{"metadata": {"vulnerability": "CVE-2023-49105", "count": 89, "kinds": {"milestone": 5, "sighting": 53, "kev": 11, "other": 20}}, "data": [{"timestamp": "2023-11-21T00:00:00Z", "date_only": false, "value": "2023-11-21T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-49105", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-11-21T00:00:00Z", "date_only": false, "value": "2023-11-21T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-49105", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-11-21T21:25:15.077Z", "date_only": false, "value": "2023-11-21T21:25:15.077Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2023-49105", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-11-21T22:15:00Z", "date_only": false, "value": "2023-11-21T22:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-49105", "record": "GSD-2023-49105", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2023-11-21T22:15:08Z", "date_only": false, "value": "2023-11-21T22:15:08Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-585G-F852-V6P4", "record": "GHSA-585G-F852-V6P4", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-11-21T22:15:08.613Z", "date_only": false, "value": "2023-11-21T22:15:08.613", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-49105", "record": "FKIE_CVE-2023-49105", "field": "published"}, {"timestamp": "2023-11-21T23:00:00Z", "date_only": false, "value": "2023-11-21T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2985", "record": "WID-SEC-W-2023-2985", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-11-21T23:00:00Z", "date_only": false, "value": "2023-11-21T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2985", "record": "WID-SEC-W-2023-2985", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-11-21T23:00:00Z", "date_only": false, "value": "2023-11-21T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2985", "record": "WID-SEC-W-2023-2985", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-11-22T00:00:00Z", "date_only": false, "value": "2023-11-22T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0970", "record": "CERTFR-2023-AVI-0970", "field": "revisions.0.revision_date"}, {"timestamp": "2023-11-22T00:30:21Z", "date_only": false, "value": "2023-11-22T00:30:21Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-585G-F852-V6P4", "record": "GHSA-585G-F852-V6P4", "field": "published"}, {"timestamp": "2023-11-27T00:00:00Z", "date_only": false, "value": "2023-11-27T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-49105", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2023-11-27T00:00:00Z", "date_only": false, "value": "2023-11-27T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-49105", "record": "FKIE_CVE-2023-49105", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2023-11-28T23:00:00Z", "date_only": false, "value": "2023-11-28T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2985", "record": "WID-SEC-W-2023-2985", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-11-28T23:00:00Z", "date_only": false, "value": "2023-11-28T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2985", "record": "WID-SEC-W-2023-2985", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-11-29T11:34:38Z", "date_only": false, "value": "2023-11-29T11:34:38.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/5139", "record": "CVE-2023-49105", "field": "creation_timestamp", "uuid": "3aebcfd8-4f10-4e1e-baa0-edff1054d987", "content": "\u0411\u0443\u043a\u0432\u0430\u043b\u044c\u043d\u043e \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u043d\u0435\u0439 \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u041f\u041e \u0434\u043b\u044f \u043e\u0431\u043c\u0435\u043d\u0430 \u0444\u0430\u0439\u043b\u0430\u043c\u0438 \u0438 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b ownCloud.\n\nCVE-2023-49103 \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u0432\u0435\u0440\u0441\u0438\u0438 Graphapi 0.2.0-0.3.0, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0441\u0440\u0435\u0434\u044b, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u043e\u043d\u043d\u044b\u0435 \u043a\u043b\u044e\u0447\u0438 \u0438 \u0434\u0440\u0443\u0433\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d \u043f\u0443\u0442\u0435\u043c \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f Graphapi, \u0442\u0430\u043a\u0436\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0434\u043b\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439, \u043a\u043b\u044e\u0447\u0435\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445.\n\nownCloud \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c 21 \u043d\u043e\u044f\u0431\u0440\u044f, \u043d\u0430\u0440\u044f\u0434\u0443 \u0441 \u0434\u0432\u0443\u043c\u044f \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c\u0438 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 (CVE-2023-49104 \u0438 CVE-2023-49105).\n\n\u0410 \u0443\u0436\u0435 \u0432 \u043f\u043e\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u0438\u043a \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0437\u0430\u043c\u0435\u0442\u0438\u043b\u0438 \u043f\u0435\u0440\u0432\u044b\u0435 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 CVE-2023-49103.\n\nShadowserver Foundation \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u043e\u043a\u043e\u043b\u043e 11 000 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 OwnCloud, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u0445\u0441\u044f \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u043e\u0439.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u044c\u0448\u0435\u0435 \u0447\u0438\u0441\u043b\u043e \u0438\u0437 \u043d\u0438\u0445 \u043f\u0440\u0438\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u043d\u0430 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u044e (2000), \u0421\u0428\u0410 (1 400) \u0438 \u0424\u0440\u0430\u043d\u0446\u0438\u044e (1300).\n\n\u0420\u043e\u0441\u0441\u0438\u044f, \u041f\u043e\u043b\u044c\u0448\u0430, \u041d\u0438\u0434\u0435\u0440\u043b\u0430\u043d\u0434\u044b, \u0418\u0442\u0430\u043b\u0438\u044f, \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u044f, \u041a\u0430\u043d\u0430\u0434\u0430 \u0438 \u0418\u0441\u043f\u0430\u043d\u0438\u044f \u0441 \u0441\u043e\u0442\u043d\u044f\u043c\u0438 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 \u0437\u0430\u043c\u044b\u043a\u0430\u044e\u0442 \u0440\u0435\u0439\u0442\u0438\u043d\u0433 \u0442\u043e\u043f-10.\n\n\u0420\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u044b Shadowserver \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043f\u0440\u043e\u0441\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0438 \u043f\u0440\u0438\u0437\u044b\u0432\u0430\u044e\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u044c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u043c \u0438 \u043c\u0435\u0440\u0430\u043c \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u043c ownCloud.", "url": "https://t.me/true_secator/5139"}, {"timestamp": "2023-11-30T19:28:00Z", "date_only": false, "value": "2023-11-30T19:28Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-49105", "record": "GSD-2023-49105", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-12-05T08:46:19Z", "date_only": false, "value": "2023-12-05T08:46:19.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CNArsenal/1661", "record": "CVE-2023-49105", "field": "creation_timestamp", "uuid": "833d7685-fdf8-4d56-b14b-5288bbd7d5ed", "content": "https://www.ambionics.io/blog/owncloud-cve-2023-49103-cve-2023-49105\n\nCVE-2023-49103\nCVE-2023-49105\n#\u5206\u6790", "url": "https://t.me/CNArsenal/1661"}, {"timestamp": "2023-12-05T10:22:03Z", "date_only": false, "value": "2023-12-05T10:22:03.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/darkcommunityofficial/149", "record": "CVE-2023-49105", "field": "creation_timestamp", "uuid": "3b2aaa5b-e496-4037-8463-a62ac5f4a4fd", "content": "#CVE-2023-49103\nCVE-2023-49105\n\nhttps://www.ambionics.io/blog/owncloud-cve-2023-49103-cve-2023-49105", "url": "https://t.me/darkcommunityofficial/149"}, {"timestamp": "2023-12-06T11:34:28Z", "date_only": false, "value": "2023-12-06T11:34:28.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1478", "record": "CVE-2023-49105", "field": "creation_timestamp", "uuid": "b16739b8-07e4-45f9-af04-3fe84e24b8b3", "content": "#ExploitObserverAlert\n\nCVE-2023-49105\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-49105. An issue was discovered in ownCloud owncloud/core before 10.13.1. An attacker can access, modify, or delete any file without authentication if the username of a victim is known, and the victim has no signing-key configured. This occurs because pre-signed URLs can be accepted even when no signing-key is configured for the owner of the files. The earliest affected version is 10.6.0.\n\nFIRST-EPSS: 0.000910000\nNVD-IS: 5.9\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/1478"}, {"timestamp": "2023-12-13T01:20:34.920Z", "date_only": false, "value": "2023-12-13T01:20:34.920668Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-49105", "record": "GSD-2023-49105", "field": "gsd.osvSchema.modified"}, {"timestamp": "2023-12-21T11:00:44Z", "date_only": false, "value": "2023-12-21T11:00:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/9629", "record": "CVE-2023-49105", "field": "creation_timestamp", "uuid": "1b8d51de-8d43-428d-8b84-952b660194c5", "content": "#exploit\n1. Slient URL Exploit Hidden Downloader\nhttps://github.com/desquezzee/Slient-Url-Exploit-Slient-Builder-Exploit-Database-Cve-2023-Malware\n\n2. CVE-2023-49105:\nPrivilege escalation, RCE in ownCloud\nhttps://github.com/ambionics/owncloud-exploits", "url": "https://t.me/CyberSecurityTechnologies/9629"}, {"timestamp": "2024-01-12T23:35:50Z", "date_only": false, "value": "2024-01-12T23:35:50.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/i4W8TN42nD7Ywv30GiXRFnNWTJ3PzAVIPHYjEcVTsXMxcqU", "record": "CVE-2023-49105", "field": "creation_timestamp", "uuid": "40183415-ae22-486f-8d4e-93989a5e8511"}, {"timestamp": "2024-05-16T18:39:20Z", "date_only": false, "value": "2024-05-16T18:39:20.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/2zeq0KXTuqj7ZXmCua6UmBAuZzeNoj7LPqpHPvK2h6uYDDU", "record": "CVE-2023-49105", "field": "creation_timestamp", "uuid": "52dd1fe6-a2e1-4674-8007-8d65bd368f7a"}, {"timestamp": "2024-08-02T21:46:29.148Z", "date_only": false, "value": "2024-08-02T21:46:29.148Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-49105", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T18:01:57.739Z", "date_only": false, "value": "2024-08-15T18:01:57.739+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2985", "record": "WID-SEC-W-2023-2985", "field": "document.tracking.generator.date"}, {"timestamp": "2024-08-16T08:57:35Z", "date_only": false, "value": "2024-08-16T08:57:35.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Rootsec_2/2311", "record": "CVE-2023-49105", "field": "creation_timestamp", "uuid": "dca6f388-12ca-49ee-90e2-2dcdffca9ee3", "content": "#exploit\n1. Slient URL Exploit Hidden Downloader\nhttps://github.com/desquezzee/Slient-Url-Exploit-Slient-Builder-Exploit-Database-Cve-2023-Malware\n\n2. CVE-2023-49105:\nPrivilege escalation, RCE in ownCloud\nhttps://github.com/ambionics/owncloud-exploits", "url": "https://t.me/Rootsec_2/2311"}, {"timestamp": "2024-08-16T17:53:42Z", "date_only": false, "value": "2024-08-16T17:53:42.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CipherAgents/1347352", "record": "CVE-2023-49105", "field": "creation_timestamp", "uuid": "937df8d7-9948-4e58-9609-c1f321f2880f", "content": "#owncloud\n\nFor owncloud there was a cool CVE-2023-49105\n\nSploet is implemented as a proxy that signs requests and you can go through it to dav:// using the Filezilla client, Cyberduck, in short, whoever uses what.\n\nFirst we install ten , launch the proxy, but don\u2019t enjoy it.\n\nBecause out of the box the sploit didn't work for me, clients apparently can't parse the response correctly.\nAnd I simply output the response from the proxy via print(response.text) , and collected a list of files. The files themselves can be obtained via curl/wget/browser, since a GET request is enough to download files.\n\nLike wget localhost:8800/remote.php/dav/files/admin/Report.7z\n\nYou can quickly check whether owncloud is vulnerable via another CVE-2023-49103:\n/apps/graphapi/vendor/microsoft/microsoft-graph/tests/GetPhpInfo.php/webpwn.css\n\nIf phpinfo() opened, then most likely the system was not updated, and these CVEs appeared nearby.\n\n>", "url": "https://t.me/CipherAgents/1347352"}, {"timestamp": "2024-08-17T01:08:48Z", "date_only": false, "value": "2024-08-17T01:08:48.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/webpwn/373", "record": "CVE-2023-49105", "field": "creation_timestamp", "uuid": "b5b0756f-831d-449c-a12b-e957a92e603d", "content": "#owncloud\n\n\u0414\u043b\u044f owncloud \u0431\u044b\u043b\u0430 \u043a\u043b\u0430\u0441\u0441\u043d\u0430\u044f CVE-2023-49105\n\n\u0421\u043f\u043b\u043e\u0435\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u0440\u043e\u043a\u0441\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0434\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0438 \u043c\u043e\u0436\u043d\u043e \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0435 \u0445\u043e\u0434\u0438\u0442\u044c \u043d\u0430 dav://, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043a\u043b\u0438\u0435\u043d\u0442 Filezilla, Cyberduck, \u043a\u043e\u0440\u043e\u0447 \u043a\u0442\u043e-\u0447\u0442\u043e \u044e\u0437\u0430\u0435\u0442.\n\n\u0421\u043d\u0430\u0447\u0430\u043b\u0430 \u0441\u0442\u0430\u0432\u0438\u043c ten, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c \u043f\u0440\u043e\u043a\u0441\u044e, \u043d\u043e \u043d\u0435 \u043d\u0430\u0441\u043b\u0430\u0436\u0434\u0430\u0435\u043c\u0441\u044f.\n\n\u041f\u043e\u0442\u043e\u043c\u0443 \u0447\u0442\u043e \u0438\u0437 \u043a\u043e\u0440\u043e\u0431\u043a\u0438 \u0441\u043f\u043b\u043e\u0435\u0442 \u0443 \u043c\u0435\u043d\u044f \u043d\u0435 \u0437\u0430\u0432\u0435\u043b\u0441\u044f, \u043a\u043b\u0438\u0435\u043d\u0442\u044b, \u0432\u0438\u0434\u0438\u043c\u043e, \u043d\u0435 \u043c\u043e\u0433\u0443\u0442 \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e \u0440\u0430\u0441\u043f\u0430\u0440\u0441\u0438\u0442\u044c \u043e\u0442\u0432\u0435\u0442.\n\u0410 \u044f \u043f\u0440\u043e\u0441\u0442\u043e \u0432\u044b\u0432\u0435\u043b \u043e\u0442\u0432\u0435\u0442 \u043e\u0442 \u043f\u0440\u043e\u043a\u0441\u0438 \u0447\u0435\u0440\u0435\u0437 print(response.text), \u0438 \u0441\u043e\u0431\u0440\u0430\u043b \u0441\u043f\u0438\u0441\u043e\u043a \u0444\u0430\u0439\u043b\u043e\u0432. \u0421\u0430\u043c\u0438 \u0444\u0430\u0439\u043b\u044b \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0443\u0436\u0435 \u0447\u0435\u0440\u0435\u0437 curl/wget/\u0431\u0440\u0430\u0443\u0437\u0435\u0440, \u0442\u0430\u043a \u043a\u0430\u043a \u0434\u043b\u044f \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e GET \u0437\u0430\u043f\u0440\u043e\u0441\u0430.\n\n\u0422\u0438\u043f\u0430 wget localhost:8800/remote.php/dav/files/admin/Report.7z\n\n\u0411\u044b\u0441\u0442\u0440\u043e \u0447\u0435\u043a\u043d\u0443\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u043b\u0438 owncloud \u043c\u043e\u0436\u043d\u043e \u0447\u0435\u0440\u0435\u0437 \u0434\u0440\u0443\u0433\u0443\u044e CVE-2023-49103:\n/apps/graphapi/vendor/microsoft/microsoft-graph/tests/GetPhpInfo.php/webpwn.css\n\n\u0415\u0441\u043b\u0438 \u043e\u0442\u043a\u0440\u044b\u043b\u0441\u044f phpinfo() - \u0442\u043e, \u0441\u043a\u043e\u0440\u0435\u0435 \u0432\u0441\u0435\u0433\u043e, \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u043b\u0438, \u0430 \u044d\u0442\u0438 CVE'\u0448\u043a\u0438 \u0432\u044b\u0448\u043b\u0438 \u0440\u044f\u0434\u043e\u043c.\n\n>", "url": "https://t.me/webpwn/373"}, {"timestamp": "2026-07-26T02:02:18.514Z", "date_only": false, "value": "2026-07-26T02:02:18.514323Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/2200", "record": "CVE-2023-49105", "field": "creation_timestamp", "uuid": "6df7b328-154f-4026-8a23-e0f9e6d5415d", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430 \u0432 ownCloud \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u043f\u0430\u0440\u043e\u043b\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\n\n\u041f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u043e\u0431\u043c\u0435\u043d\u0430 \u0444\u0430\u0439\u043b\u0430\u043c\u0438 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c ownCloud \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u0442\u0440\u0435\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043e\u0434\u043d\u0430 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\nownCloud \u2014 \u044d\u0442\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u043e\u0431\u043c\u0435\u043d\u0430 \u0444\u0430\u0439\u043b\u0430\u043c\u0438 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u043e\u0435 \u0434\u043b\u044f \u0447\u0430\u0441\u0442\u043d\u044b\u0445 \u043b\u0438\u0446 \u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u0445 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0444\u0430\u0439\u043b\u0430\u043c\u0438 \u0438 \u043e\u0431\u043c\u0435\u043d\u0438\u0432\u0430\u0442\u044c\u0441\u044f \u0438\u043c\u0438 \u0447\u0435\u0440\u0435\u0437 \u0430\u0432\u0442\u043e\u043d\u043e\u043c\u043d\u0443\u044e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443.\n\n\u041e\u043d \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0435\u0434\u043f\u043e\u0447\u0438\u0442\u0430\u044e\u0442 \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0432\u043e\u0438\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438, \u0430 \u043d\u0435 \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u0442\u044c \u0438\u0445 \u0443 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449. \u041d\u0430 \u0441\u0430\u0439\u0442\u0435 OwnCloud \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f \u043e 200 000 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a, 600 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445 \u0438 200 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u0430\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u041f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0441\u043e\u0441\u0442\u043e\u0438\u0442 \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a \u0438 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u0432\u043c\u0435\u0441\u0442\u0435, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044f \u0448\u0438\u0440\u043e\u043a\u0438\u0439 \u0441\u043f\u0435\u043a\u0442\u0440 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u0433\u043e \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2023-49103 \u0438 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 CVSS \u2013 10. \u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u043c\u043e\u0436\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0432 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043d\u044b\u0445 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f\u0445, \u0432\u043b\u0438\u044f\u044f \u043d\u0430 \u0432\u0441\u0435 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0441\u0440\u0435\u0434\u044b \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n\u0412 \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 0.2.0\u20130.3.0 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u043e\u0442 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0435\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u0441\u0440\u0435\u0434\u0435 PHP \u0447\u0435\u0440\u0435\u0437 URL-\u0430\u0434\u0440\u0435\u0441, \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044f \u043f\u0430\u0440\u043e\u043b\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 ownCloud, \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u043e\u043d\u043d\u044b\u0435 \u043a\u043b\u044e\u0447\u0438.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0444\u0430\u0439\u043b owncloud/apps/graphapi/vendor/microsoft/microsoft-graph/tests/GetPhpInfo.php, \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u044e phpinfo \u0432 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430\u0445 Docker \u0438 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u0441\u0435\u043a\u0440\u0435\u0442\u044b, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u043f\u0430\u0440\u043e\u043b\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 ownCloud, \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440, \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043a\u043b\u044e\u0447\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 Object-Store/S3.\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430, CVE-2023-49105 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9,8, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043e\u0441\u043d\u043e\u0432\u043d\u0443\u044e \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 ownCloud \u0432\u0435\u0440\u0441\u0438\u0439 \u0441 10.6.0 \u043f\u043e 10.13.0 \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0441\u043e\u0441\u0442\u043e\u0438\u0442 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u043f\u0440\u0435\u0442\u0438\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0445 URL-\u0430\u0434\u0440\u0435\u0441\u043e\u0432, \u0435\u0441\u043b\u0438 \u0434\u043b\u044f \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430 \u0444\u0430\u0439\u043b\u043e\u0432 \u043d\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d \u043a\u043b\u044e\u0447 \u043f\u043e\u0434\u043f\u0438\u0441\u0438.\n\n\u0422\u0440\u0435\u0442\u044c\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, CVE-2023-49104 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9 \u2014 \u044d\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0441\u0443\u0431\u0434\u043e\u043c\u0435\u043d\u0430, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 oauth2 \u043d\u0438\u0436\u0435 0.6.1.\n\n\u0412 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 oauth2 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u0432\u0435\u0441\u0442\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 URL-\u0430\u0434\u0440\u0435\u0441 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u0445\u043e\u0434\u0438\u0442 \u043a\u043e\u0434 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043e\u0431\u0440\u0430\u0442\u043d\u044b\u0435 \u0432\u044b\u0437\u043e\u0432\u044b \u0432 \u0434\u043e\u043c\u0435\u043d, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c.\n\n\u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043c\u0435\u0440 \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044f \u0432\u0435\u043d\u0434\u043e\u0440 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442 \u0443\u0436\u0435\u0441\u0442\u043e\u0447\u0438\u0442\u044c \u043a\u043e\u0434 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 Oauth2. \u0412\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u043c \u0440\u0435\u0448\u0435\u043d\u0438\u0435\u043c, \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u043c \u0432 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435, \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u043e\u043f\u0446\u0438\u0438 \u00ab\u0420\u0430\u0437\u0440\u0435\u0448\u0438\u0442\u044c \u043f\u043e\u0434\u0434\u043e\u043c\u0435\u043d\u044b\u00bb.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://owncloud.com/security-advisories/disclosure-of-sensitive-credentials-and-configuration-in-containerized-deployments/ \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438", "url": "https://t.me/EchelonEyes/2200"}, {"timestamp": "2026-08-25T22:00:03.586Z", "date_only": false, "value": "2026-08-25T22:00:03.586515Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/poheque/28", "record": "CVE-2023-49105", "field": "creation_timestamp", "uuid": "ed7a90d1-ee68-4f64-b7da-a91d09420746", "content": "https://www.ambionics.io/blog/owncloud-cve-2023-49103-cve-2023-49105\n\nCVE-2023-49103\nCVE-2023-49105\n#\u5206\u6790", "url": "https://t.me/poheque/28"}, {"timestamp": "2026-08-27T00:00:00Z", "date_only": false, "value": "2026-08-27T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2023-49105", "field": "timestamps.asserted_at", "uuid": "79b73698-256a-45a9-ad14-b70fc2f9dee5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-27T00:00:00Z", "date_only": true, "value": "2026-08-27", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-49105", "field": "containers.adp.1.metrics.1.other.content.dateAdded"}, {"timestamp": "2026-08-27T00:00:00Z", "date_only": true, "value": "2026-08-27", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2023-49105", "field": "evidence.0.details.date_added", "uuid": "79b73698-256a-45a9-ad14-b70fc2f9dee5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-27T00:00:00Z", "date_only": false, "value": "2026-08-27T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2023-49105", "field": "timestamps.first_seen_at", "uuid": "79b73698-256a-45a9-ad14-b70fc2f9dee5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-27T00:00:00Z", "date_only": false, "value": "2026-08-27T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2023-49105", "field": "status.status_updated_at", "uuid": "79b73698-256a-45a9-ad14-b70fc2f9dee5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-27T00:00:00Z", "date_only": false, "value": "2026-08-27T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-49105", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2026-08-27T17:00:04.290Z", "date_only": false, "value": "2026-08-27T17:00:04.290675Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/MalaysiaHacktivistz/24620", "record": "CVE-2023-49105", "field": "creation_timestamp", "uuid": "3321ed20-152b-4d5f-98cd-c217b72c90b2", "content": "Hackers Exploit CVE-2023-49105 to Steal Nuclear Records From Philippine Research Agency \u2013 gbhackers.com\n\nThu, 27 Aug 2026 20:55:19", "url": "https://t.me/MalaysiaHacktivistz/24620"}, {"timestamp": "2026-08-27T17:00:36Z", "date_only": false, "value": "2026-08-27T17:00:36+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2023-49105", "field": "timestamps.asserted_at", "uuid": "40b6e936-c767-40ec-916b-248c46890ce8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-27T17:00:36Z", "date_only": false, "value": "2026-08-27T17:00:36+00:00", "kind": "kev", "label": "First seen", "source": "previdian", "record": "CVE-2023-49105", "field": "timestamps.first_seen_at", "uuid": "40b6e936-c767-40ec-916b-248c46890ce8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-27T17:00:36Z", "date_only": false, "value": "2026-08-27T17:00:36+00:00", "kind": "kev", "label": "Status updated", "source": "previdian", "record": "CVE-2023-49105", "field": "status.status_updated_at", "uuid": "40b6e936-c767-40ec-916b-248c46890ce8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-27T17:00:36.663Z", "date_only": false, "value": "2026-08-27T17:00:36.663Z", "kind": "kev", "label": "Catalog added", "source": "previdian", "record": "CVE-2023-49105", "field": "evidence.0.details.added_date", "uuid": "40b6e936-c767-40ec-916b-248c46890ce8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-27T17:44:45.088Z", "date_only": false, "value": "2026-08-27T17:44:45.088122Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mu3fm4mkhn27", "record": "CVE-2023-49105", "field": "creation_timestamp", "uuid": "4b99daf7-b59d-4821-8c0a-7af7915615ef", "content": "\ud83d\uded1 CVE-2023-49105\nownCloud ownCloud\nCVSS 9.8 / EPSS 11% / KEV: No\nTL;DR: An issue was discovered in ownCloud owncloud/core before 10.13.1. An attacker can access\u2026\nhttps://cvesentinel.com/report/CVE-2023-49105?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "url": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mu3fm4mkhn27"}, {"timestamp": "2026-08-27T18:00:02Z", "date_only": false, "value": "2026-08-27T18:00:02+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2023-49105", "field": "timestamps.recorded_at", "uuid": "79b73698-256a-45a9-ad14-b70fc2f9dee5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-27T18:00:02.515Z", "date_only": false, "value": "2026-08-27T18:00:02.515068Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/79b73698-256a-45a9-ad14-b70fc2f9dee5", "record": "CVE-2023-49105", "field": "creation_timestamp", "uuid": "34aa7a4f-b5bb-4f77-aff7-3aa78069736c", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/79b73698-256a-45a9-ad14-b70fc2f9dee5"}, {"timestamp": "2026-08-27T18:00:06.056Z", "date_only": false, "value": "2026-08-27T18:00:06.056487Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/TengkorakCyberCrewzz/13421", "record": "CVE-2023-49105", "field": "creation_timestamp", "uuid": "0704aa80-1d53-4e52-9411-d61ab01c0515", "content": "Hackers Exploit CVE-2023-49105 to Steal Nuclear Records From Philippine Research Agency \u2013 gbhackers.com\n\nThu, 27 Aug 2026 20:55:19", "url": "https://t.me/TengkorakCyberCrewzz/13421"}, {"timestamp": "2026-08-27T18:48:16.712Z", "date_only": false, "value": "2026-08-27T18:48:16.712832Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/royans.bsky.social/post/3mu3j5poayt2j", "record": "cve-2023-49105", "field": "creation_timestamp", "uuid": "905610e4-29c8-4317-b502-e11f513313fb", "content": "Espionage Campaign Exploiting ownCloud CVE-2023-49105 to Target Philippine Nuclear Research\n\nhttps://gbhackers.com/cve-2023-49105-flaw-exploited\nhttps://flagthis.com/tldr/6656\n\n##DataBreach ##APT ##ownCloud ##Espionage ##Vulnerability", "url": "https://bsky.app/profile/royans.bsky.social/post/3mu3j5poayt2j"}, {"timestamp": "2026-08-27T21:19:59.268Z", "date_only": false, "value": "2026-08-27T21:19:59.268835Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mu3rmy2om324", "record": "CVE-2023-49105", "field": "creation_timestamp", "uuid": "d80e8f98-edc4-4478-b3ae-8f80dc243f29", "content": "\ud83c\udf11 HADAL \u00b7 actively exploited critical\nCVE-2023-49105: An issue was discovered in ownCloud owncloud/core before 10.13.1\nCVSS 9.8 \u00b7 EPSS 11.1% \u00b7 CISA KEV\nhttps://beta.vulnsea.com/cve/CVE-2023-49105\n\n#CVE #infosec #cybersecurity #threatintel", "url": "https://bsky.app/profile/vulnsea.com/post/3mu3rmy2om324"}, {"timestamp": "2026-08-27T21:31:02Z", "date_only": false, "value": "2026-08-27T21:31:02Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-585G-F852-V6P4", "record": "GHSA-585G-F852-V6P4", "field": "modified"}, {"timestamp": "2026-08-27T23:51:16.500Z", "date_only": false, "value": "2026-08-27T23:51:16.500026Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/csirts.com/post/3mu423j4mev27", "record": "CVE-2023-49105", "field": "creation_timestamp", "uuid": "dd41b7ae-1690-4101-bbe4-c8a54b165a5f", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2023-49105: ownCloud Improper Authentication Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2023-49105", "url": "https://bsky.app/profile/csirts.com/post/3mu423j4mev27"}, {"timestamp": "2026-08-28T02:34:06.730Z", "date_only": false, "value": "2026-08-28T02:34:06.730705Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mu4d6oj5ws2e", "record": "CVE-2023-49105", "field": "creation_timestamp", "uuid": "75b1d4d7-fdfb-4663-b3e3-0af3f29b93e2", "content": "CISA KEV Catalog updates include CVE-2023-49105, CVE-2026-53362, and CVE-2026-66384. These actively exploited flaws can fully compromise device security.\n\n#CISAKEV #Cybersecurity #CVE202349105 #CVE202653362 #CVE202666384", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mu4d6oj5ws2e"}, {"timestamp": "2026-08-28T03:55:23.877Z", "date_only": false, "value": "2026-08-28T03:55:23.877Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-49105", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-28T03:55:23.877Z", "date_only": false, "value": "2026-08-28T03:55:23.877Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-49105", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-28T05:28:03.795Z", "date_only": false, "value": "2026-08-28T05:28:03.795805Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mu4mvp4ofp2d", "record": "CVE-2023-49105", "field": "creation_timestamp", "uuid": "34996e2c-a67e-4be2-9709-a9914d43c99a", "content": "CVE-2023-49105 is trending. Hype score 11, currently #2 on cvemon.\n\nAn issue was discovered in ownCloud owncloud/core before 10.13.1. An attacker can access, modify, or delete any file without authentication if the username of a victim is known, and\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2023-49105", "url": "https://bsky.app/profile/cvemon.bsky.social/post/3mu4mvp4ofp2d"}, {"timestamp": "2026-08-28T06:30:13.671Z", "date_only": false, "value": "2026-08-28T06:30:13.671481Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/threatspotai.bsky.social/post/3mu4qevh7dx2k", "record": "CVE-2023-49105", "field": "creation_timestamp", "uuid": "a81158df-ba8a-4062-bdbe-830000b98985", "content": "\ud83d\udea8 CISA KEV Alert\nCVE-2023-49105: \u26a0\ufe0f CVE-2023-49105: New Actively Exploited Vulnerability Added to CISA KEV\nSeverity: HIGH | CVSS: 0.0 | EPSS: 11.1%\nActively exploited\n\nRead the full alert: https://threatspot.ai/alerts/2023-49105-an-issue-was-discovered-in-owncloud", "url": "https://bsky.app/profile/threatspotai.bsky.social/post/3mu4qevh7dx2k"}, {"timestamp": "2026-08-28T07:26:31.172Z", "date_only": false, "value": "2026-08-28T07:26:31.172548Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mu4tjapflk4c", "record": "cve-2023-49105", "field": "creation_timestamp", "uuid": "adb7208d-54c1-4afe-a597-f05aaf7c103d", "content": "Hackers Exploit CVE-2023-49105 to Steal Nuclear Records From Philippine Research Agency https://gbhackers.com/cve-2023-49105-flaw-exploited/", "url": "https://bsky.app/profile/shiojiri.com/post/3mu4tjapflk4c"}, {"timestamp": "2026-08-28T12:21:09.753Z", "date_only": false, "value": "2026-08-28T12:21:09.753", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-49105", "record": "FKIE_CVE-2023-49105", "field": "lastModified"}, {"timestamp": "2026-08-28T13:38:29.196Z", "date_only": false, "value": "2026-08-28T13:38:29.196650Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mu5icnzsm62a", "record": "CVE-2023-49105", "field": "creation_timestamp", "uuid": "a7431c74-2341-4b88-9876-b560a4e0e9bf", "content": "\ud83d\udea8 Critical Threat Intel: CVE-2023-49105 impacts ownCloud via improper authentication, enabling unauthenticated file access if signing-keys are missing. Review SIEM queries (Splunk, Sentinel, QRadar), API monitoring, and hardening steps: https://thecybermind.co/jily", "url": "https://bsky.app/profile/thecybermind.co/post/3mu5icnzsm62a"}, {"timestamp": "2026-08-28T17:53:48.714Z", "date_only": false, "value": "2026-08-28T17:53:48.714977Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybereyeq.bsky.social/post/3mu5wl5kycm2f", "record": "CVE-2023-49105", "field": "creation_timestamp", "uuid": "cca5689d-6dec-4fbe-aa66-82d9089a85ef", "content": "CISA added three actively exploited flaws to its KEV catalog on 27 Aug, including an ownCloud auth bypass (CVE-2023-49105). BOD 26-04 sets the federal remediation clock.\n\n\u2192 Daily cyber brief: https://www.cybereyeq.com/?utm_source=bluesky&utm_medium=social&utm_campaign=daily", "url": "https://bsky.app/profile/cybereyeq.bsky.social/post/3mu5wl5kycm2f"}, {"timestamp": "2026-08-28T18:00:01Z", "date_only": false, "value": "2026-08-28T18:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "previdian", "record": "CVE-2023-49105", "field": "timestamps.recorded_at", "uuid": "40b6e936-c767-40ec-916b-248c46890ce8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-28T18:00:34.299Z", "date_only": false, "value": "2026-08-28T18:00:34.299766Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/40b6e936-c767-40ec-916b-248c46890ce8", "record": "CVE-2023-49105", "field": "creation_timestamp", "uuid": "68d3a9b9-1e18-44e2-b1d0-b235897290d7", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/40b6e936-c767-40ec-916b-248c46890ce8"}, {"timestamp": "2026-08-28T18:23:23.157Z", "date_only": false, "value": "2026-08-28T18:23:23.157788Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mu5y7kob3i2t", "record": "CVE-2023-49105", "field": "creation_timestamp", "uuid": "b679c3ad-0f02-4727-a42f-bad608424846", "content": "CISA added ownCloud CVE-2023-49105 to KEV after reports of weaponized exploitation targeting Philippine organizations, including a nuclear research body.\n", "url": "https://bsky.app/profile/privpros.bsky.social/post/3mu5y7kob3i2t"}, {"timestamp": "2026-08-28T18:23:45.527Z", "date_only": false, "value": "2026-08-28T18:23:45.527412Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mu5yai5qxy2q", "record": "CVE-2023-49105", "field": "creation_timestamp", "uuid": "cef413f8-8365-4ece-a8bc-44f6114a8c60", "content": "CISA added ownCloud CVE-2023-49105 to KEV after reports of weaponized exploitation targeting Philippine organizations, including a nuclear research body.\n", "url": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mu5yai5qxy2q"}, {"timestamp": "2026-08-28T18:57:04.822Z", "date_only": false, "value": "2026-08-28T18:57:04.822838Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mu624epn6b2y", "record": "CVE-2023-49105", "field": "creation_timestamp", "uuid": "f3246d9f-6695-4f00-9a19-b5ac76853af6", "content": "\ud83e\udd16 CVE-2023-49105 (CVSS 9.8): ownCloud WebDAV auth bypass \u2014 a known username can read/modify/delete files without credentials. CISA KEV: a Chinese-speaking actor stole nuclear records from a Philippine research body.\nhttps://thehackernews.com/2026/08/snowflake-github-actions-flaw-lets.html", "url": "https://bsky.app/profile/newssecia.bsky.social/post/3mu624epn6b2y"}, {"timestamp": "2026-08-28T19:01:23.104Z", "date_only": false, "value": "2026-08-28T19:01:23.104073Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/suriq.io/post/3mu62duu2f22m", "record": "CVE-2023-49105", "field": "creation_timestamp", "uuid": "513096cd-6097-4f8e-a6b6-6a6ff8064849", "content": "An ownCloud flaw patched in 2023 (CVE-2023-49105) is now on CISA's active-exploitation list.\n\nA suspected Chinese operator used it to steal files from a Philippine nuclear research body.\n\nIt works on the default config. Update ownCloud.", "url": "https://bsky.app/profile/suriq.io/post/3mu62duu2f22m"}, {"timestamp": "2026-08-28T21:00:04.366Z", "date_only": false, "value": "2026-08-28T21:00:04.366526Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/9918", "record": "CVE-2023-49105", "field": "creation_timestamp", "uuid": "ef371247-b0e5-43a9-b703-ca5cacc746b0", "content": "An ownCloud flaw was exploited to steal 176 files from a Philippine nuclear research body.\n\nThe 372 MB haul included nuclear-material records, strategic plans, employee data, BitLocker keys, and a KeePass database. CISA has added CVE-2023-49105 to its KEV catalog.\n\nRead: https://thehackernews.com/2026/08/snowflake-github-actions-flaw-lets.html", "url": "https://t.me/thehackernews/9918"}, {"timestamp": "2026-08-28T22:00:41.236Z", "date_only": false, "value": "2026-08-28T22:00:41.236827Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2026/08/snowflake-github-actions-flaw-lets.html", "record": "CVE-2023-49105", "field": "creation_timestamp", "uuid": "cd58c0f2-ddd1-4a0a-a6f8-d0eb17b715d3", "content": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a critical security flaw impacting ownCloud to its Known Exploited Vulnerabilities (KEV) catalog following reports that a Chinese-speaking threat actor weaponized the vulnerability to target a nuclear research body in the Philippines.\n\nThe vulnerability, tracked as CVE-2023-49105 (CVSS score: 9.8), is a case of", "url": "https://thehackernews.com/2026/08/snowflake-github-actions-flaw-lets.html"}, {"timestamp": "2026-08-29T03:00:04.347Z", "date_only": false, "value": "2026-08-29T03:00:04.347832Z", "kind": "sighting", "label": "Seen", "source": "Telegram/DgqWRKgrz0gc6WpDCHHF1r8SxDbD5IrBw2kHM7tNA7BlGA", "record": "CVE-2023-49105", "field": "creation_timestamp", "uuid": "6e52d78d-93fe-4bd0-a3c6-7f47c3811107"}, {"timestamp": "2026-08-29T11:47:47.426Z", "date_only": false, "value": "2026-08-29T11:47:47.426138Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/theperimetersite.bsky.social/post/3mu7slnv7jf26", "record": "CVE-2023-49105", "field": "creation_timestamp", "uuid": "090ae82a-eb90-4ee4-b712-dd9bffddbea6", "content": "The Philippine nuclear research body recently discovered that its internal records weren't so internal after all. They were running ownCloud, and attackers used CVE-2023-49105 to walk right through the front door.", "url": "https://bsky.app/profile/theperimetersite.bsky.social/post/3mu7slnv7jf26"}, {"timestamp": "2026-08-29T12:14:44.602Z", "date_only": false, "value": "2026-08-29T12:14:44.602974Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/theperimetersite.bsky.social/post/3mu7u3u6z7z2x", "record": "CVE-2023-49105", "field": "creation_timestamp", "uuid": "de7b6d97-bc2e-4a0c-8765-c0d3fe74f626", "content": "The Philippine nuclear research body recently discovered that its internal records weren't so internal after all. They were running ownCloud, and attackers used CVE-2023-49105 to walk right through the front door.\n\n#vulnerability #infosec", "url": "https://bsky.app/profile/theperimetersite.bsky.social/post/3mu7u3u6z7z2x"}, {"timestamp": "2026-08-29T14:00:15.584Z", "date_only": false, "value": "2026-08-29T14:00:15.584609Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mu7zyk3oqd2n", "record": "cve-2023-49105", "field": "creation_timestamp", "uuid": "3bc29436-7a82-4e95-a654-7ab37348fbda", "content": "ownCloud Improper Authentication Vulnerability https://0daynews.com/cves/cve-2023-49105", "url": "https://bsky.app/profile/0daynews.bsky.social/post/3mu7zyk3oqd2n"}, {"timestamp": "2026-08-30T00:00:00Z", "date_only": true, "value": "2026-08-30", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2023-49105", "field": "evidence.0.details.due_date", "uuid": "79b73698-256a-45a9-ad14-b70fc2f9dee5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-30T02:22:36.454Z", "date_only": false, "value": "2026-08-30T02:22:36.454456Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mubdhx6enr2i", "record": "CVE-2023-49105", "field": "creation_timestamp", "uuid": "e088958c-261f-4497-b03c-ca5ec1df0f9b", "content": "CVE-2023-49105: 2023 ownCloud Bug Exploited to Steal Nuclear Data", "url": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mubdhx6enr2i"}, {"timestamp": "2026-08-30T10:30:15.341Z", "date_only": false, "value": "2026-08-30T10:30:15.341948Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3muc6pwuww72j", "record": "cve-2023-49105", "field": "creation_timestamp", "uuid": "f9e99ff4-5d13-4c79-ac00-703692a8ecfa", "content": "Nuclear Records Stolen via ownCloud Flaw, CISA KEV Added https://0daynews.com/articles/2026-08-29-owncloud-cve-2023-49105-kev-nuclear-records", "url": "https://bsky.app/profile/0daynews.bsky.social/post/3muc6pwuww72j"}, {"timestamp": "2026-08-31T02:30:24.288Z", "date_only": false, "value": "2026-08-31T02:30:24.288726Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3muduesygzc2n", "record": "cve-2023-49105", "field": "creation_timestamp", "uuid": "8190bad1-4024-43cf-939f-47f5b89005a3", "content": "Nuclear Records Stolen via ownCloud Flaw, CISA KEV Added \u2014 CISA KEV added CVE-2023-49105 after nuclear data theft in Philippines. Self-hosted ownCloud users face an August 30 remediation deadline. https://0daynews.com/articles/2026-08-29-owncloud-cve-2023-49105-kev-nuclear-records", "url": "https://bsky.app/profile/0daynews.bsky.social/post/3muduesygzc2n"}, {"timestamp": "2026-08-31T14:40:37.598Z", "date_only": false, "value": "2026-08-31T14:40:37.598279Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thecybermind.co/post/3muf56j6cah2h", "record": "CVE-2023-49105", "field": "creation_timestamp", "uuid": "b9d2af31-f025-43d6-a02c-daa7080ed3a3", "content": "URGENT C-Suite Brief: CVE-2023-49105 active exploitation targets ownCloud authentication flaws. Read our executive brief for rapid mitigation steps, identity governance controls, and asset integrity protocols to protect your enterprise perimeter. https://thecybermind.co/v5jn", "url": "https://bsky.app/profile/thecybermind.co/post/3muf56j6cah2h"}, {"timestamp": "2026-09-01T06:00:03.505Z", "date_only": false, "value": "2026-09-01T06:00:03.505297Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberintelnews.bsky.social/post/3mugqkmiigf2y", "record": "CVE-2023-49105", "field": "creation_timestamp", "uuid": "c77c792d-acf8-4d58-9ee5-482b2f51a92a", "content": "Today on CyberIntel: Chinese-Speaking Operators Exploit CVE-2023-49105 to Steal Nuclear Data https://cyberintelnews.com/ #Malware #ThreatIntel #Cybersecurity", "url": "https://bsky.app/profile/cyberintelnews.bsky.social/post/3mugqkmiigf2y"}, {"timestamp": "2026-09-01T06:30:18.702Z", "date_only": false, "value": "2026-09-01T06:30:18.702974Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpacketai.bsky.social/post/3mugsapl6b72v", "record": "CVE-2023-49105", "field": "creation_timestamp", "uuid": "db6d91c9-8e6f-43a7-963e-2e722228a5db", "content": "Critical ownCloud vulnerability actively exploited by Chinese threat actors targeting nuclear research facilities. CISA adds CVE-2023-49105 to KEV catalog \u2014 patch immediately if\u2026\n\nhttps://thehackernews.com/2026/08/snowflake-github-actions-flaw-lets.html\n\n#cybersecurity #infosec", "url": "https://bsky.app/profile/getpacketai.bsky.social/post/3mugsapl6b72v"}, {"timestamp": "2026-09-01T20:00:04.616Z", "date_only": false, "value": "2026-09-01T20:00:04.616632Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/192227", "record": "CVE-2023-49105", "field": "creation_timestamp", "uuid": "12e85c4c-5486-4670-b95c-ef0cf905f665", "content": "Real-world tradecraft from a recovered intrusion set against a Phillipine Nuclear Agency: forged ownCloud pre-signed URLs, custom MT19937 exploit, low-and-slow exfil\nhttps://www.reddit.com/r/redteamsec/comments/1vyyrbn/realworld_tradecraft_from_a_recovered_intrusion/\n\nThe Hunt.io (http://hunt.io/) research team recovered an operator's full open directory, useful as a look at how someone actually chained known bugs in the field.  ownCloud CVE-2023-49105: five Python scripts forging pre-signed WebDAV URLs off an empty PBKDF2 salt. OC-Credential set to the impersonated account, GET against /remote.php/dav/files//, no creds needed. The fifth script adds PROPFIND Depth: 1 enumeration to reach folders not known in advance. Low-and-slow exfil: randomized time.sleep(random.uniform(3, 6)) between requests, tightened to 1.5 to 3.5 in one script, to dodge volumetric detection. CVE-2024-28000 (LiteSpeed Cache): a Go build reimplementing MT19937 with PHP mt_rand() parity, self-tested against 11 seed/output pairs, 30 workers across a 0 to 999,999 seed range. Landed on seed 311787 and created an admin account via the REST API. Fallback path: XML-RPC brute force with rockyou.txt against the same site, successful independently. Staged frameworks: Sliver, Metasploit, Mettle, plus a custom stage-1 ELF loader pulling a Mettle stage-2.  Full breakdown and IOCs: https://hunt.io/blog/chinese-speaking-operator-philippine-nuclear-naval-contractor    submitted by    /u/Straight-Practice-99  (https://www.reddit.com/user/Straight-Practice-99) \n [link] (https://hunt.io/blog/chinese-speaking-operator-philippine-nuclear-naval-contractor)   [comments] (https://www.reddit.com/r/redteamsec/comments/1vyyrbn/realworld_tradecraft_from_a_recovered_intrusion/)", "url": "https://t.me/hacking_Attack/192227"}, {"timestamp": "2026-09-04T17:00:05.814Z", "date_only": false, "value": "2026-09-04T17:00:05.814472Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/MalaysiaHacktivistz/15238", "record": "CVE-2023-49105", "field": "creation_timestamp", "uuid": "e0a3f724-c9b9-4236-96a5-735719c65943", "content": "Hackers Exploit CVE-2023-49105 to Steal Nuclear Records From Philippine Research Agency \u2013 gbhackers.com\n\nThu, 27 Aug 2026 20:55:19", "url": "https://t.me/MalaysiaHacktivistz/15238"}, {"timestamp": "2026-09-05T14:43:54.594Z", "date_only": false, "value": "2026-09-05T14:43:54.594275Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3murpozdplu2a", "record": "CVE-2023-49105", "field": "creation_timestamp", "uuid": "d4d237a6-420b-4533-862c-0747f5aaf252", "content": "CVE-2023-49105 in ownCloud enables authenticated file access without a password via pre-signed WebDAV URLs when no signing key is configured, and it is actively exploited.\n", "url": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3murpozdplu2a"}, {"timestamp": "2026-09-05T14:44:38.071Z", "date_only": false, "value": "2026-09-05T14:44:38.071206Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3murpqcwlr522", "record": "CVE-2023-49105", "field": "creation_timestamp", "uuid": "a26a3ef0-e656-4cab-be7a-2cebe0f8df31", "content": "CVE-2023-49105 in ownCloud enables authenticated file access without a password via pre-signed WebDAV URLs when no signing key is configured, and it is actively exploited.\n", "url": "https://bsky.app/profile/privpros.bsky.social/post/3murpqcwlr522"}, {"timestamp": "2026-09-05T14:44:45.427Z", "date_only": false, "value": "2026-09-05T14:44:45.427202Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3murpqjghut2s", "record": "CVE-2023-49105", "field": "creation_timestamp", "uuid": "033ed601-939f-44e8-83a4-9507cbec6c84", "content": "CVE-2023-49105 in ownCloud enables authenticated file access without a password via pre-signed WebDAV URLs when no signing key is configured, and it is actively exploited.\n", "url": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3murpqjghut2s"}, {"timestamp": "2026-09-18T12:00:05.866Z", "date_only": false, "value": "2026-09-18T12:00:05.866352Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/VulnerabilityNews/44219", "record": "CVE-2023-49105", "field": "creation_timestamp", "uuid": "ea5c7bf6-5158-4666-8c34-aaf3e6f7c4ad", "content": "ownCloud Flaw Exploited to Steal Nuclear Records From Philippine Research Body\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a critical security flaw impacting ownCloud to its Known Exploited Vulnerabilities (KEV) catalog following reports that a Chinese-speaking threat actor weaponized the vulnerability to target a nuclear research body in the Philippines.\n\nThe vulnerability, tracked as CVE-2023-49105 (CVSS score: 9.8), is a case of\nhttps://thehackernews.com/2026/08/snowflake-github-actions-flaw-lets.html", "url": "https://t.me/VulnerabilityNews/44219"}, {"timestamp": "2026-09-19T00:00:35.802Z", "date_only": false, "value": "2026-09-19T00:00:35.802574Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/VulnerabilityNews/44219", "record": "CVE-2023-49105", "field": "creation_timestamp", "uuid": "69fef26f-dd4e-4056-9c38-b5ea11fce8ba", "content": "ownCloud Flaw Exploited to Steal Nuclear Records From Philippine Research Body\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a critical security flaw impacting ownCloud to its Known Exploited Vulnerabilities (KEV) catalog following reports that a Chinese-speaking threat actor weaponized the vulnerability to target a nuclear research body in the Philippines.\n\nThe vulnerability, tracked as CVE-2023-49105 (CVSS score: 9.8), is a case of\nhttps://thehackernews.com/2026/08/snowflake-github-actions-flaw-lets.html", "url": "https://t.me/VulnerabilityNews/44219"}, {"timestamp": "2026-09-25T13:50:13.901Z", "date_only": false, "value": "2026-09-25T13:50:13.901660Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mwdvzg2gkc2z", "record": "CVE-2023-49105", "field": "creation_timestamp", "uuid": "68d56085-0d6d-45c1-b489-3474258bd2dd", "content": "CISA Adds Three Known Exploited Vulnerabilities to Catalog\nRelease Date August 27, 2026\n\nCVE-2023-49105 ownCloud Improper Authentication Vulnerability\nCVE-2026-53362 Linux Kernel Unspecified Vulnerability\nCVE-2026-66384 JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory...", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mwdvzg2gkc2z"}, {"timestamp": "2026-09-25T22:00:21.268Z", "date_only": false, "value": "2026-09-25T22:00:21.268317Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mwerfrl5wk22", "record": "CVE-2023-49105", "field": "creation_timestamp", "uuid": "3124923a-26d0-45ba-b0b8-218d16ab1216", "content": "\u7c73\u5f53\u5c40\u3001\u60aa\u7528\u30ab\u30bf\u30ed\u30b0\u306bLinux\u8106\u5f31\u6027\u306a\u30693\u4ef6\u3092\u8ffd\u52a0\n\n\u7c73\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u73fe\u5730\u6642\u95932026\u5e748\u670827\u65e5\u3001\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u3066\u3044\u308b\u8106\u5f31\u60273\u4ef6\u306b\u3064\u3044\u3066\u6ce8\u610f\u559a\u8d77\u3092\u884c\u3063\u305f\u3002\n\n\u540c\u65e5\u3042\u3089\u305f\u306b3\u4ef6\u306e\u8106\u5f31\u6027\u3092\u300c\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u305f\u8106\u5f31\u6027\u30ab\u30bf\u30ed\u30b0\uff08KEV\uff09\u300d\u3078\u8ffd\u52a0\u3002\u7c73\u884c\u653f\u6a5f\u95a2\u306b\u5bfe\u3057\u3066\u5bfe\u5fdc\u3092\u6c42\u3081\u305f\u3002\u7279\u306b\u300cCVE-2026-53362\u300d\u300cCVE-2023-49105\u300d\u306b\u3064\u3044\u3066\u306f\u30013\u65e5\u5f8c\u306e8\u670830\u65e5\u304c\u5bfe\u5fdc\u671f\u9650\u3068\u3055\u308c\u308b\u3002\n\n\u300cCVE-2026-53362\u300d\u306f\u3001Linux\u30ab\u30fc\u30cd\u30eb\u306b\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u6a29\u9650\u6607\u683c\u306e\u8106\u5f31\u6027\u3002\u5225\u540d\u300cFrag Gap\u300d\u3068\u3082\u547c\u3070\u308c\u3066\u3044\u308b\u3002", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mwerfrl5wk22"}, {"timestamp": "2026-09-26T02:37:17.180Z", "date_only": false, "value": "2026-09-26T02:37:17.180129Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mwfauyuiv222", "record": "CVE-2023-49105", "field": "creation_timestamp", "uuid": "c13fa6f5-02eb-4ea6-a305-e3d6c43c4fda", "content": "\u7c73\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001ownCloud\u3001Linux\u30ab\u30fc\u30cd\u30eb\u3001\u304a\u3088\u3073JFrog Artifactory\u306e\u8106\u5f31\u6027\u3092\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3057\u305f\u3002\n\n\u7c73\u56fd\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001 \u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\uff08KEV\uff09\u30ab\u30bf\u30ed\u30b0 \u306b\u4ee5\u4e0b\u306e\u8106\u5f31\u6027 \u3092\u8ffd\u52a0\u3057\u307e\u3057\u305f\u3002\n\nCVE-2023-49105  ownCloud\u306e\u8a8d\u8a3c\u30a8\u30e9\u30fc\u306e\u8106\u5f31\u6027\nCVE-2026-53362  Linux\u30ab\u30fc\u30cd\u30eb\u306e\u7279\u5b9a\u3055\u308c\u3066\u3044\u306a\u3044\u8106\u5f31\u6027\nCVE-2026-66384  JFrog Artifactory\u306b\u304a\u3051\u308b\u5236\u9650\u4ed8\u304d\u30c7...", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mwfauyuiv222"}, {"timestamp": "2026-09-26T02:42:53.032Z", "date_only": false, "value": "2026-09-26T02:42:53.032282Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mwfb6wysg222", "record": "CVE-2023-49105", "field": "creation_timestamp", "uuid": "2d007ccf-1fd9-4339-afd7-1247831d517a", "content": "ownCloud\u306e\u8106\u5f31\u6027\u304c\u60aa\u7528\u3055\u308c\u3001\u30d5\u30a3\u30ea\u30d4\u30f3\u306e\u7814\u7a76\u6a5f\u95a2\u304b\u3089\u6838\u95a2\u9023\u8a18\u9332\u304c\u76d7\u307e\u308c\u308b\n\n\u7c73\u56fd\u306e\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u6728\u66dc\u65e5\u3001\u4e2d\u56fd\u8a9e\u3092\u8a71\u3059\u653b\u6483\u8005\u304c\u30d5\u30a3\u30ea\u30d4\u30f3\u306e\u539f\u5b50\u529b\u7814\u7a76\u6a5f\u95a2\u3092\u6a19\u7684\u306b\u3059\u308b\u305f\u3081\u306b\u8106\u5f31\u6027\u3092\u60aa\u7528\u3057\u305f\u3068\u306e\u5831\u544a\u3092\u53d7\u3051\u3001ownCloud\u306b\u5f71\u97ff\u3092\u4e0e\u3048\u308b\u91cd\u5927\u306a\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u6b20\u9665\u3092\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\uff08KEV\uff09\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3057\u305f\u3002\n\nCVE-2023-49105 \uff08CVSS\u30b9\u30b3\u30a2\uff1a9.8\uff09\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u3053\u306e\u8106\u5f31\u6027\u306f\u3001WebDAV API\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u306e\u4e8b\u4f8b\u3067\u3042\u308a\u3001\u88ab\u5bb3\u8005\u306e\u30e6\u30fc\u30b6\u30fc\u540d\u304c\u65e2\u77e5\u3067\u3001\u88ab\u5bb3\u8005\u304c\u7f72\u540d\u30ad\u30fc\u3092\u8a2d\u5b9a\u3057\u3066\u3044\u306a\u3044\uff08\u30c7\u30d5\u30a9\u30eb\u30c8\u8a2d\u5b9a\uff09\u5834...", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mwfb6wysg222"}]}