https://vulnerability.circl.lu/sightings/feed 2026-09-17T10:53:57.648258+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/a42a7905-b5fb-4da3-8c72-537625f7fc5e/export 2026-09-17T10:53:57.679456+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "a42a7905-b5fb-4da3-8c72-537625f7fc5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45811", "type": "exploited", "source": "https://t.me/true_secator/8610", "content": "\u041a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u0435 \u043c\u0430\u0441\u0441\u043e\u0432\u043e \u043f\u044b\u043b\u0435\u0441\u043e\u0441\u0438\u0442 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 Vite, \u0438\u043c\u0435\u044e\u0449\u0438\u0435 \u043f\u0440\u044f\u043c\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442, \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u044f \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0432\u044b\u043a\u0440\u0430\u0441\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 AWS \u0438 Azure.\n\n\u0412 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f CVE-2026-39364, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0444\u0430\u0439\u043b\u0430\u043c \u043f\u0440\u0438 \u0447\u0442\u0435\u043d\u0438\u0438 \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 Vite \u043e\u0442 7.1.0 \u0434\u043e 7.3.2, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u0432\u0435\u0442\u043a\u0435 8.x \u0434\u043e 8.0.5.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 7 \u0430\u043f\u0440\u0435\u043b\u044f \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u043c\u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0432 HTTP GET-\u0437\u0430\u043f\u0440\u043e\u0441\u0435, \u0447\u0442\u043e\u0431\u044b \u043e\u0431\u043e\u0439\u0442\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435 \u0438\u0437 \u043c\u0435\u0441\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0431\u044b\u0447\u043d\u043e \u0434\u043e\u043b\u0436\u043d\u044b \u0431\u044b\u0442\u044c \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b.\n\nF5 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0430\u0442\u0430\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 \u0441\u0432\u043e\u044e \u0441\u0435\u0442\u043a\u0443 \u0445\u0430\u043d\u0438\u043f\u043e\u0442\u043e\u0432, \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u0432 \u0431\u043e\u043b\u0435\u0435 800 \u0430\u0442\u0430\u043a \u0438 \u043f\u0440\u0438\u0431\u043b\u0438\u0437\u0438\u0442\u0435\u043b\u044c\u043d\u043e 32 000 \u043d\u0435\u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u0445 \u0441\u043e\u0431\u044b\u0442\u0438\u0439 \u0437\u0430 \u043c\u0435\u0441\u044f\u0446.\n\n\u041f\u043e\u0441\u043b\u0435 \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0445\u0430\u043a\u0435\u0440\u044b \u0444\u043e\u043a\u0443\u0441\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u043d\u0430 \u043f\u043e\u0438\u0441\u043a\u0435 \u0446\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432: .env, .env.production, .env.local \u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f, \u0444\u0430\u0439\u043b\u044b \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 AWS, \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0435 \u043a\u043e\u043f\u0438\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 AWS \u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043a\u0440\u0435\u0434\u044b \u0438 \u0442\u043e\u043a\u0435\u043d\u044b \u0434\u043e\u0441\u0442\u0443\u043f\u0430 Azure, \u0444\u0430\u0439\u043b\u044b \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 Terraform, \u0431\u0435\u0441\u0441\u0435\u0440\u0432\u0435\u0440\u043d\u0430\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f, /proc/self/environ, /proc/1/environ \u0438 /proc/self/cwd/.env, \u0430 \u0442\u0430\u043a\u0436\u0435 /etc/passwd.\n\nF5 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u0432 \u0445\u043e\u0434\u0435 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u0442\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u0438 \u0430\u043f\u0440\u043e\u0431\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b \u043e\u0431\u0445\u043e\u0434\u0430 \u0438 \u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0441 \u0434\u0432\u043e\u0439\u043d\u044b\u043c \u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c, \u043f\u043e-\u0432\u0438\u0434\u0438\u043c\u043e\u043c\u0443, \u0434\u043b\u044f \u0442\u043e\u0433\u043e, \u0447\u0442\u043e\u0431\u044b \u043e\u0431\u043e\u0439\u0442\u0438 \u043e\u0431\u0440\u0430\u0442\u043d\u044b\u0435 \u043f\u0440\u043e\u043a\u0441\u0438 \u0438\u043b\u0438 WAF.\n\n\u0411\u043e\u043b\u044c\u0448\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c\u043e\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0438\u0441\u0445\u043e\u0434\u0438\u043b\u0430 \u0438\u0437 \u0421\u0428\u0410, \u0411\u0435\u043b\u044c\u0433\u0438\u0438 \u0438 \u041d\u0438\u0434\u0435\u0440\u043b\u0430\u043d\u0434\u043e\u0432, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u044b IP Google Cloud \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0437\u0430\u0449\u0438\u0442\u044b.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0435 IP \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432 Vite: CVE-2025-30208, CVE-2025-31125 (\u043f\u043e\u043c\u0435\u0447\u0435\u043d\u044b \u043a\u0430\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435) \u0438 CVE-2024-45811.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e Vite \u043e\u0431\u044b\u0447\u043d\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u043a localhost, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 F5 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0447\u0430\u0441\u0442\u043e \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u043a \u043d\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u043e\u043d\u043b\u0430\u0439\u043d, \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u044f \u0444\u043b\u0430\u0433 --host, \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044f server.host \u0438\u043b\u0438 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u043d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u044f \u0441\u043e\u043f\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u0440\u0442\u043e\u0432 Docker.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u044b Vite \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0440\u0442 5173 \u0438 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 (34.14.15[.]105, 34.16.200[.]129 \u0438 34.11.196[.]206), \u043e\u0442\u043a\u043b\u043e\u043d\u044f\u0442\u044c \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b /@fs/ \u0438 \u0438\u0437\u0431\u0435\u0433\u0430\u0442\u044c \u0434\u043e\u0432\u0435\u0440\u0438\u044f \u043a \u0441\u0442\u0440\u043e\u043a\u0430\u043c User-Agent \u043f\u043e\u0438\u0441\u043a\u043e\u0432\u044b\u0445 \u0440\u043e\u0431\u043e\u0442\u043e\u0432.\n\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0435\u0441\u043b\u0438 \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b Vite \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0440\u043e\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u0441\u0435 \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u0435\u0441\u044f \u0432 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u0445 \u0434\u043e\u0441\u044f\u0433\u0430\u0435\u043c\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.", "creation_timestamp": "2026-09-16T00:00:31.618304Z"} 2026-09-16T00:00:31.618304+00:00 https://vulnerability.circl.lu/sighting/150b87da-a415-4f0f-96a8-561cb040daa9/export 2026-09-17T10:53:57.682327+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "150b87da-a415-4f0f-96a8-561cb040daa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45811", "type": "seen", "source": "https://t.me/true_secator/8610", "content": "\u041a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u0435 \u043c\u0430\u0441\u0441\u043e\u0432\u043e \u043f\u044b\u043b\u0435\u0441\u043e\u0441\u0438\u0442 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 Vite, \u0438\u043c\u0435\u044e\u0449\u0438\u0435 \u043f\u0440\u044f\u043c\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442, \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u044f \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0432\u044b\u043a\u0440\u0430\u0441\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 AWS \u0438 Azure.\n\n\u0412 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f CVE-2026-39364, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0444\u0430\u0439\u043b\u0430\u043c \u043f\u0440\u0438 \u0447\u0442\u0435\u043d\u0438\u0438 \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 Vite \u043e\u0442 7.1.0 \u0434\u043e 7.3.2, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u0432\u0435\u0442\u043a\u0435 8.x \u0434\u043e 8.0.5.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 7 \u0430\u043f\u0440\u0435\u043b\u044f \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u043c\u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0432 HTTP GET-\u0437\u0430\u043f\u0440\u043e\u0441\u0435, \u0447\u0442\u043e\u0431\u044b \u043e\u0431\u043e\u0439\u0442\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435 \u0438\u0437 \u043c\u0435\u0441\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0431\u044b\u0447\u043d\u043e \u0434\u043e\u043b\u0436\u043d\u044b \u0431\u044b\u0442\u044c \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b.\n\nF5 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0430\u0442\u0430\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 \u0441\u0432\u043e\u044e \u0441\u0435\u0442\u043a\u0443 \u0445\u0430\u043d\u0438\u043f\u043e\u0442\u043e\u0432, \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u0432 \u0431\u043e\u043b\u0435\u0435 800 \u0430\u0442\u0430\u043a \u0438 \u043f\u0440\u0438\u0431\u043b\u0438\u0437\u0438\u0442\u0435\u043b\u044c\u043d\u043e 32 000 \u043d\u0435\u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u0445 \u0441\u043e\u0431\u044b\u0442\u0438\u0439 \u0437\u0430 \u043c\u0435\u0441\u044f\u0446.\n\n\u041f\u043e\u0441\u043b\u0435 \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0445\u0430\u043a\u0435\u0440\u044b \u0444\u043e\u043a\u0443\u0441\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u043d\u0430 \u043f\u043e\u0438\u0441\u043a\u0435 \u0446\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432: .env, .env.production, .env.local \u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f, \u0444\u0430\u0439\u043b\u044b \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 AWS, \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0435 \u043a\u043e\u043f\u0438\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 AWS \u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043a\u0440\u0435\u0434\u044b \u0438 \u0442\u043e\u043a\u0435\u043d\u044b \u0434\u043e\u0441\u0442\u0443\u043f\u0430 Azure, \u0444\u0430\u0439\u043b\u044b \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 Terraform, \u0431\u0435\u0441\u0441\u0435\u0440\u0432\u0435\u0440\u043d\u0430\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f, /proc/self/environ, /proc/1/environ \u0438 /proc/self/cwd/.env, \u0430 \u0442\u0430\u043a\u0436\u0435 /etc/passwd.\n\nF5 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u0432 \u0445\u043e\u0434\u0435 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u0442\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u0438 \u0430\u043f\u0440\u043e\u0431\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b \u043e\u0431\u0445\u043e\u0434\u0430 \u0438 \u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0441 \u0434\u0432\u043e\u0439\u043d\u044b\u043c \u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c, \u043f\u043e-\u0432\u0438\u0434\u0438\u043c\u043e\u043c\u0443, \u0434\u043b\u044f \u0442\u043e\u0433\u043e, \u0447\u0442\u043e\u0431\u044b \u043e\u0431\u043e\u0439\u0442\u0438 \u043e\u0431\u0440\u0430\u0442\u043d\u044b\u0435 \u043f\u0440\u043e\u043a\u0441\u0438 \u0438\u043b\u0438 WAF.\n\n\u0411\u043e\u043b\u044c\u0448\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c\u043e\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0438\u0441\u0445\u043e\u0434\u0438\u043b\u0430 \u0438\u0437 \u0421\u0428\u0410, \u0411\u0435\u043b\u044c\u0433\u0438\u0438 \u0438 \u041d\u0438\u0434\u0435\u0440\u043b\u0430\u043d\u0434\u043e\u0432, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u044b IP Google Cloud \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0437\u0430\u0449\u0438\u0442\u044b.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0435 IP \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432 Vite: CVE-2025-30208, CVE-2025-31125 (\u043f\u043e\u043c\u0435\u0447\u0435\u043d\u044b \u043a\u0430\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435) \u0438 CVE-2024-45811.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e Vite \u043e\u0431\u044b\u0447\u043d\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u043a localhost, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 F5 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0447\u0430\u0441\u0442\u043e \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u043a \u043d\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u043e\u043d\u043b\u0430\u0439\u043d, \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u044f \u0444\u043b\u0430\u0433 --host, \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044f server.host \u0438\u043b\u0438 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u043d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u044f \u0441\u043e\u043f\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u0440\u0442\u043e\u0432 Docker.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u044b Vite \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0440\u0442 5173 \u0438 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 (34.14.15[.]105, 34.16.200[.]129 \u0438 34.11.196[.]206), \u043e\u0442\u043a\u043b\u043e\u043d\u044f\u0442\u044c \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b /@fs/ \u0438 \u0438\u0437\u0431\u0435\u0433\u0430\u0442\u044c \u0434\u043e\u0432\u0435\u0440\u0438\u044f \u043a \u0441\u0442\u0440\u043e\u043a\u0430\u043c User-Agent \u043f\u043e\u0438\u0441\u043a\u043e\u0432\u044b\u0445 \u0440\u043e\u0431\u043e\u0442\u043e\u0432.\n\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0435\u0441\u043b\u0438 \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b Vite \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0440\u043e\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u0441\u0435 \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u0435\u0441\u044f \u0432 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u0445 \u0434\u043e\u0441\u044f\u0433\u0430\u0435\u043c\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.", "creation_timestamp": "2026-09-15T13:00:05.248237Z"} 2026-09-15T13:00:05.248237+00:00 https://vulnerability.circl.lu/sighting/2c073d3f-fc07-472c-8168-3f37454d557b/export 2026-09-17T10:53:57.682513+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "2c073d3f-fc07-472c-8168-3f37454d557b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4577", "type": "published-proof-of-concept", "source": "Telegram/TV73HEExDIFDvdje_pA8QW1z6zzomtd2PpUEZOi09POGX5Q", "content": "", "creation_timestamp": "2026-09-15T00:00:24.143965Z"} 2026-09-15T00:00:24.143965+00:00 https://vulnerability.circl.lu/sighting/ecbb9b37-0396-4637-8e97-c3c4b069b74e/export 2026-09-17T10:53:57.682624+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ecbb9b37-0396-4637-8e97-c3c4b069b74e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4577", "type": "seen", "source": "Telegram/TV73HEExDIFDvdje_pA8QW1z6zzomtd2PpUEZOi09POGX5Q", "content": "", "creation_timestamp": "2026-09-14T03:00:09.708777Z"} 2026-09-14T03:00:09.708777+00:00 https://vulnerability.circl.lu/sighting/9eb12d58-8e6f-4b2c-91c3-d15ba882acf6/export 2026-09-17T10:53:57.682722+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "9eb12d58-8e6f-4b2c-91c3-d15ba882acf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45844", "type": "published-proof-of-concept", "source": "https://t.me/cissp/7834", "content": "#Analytics\n#ThreatResearch\nAn analytical review of the main cybersecurity events for the 2025\n\n\u0632\u0646\u062f\u06af\u06cc \u062f\u06cc\u0648\u0627\u0646\u0647\u200c\u0648\u0627\u0631!\n\u0647\u0627\u0644\u0648\u0648\u06cc\u0646 \u06a9\u0647 \u0646\u0632\u062f\u06cc\u06a9 \u0648 \u200c\u0631\u062f \u0645\u06cc\u200c\u0634\u0648\u062f\u060c \u062f\u0646\u06cc\u0627 \u0627\u0646\u06af\u0627\u0631 \u0686\u0647\u0631\u0647\u200c\u06cc \u0648\u0627\u0642\u0639\u06cc\u200c\u062a\u0631\u0634 \u0631\u0627 \u0646\u0634\u0627\u0646 \u0645\u06cc\u200c\u062f\u0647\u062f\u2026 \u0634\u062e\u0635\u06cc\u062a\u200c\u0647\u0627 \u0647\u0631 \u0631\u0648\u0632 \u0639\u062c\u06cc\u0628\u200c\u062a\u0631\u061b \u0622\u062f\u0645\u200c\u0647\u0627 \u0647\u0631 \u0644\u062d\u0638\u0647 \u0646\u0627\u0634\u0646\u0627\u062e\u062a\u0647\u200c\u062a\u0631.\n\u062f\u06cc\u0648\u0627\u0646\u06af\u06cc\u061f \u06cc\u0627 \u0648\u0627\u0642\u0639\u06cc\u062a\u06cc \u06a9\u0647 \u062c\u0631\u0623\u062a \u062f\u06cc\u062f\u0646\u0634 \u0631\u0627 \u0646\u062f\u0627\u0631\u06cc\u0645\u061f \n\n\u0639\u0631\u0635\u0647\u200c \u0639\u0631\u0636\u0647\ud83d\ude42 \u0646\u0627\u062f\u0627\u0646\u06cc \u0648 \u062a\u0648\u0647\u0645 \u062f\u0627\u0646\u0627\u06cc\u06cc \u0627\u0633\u062a\n\u0647\u0631 \u0631\u0648\u0632 \u0627\u06cc\u0646 \u062f\u0627\u0633\u062a\u0627\u0646\u2026\u062f\u0627\u0631\u06a9 \u0648 \u0639\u0645\u06cc\u0642 \u200c\u062a\u0631\n\u0627\u0645\u0627 \u0647\u0645\u0627\u0647\u0646\u06af \u0628\u0627 \u062a\u0646\u067e\u0648\u0634 \u0645\u062f \u0631\u0648\u0632! \u062a\u0645 \u062a\u0645 \u0639\u0648\u0627\u0645!!!\n\u0639\u062c\u06cc\u0628\u200c\u0628\u0648\u062f\u0646 \u062a\u0631\u0633\u0646\u0627\u06a9 \u0646\u06cc\u0633\u062a\u061b\n\u062a\u0631\u0633\u0646\u0627\u06a9 \u0622\u0646 \u0627\u0633\u062a \u06a9\u0647 \u0647\u0631\u06af\u0632 \u2026 !\n\n\u0648 \u0627\u06af\u0631 \u0634\u0645\u0633 \u062a\u0628\u0631\u06cc\u0632\u06cc \u0628\u0627\u062f\u0647\u200c\u0627\u06cc \u0628\u0631 \u062c\u0627\u0645\u0645 \u0646\u0647\u062f\u060c\n\u0645\u0633\u062a \u06a9\u0647 \u0634\u0648\u0645\u2026\n\u0628\u06cc\u200c\u067e\u0631\u0648\u0627\u060c \u0633\u062a\u0648\u0646 \u06a9\u06cc\u0648\u0627\u0646 \u0631\u0627 \u2026! \n\n\u0628\u06af\u0630\u0631\u06cc\u0645\u061b \n\n1.Operation Zero Disco: \nAttackers Exploit Cisco SNMP Vulnerability to Deploy Rootkits, Cisco 9400, 9300, and legacy 3750G series devices are affected. A detailed analysis of the vulnerability (CVE-2017-3881) and PoC were published on our channel in 2018. Second exploited vulnerability (CVE-2025-20352) - Stack-based BoF. This vulnerability affects all versions of SNMP. Restrict SNMP access via ACLs and CoPP to management hosts only, switch to using only SNMPv3 with authPriv mode, stop using standard communities in v1/v2c, update IOS and IOS XE to builds with the fix, and configure monitoring of sysDescr sysUpTime and activity on port UDP/161. Disable telnet..\nCVE-2025-20352 SNMP Exposure Check (onesixtyone + parser).\n\n2.Framework BIOS Backdoor:\nThe mm command impleneted in Framework BIOS shells can be used to compromise a device pre-boot (BombShell). The attack surface \u201cbelow\u201d the operating system, encompassing firmware, bootloaders, and hardware components, presents a ripe target for threat actors. Implement proper configuration management and maintain up-to-date revocation lists. Follow the principle \"signed doesn't mean safe\"... .\n\n3 Fewer Weights, More Problems: \nA Practical Attack on LLM Pruning, Modern LLM pruning methods can be maliciously exploited... The most read post of the week on our channel.\n\n4. F5 BIG-IP Compromise:\nThere was no publication on this topic on our channel, since we have repeatedly drawn the attention of readers to the existing VERY serious problems with this equipment, publishing detailed PoC exploits on the channel in 2024 (CVE-2024-45844) and 2025 (CVE-2025-20029).\n\n\u2014 CISO as a Service \u2014\n| Strategic Cyber Defense & GRC\nResilient Through Knowledge\n2025.11.04\n\nhttps://www.linkedin.com/posts/alirezaghahrood_analytics-threatresearch-activity-7391560156158971904-XBpT", "creation_timestamp": "2026-09-10T00:00:55.541838Z"} 2026-09-10T00:00:55.541838+00:00 https://vulnerability.circl.lu/sighting/35609f30-28ba-44e9-82dd-6878455f146a/export 2026-09-17T10:53:57.682857+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "35609f30-28ba-44e9-82dd-6878455f146a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45844", "type": "published-proof-of-concept", "source": "https://t.me/cissp/7834", "content": "#Analytics\n#ThreatResearch\nAn analytical review of the main cybersecurity events for the 2025\n\n\u0632\u0646\u062f\u06af\u06cc \u062f\u06cc\u0648\u0627\u0646\u0647\u200c\u0648\u0627\u0631!\n\u0647\u0627\u0644\u0648\u0648\u06cc\u0646 \u06a9\u0647 \u0646\u0632\u062f\u06cc\u06a9 \u0648 \u200c\u0631\u062f \u0645\u06cc\u200c\u0634\u0648\u062f\u060c \u062f\u0646\u06cc\u0627 \u0627\u0646\u06af\u0627\u0631 \u0686\u0647\u0631\u0647\u200c\u06cc \u0648\u0627\u0642\u0639\u06cc\u200c\u062a\u0631\u0634 \u0631\u0627 \u0646\u0634\u0627\u0646 \u0645\u06cc\u200c\u062f\u0647\u062f\u2026 \u0634\u062e\u0635\u06cc\u062a\u200c\u0647\u0627 \u0647\u0631 \u0631\u0648\u0632 \u0639\u062c\u06cc\u0628\u200c\u062a\u0631\u061b \u0622\u062f\u0645\u200c\u0647\u0627 \u0647\u0631 \u0644\u062d\u0638\u0647 \u0646\u0627\u0634\u0646\u0627\u062e\u062a\u0647\u200c\u062a\u0631.\n\u062f\u06cc\u0648\u0627\u0646\u06af\u06cc\u061f \u06cc\u0627 \u0648\u0627\u0642\u0639\u06cc\u062a\u06cc \u06a9\u0647 \u062c\u0631\u0623\u062a \u062f\u06cc\u062f\u0646\u0634 \u0631\u0627 \u0646\u062f\u0627\u0631\u06cc\u0645\u061f \n\n\u0639\u0631\u0635\u0647\u200c \u0639\u0631\u0636\u0647\ud83d\ude42 \u0646\u0627\u062f\u0627\u0646\u06cc \u0648 \u062a\u0648\u0647\u0645 \u062f\u0627\u0646\u0627\u06cc\u06cc \u0627\u0633\u062a\n\u0647\u0631 \u0631\u0648\u0632 \u0627\u06cc\u0646 \u062f\u0627\u0633\u062a\u0627\u0646\u2026\u062f\u0627\u0631\u06a9 \u0648 \u0639\u0645\u06cc\u0642 \u200c\u062a\u0631\n\u0627\u0645\u0627 \u0647\u0645\u0627\u0647\u0646\u06af \u0628\u0627 \u062a\u0646\u067e\u0648\u0634 \u0645\u062f \u0631\u0648\u0632! \u062a\u0645 \u062a\u0645 \u0639\u0648\u0627\u0645!!!\n\u0639\u062c\u06cc\u0628\u200c\u0628\u0648\u062f\u0646 \u062a\u0631\u0633\u0646\u0627\u06a9 \u0646\u06cc\u0633\u062a\u061b\n\u062a\u0631\u0633\u0646\u0627\u06a9 \u0622\u0646 \u0627\u0633\u062a \u06a9\u0647 \u0647\u0631\u06af\u0632 \u2026 !\n\n\u0648 \u0627\u06af\u0631 \u0634\u0645\u0633 \u062a\u0628\u0631\u06cc\u0632\u06cc \u0628\u0627\u062f\u0647\u200c\u0627\u06cc \u0628\u0631 \u062c\u0627\u0645\u0645 \u0646\u0647\u062f\u060c\n\u0645\u0633\u062a \u06a9\u0647 \u0634\u0648\u0645\u2026\n\u0628\u06cc\u200c\u067e\u0631\u0648\u0627\u060c \u0633\u062a\u0648\u0646 \u06a9\u06cc\u0648\u0627\u0646 \u0631\u0627 \u2026! \n\n\u0628\u06af\u0630\u0631\u06cc\u0645\u061b \n\n1.Operation Zero Disco: \nAttackers Exploit Cisco SNMP Vulnerability to Deploy Rootkits, Cisco 9400, 9300, and legacy 3750G series devices are affected. A detailed analysis of the vulnerability (CVE-2017-3881) and PoC were published on our channel in 2018. Second exploited vulnerability (CVE-2025-20352) - Stack-based BoF. This vulnerability affects all versions of SNMP. Restrict SNMP access via ACLs and CoPP to management hosts only, switch to using only SNMPv3 with authPriv mode, stop using standard communities in v1/v2c, update IOS and IOS XE to builds with the fix, and configure monitoring of sysDescr sysUpTime and activity on port UDP/161. Disable telnet..\nCVE-2025-20352 SNMP Exposure Check (onesixtyone + parser).\n\n2.Framework BIOS Backdoor:\nThe mm command impleneted in Framework BIOS shells can be used to compromise a device pre-boot (BombShell). The attack surface \u201cbelow\u201d the operating system, encompassing firmware, bootloaders, and hardware components, presents a ripe target for threat actors. Implement proper configuration management and maintain up-to-date revocation lists. Follow the principle \"signed doesn't mean safe\"... .\n\n3 Fewer Weights, More Problems: \nA Practical Attack on LLM Pruning, Modern LLM pruning methods can be maliciously exploited... The most read post of the week on our channel.\n\n4. F5 BIG-IP Compromise:\nThere was no publication on this topic on our channel, since we have repeatedly drawn the attention of readers to the existing VERY serious problems with this equipment, publishing detailed PoC exploits on the channel in 2024 (CVE-2024-45844) and 2025 (CVE-2025-20029).\n\n\u2014 CISO as a Service \u2014\n| Strategic Cyber Defense & GRC\nResilient Through Knowledge\n2025.11.04\n\nhttps://www.linkedin.com/posts/alirezaghahrood_analytics-threatresearch-activity-7391560156158971904-XBpT", "creation_timestamp": "2026-09-09T03:00:06.617412Z"} 2026-09-09T03:00:06.617412+00:00 https://vulnerability.circl.lu/sighting/d74347c4-e330-4909-9b1e-55e9e0c79d58/export 2026-09-17T10:53:57.682975+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "d74347c4-e330-4909-9b1e-55e9e0c79d58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4577", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-07)", "content": "", "creation_timestamp": "2026-09-08T10:15:05.032332Z"} 2026-09-08T10:15:05.032332+00:00 https://vulnerability.circl.lu/sighting/9f8d5639-726d-477d-a3a7-aae26dc430af/export 2026-09-17T10:53:57.683069+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "9f8d5639-726d-477d-a3a7-aae26dc430af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4548", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/scada/diaenergie_sqli.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"Michael Heinzl\", \"Tenable\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"SQL injection vulnerability in DIAEnergie <= v1.10 from Delta Electronics.\\n This vulnerability can be exploited by an unauthenticated remote attacker to gain arbitrary code execution through a SQL injection vulnerability in the CEBC service. The commands will get executed in the context of NT AUTHORITY\\\\SYSTEM.\", \"disclosure_date\": \"2024-05-06\", \"fullname\": \"exploit/windows/scada/diaenergie_sqli\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:58 +0000\", \"name\": \"DIAEnergie SQL Injection (CVE-2024-4548)\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/windows/scada/diaenergie_sqli.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"windows/scada/diaenergie_sqli\", \"references\": [\"URL-https://www.tenable.com/security/research/tra-2024-13\", \"CVE-2024-4548\"], \"rport\": 928, \"session_types\": false, \"targets\": [\"Windows_Fetch\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:28.501781Z"} 2026-09-08T06:52:28.501781+00:00 https://vulnerability.circl.lu/sighting/2ceccf54-fc0f-47b3-bc02-44551e1a9e16/export 2026-09-17T10:53:57.683179+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "2ceccf54-fc0f-47b3-bc02-44551e1a9e16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4577", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/php_cgi_arg_injection_rce_cve_2024_4577.rb", "content": "{\"aliases\": [], \"arch\": \"php, cmd\", \"author\": [\"Orange Tsai\", \"watchTowr\", \"sfewer-r7\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a PHP CGI argument injection vulnerability affecting PHP in certain configurations\\n on a Windows target. A vulnerable configuration is locale dependant (such as Chinese or Japanese), such that\\n the Unicode best-fit conversion scheme will unexpectedly convert a soft hyphen (0xAD) into a dash (0x2D)\\n character. Additionally a target web server must be configured to run PHP under CGI mode, or directly expose\\n the PHP binary. This issue has been fixed in PHP 8.3.8 (for the 8.3.x branch), 8.2.20 (for the 8.2.x branch),\\n and 8.1.29 (for the 8.1.x branch). PHP 8.0.x and below are end of life and have note received patches.\\n\\n XAMPP is vulnerable in a default configuration, and we can target the /php-cgi/php-cgi.exe endpoint. To target\\n an explicit .php endpoint (e.g. /index.php), the server must be configured to run PHP scripts in CGI mode.\", \"disclosure_date\": \"2024-06-06\", \"fullname\": \"exploit/windows/http/php_cgi_arg_injection_rce_cve_2024_4577\", \"is_install_path\": true, \"mod_time\": \"2026-06-02 10:32:30 +0000\", \"name\": \"PHP CGI Argument Injection Remote Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/windows/http/php_cgi_arg_injection_rce_cve_2024_4577.rb\", \"platform\": \"PHP,Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"windows/http/php_cgi_arg_injection_rce_cve_2024_4577\", \"references\": [\"CVE-2024-4577\", \"EDB-52331\", \"URL-https://devco.re/blog/2024/06/06/security-alert-cve-2024-4577-php-cgi-argument-injection-vulnerability-en/\", \"URL-https://labs.watchtowr.com/no-way-php-strikes-again-cve-2024-4577/\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Windows PHP\", \"Windows Command\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:56.972430Z"} 2026-09-08T06:51:56.972430+00:00 https://vulnerability.circl.lu/sighting/958831b5-82fd-4dc3-b31c-dce0c30d3488/export 2026-09-17T10:53:57.683297+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "958831b5-82fd-4dc3-b31c-dce0c30d3488", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45257", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/byob_unauth_rce.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"chebuya\", \"Valentin Lobstein\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits two vulnerabilities in the BYOB (Build Your Own Botnet) web GUI:\\n 1. CVE-2024-45256: Unauthenticated arbitrary file write that allows modification of the SQLite database, adding a new admin user.\\n 2. CVE-2024-45257: Authenticated command injection in the payload generation page.\\n\\n These vulnerabilities remain unpatched.\", \"disclosure_date\": \"2024-08-15\", \"fullname\": \"exploit/unix/webapp/byob_unauth_rce\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:59:12 +0000\", \"name\": \"BYOB Unauthenticated RCE via Arbitrary File Write and Command Injection (CVE-2024-45256, CVE-2024-45257)\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/unix/webapp/byob_unauth_rce.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"unix/webapp/byob_unauth_rce\", \"references\": [\"CVE-2024-45256\", \"CVE-2024-45257\", \"URL-https://blog.chebuya.com/posts/unauthenticated-remote-command-execution-on-byob/\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Unix/Linux Command Shell\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:40.813931Z"} 2026-09-08T06:50:40.813931+00:00