamp", "uuid": "5d151ef4-ec83-49ae-9efc-499ffed9f948"}, {"timestamp": "2025-05-07T00:00:00Z", "date_only": false, "value": "2025-05-07T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-07)", "record": "CVE-2018-20062", "field": "creation_timestamp", "uuid": "8afbe583-bf94-4919-a9d0-b8d1419b8f0b"}, {"timestamp": "2025-05-19T12:31:37Z", "date_only": false, "value": "2025-05-19T12:31:37.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2018/CVE-2018-20062.yaml", "record": "CVE-2018-20062", "field": "creation_timestamp", "uuid": "93e20540-710f-4552-9636-edd934699211", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2018/CVE-2018-20062.yaml"}, {"timestamp": "2025-05-20T21:02:18.049Z", "date_only": false, "value": "2025-05-20T21:02:18.049167Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lpmyc5szh62u", "record": "CVE-2018-20062", "field": "creation_timestamp", "uuid": "96cfaa32-a7a7-4979-b602-d2113112fd21", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lpmyc5szh62u"}, {"timestamp": "2025-09-16T03:17:57Z", "date_only": false, "value": "2025-09-16T03:17:57.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/51776", "record": "CVE-2018-20062", "field": "creation_timestamp", "uuid": "b6b3aa6d-90c7-4ba4-a512-3cd0fba7c6ae", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1a\u6e17\u900f\u6d4b\u8bd5\n\u63cf\u8ff0\uff1aRedArrow3.2 \u662f\u4e00\u6b3e\u7528\u4e8e\u6e17\u900f\u6d4b\u8bd5ThinkPHP 5.0.23 \u8fdc\u7a0b\u547d\u4ee4\u6267\u884c\u6f0f\u6d1e(CVE-2018-20062)\u7684\u56fe\u5f62\u5316\u5de5\u5177\u3002\nURL\uff1ahttps://github.com/shenhui35/RedArrow\n\n\u6807\u7b7e\uff1a#\u6e17\u900f\u6d4b\u8bd5", "url": "https://t.me/GithubRedTeam/51776", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-09-16T03:22:09Z", "date_only": false, "value": "2025-09-16T03:22:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/51777", "record": "CVE-2018-20062", "field": "creation_timestamp", "uuid": "3323847f-1090-4651-9823-5902f43c8f18", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1a\u6e17\u900f\u6d4b\u8bd5\n\u63cf\u8ff0\uff1aRedArrow3.2 \u662f\u4e00\u6b3e\u7528\u4e8e\u6e17\u900f\u6d4b\u8bd5ThinkPHP 5.0.23 \u8fdc\u7a0b\u547d\u4ee4\u6267\u884c\u6f0f\u6d1e(CVE-2018-20062)\u7684\u56fe\u5f62\u5316\u5de5\u5177\u3002\nURL\uff1ahttps://github.com/shenhui35/RedArrow\n\n\u6807\u7b7e\uff1a#\u6e17\u900f\u6d4b\u8bd5", "url": "https://t.me/GithubRedTeam/51777", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-09-16T09:00:05Z", "date_only": false, "value": "2025-09-16T09:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/iU_12kj1rebro8bGGcMHLSsrgo14ixMwM6FQKHGaLSEG6j4", "record": "CVE-2018-20062", "field": "creation_timestamp", "uuid": "cdcf3bdb-199c-4a78-862b-6f65c4c041c0", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-10-01T18:11:56Z", "date_only": false, "value": "2025-10-01T18:11:56.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6", "record": "CVE-2018-20062", "field": "creation_timestamp", "uuid": "62197d87-5867-42ab-a596-c56d8091aa34"}, {"timestamp": "2025-10-08T21:59:26Z", "date_only": false, "value": "2025-10-08T21:59:26.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6", "record": "CVE-2018-20062", "field": "creation_timestamp", "uuid": "fc7dbb27-2a69-4ce4-ba55-e2c83e154618"}, {"timestamp": "2025-10-21T23:45:46.278Z", "date_only": false, "value": "2025-10-21T23:45:46.278Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2018-20062", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:45:46.278Z", "date_only": false, "value": "2025-10-21T23:45:46.278Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2018-20062", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:31:36Z", "date_only": false, "value": "2025-10-22T00:31:36Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-GF7C-4W4P-7CM5", "record": "GHSA-GF7C-4W4P-7CM5", "field": "modified"}, {"timestamp": "2026-02-02T12:25:39Z", "date_only": false, "value": "2026-02-02T12:25:39+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2018-20062", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "f3731dfd-5683-40f8-8aed-10e677f72a37", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-02T12:29:04.676Z", "date_only": false, "value": "2026-02-02T12:29:04.676277Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f3731dfd-5683-40f8-8aed-10e677f72a37", "record": "CVE-2018-20062", "field": "creation_timestamp", "uuid": "5801b4ad-7f48-4e39-89f8-13feea7efd8d", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f3731dfd-5683-40f8-8aed-10e677f72a37", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-17T01:52:14.323Z", "date_only": false, "value": "2026-06-17T01:52:14.323", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2018-20062", "record": "FKIE_CVE-2018-20062", "field": "lastModified"}, {"timestamp": "2026-06-19T12:48:05.346Z", "date_only": false, "value": "2026-06-19T12:48:05.346560Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0a48c49a-ceff-4ab3-add1-91acfb0a06a0", "record": "CVE-2018-20062", "field": "creation_timestamp", "uuid": "d612fb0e-8136-481e-822a-294897a4bda0", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0a48c49a-ceff-4ab3-add1-91acfb0a06a0", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2018-20062", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "336e841d-69cb-4811-ae24-2b1d8d9cb9c1", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:04:28.520Z", "date_only": false, "value": "2026-06-23T14:04:28.520383Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/336e841d-69cb-4811-ae24-2b1d8d9cb9c1", "record": "CVE-2018-20062", "field": "creation_timestamp", "uuid": "f9902648-b0c3-4620-a519-0c4fe6d769f4", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/336e841d-69cb-4811-ae24-2b1d8d9cb9c1", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-30T11:39:09.675Z", "date_only": false, "value": "2026-06-30T11:39:09.675166Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/616e9bbd-1046-4edc-a8c6-c5984b2754ae", "record": "CVE-2018-20062", "field": "creation_timestamp", "uuid": "52075b06-82b3-41bd-a545-a6b7fd3ada9e", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/616e9bbd-1046-4edc-a8c6-c5984b2754ae", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-30T15:41:17Z", "date_only": false, "value": "2026-06-30T15:41:17+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2018-20062", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "616e9bbd-1046-4edc-a8c6-c5984b2754ae", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-16T12:15:02.961Z", "date_only": false, "value": "2026-07-16T12:15:02.961638Z", "kind": "sighting", "label": "Seen", "source": "MISP/c6bff539-f10a-42a7-bc8e-83795d457e7a", "record": "CVE-2018-20062", "field": "creation_timestamp", "uuid": "bf05a4d2-b300-4f05-8de7-272ad84f03d5"}, {"timestamp": "2026-08-24T12:15:02.747Z", "date_only": false, "value": "2026-08-24T12:15:02.747709Z", "kind": "sighting", "label": "Seen", "source": "MISP/5ef48179-b724-4792-abb9-4491ac13a7a7", "record": "CVE-2018-20062", "field": "creation_timestamp", "uuid": "8d7ddf31-46f8-45cd-9996-3f7139e485c0"}, {"timestamp": "2026-08-25T00:15:03.007Z", "date_only": false, "value": "2026-08-25T00:15:03.007999Z", "kind": "sighting", "label": "Seen", "source": "MISP/5ef48179-b724-4792-abb9-4491ac13a7a7", "record": "CVE-2018-20062", "field": "creation_timestamp", "uuid": "8a103bf7-b197-486c-9fd5-0c408d36a074"}], "metrics": {"as_of": "2026-10-31T23:54:55.706Z", "anchors": {"origin": {"timestamp": "2018-12-11T00:00:00Z", "date_only": false, "value": "2018-12-11T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / mitre", "record": "CVE-2018-20062", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2018-12-11T00:00:00Z", "date_only": false, "value": "2018-12-11T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / mitre", "record": "CVE-2018-20062", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2020-04-16T00:00:00Z", "date_only": false, "value": "2020-04-16T00:00:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://www.exploit-db.com/exploits/48333", "record": "CVE-2018-20062", "field": "creation_timestamp", "uuid": "8016f088-4322-4a8b-ae4c-5bdf87f01518", "url": "https://www.exploit-db.com/exploits/48333", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2019-01-18T14:45:48Z", "date_only": false, "value": "2019-01-18T14:45:48.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/SecLabNews/4058", "record": "CVE-2018-20062", "field": "creation_timestamp", "uuid": "e5622383-9b32-43f0-b3ec-9f388e46d495", "content": "\u0412 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 \u043c\u0438\u043d\u0443\u0432\u0448\u0435\u0433\u043e \u0433\u043e\u0434\u0430 SecurityLab \u0441\u043e\u043e\u0431\u0449\u0430\u043b \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u043c PHP-\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 ThinkPHP, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0432\u0448\u0435\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434. \u0425\u043e\u0442\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2018-20062) \u0443\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u200b\u200b\u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u043c, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443.    \n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 ThinkPHP", "url": "https://t.me/SecLabNews/4058", "metric_role": "exploitation", "metric_basis": "sighting_report"}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 3336348.0, "hours": 926.7633333333333, "days": 38.615138888888886, "min_seconds": 3249948.0, "max_seconds": 3336348.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2018-12-11T00:00:00Z", "date_only": false, "value": "2018-12-11T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / mitre", "record": "CVE-2018-20062", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2019-01-18T14:45:48Z", "date_only": false, "value": "2019-01-18T14:45:48.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/SecLabNews/4058", "record": "CVE-2018-20062", "field": "creation_timestamp", "uuid": "e5622383-9b32-43f0-b3ec-9f388e46d495", "content": "\u0412 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 \u043c\u0438\u043d\u0443\u0432\u0448\u0435\u0433\u043e \u0433\u043e\u0434\u0430 SecurityLab \u0441\u043e\u043e\u0431\u0449\u0430\u043b \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u043c PHP-\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 ThinkPHP, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0432\u0448\u0435\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434. \u0425\u043e\u0442\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2018-20062) \u0443\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u200b\u200b\u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u043c, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443.    \n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 ThinkPHP", "url": "https://t.me/SecLabNews/4058", "metric_role": "exploitation", "metric_basis": "sighting_report"}}, "disclosure_to_exploit": {"available": true, "seconds": 3336348.0, "hours": 926.7633333333333, "days": 38.615138888888886, "min_seconds": 3249948.0, "max_seconds": 3336348.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2018-12-11T00:00:00Z", "date_only": false, "value": "2018-12-11T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / mitre", "record": "CVE-2018-20062", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2019-01-18T14:45:48Z", "date_only": false, "value": "2019-01-18T14:45:48.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/SecLabNews/4058", "record": "CVE-2018-20062", "field": "creation_timestamp", "uuid": "e5622383-9b32-43f0-b3ec-9f388e46d495", "content": "\u0412 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 \u043c\u0438\u043d\u0443\u0432\u0448\u0435\u0433\u043e \u0433\u043e\u0434\u0430 SecurityLab \u0441\u043e\u043e\u0431\u0449\u0430\u043b \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u043c PHP-\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 ThinkPHP, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0432\u0448\u0435\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434. \u0425\u043e\u0442\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2018-20062) \u0443\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u200b\u200b\u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u043c, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443.    \n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 ThinkPHP", "url": "https://t.me/SecLabNews/4058", "metric_role": "exploitation", "metric_basis": "sighting_report"}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 42508800.0, "hours": 11808.0, "days": 492.0, "min_seconds": 42422400.0, "max_seconds": 42595200.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2018-12-11T00:00:00Z", "date_only": false, "value": "2018-12-11T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / mitre", "record": "CVE-2018-20062", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2020-04-16T00:00:00Z", "date_only": false, "value": "2020-04-16T00:00:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://www.exploit-db.com/exploits/48333", "record": "CVE-2018-20062", "field": "creation_timestamp", "uuid": "8016f088-4322-4a8b-ae4c-5bdf87f01518", "url": "https://www.exploit-db.com/exploits/48333", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 249004495.70606, "hours": 69167.91547390555, "days": 2881.996478079398, "min_seconds": 248918095.70606, "max_seconds": 249004495.70606, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2018-12-11T00:00:00Z", "date_only": false, "value": "2018-12-11T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / mitre", "record": "CVE-2018-20062", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-31T23:54:55.706Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 245668147.70606, "hours": 68241.15214057222, "days": 2843.381339190509, "min_seconds": 245668147.70606, "max_seconds": 245668147.70606, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2019-01-18T14:45:48Z", "date_only": false, "value": "2019-01-18T14:45:48.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/SecLabNews/4058", "record": "CVE-2018-20062", "field": "creation_timestamp", "uuid": "e5622383-9b32-43f0-b3ec-9f388e46d495", "content": "\u0412 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 \u043c\u0438\u043d\u0443\u0432\u0448\u0435\u0433\u043e \u0433\u043e\u0434\u0430 SecurityLab \u0441\u043e\u043e\u0431\u0449\u0430\u043b \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u043c PHP-\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 ThinkPHP, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0432\u0448\u0435\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434. \u0425\u043e\u0442\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2018-20062) \u0443\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u200b\u200b\u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u043c, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443.    \n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 ThinkPHP", "url": "https://t.me/SecLabNews/4058", "metric_role": "exploitation", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-10-31T23:54:55.706Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 206495695.70606, "hours": 57359.91547390555, "days": 2389.996478079398, "min_seconds": 206409295.70606, "max_seconds": 206495695.70606, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2020-04-16T00:00:00Z", "date_only": false, "value": "2020-04-16T00:00:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://www.exploit-db.com/exploits/48333", "record": "CVE-2018-20062", "field": "creation_timestamp", "uuid": "8016f088-4322-4a8b-ae4c-5bdf87f01518", "url": "https://www.exploit-db.com/exploits/48333", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-10-31T23:54:55.706Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}